I . T . s

Windows hardening tools WINSpect

noreply@blogger.com (Anonymous) — Mon, 15 Jan 2018 06:09:00 +0000

WINSpect is the PowerShell based windows auditing tool to enumerate and identify security weaknesses with windows platform and results of this audit can be useful for further hardening.Download the WINSpect Tool Here.
https://github.com/A-mIn3/WINspect

Will outsourcing IT to us benefit your business?

noreply@blogger.com (Anonymous) — Sat, 25 Nov 2017 21:29:00 +0000

Your business is not in technology services provisioning?
You find technology management time consuming and have higher priorities to deal with?
There is too much to have to be an expert in when it comes to business technology?
Technology decisions often don’t get made until they become major issues?
Technology is more than just a convenience in your business. It enables your business processes and protects your market position?
Multiple parties provide services upon a common infrastructure, your network?
Architecture a supportive technology architecture based on business goals and best practices is beyond the capability of part-time technology stakeholders (the director who has technology as a portfolio responsibility, but is probably not a dedicated IT Director)?
Employing IT staff is too expensive?
Dealing with IT staff leave coverage and HR issues is a drain on your resources?
Keeping technology staff appropriately trained and aligned to business benefits is too complicated?
Complicated and expensive recruitment processes make employing IT staff a virtual minefield?
IT Directors are not architects, architects won’t do IT support and technicians are not architects or IT Directors (but they may tell you that they are)

The more ‘yes’ responses to the prompts above, the greater the benefit of outsourcing your technology to us.

CNV PVT LTD - Services

noreply@blogger.com (Anonymous) — Mon, 06 Mar 2017 02:38:00 +0000

Our Core Infrastructure Services
Find the right resources to help you to plan and deploy Core infrastructure solutions. An integrated Microsoft infrastructure can help you to reduce IT complexity and cost, increase your returns on investment (ROI), and transform your core infrastructures into strategic assets. Our certified and experienced technical team is able to deliver any kind of Core infrastructure solutions with minimum service interruption and down time.

Azure Basic Support - Azure Break/fix
Break/fix are technical incidents where there is a reasonable expectation that Microsoft is
causing the problem. We will handle escalation and communication with Microsoft during the
incident solving phase. The Basic Support plan gives you the possibility to submit support request through web or by e-mail.

Advanced Support
This support plan is suitable for customers who is bringing their environments from test and
development to production, or where the environment is becoming business important. The plan includes better response time SLA, and all elements from the Basic plan, in addition it includes the following:

Break/fix 24/7
The break/fix support on the
Advanced support plan is a 24/7/365 service available
round-the-clock all year.

Administrator
Administrator Support is a technical help and how-to support for qualified IT personnel managing Azure. The support is limited to Azure components delivered and covers basic and standard Azure configuration performed in the Azure Management Console.
Premium Support
The Premium support plan is suitable for customers that are dependent on the best response time SLAs
and where the cloud environments are business critical for external or internal users on a regular basis. The plan includes all support elements from the Advanced support plan, in addition it includes the following:
Hybrid break/fix escalation to MS
With the Premium support plan we will also escalate
break/fix incidents related to your hybrid or on
premise environment to MS Support.

Azure Consulting Services
For all support plans you have access to payable services such as advanced Azure consultancy services
and online onboarding workshops.
Based on this experience we offer high-end consulting services that supports a rapid implementation of Windows Azure, safely guided by our experienced experts. And will cover all the Azure offers
PaaS
SaaS

IaaS

Windows Server (Upgrade , Installation and configuration)

Upgrade, Planning, designing and implementation of Active Directory

Planning and configuration of Group Policies

ADFS and SSO Integration

File and Print service configuration

Active Directory System Migration

Infrastructure service configuration (DNS, DHCP,NLB)

IIS, (Configuration, Fine-tune, Optimized, upgrade)

WSUS installation and configuration

System Center (SCCM, SCOM, SCVMM, SCO, SCSM)

Any Product of System Center Family installation, configuration and Upgrade

System Center Upgrade and Implementation (SCCM, SCOM, SCVMM, SCO, SCSM)

Patch Management Solution Microsoft and 3rd party application

Datacenter Consolidation and Virtualization

Our Security Solution Services

Firewall configuration and Maintannce (Juniper, Fortgate)
AntiVirus system installation and configuration
AntiSpam solution installation and configuration
Patches and updates management
Authentication and Authorization
Security system expansion and up gradation
Security Policies and Procedures
Integration and optimization
High availability solutions
Internet content filtering solution(web, chat, youtube, download, P2P, etc)
Intrusion Detection and Prevention system implementation

Intelligent Datacenter Services

Full System Documentation
Data Centre Consolidation - Consultancy and Architecture Design Documents
Private or Public Cloud service - Consultancy and Architecture Design Documentation
Private cloud with Hyper-v – Cluster and High available implementation
Public Cloud with Azure – High Available implementation
Disaster Recovery solution

Communication and Collaboration

Planning, designing and Documentation
Exchange - online only Option (100%) cloud
Hybrid with On Promised AD Directory Service Integration
Hybrid with AD + ADFS Integration
Hybrid with AD + ADFS Integration + On Premised Exchange
Skype for Business Hybrid + Cloud PSTN Integration
Skype for Business Hybrid + On Premised PBX Integration
OneDrive for Business Hybrid Integration
SharePoint, site planning and designing (Work flow, Form ... etc.)
Automation O365 service
Mail Box Migration
On Promised Exchange implementation, Upgrade and Architecture consulting service
On Promised Lotus Note Mail Service implementation, Upgrade and Architecture consulting service

Data and database Solution

Planning, designing and Documentation
SQL DB deployment
SQL DB High availability solutions
SQL DB Upgrade
SQL DB cloud Migration
BI dashboard
Database Disaster Recovery planning and designing

SAP - Support and Service - ABAP

Reports - Development of customized reports in ABAP using ALV (ABAP Listviewer)
Interface - Some business processes may be maintained in external systems. For example Payroll, Fixed Assets, Dispute management etc. These external activities may need postings in SAP. Interface programs are developed to automate the postings in SAP.
Enhancements - Generally in the case of large implementations a Global template Blue-print will be prepared and followed. If a plant or company code need additional configuration to meet their country specific or plant specific requirements, the template will be enhanced with new configurations.
Forms - Development of layouts for Invoices, Account statements, Delivery notes etc using SMARTFORMS and SAP Scripts
Workflow - Development of approval flow logic in SAP. For example GL master data changes should follow specific approval process.
Data upload programs using BDC (Batch Data Communication) and BAPI (Business Application Programming Interface)
Process automation programmes using BAPI (Business Application Programming Interface)
Screen programming using screen painter.

SAP - Support and Service - BASIS

Designed server architecture and performed sizing to define hardware required for the customer.
Install and configure all required SAP database servers and application servers.
Designing in DR/standby site planning, design, deployment and execution (DB).
Defined and designed various clients like Golden Client, Test Client based on customer implementation strategy.
Configuring extended client transport and transport mechanism.
Installation of development server (DEV) with central system architecture and Quality server (QAS) with distributed architecture and production System (PRD).
Installed various versions of SAP components like ERP, SRM, SCM, PLM, CRM etc..,
Installed SAP GUI and configured logon groups etc..,
Applied patches and maintained versions for SAP applications.
Performed SAP Kernel upgrade.
Designing policies for Notes Application and Package Implementation.
Delta upgrade for PI-Basis component on BW server installation of BI cont component through SAINT.
Setup transport management system along with Virtual Systems, Layers, Routes, etc..,
Worked with hardware venders to finalize the hardware team to finalize the hardware.
Enabled the web functionality for SAP ERP system (Internet communication framework).
Worked with installation and startup issues of SAP ERP system.
Configured profile parameters for default and instance profiles.
Remote and local client copy.
SAP multi-landscape design solution, architecture recommendation and strategies for continuous improvement.
Administer the SAP database through SAP (apply database maintenance, design and maintain physical database layout, perform database reorganizations, design and implement backup and restore strategy, maintain database security, administer database performance, manage database storage, database problem determination and resolution, etc.).
Maintain SAP performance by planning and executing SAP tuning strategies.
Installing and Configuring SAP NetWeaver Gateway.
Install and configure process integration on NW 7.31 and NW 7.4.
Perform solution manager initial and basic configurations.
Configure solution manager maintenance optimizer and generate stack to download medial from SAP SMP.
Install and configure HANA for BW landscape.
Install and post installation configurations for SAP Suite on HANA and SAP S4 HANA.
SPS upgrades of all SAP landscapes.
HANA multi tenancy conversion.
Trouble shooting HANA issue which relates to access and performances.
Upgrading/Patching of HANA database

SAP - Support and Service - BW

Install and configure BW landscape.
Install and post installation configurations .
Trouble shooting BW issue which relates to access and performances.
Upgrading/Patching of BW database

IT Resource OUTSORSING

IT Support with AMC (Desktop Support, Microsoft Support) on site or Remote Support with backend Level 300 Professional support.
Security and Antivirus Support AMC
Microsoft Support service AMC
Firewall Support Service AMC

Software Licensing Service

Kaspersky

How I can provide IaaS, PaaS, DBaaS from my Existing Datacenter

noreply@blogger.com (Anonymous) — Thu, 06 Oct 2016 14:16:00 +0000

Azure technology in your datacenter ...............

Once installed in your datacenter, the Windows Azure Pack integrates with System Center and Windows Server to help provide the following capabilities.

Basically you can provide your service .Windows Azure Pack is a collection of Microsoft Azure technologies available to Microsoft customers at no additional cost. It integrates with Windows Server, System Center, and SQL Server to offer a self-service portal and cloud services such as virtual machine hosting (IaaS), database as a services (DBaaS), scalable web app hosting (PaaS), and more

How I can provide IaaS, PaaS, DBaaS from my Existing Datacenter

noreply@blogger.com (Anonymous) — Thu, 06 Oct 2016 14:16:00 +0000

Azure technology in your datacenter ...............

Once installed in your datacenter, the Windows Azure Pack integrates with System Center and Windows Server to help provide the following capabilities.

How to Deploy Microsoft Nano Server

noreply@blogger.com (Anonymous) — Tue, 04 Oct 2016 11:58:00 +0000

get started nano-server quick start

What is the Microsoft Nano Server and What are the Benefits of use

noreply@blogger.com (Anonymous) — Tue, 04 Oct 2016 11:55:00 +0000

This will be the Future Operating System which we are installing in our Datacenter. As of right now, it is targeted as an OS for born-in-the-cloud applications and cloud OS. The majority of Company corporate strategy is a concerted push toward the cloud, whether it's public, private, or a hybrid cloud environment. Nano Server is another key component of Microsoft's strategy to be highly competitive in the private cloud market. Nano Server, a stripped down version of Windows Server 2016 that's designed specifically for cloud environments.

Unlike Server Core, Nano Server is intended to be a completely headless installation (no local UI and no local console). Also, where the Windows UI can be installed on top of Server Core, Nano Server has no such capability.

What are the Benefits Of Microsoft Nano Server

1. Secure Server

The attack surface is much smaller now. There is no Internet Explorer, no Windows Explorer, and no GUI to exploit. Also, the default ports open with a base install is 12 as opposed to 34 ports open by default with a full Windows GUI Server install. This makes Nano Server a much more secure OS than its predecessors.

2. Costs

Because this server creates such little overhead, the amount of resources needed to run Nano Server VMs on a Hyper-V host will be miniscule. With its potential to lower costs and increase margins, this will be one of the biggest reasons for companies to use Nano Server VMs whenever appropriate. Allowing companies to get the most out of every dollar spent on hardware is huge.

3. Faster boot times

Nano Server is only installed with the components that are going to be used, so the startup time is significantly faster. The boot IO is around 150MB. In fact, at Microsoft Ignite when Snover presented a demo of a Hyper-V Nano Server cluster, the servers were powering up faster than the switch was!

4. Fewer reboots required

IT Admins will no longer be frustrated by unnecessary reboots caused by patching windows components that aren’t even used on their servers. Since only the components needed are installed, the amount of patches and updates that are pushed out to Nano Server will be much less. With the current Nano Server build, the estimated amount of reboots a year are 3, and Microsoft is working diligently to try to get this down to 2. Fewer reboots on Hyper-V hosts and their VMs means less interruptions, which also means less “after hours” work for some environments.

5. Easier remote management

With Nano Server there is no local logon, it will be managed entirely remotely. This direction on Microsoft’s part requires them to focus on improving the remote administration capabilities of Windows Server. They have recently been working on improving some of the remote management aspects that were previously lacking. For example, as part of the Azure stack, there is now a remote task manager that allows admins to connect to VMs and view performance and processes running. This will benefit IT Admins by improving the remote administration experience when managing Hyper-V hosts and VMs.

6. Smaller server image

Nano Server is 20x smaller than the full Windows Server with a GUI. Because of this, storing Nano Server VMs on a SAN or Hyper-V local storage will not consume large amounts of space. Mass deployments of Nano Server VMs will not take as long to install and configure; and copying server images over to Hyper-V nodes will take less time. The small footprint of this OS is what really makes it shine.

Here is the benefits comparisons for all three server version which available in market

Nano Server Use Cases

The obvious downside of having a stripped-down version of Windows Server is that it has limited capabilities. At this time, Nano Server supportability and compatibility we can listed as below.

Role/Feature

Hyper-v
Failover Clustering
File Server and Storage
Internet Information Server (IIS)
Desired State Configuration (DSC)
System center Agent
DNS Server
Secure Startup
Shielded VM
RAM Disk supportability

Nano Server Management

The big news in regards to Nano Server is on the management front. Clearly, as a completely headless version of Windows Server, all management of Nano Server is accomplished remotely. A variety of Microsoft management tools are available to use, including MMC (Microsoft Management Console) Snap-Ins like Hyper-V Manager or Services, Windows PowerShell, Desired State Configuration (DSC), Server Manager, and Microsoft System Center. Microsoft also states that third party management tools, such as Puppet and Chef, Nano will be supported.

Microsoft has designed Nano Server to be fully manageable through automated means in keeping with their cloud strategy, but fully realizes that some organizations will prefer to perform some administration with GUI tools. It's important to recognize the distinction between the headless nature of Nano Server and a system that is only manageable through a command line. Nano Server does offer support for management through GUI tools using remote management.

MORE DETAILS FOR :- How to Deploy Microsoft Nano Server

How to Setup Disaster Recovery as A Service (DRaaS) for your Organization

noreply@blogger.com (Anonymous) — Sun, 07 Aug 2016 12:04:00 +0000

Disaster recovery (DR) planning has a reputation for being difficult and time consuming. Setting up alternate processing sites, procuring hardware, establishing data replication, and failover testing have been incredibly expensive undertakings. To top it all off, the need for 24x7x365 business application availability threatens to make disaster recovery planning an exercise in futility.

Disaster Recovery as a Service, will help you to setup your DR site with below listed benefits

1. low cost with – Pay as you go

2. High availability -

3. Simplicity and Easy Setup

4. Scalability

5. Flexibility

6. Compliance

7. Easier Testing

Step to Setup your DRaaS

· Understanding your Disaster Recovery Requirement and Needs

o Understand today DR Practices – Hot, Cold and Warm Sites

o Public / Private

· Defining Your Requirements for a DRaaS Solution

o Perform a Business, Impact Assessment

o Setting Recovery Targets (RTO and RPO)

o Backup and Replication with bandwidth limit

o Understanding how DRaaS untangles network complexities (Latency and Bandwidth)

o Working through the legal and compliance issues associated with DRaaS

o Data Protection and Geography and the Law

o Data Ownership, access and Use

o Data Custodian,

o Data Retention,

o Data Location,

o Bootstrapping Recovery Site,

· Defining your correct Backup Technology

o 3-2-1 Rule

· Implementing DRaaS

o Build a successful DR Plan with Clear Scope

· DRaaS Operations and Maintain with Testing

o Operational aspects of a DRaaS system, including network monitoring, conducting failovers and failbacks, and testing a DR plan.

o Cutover test, Paralle test, Simulation, and Document

· Building an Exit Strategy

o Monitor and analyze, Periodic business reviews

Find the right resources to help you to plan and deploy Core infrastructure solutions. Join with us we will provide support and service to setup your DRaaS for your organization.

How to do the More than 95% Windows Client Patch Compliance

noreply@blogger.com (Anonymous) — Sun, 31 Jul 2016 12:38:00 +0000

As I know this is very critical task all the IT admin and IT managers. And this must be in place as per the security compliance.

If you’re not in up to date patch level, definitely your environment in high vulnerable situation.

This article will explain to you how you can do more than 95% Windows client patch compliance in the security reports.

Solution – Implement System Center Configuration Manager (SCCM)

KEY FACTS

Correctly Design your SCCM Architecture - Consideration for the correct Architecture

Numbers of Connecting Devises,

Numbers of Remote Site,

Remote Site Bandwidth,

Numbers of Application and Image and capacity of them,

Integrate Intune – If you want to manage devices which are non-join domain and non-Windows Operating System,

Integrate WSUS,

Correctly Assign Job Role what your expecting with SLAs

Patch Admin – Manage and Distribute all the patches

Image Admin – Test and Deploy correct image to required devises

App Admin – Test and deploy correct Apps to correct user or devise groups

KEY BENEFITS

Patch Management and Reporting

Application Management and Reporting

Assets Reporting and Inventory – Asset Intelligent

Operating System Deployment (OSD)

Settings Management (DCM)

End Point Protection

In this Article we are considering only How to do the More than 95% Windows Client Patch Compliance

Guidelines for How to do the More than 95% Windows Client Patch Compliance

Purpose –

Ensure timely delivery of Security updates, help make environment secure and provide consistent user experience.

Target Compliance –

Deploy active exploit update to 95% of computers with three business days.

Deploy critical update to 95% of computers within seven business days.

Compliance period – Comply within 3 or 7 business days, as appropriate.

Recommended Patching Process –

Pre-Update Deployment –

Silent, Interactive or on-demand patching you can choose for this.

Create Patch testing Groups with covering all the Operating Systems & application,

Provide better awareness session about patch testing collection devices users,

Prior notice them, before start deployment,

Deploy, Monitor, Create Risk Mitigation plan, Request Feedback.

Patching testing period define as 7 days with starting patch Tuesday.

Update Deployment –

Production deployment with Silent Patching.

Enforce Restart if it required,

User Receives Initial restart notification at the 120^th minute, and

Final restart notification at the 60^th minute.

The user continues to receive a restart notification until the system has been restarted.

Post-update Deployment

Confirm deployment using reports statics

Cleanup process

Document

Publish Final report to all stakeholders

Best Practices

People – Make sure that security of the environment is the TOP PRIORITY

Process –

Communicate to users every month about patch Tuesday

Deploy update consistently after the validation phase is complete

Preform quality control on the test deployment before release to production

Monitor and remediation any issues if you face quickly

Remove expired update periodically

Technology –

Maintain 98% client heath all the time

Defined correct boundaries and boundary group with including correct site servers

Deploy Automatic Patch Deployment rules for each device collections

Use WSUS to install the configuration manager client

Verify SCCM Client settings

Weekly or at least Monthly Client PC restart schedule

What's new in Hyper-V Private Cloud on Windows Server 2016

noreply@blogger.com (Anonymous) — Sun, 19 Jun 2016 12:00:00 +0000

1. IN place Cluster upgrade

Finally, we can have in-place cluster upgrade feature, you can now add a node running Windows Server 2016 to a Hyper-V Cluster with nodes running Windows Server 2012 R2. The cluster continues to function at a Windows Server 2012 R2 feature level until you upgrade all of the nodes in the cluster and you upgrade the cluster functional level with the following Windows PowerShell cmdlet, Update-ClusterFunctionalLevel.

After you update the cluster functional level, you can't downgrade it back to Windows Server 2012 R2. Seems it’s going to work as Active Directory functional level.

When the Hyper-V Cluster has a mix of both Windows Server 2012 R2 and Windows Server 2016 nodes, you can still move virtual machines between all of the nodes in the Hyper-V Cluster.

After you upgrade the cluster functional level to Windows Server 2016, the following applies:

· To enable new virtual machine features, you need to manually upgrade the virtual machine configuration level of the virtual machines using the Update-VmConfigurationVersion cmdlet.

· You can enable new Hyper-V features.

· You can't add a node to the Hyper-V Cluster that runs Windows Server 2012 R2.

2. Nested virtualization

Yes, you can have this feature now. It will let you use a virtual machine as a Hyper-V host and create virtual machines within that virtualized host. This can be especially useful for development and test environments. To use nested virtualization, you'll need:

· At least 4 GB RAM available for the virtualized Hyper-V host.

· To run at least Windows Server 2016 or Windows 10 build 10565 on both the physical Hyper-V host and the virtualized host. Running the same build in both the physical and virtualized environments generally improves performance.

· A processor with Intel VT-x (nested virtualization is available only for Intel processors at this time).

3. Hot add and remove for network adapters and memory

Yes, finally this also available in VM G2 version, now you can add or remove a network adapter while the virtual machine is running, without incurring downtime. And its support Windows or Linux operating systems.

You can also adjust the amount of memory assigned to a virtual machine while it's running, even if you haven’t enabled Dynamic Memory. This works for both generation 1 and generation 2 virtual machines.

4. Networking features

New networking features include:

· Remote direct memory access (RDMA) and switch embedded teaming (SET). You can set up RDMA on network adapters bound to a Hyper-V virtual switch, regardless of whether SET is also used. SET provides a virtual switch with some of same capabilities as NIC teaming. For details, see Remote Direct Memory Access (RDMA) and Switch Embedded Teaming (SET).

· Virtual machine multi queues (VMMQ). Improves on VMQ throughput by allocating multiple hardware queues per virtual machine. The default queue becomes a set of queues for a virtual machine, and traffic is spread between the queues.

· Quality of service (QoS) for software-defined networks. Manages the default class of traffic through the virtual switch within the default class bandwidth.

5. Linux Secure Boot

Linux operating systems running on generation 2 virtual machines can now boot with the Secure Boot option enabled. Ubuntu 14.04 and later, SUSE Linux Enterprise Server 12 and later, Red Hat Enterprise Linux 7.0 and later, and CentOS 7.0.

6. Production checkpoints

Production checkpoints allow you to easily create “point in time” images of a virtual machine, which can be restored later on in a way that is completely supported for all production workloads.

7. Guest Integration services through Windows Update

Yes, you can have Guest Integration service updates through Windows Update.

8. Shielded Guest virtual machines

Shielded virtual machines use several features to make it harder for datacenter administrators and malware to inspect, tamper with, or steal data and the state of these virtual machines. Data and state is encrypted.

9. Windows PowerShell Direct

This will be easy and reliable way to run Windows PowerShell commands inside a virtual machine from the host operating system. There is no network, firewall requirements, or special configuration. It works regardless of your remote management configuration. To use it, you must run Windows 10 or Windows Server 2016 Technical Preview on the host and the virtual machine guest operating systems.

10. Windows Containers

Windows Containers allow many isolated applications to run on one computer system.

How/Why: Hyper-V Server failover cluster

noreply@blogger.com (Anonymous) — Sun, 15 May 2016 10:02:00 +0000

Microsoft has long offered a version of Hyper-V Server, but, for whatever reason, Hyper-V Server has gained a reputation for only being appropriate for use in a lab environment. Believe it or not, it is possible to deploy the Hyper-V Server in a way that allows your Hyper-V virtual machines to be made highly available.

In order to build a fault-tolerant Hyper-V deployment, there are a few things that you'll need.

First, you will need a storage array that can be used for shared storage (CSV). These storage requirements are the same as for any other Hyper-V deployment. Next, you need a copy of Hyper-V Server, which can be found on the Microsoft website.

Third, you require a basic understanding of how failover clustering is normally deployed and configured. Having some up-front knowledge of failover clustering will make it much easier to build a cluster based on Hyper-V Server.

Finally, to build a fault-tolerant Hyper-V deployment, you must have a general knowledge of PowerShell. If your PowerShell comprehension is a little rusty, I recommend taking advantage of the Sconfig.cmd utility. This utility provides a menu-driven interface for configuring a server. Employing this utility will minimize the amount of PowerShell that you will have to use.

The first step in building a failover cluster using the Hyper-V Server is to install Hyper-V Server on each server that will act as a cluster node. Once it has been installed, you will need to use the Sconfig.cmd to establish the initial configuration for each server. This means assigning an IP address to each network interface card (NIC), giving each node a unique and meaningful computer name, joining an Active Directory domain, and enabling remote management. All of these tasks can be easily completed using the Sconfig.cmd utility.

Once you complete the initial configuration process, you must make a few decisions regarding your failover cluster. You will need to choose a name and an IP address for the cluster. You will also need to figure out how you are going to connect the cluster nodes to the shared storage. The easiest solution is to create two Server Message Block file shares. One of these shares will be used as shared storage, while another is used as a File Share Witness.

For the sake of demonstration, let's pretend that you wanted to create a cluster with a cluster name of "Cluster1" and a cluster IP address of 192.168.0.1. Let's also assume that the NIC that you want to use for cluster communications on each cluster node is named "Ethernet 2" -- you can get the actual NIC name by using the Get-NetAdapter cmdlet. Now imagine that your cluster nodes are named "Hyper-V-1," "Hyper-V-2" and "Hyper-V-3". Finally, we will need a Universal Naming Convention path for our File Share Witness. We will also need to assign a name to the Hyper-V virtual switch. For the sake of this demonstration, I will use "Switch1" as the virtual switch name -- each node must use the same virtual switch name -- and I will use "\\storage\witness" as the File Share Witness path. Given those conventions, the commands used to build a failover cluster would be:

Install-WindowsFeature –Name Failover-Clustering –IncludeManagementTools
New-VMSwitch "Switch1" –NetAdapterName "Ethernet 2" –AllowManagementOS:$True
Test-Cluster –Node Hyper-V-1,Hyper-V-2,Hyper-V-3
New-Cluster –Name Cluster1 –Node Hyper-V-1,Hyper-V-2,Hyper-V-3 –StaticAddress 192.168.0.1
Set-ClusterQuorum –Cluster Cluster1 –NodeAndFileShareMajority \\Storage\Witness

The only thing left to do at this point is to connect your shared storage to the cluster. The method that you will use to do so will vary depending on the type of storage that you are using. You can use the Add-ClusterDisk cmdlet to get the job done, but I advise installing the Failover Cluster Manager onto another Windows Server, one that has a graphical user interface, and use that tool to add storage to the cluster. That way you won't have to worry about the complexities of configuring shared storage from the command line.

As you can see, it is possible to achieve high availability using the Hyper-V Server. That being the case, you may be wondering why any organization would pay for a Windows Server license for their Hyper-V nodes. The answer usually comes down to VM licensing. Windows Server 2012 R2 Datacenter Edition for instance allows a properly licensed Hyper-V host to run an unlimited number of Windows Server 2012 R2 VMs. Without such a license, VM licensing must be handled separately, which can be costly and complicated.

How to check DC&RODC authentication issues

noreply@blogger.com (Anonymous) — Mon, 25 May 2015 09:38:00 +0000

By default, client will contact the DC in same site. And the site is configured in “AD sites and services”. We can simulate the DC locator process and gather network monitor package to see what happens during finding DC. Following is action plan:

Download Network Monitor 3.3 and install it on client (by default path)
http://www.microsoft.com/downloads/details.aspx?FamilyID=983b941d-06cb-4658-b7f6-3088333d062f&displaylang=en

Nltest.exe is a command tool in “support tools”. Please download support tool from:
http://www.microsoft.com/downloads/details.aspx?FamilyID=6ec50b78-8be1-4e81-b3be-4e7ac4f0912d&DisplayLang=en.

On client, open a command prompt and run following command to start Network Monitor:
"%ProgramFiles%\Microsoft Network Monitor 3\nmcap" /network * /capture /file %ComputerName%_test.cap:50M /DisableConversations /DisableLocalOnly

On client, open another command prompt, navigate the path in which nltest.ext resides, run following command:
ipconfig /flushdns
nltest /dsgetdc:domainname /force > dsgetdc.txt
nltest /dsgetsite > dsgetsite.txt
set l > setl.txt
NOTE:please place the “domainname” with your real domain name
In the command prompt of step 3, click “CTRL+C” to stop network monitor. The log is at current path.

Find the dsgetdc.txt ,dsgetsite.txt and setl.txt result s in same place

How to Enable ADFS Change Password Portal without Workplace Join

noreply@blogger.com (Anonymous) — Mon, 25 May 2015 09:37:00 +0000

If you have so many users out of the corporate network and they have access to the Office 365 cloud services, this users can´t change their passwords unless that in one moment makes logon in to a domain machine, to get a solution for this scenario, please check below article and you can enable ADFS to self-service change password portal.

After you Install ADFS 3.0 over 2012 R2, configure it to federated with Office 365. How to configure ADFSfollow these steps.

You need to install the update KB2919355, if you don’t have it yet installed.

After that, install the Hot-fix KB3035025. This hot fix allows your users so it´s not required to use a registered device to change her password.

You need the ADFS account to have User rights of Log on as a service, if you don´t block this setting via gpo, don’t pay attention, because the account gets automatically these rights during the installation.

If in any service restart the ADFS service can´t start and you receive an error when you are trying to start the service manually telling you that the ADFS account doesn´t have the right permissions, don´t panic, include the ADFS account in User rights: Generate security audits.

After that your portal ready, you can check the portal inhttps://password.XXX.com/adfs/portal/updatepassword

For last, but not least, if you want to personalize the portal, you can follow these steps.

Note: these procedure is only valid for the federated domain, if it´s a not federated user domain when he tries to change his password an error is going to occur, these error isn´t descriptive, and it will tell you that the password doesn´t have the appropiate complexity.
———————————————————————————————————
Now you need to install in a DMZ a Web Application Proxy you can follow these steps , and if you want to have HA put the servers in a NLB.

Vmware – Cannot ping NLB IP from Different Subnet

noreply@blogger.com (Anonymous) — Fri, 23 Jan 2015 12:14:00 +0000

Symptoms:-

You can ping all the NLB Host from any subnet but NLB IP cannot ping Different subnet (in same subnet you can ping all the IP including NLB IP)

Check MAC address, for sure you can see different MAC Address for each

How to get MAC Address

Log in different machine which is connected same subnet and ping all three IPs (Host 1 and Host 2 and NLB IP). You can ping all the IP’s without any issue.

After that you can run in same command prompt “ arp –a” (result are below)

How to fix it

Remove all existing NLB configuration

Create New NLB connection in Node 01, with multicasting and Add Node 02

Run netsh interface ipv4 set interface "NLB" forwarding=enabled

Internet Explorer 10 proxy setting in a Group Policy Object is Disappear

noreply@blogger.com (Anonymous) — Fri, 28 Mar 2014 11:52:00 +0000

Finally Microsoft Send the Hotfix for Proxy Address Disappear Issue

Problem Description

When editing a proxy setting and using the "advanced" tab in IE10 GPP, the proxy address textbox disappears.

Create a new IE10 GPP

Edit proxy settings - type in a proxy address and port

Click "advanced"

Click "ok" on the new dialogue (no need to edit things there)

Expected: No change

Actual: Address textbox is missing (!)

Hotfix Information

http://support.microsoft.com/kb/2928422

How to Check Service Pack version number in Office 2010

noreply@blogger.com (Anonymous) — Mon, 28 Oct 2013 12:40:00 +0000

The version number of Office 2010 SP2 is greater than or equal to 14.0.7015.1000.
The version number of Office 2010 SP1 is greater than or equal to 14.0.6029.1000 but less than 14.0.7015.1000.
The version number of the original RTM release of Office 2010 (that is, with no service pack) is greater than or equal to 14.0.4763.1000 but less than 14.0.6029.1000

Office 365 Activation Issue

noreply@blogger.com (Anonymous) — Wed, 16 Oct 2013 11:26:00 +0000

Registry Location for the activation details: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Common\Identity\Identities

Get office Key Details : cscript ospp.vbs /dstatus

Remove Office Key from Activation: cscript ospp.vbs /unpkey:GXVKC

c:\Program Files (x86)\Microsoft Office\Office15>cscript ospp.vbs /dstatus

Microsoft (R) Windows Script Host Version 5.8

---Processing--------------------------

---------------------------------------

SKU ID: 149dbce7-a48e-44db-8364-a53386cd4580

LICENSE NAME: Office 15, OfficeO365ProPlusR_Subscription1 edition

LICENSE DESCRIPTION: Office 15, TIMEBASED_SUB channel

LICENSE STATUS: ---LICENSED---

ERROR CODE: 0x4004FC04 (for information purposes only as the status is licensed)

ERROR DESCRIPTION: The Software Licensing Service reported that the application

is running within the timebased validity period.

REMAINING GRACE: 57 days (83053 minute(s) before expiring)

Last 5 characters of installed product key: GXVKC

---------------------------------------

---Exiting-----------------------------

c:\Program Files (x86)\Microsoft Office\Office15>cscript ospp.vbs /unpkey:GXVKC

Microsoft (R) Windows Script Host Version 5.8

---Processing--------------------------

---------------------------------------

Uninstalling product key for: Office 15, OfficeO365ProPlusR_Subscription1 edition

---------------------------------------

---Exiting-----------------------------

Enable Terminal Server and Terminal Server Application

noreply@blogger.com (Anonymous) — Fri, 21 Jun 2013 08:09:00 +0000

Terminal Service access by default allows only two connections for remote administration. It was designed solely for remote administration and not for users to access.
If you need more than two users, such as to allow your users to connect remotely wtih their own desktop, do work, etc, then you must upgrade to what used to be called Terminal Server Application Mode or now called, Remote Desktop Services. However, this requires purchasing CALs (client access licenses) and , then once purchased, then you would:

Install the Remote Desktop Servicse Role.
Install the TS Licensing role service.
Open TS Licensing Manager and connect to the Terminal Services license server.
Activate the license server.
Install required TS CALs on the license server.
You then have to reinstall your apps in "Install Mode" so they will be available for your users.

Terminal Services Licensing (TS Licensing)
http://technet.microsoft.com/en-us/library/cc770371(WS.10).aspx

Windows SERVER 2008 r2 Remote Desktop Services:
http://www.microsoft.com/en-us/server-cloud/windows-server/remote-desktop-services.aspx

Remote Desktop Services in Windows Server 2008 R2: Step-by-Step Guides
http://blogs.technet.com/b/mattmcspirit/archive/2009/08/05/remote-desktop-services-in-windows-server-2008-r2-step-by-step-guides.aspx

Active Directory Administration Tools Installation for Windows 8

noreply@blogger.com (Anonymous) — Sat, 08 Jun 2013 09:33:00 +0000

File Name	Download Link	Size
Windows6.2-KB2693643-x64.msu (recommended)	Click here	102.1 MB
Windows6.2-KB2693643-x86.msu (recommended)	Click here	95.3 MB

Install Instructions

To install supported language packs when the system UI language is not supported by the download package

Follow instructions in KB 2607607 to install supported Windows 8 language packs from Windows Update. Be sure to install one of the language packs that is supported by RSAT as described in the System Requirements section of this page.
When the language pack installation is complete, verify that the language pack is installed by running get-windowspackage -online in a Windows PowerShell session that has been started with elevated user rights (Run as Administrator).
The language pack entry starts with the following:

Microsoft-Windows-Client-LanguagePack-Package~(GUID)~(architecture)~(supported language)~6.2.9200.16384
After you have installed a supported language pack, go on to the next procedure, "To install Remote Server Administration Tools for Windows 8."

To install Remote Server Administration Tools for Windows 8

Download the Remote Server Administration Tools for Windows 8 package that is appropriate for your computer's architecture. You can either run the installer from the Download Center website, or save the download package to a local computer or share. If you save the download package to a local computer or share, double-click the installer program, Windows6.2-KB2693643-x64.msu or Windows6.2-KB2693643-x86.msu, depending on the architecture of the computer on which you want to install the tools.
When you are prompted by the Windows Update Standalone Installer dialog box to install the update, click Yes.
Read and accept the license terms. Click I accept. Installation requires a few minutes to finish.

NOTE: In this release of Remote Server Administration Tools, all tools are enabled by default. There is no need to open Turn Windows features on or off in Windows 8, and enable the tools that you want to use.

To turn off specific tools

On the desktop, hover in the upper right corner of the screen, and then click Settings.
On the Desktop menu, click Control Panel.
Click Programs, and then in Programs and Features, click Turn Windows features on or off.
In the Windows Features dialog box, expand Remote Server Administration Tools, and then expand either Role Administration Tools or Feature Administration Tools.
Clear the check boxes for any tools that you want to turn off. Click OK, and then close Control Panel.

How to Check Internet message header in O365

noreply@blogger.com (Anonymous) — Sun, 24 Mar 2013 06:37:00 +0000

Internet message header in OWA

Open Outlook Web Access/App (OWA), Go To Inbox.
1. Double click on the message which you want to see massage Header to open it in its own window.
2. Click on the Message Details icon at the top of your message.
3. A new dialog window will open on the page containing the Internet Mail Header details.

Internet headers in Outlook 2010/2013

Double-click on the email message for which you want header information and select the File tab on top
Click on Properties box on the bottom right (This is actually massage properties)
Right-click in the Internet Headers box

How to Do the Manually O365 Office Activation

noreply@blogger.com (Anonymous) — Thu, 14 Mar 2013 12:33:00 +0000

Option 01
Go to Control Panel->Clock,Language,and Region-> Regional and Language-> press the "Change system locale..." button.Set Current System locale to "English (United States)"

Go to Control Panel->Programs->Programs and Features->select "Microsoft Office Professional Plus 2010"->select "Change", then repair.

Option 02
Click start->run->type “CMD” and press OK to open Command Prompt, type “cd C:\Program Files\Common Files\Microsoft Shared\OFFICE14” and press “Enter”.

Run “OSAUI.exe /F”

How to Check Numbers of Activation happen on my O365 Office

noreply@blogger.com (Anonymous) — Thu, 14 Mar 2013 12:30:00 +0000

Click start->run->type “CMD” and press OK to open Command Prompt, type “cd C:\Program Files\Common Files\Microsoft Shared\OFFICE14” and press “Enter”.

Run “OSAUI.exe /R”

How to Remove Logon Temporary Profile from Windows

noreply@blogger.com (Anonymous) — Mon, 11 Mar 2013 10:04:00 +0000

Scenario: When you login Active Directory Profile, It’s loading temporary profile without loading my current Profile
i. Log on to the system by using an administrative user account other than the user account that is experiencing the problem.
ii. Back up all data in the current user's profile folder if the profile folder still exists, and then delete the profile folder. By default, the profile resides in the following location:
%SystemDrive%\Users\UserName
iii. Click Start, type regedit in the Start Search box, and then press ENTER.
iv. If you are prompted for an administrator password or for confirmation, type your password, or click Continue.
v. Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
vi. Under the ProfileList subkey, delete the subkey that is named SID.bak.
Note SID is a placeholder for the security identifier (SID) of the user account that is experiencing the problem. The SID.bak subkey should contain a ProfileImagePath registry entry that points to the original profile folder of the user account that is experiencing the problem.
vii. Exit Registry Editor.
viii. Log off the system.
ix. Log on to the system again.
Link you may refer to: A temporary profile is loaded after you log on to a Windows Vista-based system:http://support.microsoft.com/kb/947242 (Holds good for Windows 7) http://support.microsoft.com/kb/947215

How to Re-Size(Extend) Hard Disk using DiskPart Utility

noreply@blogger.com (Anonymous) — Sun, 10 Mar 2013 11:44:00 +0000

Scenario: In your virtual environment at the movement one hard disk volume almost full, you need to increase this hard disk capacity without effecting volume data, You can extend your hard disk size From any virtualization solution (VMware, Hyper-V)

Connect to DiskPart from command prompt

Run Command Prompt as Administrator

Note: Before you run the Extend command you must add additional capacity for this volume

C:\Documents and Settings\Administrator>diskpart

DISKPART>

DISKPART> list

DISK - Prints out a list of disks.

PARTITION - Prints out a list of partitions on the current disk.

VOLUME - Prints out a list volumes.

DISKPART> list volume

Volume ### Ltr Label Fs Type Size Status Info

---------- --- ----------- ----- ---------- ------- --------- --------

Volume 0 D Tran NTFS Partition 10 GB Healthy Pagefile

Volume 1 Y TRP NTFS Partition 480 GB Healthy

Volume 2 W LES NTFS Partition 1946 GB Healthy

Volume 3 E DOC NTFS Partition 550 GB Healthy

Volume 4 X CFC NTFS Partition 700 GB Healthy

Volume 5 B CD-ROM 0 B Healthy

Volume 6 I LEIS NTFS Partition 1434 GB Healthy

Volume 7 U IT NTFS Partition 350 GB Healthy

Volume 8 T PBP NTFS Partition 250 GB Healthy

Volume 9 Z MIT NTFS Partition 250 GB Healthy

Volume 10 C NTFS Partition 40 GB Healthy System

Select volume which you want Extend

DISKPART> select volume 7

Volume 7 is the selected volume.

DISKPART> extend

DiskPart successfully extended the volume.

How to install .NET Framework 3.5 on Windows 8

noreply@blogger.com (Anonymous) — Sat, 09 Mar 2013 15:13:00 +0000

Copy “sxs” folder (It’s in sources folder in Windows 8 operating System image: Eg: D:\sources\sxs) and paste it on root drive, C:\sxs

Open Command prompt as Administrator

And Copy and paste this command line and run

dism.exe /online /enable-feature /featurename:NetFX3 /Source
:c:\sxs /LimitAccess

Result as below

C:\Windows\system32>dism.exe /online /enable-feature /featurename:NetFX3 /Source :c:\sxs /LimitAccess

Deployment Image Servicing and Management tool

Version: 6.2.9200.16384

Image Version: 6.2.9200.16384

Enabling feature(s)

[==========================100.0%==========================]

The operation completed successfully.