Hi ,
I reviewed system log on Windows Server 2008R2 , and at a certain time ( say 7:00:00 AM) there is near 1000 logon success in Security audit logs . all of them are from Anonymous User from NT Authority . the server is an application server , is it a possible attack ? tnx .
I am starting to get into the over all health of the of all servers in the environment. I know that there are programs out there that you can pay for and they cost a lot. I am looking at 200 servers and I need to get the overall health of them on a day-by-day basis. One stop shop!
Questions:
Is there a file on the server OS that holds the information that states the usage and the sizes\speeds? I.E. .info file
Is there a program from Dell or HP that I can use to see all the servers and not just one at a time?
Example:
I know the VMware has a program that you are able to see all the VM machines and the status of all of them in one console. That is what I am trying to get for the server environment. Yes I know that there are products out there there do it but I am trying to make a home grown app, kind of, cheap!
I know that there is someone out there with the same issue and would like to figure out a way to get this done.
I have SQL coders and report writers here and can pull them in if needed.
Hello,
We are currently running KMS on a Windows 2008 R2 server. I know that to allow access to 2012 Server/Windows 8, the system requires several patches and hotfixes. I have done that portion, however, I believe that I need to obtain a 2012 key for this. Can someone tell me 1. how to I proceed to get the 2012 key and 2. with the new key, will it continue to validate currently existing licenses?
Thanks for any information on this.
We have several web servers that regularly lose their snmp service connection although the service says "started". We have to restart the service to regain connection and snmp services. As I look at the event logs the only snmp entries I see regularly indicate: snmp service can not resolve manager name.
When I look at the snmp security, I do see a manager entry that no longer exists. It is listed under "accept SNMP packets from these hosts". Will this cause the snmp service to continually time out as it is searching for this host?
From MVC3 Application, There is mail functionality it works well but if in TO address if I am including a recipient mail of external domain mail is sent but taking long time. and If I am using same mail id with an another mail id it works immediately.
Could you please advice the resolution?
Bhanu Prakash K
I am getting the following error on a few of my servers;
Server 2008 R2 Standard 64-bit
Event ID 1074
Source USER32
User SYSTEM
The process C:\Windows\SysWOW64\shutdown.exe (SERVER) has initiated the restart of computer SERVER on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x800000ff
Shutdown Type: restart
Comment:
This just recently started to happen. No one is logged onto the server when it happens. Any thoughts?
I have a Batch file to configure SNMP by modifying registry. I, the past, i had used successfully to configure WIn2008/R2 Servers with no problem.
Now, í´m trying to configure WIn2012/R2 Servers and i got an error. And the error appears, even configuring manually, without the batch file.
The error:
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Description:
Faulting application name: snmp.exe, version: 6.2.9200.16384, time stamp: 0x5010a8da
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00000000
Faulting process id: 0x766c
Faulting application start time: 0x01cf6fb104bdf438
Faulting application path: C:\Windows\syswow64\snmp.exe
Faulting module path: unknown
Report Id: 426ce085-dba4-11e3-93fb-001018f79f53
Faulting package full name:
Faulting package-relative application ID:
Always followed by 2 times Event ID #1001
Fault bucket , type 0
Event Name: BEX
Response: Not available
Cab Id: 0
Problem signature:
P1: snmp.exe
P2: 6.2.9200.16384
P3: 5010a8da
P4: StackHash_c916
P5: 0.0.0.0
P6: 00000000
P7: PCH_E5_FROM_ntdll+0x0002DC34
P8: c0000005
P9: 00000008
The batch file ist´s simply a REG ADD command:
========= Cutted ===============================================
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SNMP\Parameters" /v EnableAuthenticationTraps /t REG_DWORD /d 0 /f========= Cutted ===============================================
Hello everyone
I've just updated my workstation to Windows 8 Pro, yea! - sigh, and now I'm going through trying to get all my management tools working properly and want to use the new Server Manager tools. So I've dutifully installed the windows 8 RSAT tools and begun to add in my servers. However most of my servers are 2003, 2008, 2008 R2 with only 1 solitary 2012 and I'm now suffering the above error on all my 2008 servers. Having done some 2012 training I was expecting this and jumped in to install .net 4, WMF 3.0 as requested. I've not installed the performance counter hot fix yet but I don't believe that has any bearing on this issue (correct me if I'm wrong).
So having followed the advice in the links below and verified that all the relevant services are running I still get the WinRM error under Server Manager against these 2008 servers. I get this whether I use the Server Manager on Windows 8 or Server 2012 and I'm at a loss to fix it.
To confirm what I've done
1. Windows 2008 R2 SP 1 - Domain Controller
2. Installed .Net 4 using the full standalone package - dotNetFx40_Full_x86_x64 (49,268KB size - file version 4.0.30319.1)
3. Installed WMF 3.0 using - Windows6.1-KB2506143-x64.msu (16,171KB size)
4. Ran the Command WinRM QuickConfig - which set up WinRM and applied the appropriate firewall rule - confirmed as being there. The result below is from running the command WinRM id which as you can see indicates that version 3 is in use.
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>WinRM id
IdentifyResponse
ProtocolVersion = http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd
ProductVendor = Microsoft Corporation
ProductVersion = OS: 6.1.7601 SP: 1.0 Stack: 3.0
SecurityProfiles
SecurityProfileName = http://schemas.dmtf.org/wbem/wsman/1/wsman/secprof
ile/http/spnego-kerberos
C:\Windows\system32>
5. Restarted the DC just to make sure (I've actually done this several times now - no change in the results)
6. Disabled the firewalls on the clients and servers
6. Refreshed and Restarted both the Windows 8 workstation and the 2012 Server.
I have this issue on multiple servers that I've done the above process through so it's not an isolated incident but I'm at a loss to know what I've got wrong. From all the searching I've done on the net it would be a number of people have experienced the issue but the above steps resolved it; I appear to be the exception. Does anyone have any thoughts or advice as to how I can resolve the issue as I would like to benefit from the new Server Manager without having to update all my servers to 2012 :).
Blessings
Jez
http://blogs.technet.com/b/servermanager/archive/2012/09/10/managing-downlevel-windows-based-servers-from-server-manager-in-windows-server-2012.aspx
http://social.technet.microsoft.com/wiki/contents/articles/13444.windows-server-2012-server-manager-troubleshooting-guide-part-ii-troubleshoot-manageability-status-errors-in-server-manager.aspx
Hi,
I would like to set set up notifications alert windows server 2012 standard R2 (email, mobile)?
Could you please step me through it?
Thanks
I have been trying to find out whether or not the default OU for Domain Controllers can be changed. Due to the way we structure the OU layout I feel it could useful to have have a different placement of the container. I have tried to remove wellKnownObjects GUID and assign it to the new OU but without success. I know that there is no simple redircmp command for the OU but that hasn't kept me from trying. I am trying this in a lab as I would not want to change this in our domain unless I have fully tested every change.
Can this be done and is so will it be possible to set this up in a way that doesn't cause problems?
Currently we have 1 AD server in datacenter and 7 AD servers in 7 branches, will it work if we maintain only 1 AD server in datacenter and all branch users login thru datacenter AD server only ?
TQ
Carynne
Hello,
After I run windows update on my 2003 servers (I run weekly), all my 6 servers are showing following error in events as well as popup screen whenever I logon, I cant find any article or help documents. Please help me to resolve these errors.
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 5/17/2014
Time: 2:32:25 PM
User: N/A
Computer: ABC
Description:
Fault bucket 390821638.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 33 39 30 38 32 31 36 33 39082163
0010: 38 0d 0a 8..
Hi All,
Is it a safe to run disk defrag on domain controller or exchange server when databases are also on the same drive on which we want to run defrag. It is more prevalent in case of DCs since NTDS.dit remains on C drive in small environment?
Is there a way to schedule it as background maintenance in windows 2003.
Regards
Yogesh Malhotra
HI,
I ran sysprep on a windows server 2003 r2 server and after filing necessary information server rebooted.
On every reboot instead of going to normal welcome screen, it is showing sysprep utility screen agaian and again.
Any solutions!!
Monto
I have installed "User Interface and Infrastructure" - "Desktop Experience" to enable disk clean up for my SERVER 2012. Installation completed and server restarted, Now I am getting this message on reboot - “Failure configuring windows updates Reverting changes Do not turn off you computer” and after 15-25 message comes “minutes notifying services that windows is shutting down.” And then “Shutting down service: Windows update.”
Again after restart same above process continues again and again.
Hello all,
I would agree that DSC is a great feature, but is it me or it is very badly documented ??
Anyhow, what I am looking for is a way to remove a pushed configuration without having to push an "inverse" one.
Is there an official and clean way to do this ? Is my server doomed to run this DSC config even if it does not require it ?
Please Microsoft, You need to provide all the tools, not only part of them.
Thanks for any ideas or solutions.
Chantal
