find out wether a CA server is standalone or enterprise
hi friends
i want to know all the methods that we can check wether a CA server is stand-alone or enterprise.
i know one of them is that standalone CA doesn't have Certificates Templates node in Certification Authority console ?
what are other methods to find it out ?
thanks i nadvance
- Changed type Bruce-Liu Tuesday, January 24, 2012 8:44 AM
Reply:
John,
It is time for you to start doing some of your own research. You are really taking up a lot of time with questions that I propose Vadims and I start answering with "Read the book" or "try google/bing"
This is a forum for helping people with problems in their infrastructure, it is not a study guide.
I know it is tough at the start, but you have stated yourself that you have not found time to read the book, it is time to set the time aside and start reading.
Brian
------------------------------------
Reply:
John,
It is time for you to start doing some of your own research. You are really taking up a lot of time with questions that I propose Vadims and I start answering with "Read the book" or "try google/bing"
This is a forum for helping people with problems in their infrastructure, it is not a study guide.
I know it is tough at the start, but you have stated yourself that you have not found time to read the book, it is time to set the time aside and start reading.
Brian
Brian , i have to read Lots of book because of my duty in my complex network, so sometimes i have a force problem and don't have to spend lot of time to find the answer
- Edited by john.s2011 Sunday, January 22, 2012 5:41 AM
------------------------------------
Reply:
John,
It is time for you to start doing some of your own research. You are really taking up a lot of time with questions that I propose Vadims and I start answering with "Read the book" or "try google/bing"
This is a forum for helping people with problems in their infrastructure, it is not a study guide.
I know it is tough at the start, but you have stated yourself that you have not found time to read the book, it is time to set the time aside and start reading.
Brian
Brian , i have to read Lots of book because of my duty in my complex network, so sometimes i have a force problem and don't have to spend lot of time to find the answer . you are not forced to answer my questions, so please don't make me angry and don't complain about my questions. let other people that want to answer me , answer with their will.
i am not interested to see anymore from you. please go about your works instead of telling bad words to people.
bye
John, I completely agree with Brian and I really dislike your offensive comments here. Remember, we (Brian, Paul, Hasain and me) are not a MSFT support team and are not required to google on your behalf. Many of your questions are already answered somewhere and Google/Bing know where. Just try Google/Bing/book first. As Brian said, we help people to figure out and (if possible) fix their PKI. And TechNet forum is not a learning place. If you have no time to read the book and learn (at least) fundamentals, your company may need to address PKI questions to consulting company, or hire another administrator.
If you will continue in that way, you will have to find another board, because no one will help you here. It is disappointing, but you need to learn (as well as PKI fundamentals) how to speak at forum boards.
Do not respond to thi post, because I don't want to continue this thread.
My weblog: http://en-us.sysadmins.lv
PowerShell PKI Module: http://pspki.codeplex.com
Windows PKI reference: on TechNet wiki
------------------------------------
Reply:
No problem, John.
We have all been there. Just consider it advice from other who have also started down the path you are going on
We look forward to your future (researched) questions
Brian
------------------------------------
Reply:
On Sun, 22 Jan 2012 19:29:27 +0000, john.s2011 wrote:
are you really the same Brian komar( Author ) ?? may you please prove that ?
He is, and I'm the technical editor and asking him to prove that isn't
going to get you any more help around here. Why would Brian (or anyone else
around here for that matter) need to prove anything to you in the first
place?
Paul Adare
MVP - Forefront Identity Manager
http://www.identit.ca
I must have slipped a disk; my pack hurts.
------------------------------------
Reply:
LMAO <G>
Look at my caricature, look at my picture on the book sleeve...
Brian
------------------------------------
Reply:
Quit digging yourself into a hole and stop responding to this thread.
Trust me....
Brian
------------------------------------
Reply:
On Sun, 22 Jan 2012 19:29:27 +0000, john.s2011 wrote:
are you really the same Brian komar( Author ) ?? may you please prove that ?
He is, and I'm the technical editor and asking him to prove that isn't
going to get you any more help around here. Why would Brian (or anyone else
around here for that matter) need to prove anything to you in the first
place?
Paul Adare
MVP - Forefront Identity Manager
http://www.identit.ca
I must have slipped a disk; my pack hurts.
Verified by VeriSign, lol :) sorry for offtopic.
My weblog: http://en-us.sysadmins.lv
PowerShell PKI Module: http://pspki.codeplex.com
Windows PKI reference: on TechNet wiki
------------------------------------
Windows server 2008 R2 terminal server restarts abrupty
We have a Windows server 2008 R2 Terminal server running VB6.0 applications. The terminal server is getting restarted abruptly with the following windows system logs:
-------------------------------------
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
| BugcheckCode | 127 |
| BugcheckParameter1 | 0x8 |
| BugcheckParameter2 | 0x80050031 |
| BugcheckParameter3 | 0x6f8 |
| BugcheckParameter4 | 0xfffff800016e5505 |
| SleepInProgress | false |
| PowerButtonTimestamp | 0 |
-------------------------------------
I did analyze the and found the following:
· These reboot events has the id as 41 and the following Microsoft support article describes the issue in detail:
o http://support.microsoft.com/kb/2028504 “Windows Kernel event ID 41 error in Windows 7 or in Windows Server 2008 R2: “The system has rebooted without cleanly shutting down first””
· In summary, the article directs us to look for BugCheckCode and BugcheckParameter1 (available in the details of the event) to understand the actual cause of the issue.
· The BugCheckCode and BugcheckParameter1 for the issue we are facing are 7F and 0x00000008 respectively.
· Below Microsoft support sites explains the cause and resolutions for the issue based on BugCheckCode and BugcheckParameter1.
o http://support.microsoft.com/kb/842465 , “Stop 7F, 0x00000008 (double-fault) error occurs because of a single-bit error in the ESP register”.
o http://support.microsoft.com/kb/137539 , “General causes of "STOP 0x0000007F" errors”.
· The first article claims that the issue is “Double fault” and the second article states that “two primary causes for this are hardware and kernel stack overflows”.
I have not been able to come to a conclusion on this as the experts in my organization feel it is caused due to VB6.0 application running on 64 bit server with the help of wow64.
Please comment and advise.
Thanks,
Prashanth
- Changed type PrashanthKumar_Cenduit Monday, January 23, 2012 6:10 AM
- Edited by PrashanthKumar_Cenduit Monday, January 23, 2012 6:10 AM
Reply:
Naresh Negi (MSFT - Windows Performance Team) Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
------------------------------------
Reply:
Hi Naresh,
How can I change this thread to Windows General ?
Cheers!
Prashanth
------------------------------------
Tool Bar
- Edited by TOJFIT'SME Monday, January 23, 2012 5:07 AM
Reply:
Right-click on the top and click on Add or remove commands..
Shantanu
------------------------------------
To use hyperV or something else?
I am of the opinion that using hyperV when you need a single non virtualised OS (eg for voip) is a reasonable usage but there is absolutely no point in using the stand alone version of HyperV. The reason I say this is that hyperV has less features than the competition but uses significantly more ram (2GB compared to 32MB for ESXi). Can anyone correct my thinking on this? Is there any reason to use the standalone version of hyperV?
Thanks,
Michael
- Changed type Vincent Hu Friday, January 20, 2012 10:15 AM better for discussion
Reply:
Hi,
It depends.
Small footprint is one reason to use Hyper-V Server 2008 R2.
By the way, Hyper-V Server 2008 R2 is free, if you have existing licenses for the guest virtual machines, you can use it. However, Hyper-V Server 2008 R2 comes without GUI, so you have to manage it with command line or manage it from a remote computer with full installation.
Vincent Hu
------------------------------------
Reply:
From what I understand
- ESXi uses less hard disk space
- ESXi is much easier to install
- ESXi client tools are also much easier to install
- ESXi client tools work on more OSs.
- ESXi has a LOT more features
- both have similar performance
I've read varying reports about the footprint of hyperV vs ESXi but from what I can see we get a lot of fluff with hyperV. When we plug a monitor into the machine we still get 2 windows on the screen which can be moved around and have menus etc. ESXi on the other hand is very plain text based. ie, MS haven't been able to remove the GUI component.
------------------------------------
Reply:
Hi,
I invite you to check this link to show you why we should use hyper-v and not Vmware:
http://download.microsoft.com/download/E/F/A/EFA7E5D1-C8F9-40EA-8296-896CD42C1A20/Top_5_Reasons_to_choose_Microsoft_Hyper-V_R2_SP1_over_VMware_vSphere%205.pdf
Best Regards
------------------------------------
Reply:
Hiya,
The short answer to your puzzle is:
Its Microsoft - with all the benefits and shortages that implies...
Easy setup, integration with existing MS products, less features, less testing, more users, lower cost, larger overhead...
------------------------------------
Reply:
All hypervisors have their plusses and minues.
Hyper-V and XenServer give you the most features for the least / no cost. No matter what anyone says. Everything else beyond that is the user experience - and they are all different there.
This is where comparisons all fall apart - rarely is it an apples to apples comparison - mainly because it is nearly impossible to do so.
You have to decide what you want and focus your decision on those features. Then decide whom (which company) you are willing to climb into bed with.
Everyone runs standalone VMs.
If you want highly available VMs. That requires vCenter with VMware - but not Hyper-V and XenServer.
If you want backup - it is all extra. If you want DR, that is extra too (until Win8). And so on.
If you are not a Windows shop, then you will gravitate to XenServer or VMware. you just will.
Oh, and come Win8 - Hyper-V will not _require_ a GUI managment console.
Brian Ehlert (hopefully you have found this useful) http://ITProctology.blogspot.com
Learn. Apply. Repeat.
Disclaimer: Backup, test your backup, try new things. Attempting change is of your own free will.
- Edited by BrianEhMVP Wednesday, January 18, 2012 5:23 PM
------------------------------------
Reply:
Hiya,
The short answer to your puzzle is:
Its Microsoft - with all the benefits and shortages that implies...
Easy setup, integration with existing MS products, less features, less testing, more users, lower cost, larger overhead...
I agree with everything you said except for the easy setup. I actually found hyperV significantly more difficult to setup. I think the setup itself was ok but then none of the tools could connect to it and I had to consult the big manual in the sky (google) to work out how to disable the firewall (they don't allow the management through by default??). Installing the client tools and getting them to connect was painful and I had to consult the big manual many times again for various errors.
In comparison with ESXi I just downloaded an ISO, burnt a CD, booted from it and installed it (same so far), but getting the client tools was just a matter of connecting via a web browser to the address specified on the screen and the tools just installed and connected (without the windows 7 restriction of course).
You also forgot the other great MS feature of being more locked into windows, eg my linux router wouldn't work properly under hyperV.
------------------------------------
Reply:
------------------------------------
Reply:
If ESXi works for you, then use it. You've already made up your mind against Hyper-V.
That's partly true but our network tech here uses hyperV. I'm pretty sure he just uses it simply because he hasn't investigated the options. Certainly when I asked he couldn't come up with anything. I was wondering if there are any clear reasons to use it. I've seen some advantages listed here but nothing compelling.
------------------------------------
Reply:
There is no reason to choose any one over another other than it meets your needs or requirements better. It could be VirtualBox or Parallels for that matter.
Personally, if most of your VMs are Linux look to XenServer.
As smjain noted, you seem to have had your mind made up before you asked the question here in the forum.
Personally, I use them all. And like I say, they all have good and bad aspects. There is no clear reason to use any of them, none of them have anything to offer that cannot be argued.
And many of us won't try and convince you one way or another as that is not what this forum is about.
Just remember, if you are investigating alternatives and you are open, there are many options beyond ESX and Hyper-V.
Brian Ehlert (hopefully you have found this useful) http://ITProctology.blogspot.com
Learn. Apply. Repeat.
Disclaimer: Backup, test your backup, try new things. Attempting change is of your own free will.
------------------------------------
Reply:
Well I did test HyperV and ESXi and found ESXi to be a lot better. What do you want me to do? Pretend I prefer HyperV :-) What I am saying is that I can't find any reason to use HyperV unless you want a non-virtualised OS, can anyone provide any other good reasons.There is no reason to choose any one over another other than it meets your needs or requirements better. It could be VirtualBox or Parallels for that matter.
Personally, if most of your VMs are Linux look to XenServer.
As smjain noted, you seem to have had your mind made up before you asked the question here in the forum.
Personally, I use them all. And like I say, they all have good and bad aspects. There is no clear reason to use any of them, none of them have anything to offer that cannot be argued.
And many of us won't try and convince you one way or another as that is not what this forum is about.
Just remember, if you are investigating alternatives and you are open, there are many options beyond ESX and Hyper-V.
Brian Ehlert (hopefully you have found this useful) http://ITProctology.blogspot.com
Learn. Apply. Repeat.
Disclaimer: Backup, test your backup, try new things. Attempting change is of your own free will.
------------------------------------
Reply:
Would you take any notice, no matter what anyone said? What are you trying to prove?
Bill
------------------------------------
Reply:
Hello,
I've found that Hyper-V provides exactly what the market needs right now. It is stable, performs well, and does the same job for less money. Microsoft has done a great job of taking a need and commoditizing it, making virtualization a freely available and easy to implement capability. In my implementations of Hyper-V I've found the following.
* It provides a drastic price difference over the competition
* It has a competitive advantage in systems management. At this point, System Center is delivering end-to-end systems management and automation with features that other products aren't approaching.
* It is easy to implement and consistent with existing driver models
* It delivers key HA features for free, such as Live Migration and failover
* It performs with bare metal characteristics
* It has a great future. Windows 8 brings features including incredible scalability, management, and mobility. For example, Windows 8 includes Live Migration between hosts that don't even have shared storage.
http://blog.concurrency.com/infrastructure/windows-8-hyper-v-preview-build/
http://blog.concurrency.com/infrastructure/why-choose-microsoft-virtualization/
Nathan Lasnoski
http://blog.concurrency.com/author/nlasnoski/
------------------------------------
Reply:
If someone came up with a good reason then I would take notice. I have taken note that the ram usage wasn't as big as I thought (hyperV actually uses slightly less I believe). Generally I find the way these conversations go is that someone asks for good reasons to use XYZ, people respond with some questionable reasons, the OP points out that these reasons are questionable and people respond with comments such as 'you've already made up your mind', 'you are biased' etc etc. IMO, the fact that I am here asking for reasons even though I have gone away from HyperV is being open minded. I also stated that if I needed a single non-virtualised OS for realtime stuff (eg voip, streaming) then I would consider hyperV. The things I am interested to know is about the microkernelised thingy and how hyperV is better for windows.Would you take any notice, no matter what anyone said? What are you trying to prove?
Bill
------------------------------------
Reply:
Stop the flaming, the questions are fair and good. With so many people using HyperV it would be obvious that there should be a "secret" reason why people are using this product. But there isnt.
I prefer HyperV myself, as I find all of it straight forward. I know the product isnt as mature as VMware products, but I am very familiar with the MS world, so thats what I prefer.
Bottomline is most hypervisors can do more or less the same. If you want to compare them, look at the age and expect that it will matter. Secondly you can compare them against direct requirements that your organisation has and see how the different products solves it.
None of the products can do anything automagical :)
------------------------------------
Reply:
I guess that I am a bit confused by the statement: "if I needed a single non-virtualised OS for realtime stuff (eg voip, streaming) then I would consider hyperV"
Hyper-V is the hypervisor. What you see in the Console is the dom0 / management OS. It could be a CLI, it could be a full windows server installation. It is these options that actually make it confusing.
A single non-virtualized OS would be Windows Server or Linux installed on the bare metal.
When Hyper-V is installed it is just like ESX - there is a hypervisor layer in between the OS you see at the console and the physical hardware. It all changes after that. The different hypervisors virtualize the hardware and present it to the VMs differently.
If you want to understand the Hyper-V paravirtualization model, check out the xen architecture, it is well documented and they both use paravirtualization. ESX uses an emulation model.
Hyper-V Server - this is as lite as Hyper-V can be. It is free. And when comparing the size on disk and RAM of a Hyper-V installation, this would be the equivalent to ESX. Out of the box the managemnet experience is CLI Windows. All the old Windows CLI is there, yes they are confusing and I know very few that would consider themselves Windows CLI experts. If you have a Windows Server instance, enable the Hyper-V Manager feature and remotely manage it, if you have a Win 7 SP1 PC then do the same under the remote mangement tools. ( or install the Remote Server Management Tools - they have been around since Windows 2003 (I think).
Server 2008+ Core with Hyper-V - this is a Server Core installation with the Hyper-V hypervisor under the dom0 which is a Windows Server Core installation. No GUI again, requires a license. Gives virtual instance licenses.
Server 2008+ Full with Hyper-V - this is a Server Full installation with the Hyper-V hypervisor under the dom0. This is the biggest footprint dom0, will require the most patching (due to the GUI, IE, etc.), requires a license, and gives the best management experience. It also has the virtual instance license granting.
Brian Ehlert (hopefully you have found this useful) http://ITProctology.blogspot.com
Learn. Apply. Repeat.
Disclaimer: Backup, test your backup, try new things. Attempting change is of your own free will.
------------------------------------
Reply:
All hypervisors have their plusses and minues.
Hyper-V and XenServer give you the most features for the least / no cost. No matter what anyone says. Everything else beyond that is the user experience - and they are all different there.
This is where comparisons all fall apart - rarely is it an apples to apples comparison - mainly because it is nearly impossible to do so.
You have to decide what you want and focus your decision on those features. Then decide whom (which company) you are willing to climb into bed with.
Everyone runs standalone VMs.
If you want highly available VMs. That requires vCenter with VMware - but not Hyper-V and XenServer.
If you want backup - it is all extra. If you want DR, that is extra too (until Win8). And so on.
If you are not a Windows shop, then you will gravitate to XenServer or VMware. you just will.
Oh, and come Win8 - Hyper-V will not _require_ a GUI managment console.
Brian Ehlert (hopefully you have found this useful) http://ITProctology.blogspot.com
Learn. Apply. Repeat.
Disclaimer: Backup, test your backup, try new things. Attempting change is of your own free will.
This is not really true. First of all you cannot talk about plain features and keep silence about their quality. Virtual machine migration for example takes awhile on Hyper-V compared to ESXi (using the same hardware of course). Does not matter for sandbox level of virtualization project but makes HUGE difference if you start developing tons of VMs. Second one is $$$. With finally revisited VMware pricing (and huge discounts they had recently started giving away thru VARs) you may find out "free" Hyper-V site would cost you more to configure and run then paid Essentials package.
XenServer is another story. Consultants are spread using such a ratio (approx. of course) 1000(VMware, most are good, competition is high and you can track history):100(Hyper-V, noticable part just claim they know something @ the time they don't):10(Xen, very few to select from).
In general answer is "it depends". I don't trust to XenServer b/c few people actually use it at production and don't trust to Hyper-V b/c it's too raw... So VMware. Still... Hyper-V 3.0 is going to change balance of power just a bit :) IMHO of course.
-nismo
------------------------------------
Reply:
Quality in the way that you are using is a judgement call.
I do not contend that Hyper-V out of the box does not have the same user experience as VMware.
Cost. Cost is very hard to quantify, specifically becuase of issues that you bring up. Free licenses, volume discounts, undercutting to get deals, etc.
And then you get into the big issue that most people mention and that is trust. ESX has been around for a long time, the first hypervisor I used myself, at the time it was before vCenter even was. All CLI. vCenter is what made ESX really easy to use in the enterprise.
Hyper-V. Yes. It has only been around since 2008. Relatively a short amount of time. But it is gaining fast and the stability has been good.
XenServer. Many folks use it. Specifically for VDI in the enterprise. It is pretty much VMware and XenServer for VDI today. It is also used by some very large hosters, telecoms, etc. You won't get that from the enterprise focused numbers. And then there is Xen, the open source root kernel - used by many of the largest public hosters out there.
Personally, I think you hit the big considerations:
- Cost (and it is relevant to whom you purchanse your licenses from),
- User Experience (most software in the enterprise is judged by an out of the box personal install and user experience), and
- Trust (of the company developing the software or the product)
Brian Ehlert (hopefully you have found this useful) http://ITProctology.blogspot.com
Learn. Apply. Repeat.
Disclaimer: Backup, test your backup, try new things. Attempting change is of your own free will.
------------------------------------
Reply:
There is really nothing new with evaluating virtualization systems. You need to use exactly the same techniques as evaluating any other software product.
No product has ever been the "best" solution for every situation, and probably never will. Some people swear by a particular product. Sometimes it is because it works well for them. They have never tried anything else but are happy campers. Sometimes it is because they had a particular problem with a product and changing to another product solved their problem (so they "know" it is better).
People who have worked on different systems soon realize that some systems work better for some particular setups than others. The task is to find which is going to suit your setup, and nobody else can ever tell you that. They can give you advice on what works for them and what to avoid, but it still comes down to your particular set of circumstances.
Bill
------------------------------------
Reply:
prefer HyperV myself, as I find all of it straight forward. I know the product isnt as mature as VMware products, but I am very familiar with the MS world, so thats what I prefer.I imagine that there are a lot of people who use HyperV because they are familiar with MS products and they think it is going to be easier to use. I think the opposite is true, ESXi was a lot easier to get up and running and is just easier to work with. HyperV was just a series of error->google->error->google repeat a few times. The larger hardware support for MS seems to be a non advantage to me, it's better to have a smaller pool of hardware that you know is going to work as compared to a larger pool that might work. It's fairly easy to just buy hardware that is know to work with esxi.
------------------------------------
Reply:
What I mean is that you can use the version of MS Server 2008 that comes with hyperV. Then you have a single non virtualised OS but can then install virtualised OSes on top of that.I guess that I am a bit confused by the statement: "if I needed a single non-virtualised OS for realtime stuff (eg voip, streaming) then I would consider hyperV"
------------------------------------
Reply:
Then maybe I need to add a bit of clarity (if I am understanding correctly) and see if I am understanding.
Hyper-V Server does not come with a version of Windows Server. The licensing is a bit more complex than that.
Server 2008 and newer have the option of adding the Hyper-V Role. If you install Hyper-V in this way you pay for the OS onstalled on the bare metal that becomes the management os / dom0. The license version that you install (and paid for) gives you virtual instances of Windows Server (standard give 1 virtual Server OS license, Enterprise gives 4, and Datacenter gives unlimited).
Hyper-V Server is the free version of Hyper-V. This gives you no instances of Windows Server and Windows Server is not installed on the bare metal. Hyper-V Server is only Hyper-V, it can be nothing more. It can only run virtual machines.
This is why I stated that I was confused about the non-virtualized OS statement.
Windows Server is very distinct and seperate from Hyper-V. Yes, they do share sub components as far as what you see in the management OS, but that is all. Windows Server is not Hyper-V and Hyper-V is not Windows Server.
Brian Ehlert (hopefully you have found this useful) http://ITProctology.blogspot.com
Learn. Apply. Repeat.
Disclaimer: Backup, test your backup, try new things. Attempting change is of your own free will.
------------------------------------
Reply:
I'm not sure why you thought I needed that clarified. I am well aware that you can get a free version of hyperV and well aware that you can purchase server 2008 that has the hyperV role. What I am saying is that the second case is the only reason I can think of to use hyperV. As it is now, with ESXi on my hardware I cannot use anything realtime like voip or video streaming and I am restricted as to what hardware a virtual machine can use. Having the non virtualized OS gets around these issues.Then maybe I need to add a bit of clarity (if I am understanding correctly) and see if I am understanding.
Hyper-V Server does not come with a version of Windows Server. The licensing is a bit more complex than that.
Server 2008 and newer have the option of adding the Hyper-V Role. If you install Hyper-V in this way you pay for the OS onstalled on the bare metal that becomes the management os / dom0. The license version that you install (and paid for) gives you virtual instances of Windows Server (standard give 1 virtual Server OS license, Enterprise gives 4, and Datacenter gives unlimited).
Hyper-V Server is the free version of Hyper-V. This gives you no instances of Windows Server and Windows Server is not installed on the bare metal. Hyper-V Server is only Hyper-V, it can be nothing more. It can only run virtual machines.
This is why I stated that I was confused about the non-virtualized OS statement.
Windows Server is very distinct and seperate from Hyper-V. Yes, they do share sub components as far as what you see in the management OS, but that is all. Windows Server is not Hyper-V and Hyper-V is not Windows Server.
Brian Ehlert (hopefully you have found this useful) http://ITProctology.blogspot.com
Learn. Apply. Repeat.
Disclaimer: Backup, test your backup, try new things. Attempting change is of your own free will.
------------------------------------
Reply:
Ah. I understand whre you were going now. I was not clear before.
What you outline has been the case to date for all virtualization. There are also other points where virtualization is not appropriate or the loss out paces any gains.
BTW - open source Xen (and XenServer to a degree) allow giving a VM a physical PCI device. You lose flexability in VM mobility but it is possible with certain hypervisors.
Brian Ehlert (hopefully you have found this useful) http://ITProctology.blogspot.com
Learn. Apply. Repeat.
Disclaimer: Backup, test your backup, try new things. Attempting change is of your own free will.
------------------------------------
I have two Windows 7, can't delete either of them
LONG version: I DL'd a virus a month ago and I deleted it. In the process of deleting it, I deleted another important system file because: running apps like iexplorer/notepad/frostwire no longer opens them (can only use the run as admin option), I can't drag and drop files any more, my touch scrollpad thing doesnt work, and certain picture icons don't display when I adjust things with my F1-F12 keys (the speaker, brightness, wifi pictures). All of these worked the day before I got and deleted my virus.
To fix this, I attempted to reinstall W7 using my Reinstallation DVD for W7 Home Premium 64-bit. It says to use to "reinstall the operating system on a Dell PC" which is what I thought I wanted to do. Instead of overwriting my first ("corrupted") version of W7 which is on C, it made another W7 on my recovery drive E (I think this is my fault but IDR exactly). Because of this, my E now has 14mb / 14.6 GB free. When I run my new W7 I get a low memory pop up every minute.
I want to remove this new windows from E. Its not supposed to be there, correct? I also want my original windows on C to work properly. Presumably by reinstalling W7 on C, correct? I pop the CD and get up to the point where I'm asked which drive to install W7. I choose drive C (which has 159/218 GB free) and it tells me theres not enough space.. wtf.. I cant touch drive E or my OEM partition so that leaves me with no options.
I also tried formatting both drives and I don't have any permission. I remember that I need permission from "TrustedInstaller" to do something (I think I was trying to format when that came up) . I changed my boot order to be my cd drive first, but i can't boot from my disk because I get an error "cdboot couldnt find bootmgr." I tried running the CD normally and it tells me there isnt enough free space on C to run setup even though 159 GB / 218 GB is free. I have tried many things...
SHORT version: I have 2 Windows 7 on my computer. The first on C is not working properly. To fix this my problem, I tried to reinstall Windows with the original disk. Instead of overwriting the first OS, a second W7 was installed on my recovery drive E. Even though my second W7 on E now works properly, it is taking up way too much space, so I want to remove it. I have tried extensively to do this, with no success.
I also want to reinstall W7 on my C drive to fix my problem. I have also tried several things with no success. I can't boot from CD because I get an error "cdboot couldnt find bootmgr." I tried running the CD normally and there isnt enough free space on C to run setup even though 159 GB / 218 GB is free. I can't format C or E either.
Any ideas? THANK YOU to anybody in advance
Reply:
Your problem is quite easy to fix. However, by doing the following, you will lose all data and have a fresh install. Are you ready?
First, boot with your Win7 disk. When you are at the first screen, hit <SHIFT>+<F10>. This will bring up the elevated command prompt. Once there, type DISKPART. At the diskpart prompt, type LIST DISK. If you have only a single physical disk, it should appear similar to the image below.
Type SELECT DISK 0. One disk 0 is selected. type CLEAN. You have now effectively removed all partitions on the disk. According to the OS and the computer, you have a brand-new, blank hard drive at this point.
Press on with the remainder of the install. Don't worry about creating any partitions as Windows will automatically take care of that for you.
If your Dell disk is a little more special, which I suspect it is, you can download the Windows 7 Enterprise trial: http://technet.microsoft.com/en-us/evalcenter/cc442495 and do the same. Just this time, once you have cleaned the disk, abort the rest of the install and then bring your Dell back to factory condition using the OEM system restore disks.
In either case, you will lose all data on the disk.
Good luck.
------------------------------------
Windows 7 KMS ACTIVATION ERROR 0xC004F015
Hi,
we have few computers in the organization getting this error. The Key Management Service does not have enough computers registrered at this time.
I have run the below cmd and the error below popped up.
slmgr.vbs /ipk <MultipleActivationKey>
And got the following response/error code:
"On a computer running Microsfto Windows non-core edition, run 'slui.exe
0x2a 0xC004F015"
Doing that gives the error description:
"The Software Licensing Service reported that the license is not installed"
And now I am stuck. Please help me, I do not know how to proceed!
kind regards
Katty P
Reply:
Hello,
Open an elevated cmd prompt and run slmgr /dlv
What is the output?
from the same cmd prompt run slmgr /rilc
Then try installing your product key again.
Thanks, Darrell Gorter [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights. VAMT - Volume Activation Management Tool - Download link http://www.microsoft.com/downloads/details.aspx?FamilyID=ec7156d2-2864-49ee-bfcb-777b898ad582&displaylang=en
------------------------------------
"Windows 7" search is driving me crazy.
"Windows 7 Professional" search is driving me crazy. I am a mathematical physicist with a super high IQ. I easily mastered all the scales on Pickett sliderules when I was 6 years old. I have never owned an Apple product until recently, when I bought their iPhone.
I mastered MS DOS "3.x". I suffered through Windows 95, Windows 98, Windows ME, Vista, and now Windows 7. I own MS Office 2010. I like MS Word 2010, even though I was not able to get support for it.
I personally contacted and spoke to the Vice President of Microsoft Customer Support. I was told MS support was not created to help customers with "How To?" questions. I was told they would go bankrupt if they helped customers with every problem they had. Meanwhile, I learned that Apple has live help for people who buy their products. For $100, you get one hour a week, one-on-one with one of their techs. After being repeatedly insulted, berated and abused, after I was unable to get help resolving any of my issues, I swore to myself, I would never purchase another Microsoft product again.
I have come to the conclusion that only self-hating, masochists buy MS products. I am kicking myself for having stayed with MS for so long. I feel like Charlie Brown, and MS is Lucy. I said to myself, they eventually have to straighten up and fly right. I was wrong.
The people running Microsoft are the same kind prepeller heads that created the IBM chiclet keyboard. They don't understand funtionality or the concept of "intuitive." They don't really care what their customers think. They've had a virtual monopoly for so long, they don't understand the concept of customer service.
Meanwhile, I can't figure out how to use MS search feautures. "Add a filter" is always greyed out. I can't get Windows 7 Professional to find my files. I can't figure-out how to use my computer as a Fax machine. Yes, I have a computer modem hooked up to my telephone line. michael
Reply:
You might want to try a free 3rd party search product like Agent Ransack:
http://www.mythicsoft.com/agentransack
More complaining about Windows 7 Search can be found here:
- Edited by Mythicsoft - Tech Support Tuesday, January 24, 2012 9:38 AM
------------------------------------
Reply:
I would try to reindex your search commonly found in Organise menuset / Folder and Search Options.
If no avail try to disable and reenable the service in add and remove programs > add and remove features, untick restart and tick
If this doesnt work system restore or reinstall.
I recommend you dont use third party tools.
Professional In Computing - Please Contact for Help. Please remember to click "Mark as Answer" on the post that helps you This can be beneficial to other community members reading the thread.
------------------------------------
network icon globe disappers
hi.i am new to this fourm.i need some help with my network icon globe.
the network icon globe keep on disappering and just leaveing the 2 computer screens there.when the globe disapper i can not get on the internet.
when i go to network and shareing center i see a red x between network and internet and it say access local only connection local area connection
ipv4 local and ipv6 limited
and sometimes it gives me a yellow triangle with a ! mark in it.that says limited connectivity and local only access connection local area connection
ipv4 limited ipv6 limited
when it suposed to be access local and internet connection local area connection
ipv4 internet and ipv6 limited.
can anyone tell me why is the network icon globe keeps on disappering.
please can anyone help me with this.
i been to all other fourms and sites but no luck in finding a solution
i had this problem for sometime now and its kind of getting on my nerves.
please help
sql sever 2008 agent fail to start
I instal sql server 2008 sp1 but server agent fail to start message was <form enctype="application/x-www-form-urlencoded">requist fail or sevice did not response in timely fusion how can i solve this problem<form></form></form><form></form><form></form><form></form>
Reply:
Vidhya Sagar. Mark as Answer if it helps!
------------------------------------
Reply:
------------------------------------
Gal in exchange server 2010
Hi team,
We want to disable by default gal on exchange server 201o and create a separate gal for every domain . Kindly help us asap
Reply:
Simon Butler, Exchange MVP
Blog | Exchange Resources | In the UK? Hire Me.
------------------------------------
Code for Receiving mails through pop3
i have an application for downloading the mails from my gmail account. When i run it in a debug mode it returns mails but takes long time. But when i compile it is giving error "ERR-Send user first". Can anybody help me out.
Thanx
Mukesh
- Moved by Larry Yin Saturday, January 28, 2012 4:59 PM (From:MSDN, TechNet, and Expression Profile and Recognition System Discussions)
Reply:
Mukesh,
this isn`t the right forum for asking development questions since this forum is for discussions about the recognition system of the forums.
Please take a look at this link to get the forum based on your used technoligy: http://social.msdn.microsoft.com/Forums/en-US/categories
Hannes
If you have got questions about this, just ask.
In a perfect world,
users would never enter data in the wrong form,
files they choose to open would always exist
and code would never have bugs.
C# to VB.NET: http://www.developerfusion.com/tools/convert/csharp-to-vb/
------------------------------------
Explorer: How to get folders to appear AFTER files and in alphabetical order
However, I would not get carried away with the OS as I can not figure out how to do this with Windows XP 32 bit. The folder contents are displayed as a LIST in all cases. The folder is the Documents library OR the C;\users\username\My Documents folder BUT I AM QUITE SURE THE issue exists for any explorer window or WIn 7 (explorer) library.
Customer claims (and I have not verified this) that his previous PC running Vista 64 bit OS had folders listed after files and both folders and files were in alphabetical order.
The question is how do I do that in the listed OS . This is what I have tried. In Menu bar (above the directory display and that is not the default and I had to add it somehow) I do View>Sort by>Name AND the folders get listed beneath the files as my customer wants BUT both folders and files are in reverse alphabetical order. If I click Name again (which is a toggle) it reverses to folders above files and in alphabetical order. If instead I try to use the ascending or descending choices ALSO in the view>Sort by menu (i.e select the one that was NOT selected of the two) it acts EXACTLY like I clicked Name again. ie it goes back to the initial display INSTEAD OF keeping files before folders AND changing things to alphabetical order so THAT does not work either.
View>sort by> type groups pdf and word files etc all in otheir own section of the list and hence is NOT what my customer wants unless it is combined with some other (currently unknown) option.
PLEASE REPLY WITH EXACTLY HOW TO DO THIS. Folder view options are Sort by and Group by and the latter does NOTHING like what I want (I tried it). Document Library options are Sort by and Arrange by and Group by. The Arrange by also does NOTHING like I want.
HOW DO I DO THIS SIMPLE THING WITH DETAILED STEP BY STEP INSTRUCTIONS PROVIDED. The initial state is folders before files and both folders and files in alphabetical order.
I strongly prefer you not reply to this post unless you have a Windows 7 (or at least Vista) PC and have actually tested your solution on a folder (ANY FOLDER) with both subfolders and files in it AND ALSO you kept tract of alphabetical order in your test.
Regards-Mike
- Changed type Niki Han Tuesday, January 24, 2012 8:32 AM dup
Reply:
Mister Red-Box,
Thanks for your post. However we are far from there yet.
#1 Are you saying that what I want can NOT be done in Windows 7 OR that you are not 100% sure and you do not know HOW and maybe it can be done. PLEASE REPLY.
#2 I am ALSO very interested in how to do this in Vista. If by manual sorting (your 2nd screen shot) you mean DRAGING things into position (like turn off auto-position on desktop and drag icons where you permanently want them THAT IS NOT HOW HE DID THIS IN VISTA. He has 1000's of files !! and a hundred folders and is constantly adding new files. The goal I expressed was done by Windows explorer options in Vista. Not by dragging things into the right order.
I ALSO do NOT know what manual sort means at all.
PLEASE REPLY on how you got that Vista screen shot EXACTLY. Step by step.
Regards,
Mike
------------------------------------
Reply:
Mister Red-Box,
In Vista, why can't you do the drag in List view? Are you saying you can ONLY do the drag in Details view?
In Vista if the Documents folder is ALWAYS displayed in List View AND the existing folders are dragged to beneath the files and 10 folders are added and 20 files (no dragging, just added by downloads from IE 9 or by dragging from other folders into the Documents folder, THEN do the new files STILL go above the folders and the new folders go beneath the files WITH NO DRAGGING
OR (assuming we ALWAYS want alphabetical order) do the new folders (added as above) still go above the files.
The POINT IS if (in Vista) we drag the existing folders beneath the files does that mean new folders added AUTOMATICALLY also go beneath the files OR just the ones that were previously dragged there.
It sounds like you are saying that the drag does NOT create a permanent sort order BUT JUST for the dragged folders WHICH IS USELESS TO MY CUSTOMER and also that even the folder drag ONLY works in Details view not in list view.
Please clarify if what I say above (ex the last sentence) is correct.
Mike
------------------------------------
Reply:
------------------------------------
Reply:
Al Dunbar,
Customer wants to move to new Win 7 laptop. He claims on old Vista laptop, in the Documents folder, the files were before the folders AND everything was in alphabetical order. (Based on what is above, I am beginning to doubt that and want to see the old laptop ASAP to verify).
Oh, BTW, this is my BIGGEST customer who has also made significant loans to my business so his requests (for anything) take TOP PRIORITY.
Fixing-computer people do a lot of things, upgrade PCs, networking, even iPads, WHATEVER PAYS THE BILLS !! If I don't know how to do it, I FIND OUT.
Mike
P.S. Upset over Sarah Burke. Reminds me of Rabii Kirshner's famous book "When Bad things happen to Good People"
------------------------------------
Reply:
I hear you. I have had users who periodically expected the impossible from us. Fortunately the appearance of my next paycheque has never included this kind of thing as a prerequisite.
Personally, I also doubt that what he has told you is absolutely true. If he can demonstrate it for you, then you'll have your work cut out for you. If not, you'll have your work cut out for you to find a nice way to tell him that either you think he got his facts wrong, or that the feature is simply not available in Windows 7. Good luck with that.
/Al
PS: Agreed. I'm hoping there will be some kind of recognition at the next winter olympics for Sarah Burke's having lobbied to have the sport included there.
------------------------------------
Reply:
Al Dunbar,
Regarding "I also doubt that what he has told you is absolutely true', you are correct
(1) I looked at his old Vista PC today and sure enough the order was View>Detail and YES files before folders BUT otherwise in the order of modification date with the most recent ones at the top; NOT what he told me last Sunday, i.e NOT alphabetical order but date order. The date order was achieved by view>sort by> descending. All of which I could have achieved without posting in this forum.
(2) Just for the record, files before folders AND in alphabetical order CAN BE ACHIEVED by(my own solution)
First get the folders above the files and both groups in alphabetical order. (Use Sort by>Name if you need to TO achieve this).
Then (KEY STEP) View>Sort By>More and check the box in the popup to the left of "Folder Name" and exit the popup.
Then View>Sort By>Folder Name.
Then View Sort By> Descendeing
DONE ! The files are ALL above the Folders and both groups are in alphabetical order.
Regards,
Michael Gross
P.S Your last name sounds familiar. I grew up in Seattle and we had relatives in Vancouver which we often visited and Dunbar Street is an important street in Vancouver.
------------------------------------
Reply:
Hopefully your client has accepted the fact that he misspoke - and appreciates your finding a solution.
Unfortunately, I can't really figure out what the benefit is in coercing a behaviour from windows that differs much from the default.
------------------------------------
Reply:
Al and Mister Red-box
Could you please reply (if you are able) to my new (but closely related) MS Win 7 Forum Question at
http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/b81fa617-b07e-4bd9-ba6a-deea08385c92
Regards,
Mike
------------------------------------
Reply:
Al and Mister Red-box,
SORRY. Link above does not resolve. My new (closely related) Question is at
http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/58a009d3-2ea2-4094-86a8-e46141cf53fe
Please answer it if you are able.
Mike
------------------------------------
Will Windows 7 Media Center support DVB-C in Europe?
- Changed type Mark L. Ferguson Wednesday, February 25, 2009 4:08 PM
Reply:
------------------------------------
Reply:
I have Terratec Cinergy C PCI HD TVtuner. In media center it is recognised, but none TV channel can be found. I read somewhere that at the moment media center doesn't support DVB-C, that's why i'm asking that...
------------------------------------
Reply:
When i run the terratec home cinema software and scan all frequencies it can find the channels and i can view them only the home cinema software on windows 7 is not stable and stops working a lot of times.
Then I tried MediaPortal (the freeware product) and it found all the channels in less then 10 minutes, another 5 minutes before i found how to view the scrambled channels but then all was working..
so if anyone has more information regarding dvb-c and mediacenter 7 then.. please let us know..
regards
Jack
------------------------------------
Reply:
------------------------------------
Reply:
2 Terratec Cinergy PCI are found as tuners, but no channels are found.
------------------------------------
Reply:
------------------------------------
Reply:
I read somewhere that it is just a problem of the channel list. Only US channel lists for DVB-C are available and supported. So the problem is not that big... it's just a small service missing in this awesome media center :-(
If only this list could be added manually... but no...
Hope there are some more hundreds of tuner card users posting here, perhaps we'll get a reaction :-)
------------------------------------
Reply:
But if you go to "Kanäle bearbeiten / Edit Channel" there should be about 100-300 channels.
So W7 finds all tv stations that are on (european) channels matching the frequency of a CATV-channel.
Is there no way to change the frequency of digital channels in W7 MediaCenter?
------------------------------------
Reply:
I can really advice to switch to the Firetv/floppydtv cards. You can use the CAM Modules from the terratec card in the Floppydtv so that part of your investment is not gone..
They had 2 versions of the floppydtv, one that fits in a 3.5 inch slot and one that can be used in a pci/pci-e slot.
If you have questions let me know..
regards
Jack
------------------------------------
Reply:
Here in The Netherlands the largest cable provider (Ziggo) will start selling CI+ based CAM's for CI+ compatible TV sets at the end of July 2009. They claim to be the first in Europe. Furthermore they state that they leave support for PC's to hardware manufacturers and Microsoft. So I really hope Windows 7 will (perhaps not before SP1?) provide support for CI+ HDTV.
L8r, Henk
------------------------------------
Reply:
The reason for that is controlling copyright issues by the content provider. Althought I understand the concept and the attempt to avoid piracy but this 'feature' is again blocking key features for common users.
-= Maarten =-
Software Engineer * MVP-Visual Developer-VSTO
------------------------------------
Reply:
------------------------------------
Reply:
I do understand the consequences of implementing CI+. But at the moment cable providers here do not support any CI slot adapters at all. If it works you're lucky if it doesn't too bad!
As I understand it with CI+ you may record (or time shift) for your own purposes and as long as the recording stays on the same system (i.e. a TV set with hard disk or a Media Centre) you will be able to view the recorded material. It is encrypted for that system, so you can not copy it for someone else or to websites like YouTube.
------------------------------------
Reply:
The only way to overcome limitations like this is to collectively boycot products like this. Providers need to see that they can earn a lot more money by providing rights free distribution at low cost instead of annoying your real customers with all sorts of DRM limitations.
Once the first subscription video service will be available I will be the first to pay and buy a subscription. My only requirement will be that it's DRM free and providing up to date materials.
-= Maarten =-
Software Engineer * MVP-Visual Developer-VSTO
------------------------------------
Reply:
I've KNC ONE DVB-C and same problem with this card.
Scan find nothing but I can remember directly after installation of OS I've see one ZDF channel only.
Then I've check the ID for this channel, before I start searching for channels, and see ID was 2.28006
So now I try to put this in channel list but the problem is that you can put 3 char before and after the point only. Like xxx.xxx
So my proposal is to find the configuration file and change them by hand. If anybody/MS Staff knows this file please give us the information.
------------------------------------
Reply:
------------------------------------
Reply:
Isn't there anybody who knows how to change the frequencies of the digital channels??
I'm also stuck at this point. As far as I can guess the channel frequencies are used for ClearQAM, and thats not in use in europe.
So if anyone have any idea of how to add the DVB-C channels to MCE it would be very nice.
Testing DVBLink from DVBLogic at the moment, but stuck here on some memory-issues.
Using DVBViewer for showing at the moment, but that program doesnt show my analogue channels.
MCE is showing my DVB-T channels very fine
Thorvald
------------------------------------
Reply:
After I heard from Technisat, that my Skystar 2 PCI (not Skystar HD2) will not work with Windows 7 Media Center, I bought a KNC One Cable Star +. After several trials, I found a way to get some channels but no real channel list ....
1. You have to search for channels under Signal ... Windows MCE will say no channels found ...
2. Go to the setting where you can change the channels and thick each channel you see in the list ...
The problem is there are not all channels and you will not have a EPG :-(
Is that a bug in W7 MCE or is that coming from the driver of the DVB-C card? Pls. answer me soon that I can send back my card. So I will look to get a Hauppauge HVR-4000 there I know it is working well with W7 MCE ... onliest problem there it is a satelite card ...
Edit:
In the meantime I have contacted the support of KNC One and they told me it is a problem of the Windows 7 Media Center. It supports right now only the US Channels.
If anybody from MS is reading the message ... Will there be an patch in the future for the Media Center to support DVB-C and also EPG in DVB-C or not? If yes when do you think it is finished?
Thanks,
Carsten
------------------------------------
Reply:
Hi,
Still a "no go" on Terratec Cinergy C PCI HD tuner card, as reported in the top >long time ago<
Kobo3, you asked MS a question. Actually I think it is strange that Microsoft is so quit. A small hint like "yes we do expect" could be enough to keep a lot of people wait for the update. But with the silence they force people to find alternatives and I guess it is much harder to get people back to the MCE again.
If only MediaPortal was supporting Win7, I would stay there, but unfortunately it does not run stable on my Win7. But it did find all my DVB-C channels, fast and easy. On a drop down box I selected the country (Denmark) and the provider (YouSee) and quickly it found all the channels.
Earlier in this thread somebody asked if it is possible to add a channel list manually. Please see the link below, maybe some of you have the knowledge and guts to try the experiment, and see if it is possible with DVB-C also.
http://forums.techarena.in/mediacenter/1197400.htm
Let's all hope that Microsoft on day will respond, until then I would be grateful if anybody could tell me if the "perfect" Media Center software is out there ready for windows 7 and the Terratec Cinergy C PCI HD tuner card.
Thanks,
Peter
------------------------------------
Reply:
For those that have problems using DVB-C in Windows 7 (or Vista for that matter), try to see if DVBViewer works on your system.
If you can get DVBViewer to show the channels, get DVBLink to send the channels to Mediacenter. I've used it on Win7 for months (since RC1) and it's very stable, effective and fast.
Basically the software can get any channel that displays correctly in DVBViewer to show in Mediacenter. You can choose which channels are passed through, which channel number they will get in Mediacenter, and to which guide listing they should be mapped. It also has some more advanced features should you wish more possibilities.
- Edited by Selcal Thursday, November 12, 2009 11:45 AM Mistyped software name
------------------------------------
Reply:
------------------------------------
Reply:
------------------------------------
Reply:
Regards
Jack
------------------------------------
Reply:
Microsoft should learn, that the world (using MS Products) is not just oh big great US of A, but e.g. Europe also.
Microsoft must add the correct cable frequencies for Europe and all the other nice countries for it to work with DVB-C everywhere.
A quick fix (but it will not find all of the channels) is to add a frequency adjustment in the registry... but the result of it not finding all of the channles is still dissatifying!
------------------------------------
Reply:
Today I've read an article at www.firedtv.nl that there is a new method of receiving cable tv in mediacenter with HD channels which seems to work great (according to their test) and it is the anysee E30C Plus. I did not test it myself yet but plannign to order 1.
Regards
Jack
I just bought myself the Anysee E30TC Plus (Digitenne/DBT-C) and my first impression is very positive. The EPG is installed without manual interaction and all channels, including the HD channels all seem to work great.
Here is a test (Dutch) http://www.firedtv.nl/cms/upload/review_anysee_e30c_plus_hardware_info.pdf
For what I've seen today I recommend to have a look at this device for your Digital Cable TV within Media Center.
Tested setup:
- Windows 7
- Ziggo Network ID 8888 (The Netherlands, DBT-C)
- Anysee E30TC Plus
-= Maarten =-
Software Engineer * MVP-Visual Developer-VSTO
------------------------------------
Reply:
But... don't you have any issue with HDTV in Live TV?? I'm working now with DVBLogics TVSource, channels go well, but HDTV channels don't show correctly, seems to be a problem with the microsoft dtv-decoder... and there is none for replacing it in LiveTV... i see only some green squares and then the image stops.
------------------------------------
Reply:
Interesting News. Will look forward if i can get that Anysee in Switzerland.
But... don't you have any issue with HDTV in Live TV?? I'm working now with DVBLogics TVSource, channels go well, but HDTV channels don't show correctly, seems to be a problem with the microsoft dtv-decoder... and there is none for replacing it in LiveTV... i see only some green squares and then the image stops.
No, the HDTV is perfectly clear for what I've seen so far ... (and our main three national channels are HD so I've already watch quite a bit)
-= Maarten =-
Software Engineer * MVP-Visual Developer-VSTO
------------------------------------
Reply:
No, the HDTV is perfectly clear for what I've seen so far ... (and our main three national channels are HD so I've already watch quite a bit)
Then the source seems to be decoded by the Anysee and not by Microsoft? Cause there are a lot of people with problems watching HD in LiveTV, especially with an ATI Graphic Card. I'm following some forum threads in German...
------------------------------------
Reply:
------------------------------------
Reply:
The press release here says it plans to release dvb-c in europe but does not give a date maybe somone could give a timescale
http://thedigitallifestyle.com/cs/blogs/ian/archive/2009/09/10/microsoft-and-partners-help-media-companies-innovate-in-a-digital-world.aspx
------------------------------------
Reply:
Where did you buy the Anysee E30TC Plus?
------------------------------------
Reply:
I bought mine on the internet at www.firedtv.nl (Dutch).
-= Maarten =-
Software Engineer * MVP-Visual Developer-VSTO
------------------------------------
Reply:
Btw, did anyone get the card recognized in Vista Media Center? I didn't, but 7 Media Center found it. But can't do much with it yet...
------------------------------------
Reply:
------------------------------------
Reply:
Just use DVBLink TVSource and it works very fine. For 30$ it's worth it!
In theory yes, but on a ATOM system the performance is to weak to run a stream in the background..
I'm just wondering why it's that big problem to add the european/german DVB-C settings to WMC?! can't be so difficult for Microsoft to do this..
Microsoft? Hello?
------------------------------------
Reply:
------------------------------------
Reply:
Simply use another tool: i.e. Media portal on Ubuntu as $$$ is the only language they understand... :-)
------------------------------------
Reply:
------------------------------------
Reply:
With help from the people in this thread I now have working DVB-C channels in Windows Media Center on Windows 7 Ultimate. My tv provider is Yousee (Denmark) and my tuner is a Hauppauge WinTV HVR 930C USB. I simply used the DVBLink mentioned here and a followed the manual which comes with DVBLink to setup DVBServer and then getting the tuner and channels to work in Windows 7. It was very simple actually when following the manual from DVBLink and took me about 30 minutes to fix it all. Now I know it works so I just need to order the CI adapter for my tuner and a CAM so I can get the HD channels as well.
So if anyone in here is from Denmark and has Yousee Cable TV then I can confirm that dvb-c will work on Windows 7 Ultimate with a Hauppauge WinTV HVR-930C.
Thanks to you all for all the good input which helped me solve my problem.
------------------------------------
Reply:
------------------------------------
Reply:
So if anyone in here is from Denmark and has Yousee Cable TV then I can confirm that dvb-c will work on Windows 7 Ultimate with a Hauppauge WinTV HVR-930C.
Hi!
What settings are you using exactly? I have YouSee (in Frederiksberg, Copenhagen), HVR-930C, and Windows 7 Home Premium, but still cannot find any channels with DVBLink...
It works fine in WinTV 7, it finds 236 DVB-C channels, so it is not a hardware issue.
I use headend "Yousee Cable (Denmark) - Use with Network Scan", transponder 143000,H,6875 (the only one listed). What do you use?
When I do a Network Scan, it just freezes and nothing happens. It freezes so much that I can't kill it with Task Manager or even boot. It just sits there with this:
Searching networks on 143000,H,6875
I have left it running like that for as much as 5 hours.
When I try a regular scan instead, it stands still at "Tuning..." for hours, and then aborts with this:
Tuning transponder 143000,H,6875
Tuning failed
-------------------------------------------------------------------------------------------------------
Totals: 0 services found, 0 new services, 0 updated services
Brgds
Danny
------------------------------------
Reply:
Hi!
Forget about that - I uninstalled it, reinstalled it, and now it works... Go figure.
BUT - which Network did you use?? There are 199...... To scan all would take millions of years. The ones I've scanned so far are missing many channels, such as TV2 Danmark, TV2 Charlie, TV2 Zulu, 6eren, TV4 Sverige. These are all supposed to be free unscrambled channels.
Brgds
Danny
------------------------------------
Reply:
Hi!
Sorry to be such a nuisance, but now you can forget that too... After scanning a bunch of other networks I found one which has them all. It is called "Under 18". Silly me, I thought that would be a collection of childrens channels... :-) I tried things like the "Copenhagen" network, the "Actual" network etc. but apparently it is "Under 18" for me.
But I don't understand why I have to go through all this Network Scanning business to start with. Hauppage WinTV 7 found all the channels fine in minutes, without me having to select network...! So why can't TVSource do the same?
Brgds
Danny
------------------------------------
Reply:
DVBLink TVSource is a bad workaround. Alot of overhead killing the CPU and adding power management problems.
Win7 should really support it natively, what is the problem :'(
------------------------------------
Reply:
Also in DK, but on Stofa kabel TV - using DVB Link aswell, it is alot slower than native DVB-T tuners in MCE, but working fine apart from that.
Using DVB link server feature, gives the added value that all my other pc's running 7 can connect to the one tuner i my media center, with the Terratec tuner, and show channels everywhere.. ALSO via the internet, whilst travelling, wery clever.
------------------------------------
Reply:
I have to agree with you Kent... alot of CPU overhead added.
I will try to plug inn my old FIREDTV box from digital everywhere via firewire in the near future, and see if i can get i to act as DVB-T towards MCE; and show my DVB-C channels from Stofa.
------------------------------------
Reply:
Hi!
I have not found DVB Link to be slower, at least not noticeable. I'm very happy with it.
Brgds
Danny
------------------------------------
Reply:
Just to inform, Digital Devices has done a deal with Marco at Digital Everywhere and has the rights for FloppyDTV /C
http://shop.digital-devices.de/epages/62357162.sf/de_DE/?ObjectPath=/Shops/62357162/Products/096005
Before installing do a check or search for a Transponder file that suits your needs, or correct one in the \transponder directory. The transponder fil is a .reg file so remeber to run it after install and before channlescan in VMC.
Remember Cam
No XP
In Vista with TV-Pack you need decoder for Mpeg4/H.264 if your provider use this for HD
In Win7 everything is ready for H.264 HD.
Willy
------------------------------------
Reply:
Sorry, been out of the lope for while, are u saying that MS7 media center support CAM`s ?
I have a windows 7 media center that seem unable to show scrambled channels.
(i got a CAM and card.)
------------------------------------
Reply:
so whats going on ? im from Hungary and im planning to buy Terratec Cinergy C PCI HD TVtuner but after i read this forum i'll think about it twice :)
i think its should working here .. why ? i dont know im just feel so :) i have provider DIGI and its cheap and they broadcast analog and digital as well for me. my TV is found everthing working great and if so why it would not working with MCE i still dont understand... maybe someone can give me direction if its will work ? i saw that you wrote some frequency's maybe if i telling mine you can tell me if its will working or not ? sorry i little noob in this area :) anyway.. i pay for 27 channels and i only want that 27 digital channels with guide working on windows media center...
if i cehck my TV setting its says:
Frequency(kHz): 370000
Symbol rate (kS/s) : 6900
Modulation: 256QAM
Its say something to someone ? :P
------------------------------------
Reply:
Barb Bowman
------------------------------------
Reply:
------------------------------------
Web forums may cause poor typing performance and character loss
I have had many issues with this forum and the Microsoft blogs. I had thought it was my system that was entirely responsible but have never been able to completely resolve the issue;
Here is a new KB documenting this issue.
http://support.microsoft.com/kb/2665220/en-us?sd=rss&spid=3198
Hopefully Microsoft will apply the fixes to its forum and blog sites. Mkaing the change to the client registry may have a possibly negative impact on other sites.
jv
- Changed type jrv Saturday, January 21, 2012 5:40 PM
Reply:
Mkaing the change to the client registry may have a possibly negative impact on other sites.
jv
Why not use a different browser?
At second thoughts, misspellings such as "Mkaing" would suggest clumsy fingers combined with a lack of proof reading rather than slow keystroke processing by the browser.
- Edited by Frederik Long Saturday, January 21, 2012 6:03 PM
------------------------------------
Reply:
Grant Ward, a.k.a. Bigteddy
What's new in Powershell 3.0 (Technet Wiki)
Network Live Audit - Powershell script------------------------------------
Reply:
I have never had problems of this kind with this web site. I type fast. I use IE9.
Grant Ward, a.k.a. BigteddyWhat's new in Powershell 3.0 (Technet Wiki)
Network Live Audit - Powershell script
It is an isssue that does not affect IE9.
jv
------------------------------------
Reply:
Mkaing the change to the client registry may have a possibly negative impact on other sites.
jvWhy not use a different browser?
At second thoughts, misspellings such as "Mkaing" would suggest clumsy fingers combined with a lack of proof reading rather than slow keystroke processing by the browser.
I didn't say that everything was caused by thiws. It is one issue that I have noticed. Typingg into a web page can become extremely slow. I can hit a key three times and have only two characters appear. Setting the regstry value seems to improve that.
Transposing left-right characters is my Lyme affecting the nerve signalling.
A different browser would not help here.
I see that no one actaully read the KB article which was just published today. It is pretty explicit.
jv
------------------------------------
Reply:
Transposing left-right characters is my Lyme affecting the nerve signalling.Your prolific output would be only slightly reduced if you wrote your replies in an MS Word session (with activated spelling and grammar checking), then copied and pasted the corrected text into the forum screen. All it takes is a few Ctrl+A, Ctrl+C, Alt-Tab and Ctrl+V keystrokes, or a few mouse clicks.
------------------------------------
Reply:
Transposing left-right characters is my Lyme affecting the nerve signalling.Your prolific output would be only slightly reduced if you wrote your replies in an MS Word session (with activated spelling and grammar checking), then copied and pasted the corrected text into the forum screen. All it takes is a few Ctrl+A, Ctrl+C, Alt-Tab and Ctrl+V keystrokes, or a few mouse clicks.
I would rather hire a secretary.
Forums and email should not be about formal writing. We do what we can.
I used to produce hundreds of pages of goo documentation. The company I worked for made me write the sales projects in the wee hours of the nights. If I was getting paid for this I might worry about it.
Again - I only posted this in case others were seeing similar issues. I did not intend it as a blanket cover for all of my too human mistakes.
Go ahead Pegasus. I dare you to make a mistake. It is now blazing guns at high noon. Grrr!
Pegasus? Hmmm - where have I heard that name before? I hear that your mother, Medusa, was quite the old gal. Didn't she make a few interesting mistakes? I am sorry that your mother lost her head. Perseus was way overboard on that one.
jv
------------------------------------
Reply:
I see that no one actaully read the KB article which was just published today. It is pretty explicit.
jv
I did read the document you referred to. My first thought upon reading this was "The computer is too slow".
I have a fast computer now, but before this, I had an ancient IBM PIII, and on some websites, CPU usage would go to about 80% just sitting at a page!
Grant Ward, a.k.a. Bigteddy
What's new in Powershell 3.0 (Technet Wiki)
Network Live Audit - Powershell script------------------------------------
Windows Live Mail and encrypting of mail messages. Cipher strength.
I have a email certificate. When I tried to send encrypting email, I saw a warning that the message can be encrypted only with 40-bit cipher strength, while in settings of my account the algorithm is 3DES(168 bit). I allowed it(for testing purposes) and now I haven't got any warnings. Why? What actually cipher strength? 40-bit???
Where is in windows settings(may be in registry?) or in Windows Live Mail settings I can set up the strength of the encrypting algorithm? And also how can I see with what cipher strength a email was actually encrypted?
- Changed type Niki Han Monday, January 23, 2012 2:03 AM
Reply:
If you want to encrypt your e-mail, it is best not to use an e-mailing client. I would suggest you use openSSL to encrypt using AES keys. Make a private key, then generate a public key off the private key. Give the person you are sending the message to the public key through a secure VPN tunnel, a thumb-drive, or any other way that avoids direct contact to the unsecure internet. (does not include facebook or other email). I would suggest thumbdrive, it is always the safest way ( if the thumbdrive is yours ) to pass information. Then encrypt your email messages with the private key before sending them to your friend with the public key. Your friend can then unencrypt the file using the public key.
If you are looking for a secure method to save all emails with encryption, I'm sorry, it doesn't exist. Nothing is safe on the internet. But if you want it to be more secure, then you should buy service from a well known email security system.
Also, for the generation of the AES keys, I would suggest AES-512. Email's are small so encryption and decryption won't take a lot of time.
Good luck!
Freddie Rice
------------------------------------
Reply:
Thank you for answer. I know about what you speak. But I want to know why this happens in Windows Live Mail and what is the strongest key length that can be used for symmetric algorithms in it.
- Edited by Sergey007 Wednesday, January 4, 2012 6:17 AM
------------------------------------
Reply:
Hi,
After you allow the warning, the computer will remember your configuration and no longer prompt for the same warning. If you want to know where the setting is, it is Windows Live Mail related, I recommend to post in Windows Live Mail.
http://windowslivehelp.com/forums.aspx?forumid=df04ff8d-44a2-41d2-bca1-dc015525e81c
Niki Han
TechNet Community Support
------------------------------------
Reply:
Hi,
After you allow the warning, the computer will remember your configuration and no longer prompt for the same warning. If you want to know where the setting is, it is Windows Live Mail related, I recommend to post in Windows Live Mail.
I created 2 topics on http://windowslivehelp.com
There are no answers.
- Edited by Sergey007 Sunday, January 22, 2012 1:36 AM
------------------------------------
in WIndow Server 2008 can not run cmd.exe as different user
hi
I am doing window server 2008. Now I want to run cmd.exe as different user.
But it gives error that
RUNAS ERROR: unable to run cmd.exe
I had tried by wrirting command
runas /user:username cmd.exe
here username is my user name .user name & password is proper .
cmd can not be run .
I had also tried by pressing shift key & the clicking cmd.exe icon to get option "run as different user" but i dont get it in window server.
it is possible in window 7 but it can not be done in window server 2008
can you please help me for that?
Reply:
This Forum is for Windows Vista.
Post this question in the "Windows Server General" Forum at the following address
http://social.technet.microsoft.com/Forums/en-us/winservergen/threads
Bye.
Luigi Bruno - Microsoft Community Contributor 2011 Award
------------------------------------
ODBC
sir i have a problem with creating odbc connection in windows7 homebasic
my domain is java
and the error is java.sql.SQLException: [Microsoft][ODBC Driver Manager] The specified DSN contains an architecture mismatch between the Driver and Application
java.lang.NullPointerException
but my same project is working in windows xp
please give a solutrion for my problem
thanking you
Reply:
Take a look at the following link
http://msdn.microsoft.com/en-us/library/windows/desktop/ms712362(v=vs.85).aspx
Bye.
Luigi Bruno - Microsoft Community Contributor 2011 Award
------------------------------------
DirectAccess Client unable to connect
Good afternoon -
My client is unable to access the DirectAccess server.
Role : client
URL : https://directaccess.domain.org:443/IPHTTPS
Last Error Code : 0x274d
Interface Status : failed to connect to the IPHTTPS server. Waiting to reconnect
Type : client
Server Name : 67.139.x.x (Group Policy)
Client Refresh Interval : 30 seconds
Client Port : unspecified
State : offline
Error : client is in a managed network
C:\Users\administrator>netsh interface 6to4 show relay
Relay Name : 67.139.x.x (Group Policy)
Use Relay : default
Resolution Interval : default
Weird thing. I dont see a 6to4 tunnel adapter in IP Config.
Windows IP Configuration
Host Name . . . . . . . . . . . . : DATest
Primary Dns Suffix . . . . . . . : domain.org
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : ccht.org
mindit.local
Wireless LAN adapter Wireless Network Connection:
Connection-specific DNS Suffix . : domain.local
Description . . . . . . . . . . . : Dell Wireless 1395 WLAN Mini-Card
Physical Address. . . . . . . . . : 00-1F-E1-10-42-D0
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::7c6e:d3e5:51a1:c2d1%13(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.25.57(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Wednesday, January 18, 2012 4:29:57 PM
Lease Expires . . . . . . . . . . : Friday, January 20, 2012 3:19:25 PM
Default Gateway . . . . . . . . . : 192.168.25.254
DHCP Server . . . . . . . . . . . : 192.168.25.4
DHCPv6 IAID . . . . . . . . . . . : 318775265
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-16-4B-65-83-00-1D-09-CE-00-D8
DNS Servers . . . . . . . . . . . : 192.168.25.4
Primary WINS Server . . . . . . . : 192.168.25.4
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Local Area Connection:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit Controlle
r
Physical Address. . . . . . . . . : 00-1D-09-CE-00-D8
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.mindit.local:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : domain.local
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 11:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Teredo Tunneling Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter iphttpsinterface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : iphttpsinterface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Any ideas?
Reply:
Ok, I manually added the 6to4 adapter in Device Manager and now see it in IPCONFIG. However it is not getting an IPv6 address and reads as disconnected.
Tunnel adapter Local Area Connection* 9:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft 6to4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
How can I make sure that the DA server is ready to accept requests? Is there a web site I can browse to, externally, to see that traffic at some level actually makes it to the DA server? Kind of like you can Telnet in to a mail server.
------------------------------------
Reply:
FYI DA Group Policies have been applied to this client.
However, when I try and browse to the DA server's externally facing website, I cant get there. Just says Page Cannot Be Displayed. Tried from client computer and another non-domain joined member. https://directaccess.domain.org/ and https://directaccess.domain.org:443/IPHTTPS
I also dont see anything is security associations>main mode. From doing research it appears that there should be something in here. Not sure if it is something I need to configure or if this gets populated once the computer is able to connect to the DA server.
- Edited by Mind IT Thursday, January 19, 2012 10:23 PM
------------------------------------
Reply:
Hi,
It us normal you cannot reach https://directaccess.domain.org:443/IPHTTPS but you should be able to reach https://directaccess.domain.org/ .If not you may have problem with your IPHTTPS certificate. According to the IPHTTPS error code, you might have a problem with IPHTTPS. Are you sure you can download the CRL for this certificate?
Benoît
BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx
------------------------------------
Reply:
Hi Benoit -
Thanks for you assistance.
What didnt work
Outside the network
http://directaccess.domain.org/CRLD
https://directaccess.domain.org/CRLD
http://directaccess.domain.org:6001/CRLD
https://directaccess.domain.org:6002/CRLD
Inside the network
http://directaccess.internaldomain.local/CRLD
What did work
Outside the network
Nothing worked to access the CRL outside the corporate network
Inside the network
http://directaccess.internaldomain.local:6001/CRLD
https://directaccess.internaldomain.local:6002/CRLD
https://directaccess.internaldomain.local/CRLD
Not sure if this is the correct behavior, it seems that the CRL should be accessable remotely. As a test, I added a rule that I think should allow all HTTP and HTTPS traffic from the internet to the DA server where the CRL is hosted. However I still get "Internet Explorere cannot display the webpage".
I appreciate the help.
------------------------------------
Reply:
Hi
The CRL must be accessable remotely If and only if your IPHTTPS certificate was delivered by your internal CA. If it the case, you need to publish the CRL. With DirectAccess, it's a little bit more complicated because you cant directly use the TMG provided by UAG. You need to create a portal trunk a explained in a Tom Shinder post : http://blogs.technet.com/b/tomshinder/archive/2010/08/03/how-to-configure-uag-to-publish-your-private-certificate-revocation-list.aspx
My recommandation is to use a IPHTTPS certificate delivered by a public CA.
Benoît
BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx
------------------------------------
Reply:
Is there anything special that I need to consider when buying an IPHTTPS certificate? Or is it just a plain old SSL Certificate like this? Where do I generate the CSR? Does it get attached to the CRL website on the DA/UAG server?
Standard SSL (single domain $69.99)
http://www.godaddy.com/ssl/ssl-certificates.aspx?isc=bb5060d60&ci=55902
Thanks
------------------------------------
Reply:
I absolutely agree. Your certificate for IP-HTTPS should be one from a public CA, far too many people have had posts just like yours by trying to use an SSL cert from their own CA on the IP-HTTPS listener.
Also, don't worry too much about 6to4. It is hardly ever used and I actually recommend disabling the 6to4 adapter on all client computers during my DirectAccess installations.
Teredo cannot connect because you are sitting "inside a managed network" - if you change Teredo to Enterpriseclient status it might connect. Keep in mind, even if this works you still have a problem with your IP-HTTPS certificate. The command to change Teredo on your client machine is netsh interface teredo set state enterpriseclient
Also, you SHOULD be able to successfully browse to https://directaccess.domain.org:443/IPHTTPS from a machine on the internet. You don't necessarily get a webpage, just a 403 error, but when IP-HTTPS and the certificate are working properly you will get a 403 page with no certificate warning messages when browsing this site.
------------------------------------
Reply:
It is just a SSL certificate just like for a webserver. Since UAG 2010 SP1, you can also use Widlcard certificate.
Benoît
BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx
------------------------------------
Reply:
Yup, just a regular SSL certificate. You can generate the CSR from within IIS7 on the UAG server. After you receive the certificate from your CA (GoDaddy) you import it back into IIS7. Then you specify the certificate during the UAG DirectAccess wizards, the second screen of Step 2 where you define the certificate for IP-HTTPS.
By using this certificate you are allowing GoDaddy to handle the CRL for you on their servers. You do not need your own CRL website published any more.
- Edited by Jordan Krause [IVO Networks]MVP Friday, January 20, 2012 1:42 PM
------------------------------------
Reply:
This is great information. Thank you both for the assistance. DA is not so simple to setup (at least your first time).
Just for clarification. When I generate the CSR, I should put (obviously replacing domain.org with my actual domain name)?
------------------------------------
Reply:
------------------------------------
Reply:
Ok, I have done this but it is still not working.
I got a trusted certificate from GoDaddy for the public hostname used for DA (directaccess.domain.org)
CSR was generated from IIS7 on DA server
Installed the intermediate certificates on the DA server (local computer account)
Completed the CSR in IIS
Re-ran step 2 on the DA wizard
Specified the GoDaddy certificate I just purchased
Applied the policy
Activated the policy
Client still wasnt connecting
Verified that it is outside the corporate network (netsh dns show state)
IP config showed that I still dont have an IPv6 address on the 6to4 adapter (although one other post says this doesnt matter)
I still cannot access https://directaccess.domain.org:443/IPHTTPS externally (not even a 403), do I need to do some work on the UAG? Does my screenshot above look right (UAG rule)?
Should I do a gpupdate /force on either the DA server or the client to implement the new certificate? I wouldnt think so, but there are a lot of variables here and it is easy to get lost in all of the settings.
I am about to try the recommendation above netsh interface teredo set state enterpriseclient
How do I undo this if it doesnt work? I am a little wary of this because all of the examples I have found (with screenshots) on the net are using 6to4.
- Edited by Mind IT Friday, January 20, 2012 8:15 PM clarification
------------------------------------
Reply:
You may have missed a step in the activation process. The correct process to take whenever you make any change in the UAG wizards is this:
1. Make the changes (your choosing the certificate in Step 2)
2. "Apply Policy" which pushes the new settings into the GPOs
3. "gpupdate /force" on the UAG server to pull those new settings down
4. "Activate" from inside UAG
5. "gpupdate /force" on the clients to grab the new settings (or simply wait and allow the GPO to get updated naturally)
If you cannot browse to https://directaccess.domain.org:443/IPHTTPS and get the 403 page with no certificate warnings, something is definition not right with IP-HTTPS. Do you have a firewall in between the internet and the external NIC of the UAG server? Make sure you have TCP 443, UDP 3544 and IP Protocol 41 open on it if you do.
I would definitely set Teredo to Enterpriseclient status. I recommend that you do this permanently for all of your DirectAccess computers via a GPO (and disable 6to4 on all of your DirectAccess clients computers using the same GPO). 6to4 is only ever used if your client computer gets a real public IP address (like from a cell phone card), 6to4 will never connect when the user is sitting behind a NAT like a home router. And in the rare cases that 6to4 does actually connect, half the time the ISP blocks IP Protocol 41 which kills your DA connection. Better to disable the 6to4 adapter and let Teredo do the job in its place.
You can change Teredo back to it's regular status by running netsh interface teredo set state client
(though I don't recommend this, as then Teredo will no longer be able to connect from inside a domain-joined network which is exactly what is happening to yours right now)
------------------------------------
Reply:
Also, the screenshot of the rule in TMG - did you create that rule yourself? If you did, delete it. Only in very special circumstances are you ever to touch TMG on a UAG server, and creating a rule like this is not one of those circumstances.
Delete the rule (assuming it is one that you created manually) and then Activate UAG again. UAG populates all of the rules that it needs to function in TMG automatically.
------------------------------------
Reply:
I did create that rule and I will delete it. I did it not understanding why I cant get to that /IPHTTPS web page. I get page cannot be displayed and no indication that there is a certificate to view (trusted or untrusted).
The public side of the DA server is wide open, no ports to forward. I am trying to get this DA scenario setup and running as simply as possible (so I can understand it thoroughly) then I will get back in and make it more secure.
Will also go through the numbered steps above and take you recommendation of permanent Teredo useage. You recommend that I completely disable 6to4? netsh interface 6to4 set state disabled?
------------------------------------
Reply:
If I try and access https://localhost:443/IPHTTPS from the UAG server itself I get the following error
------------------------------------
Reply:
Yes, I recommend disabling 6to4 (on the clients, not the server). It's your decision but that is what I do on installations. You can do it on a per-PC basis with the netsh command, or create a GPO to accomplish both the disabling of 6to4 and the setting of Teredo to Enterpriseclient status at the same time. Remember, both of these settings are things you want to do only on the client machines, not on the server.
That 404 page is normal when accessing the way you did. However, if you enter the correct URL - https://directaccess.domain.org:443/IPHTTPS from the server you should also get the normal 403 response.
------------------------------------
Reply:
Ok, that worked. I got a HTTP 403 Forbidden when accessing with the public DNS name.
Any ideas why I cannot get the same behavior from an offsite client (or for that matter and clients inside the network)? Would it have anything to do with Windows Firewall? It says that Forefront Threat Management Gateway is managing it (so I expect the answer is no).
Directaccess.domain.org is resovling to the public IP of the DA/UAG server properly.
I have two other custom rules to allow remote access of the server, otherwise the rest was configured by the wizard.
Thank you for the insight into Teredo. I think I will take your advise. It makes good sense.
------------------------------------
Reply:
Remove these rules also and then re-activate UAG again. The correct way to allow RDP access is by adding IP addresses or IP address ranges into the "Remote Management Computers" computer group definition. In TMG, go into the Firewall Policy section and on the right-hand side expand the "Computer Sets" folder and go into the Properties of "Remote Management Computers". Any IP addresses that you want to have RDP access to the UAG server, add here.
You definitely don't want that "allow all" rule in there - huge security risk.
Feel free to email me the real public DNS name and primary IP address of your UAG server. I'll run a quick test and see if I can validate any connectivity from here.
Jordan.Krause@ivonetworks.com
------------------------------------
Reply:
- Edited by Mind IT Friday, January 20, 2012 11:09 PM
------------------------------------
Reply:
To recap there were a number of issues that needed to come together to resolve my problem.
IIS-HTTPS certificate was self signed and thus needed a CRL published on the internet side of the DA server. This configuration is complex to setup with TMG/UAG and it is advisable to get a standard trusted certificate with the public DNS name of the DA server, in my case directaccess.domain.org (which I did). My certificate ran $13 at GoDaddy.
Non-standard rules were applied to Forefront TMG in attempt to allow access to the DA server's website and RDP. These were removed and reapplied in the correct recommended fashion. Root problem explained later.
DA clients were set to use 6to4 which doesnt work behind NAT devices. Per Jordan's recommendation I switched to Teredo and disabled 6to4, a simple command line entry for each. Can be applied via batch script or GPO. ****NOTE**** you should NOT run these commands on the DA server.
Possible non-application of settings. Re-applied and activated UAG settings and reapplied GPOs in order recommended by Jordan's post above.
Root problem from above. Reinspected the Interface settings in UAG Management (Admin menu > Interface Settings, the interfaces were defined correctly, but the internal IP ranges were not, it included all IPs Public and Private. Removed everything and added my actual internal IP range of my corporate network. This was the last step taken and as soon as this was resolved I was able to get the 403 error on https://directaccess.domain.org/IPHTTPS which indicated that the blockage was removed (see above for more on the positive 403 indicator).
Everything is working correctly now and clients are able to connect.
THANK YOU Jordan and Benoit!
------------------------------------
Reply:
Jordan done most of the job.
The key element in a DirectAccess deployment is to follow DA prerequisites. That the secret. I've performed multiple DA project and prerequisites problems were always the root cause of problem encountered during deployment.
Second secret : Dot it simple by design for the initial deployment, validate it work and then add new features (smartcars, NAP, ...). It is easier to troubleshoot each element separately.
BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx
------------------------------------
License details for language pack - Hindi licensing for Windows 2008 R2 Enterprise, MOSS2007
Hi,
I need clarity of the following Licensing related to Language pack Hindi.
Windows Server 2008 R2 Enterprise, MOSS2007 Enterprise licenses will cover Language pack for Hindi by default or any special license to be purchased from Microsoft?
Regards,
Sathiyanarayanan Gopal
Reply:
Hi,
This is a MOSS 2007 question and should be posted to the Pre SharePoint 2010 forum here:
http://social.msdn.microsoft.com/Forums/en-US/user/forums
Thanks, Soumya | MCITP, SharePoint 2010
------------------------------------
Windows 7 on Asus Eee PC 1015PE
Tmull65
Reply:
I have an Asus Eee PC 1015PE Netbook, and was doing the F9 Restore and the computer could not boot. Now i can get it to load just that it wants a Hard Drive password and i have no idea what it is.
Microsoft policy about lost or forgotten passwords:
http://support.microsoft.com/kb/189126
It sounds like you got the install media from the OEM computer manufacturer, if so that are modified OEM Windows 7 install media (they are not install media from Microsoft) and the best answer may come by contacting the OEM computer manufacturer because the modifications they made make the install process different then normal install media.
Contact information for the manufacturer of your computer can be found here:
http://support.microsoft.com/gp/oemphone/
ASUS - How to Recover Your PC With the Recovery Partition:
http://support.asus.com/Search/KDetail.aspx?&no=1775&t=1
ASUS - Contact Us:
http://support.asus.com/contactus.aspx
------------------------------------
Reply:
Tmull65
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
------------------------------------
No comments:
Post a Comment