Tech Notes

HP 1910 Advanced CLI

2016-05-25T11:30:00.001-05:00

To access the switch advanced CLI at console type:
_cmdline-mode on
pass: 512900
type - ? to see available advanced commands.

Check Windows Updates

2016-05-17T16:57:00.000-05:00

sometimes you need to check does a server has a update, here the powershell script:
param ($myServer,$myHotFix)
$kb=$false
$myKBs=icm $myServer {get-hotfix}
foreach ($item in $myKBs)
{
    if ($item.HotFixId -eq $myHotFix){
        $item
        $kb=$true}
}
if ($kb -eq $false) {write "No such KB"}

It can be checked from one line:
icm "servername" {get-hotfix|where {$_.HotFixId -eq "KBnumber"}}

Exchange 2013 DAG index problem

2016-05-17T15:43:00.000-05:00

At my customer DAG database indexes get sometimes failed or "failedandsuspended" status.
Solution was: https://support.microsoft.com/en-us/kb/2807668
So, I created the AD group "ContentSubmitters" in "Microsoft Exchange Security Groups" OU with security:
"Network service", "Domain Admins", "Administrators" - Full Control
Propagated through AD DCs, Restarted "Microsoft Exchange Search" and "Microsoft Exchange Search Host Controller" services on all servers in the DAG.
It will take time to settle down, during the time active databases might be moved between servers by the process.

Can't deploy RDS services

2016-05-11T13:21:00.000-05:00

On new 2012 R2 server cannot deploy RDS (Quick start) option. The installation times out.
The problem was - in the customer AD GPO (in my case "Default Domain Policy" differed from original default version) did not include under (Computer Configuration - Policies - Windows Settings - Security Settings - Local Policies/User Rights Assignment - Log on as a service) "NT Service\ALL SERVICES" account. The account is needed to configure "Windows Internal Database" service. By default the service running under "NT SERVICE\MSSQL$MICROSOFT##WID" account and if the account does not have rights for logon the service will fail to start.

Install .Net 3.5 on Windows 2012 R2 server

2016-02-08T17:25:00.001-05:00

To install .Net 3.5 on Windows 2012 R2 server you need to mount Windows 2012 R2 dvd and point installation on "dvd"\sorce\sxs directory - in Powershell it will be like this:

Add-WindowsFeature NET-Framework-Core -Source d:\sources\sxs

Make-USB-Bootable

2016-02-02T17:08:00.000-05:00

# Before running the script check USB key disk number with get-disk command, run the script from

# elevated shell

# tested only on Powershell version 5.

# after you can use robocopy to copy whatever you want to boot, the command options will be:

# robocopy "source" "destination" /mir /xd "System Volume Information" "$Recycle.bin"

param($disk_number,$DriveLetter)

Clear-Disk -Number $disk_number -RemoveData

New-Partition -DiskNumber $disk_number -UseMaximumSize -IsActive -DriveLetter $DriveLetter

Format-Volume –FileSystem NTFS –DriveLetter $DriveLetter

set-location $env:windir\system32

.\bootsect.exe /NT60 ($DriveLetter+":")

Dismount VM's DVD on Hyper-V Cluster

2016-01-28T15:01:00.001-05:00

$myNodes="node1","node2","node3"
foreach ($node in $myNodes)
{
    $dvd=get-vm -ComputerName $node |Get-VMDvdDrive
    foreach ($item in $dvd)
    {
        if ($item.path -ne $null)
        {
            $myDVD=[array]$myDVD+$item
        }
    }
    Foreach ($item in $myDVD)
    {
        Set-VMDvdDrive $item -path $null
    }
}

Powershell script to copy selected directories with use of robocopy

2013-10-23T16:06:00.002-05:00

#The script to Archive files from one share to another depending from the file last write time (preserving the source directory structure and security)

$mySourceRoot="source directory"

$myDestRoot="destination directory"

set-location $mySourceRoot

$myDir=Get-ChildItem

$mySortDir=@()

foreach ($arg in $myDir)

{

$myType=$arg.GetType()

#write $arg.LastWriteTime

if ($mytype.Name -eq "DirectoryInfo")

{

if ($arg.LastWriteTime -lt (get-date 2009-01-01))

{

write $arg.Name $arg.lastWritetime

$mySortDir=$mySortDir+$arg

}

set-location c:\windows\system32

foreach ($arg in $mySortDir)

{

$myPath=$arg.FullName

$myDestPath=$myPath.Replace($mySourceRoot,$myDestRoot)

.\robocopy.exe $myPath $myDestPath /mir /sec /r:0 | Out-Null

}

Error 12339 and 12344 on Windows 2012 servers

2013-07-31T11:44:00.003-05:00

12339
File Server Resource Manager failed to find the claim list 'Global Resource Property List' in Active Directory (ADsPath: LDAP://vhost01.iec.local/CN=Global Resource Property List,CN=Resource Property Lists,CN=Claims Configuration,CN=Services,CN=Configuration,DC=xxx,DC=local). Please check that the claims list configured for this machine in Group Policy exists in Active Directory.
12344
File Server Resource Manager finished syncing claims from Active Directory and encountered errors during the sync (0x80072030, There is no such object on the server.
). Please check previous event logs for details.
Solution:
Upgraded AD Schema to Windows 2012 (version 56).

DHCP on server 2012 cluster

2013-06-26T16:48:00.000-05:00

I had a problem with authorization of DHCP server on server 2012 Cluster. The server have teamed adapters with Convergent Switch (I am not sue it was a problem), So then I try to authorize the server it cannot fully authorized (meaning it still think it is not authorized despite if you try to see authorized server you will see it, but with a bogus IP), and object in AD has the bogus IP address like 250.0.0.1. In event log I have the error:

Log Name: System

Source: Microsoft-Windows-DHCP-Server

Date: 6/26/2013 2:32:31 PM

Event ID: 1046

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: computername

Description:

The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain domainname, has determined that it is not authorized to start. It has stopped servicing clients. The following are some possible reasons for this:

So I went to "ADSI Edit" found the object and change IP address in dhcpServers "Attribute Editor" to Real one:

After that just restart the DHCP server.

Mscorsvw.exe using 50 % of my CPU

2013-02-06T09:45:00.000-05:00

mscorsvw.exe is precompiling .NET assemblies in the background. Once it's done, it will go away. To speed up the process run:

ngen.exe executequeueditems

From C:\Windows\Microsoft.NET\Framework64\v4.0.30319 or different .NET installation directory accordingly.
I had the problem on Windows 2012 server with RDS session configuration.

The WS-Management Service cannot process the request

2013-01-17T17:24:00.002-05:00

Exchange 2010 sp2 try to run PowerSheel:
fix:
Recycle MSExchangePowerShellAppPool in IIS.

Windows 8 Enterprise (technet) activation

2012-10-25T22:57:00.001-05:00

Windows Key + R
type "SLUI 3" no quotes

enter your key
Done.

Windows 7 Folder Redirection rename the Home folder in "My Documents

2012-10-17T15:19:00.001-05:00

PowerShell script to fix the problem:
$myLocations="\\share1\allusers","\\share2\users","\\pshare3\AdminUsers"

foreach ($loc in $myLocations)
{

    set-location $loc
    $items=Get-ChildItem
    foreach ($item in $items)
    {
      if ($item.getType().name -like "DirectoryInfo")
      {
          cd $item.name
          if (test-path desktop.ini) {del .\desktop.ini -force}
          cd ..
      }
    }
}

PowerShell - get users from OU

2012-09-28T14:58:00.000-05:00

$ulist=get-aduser -filter * -SearchBase "ou=?,dc=?,dc=?"
foreach ($user in $ulist)
{
$user.samaccountname
add-content -path c:\temp\?.csv $user.samaccountname
}

SharePoint Search problem after migration

2012-08-15T11:12:00.000-05:00

After migrating from WSS 3.0 to Foundation 2010 cannot search inside a document.
Basically it shows in the document property "Pending", so the document waiting for approval.
Created a small PowerShell script to approve all documents on a site:
________________________________________________________________________

$mySite=Get-SPSite "http://yoursite"

$myWebSub=$mySite.AllWebs

foreach ($myWeb in $myWebSub)

{

$myWeb=Get-SPWeb $myWeb.url

$myWeb.url

$myLIb=$myWeb.lists|where {($_.BaseTemplate -eq "DocumentLibrary")}

foreach ($lib in $myLib)

{

$lib.Title

$myDocs=$lib.Items

foreach ($doc in $MyDocs)

{

$doc.name # only for information

$doc.file.level # only for information

if (($doc.file.level -eq "Draft") -or ($doc.file.level -eq "Pending")){$doc.file.Approve("script")}

$doc.file.level # only for information

}

Remove last (single) Lync 2010 server manually

2012-06-28T14:18:00.000-05:00

Problem: What ever you do, you can not change first pool name, it can come back despite you uninstall the server, deleted databases and so on.

Solution:

Remove the server application and databases and related directories from the server.

Use ADSI to delete all highlighted subkeys, except subkeys under CN=Pools

After deletion it should looks like this:

SharePoint 2010 FBA Login and SSL

2012-06-28T13:36:00.000-05:00

The problem was - users don't want to chose options in between FBA login and NTLM login.

First: User who is FBA user should see only FBA Login dialog and AD users want to login transparently, then they on LAN and already authenticated.

Second: Then you login using standard SharePoint FBA login page, it shows you red alert about - user name and password will be send in clear text over the connection.

Solutions:

Instead creating AAM we need to extend web application:

For example - create a web application with CBA (Claim Based Authentication) with NTLM and FBA providers. - name it MYTEST on port 80 - http://mytest . It will be default zone.
Give at least one FBA user full access to the site. Extend the web application as http://mytest.mydomain.com on port 80 with only FBA providers. It will be Extranet zone.

For configuring SSL access (to remove red alert from FBA login page):

Go to AAM collection for the web application and edit http://mytest.mydomain.com to https://mytest.mydomain.com

Add binding in IIS to https (you need to link Public SSL certificate to http://mytest.mydomain.com).

For the certificate - Wild card certificate can be used.

Sharepoint Foundation 2010 FBA and NTLM (no web.config edit)

2012-05-02T14:41:00.002-05:00

Here some of my experience with SharePoint Foundation 2010 installation and NTLM with FBA configuration on Windows 2008 R2 sp1 platform. Farm configuration - one Front end and one Back end SQL 2008 R2 server. I did not manually edit any web.config files.

Windows 2008 r2 installation on hyper-v virtual machine on Windows 2008 R2 cluster.
SharePoint foundation 2010 prerequisite installation on Windows 2008 r2 server.
SharePoint foundation 2010 installation.
Service pack 1 for SharePoint foundation 2010 installation.
Check if sp1 installation was successful.
Create FBA user database.
Configure additional SharePoint services for start.
Configure IIS for FBA.
Create SharePoint Web application, configure the Web application and IIS (web application site) for Claim Based Authentication (NTLM and FBA).
Provision FBA roles and users, give FBA user access rights to the Web application.
Test the solution.

Disclaimer: It is not "Best practices" - only the notes for myself.

Windows 2008 r2 installation on hyper-v virtual machine on Windows 2008 R2 cluster.

Nothing special during the installation, but my advise do not use templates and install it from ISO Windows 2008 R2 installation disk. Choose the simple server name no more then 8 char and no special chars, if possible. In case if something wrong, it can make easy the troubleshooting.

SharePoint foundation 2010 prerequisite installation on Windows 2008 r2 server.

Run SharePoint Foundation 2010 setup and go to "Install software prerequisites". Only one note - after first run exit the setup and run "Install software prerequisites" second time to be sue nothing from prerequisites is missing.

SharePoint foundation 2010 installation.

Before installation create one AD account with "Domain Admin" rights and DBO rights to SQL server (the rights assigned to this account can be more restrict, but for small business with small IT staff it is not so important). The account will be used for IIS Application Pools, site administrators, search and etc. Run the installation - Choose Server Farm button (in my case I have two servers in the farm). Run Configuration Wizard.

Service pack 1 for SharePoint foundation 2010 installation.

Download and install SharePoint Foundation sp1. Check if sp1 installation was successful.

Check "Install Status" and "Status" (for datatbases) column , if the status is not installed or update required, you need to run psconfig:

1. Open an Administrative command prompt.
2. Change directory to C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN
3. Run -

PSConfig.exe -cmd upgrade -inplace b2b -force -cmd applicationcontent -install -cmd installfeatures

The above from:
http://blogs.technet.com/b/sbs/archive/2011/07/06/potential-issues-after-installing-sharepoint-foundation-2010-sp1.aspx

Create FBA user database.

Create the database from .NET scrip, from Technet Blog - Raymundo Vale

Create SQL FBA database to store non-Windows domain users

Open the ASP.Net wizard and creating the database which will store non-Windows domain users for your extranet access:
-          Go to the path: C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
-          Choose “Configure SQL Server for application services”
-          Type the SQL Server name you want. You don’t have to use the SharePoint database server
-          Keep Windows Authentication as default
-          Use “Default” or type the database name you will create at the end of the process

The first time you create the ASP.NET database you have to choose Windows Authentication and create or USE an existing database*

-          Just confirm the settings and that’s it for this part

*You can create a new ASP.NET database to store new users or you ALSO use the one you already have in your MOSS2007, just make sure you are having the correct permissions over the migrated database to the new SQL Login you already created in steps before.

Configure additional SharePoint services for start.

Check those services Status and start services according the list above.

Configure IIS for FBA.

I will use only GUI to configure FBA on the server. Open IIS Manager and Add Connection string to your SQL server Membership database at Root of IIS (it will be inherited all the way down):

It should looks like this:

Add Providers in "SharePoint Central Administration Site", First .NET Roles:

Default Provider should be AspNetSqlRoleProvider for this site:

Second .NET Users:

Default Provider can be FBAMembershipProvider for this site, you can change default provider in .NET Users and .NET Roles (but I do not think it is important maybe only for testing Membership database connection):

Do the same for SecurityTokenServiceApplication Site, but do not change Default Providers.

Create SharePoint Web application, configure the Web application and IIS (web application site) for Claim Based Authentication (NTLM and FBA).

Create Web application in Central Administration:

Configure IIS for the Web Application:

Provision FBA roles and users - add or change users or roles (the database must have at least one role configured) we can temporary change default provider for this Web Application or create a Web Application just for that purpose and do it there.

Give FBA user access rights to the Web application.

Test the solution.

Powershell script to enumerate SMTP addreses and alieses

2012-04-06T14:44:00.000-05:00

I used the script to collect the information from Exchange 2003 for migration to Exchange 2010, but it can be used for collecting the information from Exchange 2010 (but it can be easy done with Poweshell snapin for Exchange). For setup PowerShell environment for Exchange 2010 you can try my blog page powershell-ms-exchange-part1.
To view the script click on "Read More"

#        Name: AD-seacher.ps1
#      Author: Boris Sirotin   - bsirotin.blogspot.com
#        Date: 03/06/2012
# Description: Exchange 2003 enumeration of SMTP addresses and aliases and
#               created CSV file with headers:
#        Logon Name,Other Name,Mail Address
# Log Name - is AD logon name, Other name - we will use it if no Log name found
# for example if the object is Contact, Mail Address - SMTP address
#
#

#create a CSV log file with file name format like 2012-03-06T14 year-mounth-day-time of the day (hours)
Function do-LogFile ($myLogPath){
    $d=get-date
    $myLogDate=$d.tostring("s").Split(":")[0]
    if (!(Test-Path $myLogPath)){New-Item -type directory -path $myLogPath}
    $script:myLogFile=$myLogPath + "\SMTP-addr-" +$myLogDate + ".csv"

    New-Item -type file -path $myLogFile -Force

    $myHeader="Logon Name,Other Name,Mail address"
    add-content -path $myLogFile -Value $myHeader
}
do-logFile "c:\temp"

# the most tricky part Searching of AD ref: - http://technet.microsoft.com/en-us/library/ff730967.aspx

$strFilter = "(&(objectCategory=User))"

$objDomain = New-Object System.DirectoryServices.DirectoryEntry

$objSearcher = New-Object System.DirectoryServices.DirectorySearcher
$objSearcher.SearchRoot = $objDomain
$objSearcher.PageSize = 1000
$objSearcher.Filter = $strFilter
$objSearcher.SearchScope = "Subtree"

# you can get different attributes from ADSI manager, if you want to enumerate different
# objectCategory
$colProplist = "sAMAccountName", "name", "proxyAddresses"

foreach ($i in $colPropList){$objSearcher.PropertiesToLoad.Add($i)}

$colResults = $objSearcher.FindAll()

foreach ($objResult in $colResults) {
     $objItem = $objResult.Properties
     $mySAMname=$objItem.samaccountname   #case aware you need to type in low case
     $myName=$objItem.name                #case aware you need to type in low case
     $myAddresses=$objItem.proxyaddresses #case aware you need to type in low case

     foreach ($addr in $myAddresses) {
        if ($myAddresses.Count -ne $NULL) {
            if ($addr -notlike "X400*") {
                [string]$strAddr=$addr # convert object to string to avoid extra cartridge return in output
                [string]$strSAMname=$mySAMname
                [string]$strName=$myName
                if (!$mySamName) {$strSamName="None"} #put None in CSV file if no Logon name.
                $mycontent=$strSAMname + "," + $strName + "," + $strAddr
                add-content -path $myLogFile -Value $myContent
            }
        }
    }
}

Users on specific mailbox server could not access Public folders from Outlook

2012-03-23T16:13:00.001-05:00

Exchange 2010 sp2 environment was upgraded from Exchange 2003. Users on specific mailbox server cannot access Public Folders through Outlook but can with OWA.
Check those setting on the mailbox database where users with the problem belongs:
I

It should point to a mailbox database on a Exchange 2010 MBX server instead Exchange 2003.

RESOLVED: The WS-Management service cannot process the request.

2012-03-09T13:42:00.000-05:00

From: http://jasonshave.blogspot.com/2011/01/resolved-ws-management-service-cannot.html

RESOLVED: The WS-Management service cannot process the request. The user load quota of 1000 requests per 2 seconds has been exceeded. Send future requests at a slower rate or raise the quota for this user. The next request from this user will not be approved for at least Z milliseconds.

I did some digging around for this one and found a few crafty articles about adjusting throttling policies using PowerShell and making changes through ADSIEdit (http://reidablog.blogspot.com/). However, none of these seemed to fix my issue.

We had a newly built Exchange 2010 SP1 server which was ready to go into production but kept throwing the error when attempting to use PowerShell. Two other servers appeared to be running fine.

The server had recently received a new SSL certificate using the Exchange 2010 certificate provisioning and assignment process in the GUI. Unfortunately the IIS service hadn't been restarted yet and the URL used for remote PowerShell was using a certificate which wasn't trusted or valid anymore.

A quick "IISRESET" on the server resulted in my fix.

Exchange 2003 Powershell - Mailbox size

2012-03-04T20:56:00.000-05:00

Really good script:

# Author: Steven Peck - #">www.blkmtn.org

# Date: 06/15/2007

# Description: Exchange 2003 output to file

# Display Name, Store, Storage group, MB Size, and Date Absent in DS

# Changed by Boris Sirotin 3/4/2012 to include external parameters for possible 3 exchange servers

#The syntax will be: .\thescriptname server01 server02 server03

# Get date for file name

param ($server01,$server02,$server03)

$day = Get-Date -UFormat "%Y%m%d"

# Gets data through WMI from specified Exchange mailbox servers

$computers = $server01, $server02, $server03

#

foreach ($computer in $computers) {

Get-Wmiobject -namespace root\MicrosoftExchangeV2 -class Exchange_Mailbox -computer $server01 | sort-object -desc MailboxDisplayName `

| select-object MailboxDisplayName,StorageGroupName,StoreName,Size,DateDiscoveredAbsentInDS | Export-Csv -Path c:\temp\$computer-$day.csv

}

PowerShell Exchange 2010 prerequisite script

2012-02-29T17:12:00.004-05:00

Very good script for Exchange 2010 features installation:
http://www.ehloworld.com/152

PRTG upgrade

2012-02-29T11:26:00.005-05:00

When you try to upgrade PRTG from version 9.1 to 9.2, if the upgrade fail - you will need to clear "Read only" attribute on "c:\Program Files (x86)\PRTG Network Monitor\website folder"