Automation, AWS, Citrix, Cloud, CtxAdmTools, Microsoft, Virtualization, VMware and more...
Tuesday, July 31, 2007
MS: Loading Unsigned Drivers in Windows Vista
http://www.linchpinlabs.com/resources/atsiv/usage-design.htm
Saturday, July 28, 2007
MS: Request a Microsoft Hotfix online
https://support.microsoft.com/contactus2/emailcontact.aspx?scid=sw;en;1410&WS=hotfix
Thursday, July 26, 2007
MS: How To Obtain The Latest Update Rollup for Exchange 2007
http://support.microsoft.com/kb/937052
Monday, July 23, 2007
MS: How to Perform an Unattended Install of Windows XP
Contents:
- How to perform an unattended install of Windows XP
- Create a Basic Unattended CD Step by Step
- Create an Advanced Unattended CD Step by Step
- OEM Distribution Folders
- Add drivers to unattended setup
- The WINNT.SIF file for advanced unattended CD
- Install applications using the unattended setup
- Remove folders to save CD space
- WINNT.SIF Extra Switches
VMware: How to install Microsoft Windows 2008 Core on VMware Server
This document explain how to install Windows 2008 Core (Beta 3) on VMware Server.
Contents:
- Create a Virtual Machine for Windows 2008 Core
- Install VMware Tools
- Set or change the administrative password
- Change the screen resolution
- Configure the network card (IP Address, DNS, WINS, Firewall)
- Rename the server
- Join the machine a domain / Workgroup
- Remove the server from the domain
- Restart the computer
- Remote Desktop
- Windows Update
- System Properties
- Configure Pagefile
- Hotfix Management
- Applications Management
- Drivers Management
- Activate the server
- Services and Process Management
Friday, July 20, 2007
VMware: Change the Screen Resolution on Windows 2008 Core (on VMware Server)
1) Run regedit.exe on another computer to remotely access the registry on the Server Core.
2) Change manually.
The registry key with the resolution information is:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video
Under this key will be a list of GUIDs and you will need to determine which one corresponds to your video card/driver. Under the GUID, you can set:
\0000\DefaultSettings.XResolution
\0000\DefaultSettings.YResolution
For example: To change the resolution on a VMware Server, search for "Device Description"="VMware SVGA II"
To manually change resolution on a Windows 2008 Core server on the Command Prompt type:
reg export HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video /s video.reg
Then you will need to edit the video.reg, change the resolution (The values are on Hex), remove the rest of info and save the file.
This an example from VMware Server machine at 800x600:
---- Start Video800.reg ----
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Cofntrol\Video\{621060A6-5E79-471A-A468-DD745B2DD17C}\0000]"
DefaultSettings.XResolution"=dword:00000320
"DefaultSettings.YResolution"=dword:00000258
---- End Video800.reg ----
Finally at the command prompt type:
REG IMPORT Video800.reg
MS: Insufficient System Resources Exist to Complete the API Error
When you experience this problem, the hibernate feature is not available on the computer until you restart the computer.
This problem typically occurs when the computer uses 1 gigabyte (GB) or more of RAM.
http://support.microsoft.com/kb/909095
Thursday, July 19, 2007
MS: Windows 2003 SP2 SLP and Exchange Problems
http://msexchangeteam.com/archive/2007/07/18/446400.aspx
MS: SMS 2003 Product Documentation
http://go.microsoft.com/fwlink/?linkid=9502
Systems Management Server 2003 Concepts, Planning, and Deployment Guide
http://www.microsoft.com/technet/prodtechnol/sms/sms2003/cpdg
Systems Management Server 2003 Operations Guide
http://www.microsoft.com/technet/prodtechnol/sms/sms2003/opsguide
MS: Unattended Install DOSHERE.INF
--- Start DOSHERE.REG file ---
REGEDIT4
[HKEY_CLASSES_ROOT\Drive\Shell\cmd]@="Command Prompt Here"
[HKEY_CLASSES_ROOT\Drive\Shell\cmd\command]@="cmd.exe /k \"cd %L\""
[HKEY_CLASSES_ROOT\Directory\Shell\cmd]@="Command Prompt Here"
[HKEY_CLASSES_ROOT\Directory\Shell\cmd\command]@="cmd.exe /k \"cd %L\""
--- End DOSHERE.REG file ---
MS: Third-Party Solutions for SMS
MyITForum is the premier online destination for IT professionals responsible for managing their corporations’ Microsoft Windows systems; it is especially useful for IT professionals working with Microsoft Systems Management Server. (http://www.myitforum.com)
FAQshop endeavors to provide a “one-stop-shop” for systems management questions, answers, and utilities. (http://www.faqshop.com)
SMS Alliance is a consortium of companies that leverage joint resources to strengthen the capabilities and benefits of SMS. Their mission is to provide organizations with the best-of-breed solutions and services to enhance and extend SMS 2003. (http://www.sms-alliance.com)
1E is one of the founding members of the SMS Alliance, 1E is a company on the cutting edge of systems management. It enhances and extends Microsoft management and deployment technologies, delivering advanced automation and reporting across the enterprise. (www.1e.com)
Macrovision Corporation, another founding member of the SMS Alliance, Macrovision Corporation is a recognized leader in software deployment packaging, software installation, and software updating solutions. They offer one of the best software packaging tools with AdminStudio.
(http://www.macrovision.com/)
PS’SOFT, as a founding member of the SMS Alliance, offers extenders for SMS 2003 that focus on IT asset management. They offer a web-based software cataloging system called SMS Software Requests. (www.pssoft.com)
Vintela, another founding member of the SMS Alliance, Vintela offers a seamless solution to extend security and compliance of Microsoft Active Directory to Unix, Linux, and other platforms and applications. They offer solutions that help IT administrators manage Unix, Linux, and MAC systems using SMS 2003. Vintela is now part of Quest Software. (www.vintela.com)
iAnywhere, the last founding member of the SMS Alliance, iAnywhere offers frontline security and management to SMS and provides extensions to manage your enterprise’s mobile and wireless devices through SMS. (www.iAnywhere.com)
AppDeploy is the Internet resource to go to when you need to script or repackage an application for distribution. Among other points of interest at the site is a massive library of applications, sorted by application name and vendor name. For each application listed, you’ll find a community-based thread discussing the best practices, links, scripts, and challenges met/overcome with working with the application in regard to installation scripting/repackaging.(http://www.appdeploy.com/)
DesktopEngineer is perhaps one of the best resources in the Windows Installer arena. This site offers a wealth of information on Windows Installer technology, techniques, and troubleshooting tips. I have noticed that he is starting to increase the content related to Microsoft’s upcoming PowerShell scripting language. (http://www.desktopengineer.com/)
Tools
SMSView is a utility that is used to extend the functionality of the Microsoft Systems Management Server 2003 advanced client. SMSView allows you to perform the following actions on an SMS advanced client: All nonadmin users to view current mandatory assignments and advertisement status, View advertisement history (past 60 days), View current mandatory assignments, Rerun advertisements, Remote operations (remotely view and manage the SMS client), Display hardware/software inventory status, Display management point/proxy management point, Repair the SMS advanced client. (http://www.smsview.com/)
SMS 2003 Monster MOF is a MOF file that contains several new classes of MOF that will improve SMShardware inventory capabilities. The Monster MOF will enhance inventory data without requiring intimate knowledge of the SMS_DEF.MOF file. (www.smsexpert.com)
SMS 2003 Web Remote Tools assist SMS administrators and allow client administration from a web page. (http://www.myitforum.com/articles/19/view.asp?id=8662)
Corey Becht’s Right-Click Tools is one of the best set of tools for all SMS administrators. This tool allows you to right click on any collection or individual PC within the SMS Administrator console and initiate hardware inventory, reassign the site code, restart the SMS Agent Host service, rerun advertisements without modifying the advertisement, perform discovery, initiate software inventory, create file collections, monitor software metering usage, refresh machine policies, evaluate policies, update Windows installer sources,change port number, and change cache size.These tools can run per computer resource or for all the members of a collection.(www.myitforum.com/articles/8/view.asp?id=7099)
Microsoft SMS Toolkit 2: Microsoft released a very nice set of tools for SMS called the SMS Toolkit version 2 . It contains the following tools: IIS Lockdown 2.1 Template, URLScan 2.5 Template, Policy Spy, SMS Trace, Advanced Client and Management Point Cleaner, Advanced Client Spy, Policy Verifier, Send Schedule, Management Point Spy, Set Preferred Distribution Point and CAP, Delete Certificate, Patch Management Evaluation, Delete Group Class, Transfer SMS ID, Package Loader, Management Point Troubleshooter, Client Site Assignment Verifier, Site Boundary Tool, Create Secondary Site Tool, Create SMS Address Tool.(www.microsoft.com/smserver/downloads/2003/tools/toolkit.mspx)
Security Logon Audit Tool (SLAT) extends SMS hardware inventory to include user logon information.This data can be used in web reports and queries. The tool includes the following samplereports: Top users for all systems, User logon information for a specific computer, Systems where the last logged-on user is not the top user, Systems where a specific user has logged on SLAT searches the security event log for the 528 event, which is created when user logon events occur and is enabled via Group Policy. (http://www.systemcentertools)
Enhanced System and User Discovery Tools, out of the box, SMS 2003 does a pretty good job of discovering systems from Active Directory. It’s not perfect, though—there are a few gaps in its methods. The Enhanced System Discovery tool, assists in filling these gaps. Out of the box, SMS 2003 does not perform Windows NT 4 domain discovery. This tool solves that by enumerating all machines from a list of NT 4 domains, resolving their IP addresses from DNS or WINS, and creating data discovery records for each system. (http://www.systemcentertools/)
BITS Bandwidth Manager is an SMS Installer script that lets you throttle BITS bandwidthon Windows XP SP2 systems. You do not need to manually adjust any settings. The script takes care of the Registry key manipulation for you.(http://www.myitforum.com/inc/upload/11332BITSManager.zip)
1E SMSWakeUp: this WOL product is able to turn on computers after they have been shut down by users. The wake cycle can be triggered on a regular schedule to power up systems in preparation for the workday, or to perform software deployment activities. (http://www.1e.com/)
1E NightWatchman: Since we are talking about waking systems that have been shut down, it maybe a good practice to examine how best to shut down those systems in the first place. Why dowe want to shut down systems? We do this to enforce reboot cycles and to save energy costs. (http://www.1e.com/)
1E SMSNomad Branch: Some offices may not have the server hardware to allow for a Distribution Point (DP). But those offices may have a substantial number of users and/or be separated from the rest of the network by a low-speed or saturated WAN link, which you would rather not send multiple copies of a package across. SMSNomad Branch acts similar to a peer-to-peer network, allowing other computers to become DPs. If one machine is shutdown, another is selected as the DP. Included in this technology is multicast, increasing its efficiency to reduce network traffic on the local network segment. (http://www.1e.com/)
1E OSD Plus Pack: This is an enhancement to the SMS OSD Feature Pack. It allows you to leverage the SMS OSD Feature Pack in offices that do not have DPs. OSD Plus Pack offers similar functionality to SMSNomad Branch, but also has a few other applications bundledwith it: State Migration Editor, which is an interface for the User State Migration Tool, AppMigrator, which allows the automatic reinstallation of applications after OS imaging, PXE Lite, which is a local PXE server to allow deployment of OS images to bare-metalmachines booted from the network PXE server. (http://www.1e.com/)
SMS Companion 2006: This product provides WOL capabilities, similar to 1E’s SMSWakeUp, but leverages slightly different technologies behind the scenes. A key difference is that SMS Companion puts systems in hibernation, rather than powering them off. The following are some of the key applications included with this product:Wake-on-Schedule: Allows clients to come out of a hibernation state. Service Windows: Allows you to restrict the SMS inventory and software distributions from happening during specific time periods, to reduce or eliminate user interruptions. Load Balancing: Allows you to reduce peak network and SMS server loading by making sure that the clients use these resources in a controlled manner. (http://www.smsexpert.com/)
Quest Management Xtensions for SMS: Since Windows platforms are not the only systems in an enterprise, you may need a way tomanage other platforms, such as Unix, Linux, and Mac OS X. These management extensions offer that capability for SMS 2003. One of the unique aspects of this product is its support route: first-level support is handled by Microsoft Product Support Services. (http://www.quest.com/quest-management-xtensions-for-sms)
MS: Redirect Desktop or Favorites to a Different Disk or Folder
You will need to modify two registry keys:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Monday, July 16, 2007
MS: Exchange 2003 Change Password in OWA
http://support.microsoft.com/kb/297121
Saturday, July 14, 2007
VMware: Install Windows Vista x86 on ESX Server 3.0
2) Copy the IMG/ISO of Windows Vista and the Floppy drive image to the ESX host using Veeam FastSCP, or insert the DVD and a Floppy with the driver into the ESX host.
3) Connect the IMG/ISO file to the Windows Vista VM. Make sure the "Connected" is selected.
4) Power on the Windows Vista VM.
5) Vista install starts and then stops at a point where it can't find the CD/DVD driver. A pop-up with "Load Driver" as the title appears indicating that a required device driver at this point.
6) Connect the Floppy drive image (and ensure "Connected" is selected).
7) After ESX has attached the floppy drive, click on "Rescan".
8) Continue the Setup of Windows Vista.
9) Remove the floppy image from the VM or uncheck "Connected".
Download the Floppy Image with the CD-ROM Driver from http://sti.epfl.ch/intranet/informatique/virtualisation/drivers-vista-rtm-esx.flp.zip
Thursday, July 12, 2007
VMware: Veeam FastSCP for ESX Transfer Timeout
To fix this problem please check whether the EMC AAM Client is opened for outgoing connections. It should be open to get FastSCP 2.0 work.
(You can enable it through the VI client: Configuration->Security Profile->Properties)
VMware: Exchange Server 2003 Performance on VMware ESX Server 3
http://www.vmware.com/pdf/Virtualizing_Exchange2003.pdf
Wednesday, July 11, 2007
VMware: VMware Converter Runtime Error
Tuesday, July 10, 2007
VMware: SSH Access to ESX Server 3.0
1) The recommended way to access the system is to ssh to the server as a non-root user and then use the su command to switch to the root account; this leaves an audit trail for accountability purposes.
2) An alternative way to allow root access is to configure ssh to allow the root user to log in.
Edit the ssh configuration file:
* vi /etc/ssh/sshd_config
* Find PermitRootLogin and change to yes (use ESC, then Insert)
* Save the changes (ESC then :wq!)
* Restart the ssh daemon: service sshd restart
3) You can download Veeam RootAccess Wizard from http://www.veeam.com
Veeam RootAccess Wizard helps you to enable or disable remote root access, or create a regular non-root user account. The newly created non-root user will belong to the default ‘users’ group and will be automatically granted remote ssh access. Su or sudo commands can then be used to elevate to the root account for privileged operations.
Friday, July 06, 2007
MS Windows Licensing for 3rd Party Virtualization Platforms
http://download.microsoft.com/download/7/a/a/7aa89a8b-bf4d-446b-a50c-c9b00024df33/Windows_Server_2003_R2.docx
Microsoft Virtualization Solutions:
http://www.microsoft.com/windowsserversystem/virtualization/default.mspx
Licensing Microsoft Server Products with Virtual Machine Technologies (Brief):
http://download.microsoft.com/download/6/8/9/68964284-864d-4a6d-aed9-f2c1f8f23e14/virtualization_brief.doc
Licensing Microsoft Server Products with Virtual Machine Technologies (White Paper):
http://download.microsoft.com/download/6/8/9/68964284-864d-4a6d-aed9-f2c1f8f23e14/virtualization_whitepaper.doc
Multicore and Hyperthreading Processor Licensing:
http://download.microsoft.com/download/f/1/e/f1ecd771-cf97-4d98-9a1b-b86e3f24e08f/multicore_hyperthread_brief.doc
Step-up Licenses:
http://download.microsoft.com/download/a/6/9/a69a4aa0-717a-4f73-bbcd-9d7451fddbbc/stepup_license_v4.doc
Volume Licensing Glossary:
http://www.microsoft.com/licensing/resources/glossary.mspx
Volume Licensing Product Use Rights:
http://www.microsoftvolumelicensing.com/userights/PUR.aspx
Thursday, July 05, 2007
Script: Detect VirusScan Installed in a Remote Machine
rem * Change MachineName Here *
set machinename=192.168.1.100
rem * Change UsernmeName Here *
set username=Administrator
rem * Change Password Here *
set Password=Passw0rd
net use \\%MachineName%\C$ %Password% /USER:%Username%
psservice \\%machinename% query mcshield findstr /i "mcshield"
if not errorlevel 1 goto Installed
echo ** Virusscan NO installed **
goto VSEnd
:Installed
echo ** Virusscan 8.0 installed **
Goto VSEnd
:VSEnd
Remove HP Universal Print Monitor
HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\MONITORS
HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\Print\MONITORS\HP Universal Printing PCL5
HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\Print\MONITORS\HP Universal Print Monitor"
You can delete this key using this command in a script:
reg delete "HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\Print\MONITORS\HP Universal Print Monitor" /f
Wednesday, July 04, 2007
MS: Exchange 2007 IMAP4 Client Access Configuration
Set-service msExchangeIMAP4 -startuptype automatic
2.Configure IP Address and Port for IMAP4
a.To set the IP address and port for communicating with Exchange using IMAP4 with SSL, run the following command:
Set-IMAPSettings -SSLBindings: IPaddress:Port
b.To set the IP address and port for communicating with Exchange using IMAP4 with no encryption or Transport Layer Security (TLS) encryption:
Set-IMAPSettings -UnencryptedOrTLSBindings IPaddress:Port
3.Configure IMAP4 Authentication - IMAP4 (143) /IMAP4 SSL (993)
a.If you will not be using TLS encryption and you want to allow Basic authentication on an unsecured port, run the following command:
Set-IMAPSettings -LoginType PlainTextLogin
b.If you will not be using TLS, but you want to restrict Basic authentication to use only secured ports, run the following command:
Set-IMAPSettings -LoginType PlainTextAuthentication
c.If you want to use TLS encryption before authentication, run the following command:
Set-IMAPSettings -LoginType SecureLogin
4.Enable IMAP4 Protocol for the User Mailbox (Enabled by default)
Set-CasMailbox MailboxName -IMAPenabled:$true ($false disables the protocol for the specified user)
5.Configure the SMTP Receive Connector on the Exchange Server to Allow Anonymous in order to send Email using the following command:
Set-ReceiveConnector "Servername\default Servername" -PermissionGroups “ExchangeServers,ExchangeUsers,ExchangeLegacyServers,AnonymousUsers"
6.Restart the Microsoft Exchange IMAP4
ServiceRestart-service MSExchangeIMAP4
7. Check the status of the Microsoft Exchange IMAP4
ServiceGet-Service MSExchangeIMAP4
8.Dump the IMAP4 configuration
Get-IMAPSettings
Note: Remember do not use the Administrator account to test IMAP4, IMAP, SMTP.
MS: Exchange 2007 POP3 Client Access Configuration
Set-service msExchangePOP3 -startuptype automatic
2.Configure IP Address and Port for POP3
a.To set the IP address and port for communicating with Exchange using POP3 with SSL, run the following command:
Set-PopSettings -SSLBindings: IPaddress:Port
b.To set the IP address and port for communicating with Exchange using POP3 with no encryption or Transport Layer Security (TLS) encryption:
Set-PopSettings -UnencryptedOrTLSBindings IPaddress:Port
3.Configure POP3 Authentication - POP3 (110) /POP3 SSL (995)
a.If you will not be using TLS encryption and you want to allow Basic authentication on an unsecured port, run the following command:
Set-PopSettings -LoginType PlainTextLogin
b.If you will not be using TLS, but you want to restrict Basic authentication to use only secured ports, run the following command:
Set-PopSettings -LoginType PlainTextAuthentication
c.If you want to use TLS encryption before authentication, run the following command:
Set-PoPSettings -LoginType SecureLogin
4.Enable POP3 Protocol for the User Mailbox (Enabled by default)
Set-CasMailbox MailboxName -Popenabled:$true ($false disables the protocol for the specified user)
5.Configure the SMTP Receive Connector on the Exchange Server to Allow Anonymous in order to send Email using the following command:
Set-ReceiveConnector "Servername\default Servername" -PermissionGroups “ExchangeServers,ExchangeUsers,ExchangeLegacyServers,AnonymousUsers"
6.Restart the Microsoft Exchange POP3 Service
Restart-service MSExchangepop3
7. Check the status of the Microsoft Exchange POP3 Service
Get-Service MSExchangepop3
8.Dump the POP3 configuration
Get-PopSettings
Note: Remember do not use the Administrator account to test POP3, IMAP, SMTP.
Tuesday, July 03, 2007
MS: Terminal Server Printer Redirection Wizard Tool
The Terminal Server Printer Driver Redirection Wizard will help you troubleshoot and replace print drivers that were unsuccessfully redirected. This tool automates the process found in the Microsoft Knowledge Base article KB239088 entitled “Windows 2000 Terminal Services Server Logs Events 1111, 1105, and 1006”. http://support.microsoft.com/?id=239088
This tool will scan a server’s System Event Log and detect all events with Event ID 1111 and Source ‘TermServDevices.’ These events occur when a client machine has a printer driver that the Terminal Server does not recognize.
You can download the tool here
CTX: Event 39 - The CDM redirector has timed out a request to SessionID XX
Source: CdmEvent
Category: NoneEvent
ID: 39
Date: 03/07/2007
Time: 5:07:34
User: N/A
Computer: SERVER
Description: The CDM redirector has timed out a request to SessionID XX.
This can happen when an application is attempting to access a client device during a disconnect. Check Citrix Server Administration when you see this event appear.
The best way to determine what client device is causing this issue is to turn off client device mapping (client drive, client COM ports, client printers).
Enable them one at a time and monitor the client's logon process.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdm\Parameters
Increase the settings for the following:
RequestTimeout: Default is 60 (seconds)
DirCacheTimeout: Default is 30 (seconds)
CacheTimeout: Default is 60 (seconds)
Incresea these timeout x 2 or x3 (registry example)
--- Start Registry File ---
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdm\Parameters]
"CacheTimeout"=dword:000000b4
"DirCacheTimeout"=dword:0000005a
"RequestTimeout"=dword:000000b4
--- End Registry File ---