I'm doing a rollout to a big group of users (1500) and we are being impacted by a lot of delays because of windows updates.
Is it possible to create a staging OU where newly built computer can be moved to and delivered to users without getting updates and then once delivered moved from this ou to another which has the normal scheduled updates applied. How do other people do this without being impacted by a lot of updates.
I need to find out what server ports are listening on port 3389. I have to check 2500 servers, some in different vlans, to make sure remote desktop is enabled.
Can netstat be used to check this and used against a ip range.. or would it be best to use powershell command
new-object system.net.sockets.TCPclientList xsevernamex, 3389
I have a need to logout certain rdp sessions (superadmin account) after 15 minutes of inactivity. if someone forgets to disconnect a session from one of the windows servers and a password changes overnight, it wont lock the account. I have found a group policy setting for this (end a disconnected session in remote desktop services) but i only want to apply it to the super admin account, is this possible by just adding the super admin to the gp permission.
I am trying to write a script to add a group to an OU, I've stripped out the script and am using the command line to find the error and it looks like -path is incorrect, how do I use powershell to create a group in the specific OU without using -path.
Command
New-ADGroup -name _AB_Read -GroupCategory Security -GroupScope Global -Path OU=TEST,OU=NEW_Groups,DC=Corp1,DC=net
Error
New-ADGroup : Cannot convert 'System.Object[]' to the type 'System.String' required by parameter 'Path'. Specified method is not supported.
At line:1 char:77
New-ADGroup -name _PL_Read -GroupCategory Security -GroupScope Global -Path OU=V ...
~~~~
CategoryInfo : InvalidArgument: (:) [New-ADGroup], ParameterBindingException
FullyQualifiedErrorId : CannotConvertArgument,Microsoft.ActiveDirectory.Management.Commands.NewADGroup
I am trying to use robocopy to update some internal AV clients that are not working. They will update once I the files are copied manually in.
I've tried the following robocopy script, but can't get it to execute.
for /f "usebackq tokens=*" %%T in ("serverlist.txt") do (robocopy C:\.. \\%%T\C$\.... /s /e >> script.txt)
Edit.
Turns out this was a valid script I had called the file robocopy.bat and I was getting the error process already in use, I renamed the file and it worked.
I am having an issue with an active directory account not running login scripts. The scripts run fine in one location and not in the other.
Getting the following errors in the event logs:
GroupPolicy-Operational event ID 7007
Periodic policy processing failed for user domain\username in 1 seconds.
EventData
PolicyElaspedTimeInSeconds 1
ErrorCode 1265
PrincipalSamName domain\username
IsMachine 0
IsConnectivityFailure false
nt ID 40960 LSA (LsaSrv)
- System
- Provider
[ Name] LsaSrv
[ Guid] {199FE037-2B82-40A9-82AC-E1D46C792B99}
EventID 40960
Version 0
Level 3
Task 0
Opcode 0
Keywords 0x8000000000000000
- TimeCreated
[ SystemTime] 2015-01-13T15:03:17.679126200Z
EventRecordID 26015
Correlation
- Execution
[ ProcessID] 896
[ ThreadID] 4656
Channel System
Computer computer.domain.com
- Security
[ UserID] S-1-5-18
- EventData
Target cifs/domain
Protocol Kerberos
Error "{Buffer Too Small} The buffer is too small to contain the entry. No information has been written to the buffer. (0xc0000023)"
# for hex 0xc0000023 / decimal -1073741789 :
STATUS_BUFFER_TOO_SMALL ntstatus.h
# {Buffer Too Small}
# The buffer is too small to contain the entry. No
# information has been written to the buffer.
# 1 matches found for "0xc0000023"
The Security System detected an authentication error for the server cifs/domain.com The failure code from authentication protocol Kerberos was "{Buffer Too Small}
The buffer is too small to contain the entry. No information has been written to the buffer.
(0xc0000023)".
Solution http://technet.microsoft.com/en-us/library/cc733950(v=ws.10).aspx
Running a windows 2003 domain, desktop is Windows 7, domain controllers are a mix of 2008 and 2003 servers.
We haven't rebooted some of the 2003 DC's for over 3 years (different story) and these are scheduled to be decommissioned.
Is it possible to authenticate a windows AD account to a specific DC rather than the default DC, for the purposes of troubleshooting a login problem?
I have a ton of user directories, that I need to move along with permissions to another location, the command I use on an individual basis is :
robocopy "\filer\home" "h:\UserHome" /E /SEC /Copy:DATSOU /log:c:\logfile.txt
Is there a way that robocopy can point to a list of directories in a test file, that need to be moved, instead of doing it one by one which is the way im currently doing.
I was trying to add local users to my esxi 5.5 cluster but there is no user and group option available, is windows authentication the only way to add users and groups.
My environment - there is no listing for users and groups.
We are deploying physical windows servers (460c/Gen8/128GB RAM/300GB HDD) if I implement the page file, following the best practice of 1.5 times the ram, its going to take up the complete disk almost, so with such a large amount of RAM will it be necessary to have a page file that follows the normal windows way.
we are in the process of migrating windows operating systems and to make future search easier in AD I'd like to put in more details into the description box in the computer name dialog.
e.g.
Blade03|BL465c|WIN2008R2|4GB|2CPU|75GB|10.67.41.53
I searched this on my AD and nothing comes up, is there an easier way to do this, so the description becomes searchable.
I have a production cluster of 6 Nehalem based and two Sandy Bridge-EP based blade servers.
To enable vmotion across this cluster in vmware, I need to lower the Sandy bridge blades to nahalham using EVC, and this works fine.
My question is by doing this do I loose any capacity or functionality on the Sandy Bridge-EP based blades or is EVC simply a mask to enable vmotion across different processor types.
I am having an issue with a port needed by an application sometimes being taken by another application, I have added the following to the registry assuming this will exclude the port from the dynamically assign ports:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters ReservedPorts = xxxxx-xxxxx
Is it possible to check a range of dynamic ports that may be excluded and it there another way to reserve this port by OS that only the specific application can use.
I have been using scheduled tasks to reboot a small amount of windows 2003 servers, I'd like to start rebooting the rest (400) every three months.
Whats the most efficient way to implement this on 2003 without having to visit the server.
I have to update AD with home users number, etc. I've written the script and imported the usernames and phone numbers into Excel
Script:
dsquery user -samid "username" "OU=Sys,OU=Prod Services,DC=win,DC=ite,DC=com" | dsmod user -mobile "999" -hometel -u XXXXXX -p XXXXXXXXX
In Excel: A1 = Username B1 = Num
How do I get the above script working so it takes the usernames and numbers from Excel and puts them into a batch file?
I'm in the process of investigating upgrading from ESXI 4.x to 5.x. I would like to know if new hosts were built on the esxi 5.x platform could we later vmotion our current 4.x VM's to 5.x and then upgrade the current set of 6 hosts.
Also is there a cli script available to upgrade all the components.
I am getting the following error message when I try to run network monitor on a windows 2003 DNS server I am trying to decommission.
C:\>Nmcap.exe /network * /capture KerberosV5 || TCP.port==389 || UDP.port==389 file c:\temp\capture.chn:200mb
'Nmcap.exe' is not recognized as an internal or external command,
operable program or batch file.
'TCP.port' is not recognized as an internal or external command,
operable program or batch file.
'UDP.port' is not recognized as an internal or external command,
operable program or batch file.
I have a number of very memory/cpu intense .net applications that would like to look at moving to 2008 R2 server core, core seems like the perfect solution from initial review, we have a lot of Server 2003 VM's that were P to V's and I think we are wasting a lot of host resources on these. All apps run on either .net 3.5 or 4, is there a problem with using server core like this.
I recently started in a company that hasn't done some proper inventory on the server infra, now one of our servers has shut down and we cannot find it! dont even know if its a VM or a box.
Is there anyway to find a server that shut itself down, arp tables don't show anything as its gone over 12 hours, we have ilo's but I don't seem to be able to find the correct one.
If its a physical box connected to an ILO which I suspect it is, is there a script in ilo 2 that can query for hostnames or IP addresses on ILO.
I've been tasked with the decommission of two DNS/Wins servers in on our old site (site02). I am evaluating the servers currently from site01. The office where these servers live is moving to another site. The new site (site03) has DNS servers in place.
DC01 is mainly a DHCP server for desktops and will be left up until the last user leaves then switched off.
DC02 is complicated as all our servers in site01 point to it statically, I have completed a script to point the servers to the new DNS servers in site03.
I'm concerned about some DNS/WINS dependencies I might have missed, I am going to start running MS network monitor to try and see if there is any DNS requests on the servers.
I've also noted the scavanging was never enabled on DC01 or DC02.
Would clearing out scavanging and enabling help with this investigation into what dependencies use these servers, is there anyway to view the records of querys if I enable scavanging by the default 7 days, and will they be readable i.e. have an ip address or hostname.
I am in the process of setting up two RDS servers in different locations on different domains, I've set one up and I am very happy with it, it looks like a windows 7 desktop and its really fast so I would like to transfer this environment to another domain so I don't have to go through the process of setting up group policys etc, is it possible to transfer all these setting in the current state and import them into a new domain, I know I can export the group policy for back up purpose but not so sure about importing into completely new environment, would be nice to have two projects finished! any help :)