RE: [NTSysADM] Still having issues with WSUS and scheduled updates

2017-05-19 Thread Randal, Phil 
As mentioned in https://support.microsoft.com/en-us/kb/3077013

Rename microsoft-windows-geolocation-wlpadm.admx to 
microsoft-windows-geolocation-wlpadm.admx.old

And do the same for Windows Store admx - rename winstoreui.admx to 
winstoreui.admx.old

before copying in the new templates.

Cheers,

Phil
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael Leone
Sent: 19 May 2017 16:09
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Still having issues with WSUS and scheduled updates

On Fri, May 19, 2017 at 10:35 AM, Randal, Phil 
<phil.ran...@hoopleltd.co.uk<mailto:phil.ran...@hoopleltd.co.uk>> wrote:
The latest .admx files (including Windows 10 Creators Update) can be found here:
https://www.microsoft.com/en-us/download/details.aspx?id=55080



AH HA. This might be what I need.Thanks! I see that "Always Reboot" option in 
this new WindowsUpdate.admx.  Dunno why I didn't see this update before.

I assume I can just copy all of these to the PolicyDefinitions of the DC, 
overwriting the existing ones? Even at my domain/forest level?

I'll wait until Monday, especially since I get to leave a little early today, 
have to go to a Gov't Mule show. Good stuff!

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it."

RE: [NTSysADM] Still having issues with WSUS and scheduled updates

2017-05-19 Thread Randal, Phil 
The latest .admx files (including Windows 10 Creators Update) can be found here:
https://www.microsoft.com/en-us/download/details.aspx?id=55080

Cheers,

Phil
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael Leone
Sent: 19 May 2017 15:19
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Still having issues with WSUS and scheduled updates



On Fri, May 19, 2017 at 10:04 AM, 
> wrote:
Perhaps this Technet article can provide more information:

https://blogs.technet.microsoft.com/wsus/2013/10/08/enabling-a-more-predictable-windows-update-experience-for-windows-8-and-windows-server-2012-kb-2885694/


"Finally, these updates are already included in the final versions of Windows 
8.1 and Windows Server 2012 R2, so if you are already planning to upgrade, 
there aren’t any additional updates you need to install."

These are retail Win2012R2, so that update should be installed.

HOWEVER:

"A new group policy called Always automatically restart at the scheduled time 
enables restarts soon after updates are installed, instead of 3 days later"

I don't see this as an option in my GPO. In order to see new options in a GPO, 
don't you need to install a new .ADMX file?

My AD is at win 2008R2 levels, even though all my DCs are at Win2012R2. Just 
haven't upgraded the forest/domain level yet.



Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it."

[NTSysADM] RE: can't set NTP time source on PDC

2017-02-02 Thread Randal, Phil 
Is Group Policy overriding your settings?

Here’s how it should be done:

https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/

Cheers,

Phil
--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Plough Lane Offices | Plough Lane | Hereford | HR4 0LE
Tel : 01432 260415 |Email: 
phil.ran...@hoopleltd.co.uk
General email: enquir...@hoopleltd.co.uk
Website: www.hoopleltd.co.uk

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jimmy Tran
Sent: 02 February 2017 14:11
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] can't set NTP time source on PDC

Hi Guys,

I’ve been having trouble changing the Windows time source to any outside NTP 
server. It is current set to local but the time is off so I wanted to set it to 
an outside time source.

When I run “w32tm /query /status”, it shows (source name: “LOCL”). So now I run 
“w32tm /config /syncfromflags:manual /manualpeerlist:pool.ntp.org /reliable:yes 
/update” and it completes successfully. I’ll restart the time service and do a 
query again but it still shows LOCL. I am doing this on the PDC on the domain. 
I’ve tried a reboot and even unregistering w32tm but nothing helps. I’m out of 
ideas.

Thanks,

JT
Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it."

RE: [NTSysADM] RE: OT Free partition software

2015-04-07 Thread Randal, Phil 
+1

You may have to stop some services running if extpart can’t see the drive.

Your fave search engine will give you some hints.

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford | HR2 6JT
Tel : 01432 260415 |Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk
General email: enquir...@hoopleltd.co.ukmailto:enquir...@hoopleltd.co.uk
Website: www.hoopleltd.co.ukhttp://www.hoopleltd.co.uk/

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Rubens Almeida
Sent: 07 April 2015 16:11
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] RE: OT Free partition software

1+ Dell's extpart! Done several times online on virtual and physical 2003 boxes.

De: Matthew Toppermailto:mtop...@capstoneitinc.com
Enviada em: ‎07/‎04/‎2015 12:04
Para: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Assunto: [NTSysADM] RE: OT Free partition software
I’ve done this with Dell’s extpart.exe and extended the system disk online.  
Never tried it on a dynamic disk.


Matthew Topper

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Damien Solodow
Sent: Tuesday, April 7, 2015 10:57 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: OT Free partition software

For 2003, I don’t think there is any way to do it online. A quick reboot with 
System Rescue CD and running gparted will take care of it though.

DAMIEN SOLODOW
Senior Systems Engineer
317.447.6033 (office)
317.447.6014 (fax)
HARRISON COLLEGE

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of David McSpadden
Sent: Tuesday, April 7, 2015 10:54 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: [NTSysADM] OT Free partition software

I have a Server 2003 that will not get decommissioned anytime soon.
Really need to extend the C: (OS) drive (Dynamic no pagefile).
It is a VM now but the extra space I gave the C: drive is just sitting there 
mocking me.
How can I get this drive to extend?
Hopefully without a shutdown or reboot?


David McSpadden
Systems Administrator
Indiana Members Credit Union
P: 317.554.8190 | F: 317.554.8106
[Description: imcu email icon]http://imcu.com/  [Description: facebook email 
icon] https://www.facebook.com/IndianaMembersCU   [Description: twitter email 
icon] https://twitter.com/IndMembersCU

[Description: email logo]
[mcp2]


This e-mail and any files transmitted with it are property of Indiana Members 
Credit Union, are confidential, and are intended solely for the use of the 
individual or entity to whom this e-mail is addressed. If you are not one of 
the named recipient(s) or otherwise have reason to believe that you have 
received this message in error, please notify the sender and delete this 
message immediately from your computer. Any other use, retention, 
dissemination, forwarding, printing, or copying of this email is strictly 
prohibited.


Please consider the environment before printing this email.

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

RE: [NTSysADM] Password reset for lists.myitforum.com?

2014-08-28 Thread Randal, Phil 
The curse of automapped mailboxes...

http://technet.microsoft.com/en-gb/library/hh529943%28v=exchg.141%29.aspx

Cheers,

Phil

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Maglinger, Paul
Sent: 28 August 2014 16:18
To: 'ntsysadm@lists.myitforum.com'
Subject: RE: [NTSysADM] Password reset for lists.myitforum.com?

I had an Exchange issue less than 2 months ago regarding mailboxes that 
continue to appear in the Outlook client even after you removed Full Access 
permissions using the EMC.  I'm trying to find the thread for that conversation.


-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Rod Trent
Sent: Thursday, August 28, 2014 9:21 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Password reset for lists.myitforum.com?

There is no password for the lists and no logon option.

What are you looking for?

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Maglinger, Paul
Sent: Thursday, August 28, 2014 9:45 AM
To: New NT System Admin List (NTSysADM@lists.myITforum.com)
Subject: [NTSysADM] Password reset for lists.myitforum.com?

 I am trying to look back on past posts on an issue I'm having again.
Apparently I've forgotten my password to log into lists.myitforum.com.

There is no reset password option.  Clicking on Help tells me to Contact your 
hosting company or email administrator to have your password changed.
Please do not contact SmarterTools directly, as we have no access to retrieve 
your password.

Who do I contact to reset the password or... is there another way to peruse the 
old posts?

TIA

-Paul









Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

RE: [NTSysADM] PowerShell

2014-08-22 Thread Randal, Phil 
A binary registry key is a byte array – each element of array will have values 
0 to 255 in Powershell.

Should be easy enough to manipulate – get the [int] value of the byte you wish 
to manipulate, use –bxor (with appropriate value 1, 2, 4, 8, 16, 32, 64, or 128 
depending on bit position) to flip the bit, write it all back.

Cheers,

Phil


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of James Rankin
Sent: 22 August 2014 10:54
To: NTSysADM@lists.myitforum.com
Subject: [NTSysADM] PowerShell

Any idea if you can toggle a particular bit of a byte in a binary Registry key 
using PowerShell? My head is busted trying to work this out

--
James Rankin
-
RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The Virtualization 
Practice Analyst - Desktop Virtualization
http://appsensebigot.blogspot.co.uk
Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

[NTSysADM] RE: VMWare upgrade gotchas

2014-06-16 Thread Randal, Phil 
I'd recommend running the vCenter Server Database Pre-Upgrade Checker first:

http://kb.vmware.com/selfservice/microsites/search.do?language=en_UScmd=displayKCexternalId=2004286

If it reports errors, you might be better off building a new vCenter Server 
from scratch and importing your hosts into it.

It involves a bit of work, but at least you'll have a clean install of vCenter 
5.x.

When we tried it, it reported major problems in our database, so we build a new 
5.1 vCenter server from scratch.

Importing your ESXi hosts into the new vCenter server is easy.  I turned off HA 
during that process to be on the safe side.

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Melvin Backus
Sent: 16 June 2014 16:24
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] VMWare upgrade gotchas

We're in the process of planning an upgrade from VMWare ESX 4.1 to 5.5.  At 
this point it appears that our biggest challenge is going to be upgrading the 
vCenter server, but I was wondering if anyone had any specific things we should 
watch out for during the process.

--
There are 10 kinds of people in the world...
 those who understand binary and those who don't.

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

[NTSysADM] RE: Spiceworks alerts

2014-05-08 Thread Randal, Phil 
http://community.spiceworks.com/topic/477896-spiceworks-alienvault-threat-detected

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Stefan Jafs
Sent: 08 May 2014 14:46
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Spiceworks alerts

OK so I'm getting more familiar with Spiceworks, it's amazing the amount of 
data it gives you, it even tells you what port and switch a device is connected 
to.
Anyhow I have a few PC's that says: name of device has been communication 
with suspicious IP address 66.150.114.32.
Any idea what that would be all about?

__
Stefan Jafs

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

RE: [NTSysADM] Windows 8.1 update required to be installed

2014-04-17 Thread Randal, Phil 
See  
http://blogs.technet.com/b/askds/archive/2014/04/16/an-update-about-the-windows-8-1-update.aspx

Cheers,

Phil


-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Hank Arnold
Sent: 17 April 2014 10:29
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] Windows 8.1 update required to be installed

  Interesting... I installed KB2919355 on my 64-bit Windows 8.1 Pro on April 9, 
2014. Well, I just got KB2919355 installed today, April 17, 2014. Wonder what 
changed/added/updated?


Regards,
Hank Arnold



Twitter: @Hank_PCDoc

Facebook: https://www.facebook.com/hank.arnold.96

My Blog: http://it.toolbox.com/blogs/personal-pc-assistant/




Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

RE: [NTSysADM] Start Menu returns

2014-04-03 Thread Randal, Phil 
8.1 Update 1 doesn't bring them.

In the meantime, I'd heartily recommend Classic Shell  
(http://www.classicshell.net/)

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of James Rankin
Sent: 03 April 2014 13:37
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Start Menu returns

Don't know whether the present updates bring it yet or not, things are as clear 
as mud on them there Intertubes

http://lifehacker.com/microsoft-is-bringing-the-start-menu-back-to-windows-8-1557023798

On 3 April 2014 13:23, Kennedy, Jim 
kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org wrote:
Could someone point me towards this mythical start menu, because I have the 
update installed and I am not seeing it.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of James Rankin
Sent: Thursday, April 3, 2014 4:27 AM

To: NTSysADM@lists.myitforum.commailto:NTSysADM@lists.myitforum.com
Subject: [NTSysADM] Start Menu returns

So the Start Menu is coming back to Windows 8!
Is this a new direction from MS, actually listening to what certain subsets of 
users want? If it is, then I'm impressed.
I doubt very much they will bring TechNet back to us also thoughI think 
that interferes too much with what they're hoping to do with Cloud OS.
My 2 cents.



--
James Rankin
-
RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The Virtualization 
Practice Analyst - Desktop Virtualization
http://appsensebigot.blogspot.co.uk



--
James Rankin
-
RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The Virtualization 
Practice Analyst - Desktop Virtualization
http://appsensebigot.blogspot.co.uk
Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

RE: [NTSysADM] Windows 2008 R2 RDP Issues

2013-12-03 Thread Randal, Phil 
What, no SP1 on the box?

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kelli Sterley
Sent: 03 December 2013 13:46
To: NT System Admin Issues Discussion list
Subject: Re: [NTSysADM] Windows 2008 R2 RDP Issues

Same as Dhiraj ... the service is running, the port is open and this is logged 
in the event log.

Faulting application name: svchost.exe_TermService, version: 6.1.7600.16385, 
time stamp: 0x4a5bc3c1
Faulting module name: rdpcorekmts.dll, version: 6.1.7600.16952, time stamp: 
0x4f1f9e66
Exception code: 0xc005

I can manage it remotely just fine - it's when we try to use remote desktop 
that it just won't connect.

On Fri, Nov 29, 2013 at 8:17 PM, Ken Schaefer 
k...@kj.net.aumailto:k...@kj.net.au wrote:
Is the service running?
Is the port open?
Is there anything logged in the Windows Event Log (e.g. a logon failure?)

Cheers
Ken

-Original Message-
From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Haritwal, Dhiraj
Sent: Saturday, 30 November 2013 1:10 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Windows 2008 R2 RDP Issues

Sometimes I have seen this behaviour on some servers. RDP is always enabled so 
don't think so we have to force it through GPO but still won't be able to login 
through RDC. Atleast once need to login locally then only can login through RDC.

I would also like to know if anybody find any solution for this issue.


Dhiraj



-Original Message-
From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Kurt Buff
Sent: 28 November 2013 00:30
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Windows 2008 R2 RDP Issues

Does one of your GPOs enable RDP?

That's what I do, and it never fails me.

Kurt

On Wed, Nov 27, 2013 at 8:59 AM, Kelli Sterley 
kjsterley.li...@gmail.commailto:kjsterley.li...@gmail.com wrote:
 The time is dead on and it only occurs on reboots.  It really is the
 weirdest thing.  And it only happens to this particular server - none
 of my other Win2008 R2 boxes.  They all have the same GP's applied to them.



 On Mon, Nov 25, 2013 at 2:21 PM, John Cook 
 john.c...@pfsf.orgmailto:john.c...@pfsf.org wrote:

 I've noticed it when the RDP session didn't close cleanly and it left
 the session active on the computer but never during a reboot. I've
 seen it on a select few VM's, nothing I could do but log in through
 the VCenter and log on and off then it was fine. Maybe this will help
 http://support.microsoft.com/kb/2571388

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

RE: [NTSysADM] Windows 2008 R2 RDP Issues

2013-12-03 Thread Randal, Phil 
Further on from that clue...

If SP1 is installed, and Rdpcorekmts.dll is 6.1.7600.16952, then you need to 
reinstall http://support.microsoft.com/kb/2667402

(see the 'known issues')

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Randal, Phil
Sent: 03 December 2013 14:35
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Windows 2008 R2 RDP Issues

What, no SP1 on the box?

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Kelli Sterley
Sent: 03 December 2013 13:46
To: NT System Admin Issues Discussion list
Subject: Re: [NTSysADM] Windows 2008 R2 RDP Issues

Same as Dhiraj ... the service is running, the port is open and this is logged 
in the event log.

Faulting application name: svchost.exe_TermService, version: 6.1.7600.16385, 
time stamp: 0x4a5bc3c1
Faulting module name: rdpcorekmts.dll, version: 6.1.7600.16952, time stamp: 
0x4f1f9e66
Exception code: 0xc005

I can manage it remotely just fine - it's when we try to use remote desktop 
that it just won't connect.

On Fri, Nov 29, 2013 at 8:17 PM, Ken Schaefer 
k...@kj.net.aumailto:k...@kj.net.au wrote:
Is the service running?
Is the port open?
Is there anything logged in the Windows Event Log (e.g. a logon failure?)

Cheers
Ken

-Original Message-
From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Haritwal, Dhiraj
Sent: Saturday, 30 November 2013 1:10 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] Windows 2008 R2 RDP Issues

Sometimes I have seen this behaviour on some servers. RDP is always enabled so 
don't think so we have to force it through GPO but still won't be able to login 
through RDC. Atleast once need to login locally then only can login through RDC.

I would also like to know if anybody find any solution for this issue.


Dhiraj



-Original Message-
From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Kurt Buff
Sent: 28 November 2013 00:30
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Windows 2008 R2 RDP Issues

Does one of your GPOs enable RDP?

That's what I do, and it never fails me.

Kurt

On Wed, Nov 27, 2013 at 8:59 AM, Kelli Sterley 
kjsterley.li...@gmail.commailto:kjsterley.li...@gmail.com wrote:
 The time is dead on and it only occurs on reboots.  It really is the
 weirdest thing.  And it only happens to this particular server - none
 of my other Win2008 R2 boxes.  They all have the same GP's applied to them.



 On Mon, Nov 25, 2013 at 2:21 PM, John Cook 
 john.c...@pfsf.orgmailto:john.c...@pfsf.org wrote:

 I've noticed it when the RDP session didn't close cleanly and it left
 the session active on the computer but never during a reboot. I've
 seen it on a select few VM's, nothing I could do but log in through
 the VCenter and log on and off then it was fine. Maybe this will help
 http://support.microsoft.com/kb/2571388

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

RE: [NTSysADM] 2 NICs on Win 7 can't access internet

2013-10-25 Thread Randal, Phil 
Not directly relevant to this discussion, but have a look at KB2903590 too

Packets may be sent from unexpected NIC on Multihomed Computer in Windows 7 and 
Windows Server 2008 R2

http://support.microsoft.com/kb/2903590

Oh, the joys of multihoming.

Phil


-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kurt Buff
Sent: 25 October 2013 13:54
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] 2 NICs on Win 7 can't access internet

On Fri, Oct 25, 2013 at 4:42 AM, Bambi J Saastad bambi.j.saas...@seagate.com 
wrote:
 I have a Window 7 pc on a tool that requires 2 NIC's
 1 NIC is used by the pc to communicate with the tool and it's TCPIP
 settings are and must remain
 10.10.0.100
 255.0.0.0
 No Gateway

 Our network is also 10.x.x.x
 so LAN NIC is
 10.1.36.93
 255.255.240.0
 10.1.32.1

 System can see the network and I can VNC or RDP to it from a different
 subnet, though will not auto map Server shortcuts, and cannot access
 the internet.

 Vendor has suggested that there is a registry setting that will put
 the LAN NIC into broadcast mode and it will fix the issue, but they do
 not know what this registry setting is.
 I have googled for a resolution but nothing has yet fixed it.

 Does anyone have any suggestions?

Yeah, that's not going to work. Per Richard and Glen, the overlapping networks 
will fubar you until you change one of them.

Suggestions? Two come to mind

o- If the NIC that is connected to the tool *absolutely* must have a
/8 subnet mask, put the LAN NIC in a different RFC1918 range - either
192.168.0.0/16 or 172.16.0.0/12. If necessary, put up a separate vlan on your 
switches just for that machine, which is probably a good idea anyway. Make sure 
your router knows about it, too.

o- Push harder on the manufacturer of the device, and see if you can notch down 
that /8 to a /30 or a /29.

Gotta say, though, that if the manufacturer of that tool specifies that it can 
only reside in a full 10.0/8 subnet, they have no freaking idea of what they're 
doing.

Kurt


Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

[NTSysADM] RE: System process 100% CPU 08r2

2013-09-20 Thread Randal, Phil 
Have you tried installing KB2775511 on the server and clients (it can be 
imported into WSUS from the Windows Updates Catalog).

I saw a significant CPU load reduction after installing ti on a busy file 
server.

Cheers,

Phil


-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of N Parr
Sent: 20 September 2013 13:41
To: 'ntsysadm@lists.myitforum.com'
Subject: [NTSysADM] RE: System process 100% CPU 08r2

Following up with some results and another question.  I added a second CPU, it 
helped but didn't solve the problem.  After some more digging with Process 
Explorer it seems the culprit is the SMB 2.0 driver.  It's chewing up the CPU 
but only with my Win7 clients.  This article suggests in mixed client 
environments try disabling SMB 2 on the server and clients.  Haven't done it 
yet.  Anyone else experience issues related to the SMB 2 driver?  It would 
explain why my Win XP clients don't experience the same issues as my Win 7.
http://www.petri.co.il/how-to-disable-smb-2-on-windows-vista-or-server-2008.htm#


-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian Desmond
Sent: Monday, September 16, 2013 3:35 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: System process 100% CPU 08r2

Capturing a dump of the system when the problem is occurring or collecting an 
xperf trace would be my approaches to start.

1 CPU is not really a great setup here.

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c - 312.731.3132

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of N Parr
Sent: Monday, September 16, 2013 3:07 PM
To: 'ntsysadm@lists.myitforum.com'
Subject: [NTSysADM] RE: System process 100% CPU 08r2

Only questions I didn't already answer are
~100 sessions
5 shares
Virtual (same config as other file servers that don't experience this)
1 CPU

Something else to add is I am snapping for previous file versions but CPU 
spikes never seem to coincide.I tend to agree it's something with the NIC 
because when System is spiking the CPU it's also the process with the highest 
network activity.  And then it's only 2-4% utilization.  There's not much I can 
do about that other than change the NIC type of the VM, but again it's using 
the same virtual adapter as my other file servers.


-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jesse Rink
Sent: Monday, September 16, 2013 2:45 PM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: System process 100% CPU 08r2

what version OS is the server?  nothing at all running on it other than a 
couple folder shares?   how many users are hitting the box?  how often is the 
spiking occuring?   is it a virtual or physical box?   how many cpu's or vcpus? 
   have you tried updating the NIC driver on the server?  does the cpu spike 
settle down on its own after awhile or do you have to reboot the client(s) 
and/or server?

Just thinking out loud...



From: listsad...@lists.myitforum.com [listsad...@lists.myitforum.com] on behalf 
of N Parr [npar...@mortonind.com]
Sent: Monday, September 16, 2013 2:24 PM
To: 'ntsysadm@lists.myitforum.com'
Subject: [NTSysADM] System process 100% CPU 08r2

I've been troubleshooting this for months now and I'm not getting anywhere but 
more confused.  I have one file server that keeps spiking the system service at 
random times.  Nothing else is running on the server, no AV or other apps.  
When this happens my win7 clients trying to access files on that server will 
come to a screeching halt.  That's the really strange part, my XP clients keep 
working like nothing is wrong.  I've done all the trouble shooting I can find 
for this problem, it's very hard to narrow down exactly what's causing the 
system process to spike.  I noticed that one of the win7 clients in 
particular was moving a lot of data (receiving .5 MB/sec steady) but they had 
no apps running off the server, weren't searching, search service was turned 
off.  But on that client it was the system service that was receiving the 
data from that server.  I rebooted the client and the server cpu immediately 
went back to normal.  My googling can't find anything that links the two 
together.  Just hoping someone else has encountered this.  Both client and 
server are patched but this has been going on for a long time, at least the 
last couple years.
Thanks









Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of

RE: [NTSysADM] Office 365 SLA and details on backups ownership etc

2013-08-12 Thread Randal, Phil 
Biggest problem for a solicitor would be client confidentiality, surely?

And as, according to the Snowden revelations,  both the NSA and GCHQ have their 
mitts all over 'the cloud'...

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jon D
Sent: 12 August 2013 13:04
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] Office 365 SLA and details on backups ownership etc

I though I read somewhere that the European Union is recommending not to use 
American Cloud services?
The US Government is open about going through the data in the cloud.
Kind of a problem for a foreign company...


Jon


On Mon, Aug 12, 2013 at 4:12 AM, Graeme Carstairs 
loonyto...@gmail.commailto:loonyto...@gmail.com wrote:
Hi,

We have a solicitor client who is considering office 365, and the Law Society 
of Scotland has issued guidelines on cloud services,

Does anyone know where I can find details on Microsoft website or else where on 
the Microsofts actual full terms and condions with special regards to

1. Ownership of e-mail
2. confidentiality
3. backup.
4. data retention
5. What happens if subscription ends?

I have found the SLA and it only details when you get service credits in event 
of system unavailability

Thanks

Graeme


--
Good news everyone, you have just received an e-mail from me!

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.