HannesFostie's questions

I am trying to link an existing to a new OU (that was just created), using the resources found here: http://support.microsoft.com/kb/248392 and here: http://www.thescriptlibrary.com/default.asp?Action=Display&Level=Category3&ScriptLanguage=VBScript&Category1=Active%20Directory&Category2=OUs&Title=Assign%20a%20New%20Group%20Policy%20Link%20to%20an%20OU,%20revised

The problem is that when it does .Get("gPLink") it gives an error that says "The directory property cannot be found in the cache". I am fairly positive this is due to the fact that there are no GPO's currently linked to the OU, and it expects at least one (correct me if I'm wrong).

Would appreciate any hints and tips! Thanks

We will be deploying "dynamic" classrooms using SCCM, and thus will also need to create OU's and matching users and homedirs on the fly. I am currently trying to figure out how to edit the security rights for these homedirs via a script. I've had limited success using google, because a lot looks outdated, so I wanted to see what ServerFault thinks is the best way.

What I need to do: - Create the folder (not quite the problem) - Share it and set permissions to Full Control for Everyone - change NTFS settings to "Change" or "Modify" for a single user, recursively

The other parts of the script are currently done in vbscript, but I can obviously call a different script from within this one if need be. PowerShell could be an option (if it's possible to begin with) but I'm eager to hear other options as well!

Thanks

We are having an issue where computers who are not part of the domain cannot resolve the FQDN of a server (but regular hostname and ip do resolve). The strange thing is that this does work when the computer is added to the network.

Our domain name is rather long, its something along the lines of "team.dept.company.com", could that be it?

DHCP server passes along the proper DNS, Name and WINS servers, as well as the domain name. I thought that should've solved the problem, but apparently not really.

Our domain is still windows2003

EDIT: I am starting to believe I can narrow this down to a problem either with the vmware tools NIC drivers that are embedded in my winPE boot image, or to the fact that I'm trying to do this from inside a VM. Pinging a FQDN at the same time when using a different task sequence on a physical machine works.

We recently set up the latest version of SCCM and I managed to capture a .wim image from a virtual machine (build and capture task sequence). I want to use this .wim file to deploy winXP to different hardware, and therefor need to add device drivers to the task sequence.

I created a driver package per laptop type, and deployed for the first time. However, I am getting a BSOD (0x00007B) which leads me to believe theres a problem with the storage drivers. After adjusting the task sequence to try and point to the mass storage drivers (which are applied at F6, I suppose) I do not get a list of compatible drivers (the list is empty). I looked around, and found some issues regarding hdc class drivers that are not recognized as mass storage drivers. The workaround suggested changing the INF file to make the driver a SCSIAdapter class driver, and importing these again, but to no avail. The list remains empty.

Any help is much appreciated

We recently implemented outlook signature distribution software that requires a script to be run, but because this script has a password in plaintext I decided to convert the script to a .exe file (not the safest, but our users won't understand this, besides theres nothing they can do with the database it gives access to).

The problem is that, as far as I can tell, this script does not get executed on the couple of Windows 7 machines that we have. I assume it has something to do with user rights. Running as the computer account won't work, because the script checks which users executes it and then fetches the outlook signature for that user.

Is there any alternative, or a way to force this script to run? Our users obviously don't have administrator rights.

Thanks

My colleague asked me to cross-post this here to receive input from professionals:

We have access to 2 unused servers

1. RX300 S3:

Disks: 2x73GB, 2x146GB & 2x300GB CPU: 2x 1,994Ghz (intel Xeon-ID 5130) Memory: 12GB

2. RX300 S2:

Disks:4x70GB CPU: 1x3,2Ghz Memory: 13GB

One of them will most likely be used as a terminal server (Remote Desktop Services), the other as a testserver to run backup restores for our internal (non-production) SharePoint farms (using Backup Exec). To perform the restores, we will set up a couple virtual servers using ESXi (which should be possible, despite 64bit not being possible).

What would your choice be for these servers, and why? We could purchase some extra hardware (disks, cpu, memory or what not) but will only do so if we feel it is really needed.

We have about 120 internal users, which produce a daily load of perhaps 20 for the TS, with peaks on wednesdays and when our lovely Belgian public transport services decide to strike.

We are currently thinking of using the first server for TS, because end users will use that. It doesn't really matter if our backup restore procedure isn't lightning fast, as it will be a test environment.

Thanks for your input

We are currently testing an environment in which we roll out pc's with SCCM. We've been having trouble for a while now with computers on which we deploy XP do not show up as "in the domain" or with the SCCM client recognized. We still do not know what the problem is, but one of the symptoms (possibly the reason, sort of) is the BITS service not being started.

I tried working around the problem by making a GPO which sets it to automatic, but after my last deploy I noticed one computer was not added once again. I checked the pc, and lo and behold the service was still set to manual and was stopped. No GPO's were applied, though the computer was definately in the domain (and yes, in the right OU).

Does anyone know if GPO's are supposed to be applied after a computer starts up having been added to the domain before? I'd say they are, but right now I'm doubting everything...

Let me start off by mentioning that I have no prior experience with SCCM, and that this is a proof of concept setup we are setting up in order to deploy our classroom environments more dynamically. The need arose to be able to change between OSes (XP and Win7, to begin with) and software (primarily Office 2003 and 2007 that are the problem children here).

We begun at the start, by deploying the OS without any additional software. The task sequence in question only has the App-V client. No other advertisements are enabled on the collection.

The Windows7 deployment seems to run without problems (so far). Sample size is not very big, but we have reason to believe so.

The WindowsXP deployment however does not perform as expected, with seemingly random computers not having their SCCM client or domain recognized in the SCCM console. It appears communication between the client and the server is "blocked" or does not occur (in the right manner).

The first symptom, next to the information (domain and client) not showing up in SCCM, is that there are only 2 Actions in the Configuration Manager Properties in the control panel on the client. After some looking around, I noticed the BITS service was not started, whereas it was on the clients that function properly. Starting it did not seem to resolve the problem automatically (we're about 1 hour after starting it manually).

I then looked up the logs on the client, and found several errors, the most relevant ones I believe are these:

1. CcmExec.log :

   OutgoingMessage(Queue='mp_[http]mp_policymanager', ID={3250AB2B-F5B8-4227-9AC9-8884F17AD703}): Will be discarded (expired). CcmExec 10/20/2010 11:28:42 AM 548 (0x0224) CForwarder_Base::Send failed (0x8000000a). CCMEXEC 10/20/2010 1:40:57 PM 356 (0x0164)

2. ClientIDManagerStartup.log :

   RegTask: Failed to send registration request message. Error: 0x8000000a ClientIDManagerStartup 10/20/2010 2:44:57 PM 356 (0x0164)

   RegTask: Failed to send registration request. Error: 0x8000000a ClientIDManagerStartup 10/20/2010 2:44:57 PM 356 (0x0164)

3. LocationServices.log :

   Failed to resolve 'SMS_SLP' to IP address from WINS LocationServices 10/20/2010 11:34:56 AM 356 (0x0164)

   LSGetSLP : Failed to resolve SLP from WINS, is it published LocationServices 10/20/2010 11:34:56 AM 356 (0x0164)

   LSGetManagementPointForSiteFromSLP : Unable to get the list of SLPs LocationServices 10/20/2010 11:34:56 AM 356 (0x0164)

   Failed to retrieve Default Management Point from SLP LocationServices 10/20/2010 11:34:56 AM 356 (0x0164)

   Failed to resolve 'NLB_001' to IP address from WINS LocationServices 10/20/2010 11:34:56 AM 356 (0x0164)

   Failed to resolve 'MP_001' to IP address from WINS LocationServices 10/20/2010 11:34:56 AM 356 (0x0164)

   Failed to retrieve default MP through WINS. LocationServices 10/20/2010 11:34:56 AM 356 (0x0164)

   Failed to reset certificate request times. (0x80041002) LocationServices 10/20/2010 11:34:56 AM 356 (0x0164)

   Failed to update security settings over AD with error 0x80004005.
LocationServices 10/20/2010 11:34:56 AM 356 (0x0164)

Update: Extra information The setup is done on a single physical server running SCCM, SQL Server 2008 and App-V. It is fully AD-integrated and the AD scheme is extended. Rights should not be an issue as most of the pc's deploy fine, there's just always a couple that don't. Someone asked if there was a WINS server; there's not. I'm not sure if this is a problem, wouldn't expect it to be... The "faulty" computer can ping and resolve the hostname of the SCCM server just fine.

Any help would be appreciated, we're kind of stuck atm.

I hope I provided enough information.

In our class environment, we have one class used primarily for Microsoft Access courses where each time you switch between 2003 and 2007 it will start reconfiguring with the installation dialog I'm sure you've seen before. It recently started happening in a second class and we are completely oblivious as to what triggered it. Of course external teachers use the classroom so it's hard to track any changes that might have happened. It happens for Access and Word, not for Excel or Powerpoint.

Both have the most recent updates (SP3 and SP2 for 2003 and 2007 respectively).

The users have no admin rights, but when we log in with local admin the same thing happens and keeps happening even after this "reconfiguration".

Another issue in these clasrooms was posted here: Opening My Documents prompts for credentials in redirected environment I do not think both are related, but you might disagree. Feel free to let me know.

We have a class infrastructure with classes consisting of "user" pc's and a single "teacher" pc. The fileserver has a folder for the teacher's "my documents", in which there are folders for each of the student users. Both types of accounts have their "my documents" redirected to these folders.

We use this nested structure so that the teacher has access to their documents in an easy way, allowing him for instance to put new shortcuts on their desktop or collect files.

The problem is that (only recently, apparently) whenever a user tries to insert files from My Documents into a powerpoint for instance it will prompt for credentials to the server. You can press cancel and re-enter the folder and it will work fine. Restart powerpoint (or whatever Office application) and you get prompted again. Apparently it's the same for their desktop, which is also redirected. Browsing to My Documents in explorer should work fine.

It's a bit vague, but the teachers aren't the best in supplying feedback. I tried to explain as best I could.

EDIT: removed link to the other issue as it was unrelated and now solved

Thanks a bunch

2 of this weekend's jobs completed with exceptions, and mention "RWS_AttachToDLE". I get the feeling the job did in fact complete without missing data, but I would like to be 100% sure (and can't verify the backup myself right now - colleague is out of the office and the backup in question is a bit of a black box for me, it works but I am not familiar with its inner workings).

Also, how can I prevent this from happening?

Google didn't prove to be very helpful, and experts exchange seem to have changed their system so that you can't simply scroll down to see the answers to a particular question ;-)

I just got a mail from someone notifying me of an out of office reply she received after she sent a meeting request to 3 different people, not including the one that's on leave.

She said my colleague (who is out of the office himself and who I won't bother for unimportant things) knew about this in the past, but I'm not sure what it could be.

The only thing I can think of is shared calendars of some sort.

Does anyone have an idea? Br

We have a class/lab environment where the need arises to completely reset a user's mailbox, i.e. delete all mails, calendar items, ... and preferably do this via a script, whether it be in wsh or powershell or something else doesn't really matter.

My colleague attempted this in the past, but it required him to delete the mailbox, and then adjust settings in the registry somewhere to reflect the new unique id of the mailbox so this was too troublesome to do.

Our environment is an Exchange 2007 server in a mostly Win2003 domain (2003 DC's)

EDIT: I'd like to stress that everything from the "profile" should get removed, including calendar items and tasks!

I want to monitor the temperature of a couple of our servers, and since they're Fujitsu Siemens servers with ServerView installed I decided to check if SNMP was an option, and apparently it was.

However, I can't seem to figure out which OID to get, or even in which MIB to look for this information. As usual, the documentation seems to be pretty scarce or at least vague.

Concrete information on this case would be welcome, more than anything, but if you would have tips on how to look for the right OIDs in general that would probably help me on my way as well as I don't have a clue how to properly go about it right now.

Thanks

We use Backup Exec to take care of our backups for our data server, exchange server, and one more set of systems. Each of these 3 is being done on a separate "set" of tapes. Our goal is to be able to roll back a full 2 weeks, with 1 full backup each weekend and differential/incremental backups in between (the difference between the two in our case isn't very big, because the employees mostly use a very similar set of files throughout the week).

While playing around with the settings on how to achieve this, we set the time for BE to keep the full backup to 14 days, but because we have too much data this would require manual intervention each time to erase a certain tape and use that.

What I would like to know is what kind of guidelines, tricks, tips and general "stuff to think about" you keep in mind when designing your backup schedule. The type of backups (full/diff/incr) isn't of that much importance in our case as it's more or less set in stone.

Made this community wiki as it's not a very specific question. Thanks in advance!

When I arrived at my current position, our environment existed almost exclusively of Windows servers. However, I am a big fan of using Linux for certain applications, like the webgallery I was asked to set up, a simple SFTP server, Nagios for monitoring etc.

I do fine setting these up, but not being the Linux expert, I am not sure how to properly join these servers to the domain and was therefor wondering what procedures or guidelines other people follow.

We often use ping -a to quickly figure out the hostname of a certain server, but this does not seem to work for the linux machines, most likely because of the whole WINS/NetBios thing I assume.

I just joined one server to the domain, but probably missed something cause it's not working even after a dnsflush. Next to that, the couple procedures I've found so far are pretty extensive and most of the time don't seem worth the time. Best case scenario, I download some kind of client (smbclient?), enter the domain name and maybe the server to use, supply an administrator password and that's it. Is that possible at all?

Thanks

Is it possible to instantly deploy a certain piece of software by creating a GPO in Active Directory? I realize it's possible to do this but only after rebooting the computer, and that is something we don't always want to do, especially since some of the software I want to deploy on servers.

What are the options?

One thing to note is that most of our users do NOT have admin rights as I am talking not only about servers but also about workstations in the classrooms.

Decided to re-phrase the question entirely in order to not have to make a new one.

I currently have an SFTP server set up using OpenSSH's SFTP functionality. All my users are chrooted, and everything works.

What I need most right now is for one user, which is not root (because this user can't have any real SSH powers!), to have access to all other users' chrooted dirs. This user's job is to fetch all uploaded documents every once in a while.

Directory structure as of now is:

/home |_ /home/user1 |_ /home/user2 |_ /home/user3

With ChrootDirectory set as /home/%u

User "adminuser" should have access to user1, user2 and user3's directories without having access to /home or at the very least not to anything but /home.

Bonus points for the one who can tell me how to let users write inside /home/%u without having to make a new directory inside that dir which they own themselves, and not root as is the case with /home/%u (openssh chroot prerequisite).

I am going to write a script of some sort to check event viewer in a windows server 2003 for all printjobs, and then write them to a comma delimited textfile like printername_floor_room.txt

I am wondering what the best way is to do this realtime, and keep checking the event viewer constantly. Any caveats I need to be aware of?

Thanks

EDIT: Okay, so I will most likely go for PowerShell and use Get-EventLog and then edit the "table" data. Problems I'm having: if I were to save all this data to a text file, how do I get the data out of it? A comma-separated file I could work with, but this, I'm not really sure. And once that is sorted out, I'm still not sure how to keep the file updated more or less real-time. Can I make this service-like, without hogging up all resources? Run it every x seconds for example?

EDIT 2: So I tried adding the Event Filter and Consumer using WMI Tools (via the GUI, that is) on my local pc, trying to get it to properly log my printjobs. It looks like my event gets caught, though there's something wrong with my script that is linked to the event. I let it rest over the weekend and upon arriving back at the office, I notice a ton of events on the wbemess.log file, like these:

(Fri Apr 30 16:39:00 2010.112476500) : Polling query select * from Win32_PrintJob failed with error code 80041033. Will retry at next polling interval

or

(Mon May 03 09:25:23 2010.1380562) : NT Event Log Consumer: could not retrieve sid, 0x80041002

I'm also noticing spikes in cpu usage by wmiprvse.exe. Upon googling around a bit, I found one guy solving his problems by reinstalling WMI into the registry. I'm wondering if this is the only way to troubleshoot this. I really don't want this happening on our production print server when I implement this...

I'm setting up a test environment with Failover Cluster with 2 WS08 "members" in the cluster, however upon renaming one of the servers' hostname it seems to have broken entirely, so I deleted the cluster by force starting it and then destroying it, but when I try to create a new one it still says one server is part of the cluster. Solutions, anyone?

while I appreciate the effort, I needed to get on with testing, so I went with the solution to all problems:

format c:\