Richard's Site

The following ports need to be opened to allow for successful installation and communication with the DPM 2007 agents.

TCP: 5718, 5719, 135, 88, 139, 389
UDP: 53, 88, 137, 138, 389

Richard Data Protection Manager, Enterprise Hardware and Software, Network Security

Recently I was attempting to use Data Protection Manager 2007 to create a protection group that included volumes directly attached to the DPM server. I was slightly dismayed to see that I couldn’t install the protection agent on the machine or select anything other than the DPM configuration database in the New Protection Group wizard.

The answer, in my case, was to enable local data protection on the DPM server by executing the following command in the Data Protection Manager Console:

1

Set-DPMGlobalProperty -DPMServerName ServerName.Domain.Local -AllowLocalDataProtection $true

Richard Computer Hardware and Software, Data Protection Manager, Enterprise Hardware and Software, PowerShell, System Administration, Windows

If you (or your organization) is lucky enough to get ahold of the Windows 7 RTM, you may encounter an issue that has been popping up for a small number of people.

After booting from the DVD (or USB Drive) that contains the Windows 7 installation files, and clicking Install, you will be greeted by an error message that says:

A Required CD/DVD Driver is Missing

I pounded my head against the wall for a while on this one. In my case it turned out to be a corrupt ISO file that was causing the issue, but here are some ideas for you to try before you throw your computer out a window.

(1) Download the Windows 7 ISO Verifier tool (http://www.istartedsomething.com/20090706/windows-7-iso-verifier/). It will check your ISO file, compare it to known good hashes and tell you if the image is good. Do this first!

(2) Unplug all unnecessary devices from your PC and attempt to install again.

(3) If you have a mixture of SATA and PATA devices, try to remove and / or replace the PATA devices and try to install again.

(4) Transfer the Windows 7 setup to a thumb drive (http://www.intowindows.com/how-to-install-windows-7vista-from-usb-drive-detailed-100-working-guide/), disconnect the CD / DVD-ROM and try to boot setup from that.

If that doesn’t work then post in the comments section and I will try to help you out.

Richard Computer Hardware and Software, Consumer Hardware and Software, Enterprise Hardware and Software, Windows CD, drivers, dvd, Installation, Windows, Windows 7

Here is a simple PowerShell script I wrote to gather either computer, group, or user information depending on your choices. This could easily be done with much simpler scripts, but I wanted to use it as more of a learning process in order to better understand AD queries, variable expansion, functions, and other PowerShell features.

# Function Definition: fnPause
Function fnPause ($message="Press any key to continue...")
	{
		Write-Host -NoNewLine $Message
		$null = $Host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown")
		Write-Host ""
		Main_Menu
	}
 
# Function Definition: fnADSearchMenu 
Function fnADSearchMenu
{
	# Display Welcome Message
	Clear-Host
	"Active Directory Search Script v1.0"
	"Created By: Richard Raseley (Richard@Raseley.com)"
	" "
 
	# Display Top Level Menu Question
	"What type of Active Directory object would you like to search for?"
 
	# Display Top Level Menu
	$MenuTopLevel = 
	'
	[1] User(s)
	[2] Group(s)
	[3] Computer(s)
	[4] Exit 
 
	Choice'
 
	# Define Logic for Top Level Menu
	switch (Read-Host $MenuTopLevel)
	{
		1 {fnUserSearchMenu}
		2 {fnGroupSearchMenu}
		3 {fnComputerSearchMenu}
		4 {Exit}
		default {"You have chosen an invalid option"; fnPause; fnADSearchMenu}
	}
}
 
# Function Definition: fnUserSearchMenu
Function fnUserSearchMenu
{
	# Display User Search Menu Question
	" "
	"What type of user information would you like?"
 
	# Display User Search Menu
	$MenuUserSearch =
	'
	[1] Summary of all users in the current domain
	[2] Return to the main menu
 
	Choice'
 
	# Define Logic for User Search Menu
	switch (Read-Host $MenuUserSearch)
	{
		1 {
		  	#Define LDAP Filter
			$LDAPFilter = "(objectCategory=User)"
 
		  	#Call fnADSearchExecute
		  	fnADSearchExecute
		  }
		2 {
	    	fnADSearchMenu
		  }
		default {"You have chosen an invalid option"; fnPause; fnADSearchMenu}
	}
}
 
# Function Definition: fnGroupSearchMenu
Function fnGroupSearchMenu
{
	# Display Group Search Menu Question
	" "
	"What type of group information would you like?"
 
	# Display Group Search Menu
	$MenuGoupSearch =
	'
	[1] Summary of all groups in the current domain
	[2] Return to main menu
 
	Choice'
 
	# Define Logic for Group Search Menu
	switch (Read-Host $MenuGoupSearch)
	{
		1 {
			# Define LDAP Filter
			$LDAPFilter = "(objectCategory=Group)"
 
			#Call fnADSearchExecute
			fnADSearchExecute
		  }
		2 {
			fnADSearchMenu
		  }
		default {"You have chosen an invalid option"; fnPause; fnADSearchMenu}
	}
}
 
# Function Definition: fnComputerSearchMenu
Function fnComputerSearchMenu
{
	# Display Computer Search Menu Question
	" "
	"What type of computer information would you like?"
 
	# Display Group Search Menu
	$MenuComputerSearch =
	'
	[1] Summary of all computers in the current domain
	[2] Return to main menu
 
	Choice'
 
	# Define Logic for Group Search Menu
	switch (Read-Host $MenuComputerSearch)
	{
		1 {
			# Define LDAP Filter
			$LDAPFilter = "(objectCategory=Computer)"
 
			#Call fnADSearchExecute
			fnADSearchExecute
		  }
		2 {
			fnADSearchMenu
		  }
		default {"You have chosen an invalid option"; fnPause; fnADSearchMenu}
	}
}
 
# Function Definition: fnADSearchExecute
Function fnADSearchExecute
{
	# Define AD Search Filter
	$strFilter = "$LDAPFilter"
 
	# Define AD Location for Search
	$objDomain = New-Object System.DirectoryServices.DirectoryEntry
 
	# Define AD Search Parameters
	$objSearcher = New-Object System.DirectoryServices.DirectorySearcher
	$objSearcher.SearchRoot = $objDomain
	$objSearcher.PageSize = 1000
	$objSearcher.Filter = $strFilter
	$objSearcher.SearchScope = "Subtree"
 
	# Define AD Properties Returned by Search
	$colProplist = "name"
	foreach ($i in $colProplist){$objSearcher.PropertiesToLoad.Add($i)}
 
	# Execute AD Search
	$colResults = $objSearcher.FindAll()
 
	# Format AD Search Results
	foreach ($objResult in $colResults)
	{
		$objItem = $objResult.Properties
		"Name: " + $objItem.name
		" "
	}
}
 
# Call ADSearch Menu Function
fnADSearchMenu

Richard Active Directory, PowerShell Active Directory, PowerShell, Scripting

Here is a Group Policy setting you can apply in Active Directory to prevent an administrator or other user from logging you off from a machine that you have remotely logged into via the console session.

Policy Path: Administrative Templates\Windows Components\Terminal Services

Supported On: At least Microsoft Windows Server 2003

Help/Explain Text: Specifies whether to allow an administrator attempting to connect to the console of a server to log off an administrator currently logged on to the console. The console session is also known as Session 0. Console access can be obtained by using the /console switch from Remote Desktop Connection in the computer field name or from the command line. If the status is set to Enabled, logging off the connected administrator is not allowed. If the status is set to Disabled, logging off the connected administrator is allowed. If the status is set to Not Configured, logging off the connected administrator is allowed but can be changed at the local computer policy level. This policy is useful when the currently connected administrator does not want to be logged off by another administrator. If the connected administrator is logged off, any data not previously saved is lost.

Registry Settings: HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableForcibleLogoff

Richard Active Directory, System Administration Active Directory, Group Policy

Exchange 2010 Beta is now available!

You can go to https://www.microsoft.com/exchange/2010/en/us/trial-software.aspx and download a 360 day trial. The RTM and public launch will probably coincide with the launch of Office 2010 and SharePoint Server 2010.

Richard Enterprise Hardware and Software, Exchange Server

A lot of people seem to wonder what the best, FREE,  way to do a Physical to Virtual (P2V) conversion of their Windows servers is. If your VM host is going to be a Hyper-V server, then there are two good methods (that I know of) to perform the operation.

Method 1:

Use the System Center Virtual Machine Manager’s (SCVMM) integrated P2V conversion utility to perform the operation. This supports doing a live migration, meaning that the target system can remain online and available for user’s requests during the migration period.

SCVMM 180 Day Evaluation: http://technet.microsoft.com/en-us/evalcenter/cc793138.aspx

Method 2:

If you don’t want to use the SCVMM method or it isn’t working properly for you, you can use the free VMWare converter tool. The VMWare converter tool also supports live migrations. After you perform the live P2V conversion with the VMWare converter tool you will end up with a VMDK file (VMWare’s virtual hard disk format), so that will have to be converted to a Hyper-V usable file with the VMDK to VHD converter.

VMWare Converter: http://www.vmware.com/products/converter/

VMDK to VHD Converter: http://vmtoolkit.com/files/folders/converters/entry8.aspx

Good luck!

Richard Hyper-V, System Administration, Windows Hyper-V, SCVMM, VMWare, Windows

Here is an article that details how to rebuild IIS in an SBS 2003 installation. Use this article at your own risk, and don’t try to do it remotely… you will lose your connection to the server.

Reinstalling IIS in SBS 2003 (DOC File, 45KB)

Richard IIS, Windows IIS, SBS 2003, Windows

IIS 6 Properties

I was having an issue today and thought I would share the solution I found.

I had an IIS 6 server that was hosting some web pages. In a directory beneath the root I had some .exe files that I wanted to like to on the main page to allow downloading. Whenever I would click on the files I would get a 404 error. I knew the files were in the right spot and the naming was correct.

I discovered that in order to allow .exe files to be downloaded from your IIS 6 server you need to remove the “Execute” permissions from the folder that the .exe files are sitting in… not the entire virtual directory, just the particular folder that the .exe files are sitting in.

To do this you have to open the IIS Manager, right click on the directory containing the .exe files, and change the Execute Permissions to “Scripts Only”.

Richard IIS, Windows IIS, Windows

Richard DNS, Windows DNS, Windows