jao's questions

I want to monitor which of my servers need updates so I installed WSUS. Installation went fine and the servers are getting their updates now from WSUS. However, most of the servers show an incorrect number of needed updates.

For example this one:

It says that the server needs 2 updates.

I checked in the windowsupdate.log on the server which also reports the same number (which is probably where WSUS gets the number from):

But when I check the Windows Update UI, it says that all updates are installed, even after a reboot:

How do I get the required updates showing here, or how do I make the thing report back that it doesn't need any more updates (if that's the case) ?

This answer suggests moving a large mailbox (50 gb) to a new Exchange database. Will that improve performance, such as moving mail from one folder to another and will it improve search speed?

In Exchange 2010 I have a shared mailbox with two emailaddresses (alias). How do I sent an email using one of the aliases? I'm already using smartreply and choosefrom for my own mailbox, but it doesn't seem to work with shared mailboxes.

We are using Exchange OWA 2010 SP3. When a user with an expired password tries to log in, they are told that the username or password is invalid:

According to this Technet blog setting a registry key and restarting IIS should fix it:

1. On the Client Access Server (CAS), click Start > Run and type regedit.exe and click OK.
2. Navigate to HKLM\SYSTEM\CurrentControlSet\Services\MSExchange OWA.
3. Right click the MSExchange OWA key and click New > DWord (32-bit).
4. The DWORD value name is ChangeExpiredPasswordEnabled and set the value to 1. Note: The values accepted are 1 (or any non-zero value) for "Enabled" or 0 or blank / not present for "Disabled"
5. After you configure this DWORD value, you must reset IIS. The recommended method to reset IIS is to use IISReset /noforce from a command prompt.

This is how it is currently set in my server:

There are no spaces after ChangeExpiredPasswordEnabled, it is set to 1 etc.

After that I run IISreset /noforce from an elevated command prompt. I even rebooted the server. But when a user with an expired password tries to login he is still greeted with the 'username or password is wrong' error message.

I also looked in group policy to verify the minimum password age is set to zero.

We have a Windows 2012 domain controller.

btw: It has worked before, but only a couple of days earlier this year.

Windows event log on the Exchange server registers the following failure:

Failure Information:
Failure Reason:     The specified account's password has expired.
Status:         0xC0000224
Sub Status:     0x0

E-mail sent from (not on behalf) a shared mailbox is stored in the user's mailbox sent items folder instead of the sent items folder in the shared mailbox.

There is apparantly a hotfix (KB2181579) but that only works with Cached Exchange Mode enabled.

Enabling Cached Exchange Mode is PITA, as it has its own problems (missing folders, calendar items missing/not synchronizing etc)

Is there a way to store the sent items in the shared mailbox, which does not involve rules?

i'm trying to upgrade a windows 2012 core to windows 2012 gui, but it keeps failing.

This is the error from cbs.log:

2013-10-11 03:38:14, Error                 CSI    00000039 (F) Logged @2013/10/11:01:38:14.314 : [ml:304{152},l:302{151}]"events installer: online=1, install=1, component=amd64_Microsoft-Windows-Component-Resources-MrmCore_31bf3856ad364e35_6.2.9200.16384_neutral_release__."
[gle=0x80004005]
2013-10-11 03:38:14, Error                 CSI    0000003a (F) Logged @2013/10/11:01:38:14.345 : [ml:294{147},l:292{146}]"EventAITrace:Channel Operational is declared by an existing provider Microsoft-Exchange-Troubleshooters{{d46a5e4c-6a53-411f-91f1-d205c8310818}}.

"
[gle=0x80004005]
2013-10-11 03:38:14, Error                 CSI    0000003b (F) Logged @2013/10/11:01:38:14.345 : [ml:168{84},l:166{83}]"WmiCmiPlugin manproc.cpp(709): InstrumentationManifestAssert failed. HR=0x80073aa2."
[gle=0x80004005]
2013-10-11 03:38:14, Error                 CSI    0000003c (F) Logged @2013/10/11:01:38:14.345 : [ml:166{83},l:164{82}]"WmiCmiPlugin eventloghandler.cpp(192): ProcessEventsInstall failed. HR=0x80073aa2."
[gle=0x80004005]
2013-10-11 03:38:14, Error                 CSI    0000003d (F) Logged @2013/10/11:01:38:14.345 : [ml:170{85},l:168{84}]"WmiCmiPlugin eventloghandler.cpp(212): EventLogHandlerInstall failed. HR=0x80073aa2."
[gle=0x80004005]
2013-10-11 03:38:14, Error                 CSI    0000003e@2013/10/11:01:38:14.345 (F) CMIADAPTER: Inner Error Message from AI HRESULT = HRESULT_FROM_WIN32(15010)
 [
[22]"Configuration error.

"

I think the problem is here: EventAITrace:Channel Operational is declared by an existing provider Microsoft-Exchange-Troubleshooters{{d46a5e4c-6a53-411f-91f1-d205c8310818}}.

But how do i remove the channel?

How do I redirect a website from www.domain1.com/en-US/example.html to www.domain2.com/en-US/example.html in IIS 7?

This is what I've tried so far:

I've also tried wildcard pattern www.domain1.com/en-US/* without a condition.

When trying to restore data or performing a scan, I get the following error:

E3841 Unable to find session number, EC=Error session active

In the log file I see the following line:

[12/20 10:38:38 0ce8  1 TK        3472   6] FSD: FSD_ClientGotoSession(): Open session file failed JobID[3472] DeviceNumber[8] Session[1] MS=5

Backups are stored on a NAS, accessed by Windows share.

What is wrong?

Spam is a huge problem these days, especially spam sent with your e-mail address as the sender. I think I have a simple solution but I'd like to hear from you what is wrong with it or why it is infeasible.

My idea is that a recipient server checks if the IP mentioned in the sender is the registered, or authorized, SMTP sender for that domain.

For example: all mail from @example.com has to be send through mail.example.com. If it is send through mailer.spammer.ru for instance than the recipient should block the mail.

A way to list authorized SMTP servers is in a DNS TXT record.

So is this achievable? Or does something like this already exist?

OS client: Windows7 professional OS server: Windows 2003

I create a new file in my documents folder (on the server). When I try to delete the file later, I get the following error:

Cannot delete the file. You need permissions from domain\my own username to delete this file.

Why is that?

So we have a branch office that is connected via 10Mb fiber to the main office. Logging on a Windows 7 (pro, 32 bit) domain pc is very slow. The first time it takes up to 7 minutes. After that, it takes ~2 minutes to login and ~3-5 minutes to log out.

I checked everything I could and saw nothing special:

• DNS settings
• Tracert to domain
• There are no extreme loads on the server during log in/out
• Downloading a file from the server to the local computer does not show low speeds (1.2MB/s) (or is that too slow?)
• Updated network driver
• GPO settings such as
  • wait for network at startup and logon
  • use a clean GPO (with no roaming profiles options set)
  • set max wait time
  • only allow local user profiles
• disabled Offline files on the roaming profile share
• disabled IPv6 on local PC
• disabled firewall on local PC
• disabled indexing services on local PC
• the computer does have a wallpaper (see http://support.microsoft.com/kb/977346)

The event log shows warnings with event ID 6005 and 6006:

The winlogon notification subscriber took 284 second(s) to handle the notification event (Logon)

So I did a boot logging as mentioned here and it showed a lot of NotifyChangeDirectory operations that took a long time.

I've run out of options. Is there anything else that might fix this?

Update

I think the problem is more bandwidth related. Copying a 100mb file from the server to the client takes about 3 minutes. Copying from a win 7 client in the main office to the client in the branch office takes 1.5 minutes. So there are most likely some performance issues with the win2003 server.

Update 1 year later

I've now disabled roaming profiles for these users. This has given a huge speed boost. This works for us since users have their own workstation.

How do I completely disable NDR messages in Exchange 2003? I don't want Exchange to send any non delivery reports anymore.

I did already:

From Exchange System Manager, Global Settings, Internet Message Format. 
Right click > properties. Advanced tab. Uncheck Allow non-delivery reports.

And restarted Exchange, however this didn't fix it.

My Outlook 2010 freezes a couple of times per day. I am connected to a Exchange 2003 server. Sometimes, when I try to send an email or open an appointment, the interface completely freezes. After a few seconds a balloon pops up saying:Outlook is contacting Server.network.local (where 'Server' is the primary domain controller and not the Exchange server). I checked the event log of that server and I found out that every time my Outlook freezes, three notices are written to the Security Event log:

Event Type: Success Audit Event Source: Security Event Category: System Event Event ID: 515 Date: 4/8/2011 Time: 4:45:26 PM User: NT AUTHORITY\SYSTEM Computer: Server Description: A trusted logon process has registered with the Local Security Authority. This logon process will be trusted to submit logon requests.

Logon Process Name: KSecDD

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Success Audit Event Source: Security Event Category: System Event Event ID: 515 Date: 4/8/2011 Time: 4:45:25 PM User: NT AUTHORITY\SYSTEM Computer: Server Description: A trusted logon process has registered with the Local Security Authority. This logon process will be trusted to submit logon requests.

Logon Process Name: KSecDD

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Success Audit Event Source: Security Event Category: System Event Event ID: 515 Date: 4/8/2011 Time: 4:45:25 PM User: NT AUTHORITY\SYSTEM Computer: Server Description: A trusted logon process has registered with the Local Security Authority. This logon process will be trusted to submit logon requests.

Logon Process Name: Winlogon\MSGina

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Who can help me solving the freezing Outlook?

On a windows 2003 server I can nslookup www.google.com which returns

Server:  localhost
Address:  127.0.0.1

Non-authoritative answer:
Name:    www.l.google.com
Addresses:  74.125.79.104, 74.125.79.147, 74.125.79.99
Aliases:  www.google.com

I can then ping 74.125.79.104:

Pinging 74.125.79.104 with 32 bytes of data:

Reply from 74.125.79.104: bytes=32 time=16ms TTL=54
Reply from 74.125.79.104: bytes=32 time=32ms TTL=54
Reply from 74.125.79.104: bytes=32 time=15ms TTL=54
Reply from 74.125.79.104: bytes=32 time=15ms TTL=54

Ping statistics for 74.125.79.104:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 15ms, Maximum = 32ms, Average = 19ms

But I cannot ping www.google.com:

Ping request could not find host www.google.com. 
Please check the name and try again.

(this one is different from the other question in that this one has a TLD, it is not a local domain.)

Update: I am running a dns server at localhost (127.0.0.1). Even when I change it to use for example opendns, it still can nslookup hostname and ping ip address, but not ping hostname. So what is wrong?

**Update 2: **

here is the ipconfig /all result:

Windows IP Configuration

   Host Name . . . . . . . . . . . . : SERVER
   Primary Dns Suffix  . . . . . . . : NETWORK.local
   Node Type . . . . . . . . . . . . : Unknown
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : NETWORK.local

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet #2
   Physical Address. . . . . . . . . : 00-0F-1F-56-3B-AA
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.7.2
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.7.1
   DNS Servers . . . . . . . . . . . : 127.0.0.1

Update 3:

Thanks everyone for their help and suggestions. I appreciate that.

Ipconfig /flushdns returns: Sucessfully flushed the DNS resolver cache

Ipconfig /displaydns returns:

2.7.168.192.in-addr.arpa
----------------------------------------
Record Name . . . . . : 2.7.168.192.in-addr.arpa.
Record Type . . . . . : 12
Time To Live  . . . . : 0
Data Length . . . . . : 4
Section . . . . . . . : Answer
PTR Record  . . . . . : webserver.mydomainname.com


1.0.0.127.in-addr.arpa
----------------------------------------
Record Name . . . . . : 1.0.0.127.in-addr.arpa.
Record Type . . . . . : 12
Time To Live  . . . . : 0
Data Length . . . . . : 4
Section . . . . . . . : Answer
PTR Record  . . . . . : localhost

Update 4:

Wireshark shows the following:

3   11.540542   208.67.220.220  192.168.7.2 DNS Standard query response A 74.125.79.99 A 74.125.79.104 A 74.125.79.147

6   42.056794   192.168.7.2 192.168.7.255   NBNS    Name query NB WWW.GOOGLE.COM<00>

which is weird: when I ping, it sends a packet to 192.168.7.255 instead of asking the DNS server for an address

Update 5:

This is what netdig had to say:

opcode: Query, status: NoError, id: 42
flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

QUESTION SECTION:
www.google.com.                 IN      A       

ANSWER SECTION:
www.google.com.         86324   IN      CNAME   www.l.google.com.
www.l.google.com.       224     IN      A       74.125.79.99
www.l.google.com.       224     IN      A       74.125.79.104
www.l.google.com.       224     IN      A       74.125.79.147

Query time: 0 ms
Server    : 192.168.7.2:53 udp (192.168.7.2)
When      : 1/6/2011 12:33:50 PM
Size rcvd : 100

In Windows 7, one has to have (local) administrator privileges to install a printer driver, even when this printer is installed from one of the domain servers.

The only 'solution' I've read so far is to add the user to the local admin group.

This is not something I like to do, because that means they can install a whole lot of other software (toolbars, malware) as well. So is there another way to allow a user to install a printer driver (and still not allowing them to install trash)?

Update: the server is running windows server 2003

We are planning to set up a branch server (windows 2008) which will be linked to the main active directory server (running windows 2003). What bandwidth do I need to keep the domain synchronized? And is there anything else I need to take care of?

Update: There will be about 10-15 users using the domain.

Saving an Excel or Word 2007 file to a network share is very slow in Office 2007. It might take as long as two minutes two save a 100kb file. What could be causing this?

The network share is hosted on a Windows 2003 server.

We have a windows 2003 AD and are using Folder redirection to redirect the users My Documents to a share. Is there a way to save certain filetypes (*.mp3, *.avi) or folders (My Music, My Pictures) on the user's hard disk instead of saving on the netwerk share?

I'm aware of the GPO setting 'Exclude directories in roaming profile' but I'm not sure if that will do what I want (we're using redirected folders)

Possible Duplicate:
Can you help me with my software licensing question?

We're running two terminal servers. On each of them we need MS Project 2007. What license is needed for MS Project?

I am trying to configure a D-link DES 3526 switch. When I add a VLAN with some untagged ports (via the web interface), the system says that it cannot add untagged vlan ports. What's wrong?