SBSBILL

Trend Micro WFBS 6.0

2009-10-26T11:43:00.001-07:00

I upgraded from WFBS 5.1 to 6.0 (with SP1) this past weekend. The upgrade went well. One item of note is the 'upgrade' enabled the personal firewall service on the server. This messed up the internet and clients for a bit until I disabled the service and re-started the server. All settings from 5.1 transferred. Reviewing settings, all seems to be good.

WSUS Callback

2009-10-22T12:54:00.001-07:00

http://blogs.technet.com/wsuscallback/

Deploying Win 7 XP Mode

2009-10-22T06:26:00.001-07:00

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9f142a1a-a7b7-4d0b-bd56-d9627f39c14f#tm

Groovy Security in Windows 7

2009-10-09T11:11:00.000-07:00

http://technet.microsoft.com/en-us/magazine/2009.10.win7security.aspx

77 Windows 7 Tips

2009-10-09T11:06:00.000-07:00

http://technet.microsoft.com/en-us/magazine/2009.10.77windows.aspx

Extending the activation grace period

2009-09-25T04:49:00.001-07:00

Borrowed from http://blogs.technet.com/johnbaker/

So How’s This Done?
Simple… all we need to do is run a script in the windows\system32 folder called slmgr.vbs. Check the steps below:
Bring up a Command Prompt.
Type slmgr.vbs –rearm, and press ENTER.
Restart the computer.
You computer has now extended the evaluation period 60 days!!! You can re-arm up to 3 times giving you an activation-free trial period of a total of 240 days!!
How Much Time Is Remaining in the Evaluation Period
You can find out by running the same script this time with different switch:
Type slmgr.vbs -dli, and the current status of the evaluation period is displayed. (the dli switch means – display license information)
If you want to find out what else you can do with the script type slmgr.vbs –? and you’ll get a full list and explanation of all the switches.

IE8 + WSUS

2009-09-18T04:53:00.000-07:00

If you cannot get IE8 to automatically install via WSUS 3.0 try loading KB932823.

"You may be unable to use Windows Internet Explorer 7 or Internet Explorer 8 to download files on a computer that is running Windows Server 2003 or Windows XP"

This hotfix solves the problem. Once this update is loaded the automatic installation of IE8 on your client PC will start at the next shutdown, or at the next scheduled install time.

Security Guide

2009-09-11T08:29:00.000-07:00

Must have for admins..

The Microsoft Security Update Guide is “must have” security guidance that walks you through all the terms, processes, and tools to get it all done correctly. What is the difference between a bulletin and an advisory? What things should I consider before deployment? Do I even need this update? What resources are available to assist me? Get this guide. It will make your job a lot easier, leaving you plenty of time to enjoy the game.

Microsoft Security Update Guide: Helping IT Professionals Better Understand and Maximize Microsoft Security Update Release Information, Processes, Communications, and Tools.

http://www.microsoft.com/downloads/details.aspx?FamilyID=c3d986d0-ecc3-4ce0-9c25-048ec5b52a4f&displaylang=en#filelist

WSUS - Clients not updating

2009-08-18T06:58:00.001-07:00

Worked through a problem recently where my client PC's would not connect to WSUS 3.0 SP1. Here's the steps I followed to correct the problem.

1. Delete the PC from the WSUS console (Client PC's - The PC will likely have a red X)
2. At the client PC - Select Start - Run - type CMD
3. At the command prompt type net stop wuauserv
4. Navigate to the Windows Directory
5. Delete the 'Software Distribution' Folder
6. Run Microsoft Update from the Start menu (This will ensure the update software is up to date)
7. Restart the PC
8. Select Start - Run - type in the run box http://WSUSServerName/iuident.cab (wsus server name is the name of your server)
9. You should be prompted to download or open iuident.cab. This confirms network connectivity.
10. Select Start - Run
11. type in the run dialog box wuauclt.exe /resetauthorization /detectnow
12. Wait 10 minuites +/-. The PC should connect to WSUS and begin downloading updates.

Best,

Bill V

Trend Micro Worry-Free Business Security

2009-01-20T06:38:00.000-08:00

If you are upgrading from 3.0 or 3.6 to WFBS 5.1 be sure to do the folowing:

1. You will need to manually remove 'SMEX' (old version of the messaging security agent). If this is not removed the installation of the new MSA will not work.

2. The admin password needs to be rather simple. Change the password before starting the upgrade.

2009-01-12T07:38:00.001-08:00

SBS 2008 referrence:

http://www.sbs2008.com/

Wow!!

2009-01-08T05:42:00.000-08:00

It's been a year since I last posted! Guess my Facebook page has taken the front seat. Time to get back in the game on my blog.

BV

Server Crash

2009-01-08T05:40:00.000-08:00

Note to self... Do not open a terminal session to the SBS server while a backup is running. Server becomes unresponsive.

The crash dump references ntkrnlmp.exe as the source of the crash. More on this later.

BV

Microsoft Response Point

2008-01-31T11:26:00.000-08:00

Well... I attended a webinar today on RP. Thanks to all the presenters who discussd the product. I was hopnig for a solution for my business since we are planning to upgrade our phone system this year. Unfortunatly RP is not quite ready yet. There are some great features and the ease of use is Awesome however it lacks several key items.

1. No Music or business messages while on hold (This is HUGE. I can't even guess how many companies use some sort of on hold messaging but it has to be a fairly large number. We use the hold message for cross selling opps.)
2. No paging through the phones. Seems to only support speakers.
3. No off hours autoattendant (There is an auto attendant however the feature needs to support alternate messages for after hours and holidays)

I really want to use RP but cannot based on the 3 items above. Also, there's no clear documentation for integrating RP with a T-1 and IAD device. Tom Strickland did mention that he's installed RP with this type of phone service connection however did not elaborate.

More must be done to education "partners" and the end user admins (me) on how RP can be added to your existing infrastructure.

Take RP to the next level, Please.

Where'd my blog go??

2007-12-17T07:24:00.001-08:00

Not sure how it happened, but my blog was marked as spam and was disabled. What's even more strange is how someone else was able to use my blog address sbsbill.blogspot.com. Now my address is sbsbill4.blogspot.com. What's up with that.

Anyway, glad to have my posts back.

BV

MOTHERBOARD

2007-06-11T12:36:00.000-07:00

Note to Self- DO NOT keep your workstation connected to the Inter-Tel phone system during a thunderstorm!

My network is protected by UPS's on every PC, Server, and phone system, etc. However as I found out (Twice to be exact) that the phone system can apparently get a surge and pass it on to your PC. I usually keep my system connected via the Comm port to our phone system to make changes. Well, I've toasted my system board twice due to this connection. Not fun! Anyways, Spoke to the phone guys today and they said this can happen and that there's something they can add to the phone or my PC that will prevent this from happening. Either way I'm not connecting that cable unless I need to from now on.

I know... Not SBS related however it is Network related.

Best,
BV

My Link

2007-06-11T12:32:00.000-07:00

Well.... Not sure if anybody checks my Blog but had to put a new post out there. I just noticed that a link to my blog is on the SBS Community Lead Blog http://blogs.technet.com/kevin_beares/default.aspx.

Wow... Glad to be listed there and makes me want to post more regularly now. Hmm... have to think of something.

Thanks!

Bill

Rename User

2006-05-10T11:12:00.000-07:00

So I don't forget this...

To rename a user after getting married:

Use Rename User wizard, which will change the display name (Server Management -> Standard Management -> Users ->).

This does not change the user's login name or email alias. Manually edit these after changing the users display name.

Best practice is to do three things:
1. Change the display name - this will show the correct name on outgoing email, etc

2. Rename the user account login name and email alias

3. Add a second email alias and make it the primary alias for the user. You want to keep the old address as a secondary until your user has had a chance to update all of his or her contacts.

Integrasoft Software

2006-04-18T05:16:00.000-07:00

This is a pitch for the software company we use to run our business.

The software I'm referring to is developed by Tech Systems, Inc, www.integrasoft.net. The software controls all of our picking, packing, shipping (with the help Clippership, another shipper software), accounts payables, receivables, purchase orders, point of sale and order entry. It's a very capable system that runs on a Unix server. The software is accessed using a terminal emulator program called PowerTerm. This emulator runs on any windows based client. We currently have it running on Win 98 - Win XP.

I've worked with the program for the past 4+ years and have been very satisified. The software is not only great to work with but so are the support team at Tech Systems. Their support is top notch! They're easy to work with and have developed several custom applications for us over the years. They'll work with you to make sure the software works the way you need it to for your business. We are a beauty supply distributor so our needs involve Inventory Management and Warehouse distribution. Specifically, order entry, picking, packing, and shipping. There are many ways to get the product out the door in the distribution business. Carousel, pick to light, RFID, etc. We currenlty use paper pick tickets to pick our orders. Some distributors running their software use automated picking. Either way Tech Systems handles it deftly.

So... I'f you're looking for the best software to run your business look to Integrasoft and Tech Systems, Inc.

For more information contact Tech Systems at 563-332-5030.

Thanks,
William Vogel
IT Admin
Raylon Corporation

RSM Corrupt

2006-02-13T05:26:00.000-08:00

Had this happen once ena want to remember the steps to correct.

From Susan B...

ISSUE #5======Cannot run the SBS Backup Wizard and received this error message
"RSM database is corrupt and cannot be rebuilt. Event 85"

CAUSE--------This issue can occur if the RSM database is corrupt.RESOLUTION--------------

-Rebuild the RSM database by:
1. Stop the RSM Service.
2. Delete the RSM databases located at %SystemRoot%\System32\NtmsData.
3. Restart the RSM Service, this will recreate new, empty RSM Databases.
4. Put a new tape in, or a tape that may be deleted.
5. Go to the "properties" of the disk inside the physical locations. Uncheck 'Enable Drive' Hit apply & then check the 'Enable Drive' again.
6. Right click, and prepare.

This will delete it, write a media label to it, add it to the Free Media Pool.More information:235032 Problems with a Damaged Removable Storage Manager Databasehttp://support.microsoft.com/?id=235032

Restore a Maibox

2006-01-18T09:08:00.000-08:00

Made a mistake the other day and deleted a users account from SBS Server Mngmt before make a backup of the users .pst in Outlook. And, of course, there was info that was needed on the users contact list. I searched through the SBS NG and Microsoft for a solution. Came close on Microsoft but didn't get the complete answer.

Well, thanks to Lanwench for posting a link to an article that solved the problem. Here's what she said:

Create a new user in ADUC. Do not mail-enable it. You can connnect this user to the old mailbox.See http://www.msexchange.org/tutorials/Recovering_Lost_Mailboxes.html for more help.

I also used the info in this Microsoft doc:
http://www.microsoft.com/technet/prodtechnol/exchange/2003/insider/mailbox_rc.mspx

The Users mailbox is now restored.

Ya' know what's worse... Read the post below. I didn't follow my own procedures!! Whoops. Oh well, live and learn.

Employee Quit Proc

2005-10-05T11:57:00.000-07:00

Follow these procedures when an employee leaves.

1. Login to Users PC and export mailbox to a .pst. Copy to the My Documents folder.
2. Burn the My Docs directory to a CD-R. (Verify if anyone else will need immediate access to the files. If so, copy them to the new users directory)
3. Change the users password if not done already.
4. Remove the user from the address book. (Server Mgmt – Users – Exch Adv – Hide Check Box)
5. Setup new user who may need access to the old users email in Exch – Adv – Mailbox rights. Read, Change, Full Access rights.
6. If new user will not need access as stated in step 5 then Monitor the users email via OWA for a period of time (2 weeks to a month if necessary). Send replies and/or forward the email.
7. After monitoring period is over delete the account and users home folder.

If/When a new user takes over the PC that was used by the departing employee follow these instructions.

1. Create new user account.
2. Setup computer with new users name.
3. Re-Enable the administrators account.
4. Remove the computer from the domain by setting the login to workgroup on the users PC. Restart. (right click my comp from start menu – computer name – change domain box)
5. Follow these steps to connect the computer to the domain.
6. Start IE – enter http://servername/connectcomputer
7. Add the administrator and user to the computer.
8. Restart
9. Login as the Domain Admin
10. Remove user from the Administrators group
11. Disable the Admin Account
12. Setup new user for remote access and remove old user.
13. Restart
14. Login as new user
15. Change password on login.
16. Config taskbar options.If new user will access old users email setup new profile. Contol Panel – Email – Add profile – add exch acct.

MY COMPANY

2005-03-28T07:26:00.000-08:00

OT:

For those of you visiting my blog please take note of the links on the left side of the page. I work for a beauty supply distributor and our online store is www.Oursalon2u.com. It's a great site to visit for all your haircare needs and is also a great site for holiday gifts. Take a look around using the "Freeview" option. If you are interested in purchasing online contact a salon within our distribution area and ask for their salon code. A code is needed to register and is a 4 digit number. *hint*. We serve the PA, NJ, DE, WV and VA area. We will ship to any location in the US.

Cheers,
Bill

BACKUP Failed

2005-02-24T05:37:00.000-08:00

Well, the other day I came in to an email that the backup had failed. Odd, been running just fine for months, wonder what's wrong. The event log just has an event id #5634. Usual backup failed event. When I looked at the backup log the message was:

Backup Runner started.NTMS session started successfully.
EnumerateNtmsObject(NTMS_LIBRARY) succeeded.
Will enumerate on 3 media libraries found.
GetNtmsObjectInformation(NtmsLibraryInfo) succeeded.
GetNtmsObjectInformation(NtmsLibraryInfo) succeeded.
Found an enabled library.
InventoryNtmsLibrary(NtmsInventoryOmid) succeeded.
Identify Media completedEnumerateNtmsObject(NTMS_MEDIA_TYPE) succeeded.
Will enumerate on 0 media types found.
GetNtmsObjectInformation(NtmsLibraryInfo) succeeded.
Found an enabled library.
InventoryNtmsLibrary(NtmsInventoryOmid) succeeded.
Identify Media failed or was invalid.
EnumerateNtmsObject(NTMS_MEDIA_TYPE) succeeded.
Will enumerate on 0 media types found.
Unable to detect tape drive or tape media.
GetTapeMediaPoolName failed.
(0x80070458)GetBackupDestination failed.
(0x80070458)LaunchNTBackup failed.
(0x80070458)NTBackup finished the backup with errors.

OK. NT Backup can't find the media. I then looked at the Media Pools in RSM. There were 5 allocated backups tapes in the "backup" folder. None were in the Free media folder. If I recall this is normal. I tried a manual backup and received a message:

"There is no free media available with the selected type. Add unused media or click cancel to end the operation. Note: it may take up to 60 seconds to recognize new media.

OK. Seems to me that there needs to be "Free" media available in the Free Media folder. Or at least it seems that way. So, found some trouble shooting articles on Tape Backup Media. OK, tried something else. I checked the "move mediat to free" box on the properties page of the "backup" media pool. I then manually deallocated the oldest Ecrix backup from the backup media pool. This moved the media to the free media pool with a state of "unlabled".

So now I have some free media available. Should work, right? NOT. OK now what's up? This morning I looked at the Queues folder in RSM. I see several "Clean Drive" messages. I clean my drive every month. The last clean cycle was run on Feb 8th. Why do I need to run it again. I recall a post where someone else had the same problem and cleaned the drive but I couldn't get past my brain telling me "but you just cleaned it", blah blah blah. OK, so I clean the drive and voila! Backups now work.

Glad it was an easy fix. NOW, It would be very helpful if Microsoft could add the "Tape Clean" message to the backup log. If this message was appended to the log the user would know right off that the drive needs to be cleaned before any further backups can be run.

Best,
Bill V
SBS ROCKS!

SUS Updates

2005-01-18T07:48:00.000-08:00

Wonder why your updates that were approved in SUS are not applying to your client PC's at the scheduled time? If your PC's are not setup with a Local Admin account the update will be transparent. Take a look at the event viewer on the day the updates were planned for release. You will see an event #18 - Automatic updates. Check the event viewer the next day. You should see and event #4377 - NT Service Pack. This is the installation after the next user reboot.

If the user is a local admin a pop up box will alert the user that a update is ready and prompts the user for installation (depending upon GPO options)

Thanks,
Bill V