Guillermo Musumeci Blog

Thursday, September 27, 2007

CTX: Enable USB Memory Stick on Citrix Presentation Server

Symptoms:
When connecting a USB memory stick to a system prior to starting an ICA session, the drive is not mapped in the ICA session.

Cause:
The USB memory stick is detected as a Device with Removable Storage rather than a local hard disk device.

Refer to the following note: http://support.citrix.com/article/CTX112315

Thursday, September 20, 2007

SCRIPT: Reset Permissions on a Folder

First you will need to download xcacls.exe from Microsoft.

Then you will to run this command:

xcacls "D:\DATA" /t /g "CREATOR OWNER":F "SYSTEM":F "Domain Admins":F "Domain Users":C

This example will reset all permissions on the D:\DATA folder and assign Full Permissions(F) to CREATOR OWNER, SYSTEM and Domain Admins and Change Permissions(C) to Domain Users.

Monday, September 10, 2007

40+ Ways To Access Your Computer Remotely

http://mashable.com/2007/09/07/remote-access

Tuesday, September 04, 2007

MS: SMS 2003 Technical Notes

Thursday, August 30, 2007

MS: Ports That SMS 2003 Uses To Communicate Through A Firewall

This article lists the ports that Microsoft Systems Management Server (SMS) 2003 uses to communicate through a firewall or through a proxy server.

http://support.microsoft.com/kb/826852

Wednesday, August 22, 2007

MS: SQL Server Login Failed for SMS 2003 Secondary Site server account

Error Message:

Event Type: Failure
AuditEvent Source: MSSQLSERVER
Event Category: (4)
Event ID: 18456
Date: 22/08/2007
Time: 13:18:24
User: SMSDEMO\GMPIL-SMS2$
Computer: GMPIL-SMS1
Description:Login failed for user 'SMSDEMO\GMPIL-SMS2$'. [CLIENT: 192.168.179.102]

MSSQLSERVER 18456 Login failed for user SMS 2003

Solution:

Add the computer account of the Secondary Site server to the SMS_SiteSystemToSQLConnection_ local group on the Primary Site server.
This allows the Secondary Site server to access the Primary Site server's SQL database.

Tuesday, July 31, 2007

MS: Loading Unsigned Drivers in Windows Vista

Atsiv is a command line tool that allows the user to load and unload signed or unsigned drivers on 32 and 64 bit versions of Windows XP, Windows 2003 and Windows Vista. Atsiv is designed to provide compatibility for legacy drivers and to allow the hobbyist community to run unsigned drivers without rebooting with special boot options or denial of service under Vista.

http://www.linchpinlabs.com/resources/atsiv/usage-design.htm

Saturday, July 28, 2007

MS: Request a Microsoft Hotfix online

Now you now can obtain a hotfix without having to call Microsoft Support

https://support.microsoft.com/contactus2/emailcontact.aspx?scid=sw;en;1410&WS=hotfix

Thursday, July 26, 2007

MS: How To Obtain The Latest Update Rollup for Exchange 2007

This article describes how to obtain the latest update rollup for Microsoft Exchange Server 2007. Update rollups are a common way to distribute Exchange 2007 fixes (Hotfix) and Exchange 2007 modifications. You can install the latest update rollup to help keep the product up to date.

http://support.microsoft.com/kb/937052

Monday, July 23, 2007

MS: How to Perform an Unattended Install of Windows XP

This document explain how to Perform an Unattended Install of Windows XP

Contents:

How to perform an unattended install of Windows XP
Create a Basic Unattended CD Step by Step
Create an Advanced Unattended CD Step by Step
OEM Distribution Folders
Add drivers to unattended setup
The WINNT.SIF file for advanced unattended CD
Install applications using the unattended setup
Remove folders to save CD space
WINNT.SIF Extra Switches

Download the document in PDF format here

VMware: How to install Microsoft Windows 2008 Core on VMware Server

How to install Microsoft Windows 2008 Core (Beta 3) on VMware Server

This document explain how to install Windows 2008 Core (Beta 3) on VMware Server.

Contents:

Create a Virtual Machine for Windows 2008 Core
Install VMware Tools
Set or change the administrative password
Change the screen resolution
Configure the network card (IP Address, DNS, WINS, Firewall)
Rename the server
Join the machine a domain / Workgroup
Remove the server from the domain
Restart the computer
Remote Desktop
Windows Update
System Properties
Configure Pagefile
Hotfix Management
Applications Management
Drivers Management
Activate the server
Services and Process Management

Download the document in PDF format here

Friday, July 20, 2007

VMware: Change the Screen Resolution on Windows 2008 Core (on VMware Server)

To change the screen resolution on a Windows 2008 Core you have two choices:

1) Run regedit.exe on another computer to remotely access the registry on the Server Core.

2) Change manually.

The registry key with the resolution information is:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video

Under this key will be a list of GUIDs and you will need to determine which one corresponds to your video card/driver. Under the GUID, you can set:

\0000\DefaultSettings.XResolution
\0000\DefaultSettings.YResolution

For example: To change the resolution on a VMware Server, search for "Device Description"="VMware SVGA II"

To manually change resolution on a Windows 2008 Core server on the Command Prompt type:

reg export HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video /s video.reg

Then you will need to edit the video.reg, change the resolution (The values are on Hex), remove the rest of info and save the file.

This an example from VMware Server machine at 800x600:

---- Start Video800.reg ----
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Cofntrol\Video\{621060A6-5E79-471A-A468-DD745B2DD17C}\0000]"

DefaultSettings.XResolution"=dword:00000320
"DefaultSettings.YResolution"=dword:00000258

---- End Video800.reg ----

Finally at the command prompt type:

REG IMPORT Video800.reg

MS: Insufficient System Resources Exist to Complete the API Error

The computer occasionally does not hibernate and you receive an "Insufficient System Resources Exist to Complete the API" error message in Windows XP with Service Pack 2, in Windows XP Tablet PC Edition 2005, or in Windows XP Media Center Edition 2005

When you experience this problem, the hibernate feature is not available on the computer until you restart the computer.

This problem typically occurs when the computer uses 1 gigabyte (GB) or more of RAM.

http://support.microsoft.com/kb/909095

Thursday, July 19, 2007

MS: Windows 2003 SP2 SLP and Exchange Problems

Windows 2003 SP2 Scalable Networking pack and its possible effects on Exchange
http://msexchangeteam.com/archive/2007/07/18/446400.aspx

MS: SMS 2003 Product Documentation

Systems Management Server 2003 Product Documentation
http://go.microsoft.com/fwlink/?linkid=9502

Systems Management Server 2003 Concepts, Planning, and Deployment Guide
http://www.microsoft.com/technet/prodtechnol/sms/sms2003/cpdg

Systems Management Server 2003 Operations Guide
http://www.microsoft.com/technet/prodtechnol/sms/sms2003/opsguide

MS: Unattended Install DOSHERE.INF

To unattended install the nice tool from PowerToys DOSHERE.INF you will need to create a new registry file and run using REGEDIT /S DOSHERE.REG

--- Start DOSHERE.REG file ---

REGEDIT4
[HKEY_CLASSES_ROOT\Drive\Shell\cmd]@="Command Prompt Here"
[HKEY_CLASSES_ROOT\Drive\Shell\cmd\command]@="cmd.exe /k \"cd %L\""
[HKEY_CLASSES_ROOT\Directory\Shell\cmd]@="Command Prompt Here"
[HKEY_CLASSES_ROOT\Directory\Shell\cmd\command]@="cmd.exe /k \"cd %L\""

--- End DOSHERE.REG file ---

MS: Third-Party Solutions for SMS

Web Sites:

MyITForum is the premier online destination for IT professionals responsible for managing their corporations’ Microsoft Windows systems; it is especially useful for IT professionals working with Microsoft Systems Management Server. (http://www.myitforum.com)

FAQshop endeavors to provide a “one-stop-shop” for systems management questions, answers, and utilities. (http://www.faqshop.com)

SMS Alliance is a consortium of companies that leverage joint resources to strengthen the capabilities and benefits of SMS. Their mission is to provide organizations with the best-of-breed solutions and services to enhance and extend SMS 2003. (http://www.sms-alliance.com)

1E is one of the founding members of the SMS Alliance, 1E is a company on the cutting edge of systems management. It enhances and extends Microsoft management and deployment technologies, delivering advanced automation and reporting across the enterprise. (www.1e.com)

Macrovision Corporation, another founding member of the SMS Alliance, Macrovision Corporation is a recognized leader in software deployment packaging, software installation, and software updating solutions. They offer one of the best software packaging tools with AdminStudio.
(http://www.macrovision.com/)

PS’SOFT, as a founding member of the SMS Alliance, offers extenders for SMS 2003 that focus on IT asset management. They offer a web-based software cataloging system called SMS Software Requests. (www.pssoft.com)

Vintela, another founding member of the SMS Alliance, Vintela offers a seamless solution to extend security and compliance of Microsoft Active Directory to Unix, Linux, and other platforms and applications. They offer solutions that help IT administrators manage Unix, Linux, and MAC systems using SMS 2003. Vintela is now part of Quest Software. (www.vintela.com)

iAnywhere, the last founding member of the SMS Alliance, iAnywhere offers frontline security and management to SMS and provides extensions to manage your enterprise’s mobile and wireless devices through SMS. (www.iAnywhere.com)

AppDeploy is the Internet resource to go to when you need to script or repackage an application for distribution. Among other points of interest at the site is a massive library of applications, sorted by application name and vendor name. For each application listed, you’ll find a community-based thread discussing the best practices, links, scripts, and challenges met/overcome with working with the application in regard to installation scripting/repackaging.(http://www.appdeploy.com/)

DesktopEngineer is perhaps one of the best resources in the Windows Installer arena. This site offers a wealth of information on Windows Installer technology, techniques, and troubleshooting tips. I have noticed that he is starting to increase the content related to Microsoft’s upcoming PowerShell scripting language. (http://www.desktopengineer.com/)

Tools

SMSView is a utility that is used to extend the functionality of the Microsoft Systems Management Server 2003 advanced client. SMSView allows you to perform the following actions on an SMS advanced client: All nonadmin users to view current mandatory assignments and advertisement status, View advertisement history (past 60 days), View current mandatory assignments, Rerun advertisements, Remote operations (remotely view and manage the SMS client), Display hardware/software inventory status, Display management point/proxy management point, Repair the SMS advanced client. (http://www.smsview.com/)

SMS 2003 Monster MOF is a MOF file that contains several new classes of MOF that will improve SMShardware inventory capabilities. The Monster MOF will enhance inventory data without requiring intimate knowledge of the SMS_DEF.MOF file. (www.smsexpert.com)

SMS 2003 Web Remote Tools assist SMS administrators and allow client administration from a web page. (http://www.myitforum.com/articles/19/view.asp?id=8662)

Corey Becht’s Right-Click Tools is one of the best set of tools for all SMS administrators. This tool allows you to right click on any collection or individual PC within the SMS Administrator console and initiate hardware inventory, reassign the site code, restart the SMS Agent Host service, rerun advertisements without modifying the advertisement, perform discovery, initiate software inventory, create file collections, monitor software metering usage, refresh machine policies, evaluate policies, update Windows installer sources,change port number, and change cache size.These tools can run per computer resource or for all the members of a collection.(www.myitforum.com/articles/8/view.asp?id=7099)

Microsoft SMS Toolkit 2: Microsoft released a very nice set of tools for SMS called the SMS Toolkit version 2 . It contains the following tools: IIS Lockdown 2.1 Template, URLScan 2.5 Template, Policy Spy, SMS Trace, Advanced Client and Management Point Cleaner, Advanced Client Spy, Policy Verifier, Send Schedule, Management Point Spy, Set Preferred Distribution Point and CAP, Delete Certificate, Patch Management Evaluation, Delete Group Class, Transfer SMS ID, Package Loader, Management Point Troubleshooter, Client Site Assignment Verifier, Site Boundary Tool, Create Secondary Site Tool, Create SMS Address Tool.(www.microsoft.com/smserver/downloads/2003/tools/toolkit.mspx)

Security Logon Audit Tool (SLAT) extends SMS hardware inventory to include user logon information.This data can be used in web reports and queries. The tool includes the following samplereports: Top users for all systems, User logon information for a specific computer, Systems where the last logged-on user is not the top user, Systems where a specific user has logged on SLAT searches the security event log for the 528 event, which is created when user logon events occur and is enabled via Group Policy. (http://www.systemcentertools)

Enhanced System and User Discovery Tools, out of the box, SMS 2003 does a pretty good job of discovering systems from Active Directory. It’s not perfect, though—there are a few gaps in its methods. The Enhanced System Discovery tool, assists in filling these gaps. Out of the box, SMS 2003 does not perform Windows NT 4 domain discovery. This tool solves that by enumerating all machines from a list of NT 4 domains, resolving their IP addresses from DNS or WINS, and creating data discovery records for each system. (http://www.systemcentertools/)

BITS Bandwidth Manager is an SMS Installer script that lets you throttle BITS bandwidthon Windows XP SP2 systems. You do not need to manually adjust any settings. The script takes care of the Registry key manipulation for you.(http://www.myitforum.com/inc/upload/11332BITSManager.zip)

1E SMSWakeUp: this WOL product is able to turn on computers after they have been shut down by users. The wake cycle can be triggered on a regular schedule to power up systems in preparation for the workday, or to perform software deployment activities. (http://www.1e.com/)

1E NightWatchman: Since we are talking about waking systems that have been shut down, it maybe a good practice to examine how best to shut down those systems in the first place. Why dowe want to shut down systems? We do this to enforce reboot cycles and to save energy costs. (http://www.1e.com/)

1E SMSNomad Branch: Some offices may not have the server hardware to allow for a Distribution Point (DP). But those offices may have a substantial number of users and/or be separated from the rest of the network by a low-speed or saturated WAN link, which you would rather not send multiple copies of a package across. SMSNomad Branch acts similar to a peer-to-peer network, allowing other computers to become DPs. If one machine is shutdown, another is selected as the DP. Included in this technology is multicast, increasing its efficiency to reduce network traffic on the local network segment. (http://www.1e.com/)

1E OSD Plus Pack: This is an enhancement to the SMS OSD Feature Pack. It allows you to leverage the SMS OSD Feature Pack in offices that do not have DPs. OSD Plus Pack offers similar functionality to SMSNomad Branch, but also has a few other applications bundledwith it: State Migration Editor, which is an interface for the User State Migration Tool, AppMigrator, which allows the automatic reinstallation of applications after OS imaging, PXE Lite, which is a local PXE server to allow deployment of OS images to bare-metalmachines booted from the network PXE server. (http://www.1e.com/)

SMS Companion 2006: This product provides WOL capabilities, similar to 1E’s SMSWakeUp, but leverages slightly different technologies behind the scenes. A key difference is that SMS Companion puts systems in hibernation, rather than powering them off. The following are some of the key applications included with this product:Wake-on-Schedule: Allows clients to come out of a hibernation state. Service Windows: Allows you to restrict the SMS inventory and software distributions from happening during specific time periods, to reduce or eliminate user interruptions. Load Balancing: Allows you to reduce peak network and SMS server loading by making sure that the clients use these resources in a controlled manner. (http://www.smsexpert.com/)

Quest Management Xtensions for SMS: Since Windows platforms are not the only systems in an enterprise, you may need a way tomanage other platforms, such as Unix, Linux, and Mac OS X. These management extensions offer that capability for SMS 2003. One of the unique aspects of this product is its support route: first-level support is handled by Microsoft Product Support Services. (http://www.quest.com/quest-management-xtensions-for-sms)

MS: Redirect Desktop or Favorites to a Different Disk or Folder

Sometimes you need to keep your desktop or your favorites in a different disk partition or folder, in my case for backup purposes.

You will need to modify two registry keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

Monday, July 16, 2007

MS: Exchange 2003 Change Password in OWA

Implementing the Change Password feature with Outlook Web Access
http://support.microsoft.com/kb/297121

Saturday, July 14, 2007

VMware: Install Windows Vista x86 on ESX Server 3.0

1) Create a new VM with at least 512 MB of RAM and a 16 GB Hard Disk.
2) Copy the IMG/ISO of Windows Vista and the Floppy drive image to the ESX host using Veeam FastSCP, or insert the DVD and a Floppy with the driver into the ESX host.
3) Connect the IMG/ISO file to the Windows Vista VM. Make sure the "Connected" is selected.
4) Power on the Windows Vista VM.
5) Vista install starts and then stops at a point where it can't find the CD/DVD driver. A pop-up with "Load Driver" as the title appears indicating that a required device driver at this point.
6) Connect the Floppy drive image (and ensure "Connected" is selected).
7) After ESX has attached the floppy drive, click on "Rescan".
8) Continue the Setup of Windows Vista.
9) Remove the floppy image from the VM or uncheck "Connected".

Download the Floppy Image with the CD-ROM Driver from http://sti.epfl.ch/intranet/informatique/virtualisation/drivers-vista-rtm-esx.flp.zip