Datapimp23's questions

I'm playing around with MDT with the intent of facilitating the rollout of new laptops.

As we turn on the new laptop for the first we want to go through with the standard windows OEM installation.

Afterwards we just want to run a post os task sequence from the deployment share that presents the deployment wizard and prompts us for the exact same parameters as a new deployment

• Hostname
• Domain Joining Credentials
• OU
• Local admins
• Install applications list

Basically the task sequence should only join the domain, install apps without actually installing an operating system. We are using the Windows 7 OEM that comes with the laptop and run litetouch.vbs within windows.

I'm having issues calling the deployment wizard script in my post os task sequence. How exactly would I do that?

I have an ASP website on IIS6 that is equipped with a SSL certificate from godaddy.

The website requires secure channel (SSL) and is set to IGNORE client certificates.

In ran the SSL checker and the result looked fine.

The issue that I have is that all users that use safari get the following message when trying to access the site.

If they press OK nothing happens, if they press cancel nothing happens.

Also some IE users have the same issue when they try to open xls reports straight from within the website.

They click a button that downloads an xls file so they are presented with the 3 standard options. Save, Save as, open. They can save without problems but when they select open they will see the same window asking for a certificate.

I tried to add the page to the trusted websites for the users that had the issue and also lowered the security settings for trusted websites but the issue remained.

Any idea where I should start looking?

I have a cups server with one shared printer configured on it. It prints test pages without problems.

printername (Idle, Accepting Jobs, Shared)
Description:    desc
Location:   
Driver: Zebra ZPL Label Printer (grayscale, 2-sided printing)
Connection: socket://172.20.50.26
Defaults:   job-sheets=none, none media=oe_w288h432_4x6in sides=one-sided

This is the output from lpstat -t. it shows that the printer is idle and accepting requests

admin@SERVER:~$ lpstat -t
scheduler is running
no system default destination
device for printername: socket://172.20.50.26
printername accepting requests since Thu 26 Jan 2012 01:29:35 PM CET
printer printername is idle.  enabled since Thu 26 Jan 2012 01:29:35 PM CET

Now when I want to send a printjob to it via an LPR command it won't recognize the printer

/usr/bin/lpr -P printername test.pdf

Result

lpr: ttn_seg_zebra1: unknown printer

What am I missing here ?

I've been noticing recurring failed logon attempts onto our SQL server. It happens every minute with the same login. An example from the log file viewer

10/18/2011 13:54:50,Logon,Unknown,Login failed for user 'LOLZOR\lolsqlserver'. [CLIENT: ] 10/18/2011 13:54:50,Logon,Unknown,Error: 18456 Severity: 14 State: 16

State 16 means: Login valid, but not permissioned to use the target database

Note that the credentials are also used to start all the SQL Server services

Audit Login Failed
NTDomainName>LOLZOR
Error 18456
HostName EU_LOLWEB1
SPID">71</Column> 
SessionLoginName"LOLZOR\lolsqlserver
TextData">Login failed for user 'LOLZOR\lolsqlserver'
ClientProcessID"2364
NTUserName"lolsqlserver
ApplicationName">Queue Reader Main (distribution) 
StartTime">2011-10-18T12:18:21.72+02:00
ServerName">EU_LOLWEB1
DatabaseID">1</Column> 
LoginName">LOLZOR\lolsqlserver
DatabaseName">master
EventSequence">528

• You will notice that the logons originate from the sql server itself
• Target DB seems to point to 'Master' (see below)
• If I trace the pid in process Monitor I can see that the login is performed by qrdsvc.exe

Description

Description:    SQL Server Replication QueueReader Agent
Company:    Microsoft Corporation
Name:   qrdrsvc.exe
Version:    2005.90.4035.0
Path:   C:\Program Files\Microsoft SQL Server\90\COM\qrdrsvc.exe
Command Line:   "C:\Program Files\Microsoft SQL Server\90\COM\qrdrsvc.exe" -Distributor [EU_LOLWEB1] -DistributionDB [distribution] -DistributorSecurityMode 1  -Continuous -XJOBID 0xA368ED128C0EAA43A137B55FD4DD122F -XJOBNAME [[EU_LOLWEB1]].8] -XSTEPID 2 -XSUBSYSTEM Que
PID:    6096
Parent PID: 300
Session ID: 0
User:   LOLZOR\lolsqlserver
Auth ID:    00000000:a3d8bc8d
Architecture:   32-bit
Virtualized:    n/a
Integrity:  n/a
Started:    18/10/2011 11:43:25
Ended:  18/10/2011 11:43:25

So from what I understand from http://www.eraofdata.com/blog/sql-18456-login-failures/ is that the user account does not have enough permissions on the Master database.

As a test I added the LOLZOR\lolsqlserver to the sysadmin role and restarted the SQL service. This did not change anything. the message still pops up every minute.

How is this possible since the account is running the service. I'd like to resolve this so issue and some help would be appreciated .

What would be the easiest way to find all mailboxes a particular user has read permissions on. I know it's possible via scripting but I want to know if there is a more convenient way.

Any tools out there that can give me that result?

I have this server which has it's physical disks in RAID 5 controlled by a 3com raid controller. size of the stripe unit is unknown for the moment (Can check tomorrow in the office).

I need to install windows server 2003 ENT and create 2 partitions (OS, Data). I'd like to create the partitions before the installation on windows server. They have to be aligned properly. I have the newest version of gparted on a disc but I have no clue if this is the right tool. Can someone point me in the right direction?

Thanks

I just noticed that my dc (W2k3 R2 Enterprise SP2) is sending ldap queries to an IP address that is assigned to a NAS device (snapserver). The snapserver is in another AD site and has Active Directory integration listed as a feature. I have no idea how it is configured since I have no access to it.

TCP SRC: 172.20.20.50:389 dest: 172.22.50.100:34252 TIME_WAIT 0 TCP SRC: 172.20.20.50:389 dest: 172.22.50.100:35846 ESTABLISHED 392 TCP SRC: 172.20.20.50:389 dest: 172.22.50.100:35847 ESTABLISHED 392

PID 392: lsass.exe

An example 1858 47.661264 Src=172.20.20.50 Dest=172.22.50.100 LDAP searchResEntry(69) "CN=Harry Potter,OU=LaLaLand,OU=Space,,DC=company,DC=com"

All the queries run up to 2 GB of outgoing traffic over a couple of hours. How can I troubleshoot this further?

Do you guys have some best practise advise on the output size of web pages. The smaller the better ofcourse. Im talking about non cached output. Id rather not return 1 MB pages.

I'm testing a web application that runs on a hypervisor. The database server and the webserver are seperate vm's that run on the same hypervisor.
We did some tests and the functions perform ok. I want you guys to look at a screenshot of a permon log of the sql 2005 server on the busiest moment. The webserver perfmon log looks fine and it's obvious that we have enough resources to present the page in a timely fashion.

http://d.imagehost.org/view/0919/heavyload

http://d.imagehost.org/0253/heavyloadz.jpg

Zoomed out

The striped blue line maxing out is the Processor que length (scale 100,0)
The green line at around value 30 is Available MBytes (scale 0,01)
The rest of the counters are visible on the screenshot.

The sql server machine has no CPU limitations on the hypervisor resources and has 5 vcpu's and 5 GB RAM.

Can someone help me to interpret this log. Thanks

Hi I'm looking for a way to send out an email alert when exchange 2003 stores go down or when exchange services enter the stopped state.

Is there a inexpensive way to do this?

I have 50 GB on servers in switzerland, that need to be copied over our wan connection. After the data is migrated we'll switch the users to our newer server based computing solution.

The only problem is that it's live data. So I was wondering if there is a way to copy the 40 GB before the migration, and just before we go live make a differential copy.

How would you guys approach this?

Is there a free way to accomplish this?

The data I'm talking about are user documents and company data.

Thanks

Possible Duplicate:
Can you help me with my software licensing question?

Suppose I have a windows 2003 server which hosts 500 roaming profiles. Do i need 500 cals for each user accessing his profile. How does this work?

We're having a lot of corrupted profiles lately on our profile share. At the moment I have no clue why, but I decided to switch to one mandatory profile since the users can all use the same and there is no need to have seperate profiles for each user.

Here's what I did. I logged into the Terminal server with a new user and configured some stuff (imported certificates and a few files). Then I logged out. Later as admin I copied the profile to another server and renamed it to bsilo. I made sure the user hive settings were adjusted. Everyone had access to the hive. I shared the bsilo folder with full access for everyone. I set the NTFS permissions to read, read & execute, list folder contents for domain users. I also renamed NTUSER.DAT to NTUSER.MAN.

Now I set a env variable %manprofile% on the Terminal server that points to \server\bsilo\ntuser.man

I set the env var as terminal services profile path for a test user. When I log in I as the user get the following output

The system cannot find the path specified. Can somebody point me in the right direction. Thanks

USERENV(1774.d18) 15:52:39:724 InitializePolicyProcessing: Initialised Machine Mutex/Events USERENV(1774.d18) 15:52:39:724 InitializePolicyProcessing: Initialised User Mutex/Events USERENV(1774.d18) 15:52:39:724 LibMain: Process Name: \??\C:\WINDOWS\system32\winlogon.exe USERENV(1774.d18) 15:52:48:005 LoadUserProfile: Yes, we can impersonate the user. Running as self USERENV(1774.d18) 15:52:48:005 ========================================================= USERENV(1774.d18) 15:52:48:005 LoadUserProfile: Entering, hToken = <0x340>, lpProfileInfo = 0x6e5d8 USERENV(1774.d18) 15:52:48:005 LoadUserProfile: lpProfileInfo->dwFlags = <0x0> USERENV(1774.d18) 15:52:48:005 LoadUserProfile: lpProfileInfo->lpUserName = USERENV(1774.d18) 15:52:48:005 LoadUserProfile: lpProfileInfo->lpProfilePath = <\server\bsilo\ntuser.man> USERENV(1774.d18) 15:52:48:005 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\BDPINF5\netlogon\Default User> USERENV(1774.d18) 15:52:48:005 LoadUserProfile: NULL server name USERENV(1774.d18) 15:52:48:005 LoadUserProfile: no thread token found, impersonating self. USERENV(1774.d18) 15:52:48:005 GetInterface: Returning rpc binding handle USERENV(218.2f94) 15:52:48:005 IProfileSecurityCallBack: client authenticated. USERENV(218.2f94) 15:52:48:005 DropClientContext: Got client token 000009B4, sid = S-1-5-18 USERENV(218.2f94) 15:52:48:005 MIDL_user_allocate enter USERENV(218.2f94) 15:52:48:005 DropClientContext: load profile object successfully made USERENV(218.2f94) 15:52:48:005 DropClientContext: Returning 0 USERENV(1774.d18) 15:52:48:005 LoadUserProfile: Calling DropClientToken (as self) succeeded USERENV(1774.d18) 15:52:48:005 CProfileDialog::Initialize : Cookie generated USERENV(1774.d18) 15:52:48:005 CProfileDialog::Initialize : Endpoint generated USERENV(218.1f38) 15:52:48:005 IProfileSecurityCallBack: client authenticated. USERENV(218.1f38) 15:52:48:020 LoadUserProfileI: RPC end point IProfileDialog_9D36D6DD48F0578A2A41B23D7A982E63 USERENV(218.1f38) 15:52:48:020 In LoadUserProfileP USERENV(218.1f38) 15:52:48:020 LoadUserProfile: Running as client, sid = S-1-5-18 USERENV(218.1f38) 15:52:48:020 ========================================================= USERENV(218.1f38) 15:52:48:020 LoadUserProfile: Entering, hToken = <0x98c>, lpProfileInfo = 0x9c940 USERENV(218.1f38) 15:52:48:020 LoadUserProfile: lpProfileInfo->dwFlags = <0x0> USERENV(218.1f38) 15:52:48:020 LoadUserProfile: lpProfileInfo->lpUserName = USERENV(218.1f38) 15:52:48:020 LoadUserProfile: lpProfileInfo->lpProfilePath = <\server\bsilo\ntuser.man> USERENV(218.1f38) 15:52:48:020 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\BDPINF5\netlogon\Default User> USERENV(218.1f38) 15:52:48:020 LoadUserProfile: NULL server name USERENV(218.1f38) 15:52:48:020 LoadUserProfile: User sid: S-1-5-21-807756564-1922302612-1565739477-22627 USERENV(218.1f38) 15:52:48:020 CSyncManager::EnterLock USERENV(218.1f38) 15:52:48:020 CSyncManager::EnterLock: No existing entry found USERENV(218.1f38) 15:52:48:020 CSyncManager::EnterLock: New entry created USERENV(218.1f38) 15:52:48:020 CHashTable::HashAdd: S-1-5-21-807756564-1922302612-1565739477-22627 added in bucket 11 USERENV(218.1f38) 15:52:48:020 LoadUserProfile: Wait succeeded. In critical section. USERENV(218.1f38) 15:52:48:864 GetOldSidString: Failed to open profile profile guid key with error 2 USERENV(218.1f38) 15:52:48:864 GetProfileSid: No Guid -> Sid Mapping available USERENV(218.1f38) 15:52:48:864 TestIfUserProfileLoaded: return with error 2. USERENV(218.1f38) 15:52:48:864 GetOldSidString: Failed to open profile profile guid key with error 2 USERENV(218.1f38) 15:52:48:864 GetProfileSid: No Guid -> Sid Mapping available USERENV(218.1f38) 15:52:48:864 LoadUserProfile: Expanded profile path is \server\bsilo\ntuser.man USERENV(218.1f38) 15:52:48:880 ParseProfilePath: Entering, lpProfilePath = <\server\bsilo\ntuser.man> USERENV(218.1f38) 15:52:48:880 CheckXForestLogon: checking x-forest logon, user handle = 2444 USERENV(218.1f38) 15:52:48:880 CheckXForestLogon: policy set to disable XForest check USERENV(218.1f38) 15:52:48:880 ParseProfilePath: Mandatory profile (.man extension) USERENV(218.1f38) 15:52:49:239 AbleToBypassCSC: Try to bypass CSC USERENV(218.1f38) 15:52:49:239 AbleToBypassCSC: tried NPAddConnection3ForCSCAgent. Error 2109 USERENV(218.1f38) 15:52:49:239 AbleToBypassCSC: Share \server\bsilo mapped to drive E. Returned Path E:\ntuser.man USERENV(218.1f38) 15:52:49:239 ParseProfilePath: CSC bypassed. Profile path E:\ntuser.man USERENV(218.1f38) 15:52:49:255 ParseProfilePath: Tick Count = 0 USERENV(218.1f38) 15:52:49:255 ParseProfilePath: GetFileAttributes found something with attributes <0x2022> USERENV(218.1f38) 15:52:49:255 ParseProfilePath: Found a file USERENV(218.1f38) 15:52:49:255 ReportError: Impersonating user. USERENV(218.1f38) 15:52:49:255 ReportError: Logging Error

DETAIL - The system cannot find the path specified.

I'm considering buying this product to pull backups from our laptop users to a SMB share. Are there other products out there that can do the same but are not so pricey?

Let me know

Thanks

Possible Duplicate:
Can you help me with my software licensing question?

Hi,

Suppose I need to provide 200 virtual desktop simontaneously to my users. Do I need an OS license for the 200 virtual desktops? I'm aware what VCED -> only for access points. But it's not clear to me how the OS licensing works. Or do I only need the OS license for the master image?

Licensing is a pain in the *ss.

Apart from easier deployment and administration, are there any performance benefits in virtualizing an application server?

For example, could I fit more operational users on 4 app server VMs on a single Xenserver, than I could on 1 physical app server with the same hardware spec?

I'm trying to ftpput my virtual machines dirs to our NAS. Which doesn't support NFS. Only FTP and samba.

So I'm in the ESXi console and enter the followin command

ftpput ipaddress /vmfs/volumes/4a1157e1-be81171a-1b39-001d09080124/VMNAME /Backup

/Backup is a public share on the nas, I can access it through any ftp client. After I enter I get the following

ftpput: can't open 'Backup': No such file or directory

I'm kind of in the dark here. Any suggestions?

I was editing the /etc/inetd.conf file in VI to enable SSH and when I believed to have saved it. I entered cat and pressed enter accidently. Now I seem to be stuck in a black screen where I can enter characters but can't exit from it. How would I go on my way to get back to the normal console without rebooting the ESXi.

Thanks

I understand you have to pay the annual maintenance cost.

Possible Duplicate:
Can you help me with my software licensing question?

Suppose you buy a thin client that you wish to use for citrix. Does the thin client include a TS cal. Is this standard or do I have to buy them seperately?