Ever wonder what all plays nicely w/ Windows8?
Do take a look @, through this... you may be pleasantly surprise or, even, relived.
https://www.microsoft.com/en-us/windows/compatibility/en-US/CompatCenter/Home
Cheers,
Drew
Drew MS Partner / MS Beta Tester / Pres. Computer Issues Pres. Computer Issues www.drewsci.com
is it safe to delete C:\Program Files\Microsoft SQL Server \100\SetupBootstrap\Update Cache in SQL Server 2008 SP3
HI All,
Is it safe to delete C:\Program Files\Microsoft SQL Server \100\SetupBootstrap\Update Cache in SQL Server 2008 SP3 after SP3 installation.
It creates around 1.5 GB of backup of Service Packs.
And also is it safe to delete C:\Program Files\Microsoft SQL Server \100\SetupBootstrap\Logs.
We will not be unistallating and will not be doing repair on our machines.
Reply:
It looks like it's not a good idea to delete the 'Update Cache' files without backing them up somewhere first, however the 'Logs' files should be ok to delete (best to take a backup to be on the safe side in case you need them for future reference)
------------------------------------
Server Agent Jobs
Hi all.
I'm a newbie when it comes to the securty implications of running overnight jobs via Server Agent. I'd like to pick your brains on how people take a view to this. Here's my scenario:
I currently have a job that has three steps that encompasses 3 databases - two on one server (base_server) and another db on another (ext_server).
What i am currently doing is running all of these jobs on the base_server with a logon specifically generated for running overnight jobs (account1). account1 is the owner of the job. This login is also present on the ext_server, specifically created for the purpose of logging into ext_server via linked server. This account has basic server permssions on both servers but has datareader and datawriter permissions on all databases concerned.
As i'm new to this, this is (as far as i know) the nly way to get the job to function correctly between 2 servers and/or 2 databases on one server (base_server). Are there any security implications on the method of what I have just described? Is creating 2 logins on two different servers the way to go for this type of job or is there a more efficient/secure method of doing this? Would proxy accounts be a way to go? If so, how can I implement them with basic update query steps (as these are)?
Any questions let me know.
Thanks.
Reply:
Are they servers are sitting on same domain then you can grant permissions on dbs to sql agent services account -
Or you can create proxy account and grant the permissions on dbs / grant update permission as it required and run the job under this account
http://uk.linkedin.com/in/ramjaddu
------------------------------------
Exchange 2010- catch emails which are not delivered.
Hi,
Can some one please help!!!
I have got exchange 2010 in my domain just completed the migration i need to set up a mailbox that only catched the undelivered emails. Please let me know if thats possible i URGENTLY need a solution. thank you heaps.
Cheers
Katty
Reply:
Hi
I believe a transport rule could achieve your goal.
Refer to this article for more information:
http://technet.microsoft.com/en-us/library/bb691132.aspx
Regards
Lionel
------------------------------------
Reply:
Thanks Lionel for your reply i dont have an edge transport server to configure this.
Is there any other way to configure with the use of the edge server?
cheers
Katty
------------------------------------
Reply:
------------------------------------
Reply:
You can do it on the hub transport as well.
How can i do these on HUB Transport? do you have any source i could refer to please.
------------------------------------
Reply:
Hi
I'm not sure of a source that describes this exactly, but here goes:
- Open Exchange Management Console
- Go to Organization Configuration
- Click on Hub Transport
- Go to Transport Rules tab
- Click New Transport Rule
- Continue following the instructions from the link I sent earlier (from Step 3, line 4).
This is for incoming mail, if you want it for outgoing mail, reverse the selections of "Inside" and "Outside" organization.
Regards
Lionel
------------------------------------
IE Tile Behavior
> Internet Options > Programs & check the box Open IE tiles on the Desktop.
Ends up practically the same as going to Desktop but, w/ browser there & open @ the onset.
W/ the IE tile, as it is, by default, seemed a bit strange to use or see the point of it.
Just more subjective choices for you, lol
Drew MS Partner / MS Beta Tester / Pres. Computer Issues Pres. Computer Issues www.drewsci.com
- Edited by Drew1903 Wednesday, March 7, 2012 9:56 PM
How to back up me (a one-man IT dept)?
Thanks.
- Changed type Tiger LiMicrosoft employee Wednesday, March 7, 2012 7:55 AM
Reply:
Hi Darpa 2012,
Thanks for posting here.
Outsourcing your IT service is a way we may looking for . We can obtain a list of your local Microsoft partner form the site below:
http://pinpoint.microsoft.com/en-US/home
Some tips for sharing :
Tips for outsourcing your small-business needs
Meanwhile, consider moving our services to cloud is also an option.
Thanks.
Tiger Li
Tiger Li
TechNet Community Support
------------------------------------
Reply:
Tiger Li,
In my question, I'm clearly looking for a person to back me up.
I specifically said I'm not asking to outsource services.
You responded to say I should look to outsource it all out.
Plus you had links to the latest sales pitch for outsourcing it all out.
In summary....
Me: Things are fine, everyone's happy, I just need a backup person.
You: Have someone else take over the entire operation.
With all due respects, this is not helpful.
------------------------------------
Reply:
Hi
You could try looking for someone on oDesk, you can pay by the hour.
Regards
Lionel
------------------------------------
Can Not Force Replicate users between 2 Servers (Exchange 2003)
I have 2 servers. One is the main server used to for connectivity and user name access to the domain. The second replicates the users and usergroups and sets up a database for collective use.
For some Reaons I can not replicate users from the main server to the second server. I either receive a tombstone expiration error. Or a improper naming error.
At this point I am out of ideas. Any suggestions?
Reply:
I recommend that you post your question to the Directory Services forum.
http://social.technet.microsoft.com/Forums/en-US/winserverDS/threads
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
------------------------------------
Can I assign permissions for an entire library in a workflow?
Can I use a SPD 2010 WF to assign permissions to an entire document library? I have a situation where I am making a project site template and there are a number of regional groups that will get these sites but no regional group should be able to see another group's site much less their libraries (about 20 lists/libraries involved). The lists/libraries are already going to be security trimmed according to department such as HR, Finance etc. but I need to be able to allow all leadership for a given region to have access to all libraries within their generated sites.
To make a template for each region with security trimmed libraries for their group besides the normal HR, finace,and other departmental security will result in about 25 templates all with their own custom security and would depend on the person making the site to choose the correct template for the region they are making it for.
Would be sweet for them to be able to make a security trimmed site and fire off a workflow that assigns permissions to each list and library in the new site to the Region leaders involved by choosing the region the site is supposed to be for. One template, one workflow with an input for region involved.
Is this possible? I see stuff for item level permission assignments, but not list/library assignments.
Reply:
Paul Stork SharePoint Server
MVP Chief SharePoint Architect: Sharesquared
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.
------------------------------------
Reply:
Dang it.
------------------------------------
Retrieving blank values using caml
I am trying to retrieve a list containing blank names. The field is of type "Person or Group". The data actually contains some type of space " ". I tried using this but it did not work:
<Query>
<Where>
<IsNull>
<FieldRef Name='personname' />
</IsNull>
</Where>
</Query>
I also tried this:
<Query>
<Where>
<Eq>
<FieldRef Name="personname" />
<Value Type="User"> </Value>
</Eq>
</Where>
</Query>
And I am still not getting any records. Any suggestions?
Thanks Before Hand,
Adiel
- Edited by adiel Tuesday, March 6, 2012 7:56 PM
Reply:
Hi Adiel,
The first approach what you tried is the correct one. I tried the below option and it worked for me.
<Query>
<Where>
<IsNull>
<FieldRef Name='dcterms_creator' />
</IsNull>
</Where>
</Query>
The second option will not work since you are trying to equate the user object with a space which will never be equal.
Thanks
------------------------------------
Reply:
Suneetha, thanks but that did not work. However, I have made some progress in the solution. If I put a dummy value in the where clause which I know will never be null on another field, then it correctly returns the records with the null personname! Here is an example that worked:
<Query>
<Where>
<And>
<IsNotNull>
<FieldRef Name='shownumber' />
</IsNotNull>
<IsNull>
<FieldRef Name='personname' />
</IsNull>
</And>
</Where>
</Query>
Now the question is why does the query return the null records for personname when you provide an additional non-null "dummy" check but when you dont, it returns no records?
Thanks,
Adiel
------------------------------------
Reply:
Hi Adiel,
This sounds pretty weird and i think this is more to do with either the data or some kind of combination of the column types, because it worked for me pretty well with/without providing an additional non-null column.
Thanks
------------------------------------
Reply:
Suneetha, unfortunately your solution did not work. The simple IsNull clause has also worked for me in the past but not in this case. I will have to do some more research. The issue might have something to do with the field type being "Person or Group". In any case, thank you for your suggestion.
Thanks,
Adiel
------------------------------------
Reply:
I figured it out! It's another bug in Microsoft's Product. :) If its a "Person or Group" field (Type=User), set to People Only(UserSelectionMode=PeopleOnly) and Indexed(Indexed=TRUE), you must use the above workaround I mentioned to get your results.
If you just use the IsNull clause with the field itself, you will get no records.
Other UserSelectionMode values could possibly have an issue but I do not have time to test that.
Thanks,
Adiel
------------------------------------
Easy way to delete tile groups
- Changed type Niki HanModerator Wednesday, March 7, 2012 9:27 AM
Reply:
------------------------------------
Reply:
Please expand that request to:
Anything we can do on the desktop or in the Start menu of yesteryear, we should be able to do on the Metro start screen.
This includes hierarchical organization, the ability to manipulate groups of tiles, the ability to see just where shortcuts point...
The reduction in utility and functionality that people are complaining about in Metro cannot just be written off as resistance to change, and "simpler to use" is not the same as "fewer features", no matter what the "right in the back of a taxi" commercials might imply. Microsoft Engineering would do well to stop listening to Microsoft Marketing quite so intently, lest they end up with an operating system that smart people just don't want to use.
Thank you.
-Noel
Detailed how-to in my eBook: Configure The Windows 7 "To Work" Options
- Edited by Noel Carboni Wednesday, March 7, 2012 7:03 PM corrected spelling
------------------------------------
Fast ESP 5.3. and SP2010 connector
I'm doing initial testing with ESP 5.3 and SP2010. I received usual errors from the SharePoint Connectors stating: Failed to crawl list {GUID} in site http://mysite.com : object not set to an instance of an object. The error seems to be an internal SharePoint programing error.... Does anyone know how to solve these problem or what is the cause…
Thanks In Advance,
Chad
Reply:
First of all: the error "object not set to an instance of an object" means that an earlier operation failed, and insufficent error handling means that the error is not signalled until there is an attempt to use the information that the operation should have returned. The actual error could be in Sharepoint itself (which I think is the least likely), in the Sharepoint connector, or in any custom code that you have deployed in your environment.
You don't mention which version of the Sharepoint connector you're using, but at least the most recent connector (the one implemented in C#/.NET) has a number of errors that means that it is not ready for full-scale deployment.
Your next step should be to run the connector with debug logging, which should help you identify exactly where the error is. If the error appears o be in the connector (and not in any Sharepoint customisations), you should submit a support ticket to MS/FAST (assuming that you have a support contract...)
------------------------------------
Reply:
Raymond, thanks for the reply.. the problem was the version of SharePoint connector. Once the patches were applied the errors were resolved.
------------------------------------
Cannot add users to Public Folder Permissions in Exchange 2010
I'm trying to troubleshoot some Public folder issues for our Exchange 2003 to Exchange 2010 post-migration/upgrade. We had some calendars in our public folders that aren't sending out emails to our libararians if someone books equipment within those public folder calendars. This stopped happeneing after we decommisioned our old Exchange 2003 servers... Might have something to do with mail-enabling? But on to the issue I'm trying to troubleshoot.
In the EMC>Toolbox, I can launch the Public Folders Management Console. Browse and open the Public Folder Tree and select the item I want to view/change properties. When I click on the "Permissions" tab, it will open the "Select User" prompt and have the search field. Default, it looks at our root level domain\users OU path and all I see is "Administrator". I will click Scope, to change where the console should look -- a child domain within the root level domain (so child.domain\child_domain_users). I highlight and click ok and will be given this error:
It won't let me browse my child domains to add users to the permissions tab. What do I do?
Reply:
------------------------------------
Reply:
------------------------------------
Reply:
------------------------------------
Update Password Not Required for domain controller machine account
What is the importance of Update Password Not Required on domain controller machine account?
Regards
Jas
Jaswinder Singh
Reply:
Jas - from what I understand, behavior regarding access checks for PASSWD_NOTREQD differs between computer and user objects...
What's the reason for asking?
hth
Marcin
------------------------------------
Reply:
Hi Marcin,
I'll just elaborate the above question.
When we pre-create a computer account in ADUC and then promote it as DC, the UserAccountControl is set to 532512 instead of the default 532480.
The additional flag "UF_PASSWD_NOTREQD" (32) is present apart from the default 8192 (UF_ SERVER_TRUST_ACCOUNT) + 524288 (UF_TRUSTED_FOR_DELEGATION).
I understand that if this is set for User account (UserAccountControl = 544 (512 + 32)) we can have a blank password for that user, which is a security concern. But that wont happen in case of a machine account (i.e., a machine having blank Pwd) since admin cannot set it.
so the question is:
1) Why is it set by default in first place for a pre-created computer? (I'm assuming because we cannot give a pwd for computer while manually creating it).
2) Why is this not changed after the promotion? (any bug?)
3) How is it affecting a DC or any machine account? (I do not see it causing any issues apart from an error being reported in DCdiag. But DC is still replicating & advertising fine)
Thanks,
Madhu
------------------------------------
Reply:
As far as I can tell, this is a bug (obviously a quick way to remediate it would be to set UserAccountControl to the expected value). I don't believe this affects functionality of the DC (or a member server) - beyond the error thrown by DCDiag. Mayby our Microsoft moderators can chime in regarding this...
hth
Marcin
------------------------------------
Reply:
------------------------------------
Reply:
I just replied in the other thread that I think the value should be changed to 532480. I haven't done this myself, but I don't think anything prevents you from changing it. It can be done in ADSI Edit, or in the "Attribute Editor" tab when you view the DC properties in ADUC. The attribute name is userAccountControl.
Richard Mueller - MVP Directory Services
------------------------------------
Reply:
Yes,it is bug if you pre create Computer account.
These are the default UserAccountControl values for the certain objects:
Typical user : 0x200 (512)
Domain controller : 0x82000 (532480)
Workstation/server: 0x1000 (4096)
If you want to restore the default DC value You can use either LDP or ADSIEDIT.MSC
http://jimdoylemcse.wordpress.com/2008/06/08/dcdiag-useraccountcontrol-issue/
Incorrect userAccountControl Attribute value causes error when running DCDIAG or during promotion of a server to a DC.
http://blogs.dirteam.com/blogs/jorge/archive/2006/08/27/Incorrect-_2600_quot_3B00_userAccountControl_2600_quot_3B00_-Attribute-value-causes-error-when-running-DCDIAG-or-during-promotion-of-a-server-to-a-DC.aspx
Hope this helps
Best Regards,
Sandesh Dubey.
MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
------------------------------------
Making a simple GPO
I am using the Group policy editor and am making a GPO in which I want to lock down specific users. I have been instructed to modify settings in User configuration->Administrative Templates->Start Menu and TaskBar->Remove Run Menu from Start Menu.
In doing so the new GPO is going to be called "Locked Down User", and it will be linked with a particular OU. However, when creating a GPO the system includes all User and Computer folders / settings, but being that I only want to restrict the User Configuration per above, I should be able to only include this portion of the policy, rather than having all policy settings in the GPO I need to create. I have seen the smaller GPO developed in some past experience but can't recall how to do it?
Any help would be appreciated?
- Moved by Mike Kinsman Wednesday, March 7, 2012 5:07 PM off topic (From:TechNet Website Feedback)
Reply:
Ask this question in the Windows Server "Group Policy" Forum at the following address
http://social.technet.microsoft.com/Forums/en-us/winserverGP/threads
Bye.
Luigi Bruno - Microsoft Community Contributor 2011 Award
------------------------------------
Reply:
Unfortunately your post is off topic here, in the TechNet Site Feedback forum, because it is not Feedback about the TechNet Website or Subscription.
You may want to try asking your question at http://answers.microsoft.com.
For more information about where to post your question please see this thread: http://social.technet.microsoft.com/Forums/en-US/tnfeedback/thread/24ee65e4-0f35-403c-9bf7-41333cd13cb5
Moving to off topic.
Thanks,
Mike
MSDN and TechNet Subscriptions Support
Read the Subscriptions Blog!
------------------------------------
HP announces new client
Last week 06/10/2011 HP announced a new WMS zero client the T200.
This access device can be connected to your multipoint servers either directly using usb or via it's network port.
http://www.pcmag.com/article2/0,2817,2394327,00.asp#fbid=QbzJzJnbFXh
The new product also sports 4 usb ports for connecting your keyboard and mouse and includes audio connections.
The suggested selling price is $99 which I think is fantastic allthough I'll wait and see what UK pricing is like.
This device is ideal for me as I can invisage me running all 3 mode of multipoint, direct connected, usb connected and ethernet connected depending on the situation.
Ben
Reply:
The price for the HP T200 Zero Client (QV552AA) in the UK is £ 178 Inc. VAT / £ 148 Exc. VAT.
http://www8.hp.com/uk/en/products/thin-clients/product-detail.html?oid=5180689
In the USA HP has the following models of the T200:
http://h10010.www1.hp.com/wwpc/us/en/sm/WF25a/12454-12454-321959-338927-5112717-5171156.html?dnr=1
- HP t200 Zero Client for MultiSeat (QV555AT) $99.00 (Academic Volume License)
- HP t200 Zero Client for MultiSeat (QV554AT) $139.00
- HP t200 Zero Client for MultiSeat (QV552AT) $159.00
Some of the part numbers have the suffix #ABA
Tim Barrett http://www.NoGeekLeftBehind.com
------------------------------------
Reply:
QV555AA & QV552AA are available in the UK.
For the QV555AA I pay around £55 - £60 for it.
This is Academic Pricing.
http://www8.hp.com/uk/en/products/thin-clients/product-detail.html?oid=5180692
One of the differences being if the WMS Cal is included or not.
Ben
- Edited by Ben Norcutt Wednesday, March 7, 2012 4:49 PM more info
------------------------------------
How to get a list of network filters installed on a Windows 7 system
I've run into several situations where users in my office have tried to install software, such as vpn software, and the installation has failed due to exceeding the maximum number of filters allowed, as defined by the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\MaxNumFilters. My understanding is that the default is 8 and the maximum is 14.
I'd like to know if it is possible to get a count of the number of network filters currently installed on a system. For bonus points, I'd like to know if there is a way to determine what the filters are associated with: the installed software or dlls, something that could be useful in determining what could be uninstalled.
I would hope this information would be useful to others.
- Changed type Niki Han Monday, March 5, 2012 7:51 AM
Reply:
Hi your question was already answered for you on Microsoft Answers:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\MaxNumFilters
that shows the maximum count. Further, if you look at:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4d36e974-e325-11ce-bfc1-08002be10318}\
Each entry corresponds to a possible filter.
Source: how can I find out how many network filter drivers I have using Windows 7 and uninstall if too many
------------------------------------
Reply:
Thanks, Jaap.
It doesn't definitively answer my question, but it helps.
The list of items under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4d36e974-e325-11ce-bfc1-08002be10318} are only possible filters.
According to http://msdn.microsoft.com/en-us/library/windows/hardware/ff553426%28v=vs.85%29.aspx the GUID 4d36e974-e325-11ce-bfc1-08002be10318 is described as "NetService". In my registry, some of the entries appear to be filters, and some do not.
For example, HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4d36e974-e325-11ce-bfc1-08002be10318}\{03F0DBAD-C963-4EB4-8510-DD8D23454D85} is described as "File and Printer Sharing for Microsoft Networks". I think it would count a s a service, but not as a filter, and consequently not count against MaxNumFilters.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4d36e974-e325-11ce-bfc1-08002be10318}\{B5F4D659-7DAA-4565-8E41-BE220ED60542} on the other hand is described as "QoS Packet Scheduler" and has sub-keys (if that's the term) with the following names and values that indicate to me that it is an actual filter:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4d36e974-e325-11ce-bfc1-08002be10318}\{B5F4D659-7DAA-4565-8E41-BE220ED60542}\Ndi]
"FilterClass"="scheduler"
"FilterType"=dword:00000002
"FilterRunType"=dword:00000002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4d36e974-e325-11ce-bfc1-08002be10318}\{B5F4D659-7DAA-4565-8E41-BE220ED60542}\Ndi\Interfaces]
"FilterMediaTypes"="ethernet, wan"
Across all of the key entries that I see on my system, the only ones that seem consistently present and indicating a filter are Ndi\FilterClass and Ndi\Interfaces\FilterMediaTypes
I have one entry on my system that has Ndi\FilterDeviceInfId, and neither of Ndi\FilterRunType and Ndi\FilterType.
Now all I need is confirmation that only the entries that I think are filters count against MaxNumFilters.
------------------------------------
Reply:
[Edited the format-list properties. Was outputting all properties instead of just Description and PSPath]
I haven't figured out how to map back to a file on disk.
The following PowerShell will output the current maximum filters configured, the count of filters installed, followed by the description and registry path.
get-itemproperty hklm:\SYSTEM\CurrentControlSet\Control\Network | format-list -property MaxNumFilters $children = get-childitem -path hklm:\system\currentcontrolset\control\network\"{4d36e974-e325-11ce-bfc1-08002be10318}" | get-childitem | where-object {$_.PSChildName -eq "Ndi"} | get-itemproperty | where-object {$_.FilterClass} |get-itemproperty -name FilterClass "Filter Count: " + $children.count "Filter List: " $children | foreach-object -process { get-itemproperty -path $_.PSParentPath } | format-list -property Description,PSPath The output will be something like the following: MaxNumFilters : 8
Filter Count: 6
Filter List:
Description : Eset Personal Firewall
PSPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\system\currentcontr
olset\control\network\{4d36e974-e325-11ce-bfc1-08002be10318}\{08D58B09-AA0
4-45BD-9F17-9842CE8CCF6D}
Description : Virtual WiFi Filter Driver
PSPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\system\currentcontr
olset\control\network\{4d36e974-e325-11ce-bfc1-08002be10318}\{5CBF81BF-505
5-47CD-9055-A76B2B4E3698}
Description : QoS Packet Scheduler
PSPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\system\currentcontr
olset\control\network\{4d36e974-e325-11ce-bfc1-08002be10318}\{B5F4D659-7DA
A-4565-8E41-BE220ED60542}
Description : WFP Lightweight Filter
PSPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\system\currentcontr
olset\control\network\{4d36e974-e325-11ce-bfc1-08002be10318}\{B70D6460-363
5-4D42-B866-B8AB1A24454C}
Description : NativeWiFi Filter
PSPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\system\currentcontr
olset\control\network\{4d36e974-e325-11ce-bfc1-08002be10318}\{E475CF9A-60C
D-4439-A75F-0079CE0E18A1}
Description : NDIS Capture LightWeight Filter
PSPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\system\currentcontr
olset\control\network\{4d36e974-e325-11ce-bfc1-08002be10318}\{EA24CD6C-D17
A-4348-9190-09F0D5BE83DD}
Hopefully someone else will find this useful.
- Edited by Saturn Jct Wednesday, March 7, 2012 4:52 PM Changed to use code block
------------------------------------
Reply:
First of all, thanks for sharing, nice to see you found the solution.
If you want to export the output to a file on the disk you can use this revised code:
$outtofile = @() $outtofile += "Maxnumfilters: "+(get-itemproperty hklm:\SYSTEM\CurrentControlSet\Control\Network).maxnumfilters $children = get-childitem -path hklm:\system\currentcontrolset\control\network\"{4d36e974-e325-11ce-bfc1-08002be10318}" | get-childitem | where-object {$_.PSChildName -eq "Ndi"} | get-itemproperty | where-object {$_.FilterClass} |get-itemproperty -name FilterClass $outtofile += "Filter Count: " + $children.count $outtofile += "Filter List: " $outtofile += $children | foreach-object -process { get-itemproperty -path $_.PSParentPath } $outtofile | out-file maxnumfilters.log ------------------------------------
Bug? Alert status iw Warning, but there are no alerts (Unable to clear alert state)
SCE Console, Computer Groups, All Windows Clients
I have a client with an Alert Status of "Warning", and Update Status of "Unknown" and an Agent Status of "OK". If I select the client, go to the details pain and click on the "Warning" alert; the alert window pops up however there are no alerts shown in the window. The result is that I am unable to clear the alert.
Reply:
So I'm thinking the problem is that sometimes when I close an alert, it doesn't close entirely.
------------------------------------
Reply:
Hi Lohman,
Can you try the one (or both) of the following:
- Press F5 to refresh the computers view
- Select a different computer group and then navigate back to All Windows Clients
We don't immediately update the information in the computer views, so it is possible for an alert to be manually resolved, or autoresolved and the computers view to have old information for a short period.
We will get updated information on alerts:
- Whenever you change between computer groups
- When the current view is refreshed (either by pressing F5, or after clicking on the yellow information bar which appears after 10 minutes)
If the above still leaves you with incorrect information, let us know if we can arrange to do a troubleshooting session with you - drop us an e-mail to scedata@microsoft.com with your contact information.
Thanks
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.
------------------------------------
Reply:
------------------------------------
Reply:
------------------------------------
Reply:
We don't currently have an explanation for why this is occuring.
For others who are following this thread - please post a note in this thread if you are also seeing this issue.
Thanks
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.
------------------------------------
Reply:
------------------------------------
Reply:
Also having this problem?
------------------------------------
Reply:
------------------------------------
Reply:
------------------------------------
Reply:
I am also experiencing this issue.
The computers involved are all running server OSs, one each of these:
Windows Server 2003 Enterprise
Windows Server 2003 R2 Standard
Windows Server 2003 R2 Enterprise
Michael M. Thornberg
System Administrator
Accobat A/S
------------------------------------
Reply:
Also having this issue with multiple Windows Server 2008 R2 OS's.
Running SCE 2010 Version 7.0.2432.1
------------------------------------
Reply:
Exactly the same issue here. 4 out of 20 clients. Alle 4 are W2008R2.
------------------------------------
Reply:
Have you guys tried flushing the health service and state cache for those clients? It's in monitoring pane->discovered inventory. Highlight one of your problem clients and under health service tasks on the right pane you should see an option to flush health service and state cache. Monitor this client to see if the warnings/alerts come back.
Thanks,
Tim
Ok, so I changed my name...you can still call me Tom if you like. It's a...jump...to conclusions...mat.
------------------------------------
Reply:
------------------------------------
Reply:
Also having this Problem on a few Windows Server 2008 R2´s
------------------------------------
Reply:
I have this problem too.
OSes affected - XP/2003R2/2008R2
-=C U=-
------------------------------------
Reply:
------------------------------------
Reply:
Thanks Roy
------------------------------------
Reply:
- Edited by Maze of twisty little passages, all alike Wednesday, March 9, 2011 2:03 PM More info
------------------------------------
Reply:
so your screen doesn't look like this? Not sure why the image turned out so small, sorry!
http://i29.photobucket.com/albums/c263/capdod/support/tasks.jpg
Ok, so I changed my name...you can still call me Tom if you like. It's a...jump...to conclusions...mat.
My Blog Site: http://tmagnuson.wordpress.com
------------------------------------
Reply:
No, where your's shows "Health Service Tasks" mine has "Windows Computer Tasks". Below that I have "Windows Computer Reports".
The only thing we have in common is "State Actions" and we have the same 3 actions available there.
Thanks Roy
------------------------------------
Reply:
hmm..well let me look at an R2 server, I don't think they're any different though..
edit: Nope, R2 is no different for me.
Ok, so I changed my name...you can still call me Tom if you like. It's a...jump...to conclusions...mat.
My Blog Site: http://tmagnuson.wordpress.com
------------------------------------
Reply:
Ok, so I changed my name...you can still call me Tom if you like. It's a...jump...to conclusions...mat.
My Blog Site: http://tmagnuson.wordpress.com
------------------------------------
Reply:
Definitnatly in Discovered Inventory see http://cid-6372e0958f1d1d72.photos.live.com/self.aspx/Screen%20Shots/Discovered%20Inventory.jpg
Thanks Roy
------------------------------------
Reply:
Here is what mine looks like as well.
http://cid-f1b2723372bac022.photos.live.com/browse.aspx/ms?uc=1
------------------------------------
Reply:
------------------------------------
Reply:
I am seeing this same behavior of an Alert status of Error, but no errors listed. Using Health Explorer, I found that sme of the computers (mostly servers) had Disk Fragmentation warnings. After defragmentation, and waiting a day to check the systems, the same systems had Error Alerts, but no errors listed. Attempting to Reset Health (because there is no Health Serice Tasks group in my task pane) when in the Computers view had no effect. I went to the Monitoring View and selected Disk Health under the Health Monitoring node of the Microsoft Windows Server node. I then clicked on the Logical Disk Fragmentation warning and clicked Reset Health. That cleared the warning. It also cleared the Error Alert from some, but not all, of the machines in the Computers view.
I am also seeing that VM hosts show errors for their VMs when their Error link is clicked. On one host, it shows an error for a VM that it does not host.
Do we need to call the Orkin man?
------------------------------------
Cannot use file for Clustered server
The error message is saying that clustered disk is not a dependency. I checked and there is a dependency. OS is windows Server 2008 and SQL Server is 2008 R2. All of the other instances that are part of node are working fine. The cluster is a 4 node cluster with 3 active and 1 passive node.
- Changed type Vincent Hu Monday, April 9, 2012 7:47 AM
Reply:
Disks are online and a part of the sql server instance.The error message is saying that clustered disk is not a dependency. I checked and there is a dependency. OS is windows Server 2008 and SQL Server is 2008 R2. All of the other instances that are part of node are working fine. The cluster is a 4 node cluster with 3 active and 1 passive node.
------------------------------------
Reply:
------------------------------------
Discuss Private Cloud Planning Guide for Systems Management
- Resource Pooling: Divides resources into partitions for management purposes.
- Physical Fault Domain: The group of physical resources dependent on a single point of failure such as an uninterruptible power supply (UPS).
- Upgrade Domain: A group of resources upgraded as a single unit.
- Reserve Capacity: Unallocated resources, which take over service in the event of a failed Physical Fault Domain.
- Scale Unit: A collection of resources treated as a single unit of additional capacity.
- Capacity Plan: A model that enables a private cloud to deliver the perception of infinite capacity.
- Health Model: Defines how service or system may remain healthy.
- Service Class: Defines services that are delivered by IaaS.
- Cost Model: The financial breakdown of a private cloud infrastructure and its services.
We hope you like the guide and if you have questions, post them to this thread.
Thanks!
Tom
Learn more about Private Cloud at the Private Cloud Solutions Hub
When to code and when to script?
I would really like some feedback on the below. I know it answers no questions, but I would appriciate anything that anyone can contribute about what the options are, and what considerations should be made when making a decision about the options.
Thanks,
Josh
When I describe PowerShell to someone new, I tend to refer to it as a glue language. It is very good for tying different types of technology together. In practical use, I have found that it is very beneficial for describing custom business logic to a problem.
Now it is true that in PowerShell you can embed C#, VB, F# and the like. You are sitting in .NET land so you can reasonably do anything in PowerShell that you can do in C#. The question is; where do you draw the line? Fortunately PowerShell has many shades of color between your Visual Studio work, and your ISE work. Picture the rainbow.
What we really need to consider, is the proper choice between the following.
- Pure C#.
- C# with PowerShell Classes implemented (http://msdn.microsoft.com/en-us/library/windows/desktop/ee706563(v=vs.85).aspx)
- PowerShell with a compiled Module
- PowerShell Module written in PowerShell calling C#
- Script with C#
- PowerShell Module written in PowerShell with no add-type definitions.
- Pure PowerShell
What attribute of our processes do we want to consider?
- Platform (Web based , win forms, WPF, console)
- Complexity
- What do you know how to do?
- How are you going to deploy it?
- Do you want to own this process forever?
- Do you centrally maintain source code?
- How much of this process is potentially going to change.
WMF 3.0 has the ability to make a web service in PowerShell, but if you want a rich web based UI, do it in visual studio. If you want something else you can probably do it in PowerShell with a sliding scale of things getting crazy.
Complexity is probably the most important item to consider and potentially the most difficult to determine. Sometimes very simple things can be subject to scope creep (http://en.wikipedia.org/wiki/Scope_creep). If you are going to use something that is best implemented via object oriented abstractions, then you may want to consider doing your classes in Visual Studio.
What do you know how to do? How much do you know about how things work, vs. what you need to get done? These are two simple questions, but they should still be considered. If you want to have a dialog box for user import, this can probably be done easily enough in PowerShell using ShowUI (http://showui.codeplex.com/) or directly with the Windows.Forms classes. Now if you don't know anything about these, download VS2010 Express, select a library assembly, draw your form, and mark your UI elements as public. It is a bunch of extra steps, but using a UI to wire up the GUI can make a big difference in headaches and subtle bugs.
Remember, if you need to, you can just save the .CS file and pull it in via "Add-Type -TypeDefinition". VS could be used just to author the form. Keep in mind that there is a designer partial class that will need to be loaded also, just append the two files before your Add-Type. I recommend that if you are importing more than a few lines of code via a TypeDefinition, that you keep this in an external file. The PowerShell ISE won't syntax check your C#, and won't be much help in debugging either.
Does deployment matter? If I am going to do automation for another team in the office, it is very crucial that they have access to everything needed to maintain the item. It may be years from now, but a random EXE sitting in accounting is going to get thrown away if things change. If it is implemented in a script, they have everything. They have my name in comments and the entire source to change or pass to someone else. True you could zip any source and pass it around with the EXE, or embed it as a resource with an option to extract it... but that gets a little convoluted. It also requires that someone have Visual Studio or some variant. Ownership is closely paired with this. A script, if it can be done cleanly can much more easily be moved to another process owner if there is no corporate process for managing things like this. If you do centrally manage your source code across anyone that may use your automation, then some of this doesn't apply.
The second largest question is looking at how much of what you are going to do will change. Sure, if you have 5 lines of script and it never changes, then this is a bit mote. But if you are powering Excel to graph frequencies of log entries in a pivot table, and someone asks why you used "THAT" font. A tweak in a script is easier than an application recompile.
Reply:
Justin Rich
http://jrich523.wordpress.com
PowerShell V3 Guide (Technet)
Please remember to mark the replies as answers if they help and unmark them if they provide no help.
------------------------------------
Reply:
Fortunately for me, I'm not in an environment in which we need to address these issues in as much detail and with as much planning and forethought as you are exercising. We use powershell to develop somewhat minimal tools in an informal setting to share amongst a small group. As such, I doubt we would ever run into anything that would be better done in more of a production programming paradigm.
That said, powershell modules certainly make maintenance and distribution much less painful than it can be for vbscript and batch tools!
Al Dunbar
------------------------------------
Reply:
LINQ is a good one. As I understand, and I havn't looked in a while, this is a combination of compiled magic and adhoc queries on data.
LINQ Articles in PowerShell world:
http://bartdesmet.net/blogs/bart/archive/2008/06/07/linq-through-powershell.aspx
http://josheinstein.com/blog/index.php/2010/02/linq-for-powershell/
These are some interesting reads. They really just try to engineer around some of what is missing in PowerShell; gaining some of the benefits. Even if basic LINQ function were hacked into powershell it deals with specific IEnumerable datatypes that just don't fit into the powershell world.
-------------------------------------------
C# is compiled to IL, but PoweShell has a loader, an additional file read, and then the text has to be run through the Tokenizer ([system.management.automation.psparser]::Tokenize). I think PowerShell is a "mixed mode image." So there may also be overhead in passing to the managed aspect. On the flip side loading a natice app that calls into Managed could (could) have less overhead than calling a managed exe from a double click or via the CMD inerpreter. I was going to agree that it was a hands down C# win, but I don't want to underestemate MS engineers. (for giggles http://msdn.microsoft.com/en-us/library/ms973872.aspx)
-------------------------------------------
The "End User" consideration, danger they may mess with our stuff.. Yes, good call. Are you thinking more in the realm of making it read only? We could sign the code and format the batch files or policies to require this signiture as valid. OR are we talking more about obfusication?
I don't see the advantage to the compiled PS soultions that I have seen. With SharpDevelop (http://www.icsharpcode.net) and Visual Studio Express, I don't see why somone would really need this. I can understand being comfortable with what they know, but I don't think the learning curve is that big of an issue. I did have a BATCH file hack, that copied itself to a .PS1 then called the PS1 via PowerShell command line. That way I could circumvent needing to explain powershell to a user. I actually didn't need it, but it made me feel clever.
------------------------------------
Reply:
I had a discussion with someone. (I cornered them, they didn't talk) about the Java vs. .NET. I said that despite any techincal arguments, the winner for me is .NET because of the IDE and the native feel.
I think that same thing wins for VBScript/Batch files. I like fancy batch files, but syntax highlight and run selected provide the tools to work with the script much better. The fact that powershell is now accross so many MS Os versions helps. Though in a pinch a more portable BAT file may be needed. It has also had the most MS investement and that gets you something.
Those asside, I do FanBoy my .NET.
I even did a new VB6 app lastyear, because I couldn't count on a client's server having .NET installed, so sometimes the right tool is something else entirely.
- Josh
------------------------------------
Reply:
Justin Rich
http://jrich523.wordpress.com
PowerShell V3 Guide (Technet)
Please remember to mark the replies as answers if they help and unmark them if they provide no help.
------------------------------------
Reply:
One of my coworkers uses a hash to store passwords in his scripts. The hash process to plain text is in the script. The argument is that this extra layer of obscurity is a 50-99% increase on security depending on the users involved. But yes, security is a slope that never levels off.
I think If you are doing scripts and want to maintain your IP, that you would follow something along the lines of options 2 and 3. Where you have your IP compiled and possibly commercially obfuscated.
I guess technically you could apply some type of hash to your entire script and store it as a Base-64 string inside a wrapper script...
- Josh
------------------------------------