RahulPatel–twikies…

March 15, 2011

Activesync error from application log, Event ID: 3005 status code: [409]

Filed under: Exchange Server — Rahul Patel @ 1:26 pm

Error: Unexpected Exchange mailbox Server error: Server: [EXCHANGE.yourdomain.local] User: [youruser@yourdomain.com] HTTP status code: [409]. Verify that the Exchange mailbox Server is working correctly.

Solution:

1.Start the Internet Information Services (IIS) Microsoft Management Server (MMS) snap-in on the Windows SBS 2003-based computer.
2.Expand Server_Name\Web Sites\Default Web Site.
3.Right-click Exchange-OMA, and then follow these steps:
1.Verify the following settings on the Virtual Directory tab:
–> The following check boxes are selected:
–> Script source access
–> Read
–> Write
–> Directory browsing
–> Log visits
–> Index this resource
–> Application name is unavailable, and Default Application is listed.
–> The Execute permissions setting is None.
–> The Application pool setting is unavailable, and ExchangeApplicationPool is listed.
2.Verify the following settings on the Directory Security tab:
–> The Enable anonymous access check box is not selected.
–> The Integrated Windows authentication check box is selected.
–> The Basic authentication check box is selected.
–> The Require secure channel (SSL) check box is not selected.
3.Close the Exchange-OMA Properties dialog box.
4.Right-click OMA, and then follow these steps:
1.Verify the following settings on the Virtual Directory tab:
–> The following check boxes are selected:
–> Read
–> Log visits
–> Index this resource
–> The Application name setting is /LM/W3SVC/1/root/OMA.
–> The Execute permissions setting is Scripts only.
–> The Application pool setting is ExchangeMobileBrowseApplicationPool.
2.Verify the following settings on the Directory Security tab:
–> The Enable anonymous access check box is not selected.
–> The Integrated Windows authentication check box is not selected.
–> The Basic authentication check box is selected.
–> The Require secure channel (SSL) check box is not selected.
3.Close the OMA Properties dialog box.
5.Right-click Microsoft-Server-ActiveSync, and then follow these steps:
1.Verify the following settings on the Virtual Directory tab:
–> The following check boxes are selected:
–> Log visits
–> Index this resource
–> The Application name setting is /LM/W3SVC/1/root/Microsoft-Server-ActiveSync.
–> The Execute permissions setting is Scripts and Executables.
–> The Application pool setting is ExchangeApplicationPool.
2.Verify the following settings on the Directory Security tab:
–> The Enable anonymous access check box is not selected.
–> The Integrated Windows authentication check box is not selected.
–> The Basic authentication check box is selected.
–> The Require secure channel (SSL) check box is not selected.
6.Run the iisreset /noforce computer_name command to restart IIS on the Windows SBS 2003-based computer.

February 3, 2011

Redirecting New Users and New Computers to a Specified OU

Filed under: Active Directory,Tips n Tricks — Rahul Patel @ 5:21 pm

Either on you computer or on a domain controller run the below commands to make the changes.

To Redirect Users
C:\Windows\System32\redirusr DN_of_new_OU
For example:
C:\Windows\System32\redirusr ou=myusers,DC=mydomain,dc=com

To Redirect Computers
C:\Windows\System32\redircmp DN_of_new_OU
For example:
C:\Windows\System32\redircmp ou=mycomputers,DC=mydomain,dc=com

Note: Your domain functional level must be at at least Windows Server 2003.
If your DN contains spaces etc you will need enclose the DN with quotes.

January 2, 2011

2010 in review

Filed under: My Knowledge — Rahul Patel @ 2:20 pm

The stats helper monkeys at WordPress.com mulled over how this blog did in 2010, and here’s a high level summary of its overall blog health:

Healthy blog!

The Blog-Health-o-Meter™ reads Fresher than ever.

Crunchy numbers

Featured image

A helper monkey made this abstract painting, inspired by your stats.

A Boeing 747-400 passenger jet can hold 416 passengers. This blog was viewed about 11,000 times in 2010. That’s about 26 full 747s.

In 2010, there were 8 new posts, growing the total archive of this blog to 73 posts.

The busiest day of the year was December 21st with 70 views. The most popular post that day was Clearing Windows Update Cache Upon Update Failure .

Where did they come from?

The top referring sites in 2010 were social.answers.microsoft.com, social.technet.microsoft.com, google.com, tek-tips.com, and google.co.in.

Some visitors came searching, mostly for limitlogin, limit login, standard tcp ip port missing, ntfrs, and clear windows update cache vista.

Attractions in 2010

These are the posts and pages that got the most views in 2010.

1

Clearing Windows Update Cache Upon Update Failure December 2008
3 comments

2

LimitLogin: Step By Step August 2009
5 comments

3

Restore missing Standard TCP/IP Port type for Printer January 2009

4

Kodak Imaging for Windows XP February 2009
4 comments

5

Fix for File Replication System (NTFRS) replication problems (Event ID 13549) July 2009

December 12, 2010

SBS 2008 DNS stops working for .uk, .eu and some other TLDs outside USA

Filed under: SBS 2008 — Rahul Patel @ 1:45 pm

In SBS 2008, when first installed or rebooted, DNS queries succeed, but after a period of about 1 day users report that they are unable to access some web sites. On inspection, it may be noticed that the inaccessible web sites are in the .uk and .eu Top Level Domains (TLDs) or certain other TLDs that are outside of the USA.

If left for several days, the problem may appear to resolve itself then re-occur after another day or so.

If the DNS server service is restarted, or the DNS cache on the server is cleared, then the problem is temporarily resolved but re-occurs after a day or so.

The cause of this problem is that in EU countries (and certain other TLDs outside the USA), nameserver records are typically cached for more than 1 day. SBS2008 has a cap on the maximum time that it will allow nameserver records to be cached, which defaults to 1 day. This default works fine in the USA but When the .uk and .eu records become stale, they are not deleted from the cache but are no longer returned as valid records. Therefore, they effectively prevent DNS lookups in those TLDs from succeeding until the records expire and are deleted from teh cache, or the DNS Server service is restarted.

The fix is to increase the maximum Time To Live (TTL) setting in the DNS server so that it recognises records older than 1 day. Experience has shown that setting the value to 4 days is usually enough, but the maximum setting is 30 days.

Solution

For a permanent work around, the MaxCacheTTL value needs to be changed to a value larger than the TLD TTL (Default value is 1 day, maximum value is 30 days). On SBS2008 there is no negative impact since this is the TTL for the cache of Resource Records. This is just the maximum value that it will be stored on DNS server. If the actual TTL is shorter, the shorter value will be used.

1. Start Registry Editor (Regedit.exe).
2. Locate the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters
3.On the Edit menu, click New, click DWORD (32-bit) Value , and then add the following value:

Value: MaxCacheTTL
Data Type: DWORD
Data value: 0x69780 (432000 in decimal = 5 days)

4.Click OK .
5. Quit Registry Editor.
6. Restart the DNS server.

Source:
http://serverfault.com
http://support.microsoft.com/default.aspx?scid=kb;EN-US;968372

September 11, 2010

SEP installation RollBack Issue on Windows 7 -Fix

Filed under: Tips n Tricks,Windows 7 — Rahul Patel @ 2:48 am

Issue:

When attempting to install the Symantec Endpoint Protection client onto a machine, the installation fails and rolls back around the point of registering with LiveUpdate.

Solution:

In the registry,

Find

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
value=%APPDATA%

and change it to

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
value=%USERPROFILE%\AppData\Roaming

Restart Windows 7 and then install SEP client again.

Source:http://www.symantec.com

June 21, 2010

Shadow a Terminal Server Session Without Prompt for Approval

Filed under: Server 2003,Tips n Tricks — Rahul Patel @ 3:15 pm

Using windows 2003 and want to gain session access to another users session. Perhaps the person you are asking for shadow permission has an issue on his desktop and cannot figure it out,

To “Shadow” you have to know the session id of the user’s session that you want to view and or take over. Right click on your taskbar and select task manager. Go to Users and pick the users name and the session number should be located to the left of the name.
Shadow 0 and on the users session it will pop up a dialog box asking the other user for permission for you to access the session.

Of course this can be denied from the other user. Frustrating? :(

To shadow any other session, without a prompt, you would use the RDP-TCP Properties dialog, on the Remote Control tab, and clear the require users permission box.

To remote control the console (session 0) without a prompt for approval:

1. On the Terminal Services server, Start –> Run –>Gpedit.msc –> OK.

2. Navigate through Computer Configuration–> Administrative templates –> Windows Components –> Terminal Services.

3. Right-click Remote Control Settings and press Properties.

4. Select the Enabled option.

5. Select Full Control without user’s permission, under Options.

6. Press OK.

7. Exit the Group Policy Editor.

8. To force this local policy to update now, open a CMD prompt, type gpupdate /force, and press Enter.

When you establish a Remote Desktop session, you can connect to the console and remote control it:

1. Open a CMD prompt.

2. Type Shadow 0 and press Enter.

The user will NOT be prompted for permission.

Well this can be exploited and used in many wrong ways. So just be careful and use it wisely… :)

Source :http://support.microsoft.com/kb/292190

May 28, 2010

Microsoft Download Manager

Filed under: Micorosoft Windows — Rahul Patel @ 1:47 pm

The Microsoft Download Manager enables you to download files from the Internet in a more reliable and faster way than using a browser alone. Using the Download Manager makes it easier to download large files such as an application or multimedia files. Also, it has resume support so that you can continue downloading files from where it left off the last time.

More Information: Click Here
Download: Click Here

April 18, 2010

Microsoft Fix it Center(currently in Beta)

Filed under: Server 2003,Server 2008,Windows 7,Windows Vista,Windows XP — Rahul Patel @ 9:50 am

Fix it Center finds and fixes many common PC and device problems automatically. It also helps prevent new problems by proactively checking for known issues and installing updates. Fix it Center helps to consolidate the many steps of diagnosing and repairing a problem into an automated tool that does the work for you…..

Microsoft Fix it Center Online

February 16, 2010

“Automated Troubleshooting Services” for Windows XP & Windows Vista

Filed under: Windows Vista,Windows XP — Rahul Patel @ 9:29 am

Common system maintenance tasks

Automatically detect and fix common maintenance problems such as broken desktop shortcuts, unused icons, disk volume errors, and incorrect system time display.

What it fixes…

* Problems with desktop shortcuts and icons
o Shortcuts on the desktop don’t work or are broken
o Desktop icons are broken or have not been used in 3 months
o Startup items don’t work or are broken
* System maintenance tasks
o Free up disk space by repairing disk volume errors such as bad sectors, lost clusters, cross-linked files and directory errors
o Free up disk space by removing error reports and troubleshooting history older than 1 month
o Set the correct system time and synchronize system clock with the time server
* You receive the following errors:
o Windows update error 0x80072F8F
o The item that this shortcut refers to has been deleted

How it works…
Microsoft Automated Troubleshooting Services scans your computer and detects the root causes of common problems, then
Automatically fixes the problems that it finds, and
Offers additional resources if the problem isn’t fixed

http://support.microsoft.com/gp/system_maintenance_for_windows

Windows NT Backup Restore Utility for Windows 7 and for Windows Server 2008 R2

Filed under: Server 2008,Windows 7 — Rahul Patel @ 9:18 am

Windows NT Backup Restore Utility for Windows 7 restores backups made on Windows XP and Windows Server 2003 to computers that are running Windows 7.

Download::http://support.microsoft.com/kb/974674

« Previous PageNext Page »

The Rubric Theme. Blog at WordPress.com.

Follow

Get every new post delivered to your Inbox.