skar.us :: Windows Server

Win32/Conficker.A

POSSIBLE MALWARE OUTBREAK - ACCOUNT LOCKOUTS - 12/29/2008 - Last updated 12:05PM CST http://www.microsoft.com/security/portal/Entry.aspx?Name=Worm%3aWin32%2fConficker.B Hi all, Since this Monday, we GCR security team has received 14+ Crisit cases regarding the new worms which exploit the vulnerability fixed in MS08-067....

W32/Mariofev.worm

W32/Mariofev.worm This file is a worm which attempts to spread by copying itself over Network Shares. It throws a LDP brute force password crack attempt on the logged-in user using common passwords Registry The following Value/Data pairs are observed:...

Terminal Server RDP session hangs after user logon | Infostealer.Banker.C virus

When your users logon to a terminal server they experience that their session hang after the logon. They may also visit the error message "Windows cannot log you on because your profile cannot be loaded". If your users are facing...

Terminal Server Troubleshooting

Method 1: Since both our servers are in Workgroup mode So we had to move the role of Terminal Server and Terminal License Server on to the same server Method 2: When we have a Terminal Server in an...

MSLicensing Key

MSLicensing Key is the key on the registry of the Windows Client machine that was used to make a Terminal Session to the Terminal Server and it denotes the CAL that was issued from the Terminal Server to the Windows...

Terminal Services Client Access License (TS CAL) Availability

Terminal Services Client Access License (TS CAL) Availability - Information Only http://technet.microsoft.com/en-us/library/cc727372.aspx Applies To: Windows Server 2008 When a client--either a user or a device--connects to a terminal server, the terminal server determines if a Terminal Services client...

Terminal Server | Citrix issue | User not able to login

Terminal server issues: User not able to login This issue is observed when a user tries to login to a terminal server. The issue is of CITRIX but occurs after the start of a terminal server session. We have the...

Winlogon Event ID 1219 | with error message “RPC Service is not available” | on Terminal Server

The error RPC Service is not available is seen with a Winlogon Event ID 1219 while users try to login to a Terminal Server Issue: RPC Service is not available Details of the above mentioned issue description: The error...

Removing Terminal Server licenses from an RDP client

In Windows XP, to Remove Terminal Server licenses, find the following key on the RDP client: HKEY_LOCAL_MACHINE\Software\Microsoft\MSLicensing. To clean the client's license cache, just delete this key and its sub keys. The next time the client connects to the server,...

Windows Server 2003 | Directory Services-Users getting kicked out from Terminal Server session | null session pipes

Eligible Product: Windows Server 2003 SP1 Problem Product: Windows Server 2003 SP1 Problem Description ============================================ It is an Active Directory domain. When users/clients log into Citrix server in child domain, then if they log in with Active Directory account it...

Process Monitor

Ø Please find the Process monitor helpful in checking Open Handles. Process Monitor is located at: http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx Download Process Monitor (1.2 MB) Run Process Monitor now from Live.Sysinternals.com ...

Core

Windows Server CORE Windows Server Core: Most awaited guide Helpful Article: Server Core Installation Option of Windows Server 2008 Step-By-Step Guide http://technet.microsoft.com/en-us/library/cc753802.aspx Benefits of having Windows Server CORE on the server: ● Reduced maintenance. ● Reduced attack...

Unable to remove Read-Only attribute from folder

Taken from: http://support.microsoft.com/kb/256614 Applies To: Windows Editions before and inclusive of “Microsoft Windows 2000 Server” SYMPTOMS You may be unable to remove the Read-Only attribute from a folder using Windows Explorer. In addition, some programs may display error messages...

You cannot view or change the Read-only or the System attributes of folders in Windows Server 2003, in Windows XP, in Windows Vista or in Windows 7

This article applies to: Windows Server OS before and incl. of Windows Server 2003 and Windows Client OS before and incl. Of Windows 7 http://support.microsoft.com/kb/326549 SUMMARY This article contains step-by-step instructions on how to use the Attrib command to work around...

Issue: VB Script dll not running

Issue: unable to get VB Script dll running. When trying to install some software and it is not running. To resolve this issue, I registered: c:\windows\system32\vbscript.dll, c:\windows\syswow64\vbscript.dll, c:\windows\system32\jscript.dll, c:\windows\syswow64\jscript.dll and all appears to work. ...

Memory Leak Userenv 1053 1097

Event Type: Error Event Source: Userenv Event Category: None Event ID: 1053 Date: 4/18/2008 Time: 10:07:57 PM User: NT AUTHORITY\SYSTEM Computer: RUS-BG1P Description: Windows cannot determine the user or computer name. (Not enough storage is available to complete this operation....

CPR summary of a Winlogon spiking issue

NOTE: This article is taken from an inbound routed email. Last week I created a subcase for CPR to review a winlogon dump. The CPR engineer investigated the issue and was able to determine what the issue was after looking...

Netlogon Event ID 5792

Netlogon 5792 Event ID Registered: On Winstondc2 Event Type: Information Event Source: NETLOGON Event Category: None Event ID: 5792 Date: 6/13/2008 Time: 9:35:55 AM User: N/A Computer: WINSTONDC2 Description: Site 'IDAHO' does not have any LDAP servers for non-domain...

Netlogon Event ID 5719

Netlogon Event ID 5719 Details Product: Windows Operating System Event ID: 5719 Source: NetLogon Version: 5.0 Symbolic Name: NELOG_NetlogonAuthNoDomainController Message: This computer was not able to set up a secure session with a domain controller in domain %1 due to...

Steps on how to reset the NETLOGON Database

Step 01: Stop the Netlogon service. Step 02: Move the Netlogon.dns and Netlogon.dnb files to a backup folder and restart the Domain Controller. Note: Netlogon.dns and Netlogon.dnb are located in the Windows\System32\Config folder. ...

Troubleshooting NETLOGON Event 5774, 5775, and 5781

http://support.microsoft.com/kb/259277 SUMMARY One or more error messages may be logged in the System event log if the Netlogon service registration or deregistration process does not succeed. This article describes these error messages and offers some troubleshooting considerations. MORE INFORMATION...

Directory Services Does Not Start If Ntds.dit File Is Missing

When you start a Windows 2000-based domain controller, you may receive the following Lsass.exe error message: Directory Services could not start because of the following error: The system cannot find the file specified. Error Status: 0xc000000f. Please click OK to...

Lsass 0xc00002e1 - "Directory Services cannot start" error message when you start your Windows Server based or Windows SBS Server based domain controller

http://support.microsoft.com/kb/258062 "Directory Services cannot start" error message when you start your Windows Server based or Windows SBS Server based domain controller SUMMARY This article leads you through a series of steps that may help you diagnose the...

KDC Event ID 11

Event ID KDC 11 in the System log of domain controllers This is the Knowledge Base Article for KDC 11 Event ID Microsoft Support KB 321044 There is a script to be used inspite of ldifde dump. Please allow...

Explanation of Kerberos error KRB_AP_ERR_MODIFIED

Problem Operating System: Windows Server 2003 Enterprise [2003] Problem Description The following error is repeated in the event log. The target server name may reference more than one server. XP Message ===================== Event Type: Error Event Source: Kerberos...

Kerberos does not work through NAT

Problem Description Kerberos does not work through NAT Resolution Kerberos does not work through NAT (confirmed through deployment planning guide) Per rfc, host address is encrypted and part of the ticket This is to prevent spoofing....

You experience a long delay when you log on to a domain through a NAT server

SYMPTOMS You may notice a delay when you log on to your domain account, and the logon may revert to NTLM authentication. This behavior occurs when the following conditions are true: • You try to use Kerberos to log on...

Description of Common Kerberos-Related Errors in Windows 2000

SUMMARY Windows 2000 provides support for MIT Kerberos version 5 authentication, as defined in IETF Request For Comment (RFC) 1510. The Kerberos protocol is composed of three sub-protocols. The sub-protocol through which the client pre-sends the ticket for admission to...

NAT Netlogon and Kerberos Primer

Created : 09/18/2006 TITLE: NAT Netlogon and Kerberos Primer [ ] Problem Description # Issue: Common Knowledge appears to state that is Network Address Translation (NAT) is in place then trusts, logons, and Kerberos will not...

A Kerberos client always sends client addresses in Windows 2000

Article ID : 317896 For a Microsoft Windows XP version of this article, see 318071. IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that...

New resolution for problems with Kerberos authentication when users belong to many groups

http://support.microsoft.com/kb/327825 Problems with Kerberos authentication when a user belongs to many groups SYMPTOMS When a user belongs to many groups, that user may have problems with authentication or with Group Policy settings. The following Microsoft Knowledge Base articles...

Kerberos Network Authentication Protocol over Network Address Translation (NAT)

Kerberos authentication protocol might fail in environments that use Network Address Translation (NAT) or DHCP..? What is causing Kerberos authentication to fail in these environments? Is this something I need to worry about in my Windows Active Directory (AD) environment?...

PRE: MOSS: Unable to connect SharePoint application using Kerberos authentication

Problem - You have configured Kerberos on a web application, but you are getting 401.1 and 401.2 errors when attempting to connect to that web application. Environment - MOSS 2007. Action Plan Gather the following information and do...

Troubleshooting Active Directory replication failures that occur because of DNS lookup failures, event ID 2087, or event ID 2088

http://support.microsoft.com/kb/824449 SUMMARY This article describes an action plan for administrators and for support professionals to follow when domain controllers that are running Microsoft Windows 2000 or Microsoft Windows Server 2003 cannot replicate Active Directory because of DNS lookup failures....

Events 407 and 408 Are Reported in the DNS Server Event Log

http://support.microsoft.com/kb/279678 SYMPTOMS You are unable to query a Microsoft Windows 2000-based DNS server, and the following errors are reported in the application event log for DNS Server: Event ID: 407 Source: DNS Description: DNS server could not bind a...

New group policies for DNS in Windows Server 2003

support.microsoft.com/kb/294785 SUMMARY Windows Server 2003 resolves the problem of centralized DNS management by introducing group policies to configure DNS clients. For example, the following parameters are available in Windows Server 2003: · Enable or disable dynamic registration of...

Deployment and operation of Active Directory domains that are configured by using single-label DNS names

http://support.microsoft.com/kb/300684 Information about configuring Windows for domains with single-label DNS names SUMMARY This article contains information about the deployment and operation of Active Directory domains that are configured by using single-label DNS names. The desire to remove...

How to use DNSLint to troubleshoot Active Directory replication issues

http://support.microsoft.com/kb/321046 SUMMARY This article describes how to use the DNSLint utility to troubleshoot Active Directory replication issues. The Active Directory is a distributed database. It is used to store information about objects on a network and to...

No _msdcs zone in DNS management console

+ Customer does not see _msdcs zones in DNS management console. + Looked into the Domain Controllers named Mercury and Saturn by connecting through Adsiedit. + Found that on Saturn Domain Controller (through ADSIEDIT) the Active Directory didn't had the...

Troubleshooting Windows Firewall settings in Windows XP Service Pack 2 for advanced users

http://support.microsoft.com/kb/875357 Configuring Windows Firewall by using the Windows Security Center Adding a program exception When you add a program to the exception list, you enable the firewall to open ranges of ports that could change every time the program...

Ports - List of Common and Default Ports on a Windows Environment

Protocol Port LDAP udp 389 tcp 389 LDAP (SSL) udp 636 tcp 636 Kerberos udp 88 tcp 88 DNS udp 53 tcp 53 SMB over IP udp 445 tcp 445 Global Catalog Server tcp 3269 tcp 3268 ...

NIC Teaming

Windows Server 2012 NIC Teaming provides transparent network failover and bandwidth aggregation. Uniquely, the Windows solution is hardware-independent and can be deployed under all existing workloads and applications on both physical and virtualized servers. What is NIC Teaming? A...

A sample PortQry output

A sample PortQry output (For study): ============================================= Starting portqry.exe -n 10.5.71.230 -e 135 -p TCP ... Querying target system called: 10.5.71.230 Attempting to resolve IP address to a name... IP address resolved...

Fix the file access issues on a Domain Controller

Fix the file access issues on a Domain Controller In this case we will fix the file access issue of a client for a file share on a Domain Controller. The client configured a Group Policy, after which they...

Changes to allowed NULL session pipes in Windows Server 2003 SP1 and Windows XP SP2

TITLE: Windows Server 2003 SP1 and Windows XP SP2 changes to allowed NULL session pipes Problem Windows Server 2003 Standard Problem Description 2003 SP1 changes to Null Session Pipes Resolution As an FYI Pre SP1 we actually had...

Basic Debugging of an Application Crash

One of our common issues is troubleshooting application crashes (for example, the Print Spooler or a third-party application). These crashes usually result in the infamous Dr. Watson error. First, let's discuss terminology. A crash is when something experiences a fault...

DCOMCNFG

http://msdn.microsoft.com/en-us/library/wdyy0xsw.aspx DCOMCNFG is a Windows NT 4.0 utility that allows you to configure various DCOM-specific settings in the registry. The DCOMCNFG window has three pages: Default Security, Default Properties, and Applications. Under Windows 2000 a fourth page, Default Protocols, is present. Default Security...

HOW TO: Implement Share Caching Options in Windows 2000

http://support.microsoft.com/?kbid=214738 Windows 2000 includes a feature called "Offline Files". You can use Offline Files to cache files that you commonly use from a file share. There are three different share caching modes: ● No Caching: No caching of files or...

Offline Folders

An age-old challenge when supporting mobile users is deciding where to locate the important data that your users need to perform their jobs. Users generally prefer that you locate the data on their laptop hard disk so that they can...

Troubleshooting Offline Folders: Known Bugs and Issues

Cannot Make NetWare Server Folders Available Offline Microsoft Knowledge Base Article: 227993 - When you select a folder on the network that is located on a Windows-based computer, the Make Available Offline command appears on the File menu in Windows...

IIS Metabase (IIS 6.0)

http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/43a51d34-7c81-413b-9727-ec9a19d0b428.mspx?mfr=true IIS Metabase (IIS 6.0) The metabase is a repository for most Internet Information Services (IIS) configuration values. The metabase is a plaintext XML file and can be edited manually or programmatically. The metabase is also extensible in a...

IIS

Interesting Articles / Interesting Things to know about IIS: Ø IIS Metabase (IIS 6.0) : Read about IIS Metabase here ...

Hyper-V

Hyper-V Homepage: · Click here to visit the Hyper-V Home Page Hyper-v Faq's Latest and Greatest Hyper-V Articles: · http://www.itcomparison.com/Virtualization/MShypervvsvi35/HyperVvsvmware35esx.htm · http://projectdream.org/wordpress/2008/08/11/hyper-v-vs-esxi-in-the-small-business-space/ ...

How to Create a User-Defined Service

http://support.microsoft.com/kb/137890 How to Create a User-Defined Service SUMMARY The Windows NT Resource Kit provides two utilities that allow you to create a Windows NT user-defined service for Windows NT applications and some 16-bit applications (but not for batch files). ...

LDP - LDAP Query to list locked accounts

LDAP Query to list locked accounts. When you need to see a list of all user accounts that are locked using LDP tool, then you might need the following query to query the Active Directory using the LDP tool....

Implementing the Change Password feature with Outlook Web Access

http://support.microsoft.com/kb/297121/ Implementing the Change Password feature with Outlook Web Access SUMMARY This article discusses how to implement the Change Password feature in Microsoft Outlook Web Access (OWA) to allow OWA users to change their domain passwords. This article also...

Measures to follow before proceeding with resetting the security database on the DC which is also a SQL Server

Measures to follow before proceeding with resetting the security database on the DC which is also a SQL Server 1. We need to take the backup of the sql database before we go ahead with resetting the local security...

How to transfer logins and passwords between instances of SQL Server

http://support.microsoft.com/kb/918992 INTRODUCTION This article describes how to transfer the logins and the passwords between instances of Microsoft SQL Server 2005, of Microsoft SQL Server 2008, and of Microsoft SQL Server 2012 on different servers. For more information about how to...

Basic Steps for demoting a Domain Controller which is also a Microsoft Exchange Server to a Member Server

If we have a Domain Controller in the Active Directory that is also an email server, i.e. both Active Directory and Microsoft Exchange services are installed and enabled on the Server. And now if we want to just demote the...

Issues while accessing files hosted on Encrypting File System over the Network

We have been getting such issues wherein the Client Window hangs while accessing the Encrypted files over the Network, sometimes remains in that position forever. The issue is pretty consistent and happens will almost all the Users. However, there are...

LDIFDE and CSVDE Dump

Ldifde and csvde commands with Examples LDIFDE and CSVDE are quite similar. Both utilities can be used to import and export objects into active directory. The syntax for CSVDE and LDIFDE is the same. The main difference is that CSVDE...

An example of Domain Rename

Knowledge Measure – Case Notes An experiment done on a test server for Domain Rename Operation. The case Notes of which are as follows: Scenario DOMAIN= MICROSOFT.LOCAL DOMAIN NETBIOS = MICROSOFT DC 1 = OSAMA (holds all 5 FSMO)...

Domain Rename / DC Rename - Domain Rename Made Easy

Domain Rename / DC Rename - Domain Rename Made Easy Reference Articles: Steps on How to Rename a domain controller How Domain Rename Works Windows Server 2003 Active Directory Domain Rename Tools Implementing an Active Directory...

How to Rename a Windows 2000 Domain Controller

http://support.microsoft.com/kb/296592/ How to Rename a Windows 2000 Domain Controller SUMMARY It is not possible to rename a Windows 2000 domain controller as long as it is in service as a domain controller because of the extensive changes that need...

Windows Server 2003 Active Directory Domain Rename Tools

http://technet.microsoft.com/en-us/windowsserver/bb405948.aspx Windows Server 2003 Active Directory Domain Rename Tools Download Windows Server 2003 Active Directory Domain Rename Tools 364 KB Updated: Aug 19, 2004 Understanding How Domain Rename Works 300 KB Microsoft Word file Updated: Dec 18, 2003 Get...

Rename a domain controller

http://technet.microsoft.com/en-us/library/cc782761.aspx Rename a domain controller Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 To rename a domain controller 1. Open Command Prompt. 2. Type: netdom computername CurrentComputerName/add:NewComputerName This command will update...

How Domain Rename Works

You can use the domain rename process to change the names of your domains, and you can also use it to change the structure of the domain trees in your forest. This process involves updating the Domain Name System (DNS)...

Domain Rename FAQ's

Ques1. What are the Domain Rename Requirement? Ans; · Exchange 2003 SP1: If your Active Directory forest contains only Exchange 2003 SP1 servers, you can run the domain rename operation, but you must also use the Exchange Domain Rename Fix-up...

Windows Server Microsoft Active Directory DCPROMO procedure explained

Windows Server 2008 : DCPROMO OS Compatibility Windows Server 2008 domain controllers have a new more secure default for the security setting named "Allow cryptography algorithms compatible with Windows NT 4.0." This setting prevents Microsoft Windows and non-Microsoft...

Access is denied

When you face the issue of access is denied, please refer to the following sequence of steps for troubleshooting: • Binding Order of NIC Cards • SMB • DFS Service -- > started and Running • Permissions on SYSVOL •...

The Format of the specified network name is invalid

The Format of the specified network name is invalid. • Binding Order of the NIC Card • SMB • DNS • Enable NETBIOS over TCP/IP • The "Register this connection in DNS" - Checked...

Not able to access Domain via \\domainname\sysvol errormessage: "No network provider accepted the given network path"

Not able to access Domain via \\domainname\sysvol errormessage: "No network provider accepted the given network path" • Binding Order • TCP/IP Net BIOS Helper Service • MaxPacketSize and EnablePMTUBHDetect in case of WAN • Disable TCPChimney, EnableRSS, and TCPA in...

Not enough storage is available to complete this operation

Not enough storage is available to complete this operation To resolve this problem, add the MaxTokenSize registry entry and the MaxUserPort registry entry on the affected domain controllers. To do this, follow these steps: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters New DWORD Value. 'MaxTokenSize' =...

The authentication service is unknown

The authentication service is unknown. • Check the NetLogon Service. • Binding order of the NIC card. • Update the NIC Drivers...

There are no more endpoints available from the endpoint mapper

There are no more endpoints available from the endpoint mapper. "No more endpoints available" means the RPC endpoint mapper, which runs on port 135 TCP, was not able to use a port above 1024 for a service that runs over...

Run the Dfsutil /PurgeMupCache command

Run the Dfsutil /PurgeMupCache command As taken from KB 887303 Run the Dfsutil.exe program with the /PurgeMupCache switch to flush the local DFS/MUP cached information. The Dfsutil.exe program is included in the Windows 2000 Server Support Tools and the Windows...

Make sure that the domain controllers are not in a journal wrap state

Make sure that the domain controllers are not in a journal wrap state As taken from KB 887303 To see if a domain controller is in a journal wrap state, view the File Replication service log in Event Viewer, and...

Make sure that the Bypass traverse checking right is granted to the required groups

Make sure that the Bypass traverse checking right is granted to the required groups As taken from KB 887303 The Bypass traverse checking right must be granted to the following groups on the domain controllers: · Administrators · Authenticated Users...

Examine the contents and the permissions of the Sysvol folder

Examine the contents and the permissions of the Sysvol folder As taken from KB 887303 By default, the Sysvol folder is located in the %systemroot% folder. The Sysvol folder contains the domain's Group Policy objects, the Sysvol and Netlogon shares,...

Make sure that Distributed File System (DFS) is enabled on all computers

Make sure that Distributed File System (DFS) is enabled on all computers As taken from KB 887303 All domain controllers must run the Distributed File System service because the Sysvol share is a DFS volume. Additionally, the DFS client must...

Make sure that the TCP/IP NetBIOS Helper service is started on all computers

Make sure that the TCP/IP NetBIOS Helper service is started on all computers As taken from KB 887303 All computers on the network must run the TCP/IP NetBIOS Helper service. To verify that the TCP/IP NetBIOS Helper service is running...

Examine the Server Message Block signing (SMB signing) settings on the client computers and member servers

Examine the Server Message Block signing (SMB signing) settings on the client computers and member servers As taken from KB 887303 The Server Message Block (SMB) signing settings define whether the computers on the network digitally sign communications. If the...

Examine the DNS settings and network properties on the servers and client computers

Examine the DNS settings and network properties on the servers and client computers As taken from KB 887303 In the local area connection properties, Client for Microsoft Networks must be enabled on all servers and client computers. The File and...

Certificate Authority Monitor

Certificate Authority Monitor Today I was working on a PKI Case dealt with Certificates used through “Microsoft Office Communication Server 2007 integrated with Avaya PDX.”. While working found a CA monitoring script wherein we need to make sure to...

You cannot publish V2 Template to issue

You cannot publish V2 Template to issue Issue: If you install enterprise CA on Windows 2003 Standard Edition you cannot publish V2 Template to issue. Now if we do in place upgrade of OS to windows 2008 Enterprise edition,...

Cryptography Key Location in windows Vista and 2008

Cryptography Key Location in windows Vista and 2008 Cryptography Keys are stored in different location in windows vista and 2008. Following is old and new location. User:- XP & 2003 :- %APPDATA%\Microsoft\crypto\RSA\User SID. ...

Remote Encryption does not require remote server to be trusted for delegation

Subject: Remote Encryption does not require remote server to be trusted for delegation. Hello Team, FYI.. windows 2008 and windows vista remote encryption does not require the remote server to be trusted for delegation. Local EFS certificate is...

Wild card character support

Wild card character support Wild card character support in subject name of certificate is supported however it works only for one level in domain hierarchy. For example, *.contoso.com represents contoso.com and all the sub-domains for contoso.com. ...

Bitlocker

Bitlocker ============= TPM trusted platform module _____ TCG - Bios Complaint Two partitions NTFS For security / encryption of hard data TPM trusted platform module TPM, abbreviated for Trusted Platform Module is a special chipset on...

Trust Issues

Trust Issues Q1. After how long the domain trust within forest will be broken if the FSMO dc in a trust domain is down. Please correct me if my understanding is incorrect. Ans. The trust itself will not be affected...

SD propagator - Manually initializing the SD propagator thread to evaluate inherited permissions for objects in Active Directory

SD propagator Manually initializing the SD propagator thread to evaluate inherited permissions for objects in Active Directory Manually initializing the SD propagator thread to evaluate inherited permissions for objects in Active Directory http://support.microsoft.com/kb/251343 SUMMARY Microsoft Windows NT 4.0 and earlier...

Restricting Active Directory replication traffic and client RPC traffic to a specific port

Restricting Active Directory replication traffic and client RPC traffic to a specific port http://support.microsoft.com/kb/224196 Restricting Active Directory replication traffic and client RPC traffic to a specific port SUMMARY By default, Active Directory replication remote procedure calls (RPC) occur dynamically over...

Group Policy Debug Log Settings

Group Policy Debug Log Settings The below article has got information about enabling different debug loggings which are required for troubleshooting various Windows issues. UserEnv Debug Logging Userenv logging is useful when troubleshooting group Policy application related...

How to setup Folder Redirection through Group Policy?

How to setup Folder Redirection through Group Policy? Configuring Folder Redirection This Article is taken from Technet as-is: http://technet.microsoft.com/library/cc786749.aspx Configuring Folder Redirection Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows...

FSMO Issues : Unable to Sieze Schema Master Role

FSMO Issues Unable to Seize Schema Master Role Unable to Seize Schema Master Role TITLE: Unable to Seize Schema Master Role Problem: Windows 2000 Server Problem Description When you try to seize the Schema Master Role you may recieve the...

Tech Update/Refresher - Growing DIT issues

Tech Update/Refresher - Growing DIT issues DIT Issue Problem: Issue with growing NTDS.DIT file on a Windows Server 2003 Domain Controller Description: You might find sometimes that the size of the Active Directory Database file which is "NTDS.DIT" grows indefinitely...

DCPROMO Troubleshooting

DCPROMO Troubleshooting These are the following steps that you may follow to troubleshoot DCPROMO issues. These steps will help you overcome most of the DCPROMO issues with and flexibility. The Following steps is a series of general steps that you...

Error message when you use the Active Directory Installation Wizard to add a member server in a Windows Server 2003 SP1 domain: "The Directory Service cannot perform the requested operation because a domain rename operation is in progress"

Error message when you use the Active Directory Installation Wizard to add a member server in a Windows Server 2003 SP1 domain: "The Directory Service cannot perform the requested operation because a domain rename operation is in progress" When you...

"Schema mismatch" error message occurs when you try to run the Active Directory Installation Wizard

"Schema mismatch" error message occurs when you try to run the Active Directory Installation Wizard http://support.microsoft.com/kb/838179 "Schema mismatch" error message occurs when you try to run the Active Directory Installation Wizard SYMPTOMS When you run the Active Directory...

You receive LDAP bind errors after you run Dcpromo to install the first Windows Server 2003 computer in a domain

You receive LDAP bind errors after you run Dcpromo to install the first Windows Server 2003 computer in a domain http://support.microsoft.com/kb/834317 SYMPTOMS After you run the Dcpromo.exe tool to install the first Microsoft Windows Server 2003 computer in a domain,...

Dcpromo.exe Does Not Work if the Domain Naming Master Is Not a Global Catalog

Dcpromo.exe Does Not Work if the Domain Naming Master Is Not a Global Catalog SYMPTOMS When you are running Dcpromo.exe to create a grandchild domain, the operation may not work if the domain controller that holds the domain naming...

"Logon failure: the target account name is incorrect" error when promoting domain controllers or creating replicas

"Logon failure: the target account name is incorrect" error when promoting domain controllers or creating replicas SYMPTOMS When you try to promote domain controllers in new child domains or create replicas, you may receive the following error message: Logon Failure:...

DCPROMO Error message: The wizard cannot gain access to the list of domains in the forest

DCPROMO Error message: The wizard cannot gain access to the list of domains in the forest SYMPTOMS When you attempt to use Dcpromo.exe to move a Windows 2000-based, or a Windows Server 2003-based server into an existing domain, the following...

Dcpromo Demotion of Last Domain Controller in Child Domain Does Not Succeed

Dcpromo Demotion of Last Domain Controller in Child Domain Does Not Succeed SYMPTOMS The domain naming master Flexible Single Master Operation (FSMO) role holder is... The domain naming master Flexible Single Master Operation (FSMO) role holder is assigned to the...

Windows 2000 DS - Getting Access Denied while running DCPROMO

Windows 2000 DS - Getting Access Denied while running DCPROMO Issue: Getting Access Denied while running DCPROMO on a Windows 2000 Server Resolution: + Verified that the DNS was working properly. + Verified that the server was...

Troubleshooting Active Directory Installation Wizard Problems

Troubleshooting Active Directory Installation Wizard Problems http://technet.microsoft.com/en-us/library/bb727058.aspx Overview Active Directory Installation Wizard relies on a number of systems in Windows 2000 Server, including DNS registration and resolution, LDAP query and response, Kerberos authentication, Active Directory replication, FRS replication,...

DB Upgrade/DC Promotion/DC Demotion

DB Upgrade/DC Promotion/DC Demotion http://technet.microsoft.com/en-us/library/cc756637.aspx DB Upgrade/DC Promotion/DC Demotion Applies To: Windows Server 2008 The Security Accounts Manager (SAM) database changes state (active or inactive): During an operating system upgrade. When a server becomes a domain controller. When a server...

How Dcpromo.exe Adds Display Specifiers to Active Directory Forests

How Dcpromo.exe Adds Display Specifiers to Active Directory Forests http://support.microsoft.com/kb/308592 How Dcpromo.exe Adds Display Specifiers to Active Directory Forests SUMMARY You use Active Directory promotion (Dcpromo.exe) to add domain controllers to Windows 2000 server forests. This article describes the role...

How to use the Install from Media feature to promote Windows Server 2003-based domain controllers

How to use the Install from Media feature to promote Windows Server 2003-based domain controllers Kb 311078 System state > Alternate Loc > Dcpromo /adv The Install From Media (IFM) Feature allows System Administrators to actively promote a new Domain...

Active Directory Installation and Removal Issues

Active Directory Installation and Removal Issues http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/distrib/dsbi_add_fvhd.mspx?mfr=true Active Directory Installation and Removal Issues To install and remove Active Directory, the Active Directory Installation Wizard (Dcpromo) is used. It is important that certain requirements are met to prevent an unsuccessful installation...

Adding or Removing a Domain During Dcpromo Requires Access to the Domain Naming Master FSMO Role Holder

Adding or Removing a Domain During Dcpromo Requires Access to the Domain Naming Master FSMO Role Holder http://support.microsoft.com/kb/254933 Adding or Removing a Domain During Dcpromo Requires Access to the Domain Naming Master FSMO Role Holder SUMMARY The domain naming master...

How to promote and demote domain controllers in Windows 2000

How to promote and demote domain controllers in Windows 2000 http://support.microsoft.com/kb/238369 How to promote and demote domain controllers in Windows 2000 SUMMARY This article describes how to promote or demote a domain controller to a stand-alone server...

CrashOnAuditFail

CrashOnAuditFail Crashonauditfail This Registry Setting "Crashonauditfail" if enabled will cause the Domain Controller server to reboot when the size of Audit Logs is to full capacity and there is no more space to write Audit Event Logs without overwriting the...

Windows Fast Logon Optimization Feature

Windows Fast Logon Optimization Feature http://technet.microsoft.com/en-us/library/cc780527.aspx Fast Logon Optimization Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 Fast Logon Optimization The Fast Logon Optimization feature is set by default...

Group Policy slow link detection

Group Policy slow link detection http://technet.microsoft.com/en-us/library/cc978717.aspx Group Policy slow link detection Computer Configuration\Administrative Templates\System\Group Policy Description Defines a slow connection for purposes of applying and updating Group Policy. If the rate at which data is transferred from the domain controller...

How a slow link is detected for processing user profiles and Group Policy

How a slow link is detected for processing user profiles and Group Policy http://support.microsoft.com/kb/227260 How a slow link is detected for processing user profiles and Group Policy SUMMARY This article describes how a slow link is detected in Windows 2000...

Ports for Domains and Trusts - How to configure a firewall for domains and trusts

Ports for Domains and Trusts - How to configure a firewall for domains and trusts http://support.microsoft.com/kb/179442 How to configure a firewall for domains and trusts SUMMARY This article describes how to configure a firewall for domains and trusts. Note: Not...

Error Message: Request timed out.

Windows Server 2003 SP2 only Error Message: Request timed out. http://msdn.microsoft.com/en-us/library/ms819617.aspx Explanation: The ping command timed out because there was no reply from the host. User Action: Ping your local address 127.0.0.1. This will tell you that TCP is functioning....

EnablePMTUDiscovery

EnablePMTUDiscovery EnablePMTUDiscovery is a registry key that can enable the windows operating system to discover the working MTU size in effect itself by sending packets of variable size to the destination. By sending packets of data in variable sizes the...

"Access Denied" error message occurs when you impersonate an account in ASP.NET and then call STA

"Access Denied" error message occurs when you impersonate an account in ASP.NET and then call STA http://support.microsoft.com/kb/325791 "Access Denied" error message occurs when you impersonate an account in ASP.NET and then call STA COM components SYMPTOMS If you impersonate a...

Replication fails with access denied and getting FRS event 13562 - crashonauditfail

Replication fails with access denied and getting FRS event 13562 - crashonauditfail TITLE: Replication fails with access denied and getting FRS event 13562 Problem Windows 2000 Server Problem Description One Domain Controller fails to replicate getting access denied error. FRS...

"You may not have appropriate rights" error message when you try to open the Domain Security Policy console or the Domain Controller Security Policy console from the command prompt

"You may not have appropriate rights" error message when you try to open the Domain Security Policy console or the Domain Controller Security Policy console from the command prompt SYMPTOMS When you try to open the Domain Security Policy console...

How to configure an authoritative time server in Windows Server 2003

How to configure an authoritative time server in Windows Server 2003 http://support.microsoft.com/kb/816042 How to configure an authoritative time server in Windows Server INTRODUCTION Windows Server includes W32Time, the Time Service tool that is required by the Kerberos authentication protocol. The...

Cumulative Time Zone update for Microsoft Windows operating systems

Cumulative Time Zone update for Microsoft Windows operating systems: Important patches are applied to your operating system running on your Domain Controllers through this update. This update includes time zone updates that should be applied to Windows Server Operating...

How to Troubleshoot Black Hole Router Issues

How to Troubleshoot Black Hole Router Issues http://support.microsoft.com/kb/314825 How to Troubleshoot Black Hole Router Issues SUMMARY This article defines the term "black hole" router, describes a method of locating black hole routers, and suggests three ways to avoid the data...

How to force Kerberos to use TCP instead of UDP in Windows Server 2003, in Windows XP, and in Windows 2000

How to force Kerberos to use TCP instead of UDP in Windows Server 2003, in Windows XP, and in Windows 2000 http://support.microsoft.com/kb/244474 How to force Kerberos to use TCP instead of UDP in Windows SUMMARY The Windows Kerberos authentication package...

Access this computer from the network

Access this computer from the network http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/gp/524.mspx?mfr=true Access this computer from the network Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment Description Determine which users and groups are allowed to connect to the computer over the network....

AD replication not working after schema update.

AD replication not working after schema update. ISSUE: AD replication not working after schema update. + The customer did an adprep /forest prep on the Windows 2003 DC (having all FSMO roles). + The Schema Update was unsuccessful. + Active...

NETLOGON 3210, 5719

NETLOGON 3210, 5719 Issue: You might see a combination of event id's NETLOGON 3210 and NETLOGON 5719 in the event viewer after deploying multiple workstation, client or member server(s) from the same system image. Cause: The cause of this issue...

You Cannot Start the Active Directory Users and Computers Tool Because the Server Is Not Operational

You Cannot Start the Active Directory Users and Computers Tool Because the Server Is Not Operational http://support.microsoft.com/kb/323542 CAUSE: These issues may occur if TCP/IP filtering is configured to permit only port 80 for TCP/IP traffic. RESOLUTION: Port 389 is used...

Protocols and Interfaces to Active Directory

Protocols and Interfaces to Active Directory API Name Description LDAP C API As described in RFC 1823 for LDAPv3, LDAP API is a C language API to the LDAP network protocol. ADSI COM interface to Active Directory that abstracts the...

How to optimize Active Directory replication in a large network

How to optimize Active Directory replication in a large network http://support.microsoft.com/kb/244368 How to optimize Active Directory replication in a large network SUMMARY This article describes how to optimize Active Directory replication in large network configurations. MORE INFORMATION...

How to perform an authoritative restore to a domain controller in Windows 2000

How to perform an authoritative restore to a domain controller in Windows 2000 http://support.microsoft.com/kb/241594 How to perform an authoritative restore to a domain controller in Windows 2000 SUMMARY This article discusses how to perform an authoritative restore of the Active...

Account Passwords and Policies

Account Passwords and Policies Microsoft Windows NT Server 4.0, Windows 2000, Windows XP, and the Windows Server 2003 Family Password and account lockout settings are designed to protect accounts and data in your organization by mitigating the threat...

How to use the EventCombMT utility to search event logs for account lockouts

How to use the EventCombMT utility to search event logs for account lockouts http://support.microsoft.com/kb/824209 How to use the EventCombMT utility to search event logs for account lockouts SUMMARY This article describes how to use the EventCombMT utility (EventCombmt.exe) to...

ADVISORY: Set a custom attribute as confidential & delegate read perms to a group

ADVISORY: Set a custom attribute as confidential & delegate read perms to a group TITLE: ADVISORY: Set a custom attribute as confidential & delegate read perms to a group The issue we are currently experiencing is: "How to change viewable...

Windows Installer Error 14007: The requested lookup key was not found in any active activation account

Windows installer SOX060201700050 Windows Installer Error 14007: The requested lookup key was not found in any active activation account If you are getting this error on trying to install any application Error 14007: The requested lookup key was not found...

Active Directory Replication in Depth - USN

Active Directory Replication in Depth - USN How to find USN of an Object from Active Directory: C:\>repadmin /showobjmeta * [DN path of object] > obj_delhi.txt * = All Dc's [DN path of object] = Object whose...

How does the Active Directory Replication Model Works

How does the Active Directory Replication Model Works http://technet.microsoft.com/en-us/library/cc772726(v=ws.10).aspx How does the Active Directory Replication Model Works Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2, Windows Server 2008, Windows...

How to detect and recover from a USN rollback in Windows Server 2003, Windows Server 2008, and Windows Server 2008 R2

How to detect and recover from a USN rollback in Windows Server 2003, Windows Server 2008, and Windows Server 2008 R2 http://support.microsoft.com/kb/875495 How to detect and recover from a USN rollback in Windows Server 2003, Windows Server 2008, and Windows...

USN Rollback

USN Rollback We are working a USN Rollback issue (at least that's what we suspect) wherein we have a mix of 2k3 and R2 servers (one dc in parent and 3 child domains). Conditions that indicate the possibility of a...

Determining the product option of a Windows NT setup

Determining the product option of a Windows NT setup HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions\ProductType WinNT = Client = Windows NT workstation, Windows XP/2000 Professional, Windows XP Home LanmanNT = DC = Windows NT/2000/2003 Server domain controller (primary or backup) ServerNT = Member Server =...

Things to consider when you host Active Directory domain controllers in virtual hosting environments

Considerations when hosting Active Directory domain controller in virtual hosting environments http://support.microsoft.com/kb/888794 Things to consider when you host Active Directory domain controllers in virtual hosting environments SUMMARY A virtual hosting environment lets you run multiple guest operating systems on a...

UPHClean : Install UPHClean for User Login & Profile Unload Issues

UPHClean Download Links: Download UPHClean using the following Links: · UPHClean-Setup.msi · UPHClean readme.txt Alternate Download Link: Official Download Link: · http://www.microsoft.com/downloads/details.aspx?FamilyId=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en A service to help with slow log off and unreconciled profile problems. User Login & Profile Unload Issues...

Error Message: Logon Failure: The Target Account Name Is Incorrect

Error Message: Logon Failure: The Target Account Name Is Incorrect http://support.microsoft.com/kb/310340 Error Message: Logon Failure: The Target Account Name Is Incorrect SYMPTOMS When you try to gain access to a child domain controller from the parent domain, you may receive...

"Logon failure: the target account name is incorrect" error when promoting domain controllers or creating replicas

"Logon failure: the target account name is incorrect" error when promoting domain controllers or creating replicas http://support.microsoft.com/kb/296993 "Logon failure: the target account name is incorrect" error when promoting domain controllers or creating replicas SYMPTOMS When you try...

SID

SID SID (Security Identifier) A security identifier (SID) is a unique value of variable length used to identify a trustee. Each account has a unique SID issued by an authority, such as a Windows domain controller, and stored in...

SPN

SPN Known Issues Duplicate SPN - use ldifde To detect Duplicate SPN's in the Domain use LDIFDE Dump. Ldifde -d <Domain Name> -f <file name> Kerberos Event Id : 4 Will give the exact duplicate entry. The Kerberos Event ID...

SID Duplicate Issue

SID Duplicate Issue CASE 01: W2K AD: "Computer name missing in its primary W2K AD: "Computer name missing in its primary Number: SOX021231700011 TITLE: W2K AD: "Computer name missing in its primary [] Problem Windows 2000 Professional [] ID: SOX021231700011...

TCP/IP NETBIOS helper Service

TCP/IP NETBIOS helper Service This service is used while accessing shares on a windows workstation. http://technet.microsoft.com/en-us/library/cc757956(v=ws.10).aspx TCP/IP NetBIOS Helper (System Services for the Windows Server 2003 Family and Windows XP Operating Systems) Applies To: Windows Server 2003, Windows Server 2003...

How to delay loading of specific services

How to delay loading of specific services http://support.microsoft.com/kb/193888/EN-US/ The Registry subkeys for services are located in the following path and can control how services are loaded. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<Service name> Important This section, method, or task contains steps that tell you how...

Description of Netdom.exe Syntax and Versions

Description of Netdom.exe Syntax and Versions http://support.microsoft.com/kb/329721 Description of Netdom.exe Syntax and Versions SUMMARY You can use the Netdom.exe tool to reset the secure channel between a workstation, server, or domain controller. This article describes the syntax for...

Error Message "Target Principal Name is Incorrect" When Manually Replicating Data between Domain Controllers

Error Message "Target Principal Name is Incorrect" When Manually Replicating Data between Domain Controllers For resetting secure channel on a DC, use this:--> netdom resetpwd /server:server_name /userd:domain_name\administrator /passwordd:administrator_password http://support.microsoft.com/kb/288167 Error Message "Target Principal Name is Incorrect" When Manually Replicating Data...

How To Use Netdom.exe to Reset Machine Account Passwords of a Windows 2000 Domain Controller

How To Use Netdom.exe to Reset Machine Account Passwords of a Windows 2000 Domain Controller http://support.microsoft.com/kb/260575 How To Use Netdom.exe to Reset Machine Account Passwords of a Windows 2000 Domain Controller SUMMARY Each Windows-based computer maintains a machine account password...

Resetting Domain Member Secure Channel

Resetting Domain Member Secure Channel http://support.microsoft.com/kb/175024 Resetting Domain Member Secure Channel SYMPTOMS The domain member Netlogon service may log error 3210 or 5721, but the Netlogon service logs error 5722 in the system event log of the domain controller. You...

Secure Channel

Secure Channel Secure Channel is an encrypted channel for communication with-in a domain. The channel is encrypted with the machine account password for the machine that is communicating with the Domain Controller. There are Domain Controllers that have a secure...

Extending Your Active Directory Schema in Windows Server 2003 R2

Extending Your Active Directory Schema in Windows Server 2003 R2 http://technet.microsoft.com/en-us/library/cc772804.aspx Extending Your Active Directory Schema in Windows Server 2003 R2 Applies To: Windows Server 2003 R2 The schema defines objects and attributes and the types of data they can...

How to mark an attribute as confidential in Windows Server 2003 Service Pack 1

How to mark an attribute as confidential in Windows Server 2003 Service Pack 1 http://support.microsoft.com/kb/922836 How to mark an attribute as confidential in Windows Server 2003 Service Pack 1 SUMMARY In the Active Directory directory service for Microsoft Windows Server...

HOW TO: Upgrade the Schema to Upgrade Domain Controllers to Released Version of Windows 2000

HOW TO: Upgrade the Schema to Upgrade Domain Controllers to Released Version of Windows 2000 http://support.microsoft.com/kb/240427 HOW TO: Upgrade the Schema to Upgrade Domain Controllers to Released Version of Windows 2000 SUMMARY Microsoft supports upgrading Windows 2000 servers running versions...

Common Mistakes When Upgrading a Windows 2000 Domain To a Windows 2003 Domain

Common Mistakes When Upgrading a Windows 2000 Domain To a Windows 2003 Domain http://support.microsoft.com/kb/555040 Common Mistakes When Upgrading a Windows 2000 Domain To a Windows 2003 Domain SUMMARY This KB helps avoiding common mistakes while upgrading their system. SYMPTOMS A...

Error message when you run the Active Directory Installation Wizard: "The version of the Active Directory schema of the source forest is not compatible with the version of Active Directory on this computer"

Error message when you run the Active Directory Installation Wizard: "The version of the Active Directory schema of the source forest is not compatible with the version of Active Directory on this computer" http://support.microsoft.com/kb/917385 Error message when you run the...

Schema Update requires Write access to schema in Active Directory

Article ID : 285172 Schema Update requires Write access to schema in Active Directory http://support.microsoft.com/kb/285172 Schema Updates Require Write Access to Schema in Active Directory SUMMARY This article discusses schema updates. IMPORTANT: This article contains information about modifying the Active...

1704 : Event ID 1704 indicates that Group Policy security settings are applied to a Windows 2000-based computer even though Group Policy security settings are not applied

1704 Event ID 1704 indicates that Group Policy security settings are applied to a Windows 2000-based computer even though Group Policy security settings are not applied http://support.microsoft.com/kb/884559 When you update Group Policy security settings on a Microsoft Windows 2000-based computer,...

ESENT event IDs 1000, 1202, 412, and 454 are logged repeatedly in the Application log

ESENT event IDs 1000, 1202, 412, and 454 are logged repeatedly in the Application log 0x4b8 This issue occurs if the local Group Policy database file is corrupt. Resolution: reset the security database: To resolve this...

Event ID 1000 and 1202 After Configuring Policies

Event ID 1000 and 1202 After Configuring Policies 0x4b8 A conflict in Group Policy can cause these events to occur. These error messages can occur if the "Rename Administrator Account" security policy is enabled and then set to an account...

How to resolve RPC Endpoint Mapper errors

How to resolve RPC Endpoint Mapper errors Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow...

Troubleshooting RPC Endpoint Mapper errors using the Windows Server 2003 Support Tools from the product CD

Troubleshooting RPC Endpoint Mapper errors using the Windows Server 2003 Support Tools from the product CD http://support.microsoft.com/kb/839880 Troubleshooting RPC Endpoint Mapper errors using the Windows Server 2003 Support Tools from the product CD SUMMARY You may experience RPC Endpoint Mapper...

How IT Works Troubleshooting RPC Errors

How IT Works Troubleshooting RPC Errors How IT Works Troubleshooting RPC Errors If you've worked with Windows server platforms over the years, chances are you've seen remote procedure call (RPC) errors at one time or another. They tell you that...

RPC Troubleshooting

RPC Troubleshooting RPC -> 135 (port no.) -> any port above 1024 is assigned. -> If we get RPC end point mapping error -> Ports (above 1024 ) are blocked. ISSUES :-> AD Replication, GP (endpoint mapping error). There are...

RODC : RODC Frequently Asked Questions

RODC RODC Frequently Asked Questions http://technet.microsoft.com/en-us/library/cc754956.aspx RODC Frequently Asked Questions Applies To: Windows Server 2008 This section includes frequently asked questions (FAQ) and answers pertaining to read-only domain controllers (RODCs). The questions range from general background information to in-depth technical...

Restartable AD DS Step-by-Step Guide

Restartable AD DS Step-by-Step Guide http://technet.microsoft.com/en-us/library/cc732714.aspx Restartable AD DS Step-by-Step Guide Applies To: Windows Server 2008, Windows Server 2008 R2 You can use Microsoft Management Console (MMC) snap-ins, or the Net.exe command-line tool, to stop or restart Active...

Restartable AD DS :: Restartable Active Directory Domain Service

Restartable AD DS Restartable Active Directory Domain Service As taken from: Restartable AD DS Step-by-Step Guide http://technet.microsoft.com/en-us/library/cc732714.aspx You can change the default by modifying the DsrmAdminLogonBehavior registry entry. By modifying the value for that registry entry, you can log on...

Password Change and its Replication

Password Change and its Replication Extract of one webcast by Mike Resnick, I hope this will make things clear about password change replication: http://support.microsoft.com/default.aspx?scid=%2Fservicedesks%2Fwebcasts%2Fen%2Fwc022703%2Fwct022703.asp Microsoft Corporation Microsoft Windows 2000 Server and Windows Server 2003: Password and Account...

Windows 2000 NAT Editors

Windows 2000 NAT Editors http://support.microsoft.com/default.aspx?scid=kb;EN-US;317509 SUMMARY This article describes the network address translation (NAT) editors that are included in Windows 2000. MORE INFORMATION Windows 2000 includes built-in NAT editors for the following protocols: · File Transfer Protocol (FTP)...

How Kerberos works

How Kerberos works 1) Kerberos 5: Only Supported for IE 5.5+ Kerberos 5 is supported for Internet Explorer browsers continuing IE 5.5 and then later browsers. 2) Kerberos doesnot works on Internet This is important to note that...

Troubleshooting Kerberos Delegation

Troubleshooting Kerberos Delegation Latest Hotfixes An error code is returned when a Kerberos client requests a TGT against a Windows Server 2008-based domain controller: "KERB5KDC_ERR_C_PRINICPAL_UNKNOWN" View products that this article applies to. Article ID: 951191 Last Review:...

Troubleshooting Kerberos Errors

Troubleshooting Kerberos Errors Download Link: · Download Article : Troubleshooting Kerberos Errors CHECKLIST From a command prompt • Verify that SPNs are registered for the middle tier services. • Verify that SPNs are registered for the back-end services....

Kerberos: The Network Authentication Protocol

Kerberos: The Network Authentication Protocol The Microsoft Windows Server 2003 operating system implements the Kerberos version 5 authentication protocol. Windows Server 2003 also implements extensions for public key authentication. The Kerberos authentication client is implemented as a security support...

Kerberos Double-hop

Kerberos Double-hop + On the client we can Ping the middle tier (Application server) and the backend sql servers by FqDN. + Made the Middle server trusted for delegation for any service over kerberos protocol. + Made the Max...

Kerberos Articles

Kerberos Articles 1) Kerberos 5: Only Supported for IE 5.5+ Kerberos 5 is supported for Internet Explorer browsers continuing IE 5.5 and then later browsers. 2) Kerberos doesnot works on Internet This is important to note that the...

How to allow users who are not administrators to install MSI packages

Hacks How to allow users who are not administrators to install MSI packages http://support.microsoft.com/kb/259459 How to allow users who are not administrators to install MSI packages SUMMARY This article describes three methods by which an administrator can enable a nonadministrator...

DNS Spoofing - Security Updates specific to DNS Spoofing:

DNS Spoofing Security Updates specific to DNS Spoofing: KB 951746 KB 951748 ...

To export the DNS configuration on DNS server

To export the DNS configuration on DNS server To do that, please follow the steps below: a. Install the Windows 2003 support tool from the SUPPORT\TOOLS folder on the Windows 2003 CD. b. At the command prompt, run the...

DNS Issue: "The server forwarders cannot be updated. A zone configuration problem occurred"

DNS Issue: "The server forwarders cannot be updated. A zone configuration problem occurred" SRZ080516000265 "The server forwarders cannot be updated. A zone configuration problem occurred". Based on the research in internal article, the issue will occur with...

DNS configuration : To configure forwarders for a DNS server using the Windows graphical user interface:

DNS configuration To configure forwarders for a DNS server using the Windows graphical user interface: SRZ080516000265 1. On DNS for the domain delta-corp.com, open the DNS snap-in. 2. In the console tree, click the applicable DNS server. 3. On...

Active Directory domain controllers are not supported as Exchange Server cluster nodes

Active Directory domain controllers are not supported as Exchange Server cluster nodes http://support.microsoft.com/kb/898634 INTRODUCTION Whether you are using a Microsoft Cluster Server (MSCS)-based clustering solution or a third-party clustering solution, we strongly recommend that you install Microsoft Exchange Server...

How to use Windows Server 2000, Windows Server 2003, and Windows Server 2008 cluster nodes as domain controllers

Windows Server 2000, Windows Server 2003, and Windows Server 2008 cluster nodes as domain controllers How to use Windows Server cluster nodes as domain controllers http://support.microsoft.com/kb/281662 SUMMARY Note The information in this article addresses a situation that you do not...

ADMT

ADMT Pre-requisites for ADMT: 1. DNS Name resolution should work both ways for both the Domains from one another. 2. After creating Trust, ADMT should work By Default: SId Filtering is enabled. To Disable:→ netdom Quartime command ...

How to establish trusts with a Windows NT-based domain in Windows Server 2003

How to establish trusts with a Windows NT-based domain in Windows Server 2003 support.microsoft.com/kb/325874 SUMMARY This step-by-step article describes how to establish a trust relationship between a Microsoft Windows NT 4.0-based domain and a Windows Server 2003-based domain. The creation...

When to create a shortcut trust

When to create a shortcut trust technet.microsoft.com/en-us/library/cc737939(v=ws.10).aspx Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 When to create a shortcut trust Shortcut trusts are one-way or two-way, transitive trusts...

When to create an external trust

When to create an external trust technet.microsoft.com/en-us/library/cc755427(v=ws.10).aspx Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 When to create an external trust You can create an external trust to form...

How Domain and Forest Trusts Work

How Domain and Forest Trusts Work technet.microsoft.com/en-us/library/cc773178(v=ws.10).aspx Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2, Windows Server 2008, Windows Server 2008 R2 Active Directory provides security across multiple domains...

Trust types

Trust types technet.microsoft.com/en-us/library/cc775736(v=ws.10).aspx Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 Trust types Communication between domains occurs through trusts. Trusts are authentication pipelines that must be present in order...

Understanding Trusts

TRUST Understanding Trusts technet.microsoft.com/en-us/library/cc731335.aspx Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012 Trusts A trust is a relationship, which you establish between domains, that makes it possible for users in one domain to be authenticated by...

Domain Trust

Domain Trust http://technet.microsoft.com/en-us/library/cc961481.aspx Domain Trust A domain trust is a useful way to allow users from a trusted domain to access services in a trusting domain. If all users and services can be managed in a single enterprise domain, there...

TRUST Issue: “The security database on the server does not have a computer account for this workstation trust relationship”

Trust Issue Users received the following message when they attempted to login across a trust: "The security database on the server does not have a computer account for this workstation trust relationship" To give you some information about the environment:...

What happens during an LDAP authentication?

What happens during an LDAP authentication? What happens during an LDAP authentication? Number : SOX060523700033 Created : 05/23/2006 Region : US TITLE: What happens during an LDAP authentication. [ ] ID: SOX060523700033 CRT: May 23...

INFO: How to Use ADSI to Query a Third-Party LDAP Server

INFO: How to Use ADSI to Query a Third-Party LDAP Server http://support.microsoft.com/kb/251195 SUMMARY The Lightweight Directory Access Protocol (LDAP) provider for Active Directory Service Interfaces (ADSI) is used to retrieve information from third-party LDAP servers. This article describes several...

Common LDAP RFCs

Common LDAP RFCs http://support.microsoft.com/kb/221606 This article enumerates the RFCs that define Lightweight Directory Access Protocol (LDAP). LDAPv2 RFC 1777 - Lightweight Directory Access Protocol The protocol described in this document is designed to provide access to the X.500 directory while...

Microsoft LDAP Error Codes

Microsoft LDAP Error Codes http://support.microsoft.com/kb/218185 SUMMARY Microsoft Windows 2000 Active Directory uses the Internet-standard Lightweight Directory Access Protocol (LDAP) to access information. In response to various LDAP requests, a domain controller returns responses containing field LDAP error codes, which indicate...

About Lightweight Directory Access Protocol

About Lightweight Directory Access Protocol The Lightweight Directory Access Protocol (LDAP) API provides a mechanism for connecting to, searching, and modifying Internet directories. The LDAP guide documents the functions and data structures that constitute the LDAP 3 API draft...

Network Traces

Network Traces Netmon OneClick. It’s a cool tool to send to your customers/end users to capture a problem behavior and as the name states, the tool installs netmon3 and captures the activity in question. The capture will terminate after...

TCP/IP

TCP/IP TCP/IP is the set of protocol suite as described under the OSI model for network communication in and on the Internet and Intranet networks. It describes sub-netting and other similar methods to define networks and helps then communicate with...

Microsoft Windows xp sp3 : Known Issues

Microsoft Windows xp sp3 Known Issues The bug is Windows SE 238314 - Unable to access shared network resources in domain joined xpsp3 machine from other machines while connected to a private network =============================== Note: As of now, they are...

How to view and set LDAP policy in Active Directory by using Ntdsutil.exe

How to view and set LDAP policy in Active Directory by using Ntdsutil.exe http://support.microsoft.com/kb/315071 SUMMARY This step-by-step article describes how to manage Lightweight Directory Access Protocol (LDAP) policies by using the Ntdsutil.exe tool. To make sure that domain controllers can...

To delegate control of the group priority attribute

To delegate control of the group priority attribute CN=Group-Priority,CN=Schema,CN=Configuration,DC=tsged,DC=com Assessment: ================= <Suggestions for troubleshooting, data collection, etc> 1. Open up ADSIEdit.msc. 2. Right click on the domain name, and select Properties 3. Click on the "Security" tab. 4. Click the...

How to remove (retired) objects from Active Directory

How to remove (retired) objects from Active Directory SOS080324700001 Problem Description How to remove retired objects ------------------------------ Problem Description-: When I execute command "repadmin /showvector /latency cn=Configuration,dc=domain,dc=com" We will obtain the following result. Site\DC (retired) @ USN 130898 @ Time...

Common Metadata Cleanup Issues

Common Metadata Cleanup Issues Metadata cleanup:- If you try to connect to the same server that you want to delete, when you try to delete the server, you may receive the following error message: Error 2094. The DSA Object cannot...

Cannot do metadata cleanup for a Domain Controller because other child or tree root domains are dependent on it

Cannot do metadata cleanup for a Domain Controller because other child or tree root domains are dependent on it Domain Management ntdsutil domain management delete NC <> ISSUE: You might receive the following error message while trying to do metadata...

"DsRemoveDsDomainW error 0x2015" error message when you use Ntdsutil to try to remove metadata for a domain controller that was removed from your network in Windows Server 2003

"DsRemoveDsDomainW error 0x2015" error message when you use Ntdsutil to try to remove metadata for a domain controller that was removed from your network in Windows Server 2003 Root | | | |→Child.Root |→Tree : DC 1) Meta for DC...

How to delete orphaned domain controllers from domain

How to delete orphaned domain controllers from domain Orphaned DC This article tells you the Action Plan on How to delete an Orphaned Domain Controller from the Active Directory Domain. To delete orphaned domain controllers from domain in future, follow...

How to detect Stale Accounts from AD

How to detect Stale Accounts from AD Stale Account Detection Stale account detection is required so that unused computer and user accounts can be removed from Active Directory. On domain controllers running Windows Server 2003 and Windows Server...

How to use the Showmeta command

How to use the Showmeta command Showmeta is a switch of the Repadmin Support tools utility. You can use the showmeta command to find data related to a particular Object. It helps in finding the originating write for the deletion...

Event ID 2108 and Event ID 1084 occur during inbound replication of Active Directory in Windows 2000 Server and in Windows Server 2003

Event ID 2108 and Event ID 1084 occur during inbound replication of Active Directory in Windows 2000 Server and in Windows Server 2003 http://support.microsoft.com/kb/837932 SYMPTOMS When inbound replication of the Active Directory directory service occurs, a destination domain controller...

How to restore deleted user accounts and their group memberships in Active Directory

How to restore deleted user accounts and their group memberships in Active Directory How to restore deleted user accounts and their group memberships in Active Directory http://support.microsoft.com/kb/840001/en-us?spid=12925&sid=1614 + LDP + Adrestore : Need to run it multiple times You can...

Some Important ADSIEDIT Active Directory Partition Paths to know about

Some Important ADSIEDIT Active Directory Partition Paths to know about Lost & Found Container Objects, whose parent OU's are missing (deleted) are moved into Lost & Found Container inside Active Directory. ADSIEDIT Path: ? Lost and...

Error Messages When Trying to Change User Properties

Ø This comes if you change the password for a user for whom you don't have the delegation for. Article ID : 236374 http://support.microsoft.com/kb/236374 Error Messages When Trying to Change User Properties This issue can occur if...

USN Rollback Complete Article

USN Rollback Complete Article This article describes what is USN Rollback and what issues does it cause and how to Troubleshoot USN Rollback Issue What is USN Rollback? To under this issue you should first read the following two articles:...

Problem with Roaming Profiles and Folder Redirection for single user on all machines, Scecli 1202, Userenv 1085.

Problem with Roaming Profiles and Folder Redirection for single user on all machines, Scecli 1202, Userenv 1085. Issue: > Roaming profiles my documents are not getting synchronized with the file server. > Folder Redirection not working > Scecli 1202, Userenv...

Description of the Excel 2007 hotfix package (Excel.msp, Xlconv.msp): August 26, 2008

Description of the Excel 2007 hotfix package (Excel.msp, Xlconv.msp): August 26, 2008 HOTFIX Download Available: · Download HOTFIX for KB 956836 http://support.microsoft.com/kb/956836 SUMMARY This article describes the Microsoft Office Excel 2007 issues that are fixed in the hotfix package that...

User Data and Settings Management : Explanation of how users get their profiles!

User Data and Settings Management Explanation of how users get their profiles! http://technet.microsoft.com/en-us/library/bb490855.aspx Abstract Designed for system administrators, this article explains the IntelliMirror® user data and settings management features for Windows® XP. These key components of change and configuration management...

Vista CSC-Office 2007 Excel XLS files changes not saved to Server when offline cache is enabled

Vista CSC-Office 2007 Excel XLS files changes not saved to Server when offline cache is enabled Read the details on any hotfix you send to the customer as some hotfixes enable registry settings that allow a change in behavior. So...

How to have Windows 2000 / XP roaming profile co-existence with Windows Vista

How to have Windows 2000 / XP roaming profile co-existence with Windows Vista Number : SOX070803700008 TITLE: How to have Windows 2000 / XP roaming profile co-existence with Windows Vista Problem: Win Vista Business N 32bit AL ID: SOX070803700008 CRT:...

Debugging User Profiles and System Policies in Windows NT 4.0

Debugging User Profiles and System Policies in Windows NT 4.0 http://support.microsoft.com/kb/154120 To enable the log file: 1. Rename the Userenv.dll file in the %Windir%\System32 directory to Userenv.orig or the unique name of your choice. 2. Copy the checked version of...

Vista -- User Profiles Applet Shows Temporary Instead of Local or Roaming

Vista -- User Profiles Applet Shows Temporary Instead of Local or Roaming ISSUE: You might see this issue in Windows Vista, that after a user logs on to the Windows Vista computer; the User Profiles Applet still shows that the...

Location of User Profile registry keys

Location of User Profile registry keys When a user logs into a computer that is running on any version of Windows, the users profile is loaded and the path to the location of the folder from which Windows loaded that...

How to give an Administrator access to the User Roaming Profile folder on the server share

How to give an Administrator access to the User Roaming Profile folder on the server share When you have Roaming profile configured for the users. As you all know, that the Roaming profile data is synchronized onto a server share...

Group policy setting that makes profiles mandatory

Group policy setting that makes profiles mandatory If you have Roaming Profile on the server for users, there is a group policy setting that makes profiles mandatory. Computer Configuration--->Policies--->Administrative Templates--->System--->User Profile--->Prevent Roaming Profile changes from being propagated to the server...

Add administrators to security ACLS using xcacls

Add administrators to security ACLS using xcacls Steps you need to follow to make sure that the Users who are a part of Administrators Group should be able to access the files and Folders of the roaming Profiles. 1) Download...

Userenv / Perf / W2K3/Userenv 1058:Not enough server storage is available to process this command

Userenv / Perf / W2K3/Userenv 1058:Not enough server storage is available to process this command SRZ080502000267 If this problematic server is a domain controller, then please perform the following steps to increase the paged pool size and IRPStackSize. 1. Click...

How to resolve most common Snap-in Issues

How to resolve most common Snap-in Issues There may be scenario when you are unable to open the snap-in that you want to work on using the Microsoft Management Console (mmc.exe) Window. The snap-in may fail to load the relevant...

"You may not have appropriate rights" error message when you try to open the Domain Security Policy console or the Domain Controller Security Policy console from the command prompt

"You may not have appropriate rights" error message when you try to open the Domain Security Policy console or the Domain Controller Security Policy console from the command prompt http://support.microsoft.com/kb/832214/en-us SYMPTOMS When you try to open the Domain Security Policy...

How to configure Windows Firewall in Windows XP Service Pack 2 to allow remote administration tools that use WMI, RPC, or DCOM

How to configure Windows Firewall in Windows XP Service Pack 2 to allow remote administration tools that use WMI, RPC, or DCOM How to configure Windows Firewall in Windows XP Service Pack 2 to allow remote administration tools that use...

Administrator cannot open Group Policy Management Console due to incorrect permissions in Active Directory.

Administrator cannot open Group Policy Management Console due to incorrect permissions in Active Directory. This issue occurs because the snap-in tries to read data from Active Directory by impersonating the users' credentials, but the users' whose account the snap-in is...

Unable to Run MMC or specific snap-ins due to group policy settings

Unable to Run MMC or specific snap-ins due to group policy settings Number : SOX000803700002 TITLE: Unable to Run MMC or specific snap-ins Problem: Windows 2000 Advanced Server ID: SOX000803700002 CRT: Aug 3 2000 MOD: Aug 3 2000 Problem Description...

Administrator May Be Unable to Edit Group Policy in Windows 2000 Domain

Administrator May Be Unable to Edit Group Policy in Windows 2000 Domain http://support.microsoft.com/kb/263166 SYMPTOMS If you are an administrator, you may be unable to modify Group Policy in a Windows 2000 domain. In addition, if you attempt to start any...

RSAT: Summary of Bugs, Known Issues, Limitations and call generators in RSAT Admin tools on Vista

RSAT: Summary of Bugs, Known Issues, Limitations and call generators in RSAT Admin tools on Vista RSAT: Summary of Bugs, Known Issues, Limitations and call generators in RSAT Admin tools on Vista and Windows Server 2008 admin tools Number :...

RSAT - Missing Terminal Services Profile, Environment, Sessions, Remote Control tabs in AD Users and Computers ( ADUC / DSA.MSC ) snapin

RSAT - Missing Terminal Services Profile, Environment, Sessions, Remote Control tabs in AD Users and Computers ( ADUC / DSA.MSC ) snapin Issue: After installing Remote Server Administration Tools (RSAT), you open a user account in Active Directory Users and...

You cannot open file shares or Group Policy snap-ins on a domain controller

You cannot open file shares or Group Policy snap-ins on a domain controller http://support.microsoft.com/kb/839499 SUMMARY You cannot open file shares or the Group Policy snap-ins on a Windows Server 2003 domain controller or on a Windows 2000 Server domain controller....

Server Message Block communication between a client-side SMB component and a server-side SMB component is not completed if the SMB signing settings are mismatched in Group Policy or in the registry

Server Message Block communication between a client-side SMB component and a server-side SMB component is not completed if the SMB signing settings are mismatched in Group Policy or in the registry http://support.microsoft.com/kb/916846 SYMPTOMS Server Message Block (SMB) communication between a...

Overview of SMB Signing

Overview of SMB Signing How to determine whether SMB signing is enabled in a network monitor trace To determine whether SMB signing is enabled, required at the server, or both, view the Negotiate Dialect Response from the server: SMB: R...

Microsoft SMB Protocol Packet Exchange Scenario

Microsoft SMB Protocol Packet Exchange Scenario This topic gives an example of a Microsoft SMB Protocol packet exchange between a client and a server. The following steps are an overview of the process: 1. The client and server establish a...

Group Policy Troubleshooting

Group Policy Troubleshooting + enabled Gptext logging: Value Path: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Value Name: GPTextDebugLevel Value Type: REG_DWORD Value Data: 1002 (hex) Output: %systemroot%\debug\usermode\gptext.log ...

Event ID 1053 is logged when you use the "Gpupdate /force" command, or you restart a Windows Server 2003-based domain controller

Event ID 1053 is logged when you use the "Gpupdate /force" command, or you restart a Windows Server 2003-based domain controller http://support.microsoft.com/kb/937535 SYMPTOMS When you use the Gpupdate /force command on a Microsoft Windows Server 2003-based domain controller, or you...

Userenv errors occur and events are logged after you apply Group Policy to computers that are running Windows Server 2003, Windows XP, or Windows 2000

Userenv errors occur and events are logged after you apply Group Policy to computers that are running Windows Server 2003, Windows XP, or Windows 2000 Article ID : 887303 http://support.microsoft.com/kb/887303 1. Examine the DNS settings and network properties...

Enable GPSVC debug logging in Vista: troubleshooting the Group Policy Service

Enable GPSVC debug logging in Vista: troubleshooting the Group Policy Service Number : SOX070618700009 Created : 06/18/2007 Region : US This article will specifically help you to troubleshoot Group Policy Service Issues. To know more about Group Policy Client...

How to troubleshoot Group Policy object processing failures that occur across multiple forests

How to troubleshoot Group Policy object processing failures that occur across multiple forests http://support.microsoft.com/kb/910206 How to troubleshoot Group Policy object processing failures that occur across multiple forests http://support.microsoft.com/kb/910206 INTRODUCTION This article describes how to troubleshoot Group Policy object...

Authoritative Userenv 1030 and 1058 Troubleshooting Guide

Authoritative Userenv 1030 and 1058 Troubleshooting Guide Authoritative Userenv 1030 and 1058 Troubleshooting Guide Number : SOX030714700054 TITLE: Authoritative Userenv 1030 and 1058 Troubleshooting Guide Problem Windows Server 2003 Standard ID: SOX030714700054 Problem Description SYMPTOMS ======== Windows...

Group Policy and Slow Links

Group Policy and Slow Links Group Policy does not apply when connecting remotely over a slow link http://technet.microsoft.com/en-us/library/cc759191.aspx Group Policy slow link detection http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/gp/35.mspx?mfr=true Extra Links for further study: Logon Optimization http://msdn.microsoft.com/en-us/library/aa374350.aspx Specifying Group Policy for...

CSE :: Client Side Extensions

CSE :: Client Side Extensions Identifying Group Policy Client-Side Extensions http://support.microsoft.com/kb/216357 gptext.dll appmgmts.dll scecli.dll iedkcs32.dll dskquota.dll fdeploy.dll HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions ● GUID: 25537BA6-77A8-11D2-9B6C-0000F8080861 Component: Folder Redirection ● GUID: 3610EDA5-77EF-11D2-8DC5-00C04FA31A66 Component: Microsoft Disk Quota ● GUID: 42B5FAAE-6536-11D2-AE5A-0000F87571E3 Component:...

How to export the security settings

How to export the security settings As we know, in the Windows Systems, we can configure the security settings which may include settings for the following areas: SECURITYPOLICY - Includes Account Policies, Audit Policies, Event Log Settings and...

Vista -- How To Enable Tracing For CSC (Offline Files)

Vista -- How To Enable Tracing For CSC (Offline Files) Number : SOX070124700030 TITLE: Vista -- How To Enable Tracing For CSC (Offline Files) Problem: BETA - Longhorn Pro ID: SOX070124700030 CRT: Jan 24 2007 MOD: Jan 24 2007 ...

How to re-initialize the offline files cache and database in Windows XP

How to re-initialize the offline files cache and database in Windows XP Format Database KB230738 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache Vista: REG ADD "HKLM\System\CurrentControlSet\Services\CSC\Parameters" /v FormatDatabase /t REG_DWORD /d 1 /f CSC FormatDatabase http://support.microsoft.com/kb/230738 SUMMARY The Offline Files (CSC or Client Side Caching) cache...

CSC Troubleshooting

CSC Troubleshooting Client-Side Caching Troubleshooting CSCCMD is a Client-Side Caching Command Line Tool to troubleshoot issues specific to offline files. //CSC troubleshooting// During the course of troubleshooting file extraction from CSC database, please keep this list handy - To extract...

Features and functions in version 1.1 of the Client-Side Caching Command-Line Options command-line tool

Features and functions in version 1.1 of the Client-Side Caching Command-Line Options command-line tool http://support.microsoft.com/kb/884739 INTRODUCTION This article contains information about the features and functions in the latest version of the Client-Side Caching Command-Line Options (CSCCMD) command-line tool (Csccmd.exe). MORE...

Changing the share location for Folder Redirection Redirected Folders using Group Policy - Re-Applying Folder Redirection: Migrating Folder Redirection user data from old server to a new server

Changing the share location for Folder Redirection Redirected Folders using Group Policy Re-Applying Folder Redirection: Migrating Folder Redirection user data from old server to a new server This is regarding case SRX080602600766 Issue: How to migrate data from an...

The Cache Option for Offline Files Must Be Disabled on Roaming User Profile Shares

The Cache Option for Offline Files Must Be Disabled on Roaming User Profile Shares http://support.microsoft.com/kb/287566 SYMPTOMS With roaming user profiles, if you do not disable the cache option for Offline Files, synchronization problems may occur. The user profile can...

How to stop Folder Redirection in Windows Server 2003 and in Windows 2000 Server

How to stop Folder Redirection in Windows Server 2003 and in Windows 2000 Server This article and the series are sometimes and somewhere taken from Official Microsoft TechNet and KB. Please Note that you might find some content to...

NTFS and Share Permissions Needed for User Home Directories, Roaming Profiles, and Folder Redirection.

NTFS and Share Permissions Needed for User Home Directories, Roaming Profiles, and Folder Redirection. NTFS and Share Permissions Needed Roaming Profiles and Folder Redirection - SOX040906700033 NTFS and Share Permissions Needed for User Home Directories, Roaming Profiles, and Folder Redirection....

Remove folder redirection group policy and relocate user's data back to local machines.

Remove folder redirection group policy and relocate user's data back to local machines. SRX080602600766 S: (Subjective) =============== Remove folder redirection group policy and relocate user's data back to local machines. # But you deleted the GPO after following...

Folder Redirection

Folder Redirection http://www.microsoft.com/windows/windows2000/en/advanced/help/folder.htm You use the Folder Redirection extension to Group Policy to redirect certain Windows 2000 special folders to network locations. Special folders are those folders such as My Documents and My Pictures that are located under Documents and...

How to dynamically create security-enhanced redirected folders by using folder redirection in Windows 2000 and in Windows Server 2003

How to dynamically create security-enhanced redirected folders by using folder redirection in Windows 2000 and in Windows Server 2003 http://support.microsoft.com/kb/274443 SUMMARY In Microsoft Windows 2000 and in Microsoft Windows Server 2003, as an administrator, you can customize desktops by...

Folder Redirection Troubleshooting

Folder Redirection Troubleshooting Folder Redirection is the concept of keeping Windows Created User Documents Data Folders on a shared network drive (Network Resource). By keeping folder redirection ON, The access to user’s data is redirected to the shared...

When you redirect the Documents folder on a Windows Vista-based computer to a network share, the folder name unexpectedly changes back to Documents. You expect the folder name to be the user name.

When you redirect the Documents folder on a Windows Vista-based computer to a network share, the folder name unexpectedly changes back to Documents. You expect the folder name to be the user name. SRQ081110600636, kb947222 Related Microsoft Support...

Winxp/Folder redirection/Event ids 1085 & 111 "Unable to apply folder redirection policy, initialization failed"

Winxp/Folder redirection/Event ids 1085 & 111 "Unable to apply folder redirection policy, initialization failed" Number : SOX060712700035 TITLE: Winxp/Folder redirection/Event ids 1085 & 111 "Unable to apply folder redirection policy, initialization failed" Problem: Windows XP Professional Edition ID: SOX060712700035 CRT:...

Issue with Grant exclusive user rights - Folder Redirection

Issue with Grant exclusive user rights - Folder Redirection SYMPTOMS The following Event ID 1000 and Event ID 101 messages may be logged in the Application log when the Folder Redirection component of Group Policy is set up: Event...

After you enable the Folder Redirection policy in Windows XP Service Pack 2, the Internet Explorer Maintenance policy may not apply

After you enable the Folder Redirection policy in Windows XP Service Pack 2, the Internet Explorer Maintenance policy may not apply SYMPTOMS After you enable the Folder Redirection policy on a Windows XP Service Pack 2 (S... After you...

Userenv 1058

Userenv 1058 Event Type: Error Event Source: Userenv Event Category: None Event ID: 1058 Date: Date Time: Time User: User_Name Computer: Computer_Name Description: Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domainname,DC=com . The file must be present at the...

Userenv 1054

Userenv 1054 Event ID: 1054 Source: Userenv Type: Error Description: Windows cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted). Group Policy processing aborted. Add the Registry:...

Event ID 1054 is logged in the Application log in Windows Server 2003 or in Windows XP Professional

Event ID 1054 is logged in the Application log in Windows Server 2003 or in Windows XP Professional http://support.microsoft.com/kb/324174 Check DNS Settings in the TCP/IP stack Extra: http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows+Operating+System&ProdVer=5.2&EvtID=1054&EvtSrc=Userenv&LCID=1033 Event ID 1054 is logged in the Application log in Windows Server...

Userenv 1097

Userenv 1097 Event Source: Userenv Event Category: None Event ID: 1097 Date: date Time: time Type: Error User: NT AUTHORITY\SYSTEM Computer: servername Description: Windows cannot find the machine account. The Local Security Authority cannot be contacted. • Check the Netlogon...

You receive event ID 1097 and event ID 1030 error events when you restart a Windows Server 2003-based domain controller

You receive event ID 1097 and event ID 1030 error events when you restart a Windows Server 2003-based domain controller Can occur in case of Scripts / Folder Redirection http://support.microsoft.com/kb/832215 SYMPTOMS Every time that you restart your Microsoft Windows Server...

Userenv 1053

Userenv 1053 Event Type: Error Event Source: Userenv Event Category: None Event ID: 1053 Date: Date Time: Time User: NT AUTHORITY\SYSTEM Computer: Computername Description: Windows cannot determine the user or computer name. (<error-message>). Group Policy processing aborted. For more information,...

SCECLI 1202 Events due to a crashed hardware

SCECLI 1202 Events due to a crashed hardware Troubleshooting SCECLI 1202 Events: · Troubleshooting SCECLI 1202 Events :: skar.us :: KB Article Dump · Microsoft Support KB :: Original Article HTTP/1.1 503 Service Unavailable (Full Version)...

Group policies are not applied; "Event ID 1058" and "Event ID 1030"

Group policies are not applied; "Event ID 1058" and "Event ID 1030" SOX071011700061 Problem Description We were getting event ids 1030 and 1058 on the XP clients. The description of the event ids were: Event Type: Error Event Source: Userenv...

You receive a "There is not enough space on the disk" error message when you copy files to or install updates to a partition

KB 837325 You receive a "There is not enough space on the disk" error message when you copy files to or install updates to a partition http://support.microsoft.com/kb/837325/en-us You receive a "There is not enough space on the disk" error message...

The Sysvol and Netlogon Shares Are Missing After You Restore a Domain Controller from Backup

KB 316790 The Sysvol and Netlogon Shares Are Missing After You Restore a Domain Controller from Backup http://support.microsoft.com/kb/316790/en-us The Sysvol and Netlogon Shares Are Missing After You Restore a Domain Controller from Backup SYMPTOMS After you restore a domain controller...

FRS Engine Working

FRS Engine Working 1. USN Journal 2. Filter 3. Aging Cache (3 Sec.) 4. Inbound log. 5. Staging files. - - - - [TO-REWRITE-THIS-ARTICLE] ...

FRS event log error codes

FRS event log error codes http://support.microsoft.com/kb/308406/en-us FRS event log error codes SUMMARY This article describes the Event Viewer events that may be caused by File Replication Service (FRS). These events are displayed in the FRS log. ...

Recovering missing FRS objects and FRS attributes in Active Directory

Recovering missing FRS objects and FRS attributes in Active Directory http://support.microsoft.com/kb/312862 Recovering missing FRS objects and FRS attributes in Active Directory SUMMARY File Replication service (FRS) is a multi-threaded, multi-master replication engine that replaces the LMREPL service in Microsoft Windows...

FRS usage scenarios

FRS usage scenarios FRS usage scenarios Number : SOX031031700031 Created : 10/31/2003 Region : US TITLE: FRS usage scenarios Problem Windows 2000 Server ID: SOX031031700031 CRT: Oct 31 2003 MOD: Oct 31 2003 Problem Description FRS is...

How to Reset User Rights in the Default Domain Group Policy in Windows Server 2003

Article ID : 324800 http://support.microsoft.com/kb/324800 How to Reset User Rights in the Default Domain Group Policy in Windows Server 2003 http://support.microsoft.com/kb/324800 How to Reset User Rights in the Default Domain Group Policy in Windows Server 2003...

"The Permissions for This GPO in the SYSVOL Folder Are Inconsistent with Those in Active Directory" Message When You Run GPMC

Article ID : 828760 http://support.microsoft.com/kb/828760 "The Permissions for This GPO in the SYSVOL Folder Are Inconsistent with Those in Active Directory" Message When You Run GPMC http://support.microsoft.com/kb/828760 "The Permissions for This GPO in the SYSVOL Folder...

How to use the Administration Tools Pack to remotely administer computers that are running Windows Server 2003, Windows XP, or Windows 2000

Article ID : 304718 http://support.microsoft.com/kb/304718 How to use the Administration Tools Pack to remotely administer computers that are running Windows Server 2003, Windows XP, or Windows 2000 http://support.microsoft.com/kb/304718 SUMMARY This article describes options to administer computers...

How to rebuild the SYSVOL tree and its content in a domain

Article ID : 315457 http://support.microsoft.com/kb/315457 How to rebuild the SYSVOL tree and its content in a domain http://support.microsoft.com/kb/315457 How to rebuild the SYSVOL tree and its content in a domain INTRODUCTION The article describes...

SYSVOL junction inherits NTFS permissions from the drive root

Article ID : 319808 http://support.microsoft.com/kb/319808 SYSVOL junction inherits NTFS permissions from the drive root http://support.microsoft.com/kb/319808 SYSVOL junction inherits NTFS permissions from the drive root SUMMARY If you run the Dcpromo tool, you can specify a...

Antivirus programs may modify security descriptors and cause excessive replication of FRS data in SYSVOL and DFS

Antivirus programs may modify security descriptors and cause excessive replication of FRS data in SYSVOL and DFS http://support.microsoft.com/kb/284947 Antivirus programs may modify security descriptors and cause excessive replication of FRS data in SYSVOL and DFS SUMMARY...

FRS: Disk Defragmentation Causes Excessive FRS Replication Traffic

FRS: Disk Defragmentation Causes Excessive FRS Replication Traffic http://support.microsoft.com/kb/282791 FRS: Disk defragmentation causes excessive FRS replication traffic SYMPTOMS When you use disk defragmentation utilities to optimize logical drives that host File Replication service (FRS) replicated content, the...

Configuring Correct Staging Area Space for Replica Sets

Configuring Correct Staging Area Space for Replica Sets http://support.microsoft.com/kb/329491 Configuring Correct Staging Area Space for Replica Sets SUMMARY This article describes the correct staging area space for replica sets. The File Replication service (FRS) creates staging files...

Recommendations for managing Group Policy administrative template (.adm) files

Recommendations for managing Group Policy administrative template (.adm) files http://support.microsoft.com/kb/816662 SUMMARY This article describes how ADM files work, the policy settings that are available to manage their operation, and recommendations about how to handle common ADM file management...

File Replication Service (Additional tuning)

File Replication Service (Additional tuning) File Replication Service (Additional tuning) – Article unavailable now on Microsoft.com < http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/Windows/2000/server/reskit/en-us/distrib/dsd h_frs_leca.asp > [TO-REWRITE-THIS-ARTICLE]...

Configuration and operational recommendations for the File Replication service in Windows Server 2003 and Windows 2000 Server

Configuration and operational recommendations for the File Replication service in Windows Server 2003 and Windows 2000 Server http://support.microsoft.com/kb/840675 Configuration and operational recommendations for the File Replication Service in Windows Server 2003 and Windows 2000 Server SUMMARY This article...

Update the FRS member object

Update the FRS member object http://technet.microsoft.com/en-us/library/cc787188.aspx Use this procedure to update the File Replication service (FRS) member object after renaming a domain controller. For more information about this procedure, see article 316826 in the Microsoft Knowledge Base (http://go.microsoft.com/fwlink/?LinkId=82821). Administrative Credentials...

Description of the FRS Replication Protocol, Notification and Schedule for DFS Content

Description of the FRS Replication Protocol, Notification and Schedule for DFS Content http://support.microsoft.com/kb/220938 SUMMARY The File Replication Service (FRS) is a multi-threaded, multi-master replication engine that replaces the LMREPL (LAN Manager Replication) service in previous versions of Microsoft Windows...

Backing Up and Restoring an FRS-Replicated SYSVOL Folder

Backing Up and Restoring an FRS-Replicated SYSVOL Folder http://msdn.microsoft.com/en-us/library/cc507518.aspx The System Volume (SYSVOL) folder provides a standard location to store important elements of Group Policy objects and scripts. A copy of the SYSVOL folder exists on each domain...

FRS Tables

FRS Tables http://technet.microsoft.com/library/Cc962208 FRS transactions are stored in a Microsoft Jet database that defaults to systemroot \\Ntfrs\Jet\Ntfrs.jdb. Each replica set hosted by a computer has a set of tables stored in the Ntfrs.jdb file. These five tables are: · Connection table....

Deploying FRS

Deploying FRS After you have deployed a domain-based DFS namespace, you are ready to deploy FRS. This section describes the following FRS deployment scenarios: • Deploying a new replica set • Adding a new replica member to an...

Increasing Data Availability by Using FRS

Increasing Data Availability by Using FRS To design an FRS replication strategy, you need to take the following steps: 1. Identify data to replicate. 2. Choose the replication topology. 3. Design the replication schedule. 4. Plan the staging directory....

FRS Logs

FRS Logs http://technet.microsoft.com/library/Cc978208 FRS creates text-based logs in the systemroot \Debug directory to help you debug problems. The Ntfrsapi.log file contains events that take place during promotion and demotion — namely, creating the subkeys in the NTFRS registry...

Microsoft Windows File Replication Service 2000/2003 Management Pack for Operations Manager 2007

Microsoft Windows File Replication Service 2000/2003 Management Pack for Operations Manager 2007 DOWNLOAD: Download Microsoft Windows File Replication Service 2000/2003 Management Pack for Operations Manager 2007 Alternate Link: Download the same file from Microsoft Download Center, here: http://www.microsoft.com/en-us/download/details.aspx?id=14924 Monitors the...

Customizing FRS

Customizing FRS You can customize what FRS replicates and when by specifying a filter that excludes certain types of files or folders and by scheduling replication between sites. FRS Startup When FRS starts up, either when...

Monitoring and Troubleshooting the File Replication Service

Monitoring and Troubleshooting the File Replication Service File Replication Service (FRS) is used for synchronizing the SYSVOL shared folders on domain controllers and for synchronizing DFS link targets on servers running Windows 2000 and Windows Server 2003. If you...

Planning DFS and FRS Security

Planning DFS and FRS Security Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 When planning to secure DFS namespaces and content replicated by FRS, follow these guidelines:...

FRS and Sysvol Improvements in Windows Vista

FRS and Sysvol Improvements FRS and Sysvol Improvements in Windows Vista Group Policy benefits from improvements to the File Replication Service (FRS) and storage of the new administrative template files (ADMX files) to reduce usage of network bandwidth and Sysvol...

How to restrict FRS replication traffic to a specific static port

How to restrict FRS replication traffic to a specific static port http://support.microsoft.com/kb/319553 How to restrict FRS replication traffic to a specific static port SUMMARY This article describes how to configure a static port for File Replication service (FRS)...

What Is FRS?

What Is FRS? File Replication service (FRS) is a technology that replicates files and folders stored in the SYSVOL shared folder on domain controllers and Distributed File System (DFS) shared folders. When FRS detects that a change has been...

Introduction to FRS

Introduction to FRS http://technet.microsoft.com/library/Cc962212 File Replication service is a multithreaded replication engine that replaces the LMRepl service that is used in Microsoft® Windows NT®. Multithreaded means that several processes can run at the same time to handle multiple...

How FRS Works

How FRS Works http://technet.microsoft.com/library/Cc962202 FRS provides redundancy for the content of designated NTFS shares between Windows 2000 servers. The servers can be interconnected in any topology such as a ring or a star configuration. With an appropriate topology...

FRS Tools and Settings

FRS Tools and Settings FRS Tools and Settings FRS Tools The following tools are associated with File Replication service (FRS). Connstat.cmd: FRS Connection Status Report Category Windows Support Tools for Windows Server 2003 and Windows 2000 Version compatibility Runs...

FRS objects : Overview of Active Directory Objects That Are Used by FRS

FRS objects Overview of Active Directory Objects That Are Used by FRS NTFRS-Subscriptions NTFRS-Subscriber NTFRS Settings, Replica Set, and Member Objects NTFRS-Settings NTFRS-Replica-Set NTFRS-Member NTDS-Connection http://support.microsoft.com/kb/296183 Overview of Active Directory Objects That Are Used by FRS SUMMARY This article describes...

How to troubleshoot journal_wrap errors on Sysvol and DFS replica sets

Troubleshooting journal_wrap errors on Sysvol and DFS replica sets Troubleshooting journal_wrap errors on Sysvol and DFS replica sets http://support.microsoft.com/kb/292438 How to troubleshoot journal_wrap errors on Sysvol and DFS replica sets SUMMARY The File Replication Service (FRS) is a multithreaded,...

Replication Service replica sets : Using the BurFlags registry key to reinitialize File Replication Service replica sets :: D2, D4 : Authoritative and Non-Authoritative Restore of FRS Replica Sets

Replication Service replica sets Using the BurFlags registry key to reinitialize File Replication Service replica sets Replication Service replica sets : Using the BurFlags registry key to reinitialize File Replication Service replica sets :: D2, D4 : Authoritative...

How to Troubleshoot the File Replication Service in Windows Server 2003

How to Troubleshoot the File Replication Service in Windows Server 2003 http://support.microsoft.com/kb/327341 This step-by-step article describes how to troubleshoot the File Replication service (FRS). The following procedures are all performed by a member of the administrators group on a...

Configuring Correct Staging Area Space for Replica Sets

Configuring Correct Staging Area Space for Replica Sets The staging area size limits in Windows 2000 and Microsoft Windows Server 2003 are: Default size: 660 megabytes (MB) Minimum size: 10 MB Maximum size: 2 terabytes http://support.microsoft.com/kb/329491/ Configuring Correct Staging...

Antivirus programs may modify security descriptors and cause excessive replication of FRS data in SYSVOL and DFS

Antivirus programs may modify security descriptors and cause excessive replication of FRS data in SYSVOL and DFS http://support.microsoft.com/default.aspx?scid=kb;en-us;284947&sd=tech SUMMARY The File Replication service (FRS) is a multi-threaded, multi-master replication engine that replaces the Lmrepl service in the 3.xand 4.0...

Description of FRS entries in the registry

Description of FRS entries in the registry http://support.microsoft.com/kb/221111 SUMMARY The File Replication service (FRS) is a multi-threaded, multi-master replication engine that replaces the LMREPL (LanMan Replication) service in the 3.x/4.0 versions of Microsoft Windows NT. Windows 2000 domain controllers...

Troubleshooting File Replication Service

Troubleshooting File Replication Service Readers of this article, please have a look at this article too. In my opinion you should look at this: · How to Troubleshoot the File Replication Service in Windows Server 2003 Troubleshooting FRS...

Configuration and operational recommendations for the File Replication Service in Windows Server 2003 and Windows 2000 Server

Configuration and operational recommendations for the File Replication Service in Windows Server 2003 and Windows 2000 Server http://support.microsoft.com/kb/840675 Configuration and operational recommendations for the File Replication Service in Windows Server 2003 and Windows 2000 Server SUMMARY This...

Pre-staging the File Replication service replicated files on SYSVOL and Distributed file system shares for optimal synchronization

KB 266679 Pre-staging the File Replication service replicated files on SYSVOL and Distributed file system shares for optimal synchronization http://support.microsoft.com/kb/266679 Pre-staging the File Replication service replicated files on SYSVOL and Distributed file system shares for optimal synchronization SUMMARY...

FRS event log error codes

FRS events FRS event log error codes http://support.microsoft.com/kb/308406 SUMMARY This article describes the Event Viewer events that may be caused by File Replication Service (FRS). These events are displayed in the FRS log. MORE INFORMATION • Event ID: 13500 Event...

Event ID 13559 may be logged in Event Viewer in Windows 2000

Event ID 13559 may be logged in Event Viewer in Windows 2000 http://support.microsoft.com/kb/887440 In Microsoft Windows 2000, the following event may be logged in Event Viewer: Event Source: NtFrs Event ID: 13559 Event Type: Error Description: The File Replication Service...

FRS Issues: (with Filters)

FRS Issues: (with Filters) #Issue 01 Only certain files not replicating with FRS - mixed file types Only certain files not replicating with FRS - mixed file types SOX060314700027 Problem: Some files were no longer replicating...

How to Troubleshoot Missing SYSVOL and NETLOGON Shares on Windows Server 2003 Domain Controllers

How to Troubleshoot Missing SYSVOL and NETLOGON Shares on Windows Server 2003 Domain Controllers How to Troubleshoot Missing SYSVOL and NETLOGON Shares on Windows Server 2003 Domain Controllers MICROSOFT CONFIDENTIAL -- DO NOT SHARE THIS ARTICLE WITH CUSTOMERS...

How to migrate FRS replica sets to DFSR replication groups

How to migrate FRS replica sets to DFSR replication groups How to migrate FRS replica sets to DFSR replication groups SOX060801700014 Problem: Customers may want to migrate their FRS replica sets to DFSR replication groups. Resolution: First...

DFSRMIG - Returning to FRS replication after completing a migration to DFSR for SYSVOL (Unsupported Best Effort)

DFSRMIG - Returning to FRS replication after completing a migration to DFSR for SYSVOL (Unsupported Best Effort) DFSRMIG - Returning to FRS replication after completing a migration to DFSR for SYSVOL (Unsupported Best Effort) SOX071023700023 [TO RE-WRITE THIS ARTICLE]...

Event 13508 FRS replication issue cannot bind w/authentication to computer.

Event 13508 FRS replication issue cannot bind w/authentication to computer. Event 13508 FRS replication issue Cannot bind w/authentication to computer. SOX051117700034 Problem 13508 on multiple servers. Unable to run ntfrsutl with the following errors ERROR -...

JRNL_WRAP problem occurs while performing authoritative FRS restore (D4)

JRNL_WRAP problem occurs while performing authoritative FRS restore (D4) JRNL_WRAP problem occurs while performing authoritative FRS restore (D4) SOS060202700001 Problem: Background ---------------- The original FRS problem is caused by the JRNL_WRAP_ERROR problem. Following KB 292438, perform the authoritative...

Replstor causes FRS to fail || 3rd party Replication engine!!

Replstor causes FRS to fail || 3rd party Replication engine!! Replstor causes FRS to fail SOX030324700033 Problem: I have found that replstor and 3rd party replication engine can cause replication in FRS to fail. This application is...

Windows Server 2003/FRS stops after 30 seconds, event ID 13501 logged

Windows Server 2003/FRS stops after 30 seconds, event ID 13501 logged 2003/FRS stops after 30 seconds, event ID 13501 logged SOX050526700015 Problem: When starting the FRS service, it times out after 30 seconds with the error:...

FRS - File replication across forest boundary.

FRS - File replication across forest boundary. FRS - File replication across forest boundary. SOX050526700034 Problem: Customer had 2 Win2k3 member servers. Each member server is located in separate AD forest. They have domain based DFS setup in WIndows 2003...

Do WebDAV attributes replicate with FRS?

Do WebDAV attributes replicate with FRS? Do WebDAV attributes replicate with FRS? SOX010226700085 1. Does FRS support WebDAV? a. Does FRS recognize updates using PROPPATCH as an update to the file and therefore trigger replication b. Does FRS...

FRS - Files do not replicate but Folders do.

FRS - Files do not replicate but Folders do. Number : SOX050915700004 No Files in Sysvol would replicate. Only folders moved from one server to another. Filemon shows: 12:57:31.375 PM ntfrs.exe:1952 IRP_MJ_SET_EA C:\WINNT\SYSVOL\domain\DO_NOT_REMOVE_NtFrs_PreInstal l_Directory\NTFRS_4daff750-43f3-427e-b70cc48c812838fd ACCESS DENIED...

PLAT-DS\PT\PRE\2K3\13552/13555 FRS not replicating: FrsErrorMismatchedJournalId

PLAT-DS\PT\PRE\2K3\13552/13555 FRS not replicating: FrsErrorMismatchedJournalId PLAT-DS\PT\PRE\2K3\13552/13555 FRS not replicating: FrsErrorMismatchedJournalId Number : SRX060605603381 TITLE: PLAT-DS\PT\PRE\2K3\13552/13555 FRS not replicating: FrsErrorMismatchedJournalId ID: SRX060605603381 CRT: Jun 5 2006 MOD: Jun 6 2006 Phone Log ============================================ Problem Product :...

Windows 2000 Corrupt FRS database with an error

Windows 2000 Corrupt FRS database with an error Windows 2000 Corrupt FRS database with an error Number : SOX031113700034 TITLE: Windows 2000 Corupt FRS database with an error Problem Windows 2000 Server ID: SOX031113700034 CRT: Nov 13 2003...

win2k/FRS/13539 13552 13555

win2k/FRS/13539 13552 13555 win2k/FRS/13539 13552 13555 Number : SOX040302700058 TITLE: w2k/FRS/13539 13552 13555 [SRWINNT ] Problem Windows 2000 Advanced Svr ID: SOX040302700058 CRT: Mar 2 2004 MOD: Mar 2 2004 Problem Description 3/1/2004 7:24:29 AM 1 0...

Found.000 folder contains FRS data

Found.000 folder contains FRS data Found.000 folder contains FRS data Number : SOX031007700098 TITLE: Found.000 folder contains FRS data Problem Windows 2000 Server ID: SOX031007700098 CRT: Oct 7 2003 MOD: Oct 7 2003 Problem Description User has...

W2K/DCPROMO demotion fails, FRS cannot be stopped

W2K/DCPROMO demotion fails, FRS cannot be stopped W2K/DCPROMO demotion fails, FRS cannot be stopped Number : SOX030908700073 TITLE: W2K/DCPROMO demotion fails, FRS cannot be stopped Problem Windows 2000 Server ID: SOX030908700073 CRT: Sep 8 2003 MOD: Sep 8 2003 Problem...

How to determine why FRS replicated files

How to determine why FRS replicated files How to determine why FRS replicated files Number : SOX050201700062 TITLE: How to determine why FRS replicated files Problem Windows 2000 Server ID: SOX050201700062 CRT: Feb 1 2005 MOD: Feb 1...

13539 - FRS cannot replicate SYSVOL domain because the path name

13539 - FRS cannot replicate SYSVOL domain because the path name 13539 - FRS cannot replicate SYSVOL domain because the path name Number : SOX030723700014 TITLE: 13539 - FRS cannot replicate sysvol domain beca Problem Windows 2000 Server...

FRS Does Not Replicate Files or Folders If the System Account Does Not Have Full Control of the FRS replica tree

FRS Does Not Replicate Files or Folders If the System Account Does Not Have Full Control of the FRS replica tree http://support.microsoft.com/kb/319473 The File Replication service (FRS) is a multi-threaded, multi-master replication engine that replaces the LANMan Directory...

FRS: My NTFRS.JDB files seems too large.

FRS: My NTFRS.JDB files seems too large. FRS: My NTFRS.JDB files seems too large. Number : SOX030709700042 TITLE: FRS: My NTFRS.JDB files seems too large. How ca Problem Windows 2000 Server ID: SOX030709700042 CRT: Jul 9 2003 MOD:...

Win2K\\FRS 13508

Win2K\\FRS 13508 Win2K\\FRS 13508 Number : SOX020213700104 TITLE: Win2K\\FRS 13508 Problem Windows 2000 Server ID: SOX020213700104 CRT: Feb 13 2002 MOD: Feb 13 2002 Problem Description Customer is getting event id 13508 when he promote a machine...

FRS appears as if it is not replicating. Junction for SYSVOL is missing.

FRS appears as if it is not replicating. Junction for SYSVOL is missing. FRS appears as if it is not replicating. Junction for SYSVOL is missing. Number : SOX021010700142 TITLE: FRS appears as if it is not replicating....

W2K8R2 DCs log NTFRS Error 13576 When Added to FRS Replicas

W2K8R2 DCs log NTFRS Error 13576 When Added to FRS Replicas W2K8R2 DCs log NTFRS Error 13576 When Added to FRS Replicas Number : SOX081120700057 Created : 11/20/2008 Region : US TITLE: W2K8R2 DCs log NTFRS Error 13576...

FRS stays at 13565/Sysvol does not get shared out

FRS stays at 13565/Sysvol does not get shared out FRS stays at 13565/Sysvol does not get shared out Number : SOX061220700042 TITLE: FRS stays at 13565/Sysvol does not get shared out Problem Windows Server 2003 Standard ID:...

W2k3S:/FRS replication & sharing problem

W2k3S:/FRS replication & sharing problem W2k3S:/FRS replication & sharing problem Number : SOX041011700076 Created : 10/11/2004 Region : US TITLE: W2k3S:/FRS replication & sharing problem **Problem** Windows Server 2003 Standard ID: SOX041011700076 CRT: Oct 11 2004 MOD: Oct 11...

Windows 2000/2003 - FRS/Microsoft Excel (.xls) files are renamed as an 8-digit hexadecimal number

Windows 2000/2003 - FRS/Microsoft Excel (.xls) files are renamed as an 8-digit hexadecimal number Windows 2000/2003 - FRS/Microsoft Excel (.xls) files are renamed as an 8-digit hexadecimal number Number : SOX040331700023 Created : 03/31/2004 Region : US TITLE: Windows...

Domains: FRS Event ID 13544

Domains: FRS Event ID 13544 Domains: FRS Event ID 13544 SOX010723700093 Problem : Customer has been promoting and demoting a server. After the final promotion, he's now getting an FRS error: 13544: The File Replication Service cannot replicate...

Win2ksrv AD frs Event id 13548

Win2ksrv AD frs Event id 13548 w2ksrv ad frs Event id 13548 Number : SOX010330700185 Created : 03/30/2001 Region : US TITLE: w2ksrv ad frs Event id 13548 Event id 13548 Source: NtFrs Descrip ID: SOX010330700185 CRT:Mar 30 2020 MOD:Feb...

FRS CPU SPIKE: NTFRS Service spiking the CPU

FRS CPU SPIKE: NTFRS Service spiking the CPU NTFRS Service spiking the CPU, FRS CPU SPIKE Number : SOX060530700007 Created : 05/30/2006 Region : US TITLE: NTFRS Service spiking the CPU, FRS CPU SPIKE Problem Windows Server 2003 Enterprise...

FRS service stops intermittently windows 2003 sp2

FRS service stops intermittently windows 2003 sp2 FRS service stops intermittently windows 2003 sp2 Number : SOS070814700002 Created : 08/14/2007 Region : China TITLE: FRS service stops intermittently windows 2003 sp2 Problem Windows Server Std. 2003 EN ID: SOS070814700002...

Poor Performance on File Server (DFS+FRS)

Poor Performance on File Server (DFS+FRS) Poor Performance on File Server (DFS+FRS) SOX080525700001 Problem Description -- server freezing every 2 mins and highly sluggish. >The server is a file server running File replication service. >The file server...

Win2008 DFS and FRS administration - missing DFSGUI.MSC

Win2008 DFS and FRS administration - missing DFSGUI.MSC Win2008 DFS and FRS administration - missing DFSGUI.MSC SOX080522700014 # Issue: The DFSGUI.MSC (legacy DFS Managment snap-in from Windows 2000 and Windows Server 2003) does not appear to exist on Windows Server...

Assert Error in FRS

Assert Error in FRS SOX031219700164 Problem : customer was getting Assert errors in FRS that did not correspond to any known issues. He also could not get Windows Update to run. We tried to load a hotfix and...

FRS replication may not start when seeding partner is in seeding mode himself

FRS replication may not start when seeding partner is in seeding mode himself FRS replication may not start when seeding partner is in seeding mode himself SOX060724700012 Problem : Summary ============================= This customer had the problem that...

FRS event 13539

FRS event 13539 FRS event 13539 SOX030819700077 Problem : Windows 2000 domain with 2 domain controllers running SP3 FRS not working properly between the two DCs, getting the following error: event 13539 13539 NtFrs N/A CLADENVER_2 "The...

High processor usage with FRS

High processor usage with FRS High processor usage with FRS SOX020325700099 Problem : Customer has 32 DCs. When FRS starts, the processor usage on 12 DCs would go up to 90% and stay there until they stopped FRS....

FRS slow to work.

FRS slow to work. FRS slow to work. Number : SOX041123700054 RESOLUTION As per the data we received from you, everything seems to be working. You are sourcing from Japan to the US, and the link...

Events ID 13555, 13552 and 13539

Events ID 13555, 13552 and 13539 SOX031017700020 Error: FRS is generating events ID 13555, 13552 and 13539 when it's restarting. Errors make reference to a replica set that the server (member server) used to belong to. The replica...

DCPROMO failure: FRS-The dependency service or group failed to start (1068)

DCPROMO failure: FRS-The dependency service or group failed to start (1068) SOX030119700052 Error: When attempting to promote a Windows 2000 server to a domain controller, the following error is displayed: "Error - File Replication Service: The dependency service...

Rebuilding the FRS Structure on the Local Server Machine

Rebuilding the FRS Structure on the Local Server Machine In case we need to re-build the FRS structure for the Default Replication Group of SYSVOL on the Server’s Disk, we can follow the following steps: · Check Basic...

Interesting Things to know about FRS

Interesting Things to know about FRS What is FRS (File Replication Service?) FRS (File Replication Service) is the service responsible for replicating updated data on the member Servers of a DFS Replication Group. FRS was the default Replication Service...

Live meeting held open the EVENT_FRS_CANT_OPEN_STAGE 13550

Live meeting held open the EVENT_FRS_CANT_OPEN_STAGE 13550 Number : SOX040705700001 This article is Internal to Microsoft. It is of use to people only who use Live Meeting for Troubleshooting purposes. It might come in handy in difficult situations....

What is Authoritative and Non-Authoritative Restore of FRS Replica Sets? The no longer unknown D2 and D4 Processes

What is Authoritative and Non-Authoritative Restore of FRS Replica Sets? The no longer unknown D2 and D4 Processes The D2 and D4 procedures are used alternatively to restore data to a missing DFS Share. One picks data from other...

FRS journal wrap

FRS journal wrap PROBLEM: Ø FRS replication not working for DC dc01 SYMPTOMS: In case of FRS Replication Failure due to a Journal Wrap error, we can identify the issue using the following Symptoms: Have event id’s...

FRS Tools and Settings

FRS Tools and Settings http://technet.microsoft.com/en-us/library/cc786122(v=ws.10).aspx FRS Tools and Settings Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 FRS Tools The following tools are associated with...

Static RPC Port Assignment for the FRS Service

Static RPC Port Assignment for the FRS Service HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTFRS\Parameters RPC TCP/IP Port Assignment = 1600 (decimal) RPC TCP/IP Port Assignment Taken from: FRS Tools and Settings Registry path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters Version Windows Server 2003 and Windows 2000...

When to use DCGPOFIX to restore the Default set of Policies on a Domain Controller

When to use DCGPOFIX to restore the Default set of Policies on a Domain Controller Whenever we create a Domain and setup a Domain Controller to hold and Active Directory instance (including the FRS instance as well) and then we...

FRS Subscription and subscriber objects

FRS Subscription and subscriber objects INTRODUCTION Whenever we setup a DFS Share on the Domain with Replication Setup between the folders on separate Servers. In Pre-Windows 2008, this will use the FRS Service to replicate data. Remember that FRS...

DFSR Troubleshooting

DFSR Troubleshooting All hotfixes in dfsrinfo.cab 905700 You may receive an RPC server is too busy to complete this operation...," &_ 912154 You cannot create a diagnostic report for DFS replication on a...," &_ 912850 Unable to access...

DFSUtil in Windows Server 2003 VS DFSUtil in Windows Server 2008

DFSUtil in Windows Server 2003 VS DFSUtil in Windows Server 2008 http://blogs.technet.com/b/filecab/archive/2008/07/11/dfsutil-exe-in-windows-2003-vs-dfsutil-exe-in-windows-2008.aspx 1. New Command Line Interface (CLI) DFSUtil.exe in Windows Server 2008 comes with a new CLI, which is based on Keywords, Required Parameters and Optional parameters...

DFSR events

DFSR events Events Event id : 4004 #error 9003 the replication group is invalid --------------------- The DFS Replication service stopped replication on the replicated folder at local path D:\Public. Additional Information: Error: 9003 (The replication group is invalid) Additional context...

Fence Value

Fence Value DFSR uses fence values to ensure that the correct version of a resource (file or folder) is replicated where there is a conflict. The fence values are also used in initial sync where the versions on the...

Repair options that you can use to recover if you accidentally make an incorrect Distributed File System Replication (DFSR) member authoritative in a Windows Server 2003 R2 environment

Repair options that you can use to recover if you accidentally make an incorrect Distributed File System Replication (DFSR) member authoritative in a Windows Server 2003 R2 environment Repair options that you can use to recover if you accidentally make...

Lower the DFS LDAP Timeout value

Lower the DFS LDAP Timeout value We have lowered the DFS LDAP Timeout value to 3 seconds using the following command dfsutil Server Registry LdapTimeoutValue set 3 <servername> We were initially told that this timeout value could not be modified...

You may receive DFS referrals that contain a list of random DFS targets, random SYSVOL or NETLOGON referrals, or experience slow performance when you access a shared folder in a DFS namespace on a Windows Server 2003-based computer

You may receive DFS referrals that contain a list of random DFS targets, random SYSVOL or NETLOGON referrals, or experience slow performance when you access a shared folder in a DFS namespace on a Windows Server 2003-based computer http://support.microsoft.com/kb/905846 To...

Wanted to remove DFS root from servers that have been decommissioned.

Wanted to remove DFS root from servers that have been decommissioned. I was getting “RPC server unavailable” while trying to remove the decommissioned server from the DFS GUI. I was able to remove the DFS root from the decommissioned...

Reset the DFSR Database

Reset the DFSR Database + Found SOX070212700038 : followed it ##### Followed these steps to rebuild the database: 1. Stop the DFSR service on the server that is logging the 4004 event. 2. Navigate to D:\System Volume Information\DFSR (drive...

Recover Data from DFSR Staging Directory.

Recover Data from DFSR Staging Directory. Recently we worked on a case where customer was replicating one share using FRS. He did not wait for initial replication to finish and he stopped the replication, then he created new replication...

Troubleshooting slow replication in DFSR

Troubleshooting slow replication in DFSR >> We can enable auditing for DFSR and see the files takes how much time to replicate >>started with Easy assist session and enabled auditing on hub server: Create the following registry *key*...

DFSR - Recovering a compressed file from staging (BEST-EFFORT WORKAROUND)

DFSR - Recovering a compressed file from staging (BEST-EFFORT WORKAROUND) Number : SOX080610700012 Problem Description # Issue: Customer needs a file recovered from the DFSR staging directory. The file is compressed. # Environment: Windows Server 2003 R2 Resolution # Workaround:...

Using the Windows Server 2008 DFSUTIL.EXE command line to manage DFS-Namespaces

Using the Windows Server 2008 DFSUTIL.EXE command line to manage DFS-Namespaces http://blogs.technet.com/b/josebda/archive/2009/05/01/using-the-windows-server-2008-dfsutil-exe-command-line-to-manage-dfs-namespaces.aspx The most common administration activities related to DFS-Namespaces can be performed using the "DFS Management" MMC. This will show up under "Administrative Tools" after you add the DFS...

Tips for diagnosing why clients are referred to unexpected DFS namespace targets

Tips for diagnosing why clients are referred to unexpected DFS namespace targets http://blogs.technet.com/filecab/archive/2006/04/13/425169.aspx I've seen three recent posts in our microsoft.public.windows.server.dfs_frs newsgroup from DFS Namespaces customers who are trying to determine why clients are being referred to unexpected targets. Here...

DFS Site Information Is Not Updated When You Move Server to a New Active Directory Site

DFS Site Information Is Not Updated When You Move Server to a New Active Directory Site http://support.microsoft.com/?kbid=260857 SYMPTOMS After you move a server that is a replica member of a Domain Distributed File S... After you move a...

Migrating DFS namespace from v1 to v2

Migrating DFS namespace from v1 to v2 Made a v1 namespace with name Eps.local \V1 and in ADsiedit.msc ---domain --system--DFSconf-v1 (ftdfs) that shows its a v1. now exported it into an XML file called V1.xml on C drive through command...

DFSN Troubleshooting

DFSN Troubleshooting dfsutil | purgemupcache | spcflush | pktflush local/site/domain set target priority get the nearest DFS (1) DSSITE > configuration (2) Set Target Priority > (3) Out-of-Site > OK...

Answer DFS From One Domain To Another

Answer DFS From One Domain To Another http://social.technet.microsoft.com/Forums/en-US/winserverfiles/thread/831c55ce-78fd-4989-a7f7-8a1b708fa3f4/ We have 2 domains staff.company.local and student.company.local The student domain has a DFS patch in place as follows; \\students.company.local\dfs\homeareas We do have trusts in place between the two domains, but from the...

DFS root was on a DC which was demoted and formatted.

DFS root was on a DC which was demoted and formatted. SOX050307700007 DFS was a single un-replicated root. Was previously hosted on a DC which was demoted and formatted. Points to multiple replicated target links. The root target data still...

DFSN Cases

DFSN Cases Ø Also, it appears that we cannot make changes to the DFS Namespace when the primary domain controller is offline. We have DFS in scalability mode. Is that expected behavior? The answer... DFS uses the PDC operations master...

A file sharing connection to a Windows Server 2008-based server drops unexpectedly if the server has Symantec Endpoint Protection prior to 11.0.4202 (MR4-MP2) or Symantec Antivirus 10.2 installed

A file sharing connection to a Windows Server 2008-based server drops unexpectedly if the server has Symantec Endpoint Protection prior to 11.0.4202 (MR4-MP2) or Symantec Antivirus 10.2 installed http://support.microsoft.com/kb/961654 SYMPTOMS Event ID: 4226 Source: Tcpip Message:TCP/IP has reached the...

Networking\SMB\File transfer fails over network with network related errors

Networking\SMB\File transfer fails over network with network related errors SOX070102700032 > Take network trace at the client and the server > reproduce the error > Take a trace of both sending and receiving computers during the failure and the success...?...

DFSR Replication is not working: Error: 9003 (The replication group is invalid)

DFSR Replication is not working: Error: 9003 (The replication group is invalid) Customer Name: Justin Vashisht Case Number: SRX080606600411 Phone Number: Customer Email: S: (Subjective) =============== DFSR Replication is not working...

DFS Faq's

DFS Faq's 1. How many Roots can we have in Domain based DFS and in Standalone Root. What can we do to provide availability in Standalone DFS A domain-based root can have multiple root servers to provide redundancy and...

SYSVOL Migration to DFSR

SYSVOL Migration to DFSR The domain functional level should be Windows 2008 In the command prompt, type in the command dfsrmig /setglobalstate 0 : This is to set the state at :”Start” When that succeeds, next...

Repair options that you can use to recover if you accidentally make an incorrect Distributed File System Replication (DFSR) member authoritative in a Windows Server 2003 R2 environment

Repair options that you can use to recover if you accidentally make an incorrect Distributed File System Replication (DFSR) member authoritative in a Windows Server 2003 R2 environment Article ID : 957556 INTRODUCTION You may accidentally make an...

Windows Server 2003 - DS - The terminal servers licensing period has expired

Windows Server 2003 - DS - The terminal servers licensing period has expired Number : SRX080311601035 TITLE: PST\Win2k3\DS\the terminal servers licensing period has expired SRX080311601035 Mar 2008 Phone Log ============================================ Problem Product: Windows Server 2003 Enterprise Customer Problem Description ============================================...

DFS share access general troubleshooting

DFS share access general troubleshooting Basic steps DFS share access "access is denied" Please go through these basic steps: 1. Please export the DFS structure. Dfsutil /root:DFSName /view > dfs.txt Please replace the DFSName with the name of the DFS...

DFSR & DFSN - Troubleshooting "Replication of this type of reparse point is not supported by the DFS Replication service"

DFSR & DFSN - Troubleshooting "Replication of this type of reparse point is not supported by the DFS Replication service" Number : SOX061031700033 TITLE: DFSR & DFSN - Troubleshooting "Replication of this type of reparse point is not supported by...

DFSR - Tuning replication performance in Windows Server 2008

DFSR - Tuning replication performance in Windows Server 2008 Number : SOX090105700020 TITLE: DFSR - Tuning replication performance in Windows Server 2008 Problem: Windows Server 2008 Enterprise AL ID: SOX090105700020 CRT: Jan 5 2009 MOD: Jan 5 2009 Problem...

DFSR : Set Static RPC Port

DFSR : Set Static RPC Port Number : SOX060426700005 Created : 04/26/2006 Region : US TITLE: DFSR - set static RPC port Problem Windows Server 2003 SP1 ID: SOX060426700005 CRT: Apr 26 2006 MOD: Apr 26 2006 Problem Description #...

DFSN v2

DFSN v2 REQUIREMENTS: Domain Functional level: 2008 The domain functionality level required for DFSN v2 to come in effect is 2008. The domain functionality level is required to be at least 2008 OR above for DFSN v2. All namespace servers...

Sign In

http://www.skar.us

Categories

Monthly Archives

Tag Cloud

Windows Server

This is the list of contents that correspond to this category: