Showing posts with label Windows. Show all posts
Showing posts with label Windows. Show all posts

Monday, April 7, 2014

Removing a Mount Point Disk from a Cluster Group

In this example, I have two resources in a cluster group, Resource A and Resource B. I establish dependencies between them so that Resource B is dependent on Resource B.

image

This means that when the group is brought online, Resource B will not be brought online until Resource A is online.

Here is what the dependency report looks like.

image

Now that these two resources are linked, you have to be careful when deleting these resources. If I were to delete Resource A from the group without first removing the dependency, BOTH resources will get removed.

image

At this point, a pop-up will appear warning that a removal of this resource could affect applications using this resource.

image

If you click ‘Yes’, both resources get removed.

image

Lesson learned. If the resource you are deleting is dependent on any other resources, remove the dependency first.

Now, we get to the main point of this post. The above process is fine for deleting resources from a cluster group unless the resource you are deleting is configured as a “Physical Disk’ resource, and it a mount point disk. The process differs slightly and you must follow this process or you could find yourself unintentionally moving every resource in the group into ‘Available Storage’.

First, lets cover proper way to remove a mount point disk from a cluster group. In this example, I have a plain File Server group with a Network Name, IP Address, File Server, and three disks. A root disk (Disk X:) and two mount points using folders on the root of X: called X:\MountPointA and X:\MountPointB.

image

Since I don’t have any shares located on X:\MountPointB, I want to remove that disk so I can use it in some other application. The FIRST thing I need to do is take the resource offline.

image

Then I can right-click the resource and click ‘Remove from GroupName’

image

When you remove a ‘Physical Disk’ resource from a cluster group, it doesn’t actually remove the cluster resource altogether, it moves the disk resource into the ‘Available Storage’ group.  This is so that you can reallocate the resource to another group if needed.

As you can see, the resource now shows in ‘Available Storage’

image

At this point, you can remove the mount point configuration, or change it to a lettered drive so you can use for some other application.

Now let’s go over what can happen if you don’t take the mount point offline before removing it. The main reason in going over this is to show you how to recover so that there’s no adverse impact to the Cluster.

In this example, I am removing the same resource from the File Server group following the same process above WITHOUT taking it offline first. First, I verified there were no dependencies on the ‘DiskX:\MountPointB’ resource.

image

Now here’s where it gets fun. After I attempted to remove the mount point, ALL of my resources disappear from the group. ??????

image

Time to panic? No, all is not lost. What happened is that because we had a mount point configured, and a mount point is not usable unless there’s a root disk, ALL of the resources moved to ‘Available Storage’ because the rest of the resources DO have dependencies.

It may appear all of the resources disappeared. Because in the UI, we only show ‘Physical Disk’ resources, if any other resources get put in that group, they don’t show up in the UI. However, if we run a command line to display all resources and their groups, we can see that the resources are still there.

image

To get the resources back into the right group, just move the disks back to the original File Server group. Right click the disk, More actions, and select Move this resource to another service or application. The same dependency tree will cause the resources to move back.

image

Now we have all our resources back and we can follow the correct process of taking the mount point disk offline BEFORE removing it.

 

Read Original Article:

Install .NET Framework 3.5 on Windows Server 2012 R2

During .NET 3.5 install on Windows 2012 R2 (or 2012) a stopper warning comes as below.

“Do you want to specify an alternate source path? One or more installation selections are missing source files…”

image

Solution:

From command prompt use below command:

#dism /online /enable-feature /featurename:NetFX3 /all /Source:E:\sources\sxs /LimitAccess

Where E: is your Windows Installation Media drive letter.

image

 

Monday, September 30, 2013

the dhcp/binl service on this workgroup server has encountered another server with ip address..

Windows Server 2008 R2 DHCP Standalone Server, configured for wireless clients in remote VLAN (different VLAN). When a new scope configured for DHCP VLAN (VLAN which DHCP server’s IP is)  in domain authorized DHCP server, standalone DHCP server detects this and stops working.

To get standalone DHCP server work, add this key in its registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\DHCPServer\Parameters
Name: DisableRogueDetection
Type: REG_DWORD
Data: 0x1

Thursday, September 26, 2013

Migration of DHCP from Windows Server 2003 to Windows Server 2012

Export DHCP settings from Win 2003 Server

1. Open Command Prompt

a. #netsh

b. #DHCP

c. # server \\Name or IP Address

d. #export c:\w2k3DHCPdb all

Import DHCP server to Win 2012 Server

2. Select Command Prompt (Admin) to open the cmd prompt using elevated privileges.

3. Select Command Prompt (Admin) to open the cmd prompt using elevated privileges.

a. #netsh

b. #DHCP

c. #server \\Name or IP Address

d. #import c:\w2k3DHCPdb

4. Close the command prompt when completed.

5. Close the command prompt when completed.

6. Return to DHCP located in the Server Manager dashboard.

7. Right click the designated DHCP server in the services pane, then select Restart.

8. Disable and remove DHCP from the Windows 2003 server.

9. Authorize Windows Server 2012 DHCP server within your domain.

Sunday, August 18, 2013

HP ProLiant G6/G7/Gen8 Servers - Network Configuration Utility is No Longer Available Within Microsoft Server 2012 Operating System

SYMPTOM:HP Network Configuration Utility (NCU) is no longer available for download for the Microsoft Windows Server 2012 Operating System.
SYMPTOM:HP NCU cannot be installed on Microsoft Windows Server 2012.
CAUSE:Microsoft Windows Server 2012 has Network Teaming functionality build into the Operating System of Microsoft Server 2012 (all editions).
Complete Article:

Friday, June 14, 2013

Reset the Windows 2003 Server DSRM Administrator Password

  1. Click, Start, click Run, type ntdsutil, and then click OK.
  2. At the Ntdsutil command prompt, type set dsrm password.
  3. At the DSRM command prompt, type one of the following lines:
    • # reset password on server null.
    • Type new password
    • #q

Monday, April 22, 2013

FSRM: Failed to send the email alert.

Error

image

Windows Event Log:

A File Server Resource Manager Service email action could not be run.

Error-specific details:
Error: IFsrmEmailExternal::SendMail, 0x8004531c, Mailbox unavailable. The server response was: 5.7.1 Client does not have permissions to send as this sender

We will need to provide send permissions to the computer running FSRM

Add-ADPermission -Identity "MailboxName" -User "DOMAIN\Computeraccount$" -ExtendedRights "Send-as”

Tuesday, April 2, 2013

Remove Search history from Windows Explorer

Delete entries in side below registry location.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery

Friday, March 8, 2013

Use Robocopy for backup

robocopy <sourse> <destination> /e /mir /np /tee /mt:4 /log:backup_log.txt
robocopy <sourse> <destination> /e /mir /np /z /tee /mt /log+:backup_log.txt
pause

/e = copy all sub-folders, even empty ones
/mir = mirror (check the files in the destination, and only copy newer files)
/np = no progress counter
/log: = create a logfile
/log+: = This option ensures that the results of the 2nd and 3rd ROBOCOPY are appended to the log file created in the 1st ROBOCOPY line.
/tee = Output from ROBOCOPY written to both the log file and the cmd window.
/mt = ROBOCOPY also has the ability to perform faster multi-threaded copying by simply using the option /mt. I can choose the number of threads to use by specifying a number between 1 and 128 after the /mt option, or if I just specify /mt without a number then the it will use 8 threads by default. In the example below, I use 4 threads to copy to my USB drive, and 8 threads (no number) to copy to my network drive.
/z = This option implements a "retry" for the copying. If I were part way through the copying process, and I lost connection with the network, then ROBOCOPY would automatically restart the copying at the point of failure once the network connection was re-established.

#################################################################################################
WARNIG : Use the /MIR option with caution - it has the ability to delete a file from both the source and destination under certain conditions. This typically occurs if a file/folder in the destination has been deleted, causing ROBOCOPY to mirror the source to the destination. The result is that the same files in the source folder are also deleted. To avoid this situation, never delete any files/folders from the destination - delete them from the source, and then run the backup to mirror the destination to the source.
#################################################################################################

For more details

Wednesday, February 20, 2013

Windows Updates (WSUS) - Update Classifications.

  • Critical updates:
    Broadly released fixes for specific problems addressing critical, non-security related bugs.
  • Definition Updates:
    Updates to anti-malware or other definition files.
  • Feature Packs:
    New product functionality usually included in the next full product release.
  • Security Updates:
    Broadly released fixes for specific products, addressing security issues.
  • Service Packs:
    Cumulative sets of all hotfixes, security updates, critical updates, and updates created since the release of the product. Service packs might also contain a limited number of customer-requested design changes or features.
  • Tools:
    Utilities or features that aid in accomplishing a task or set of tasks.
  • Update Rollups:
    Cumulative sets of hotfixes, security updates, critical updates, and updates packaged together for easy deployment. A rollup generally targets a specific area, such as security, or a specific component, such as Internet Information Services (IIS).
  • Updates:
    Broadly released fixes for specific problems addressing non-critical, non-security related bugs.

Saturday, November 10, 2012

Restrict use of a computer to one domain user only

Remove "NT AUTHORITY\Authenticated Users" uses from the list of users group
To eliminate the option to logon to one or few computer, follow the instructions bellow:
1. Right click "My Computer" icon on the desktop.
2. Choose on "Manage".
3. Extract "Local Users and Groups".
4. Click on "Groups".
5. In the right side of the screen double click on "Users" group.
6. Remove: "NTAUTHORITY\Authenticated Users" from the list.
7. Add the require user/s or and group/s to the "Users" local group.

Enable Ping Replies from Windows 2008 Server

Command Prompt:

#netsh firewall set icmpsetting 8

GUI

image

Monday, October 8, 2012

Hyper-V cluster error: Cluster network name resource 'Cluster Name' failed to update the DNS record for name

Source:FailoverClustering
EventID: 1579
Task Category: Network Name Resource

Cluster network name resource 'Cluster Name' failed to update the DNS record for name ‘xxxxxxxxx' over adapter 'Local Area Connection'. The error code was 'DNS operation refused. (9005)'. Ensure that a DNS server is accessible from this cluster node and contact your DNS server administrator to verify the cluster identity can update the DNS record “xxxxxxxxxxx’

Solution:

Cluster  DNS A record was manually created before configuring cluster and cluster computer account was not having write access to its A record. Go to DNS A record properties > Security Tab\, add Cluster Computer Account and give full rights.

Sunday, September 30, 2012

SQL differential backup and restore

A differential backup creates a copy of all the pages in a database modified after the last database backup. Differential logs are used primarily in heavily used systems where a failed database must be brought back online quickly. Differential backups are smaller than full database backups; therefore, they have less of an effect on the system while they run.

For example, a site executes a full database backup on Sunday night. A set of transaction log backups is made every four hours during the day, with the backups from one day overwriting the backups from the day before. Each night the site makes a differential backup. If one of the data disks for the database fails at 9:12 A.M. on Thursday, the site can:

  1. Back up the current transaction log.
  2. Restore the database backup from Sunday night.
  3. Restore the differential backup from Wednesday night to roll the database forward to that point.
  4. Restore the transaction log backups from 4:00 A.M. and 8:00 A.M. to roll the database forward to 8:00 A.M.
  5. Restore the log backup taken after the failure. This will roll the database forward to the time of the failure.

Consider using differential database backups when:

  • Only a relatively small portion of the data in the database has changed since the last database backup. Differential database backups are particularly effective if the same data is modified many times.
  • You are using the Simple Recovery model and want more frequent backups, but don't want to do frequent full database backups.
  • You are using the Full or Bulk-Logged Recovery model and want to minimize the time it takes to roll forward transaction log backups when restoring a database.

A recommended process for implementing differential database backups is:

  1. Create regular database backups.
  2. Create a differential database backup periodically between database backups, such as every four hours or more for highly active systems.
  3. If using Full or Bulk-Logged Recovery, create transaction log backups more frequently than differential database backups, such as every 30 minutes.

The sequence for restoring differential database backups is:

  1. Restore the most recent database backup.
  2. Restore the last differential database backup.
  3. Apply all transaction log backups created after the last differential database backup was created if you use Full or Bulk-Logged Recovery.

Reducing Recovery Time

Using database, differential database, and transaction log backups together can reduce the amount of time it takes to restore a database back to any point in time after the database backup was created. Additionally, creating both differential database and transaction log backups can increase the robustness of a backup in the event that either a transaction log backup or differential database backup becomes unavailable, for example, due to media failure.

Typical backup procedures using database, differential database, and transaction log backups create database backups at longer intervals, differential database backups at medium intervals, and transaction log backups at shorter intervals. For example, create database backups weekly, differential database backups one or more times per day, and transaction log backups every ten minutes.

If a database needs to be recovered to the point of failure, for example, due to a system failure:

  1. Back up the currently active transaction log. This operation will fail if the transaction log has been damaged.
  2. Restore the last database backup created.
  3. Restore the last differential backup created since the database backup was created.
  4. Apply all transaction log backups, in sequence, created after the last differential backup was created, finishing with the transaction log backup created in Step 1.

Note  If the active transaction log cannot be backed up, it is possible to restore the database only to the point when the last transaction log backup was created. Changes made to the database since the last transaction log backup are lost and must be redone manually.

By using differential database and transaction log backups together to restore a database to the point of failure, the time taken to restore a database is reduced because only the transaction log backups created since the last differential database backup was created need to be applied. If a differential database backup was not created, then all the transaction log backups created since the database was backed up need to be applied.

For example, a mission-critical database system requires that a database backup is created each night at midnight, a differential database backup is created on the hour, Monday through Saturday, and transaction log backups are created every 10 minutes throughout the day. If the database needs to be restored to its state at 5:19 A.M. on Wednesday:

  1. Restore the database backup created on Tuesday night.
  2. Restore the differential database backup created at 5:00 A.M. on Wednesday.
  3. Apply the transaction log backup created at 5:10 A.M. on Wednesday.
  4. Apply the transaction log backup created at 5:20 A.M. on Wednesday, specifying that the recovery process only applies transactions that occurred before 5:19 A.M.

Alternatively, if the database needs to be restored to its state at 3:04 A.M. on Thursday, but the differential database backup created at 3:00 A.M. on Thursday is unavailable:

  1. Restore the database backup created on Wednesday night.
  2. Restore the differential database backup created at 2:00 A.M. on Thursday.
  3. Apply all the transaction log backups created from 2:10 A.M. to 3:00 A.M. on Thursday.
  4. Apply the transaction log backup created at 3:10 A.M. on Thursday, specifying that the recovery process only applies transactions that occurred before 3:04 A.M.

Sunday, September 23, 2012

SDelete usage

 
usage: sdelete [-p passes] [-s] [-q] <file or directory> ...
sdelete [-p passes] [-z|-c] [drive letter] ...
-a Remove Read-Only attribute
-c Clean free space
-p passes Specifies number of overwrite passes (default is 1)
-q Don't print errors (Quiet)
-s or -r Recurse subdirectories
-z Zero free space (good for virtual disk optimization)

How to change Windows 8 Product Key

Command Line

slmgr -ipk  xxxx-xxxx-xxxx-xxxx-xxxx

GUI

Start > Run > Cmd > slui 3

Saturday, September 8, 2012

Best practices for Shared Folders

 

Assign permissions to groups, not user accounts.

  • Assigning permissions to groups simplifies management of shared resources, because you can then add users to or remove them from the groups without having to reassign permissions. To deny all access to a shared resource, deny the Full Control permission.

Assign the most restrictive permissions that still allow users to perform required tasks.

  • For example, if users need only to read information in a folder, and they will never delete, create, or change files, assign the Read permission.

If users log on locally to access shared resources, such as on a terminal server, set permissions by using NTFS file system permissions or access control.

  • Share permissions apply only to users who access shared resources over the network; they do not apply to users who log on locally. For this situation, use NTFS and access control.

Organize resources so that objects with the same security requirements are located in the same folder.

  • For example, if users require the Read permission for several application folders, store the application folders in the same parent folder. Then, share the parent folder, rather than sharing each individual application folder. Note that if you need to change the location of an application, you may need to reinstall it.

When you share applications, organize all shared applications in one folder.

  • Organizing all applications in one shared folder simplifies administration, because there is only one location for installing and upgrading software.

To prevent problems with accessing network resources, do not deny permissions to the Everyone group.

  • The Everyone group includes anyone who has access to network resources, including the Guest account, with the exception of the Anonymous Logon group.

Avoid explicitly denying permissions to a shared resource.

  • It is usually necessary to explicitly deny permissions only when you want to override specific permissions that are already assigned.

Limit membership in, and assign the Full Control permission to, the Administrators group.

  • This enables administrators to manage application software and to control user rights.

In most cases, do not change the default permission (Read) for the Everyone group.

  • The Everyone group includes anyone who has access to network resources, including the Guest account. In most cases, do not change this default unless you want users to be able to make changes to the files and objects in the shared resource.

Grant access to users by using domain user accounts.

  • On computers running Windows XP Professional that are connected to a domain, grant access to shared resources through domain user accounts, rather than through local user accounts. This centralizes the administration of share permissions.

Use centralized data folders.

  • With centralized data folders, you can manage resources and back up data easily.

Use intuitive, short labels for shared resources.

  • This ensures that the shared resources can be easily recognized and accessed by users and all client operating systems.

The Machine SID Duplication Myth (and Why Sysprep Matters) by Mark Russinovich

On November 3 2009, Sysinternals retired NewSID, a utility that changes a computers machine Security Identifier (machine SID). I wrote NewSID in 1997 (its original name was NTSID) because the only tool available at the time for changing machine SIDs was the Microsoft Sysprep tool, and Sysprep doesn’t support changing the SIDs of computers that have applications installed. A machine SID is a unique identifier generated by Windows Setup that Windows uses as the basis for the SIDs for administrator-defined local accounts and groups. After a user logs on to a system, they are represented by their account and group SIDs with respect to object authorization (permissions checks). If two machines have the same machine SID, then accounts or groups on those systems might have the same SID. It’s therefore obvious that having multiple computers with the same machine SID on a network poses a security risk, right? At least that’s been the conventional wisdom. Read more

The Microsoft policy for disk duplication of Windows installations:

When you deploy a duplicated or imaged Windows installation, it is required that the System Preparation (Sysprep) tool is used before the capture of the image. Sysprep prepares an installation of Microsoft Windows for duplication, auditing, and customer delivery. For Microsoft Windows 2000, Windows XP, and Windows Server 2003, Sysprep is included with the latest service pack Deploy.cab. For later versions of Windows, Sysprep is included with the operating system, and Sysprep is located in the following folder:

%windir%\system32\sysprep

Read more

Wednesday, September 5, 2012

Rename Windows 2008 R2 File Service Cluster

Before begin you need to verify that the computer names for your nodes have permission to to made DNS changes.  Open up your Failover Cluster Manager and select File Server service.  Right click on the name and select properties.

image

image

image

Wednesday, August 29, 2012

Complete Windows Anti-Virus Exclusion List

One place on the web where you can find an updated list of ALL the AV exclusions you might want to configure for Windows Server. Feel free to add to the list, it is the wiki way!

Complete Windows Anti-Virus Exclusion List