Jeff's questions

I have a Dell PowerEdge r310, MS Server 2008, RAID 1 setup. I had a two drives fail in the RAID 1 - leaving only one drive in a healthy state.

Picture of disk management:

I changed the primary boot partition to the Windows Server 2008 Secondary Plex option and the server starts and runs fine, but now I need to replace the failed drives.

I purchased two identical drives to the remaining healthy drive. Same size, speed, etc.

This is where I do not know what I am doing -- Can I just hot-swap the bad drives with the new drives, and the RAID will re-build itself. And how do I know which bay the failed drives are physically located? The indicator led's on all drive bays are green - which I would have thought one would be in an amber or similar color to alert the failure. Being only one drive left, I don't want to pop out the only healthy drive and cause further problems.

I asked a question on the IT security StackExchange about protecting against DoS attacks. One of the answers was to install Fail2Ban.

I talked to the people that administer the server and they told me Fail2ban is installed by default to watch for failed SSH login attempts. They asked if I wanted it to watch other services on the server.

What services should I have watched by Fail2ban to protect against the DoS attacks?

Would this just be the HTTP services - watch for multiple requests from the same IP within x amount of time?

One of the attacked appeared to create a lot of connection to the MySQL database with the command sleep.

I have two domain controllers on my network, win2k8dc1 and win2k8dc2.

I am running into event log errors that DFS replication is not able to communicate with the replication partner. This event is logged on DC2:

The DFS Replication service failed to communicate with partner WIN2K8DC1 for replication group Domain System Volume. The partner did not recognize the connection or the replication group configuration.
Partner DNS Address: WIN2K8DC1.JEWELS.LOCAL Optional data if available: Partner WINS Address: WIN2K8DC1 Partner IP Address: 192.168.1.254 The service will retry the connection periodically. Additional Information: Error: 9026 (The connection is invalid) Connection ID: F26BEC3F-1EB7-4002-BE66-6204485CDC8C Replication Group ID: E0260157-9085-41F7-8912-F1A02026A0A5

These errors are not being generated on DC1. Both machines are able to ping by ip, fqdn, and a records.

Active directory seems to replicate perfectly fine. If an object or ou is created on one server it is replicated to the second. DNS replication seems to be fine as well.

Running DCDIAG I received the following errors:

Starting test: DFSREvent

The DFS Replication Event Log. 
There are warning or error events within the last 24 hours after the

SYSVOL has been shared.  Failing SYSVOL replication problems may cause

Group Policy problems. 
An error event occurred.  EventID: 0xC0001394

Time Generated: 01/04/2012   17:00:45
Event String:

The DFS Replication service failed to communicate with partner WIN2K8DC2 for replication group Domain System Volume. The partner did not recognize the connection or the replication group configuration. 

Partner DNS Address: WIN2K8DC2.JEWELS.LOCAL

Optional data if available: 
Partner WINS Address: WIN2K8DC2 
Partner IP Address: 192.168.1.253 

The service will retry the connection periodically. 

Additional Information: 
Error: 9026 (The connection is invalid) 
Connection ID: 04854E9E-07E3-4A3E-BA6C-F3FBAB67B21F 
Replication Group ID: E0260157-9085-41F7-8912-F1A02026A0A5
An error event occurred.  EventID: 0xC0001394
Time Generated: 01/05/2012   03:00:42
......................... WIN2K8DC1 failed test DFSREvent

I checked the attributes for domain controller: msDFSR-ComputerReferenceBL. Each DC has a value where the CN equals itself. The msDFSR-MemberReferenceBL value is null. I can not manually edit either of these two values.

Another error in the DCDIAG output is the NCSecDesc test, which when researched said to ignore if I do not use RODC. Both servers fail this test.

Both servers have a DCOM error reporting that DCOM was unable to communicate with the computer using any configured protocols. I can ping the IPs of out forwarders however..

All DNS test results PASSED with dcdiag.

The dcdiag attributes that I ran are: dcdiag /v /c /d /e /s:win2k8dc1 > c:\dcdiag.txt and the same on win2k8dc2.

FRSDiag utility returned the following error on DC1:

Checking for errors in debug logs ...
    ERROR on NtFrs_0004.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                     3580:   904: S0: 12:33:01> :SR: Cmd 00388bb0, CxtG f26bec3f, WS ERROR_ACCESS_DENIED, To   WIN2K8DC1.JEWELS.LOCAL Len:  (544) [SndFail - Send Penalty]
    ERROR on NtFrs_0004.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                      260:   877: S0: 12:33:01> :SR: Cmd 00388130, CxtG 04854e9e, WS ERROR_ACCESS_DENIED, To   WIN2K8DC1.JEWELS.LOCAL Len:  (376) [SndFail - rpc call]
    ERROR on NtFrs_0004.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                      260:   904: S0: 12:33:01> :SR: Cmd 00388130, CxtG 04854e9e, WS ERROR_ACCESS_DENIED, To   WIN2K8DC1.JEWELS.LOCAL Len:  (376) [SndFail - Send Penalty]

    Found 8 ERROR_ACCESS_DENIED error(s)! Latest ones (up to 3) listed above

 ......... failed with 8 error entries

When trying to run FRSDiag from DC1 against DC2 I get the following error:

   Processing ntfrsutl ds....NTFRSUTL ERROR - Cannot RPC to computer, win2k8dc2; 000006d9 (1753)... Make sure you are logged on as a Domain Admin! Skipping!

I am starting to getting stumped, as this is getting over my head. Wanted to check here before I proceed with the next step and contact the MS AD tech support..

Additions: UAC is off. No firewall is on either server. The functionality level is windows server 2008.

dfsrdiag dumpadcfg output:

LDAP Bind   : WIN2K8DC1.JEWELS.LOCAL
SitesDn     : cn=sites,cn=configuration,dc=jewels,dc=local
ServicesDn  : cn=services,cn=configuration,dc=jewels,dc=local
SystemDn    : cn=system,DC=JEWELS,DC=LOCAL
DefaultNcDn : DC=JEWELS,DC=LOCAL
ComputersDn : cn=computers,DC=JEWELS,DC=LOCAL
DomainCtlDn : ou=domain controllers,DC=JEWELS,DC=LOCAL
SchemaDn    : CN=Schema,CN=Configuration,DC=JEWELS,DC=LOCAL

COMPUTER: WIN2K8DC1
  DN            : cn=win2k8dc1,ou=domain controllers,dc=jewels,dc=local
  GUID          : 53A64969-227C-40AA-BD93-3C46782765DA
  DNS           : win2k8dc1.jewels.local
  Server BL     : cn=win2k8dc1,cn=servers,cn=default-first-site-name,cn=sites,cn
=configuration,dc=jewels,dc=local
  Server Ref    : (null)
  USN Changed   : 5682458
  When Created  : Tuesday, August 10, 2010 3:02:33 PM
  When Changed  : Wednesday, January 04, 2012 6:30:57 PM

  LOCAL SETTINGS: DFSR-LOCALSETTINGS
    DN            : cn=dfsr-localsettings,cn=win2k8dc1,ou=domain controllers,dc=
jewels,dc=local
    GUID          : 6EE6D3C7-09C4-4A9E-BFCF-A4D5CE129320
    Version       : 1.0.0.0
    USN Changed   : 5685331
    When Created  : Wednesday, January 04, 2012 8:58:32 PM
    When Changed  : Wednesday, January 04, 2012 9:00:49 PM

    SUBSCRIBER: DOMAIN SYSTEM VOLUME
      DN            : cn=domain system volume,cn=dfsr-localsettings,cn=win2k8dc1
,ou=domain controllers,dc=jewels,dc=local
      GUID          : 2C9380BE-39BE-49C9-87CA-82AA8483A5C8
      Member Ref    : cn=win2k8dc1,cn=topology,cn=domain system volume,cn=dfsr-g
lobalsettings,cn=system,dc=jewels,dc=local
      USN Changed   : 5685297
      When Created  : Wednesday, January 04, 2012 8:58:33 PM
      When Changed  : Wednesday, January 04, 2012 8:58:33 PM

      SUBSCRIPTION: SYSVOL SUBSCRIPTION
        DN            : cn=sysvol subscription,cn=domain system volume,cn=dfsr-l
ocalsettings,cn=win2k8dc1,ou=domain controllers,dc=jewels,dc=local
        GUID          : 3A9F879D-CB16-4484-8F22-703B8ACF3B11
        ContentSetGuid: 0E31CFFA-FCD2-4A5D-8739-9277B0EF8478
        Root Path     : c:\windows\sysvol_dfsr\domain
        Root Size     : (null) (MB)
        Staging Path  : (null)
        Staging Size  : (null) (MB)
        Conflict Path : (null)
        Conflict Size : (null) (MB)
        USN Changed   : 5685489
        When Created  : Wednesday, January 04, 2012 8:58:33 PM
        When Changed  : Wednesday, January 04, 2012 9:05:34 PM

GLOBAL SETTINGS: DFSR-GLOBALSETTINGS
  DN            : cn=dfsr-globalsettings,cn=system,dc=jewels,dc=local
  GUID          : 30E9760E-6020-4DFD-A975-134F2C809A4D
  USN Changed   : 5685310
  When Created  : Wednesday, January 04, 2012 8:57:53 PM
  When Changed  : Wednesday, January 04, 2012 8:59:39 PM

  REPLICATION GROUP: DOMAIN SYSTEM VOLUME
    DN            : cn=domain system volume,cn=dfsr-globalsettings,cn=system,dc=
jewels,dc=local
    GUID          : E0260157-9085-41F7-8912-F1A02026A0A5
    Type          : 1 (SYSVOL)
    USN Changed   : 5685278
    When Created  : Wednesday, January 04, 2012 8:57:53 PM
    When Changed  : Wednesday, January 04, 2012 8:57:53 PM

    CONTENT: CONTENT
      DN            : cn=content,cn=domain system volume,cn=dfsr-globalsettings,
cn=system,dc=jewels,dc=local
      GUID          : 776B3EE9-6FF6-4929-A0B5-DC1256C330FE
      USN Changed   : 5685279
      When Created  : Wednesday, January 04, 2012 8:57:53 PM
      When Changed  : Wednesday, January 04, 2012 8:57:53 PM

      CONTENT SET: SYSVOL SHARE
        DN            : cn=sysvol share,cn=content,cn=domain system volume,cn=df
sr-globalsettings,cn=system,dc=jewels,dc=local
        GUID          : 0E31CFFA-FCD2-4A5D-8739-9277B0EF8478
        File Filter   : (null)
        Compression Excl : (null)
        Dir Filter    : DO_NOT_REMOVE_NtFrs_PreInstall_Directory,NtFrs_PreExisti
ng___See_EventLog
        USN Changed   : 5685280
        When Created  : Wednesday, January 04, 2012 8:57:53 PM
        When Changed  : Wednesday, January 04, 2012 8:57:53 PM

    TOPOLOGY: TOPOLOGY
      DN            : cn=topology,cn=domain system volume,cn=dfsr-globalsettings
,cn=system,dc=jewels,dc=local
      GUID          : DB1E6BF2-9745-4B04-AD15-19E559502D4B
      USN Changed   : 5685281
      When Created  : Wednesday, January 04, 2012 8:57:53 PM
      When Changed  : Wednesday, January 04, 2012 8:57:53 PM

      MEMBER: WIN2K8DC1
        DN            : cn=win2k8dc1,cn=topology,cn=domain system volume,cn=dfsr
-globalsettings,cn=system,dc=jewels,dc=local
        GUID          : BCAFE60C-2DFF-4BC0-85A4-22F66C96B043
        Server Ref    : cn=ntds settings,cn=win2k8dc1,cn=servers,cn=default-firs
t-site-name,cn=sites,cn=configuration,dc=jewels,dc=local
        Computer Ref  : cn=win2k8dc1,ou=domain controllers,dc=jewels,dc=local
        Keywords      : (null)
        Computer DNS  : win2k8dc1.jewels.local
        USN Changed   : 5685293
        When Created  : Wednesday, January 04, 2012 8:58:32 PM
        When Changed  : Wednesday, January 04, 2012 8:58:32 PM

        CXTION: D0736C4D-B39D-4521-B4AF-5D8B7E627280
          DN            : cn=d0736c4d-b39d-4521-b4af-5d8b7e627280,cn=ntds settin
gs,cn=win2k8dc1,cn=servers,cn=default-first-site-name,cn=sites,cn=configuration,
dc=jewels,dc=local
          GUID          : 04854E9E-07E3-4A3E-BA6C-F3FBAB67B21F
          Inbound       : true
          Partner DN    : cn=win2k8dc2,cn=topology,cn=domain system volume,cn=df
sr-globalsettings,cn=system,dc=jewels,dc=local
          USN Changed   : 2830713
          When Created  : Wednesday, April 13, 2011 8:12:57 PM
          When Changed  : Friday, August 19, 2011 1:02:17 PM

        CXTION: C21C575F-EEB2-44E9-A464-85E4833963B5
          DN            : cn=c21c575f-eeb2-44e9-a464-85e4833963b5,cn=ntds settin
gs,cn=win2k8dc2,cn=servers,cn=default-first-site-name,cn=sites,cn=configuration,
dc=jewels,dc=local
          GUID          : F26BEC3F-1EB7-4002-BE66-6204485CDC8C
          Inbound       : false
          Partner DN    : cn=win2k8dc2,cn=topology,cn=domain system volume,cn=df
sr-globalsettings,cn=system,dc=jewels,dc=local
          USN Changed   : 4927588
          When Created  : Wednesday, April 13, 2011 8:12:40 PM
          When Changed  : Tuesday, December 13, 2011 9:41:33 PM

      MEMBER: WIN2K8DC2
        DN            : cn=win2k8dc2,cn=topology,cn=domain system volume,cn=dfsr
-globalsettings,cn=system,dc=jewels,dc=local
        GUID          : 1AF9DFAD-9793-4B3D-BE1B-5A497857C4E6
        Server Ref    : cn=ntds settings,cn=win2k8dc2,cn=servers,cn=default-firs
t-site-name,cn=sites,cn=configuration,dc=jewels,dc=local
        Computer Ref  : cn=win2k8dc2,ou=domain controllers,dc=jewels,dc=local
        Keywords      : (null)
        Computer DNS  : win2k8dc2.jewels.local
        USN Changed   : 5685434
        When Created  : Wednesday, January 04, 2012 9:01:29 PM
        When Changed  : Wednesday, January 04, 2012 9:01:45 PM

Operation Succeeded

I have WSUS configured using group policy to deploy windows updates every Tuesday. I also have batch files that run at 11PM every night (except Tuesday) that shutdown the workstations in the company.

Often after updates are downloaded and installed, the option is shown to 'install updates and shut down'. I do not depend on users to restart the computers so they can finish installing updates.

My shutdown command is as follows:

shutdown /s /c "message incase someone is on the machine" /m \\hostname

This shutdown quits all open applications (/c) and shuts down in 60 seconds. The problem is that it does not finish the update installations... Does anyone know if I remove the /c if the system will finish installing updates before shutting down? Or do I need to look at a different method (script or policy where users must manually shut down on Wensday mornings) ?

All of the machines are windows 7 with a windows 2008 server (dc)

thanks.

Addition from comment:

The 'no auto-restart with logged on users for schedule automatic updates' is not configured. But I still find systems waiting with 'install updates and shutdown' option. Should I set this option to disabled?

I am having trouble figuring out what is causing massive audit failures on a server 2008 system.

the event id is 4771
Account Name: Administrator
Service Name: krbtgt/DOMAIN.NAME
Client Address: ::1
Client Port: 0
Pre-Authentication Type: 2

The log happens in about 5 minute intervals and atleast 30 failure events are recorded.

It seems to be coming from the local machine and is a kerberos authenticaiton issue but I am not sure how to track down / correct the problem.

Services on the machine:

DNS 
Active Directory 
DHCP 
WSUS 
VIPRE enterprise

I have checked all scheduled tasks on the system and everything seems fine. I checked the Password on VIPRE and WSUS for invalid passwords. Not sure what is going on.

Thanks.

ADDITION: This event log appears on both my primary and secondary DC...

  TargetUserName Administrator 
  TargetSid S-1-5-21-2134851818-3285922005-2538191131-500 
  ServiceName krbtgt/JEWELS.LOCAL 
  TicketOptions 0x40810010 
  Status 0x18 
  PreAuthType 2 
  IpAddress ::1 
  IpPort 0 
  CertIssuerName  
  CertSerialNumber  
  CertThumbprint  

Process is LSASS.EXE..

I am trying to block GotoMyPC traffic using a Cisco ASA 5505.

On gotomypc.com they say you can block all traffic to poll.gotomypc.com to stop all access.

What I have done is create a network group that contains the objects that referencethe IPs for gotomypc.com and poll.gotomypc.com (with poll.gotomypc.com being a host name/a record the IP could change - is there a way to reference the host name with the ASA instead of an IP?)

I set outside access rules from the source gotomypcgroup and blocked all traffic trying the following services: IP, TCP, UDP. however I am still able to connect using gotomypc.

If I create an inside rule it automatically create a rull to block all traffic from any - any that I can not edit, stopping all network traffic.

I used our dns proxy to block all traffic to poll.gotomypc.com and gotomypc.com, but I can not get the traffic blocked from the ASA itself. I also know the ASA has regex's for gotomypc but I am unsure how to use them.

Trying to figure out what I am doing wrong

Thanks.

A few users have taken it upon themselves to install this software on there work computers and use iphones/ipads to connect. Current setup is anyconnect / ciscovpn to connect and use remote desktop to work from home. The cisco web portal also has access to a few intranet related systems.

The network is behind a Cisco ASA and contains only company PCs & servers. all other devices use a guest network which is segregated from the main.

Is anyone familiar with allowing GotoMyPC in this kind of situation? Is there precautions I should take, should I not allow it, or is it fine?

My main concern is by using this piece of software, I am bypassing our firewall systems and opening up doors that I don't want to open.

Looking for some feedback from someone in a similar situation due to me being unfamiliar with the service.

Thanks.

We run a server with MySQL 5.5. 95% of the tables are set to the InnoDB engine.

However whenever I look at the my.ini file (using the MySQL Workbench) under mysqld section innodb is unchecked and OFF is selected in the drop down. I don't see this line added to the my.ini file when viewing with notepad.

Should I check this setting and set it to ON so we can utilize the enabled innodb settings (buffers & log file etc.) or does this not matter?

I'm learning as I go - but one thing I have always wondered, in bigger corporations does the IT department enter all new hires into active directory / create the exchange mailbox or is there a setup that allows the human resources / managers to add new employees?

I suppose I could develop something where they enter the persons information and it pushes to all necessary systems - but I was wondering if there was a built in method - or is that just something that the IT department does?

Edit Addition:

Currently I am given a copy of the new employees information, put them into all systems (active directory, time and attendance, exchange, etc) and then return the information.

Looking for a better method to accomplish this. The current systems that we use are:

Active directory, Microsoft Exchange, QQest time and Attendance, and MySQL, and then mcafee SAS protection systems.

QQest has active directory integration, but even working with them I have never been able to get it to fully function properly.

McAfee SAS just released an active directory integration feature, but I have heard it still has bugs and am waiting for an update version before trying to implement.

I am planning on using active directory as the login information for the mysql database, we are currently writing a new version of the system for use with that but will be sometime before completed.

Thanks.

I don't think that this is a programming question so I am going to ask it here -

Reading the book high performance mysql, I read about the CSV engine. The paragraph says:

The CSV engine can treat comma-separated values (CSV) files as table, but it does not support indexes on them. This engine lets you copy files in and out of the database while the server is running. If you export a CSV file from a spreadsheet and save it in the MySQL server's data directory, the server can read it immediately. Similary, if you write data to a CSV table, an external program can read it right away. CSV tables are especially useful as a data interchange format and for certain kinds of logging.

What I get from this paragraph is that I can copy a .CSV file into the data directory of database, and it should show as a table that is able to be read from. However, whenever I copy a test .csv file into the directory, it does not appear as a table. I can't access it.

I am using MySQL 5.5 also

Does anyone know why this is not working, or what I am doing wrong?

I have a server that seems to be setup wrong by previous administrator..

The server has two disks, disk 0 which is the operating system (RAID1 clone) disk 1 which is 3 drives in a RAID5 setup with battery backup cache raid controller.

They installed the datadir to disk0 (c:\programdata\mysql) when it was supposed to go to disc1 (e:\programdata\mysql) and under the RAID5 setup for obvious reasons.

If I change the data directory, what do I need to consider? My current thought process is to copy the data over to the E:\ (E:\programdata\mysql) and just change the datadir variable to e:\programdata\mysql

I am basically looking for answers as to what I need to consider and what issues I am going to encounter in this move.

we run a windows network , some vendors we use are releasing apple apps for the ipad with pricing etc. -- the owners of the company want the apps for the associates to have.

I am not 100% comfortable with putting iPads on the network. WSUS controls all updates, we use VIPRE enterprise for a centralized anti-virus. We have a customized DNS filter on the server, and active directory controls all use access etc.

I am just not familiar with the iPad and want to make sure I am not opening up any holes with putting a bunch of them on the network

Is there an alternative method to run these Apps in a Windows environment? Like an Apple Emulator or something?

I'm having trouble updating distribution list memberships using outlook.

on exchange 2010: groups properties - group information I have added myself to the managed by list

in active directory (server 2008) my account is set to the name under the managed by tab inside the groups properties I have also given myself full control under the security tab in the a/d properties

However,

• In outlook if I go to tools

• addressbook double click the group

• modify members

  I am told that i do not have sufficient permissions to perform the action

anyone have any idea why this may be ?

thanks

Since the beginning of our exchange - we have a group called all employees. everyone is included in it and it sends email to everyone.

I can't edited the settings of it using the management console and it tells me it is built it.

we want to remove a few people from the all employees mailing list. is this possible? or do i have to create a new mailing list, disable the all employees and setup my custom filters for the new mailing list?

thanks

On my network, I have 3 remote sites and one local that all receive DHCP through our central dhcp server.

all the sites have ASAs with dhcprelay and so on.

I have two domain controllers - is it possible to set the second dc as secondary dhcp server, add the information to the ASA - and use it as a failover incase the primary dhcp server is offline?

would this cause problems?

thanks

im installing exchange 2010 into a/d with an existing 07 installation

1. im on a 64 bit server
2. winodows 2008 R2
3. 8gb ram
4. All proper subnets are configured in the sties and services
5. all domains are raised to a server 2008 functionality level.
6. Logged on as the domain admin (schema admin, enterprise admin, etc.)
7. Range setup /PrepareSchema, setup /PrepareAD, setup /PrepareDomain, no errors
8. DCDIAG /A and DCDIAG /E show no errors
9. All readiness checks passed seccesfully, no problems
10. Double checked all PREREQS

i have it automatically install roles needed for exchange 2010

i have watched a couple video instructions on the installation and tried to see if im missing anything, everything looks fine.

whenever the exchange 2010 installation reaches the 'hub transport role, it keeps increasing the timeout and then fails to start the service. after it fails, I can start the service manually however.

Here is the LOGGED error:

[03/17/2011 18:18:56.0006] [1] Processing component 'Active Directory Topology Service Configuration' (Configuring Microsoft Exchange Active Directory Topology service).

[03/17/2011 18:18:56.0006] [1] Executing: 
          if ($exsSid -eq $null -or $exsSid -eq "")
          {
          $exsSid = get-ExchangeServerGroupSID -DomainController $RoleDomainController
          }
          start-setupservice -ServiceName MSExchangeADTopology -ServiceParameters $exsSid,$RoleDomainController


[03/17/2011 18:18:56.0006] [2] Active Directory session settings for 'start-SetupService' are: View Entire Forest: 'True', Configuration Domain Controller: 'WIN2K8DC1.JEWELS.LOCAL', Preferred Global Catalog: 'WIN2K8DC1.JEWELS.LOCAL', Preferred Domain Controllers: '{ WIN2K8DC1.JEWELS.LOCAL }'

[03/17/2011 18:18:56.0006] [2] Beginning processing start-setupservice -ServiceName:'MSExchangeADTopology' -ServiceParameters:'S-1-5-21-2134851818-3285922005-2538191131-3616','WIN2K8DC1.JEWELS.LOCAL'

[03/17/2011 18:18:56.0037] [2] Service checkpoint has progressed. Previous checkpoint='0' - Current checkpoint='1'.

[03/17/2011 18:18:56.0037] [2] Will wait '30000' milliseconds for the service 'MSExchangeADTopology' to reach status 'Running'.

[03/17/2011 18:19:26.0270] [2] Service 'MSExchangeADTopology' failed to reach status 'Running' on this server after waiting for '30000' milliseconds.

[03/17/2011 18:19:26.0270] [2] Service checkpoint has progressed. Previous checkpoint='1' - Current checkpoint='2'.

[03/17/2011 18:19:26.0270] [2] Will wait '1250000' milliseconds for the service 'MSExchangeADTopology' to reach status 'Running'.

[03/17/2011 18:40:16.0425] [2] Service 'MSExchangeADTopology' failed to reach status 'Running' on this server after waiting for '1250000' milliseconds.

[03/17/2011 18:40:16.0425] [2] Service Control Manager reports no process ID for service MSExchangeADTopology.

[03/17/2011 18:40:16.0425] [2] Unable to get the process ID for service MSExchangeADTopology because another similar process 0 was found

[03/17/2011 18:40:16.0425] [2] [ERROR] Unexpected Error

[03/17/2011 18:40:16.0425] [2] [ERROR] Service 'MSExchangeADTopology' failed to reach status 'Running' on this server.

[03/17/2011 18:40:16.0425] [2] Ending processing start-setupservice

[03/17/2011 18:40:16.0425] [1] The following 1 error(s) occurred during task execution:

[03/17/2011 18:40:16.0425] [1] 0.  ErrorRecord: Service 'MSExchangeADTopology' failed to reach status 'Running' on this server.

[03/17/2011 18:40:16.0425] [1] 0.  ErrorRecord: 
Microsoft.Exchange.Configuration.Tasks.ServiceDidNotReachStatusException: Service 'MSExchangeADTopology' failed to reach status 'Running' on this server.
[03/17/2011 18:40:16.0441] [1] [ERROR] The following error was generated when "$error.Clear(); 
          if ($exsSid -eq $null -or $exsSid -eq "")
          {
          $exsSid = get-ExchangeServerGroupSID -DomainController $RoleDomainController
          }
          start-setupservice -ServiceName MSExchangeADTopology -ServiceParameters $exsSid,$RoleDomainController
        " was run: "Service 'MSExchangeADTopology' failed to reach status 'Running' on this server.".

[03/17/2011 18:40:16.0441] [1] [ERROR] Service 'MSExchangeADTopology' failed to reach status 'Running' on this server.

[03/17/2011 18:40:16.0441] [1] [ERROR-REFERENCE] Id=AllADRolesCommonServiceControl___e95681b135f04f6ca85c706536bfbeed Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup

[03/17/2011 18:40:16.0441] [1] Setup is stopping now because of one or more critical errors.

Help is appreciated :|

My basic question is what kind of impact does this have on the server?

Let's say, for example, there is an older program in my company that opens connections to a mysql database server at a high rate (everything they do with the application basically opens a server connections). However, this application was not designed in the way to dispose of the connections after they where created. A lot of the time the connections remain open but are never used again, open 'dead' connections I guess you could say.

They just remain connected until the server times them out, or until an admin goes in and removes the sleeping connections manually. I'm guessing this could be responsible for sometimes not able to connect errors, etc. that we receive from other systems that try to access the mysql database? (connections limit reached)

Could this slow down the server as well? Curious what all this could exactly cause.

I'll make it simple,

I have locations in different cities, connected using 2 Cisco ASA devices.

my main location, corporate, use the IP 192.168.1.x The second location, remote store, use the IP 192.168.3.x

I have a DHCP server (192.168.1.254) at my corporate location. I have created a scope for the 192.168.1.x which works fine for the corporate location.

I created a scope for the remote location (192.168.3.x) on my DHCP server and tried to configure the remote ASA DCHP Relay,

on the remote ASA: I disabled the DHCP Server on the inside. I enabled DHCP Relay on the inside, with set route set at yes.

I set the Global DHCP Relay Servers, specify up to four servers to which DHCP requests would be relayed. I added my DHCP, 192.168.1.254

I flashed these settings to the ASA and gave it a try, didn't do anything.

am i missing something - forgetting something. not really sure what im doing wrong.

DHCP Settings on remote ASA:

dhcp-client update dns server both

dhcpd dns 192.168.1.254

dhcpd ping_timeout 750

dhcpd domain JEWELS.LOCAL

dhcpd auto_config outside

dhcpd update dns both

!

dhcpd address 192.168.3.2-192.168.3.33 inside

!

dhcprelay server 192.168.1.254 outside

dhcprelay enable inside

dhcprelay setroute inside

dhcprelay timeout 120

On main ASA:

I have two ACLs to permit flow from the remote locations static ip for inbound UDP port 67 and 68 connections

How important is a SSL certificate for a single domain exchange 2007 which uses owa and local outlook connections ?

Currently we ran into some issues with our mail server setup. I'm preparing a list of actions that we should enforce and use in order to maintain a proper email solution within our company.

We have around 80 Exchange users, and send mass emails out almost on a monthly bases to 20,000 + customers each time.

The checklist I currently have:

1. Mcafee Mxlogic 'cloud' anti-spam functionality for incoming message.
2. Antivirus on each computer in company
3. Antivirus on Exchange and DNS servers
4. Setup SPF record
5. Setup DKIM
6. Setup domainkey
7. Setup senderID
8. Submit SPF to Microsoft, Yahoo, etc. for 'whitelist' purposes.
9. Configure size limits for messages in Exchange to safe numbers
10. I have 2 outside IPs for my email server, in case one gets blacklisted, switch to the backup.
11. My Internet site rests on a different ip than the mail server
12. All mass emails for company sent through 3rd party company (listtrak.com)
13. Setup domain alias, media, enews, and bounce for the 3rd party mass mail software.
14. Verify the setup using [email protected]
15. Configure group policy and our opendns.org account to prevent unwanted actions and website viewing

Mass emails:

1. Schedule them to send different amounts at different times (1,000 at 10am, 1,000 at 4pm, 1,000 10am next day)..
2. Setup user preferences, decide what they want to receive ect. ( there interests)
3. Send a more steady flow of email, maybe 100 a week with top new products instead of 20,000k every other month..

If anyone has suggestions or additions/subtractions to this checklist they are greatly appreciated.