Install .Net 3.5 on Windows 2012 R2 server

To install .Net 3.5 on Windows 2012 R2 server you need to mount Windows 2012 R2 dvd and point installation on "dvd"\sorce\sxs directory - in Powershell it will be like this:

 

Add-WindowsFeature NET-Framework-Core -Source d:\sources\sxs

The WS-Management Service cannot process the request

Exchange 2010 sp2 try to run PowerSheel:
fix:
Recycle MSExchangePowerShellAppPool in IIS.

Windows 7 Folder Redirection rename the Home folder in "My Documents

PowerShell script to fix the problem:
$myLocations="\\share1\allusers","\\share2\users","\\pshare3\AdminUsers"

foreach ($loc in $myLocations)
{

    set-location $loc
    $items=Get-ChildItem
    foreach ($item in $items)
    {
      if ($item.getType().name -like "DirectoryInfo")
      {
          cd $item.name
          if (test-path desktop.ini) {del .\desktop.ini -force}
          cd ..
      }
    }
}

Domain Admins Group permissions

I always puzzle why with Domain Admins account rights you have additional dialog box if you access files or directories which do not have explicit permissions for your login account. Finally, I spend some time to research the problem and it is UAC who does it. So if you annoyed by this you need to set UAC down low like in the picture.

Boot Time and FSMO info

systeminfo| find "System Boot Time"
netdom query fsmo

Cannot install SQL2008

Then I run install it give me in Setup Support Rules: "Restart Computer" - Status is not passed. Solution:

Clearing (but you can delete the key) the value in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations fixed the issue.

(no reboot)

Copy NTFS security info.

To copy NTFS information from a volume on Windows 2008 sp2:

robocopy \\fs01\ustore c:\temp\ustoresec /secfix /copy:SOT /E

I will copy the directory structure with security information for folders - no individual files.

S - security
O - ownership
T - timestamp
E - copy all subdirectories including empty

Windows 7 God mode

On Windows 7 computer create a new folder and name it as : GodMode.{ED7BA470-8E54-465E-825C-99712043E01C} .

You will have all configuration and management tools of the OS.

Windows icons

I always forgot:

The icons located in \system32\shell32.dll and imageres.dll

DCDiag results

configuration: 3 DC - 2003, 2008, 2008

run dcdiag: test services did not pass on 2003 DC

message: it should be WIN32_SHARE_PROCESS not WIN32_OWN_PROCESS

found fix: http://social.technet.microsoft.com/Forums/en/winserverDS/thread/aaee7dec-d1a9-4f8a-a1c1-ee24ff08f074

Go to registry :- HKLM-system-CCS-Services-RpcSs . Select RPCSS .

look at the right side you will see a Binary value as "Type" its value is set to 10 . 10 is for WIN32_OWN_PROCESS

If you will change it to 20 in decimal it will be WIN32_SHARE_PROCESS .

Did it on 2003 DC.

GPO processing 1006 1030 errors on terminal server.

issue: Some users accounts randomly stop process GPO.
solution:

1. Make the user account memeber of "domain admin" group.
2. Login to TS with the account.
3. From CMD run "rundll32.exe keymgr.dll,KRShowKeyMgr" command.
4. Delete everything from "Stored User Names and Passwordds" GUI.
5. Remove the user from "domain admin" group.

Microsoft FTP 7.5

The task was to create a FTP service for non-active directory users:

1. Users have rights for all directories from the root down.
2. Users have access only isolated directories under root.

Solution:

1. Use windows 2008 sp 2 VM on Hyper-V
2. IIS 7.0
3. FTP 7.5
4. IIS Manager Authentication
5. FTP Virtual Host Names
6. FTP User Isolation - "User Name directory (disable global virtual directories)

Notes:

1. Do not forget to change security for "Network services" account (ref.3)
2. Created 3 FTP sites - one for global access (ref.5) needed to enable IE connection, second for non separated FTP and third for isolated users.
3. In IE7 and 8 you can use "Open FTP site in Windows Explorer" option under "Page", but you will need authenticate second time.
4. To authenticate you need to type user name as pointed in (ref.4) - "ftpheader.yourdomain.com|username" or with (ref.4) "ftpheader.yourdomain.com\username". The authentiacation will take place after connection to the global FTP site (ref.5).
5. Regular FTP clients can connect directly using "Virtual host names".

FTP certificate should be chosen on IIS 7.0 server level:

references:

1. http://learn.iis.net/page.aspx/310/what-is-new-for-microsoft-and-ftp-75/
2. http://learn.iis.net/page.aspx/305/configuring-ftp-75-user-isolation/
3. http://learn.iis.net/page.aspx/321/configure-ftp-with-iis-70-manager-authentication/
4. http://blogs.iis.net/jaroslad/archive/2009/04/16/addressing-the-separator-problem-for-virtual-ftp-sites-ftp-7-5.aspx
5. http://blogs.msdn.com/robert_mcmurray/archive/2008/12/17/ftp-clients-part-3-creating-a-global-listener-ftp-site.aspx
6. http://learn.iis.net/page.aspx/320/using-ftp-virtual-host-names/

DFSR on windows 2003 R2 servers.

1. Start DFS management console on any Windows 2003 R2 server.
2. Configure Replication (membership, connections and replicated folders). If you already have a previously shared folder what you want to replicate on other server - do not copy files, just replicate.
3. After the replication is done configure a namespace.
4. Publish the replicated folders to the namespace, and configure login script to access the published share.
5. It is perfectly normal to have a staging file (..\..\DfsrPrivate\Staging) containing data "If the size of a staging folder is below 90 percent of configured capacity (the high watermark), then staged files are kept in the folder and can be used in case new members are added" - from http://technet.microsoft.com/en-us/library/cc782648(WS.10).aspx

NTP servers pool

Very convinent way to configure NTP sources, servers:

0.pool.ntp.org

1.pool.ntp.org

2.pool.ntp.org

Command line: net time /setsntp:"0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org"

Do not forget to restart "windows time" service.

BB 8310 Status

To find BB status including free memory do: alt+shift+H

Broken by updates.

Symptoms:

You can not access IIS web sites locally, search indexing does not work, any service what should authenticate to IIS with NTLM does not work.

Solution: 

From http://support.microsoft.com/kb/896861

I fixed it by this method on two MOSS 2007 servers -

"Method 2: Disable the loopback check

Follow these steps:

1. Click Start, click Run, type regedit, and then click OK.
2. In Registry Editor, locate and then click the following registry key:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
3. Right-click Lsa, point to New, and then click DWORD Value.
4. Type DisableLoopbackCheck, and then press ENTER.
5. Right-click DisableLoopbackCheck, and then click Modify.
6. In the Value data box, type 1, and then click OK.
7. Quit Registry Editor, and then restart your computer. "

Essential VI Commands

Command Action:

vi Starts the Vi editor
vi <filename> Starts Vi and opens the given file for editing
:q! Exits the Vi editor without saving changes (quit!)
:wq! Exits the Vi editor and saves changes (write and quit!)
:set nu Turns on line numbering
esc Exits text insert mode
i Enters text insert mode
Arrow keys Navigates the cursor
Backspace key Deletes previous character
Delete Deletes selected character

Can not browse to DELL IT Assistant

After upgrading Java 6 to update 11, can not open the "IT Assistant" site. Uninstall update and everything will be fine. I checked with update 5 and 7. But you need to reinstall latest update what left, you can do it from "Add/remove programs".

Sysprep on Windows 2008

Then use sysprep on Windows 2008, use Generalize option, if you want to change SID. Sysprep you can find under system32 directory.

Usefull command line utilities

I decided to put some command line utilities what I use and always forgot here. I will update the list:
Terminal services
works on Vista
qwinsta - query terminal services connection
rwinsta - logoff terminal services connection or any local session

General:
Works on Vista and Windows 2008
query { PROCESS SESSION TERMSERVER USER }

Network:
netstat - Displays protocol statistics and current TCP/IP network connections

* all utilities have help just add /? after the utility name or Google it.