After updating a Windows XP SP3 machine to Citrix Receiver v3.3, the user is unable to launch any published applications. The error they got is:
No value could be found for (Allowhotkey) that satisfies all lockdown requirements.
The title pretty much says it all, is there any advantage to giving a VM 2048MB of memory instead of rounding to base-10 and doing 2000MB?
So, I have installed the Remote Server Administration Tools on my Win7 computer, and it works well, but it is a bit slow sometimes, over our site-to-site VPN. I have a Server 2008 R2 that I login to for tasks I need to be speedy, but I a unable to install the Remote Server Administration Tools on Server 2008 R2.
My question is this: Can I enable these tools without promoting this server to a domain controller? I realize the tools are already part of the Server OS, I just want to use them to administer my domain without connecting directly to my domain controller.
I'm trying to configure Link Aggregation between my two switches, on the DELL switch, there is only an option to include a port in a "LAG Group." On the Cisco's I've tried creating an EtherChannel group with "Dynamic Desirable" (set to negotiate). I have also tried to setup the ports as 802.11Q as well as ISL Link (both with same results)
When I plug in the cables, I can see that the links come up for each individual port, but the trunk does not.
I can see the status of each individual "port" on the Cisco as well as the EtherChannel group from the Cisco and each of the individual ports show status "stand-alone."
The lights on the Cisco switches start orange (normal) and eventually go to green, but I cannot get any traffic across the cross-connect. If I remove all "configuration" and use a single cable, everything works fine. I'm trying to get some additional speed with the LAG.
Any thoughts on what I should try?
With Windows Vista and newer, when you enable remote desktop for administration, there are options to allow "Old Clients (less secure) [no network level authentication]" and "New clients (more secure) [with network level authentication]".
Is there any way to connect to the "more secure" version from non-microsoft clients? I've tried from the ubuntu client, and it works to connect to XP/2003 but it fails to connect to a Win7 Desktop or 2008R2 server, though I can connect to both of those machines from another Win7 machine.
To elaborate a bit on this point, I'd like to know how secure are documents hosted on an IIS website with the following configuration:
- IIS Directory Listing Disabled
- Anonymous Access is Enabled
- Site is accessed via HTTPs only
- Files have very long, randomly generated names (similar to a guid plus other characters)
I believe that this is a relatively secure setup (I understand its not as secure as truly authenticated access.) I would like to know if I'm seeing this big wall yet it would be easily circumvented by someone with more knowledge than myself.
I guess what I'm looking for are ways one could get around the setup I have outlined above.
A client recently mentioned using a VPN consolidator for remote access to their server. I've never heard this term used before. Is it some type of slang that I'm not familiar with?
I did a bit of searching and I came up completely empty.
I've got a bit of a tricky application I need to monitor. Its a Java .jnlp file. Using Process Monitor, I've been able to identify it (its instance of javaw) going out to the other servers in my network; however, running Fiddler, it shows no activity what-so-ever. I do know the traffic is HTTPS encrypted, and it appears to be connecting on ports which my servers are running web servers (tomcat). With Process Monitor I can see the length and direction (send/receive) that the data is going, but it doesn't even show me the encrypted contents.
I'm wondering, if there is any way I can man-in-the-middle this program to see what data its sending from my machines?
update
The server software that this jnlp is communicating with, is installed as a "package" and I have not been able to find any SSL certificate files within the directory of this application. I've used Wireshark, but without the private keys, I haven't been able to decrypt the traffic.
The solution with a VM Gateway running some proxy (other?) software seems the easiest to implement, how would you go about deploying that solution with Virtual Box?
I have the following powershell script, which executes a few robocopy commands:
ROBOCOPY.exe $q3 $q4 /R:5 /W:15 /S /NP /MT:32 /XA:SH /XJD
ROBOCOPY.exe $q2 $q3 /R:5 /W:15 /S /NP /MT:32 /XA:SH /XJD
ROBOCOPY.exe $q1 $q2 /R:5 /W:15 /S /NP /MT:32 /XA:SH /XJD
ROBOCOPY.exe $src $q1 /R:5 /W:15 /S /NP /MT:32 /XA:SH /XJD
This works fine, but it takes a really long time, I'm wondering, if there is a way that I can have robocopy do a "cut + paste" instead of a "copy + paste" so windows will move the NTFS pointer to the file, instead of actually copying all of the bits of each file?
Is there a way to Enable the .NET 3.5.1 Feature on NEW install of Server 2008 R2 during install? I'm installing of normal media, and going through the install process there is no configuration options, so after installation, I'm having to manually enable this feature on every server, is there a better way? I'm typically installing to Hyper-V VMs.
When I fire up Perfmon on the hyper-v host, it shows only disk io for that host, and it doesn't seem to include the aggragte disk IO for all machines on the host. Is there something special I need to setup in perfmon to read total IO on the entire server? Is there another tool I should be using to take these readings?
Background: I currently have ~20 VMs on a Hyper-V host sitting on six 15k RPM local SAS drives in RAID 10. I'm looking at potentially moving to iSCSI, but I want to make sure that I'm not using more throughput than the iSCSI can provide. (I'm looking at 1 Gbps, not 10).
I understand about the different types of RAID configurations:
- RAID 1 -- Mirror [Redundant]
- RAID 0 -- Stripe [Performant]
- RAID 5 -- Hot Spare [Redundant]
From what I understand, RAID 1 gives you redundancy with no performance hit, RAID 0 gives you performance at the cost of redundancy, and RAID 5 is good in the senes that you gain extra storage space and still have redundancy, at the expence of performance.
I also understand a bit about Nested RAID configurations, specifically RAID 10 (1+0). This provides the benifit of both RAID 1 + RAID 0. Giving you the best of both worlds.
My question is this: (And a SAN is out of the question here) Would a RAID 50 or a RAID 10 be better suited for a virtualization environment where most VMs are very under used in terms of disk IO and CPU use. I'm trying to maximize the number of VMs I can put on a host machine, and my limiting factor is drive space.
So, I'm trying to put as many VMs on a Virtual Host as possible, most of the IO on any of the VMs will be OS related and on occasion user requests will trigger a VM to do some IO, but this is rare and relativly evenly distributed across VMs.
My thought is that the RAID 50 could prove better because A) better use (2/3 total size of all disks in the array instead of 1/2) and B) potentially better better random read/write performance since there are more drives in play for storage, so read/write seeks are more likely to be on different physical drives.
update
Virtual Hosts - Windows Server 2008 R2
Virtual Machine - Windows 2000 Server - Windows Server 2008 R2
update 2
Single hardware RAID controller. Which I assume would do parity calculations?
Two RAID 5 arrays < 10 total drives
Raw performance is not an issue in most situations, the main limiting factor is physical drive space. Most of the IO is just OS chatter. Due to limitations in our database software we need a 1-server::1-system, even if its only 5 users. So most of our database servers sit idle. The overhead is just running that many OSes on the drive array.
update 3
I am currently using a RAID 10, and it is working just fine; but I'm finding that more drive space would be useful, (thus the inquiry about RAID 50 for better use of physical disks). As suggested below, I'm hearing that RAID 6 could offer similar performance, redundancy, and storage capacity as RAID 50 -- is that true or am I not understanding the responses?
How can I change the "user picture" for each indivudal user that is displayed during the logon for Windows Vista, 7, 2008, 2008R2 machines throughout a domain?
The objective here is to start a simple .NET application I've written which captures some environment variables (time, username, computername, etc) upon login. This .NET application subscribes to the Windows "User logout" event.
Upon launch, the application captures the above variables, and creates a record in my database, upon logout (which I'm capturing) I update another field in the same record, with the logout time.
The above is working exactly as I would like, when I launch the binary, it makes its initial log entry, then waits for the logout event and updates the same record.
Restrictions, the .NET binary should be able to live on a share point (\server\share\myapp\v1) so I can update the application to (\server\share\myapp\v2) and simply update the GPO/Logon script.
My initial thought was to use the \domaincontroller\sysvol\ directory to store the binary and then update all user accounts to include a call to my application. Can you see any flaws in this approach?
My question is this: First, is there anything wrong with my idea above? Second, if so, what is the best way (through group policy or otherwise) to ensure this application launches whenever a session is started on a server?
Using User Isolation to isolate users, so I have folder like this
\FTP\LocalUser
\FTP\LocalUser\Public
\FTP\domain\me
\FTP\domain\bob
The domain users are able to authenticate, login and see their home directory, but Anonymous users attempt to login as anonymous and then are given the error User cannot log in, home directory inaccessible.
update
Using Process Monitor, I was able to determine that I'm getting access denied errors. Which makes sense, because domain users have access to the UNC Path via Active Directory, but anonymous will not, and its telling me it is impersonating NT AUTHORITY\IUSR -- how can I setup IIS FTP to impersonate a specific user if the access type is anonymous?
update 2
Is there a way to allow an IUSR account from MachineA to access a share on MachineB?
I'm wondering if there is any good/easy way to get the IIS configurations synchronized?
I'm going to be setting up a pair of IIS Servers with Network Load Balancing. I can get the data files (html, etc) synchronized all fine and well, but I'll be adding new Websites fairly often and I'd like to avoid doing the IIS configuration on multiple servers.
I have an IIS6 server setup running Windows Server 2003 x64, R2, SP2. Everything is working great I can host websites in IIS, and it works exactly how I want.
The catch, I've got an ASP.NET WebApp that needs to use a 32-bit only Odbc driver. I've setup the ASP.NET WebApp to compile for x86 only, but it still doesn't work.
I've also tried this command on the server to enable x86 worker processes, but it also doesn't work:
cscript.exe adsutil.vbs set W3SVC/AppPools/Enable32BitAppOnWin64 true from here
Still the application fails to load the Odbc Driver, if I run the exact same code on an x86 dev machine it works as expected, it also works on my x86 IIS7; I'd like to avoid building another production web server for this one WebApp, so any help is appreciated.
I have a group of users, lets call them DOMAIN\MyPowerUsers; I would like to give everyone in this group the abbility to create, edit, and delete users in the DOMAIN, and to modifiy group membership of users in the domain. Is this possible?
I have a few Server 2008 Hyper-V hosts all working fine with Virtual Machine Manager. I got a new server and installed Server 2008 R2 and was unable to manage it with VMM; so I upgraded to VMM R2. Now, I am unable to manage any of my old Server 2008 machines, but the Server 2008 R2 machine works great.
Is there a way to use System Center Virtual Machine Manager in a mixed Server2008/Server2008R2 environment?
I have a batch file like this, the issue that I have is that if the first batch file fails, the second one never gets started, how can I get them to both keep going?
@echo off
MapNetworkDrive_J.cmd
MapNetworkDrive_Y.cmd
I have tried this:
@echo off
start MapNetworkDrive_J.cmd
start MapNetworkDrive_Y.cmd
however, this starts two new command windows which after they are done remain open in the users session.