Folder Redirection Failing

After setting up Folder Redirection in a Windows 2003 domain and logging onto a Windows 2008 R2 server we get the following error:

The following error occurred: "Failed to build the list of known sub folders".
Error details: "The system cannot find the file specified.

Apparently, the Folder Descriptions are messed up. To fix this, we ran the following registry file.
Run the following registry file:

Windows Registry Editor Version 5.00
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}][-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag][-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}][-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag][-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}][-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag][-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}][-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag][-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}][-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}][-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag][-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}][-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag][-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}][-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag][-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}][-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag][-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}][-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag]

References:
http://www.edugeek.net/forums/windows-7/111616-folder-redirection-has-stopped-working.html
http://social.technet.microsoft.com/Forums/windowsserver/en-US/ab158713-5501-4959-9a60-06b4331e844f/gpo-folder-redirection-does-not-work-anymore-502

Read More

DirectAccess Routing Considerations

Default gateway should be configured on the server's external interface. So static routes will need to be configured on the internal interface. See the following articles:
http://technet.microsoft.com/en-us/library/ee731904(v=ws.10).aspx
http://www.ivonetworks.com/news/2012/12/giving-uag-directaccess-users-access-to-a-new-subnet/

Read More

Configure Windows 7 Libraries via Group Policy

A great article on this here:
http://kevinjmorse.ca/articles/configuring-windows-7-libraries-using-group-policy-preferences

Thanks guys!

Read More

Pop-out Replies and Forwards by Default in Outlook 2013

To set email replies and forwards to pop-out, or open in a new window, instead of using the in-line editor, select the following option:

File-> Options-> Mail-> Replies and Forwards-> Open replies and forwards in a new window

Read More

Enable Remote Management in Windows 7

As I've completely ripped off this most excellent post...just in case it is ever taken down, I'll put the reference at the top:
http://skatterbrainz.blogspot.co.nz/2009/08/enabling-windows-7-remote-management.html

I hope to customise this to my personal style at a later date:

I’ve been searching for a comprehensive article/blog-post/kb, etc on this for a while but have only been able to find pieces of the overall solution I was looking for.  The challenge?

Enable remote management capabilities on Windows 7 clients within an Active Directory domain environment using Group Policy.

Which capabilities?

1. Be able to PING clients
2. Be able to connect to clients via Remote Desktop
3. Be able to connect to clients via Computer Management
4. Be able to connect to clients through Event Viewer, RegEdit, etc.

You may notice that my “solution” doesnt’ involve a great deal of security options.  That’s because I’m pretty comfortable with the boundary security on my network environment, which will not be described herein.  Suffice it to say that I am only interested in being able to enable and use these capabilities.  If you need increased security, you can configure additional options via Group Policy settings to suit your needs.

Computer Configuration \ Policies \ Administrative Templates…

Network \ Network Connections \ Windows Firewall \ Domain Profile

• Allow ICMP Exceptions:
• ENABLED - Allow inbound echo request
• Allow Inbound remote administration:
• ENABLED: Enter asterisk (*) in IPv4 address box
• Allow inbound Remote Desktop:
• ENABLED: Enter asterisk (*) in IPv4 address box

Windows Components \ Remote Desktop Services \ Remote Desktop Session Host \ Connections:

• Allow users to connect remotely using Remote Desktop services
• ENABLED

Windows Components \ Windows Remote Management (WinRM) \ WinRM Service:

• Allow automatic configuration of listeners
• ENABLED: Enter asterisk (*) in IPv4 address box

If you need a nudge in the right direction for how to add these settings:

1. Open Group Policy Management (aka “GPMC”)
2. Expand Forest: <name> / Domains / <your-domain> / Group Policy Objects
3. Right-click and select “New”
4. Enter a name for the GPO (e.g. “Remote Management”) and click OK
5. Right-click on the new GPO and select “Edit”
6. Follow the guideline above to locate and enable the settings
7. Right-click on the very top of the tree-view panel on the name of the GPO and select “Properties”
8. Check the box “Disable User Configuration settings”
9. Click “Yes” to accept the warning.
10. Close the Group Policy Management Editor
11. Right-click on the desired computer OU in the GPMC and select “Link an existing GPO” and select your new GPO.
12. That’s it.

You can then either wait for the regular GPO refresh cycle to run (about 90 minutes on average, sometimes less) or go to a client and open a CMD console (remember to right-click and choose “Run as Administrator”) and at the command prompt, enter “GPUPDATE /FORCE” and press Enter.  You should be able to connect to that client from another client on your domain immediately after that.  If you still cannot, double-check your GPO settings and double-check where you linked the GPO (which OU) related to the computer account within AD.  You can (and should) use GPRESULT on the remote client to diagnose GPO issues.

Thank you Skatterbrainz.

References:
http://skatterbrainz.blogspot.co.nz/2009/08/enabling-windows-7-remote-management.html

Read More

Symantec Endpoint Protection Manager Logs Are Huge

Recently a server's OS drive filled up very quickly before I realised that I had not turned on log truncation in Symantec Endpoint Protection Manager (SEPM). As soon as I performed a truncation and set SEPM to do it every four hours, all was well with the server.

To do this complete the following:

1. Log in to the SEP Manager.
2. Click Admin and select Servers.
3. Select the localhost under Servers.
4. Under Tasks, Select Edit Database Properties.
5. In the General tab under Database Maintenance Tasks.
6. Select the checkboxes next to Truncate the database transaction logs and Rebuild Indexes.
7. Click OK to apply the changes.

References:
http://www.symantec.com/connect/forums/symantec-endpoint-protection-db-log-problem

Read More

Google App Sync for Outlook and Click-to-Run

If you have a non click-to-run version of Outlook 2013, but Google Apps Sync for Outlook won't work properly because it thinks you do have a click-to-run version, try the following:

a. Click 'Start' > 'Run'.

b. Type 'regedit' and click 'OK'.

c. Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Office\15.0\ClickToRunStore AND HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\15.0\ClickToRunStore

d. Right click it and choose 'Rename'.

e. Change the name from 'ClickToRunStore' to 'ClickToRunStore1'.

f. Install Google Apps Sync for Microsoft Outlook.

g. Back in the Registry Editor, right click 'ClickToRunStore1'.

h. Choose 'Rename' and change the name back to 'ClickToRunStore'.

If you DO have a click-to-run version of Outlook, I would not recommend trying to use it with GASFO, as Outlook is only a streaming version of the software and will effectively be uninstalled when you log out of the click-to-run system.

References:

Google Support :-) Thanks guys!

Read More

Re-appearing File Won't Delete

If you're trying to delete a file and upon pressing F5 (i.e. refresh view), it keeps re-appearing, restart your PC (and yes sometimes an entire file server needs to be restarted if that is where the file is stored), and see if the file is then gone, or can successfully be deleted.

This is a bit extreme in some cases, but in others, it is the only thing that works.

Other options you can try range from using Process Explorer to find which process is locking the file, and stopping that process, to throwing your entire computer away in frustration.

The last option is effective, but has a number of side-effects.

Read More

Fix RDP clipboard if copy/paste is failing

Sometimes copy/paste to/from an RDP session fails even if all server and client settings have been configured correctly. Often the fix is as easy as this:

• Open Task Manager
• End the rdpclip.exe process
• Run a new process
• Type rdpclip and press Enter

References:
http://technet.microsoft.com/en-us/library/cc776591(v=ws.10).aspx
or for a more stressed out post (if the comments have not been removed)
http://social.technet.microsoft.com/Forums/windows/en-US/4cc7ff11-01ca-42e1-8b1a-c1fe612049ea/windows-8-remote-desktop-metro-app-clipboard-sharing-doesnt-work

Read More

Remotely Enable RDP

This method assumes remote registry is enabled on the remote PC that you wish to access. If that is also disabled, a physical trip to the PC may be in order.

1. Open Regedit and "Connect Network Registry..."
2. Connect to the remote computer by name or IP address
3. Find HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server
4. Locate the fDenyTSConnections entry
5. Change the value from 1 to 0
6. You should now be able to connect via RDP

References:
http://community.spiceworks.com/how_to/show/33687-remotely-enabling-rdp?utm_source=swemail&utm_medium=newsletterresource&utm_campaign=0806

Read More

Join a Mac to a Domain

There are some good discussions about doing this and working through the issues on the following sites:
http://community.spiceworks.com/topic/361908-joining-a-mac-to-a-domain-user-profile-migration
http://www.macenterprise.org/articles/migratingalocalusertoanetworkuser

I'm not sure at this point where to find something on the actual domain-joining procedure.

Read More

Windows Update Error Codes

Microsoft keep a list of Windows Update error codes here:
http://support.microsoft.com/kb/938205/en-nz

Read More

Troubleshoot a Cisco VPN

Good Cisco VPN troubleshooting checksheet
http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml

Read More

Unauthenticated Relay in Exchange

This is primarily for Exchange 2007, but should work in newer versions also.

http://www.commodore.ca/windows/exchange/exchange_2007_unauthenticated_relay.htm

References:
http://www.commodore.ca/windows/exchange/exchange_2007_unauthenticated_relay.htm

Read More

Outlook Performance and Mailbox Size or Item Count

Mailbox size or item count can have a serious effect on the performance you see in Outlook. The following article gives some good insight into why, and what can be done about it.

http://blogs.technet.com/b/exchange/archive/2005/03/14/395229.aspx

References:
http://blogs.technet.com/b/exchange/archive/2005/03/14/395229.aspx

Read More

Enable Legacy Boot Mode on Windows 8 Pre-Installed Device

Apparently Microsoft requires OEM suppliers of Windows 8 systems to set the BIOS (actually UFEI now) to Secure Boot by default. This and another setting can prevent booting from CD/DVD drives and USB devices and also prevent Windows 7 (or older) network deployments from succeeding.

To enable smooth Windows 7 (or older) installations or booting from various boot disks, e.g. for disk imaging or repartitioning, etc, you will need to do the following:

1. Enter the BIOS/UEFI using whatever method the hardware vendor provides for this
2. Look for the Secure Boot option and disable this
3. Look for Legacy Boot or CSM (Compatibility Support Module) and enable this

In some cases, you will need to revert these settings to enable Windows 8 to install and/or boot.

Read More

Printer Colour/Duplex/Page-size Setting Won't Save in Windows

In the past I have found myself changing printer settings on a Windows PC, laptop, or tablet, only to find that when I go to print, the settings are not what I want. Examples of this are when the colour or black and white setting, the page size setting, or the duplex setting just will not stick!

What I've found in my travels are that most print drivers have a number of places where you can change these settings and if you don't check them all, they can seem to incessantly be returning to settings you don't want.

Ensure you check the relevant settings in the following locations:

If you're using a Windows-based print server:

1.       On the print server, in the Print Preferenceson the General tab you first see when you open printer properties

2.       On the print server, in the Print Defaults on the Advanced  tab in the printer’s properties – THIS IS THE MOST IMPORTANT ONE TO SET ON A PRINT SERVER

Whether you're using a print server or not:

3.       On the user’s PC, in the Print Preferences on the General tab you first see when you open printer properties – this does not affect other users, i.e. it is a per usersetting.

4.       On the user’s PC, in the Print Defaults on the Advanced  tab in the printer’s properties. THIS IS THE MOST IMPORTANT ONE TO SET IF NOT USING A PRINT SERVER. If you ARE using a print server, these can often not be changed from a client PC/laptop/tablet. It's worth a look anyway.

5.       Lastly, on the user’s PC, within the program they are actually printing from, i.e. Word/Excel/whatever. When you change these settings, they only hold until you close the application. – this is therefore a per session setting.

Read More

Exchange 2007 Transport Service Not Starting

I found the following error in the Application Event Log

Topology discovery failed, error 0x80040a02 (DSC_E_NO_SUITABLE_CDC)

The fix was to reenable IPv6 on the server's NIC.

Other fixes, some of which are NOT best practice so are used at your own discretion, are available here:
http://blogs.msdn.com/b/keithmg/archive/2009/01/06/exchange-topology-discovery-failed-error-0x80040a02-dsc-e-no-suitable-cdc.aspx

References:
http://blogs.msdn.com/b/keithmg/archive/2009/01/06/exchange-topology-discovery-failed-error-0x80040a02-dsc-e-no-suitable-cdc.aspx

Read More

Symantec Endpoint Protection Manager version 11 Recovery

See this link:
http://www.symantec.com/business/support/index?page=content&id=TECH102333



...that is all.

Read More

Windows Deployment Server Multicast Is VERY Slow

If WDS multicast deployment is creeping VERY slowy, you probably have switches that are not able to fragment packets the way Microsoft expects.


To change WDS so it does not send fragmented packets do the following

Windows Server 2008R2
Set the following registry key and restart the WDSService
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSMC\Protocol
Name: ApBlockSize
Value type: REG_DWORD
Value data: 1385 decimal

Windows Server 2008
Windows Server 2008 uses network profiles to control the setttings.  Do the following to configure it to not send fragmented packets

1. Click Start, Run, WdsMgmt.msc
2. Right click the WDS server and choose properties
3. Choose the network settings tab
4. Change the network profile to custom

Set the following registry key and restart the WDSService
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSMC\Profiles\Custom
Name: ApBlockSize
Value type: REG_DWORD
Value data: 1385 decimal

If this allows the multicast transmission to complete you can then modify the TpCacheSize registry key below to increase the performance.  If you decrease ApBlockSize without increasing TpCacheSize then overall performance will decrease. Basically ApBlockSize * TpCacheSize = the maximum bandwidth that can be achieved. Increase it from 1190.

Windows Server 2008 R2
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSMC\Protocol
Name: TpCacheSize
Value type: REG_DWORD
Value data: 3145 decimal

Windows Server 2008
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSMC\Profiles\Custom
Name: TpCacheSize
Value type: REG_DWORD
Value data: 3145 decimal
Restart the WDSServer service after setting this registry key.  After setting this run a deployment to verify it completes and take note of the time to download the image.  Then increase this value in increments until it fails or reaches 7550.

If you have to disable IP fragmentation to get multicast working then this may be indicative of low-end switching/routing hardware that perhaps does not support fragmentation efficiently or does not support multicast efficiently (IGMP/MLD snooping etc.).  Multicast can be demanding on a network so it can expose problems or issues in network infrastructure that were unknown until multicast was setup. 

References
http://support.microsoft.com/kb/2582106

Read More

Windows Deployment Server's Message from Administrator

On your WDS server type the following at a Command Prompt:

WDSUtil /set-server /AutoAddPolicy /Message:"To contact your network administrator, please dial 123-4567“

If your message is too long (I haven't tested how long), it will fail.

References:
http://trycatch.be/blogs/roggenk/archive/2010/06/23/message-from-administrator-in-wds-windows-deployment-services.aspx

Read More

Change Windows Public Network to Private

This works for Windows 8, but the Secpol bit should work for Windows 7 also, and probably Vista.
http://www.online-tech-tips.com/windows-8/change-from-public-to-private-network-in-windows-8/


See here for Windows Server 2012
http://www.jenovarain.com/2012/09/server-2012-network-location/

Read More

Integrate Office 365 with Active Directory

See http://www.petri.co.il/active-directory-integration-office-365-complete-federation.htm

Read More

Lync Resources

For those, like me, deploying Lync 2010 and 2013. Most of the info here will just be links to other resources.

Lync 2013 Server Roles
http://technet.microsoft.com/en-us/library/gg398536.aspx

Lync 2013 Prerequisites
http://y0av.wordpress.com/2012/07/31/lync-2013-prerequisites/

Lync and the Enterprise Network
http://channel9.msdn.com/Events/TechEd/NorthAmerica/2012/EXL317

Edge Media Connectivity with ICE
http://channel9.msdn.com/Events/TechEd/NorthAmerica/2012/EXL412

Understanding Regular Expressions
https://support.net.com/display/ALLDOC/Understanding+Regular+Expressions

Connecting Office 365 Lync to On-Premise Exchange
http://support.microsoft.com/kb/2614242

Skype Interoperability

http://eon.businesswire.com/news/eon/20130220005343/en/Microsoft/Lync/Skype

References:
http://channel9.msdn.com/Events/TechEd/NorthAmerica/2012/EXL317
http://channel9.msdn.com/Events/TechEd/NorthAmerica/2012/EXL412

http://eon.businesswire.com/news/eon/20130220005343/en/Microsoft/Lync/Skype

http://gallery.technet.microsoft.com/office/Lync-Server-2012-9d6fe954

http://support.microsoft.com/kb/2614242

https://support.net.com/display/ALLDOC/Understanding+Regular+Expressions
http://technet.microsoft.com/en-us/library/gg398536.aspx

http://www.shudnow.net/?s=communications
http://y0av.wordpress.com/2012/07/31/lync-2013-prerequisites/

Read More

Microsoft Support - New Zealand

Kindly highlighted by Nathan Mercer from Microsoft New Zealand in a recent newsletter:

One of the most common questions we receive: What is the best way to contact Microsoft if you have a problem with a Microsoft product or service, or to ask a general question? This article is designed to give you a summary of the support options available to IT Professionals in New Zealand. Support options range from free support through to premium paid support.

Firstly let’s go through the options you can find on the web. On our recently-updated main support portal, you will find links highlighting our top support issues, top downloads, contact details, and can get support by product.


Talk to someone...

To contact Microsoft Customer Service about a specific problem you’re having, you can email our customer service team – they are surprisingly responsive, and are best briefed to deal with product information & pricing, product licensing, Microsoft event registration & details, Microsoft Profile management for email subscriptions, Product key generation, as well as general enquiries such as sponsorships, donations, business proposals, and even job opportunities.

If you would prefer to speak with a real person, you can call us free on 0800 800 004, between 7:30am and 9:00pm from Monday to Friday. You can also contact me personally, through my blogor @NathanMon twitter.

Our New Zealand team also runs the NZ TechNet blog, and @TechNetNZon twitter – both with news and events for kiwi IT Professionals. For more consumer-oriented information, follow @MicrosoftNZor, most relevant to this article, reach out to @MicrosoftHelpsfor support via twitter.


Microsoft Community forums online for self-help

Be sure to check out the Microsoft Community forums for finding answers, sharing ideas and solving problems. Describe what's going on, and our community members can help you understand the problem. Then they can show you how to resolve it with step by-step instructions. There are dedicated forums for each specific product and they are very active with questions and answers.

If you’re working in a technical role, we also have dedicated forums where you can go to for technical assistance – check out the TechNet Forums for IT Professionals or the MSDN Forums for Developers. I can really recommend these forums, they are full of useful information thanks to skilled contributors responding to questions.


TechNet Software Subscription for IT Professionals:
Use promo code NZTN13-1 to receive 30% off.

A 30% discount off a 12-month Microsoft TechNet Subscription makes this affordable for every IT Professional. I’d highly recommend it as it includes great paid support benefits that won’t break the bank. You can read about the different TechNet subscription options and benefits but they include:

• Professional Support Calls – Professional subscribers receive 2 complimentary support calls and can talk to a Microsoft support professional for fast help with the toughest technical questions. TechNet Professional subscribers also receive a 20% discount on additional purchased support calls.
• Priority Support in TechNet Forums – with your subscription you have unlimited access & priority support in TechNet forums, with your questions answered within two business days. Engage with other IT Professionals who have encountered the same issues you are facing. Answers are reviewed by a Microsoft support professional.
• Microsoft E-Learning – Prepare for certification or simply deepen or develop new skills with a selection of Microsoft E-Learning course collection.
• Microsoft Software Licensed for Evaluation Purposes – During your 12-month subscription you’ll have access to the latest Microsoft full-version and beta software you need for evaluation and deployment planning with no feature limits.

Microsoft Partners

As a Microsoft Partner, you have a range of Partner support options in addition to those listed above. First, sign into the Microsoft Partner Network where you will find a list of support options:

• Get support
• My support benefits and incidents
• Microsoft Partner Network support
• Technical Presales and Advisory Services
• Product support
• Support communities

On that site you can also view the details of an incident you recently submitted or submit a new one. You can also see how many partner advisory hours you have available, or purchase more hours. As a Microsoft Partner you receive a range of benefits depending on your membership level, including:

• Partner advisory hours that you can use for technical enablement and for technical presales and advisory services
• Partner Support Community
• Business-critical (customer server down)
• 5-Pack of Professional Support Incidents

Recommended Links

How-to Websites

• Solution Centre index
• Windows Help and How-to
• Office Help and How-to

Downloads

• Download centre
• Windows downloads
• Office downloads
• Service Pack downloads

Security

• Virus and Security solution centre
• Security home page
• Download Security Essentials
• Malware Removal tool

Support

• Knowledge Base search
• Product list
• Product support lifecycle
• Small and medium business support
• IT Pro support
• Developer support

Popular resources

• Step by Step content with screenshots
• Microsoft Fix It downloads
• Twitter - Microsoft Helps

Read More

Lync Server Labs

Virtual Labs for Lync 2010 are available here:

Microsoft Lync Server 2010 Enterprise Voice Configuration

https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032488324&culture=en-US
https://cmg.vlabcenter.com/default.aspx?moduleid=3cae9be7-6a3a-4f74-8e90-345532e45de2

New Enterprise Voice Features of Microsoft Lync Server 2010
https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032488325&culture=en-US


Other TechNet Labs:
http://technet.microsoft.com/en-us/virtuallabs/bb467605.aspx.

Read More

Get Exchange Mailbox Stats

Get-MailboxStatistics

Get-MailboxStatistics | ft DisplayName,TotalItemSize,ItemCount

Get-MailboxStatistics | Sort-Object TotalItemSize –Descending | ft DisplayName,TotalItemSize,ItemCount

References:
http://www.msexchange.org/articles-tutorials/exchange-server-2007/management-administration/getting-mailbox-statistics-exchange-2007.html

Read More

Successfully Shrink Database Log File (*.ldf) in SQL 2005

This may also work in other versions of SQL, but I've not tested it.

First, back the database up. I'm assuming you can figure out the details of backing up. I normally backup to disk and create a new file for the backup in a set backup location/drive/disk.

Then, set the database to use simple backup mode, as seen in the drop-down list in the image below.

Finally, shrink the database, ensuring you select the Reorganize files... option. Select a minimum freespace of anywhere from 0 to 20. If it is low, you are likely to see some instant growth in your database. If it is too high, you're wasting space.

Read More

Connecting Windows 8 to SBS 2008/2011 RWW

If you are using Windows 8 and cannot connect to computers via  to SBS 2008 or 2011 Remote Web Workplace, the following may help.

It is likely that once logging in you can still access email via OWA and open the Internal Website, but you can't connect to internal computers.

This issue is (or will be) supposedly solved with an Update Rollup package, or you do the following in Internet Explorer to sort it out yourself:
- add your RWW site to Trusted sites,
- open the RWW site in compatibility mode.
After this, you will be able to connect to all computers.

References:
http://www.em-soft.si/myblog/elvis/?p=182

Read More

Great AD Management Tools

Solar Winds have some excellent free (you need to register though) tools to help get the mundane stuff done in AD.

• List old User Accounts
• List old Computer Accounts
• Bulk import User Accounts

This link came from my petri.co.il subscription, so you can see their details in it. I'm not sure how long Solar Winds will offer this either.

http://www.solarwinds.com/register/registrationb.aspx?program=1800&c=70150000000PH8s&CMP=BIZ-EML-PETRI-130214_Top5MicrosoftFT_Petri-MSFT-DL&email=%%EMAIL%%

Read More

Use Group Policy to Restrict Access to USB

To use Group Policy to restrict access to USB devices on your network, see the following:

http://community.spiceworks.com/how_to/show/25619-blocking-usb-devices-and-removable-media

References:
http://community.spiceworks.com/how_to/show/25619-blocking-usb-devices-and-removable-media

Read More

Sweet Java Install Automation

Check out http://community.spiceworks.com/how_to/show/22997-use-a-batch-file-and-group-policy-to-cleanly-update-java?utm_source=swemail&utm_medium=email&utm_campaign=resource for a sweet Java install/update method using GP and scripts.

Reference:
http://community.spiceworks.com/how_to/show/22997-use-a-batch-file-and-group-policy-to-cleanly-update-java?utm_source=swemail&utm_medium=email&utm_campaign=resource

Read More

Symantec Endpoint Protection Has Detected Pending Changes

When installing Symantec Endpoint Protection, sometimes you will see an error message that "Symantec Endpoint Protection has detected that there are pending system changes that require a restart", but a restart does not fix the issue.

In that case, do the following:

Delete the registry key: "PendingFileRenameOperations" in "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager".

References:
http://www.symantec.com/connect/forums/win7-issue-symantec-endpoint-protection-has-detected-there-are-pending-system-changes-require

Read More

Symantec Endpoint Protection Manager 11 - Unable to Communicate with Reporting Component

• If you are on a 32-bit OS, skip the next step.
• If you are on a 64-bit OS, first go to 32-bit ODBC Control Panel. To do this do the following:

Go to %systemroot%\Windows\SysWoW64 folder (Example - Click Start -> Run -> C:\Windows\Syswow64 and click on OK)

Locate Odbcad32.exe & double click on the file

Click on System DSN Tab

You will find the "SymantecEndpointDSN" listed in the window.

Now click on the CONFIGURE button and proceed with the configuration of the DSN for the Symantec Endpoint Protection Manager 

• Open ODBC (using instructions above if on a 64-bit OS), then do the following:

Select Configure on the SymantecEndpointSecurityDSN 

Under the LOGIN tab set it to Supply User ID and password and type:
User ID: dba
Password: Login password to the SEPM 

Under the DATABASE tab configure these options:
Server Name: Name of Server
Database Name: sem5 (if you are using the embedded database) 

Under the NETWORK tab configure these options:
Check TCP/IP and enter: "host=IPAddressofServer" without the quotes. 

Now test connection. You should receive Connection Successful.

References:

http://www.symantec.com/connect/forums/unable-connect-reporting-component-symantec-endpoint-protection-mr2

http://www.symantec.com/business/support/index?page=content&id=TECH103990

Read More

Symantec Endpoint Protection Manager Database Will Not Start

If Symantec Endpoint Protection Manager v11 embedded database does not start, try the following:

The below article describes how to recreate the embedded database's log file:
http://www.symantec.com/docs/TECH169664

A SEP11 version of the steps is:

Go to "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\db\" and rename sem5.log to sem5.log.old
Click Start, click on Run and Type "CMD" then click OK
In the Command Prompt type: "CD C:\Program Files\Symantec\Symantec Endpoint Protection Manager\ASA\win32\" and press Enter this will change directories to the folder containing dbsrv9.exe.
To force the recreation of sem5.log. Type: "dbsrv9 -f "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\db\sem5.db" and press Enter
Click Start, click on Run and Type "services.msc" then click OK and start the Symantec Embedded Database Service
Start the Symantec Endpoint Protection Manager service.

Don't forget to adjust the paths if your SEPM is on a 64bit OS

References:
http://www.symantec.com/connect/forums/embedded-database-will-not-start

Read More