Quantcast
Channel: Management forum
Viewing all 2460 articles
Browse latest View live

Millions of SharePoint Farm Account logs in Security logs

$
0
0

My security event log is being flooded with millions of MS-SVC-FRM (sharepoint farm account)

When I turn off Distributed Cache Host they cease - I need this service on. Any ideas how to stop the flow of logs. Thanks


Sharepoint Customiser


Windows Server 2008 R2 and Event Collector Role

$
0
0
I have thefollowing scenario:

a server running WindowsServer 2008(SRVEC01),member of the domainsystem.
does not currently haveanyadditional role.

perform theinstallation and configuration ofWindowsEventCollectoron.


I havea server withwindowServer 2008R2)systemSRVDC01)
performsthe role of:
   ActiveDirectory
   DNSServer
   DHCP
   IIS

andconfigurethe subscriptionin the ServerSRVDC01but when I seethe categories of eventsdoes not display:

Activedirecoty-No
DNSServer-No
DHCP-No
IIS -No

Security -SI
Application-SI

as shown in theattached image.

someone canayuarmeso you canvisializarcategoriesof eventsServerSRVDC01fromthe subscriptioncreated inSRVEC01server(eventcollector)

PrintBrm Error 0x80070490

$
0
0

We havetwo identical, virtual serverwindows 2012r2. Bothservers havethe role ofmanagingprinting. I doexportprinters usingutilityPrintBrm.The firsttime,on the second server, when I dothe import,the printerdrivers are installedproperly.Nowwhen I do the import,there is an error in restoringthe driver. If youdo a restorefrom a backupvirtual server, then importthe very beginning there are no errors, you cando several timesin a row. Butafter 30-40minutesthere is amistake again.What could be the reason?

C:\Windows\System32\spool\tools>PrintBrm.exe -r -f x:\Print.PrinterExport -o for
ce
Operation mode: restore
Target server: local machine
Target file path: x:\Print.PrinterExport.
Queue publish mode: none
Overwrite mode: force new settings
Queue ACL mode: restore ACLs from backup

LISTING PRINT QUEUES
VLP-4525CP-UD3
VLP-M603P-OS1
vlp-m603p-buh8
vlp-9050mfp-buh1
VLP-4555mfp-rozn5
VLP-4555mfp-rozn3
VLP-4555MFP-OS9
VLP-4555MFP-OS8
vlp-4555mfp-os6
vlp-4555mfp-it1
VLP-4525CP-URKK
vlp-4525cp-os6
VLP-4525CP-BUH7
VLP-4515P-URKK
VLP-4515p-sokol2
vlp-4515p-rozn1
vlp-4345mfp-USbez2
VLP-4345MFP-UD2
vlp-4345mfp-rozn2
VLP-4345MFP-ROZN
VLP-4345MFP-R1
VLP-4345MFP-OS2
VLP-4345MFP-OS1
VLP-4345MFP-FLOOR2
VLP-4015P-BUH4
vlp-2025cp-it3
LISTING PRINTER DRIVERS
HP LaserJet P4515 PCL6 Class Driver, Windows x64, None
HP LaserJet m4555 MFP PCL6 Class Driver, Windows x64, None
HP LaserJet M4345 MFP PCL6 Class Driver, Windows x64, None
HP LaserJet Enterprise 600 M601 M602 M603 PCL6 Class Driver, Windows x64, None
HP LaserJet 9050 MFP PCL6 Class Driver, Windows x64, None
HP LaserJet 4345 MFP PCL6 Class Driver, Windows x64, None
HP Color LaserJet CP4025/4525 PCL6 Class Driver, Windows x64, None
HP Color LaserJet CP202X PCL6 Class Driver, Windows x64, None
Microsoft enhanced Point and Print compatibility driver, Windows x64, None
HP Universal Printing PCL 6, Windows x64, None
Microsoft enhanced Point and Print compatibility driver, Windows NT x86, None
LISTING PRINTER PORTS
VLP-4345MFP-FLOOR2, TCP
VLP-4345MFP-OS2, TCP
VLP-4345MFP-R1, TCP
VLP-4345MFP-ROZN, TCP
vlp-4345mfp-rozn2, TCP
vlp-4345mfp-USbez2, TCP
VLP-4515p-sokol2, TCP
VLP-4555MFP-OS9, TCP
VLP-4555mfp-rozn3, TCP
vlp-4555mfp-rozn5, TCP
VLP-4555mfp-rozn5_1, TCP
vlp-9050mfp-buh1, TCP
VLP-4525CP-UD3, TCP
WSD-19a79fe3-8434-493e-834a-497c58787ea7.006b, WSD
WSD-291fe6a3-7ba0-4273-99bd-91ef4689289e.006e, WSD
WSD-4086989d-a5c6-4c33-8d2e-856fba72d559.0060, WSD
WSD-53ff7af4-4228-420e-b5ac-21b9d5c92cd7.0034, WSD
WSD-5bfcff07-3e74-4e1c-bdee-24319e9ef331.003b, WSD
WSD-7f24068a-8ecf-4e09-8aa2-330b90bd0e5a.0033, WSD
WSD-8c059e88-3feb-49c2-8187-c56f67d33499.0030, WSD
WSD-96be91bb-8e3c-496f-89fe-ae27847d680e.003a, WSD
WSD-9ab7e677-ee22-4c59-b55f-c71fe86f5499.0063, WSD
WSD-a96308dc-3ed3-4653-a213-fe9b092c8ee2.0061, WSD
WSD-bc387abf-5afe-4a4b-a0d7-7810954d3e5b.0030, WSD
WSD-c9f37966-8554-4ff7-9d88-db495cb28dd4.003f, WSD
WSD-d8df8db7-df65-4963-bf0e-6ce27e37c452.0066, WSD
WSD-dc17358a-6a84-402e-aebe-140b5de7d674.003d, WSD
WSD-fa43e695-69fa-442e-a045-8378fea4f059.0035, WSD
LISTING PRINT PROCESSORS
hpcpp175 Windows x64 hpcpp175.dll

Restoring Printer Drivers...
Failed to restore printer driver HP LaserJet P4515 PCL6 Class Driver, Windows x6
4, 4. Error 0x80070490
Failed to restore printer driver HP LaserJet m4555 MFP PCL6 Class Driver, Window
s x64, 4. Error 0x80070490
Failed to restore printer driver HP LaserJet M4345 MFP PCL6 Class Driver, Window
s x64, 4. Error 0x80070490
Failed to restore printer driver HP LaserJet Enterprise 600 M601 M602 M603 PCL6
Class Driver, Windows x64, 4. Error 0x80070490
Failed to restore printer driver HP LaserJet 9050 MFP PCL6 Class Driver, Windows
 x64, 4. Error 0x80070490
Failed to restore printer driver HP LaserJet 4345 MFP PCL6 Class Driver, Windows
 x64, 4. Error 0x80070490
Failed to restore printer driver HP Color LaserJet CP4025/4525 PCL6 Class Driver
, Windows x64, 4. Error 0x80070490
Failed to restore printer driver HP Color LaserJet CP202X PCL6 Class Driver, Win
dows x64, 4. Error 0x80070490
Restored printer driver Microsoft enhanced Point and Print compatibility driver,
 Windows x64, 3
Restored printer driver HP Universal Printing PCL 6, Windows x64, 3
Restored printer driver Microsoft enhanced Point and Print compatibility driver,
 Windows NT x86, 3
Restoring Printer Ports...
Restored printer port VLP-4345MFP-FLOOR2, TCP
Restored printer port VLP-4345MFP-OS2, TCP
Restored printer port VLP-4345MFP-R1, TCP
Restored printer port VLP-4345MFP-ROZN, TCP
Restored printer port vlp-4345mfp-rozn2, TCP
Restored printer port vlp-4345mfp-USbez2, TCP
Restored printer port VLP-4515p-sokol2, TCP
Restored printer port VLP-4555MFP-OS9, TCP
Restored printer port VLP-4555mfp-rozn3, TCP
Restored printer port vlp-4555mfp-rozn5, TCP
Restored printer port VLP-4555mfp-rozn5_1, TCP
Restored printer port vlp-9050mfp-buh1, TCP
Restored printer port VLP-4525CP-UD3, TCP
Restored printer port WSD-19a79fe3-8434-493e-834a-497c58787ea7.006b, WSD
Restored printer port WSD-291fe6a3-7ba0-4273-99bd-91ef4689289e.006e, WSD
Restored printer port WSD-4086989d-a5c6-4c33-8d2e-856fba72d559.0060, WSD
Restored printer port WSD-53ff7af4-4228-420e-b5ac-21b9d5c92cd7.0034, WSD
Restored printer port WSD-5bfcff07-3e74-4e1c-bdee-24319e9ef331.003b, WSD
Restored printer port WSD-7f24068a-8ecf-4e09-8aa2-330b90bd0e5a.0033, WSD
Restored printer port WSD-8c059e88-3feb-49c2-8187-c56f67d33499.0030, WSD
Restored printer port WSD-96be91bb-8e3c-496f-89fe-ae27847d680e.003a, WSD
Restored printer port WSD-9ab7e677-ee22-4c59-b55f-c71fe86f5499.0063, WSD
Restored printer port WSD-a96308dc-3ed3-4653-a213-fe9b092c8ee2.0061, WSD
Restored printer port WSD-bc387abf-5afe-4a4b-a0d7-7810954d3e5b.0030, WSD
Restored printer port WSD-c9f37966-8554-4ff7-9d88-db495cb28dd4.003f, WSD
Restored printer port WSD-d8df8db7-df65-4963-bf0e-6ce27e37c452.0066, WSD
Restored printer port WSD-dc17358a-6a84-402e-aebe-140b5de7d674.003d, WSD
Restored printer port WSD-fa43e695-69fa-442e-a045-8378fea4f059.0035, WSD
Restoring Print Processors...
Restored print processor Windows x64, hpcpp175.dll, hpcpp175
Restoring Print Queues...
Restored print queue VLP-4515P-URKK
Restored print queue VLP-4525CP-UD3
Restored print queue VLP-4555MFP-OS8
Restored print queue VLP-4345MFP-R1
Restored print queue vlp-4555mfp-os6
Restored print queue VLP-4345MFP-OS2
Restored print queue VLP-M603P-OS1
Restored print queue VLP-4515p-sokol2
Restored print queue VLP-4345MFP-OS1
Restored print queue vlp-4555mfp-it1
Restored print queue vlp-m603p-buh8
Restored print queue vlp-4515p-rozn1
Restored print queue VLP-4345MFP-FLOOR2
Restored print queue VLP-4525CP-URKK
Restored print queue vlp-9050mfp-buh1
Restored print queue vlp-4345mfp-USbez2
Restored print queue VLP-4015P-BUH4
Restored print queue vlp-4525cp-os6
Restored print queue VLP-4345MFP-UD2
Restored print queue VLP-4555mfp-rozn5
Restored print queue VLP-4525CP-BUH7
Restored print queue vlp-4345mfp-rozn2
Restored print queue vlp-2025cp-it3
Restored print queue VLP-4555mfp-rozn3
Restored print queue VLP-4345MFP-ROZN
Restored print queue VLP-4555MFP-OS9
************ 100% ************
The following objects failed to install:


LISTING PRINTER DRIVERS
HP LaserJet P4515 PCL6 Class Driver, Windows x64, None  Error: 0x80070490
Element not found.

HP LaserJet m4555 MFP PCL6 Class Driver, Windows x64, None      Error: 0x8007049
0
Element not found.

HP LaserJet M4345 MFP PCL6 Class Driver, Windows x64, None      Error: 0x8007049
0
Element not found.

HP LaserJet Enterprise 600 M601 M602 M603 PCL6 Class Driver, Windows x64, None
Error: 0x80070490
Element not found.

HP LaserJet 9050 MFP PCL6 Class Driver, Windows x64, None       Error: 0x8007049
0
Element not found.

HP LaserJet 4345 MFP PCL6 Class Driver, Windows x64, None       Error: 0x8007049
0
Element not found.

HP Color LaserJet CP4025/4525 PCL6 Class Driver, Windows x64, None      Error: 0
x80070490
Element not found.

HP Color LaserJet CP202X PCL6 Class Driver, Windows x64, None   Error: 0x8007049
0
Element not found.


Check the eventlog for detailed information about the error which occurred.


Successfully finished operation.

Activate windows server 2012 R2 after evaluation expired

$
0
0

I installed windows server 2012 R2 evaluation version on 4 servers. The evaluation expired and the servers are shutting down automatically now. When I try to put the license key, it is not accepting it. I could activate some other servers with same license key; but before the evaluation time expired. I used the same media to install these serves as well. Kindly let me know if there is a way or workaround to make these servers licensed.

Regards.

Can you auto shrink quotas on a volume for a particular user until it reaches a limit?

$
0
0

On a Server 2012R2 machine, we use quotas on the root of a drive to limit the amount of space users have in their home directory.  Some users we have to temporarily increase their quota if they are working on a big project.  But is there any mechanism or script or scheduled task that we could use that will on a regular basis check that users quota, and if there is room to lower it, it will, but only lower it back down to a set value (or as close as it can get to that set value at the time it runs)?

That way eventually they will get back down to what their "normal" quota was, before we had to temporarily bump it.

RAID 1 Reliablity

$
0
0
Yesterday I setup new Windows Server 2008 R2 Standard with 2x 1TB SATA drives and 2x Intel S3500 SSD. I installed OS on SSD and Software RAID 1 on both SSD/SATA drives. Today I placed some data on the SATA drive (D: drive) and when I tried to access the data from the drive I got read error. Disk management shows error that 1st SATA drive needs replacement. When I tried to break the mirror I got another error message that The last healthy plex cannot be removed.

So I still have to replace the drive and my question is since RAID 1 mirror data on both the drives and in case of a single drive failure it should retain the data, so in my case why did it show the read error?

Remote Computer Was Not Found

$
0
0

Dears,

I have configured task schedule in Windows server 2008 R2, when I try to open task scheduler the message appear "Remote Computer Was Not Found" when I go to services to start task shoulder it will automatically stop after click on task scheduler when I try to open again that is mean the service will be stop again..

Failure to load a 64 bit SNMP extension agent DLL (Windows Server 2008 R2)

$
0
0
Hi,

I have, in the past, used a 32 bit SNMP extension agent DLL on Windows Server 2003, without any problems [(32 bit) snmp.exe -> (32 bit) SNMP extension agent DLL) ].

On Windows Server 2008 R2, I can use the 32 bit DLL [ (64 bit) snmp.exe -> (32 bit) snmp.exe -> (32 bit) SNMP extension agent DLL) ], but I have realized that there is a significant limitation in this arrangement. To send out a trap, the SNMP extension agent DLL passes the trap to snmp.exe, which in turn sends the trap out on the network to the intended destination. This works, but only if the rate at which the SNMP extension agent DLL passes the traps to snmp.exe is slow enough, and this rate seems to be of the order of (about) 8 traps per second. If this rate is exceeded, (32 bit ) snmp.exe starts buffering the traps, and the memory used by snmp.exe grows over time (the same situation on Windows Server 2003 does not cause a problem).

I built the SNMP extension agent DLL as a 64 bit DLL, so that the arrangement would be [ (64 bit) snmp.exe -> (64 bit) SNMP extension agent DLL) ], but the extension agent DLL does not get loaded, and I can see the following message in the Event Viewer:
The SNMP Service is ignoring extension agent dll C:\Windows\system32\MySNMPagent.dll because it is missing or misconfigured.
Event ID : 1102 (SNMP)

The extension agent ( MySNMPagent.dll ) is certainly notmissing, there are no further clues (as far as I can tell) on just how it ismisconfigured.

Is there any way to generate any more debug information? Any idea why this might be happening?

Thanks for reading this query.

CD

task scheduler returns (0x1) code when 'Run whehter user is logged on or not' options selected

$
0
0

I have setup a task using Task Scheduler that I would like to use to launch a batch file at a certain time each day.  The batch file works correctly when launched manually and the task also works correctly when the option 'Run only when user is logged on'.  However, as soon as I mark 'Run whether user is logged on or not' using the Administrator login, the task returns a Last Run Result of (0x1).  This happens when trying to launch the file on demand or when it is scheduled at it's daily time to run.

From some research I have done, I don't believe I should see the actions of the batch file and the program that it launches when this option is marked, but I know it is not running correctly in the background due to the fact the log files are not generated from the task it is to complete.  I have marked 'Run with highest privileges' and also entered information in the Start in field under Edit Action with no quotes.  The history logs show that the task successfully finished, despite the lack of the Last Run Result code and no log files being generated.  I have also verified the user being added to the Log on as a batch job option and that there are full permissions to the files (all on the local machine).

Does anyone have any insight to what I could be missing?  If helpful, i could post the history logs as well.

Thanks!

Strange result in windows search results

$
0
0

Dear Community,

I was querying some files in the windows search on our exchange server and bumped into the result 'ieflipahead:d:craigslist.org '

What is this? And when right clicking it, why can I not see a location? Should I be concerned?

Kind Regards,

Jake

Windows SMTP service - restrictions

$
0
0

Hi

I have installed a SMTP service under IIS 6.0 in windows 2008 R2

I would like to know if is possible to restrict the SMPT traffic to specific domains

Example: i only want that only relay traffic to google.com

Thanks in advance.

Duplicate Drive on Windows 2008 SP2

$
0
0

Dear Expert !

currently. i m managed Windows 2008 x64 SP2. in the Disk Management these are three logical disk as attached . But when open windows explorer these are two Z drive duplicated similar size, file name.. . please give me advise .

thank  you and appreciate




GPO For Deploying Powershell Remoting Not Working

$
0
0

I have a bunch of Windows 7 workstations with Powershell 3.0 installed. I want to enable Powershell Remoting via Group Policy, but I am running into an issue.

I have deployed a GPO with the following settings:

Computer Configuration --> Policies --> Administrative Templates --> Windows Components --> Windows Remote Management --> WinRM Service:

Allow remote server management through WinRM:  Enabled - IPv4 filter:  *
Turn On Compatibility HTTP Listener:  Enabled

Computer Configuration --> Policies --> Administrative Templates --> Windows Components --> Windows Remote Shell:

Allow Remote Shell Access:  Enabled

Also I have configured the WinRM Service to start and change to automatic delayed.
The problem is I can't connect to these clients with command:  Enter-PSSession -ComputerName Win7 -Port 80

I get an error saying it couldn't connect.  Finally after troubleshooting, the only way I can get it to work is to run this command on each client: Set-Item WSMan:\localhost\Service\EnableCompatibilityHttpListener -Value true

Then after I restart the WinRM service, I'm finally able to connect.

Why isn't the GPO automatically applying this setting?  Since it's not working, can I manually deploy this setting?  I've look through the registry and can't figure out what that powershell command adds.

I need to apply this to many workstations, so running that command individually is not feasible.

Please help.
Thanks,

Stephen


KMS DNS records disappeared, and service will not recreate

$
0
0

History

I've been using Server 2008R2 as a KMS server for years.  Last year, we installed the patch to allow it to function for Windows 8.1/2012R2 clients.  It worked flawlessly.

I recently decommissioned that server (I manually uninstalled the KMS host key, unpublished the DNS entry, shutdown the server, and deleted its VM).  Furthermore, I deleted the _VLMCS srv record from DNS, and confirmed that no trace of the server remained - anywhere.

Then, I built a new 2012R2 server, added the Volume Licensing Role, installed the KMS host key, and activated it.  I verified the DNS entry was properly created, and confirmed clients are registering with the new server.  Everything worked great -- that was three weeks ago.

Problem

Today, I have a problem with a new Windows installation not activating.  I discovered that the DNS SRV record for the KMS server was gone.

I went to the server and confirmed that DNS publishing is enabled, and I restarted the sppsvc service.  The DNS record was not created, so I rebooted the server.  The DNS record still not created.  I checked the event logs, and there are no entries indicating a failure, nor are there entries indicating an attempt to register the DNS record.

It seems that the KMS server simply isn't publishing the DNS record.

Workaround

I manually created the SRV record, but I shouldn't need to do this and I don't like it.  Hence, I am posting this looking for a proper "fix".

Speculation/Conclusion

Does Windows Server 2012R2 have a bug where it doesn't publish the DNS entry, except for the very first time?  Does anyone have any helpful ideas?  Does anyone else have this problem?

Other

This problem is very similar to:KMS publish DNS record

Thanks in advance for your efforts to help me!


-Tony

Help Needed with Unresponsive Server

$
0
0

Hi,

I have a server at a remote location which is fairly unresponsive. It responds to ping but not much else. I need to restart the server but a psshutdown has done very little.

I have tried a number of tools but I get RPC Server Unavailable or WMI service unavailable.

Are there any tools out there that can reboot the server without the use of RPC or WMI?

We have had a numbe of domain controllers falling over of late due to running out of memory and I believe this could be down to a number of agents we rolled out and a memory leak. Is there a remote processor tool out there I can use to view this? I have tried a few but agan they tend to use RPC and WMI.

Your help with this is much appreciated.


How to Create Windows ISO Show Only One Windows Version

$
0
0

Dear,

I want to create Windows ISO server for 2012, but I want this ISO show me only one version of the Windows for example, I have Core version, Standard, DataCenter etc..So I don't need after I create ISO to show me all those choose versions, I need show me only for example windows standard version during windows server 2012 installation, kindly I need steps to create this ISO.

Thanks..

New-Partition and Format disk Powershell popups"Do you want to format it"

$
0
0

Hi,

While running this powershell command in Windows 2012 server

New-Partition -DiskNumber 2 –UseMaximumSize | Format-Volume -Confirm :$false

It opens a popup "You need to format the disk in drive E: before you can use it and prompt for Format disk , as i already provided the Format-Volume is there any way to block the popup or format while creating the new partition

Please help me get rid of that stupid Navigator and that annoying voice and blue line once and for all!!!!

$
0
0

Hello,

I followed directions left by others and in Windows 8 there is no Explore All Settings but found Use computer without a display.  The narrator box was unchecked to begin with and I cannot get rid of the sound and that stupid blue line all over my screen.

Any ideas?

Thanks.

Critical BitLocker Drive Encryption system files are not available- which was working earlier.

$
0
0

Hello All,

 

The E drive  (external USB drive) of server which was encrypted using bitlocker. earlier it was working perfectly fine. On running the BitLocker configuration screen we are getting with a message stating that ‘Your system volume is not configured correctly to allow you to use BitLocker Drive Encryption.  Critical BitLocker Drive Encryption system files are not available’

now whenever we are clicking on E drive it is showing to format the disk.

can anyone help me to understand which are the files required or repair for bitlocker?

Thanks & Regards,

MAsud Hussain

 

Using robocopy to copy files from a network share over a WinRS command line session

$
0
0
Hello,

Preface: Using server 2008 enterprise.

I can't seem to get robocopy to function over WinRS and I'm not sure where the problem actually lies.  Running robocopy locally on the computer does work fine, but as soon as I try to run it through a remote command prompt through the WinRS client or directly with the WinRS client I get an access denied message (error 5).

I've tried using runas while logged into the remote command prompt as well, thinking that it could have been some sort of permissions inheritence issue.

I've checked the permissions on the remote file share, I've even given 'Everyone', 'Anonymous Logon' and the computer's active directory account full control over the folder and the file I'm trying to copy, but still get the access denied error.

I've tried using /COPY:DT since I read that usually resolved error 5 issues.

None of these things have worked.

I'm kind of out of ideas, I've read some blogs of people who have written powershell scripts which use winrm/robocopy so I figure I'm missing something stupid.  Or maybe I've stumbled upon a bug?

C:\>robocopy \\192.168.100.1\share c:\test example.exe

--------------------------------------------------------------------
-----------
   ROBOCOPY     ::     Robust File Copy for Windows

-------------------------------------------------------------------------------

  Started : Mon Feb 09 17:35:32 2009

2009/02/09 17:35:32 ERROR 5 (0x00000005) Getting File System Type of Source \\192.168.100.1\share\
Access is denied.

   Source - \\192.168.100.1\share\
     Dest : c:\test\

    Files : example.exe

  Options : /COPY:DAT /R:1000000 /W:30

------------------------------------------------------------------------------

2009/02/09 17:35:32 ERROR 5 (0x00000005) Accessing Source Directory \\192.168.100.1\share\
Access is denied.

Viewing all 2460 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>