Archive for the ‘Operating System’ Category


I’m currently working on a project and I was asked to create a secure configuration GPO according to CIS Standard.

I’ve noticed  that  “MSS:” prefixed is not visible in the Group Policy Management Editor , to reveal these setting please perform the following:

(Location: Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > Security Options)



  • My recommendation is to use a test virtual machine or a test server before proceeding
  • Prerequisites:

Please  make sure that the following software installed on the server:

  • Microsoft .Net Framework 4
  • SQL Server  installed
  • Download Security Compliance Manager (SCM) and install it on the server


  • After installing SCM, copy  “LocalGPO.msi” file from the following path: “C:\Program Files (x86)\Microsoft Security Compliance Manager\LGPO\LocalGPO.msi” to your AD server.
  • Run and install the file “LocalGPO.msi” on the AD server.


  • Execute the following command: cscript LocalGPO.wsf /ConfigureSCE



  • Close and open Group Policy Management Editor and you’ll notice that MSS Prefixed was added!


Idit 🙂


Read Full Post »

Today I encountered a problem with IPV6 (Internet Protocol Version 6) configuration, when I  tried to ping a windows 2008 R2 server I got response from IPV6 interface (Reply from ::1: time<1ms)

so I disabled the IPV6 under network connection, in spite of that I continued to get the same reply.

  • Open Registry Editor (regedit).
  • 2. Navigate to the following registry key:
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tcpip6\Parameters\
  • Create the following registry value (DWORD type): DisabledComponents
  • Set value to 0
  • Restart your server.


Read Full Post »


I connected an external DVD, but I couldn’t use it because I received the following error message: “is not accessible , Incorrect function”  (see photo below)


Go to device manager and disabled the default CD-ROM device.

Problem solved 🙂


Read Full Post »


Our file server was suffered from lack of CPU resources, and it reached up to a point that users were not able to login to the file server, and us (as administrators) were not able to do anything on the server in order to troubleshoot it.

Our file server was installed on Windows 2008 storage server x64 edition and connected through iSCSi to Iomega storage system (ix12-300r).

As a solution we’ve installed the file server on a new server (Dell PowerEdge R610) , only this time we’ve decided to install on the server Windows 2008 R2 (and not Windows 2008 storage server) . Afterwards we’ve connected the file server’s storage back through iSCSi initiator, but when we’ve tried to access certain files, we’ve received the following error: “The file cannot be accessed by the system”.

First we‘ve thought that this might be a permission problem, so we’ve done the following:

  • Took ownership on the file/folder
  • We’ve granted Full permissions on that file/folder to our domain user
  • We’ve granted Full permissions on the share itself

But none of these actions worked, and we’ve still received the same error message.


After a lot of nights without any sleep, we’ve found a solution. The problem was as a result of a service called: “Single Instance Store Groveler”

The Groveler knows to search for and consolidate duplicate files on the volume and as a result will save disk space.

After a test that we’ve done, we saw that after installing Windows 2008 storage server x64 , the Role “File Server” is installed by default and it contains the “Single Instance Storage” Role service (see the photo below) as opposed to Windows 2008 R2 that after installation does not install any role by default, and when we added the role “File server” it didn’t contain that service. “Single Instance Storage” is only available on Windows 2008 storage server.  

The consequence of installing windows 2008 R2 was that windows was not familiar with files which were stored in a hidden/inaccessible  folder called “SIS Common Store” which contains all the source files of the “Single Instance” storage role. (see photo below)

The solution was to reinstall the server with Windows 2008 storage server, and connect the iSCSi disks once again, while  windows was able to access “SIS Common Store” folder, and “Single Instance Store Groveler” was  running – all data returned to be accessible.

You can find additional information regarding “Single Instance Store Groveler “ in the following link: http://technet.microsoft.com/en-us/library/cc978292.aspx

Idit & Yaron 🙂

Read Full Post »


We were trying to install windows 2008 Storage Server 64-bit on Dell PowerEdge R610 , but we’ve received the following error: “No drives were found. Click Load Driver to provide a mass storage driver for installation”



  • Choose your SAS RAID Controller.
  • Fixed!

Yaron & Idit.

Read Full Post »


I was trying to store a user name and password for a certain server under Control Panel > Stored User Names and Passwords, but the button “Add” was missing. Confused? I was too…


  • Go to Start > Run > gpedit.msc
  • Go to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options
  • Locate: Network Access: Do not Allow the storage credentials or .NET Passports for network authentication , set it to Disabled
  • Go to start > run > cmd > gpupdate /force
  • In order to check whether the change has been made , go to start > run > rsop.msc
  • If it won’t work , you can always restart the server.
  • Fixed!


Read Full Post »


I had a server with Linux installed, I wanted to format this server and install instead Windows 2008 R2. But when I tried to install Windows 2008 R2, the installation didn’t recognize any disk at the server.


I restarted the server from the Smart Start CD and formatted the disks. Afterwards I restarted the server from windows 2008 R2 installation CD and the installation recognized the hard drives.


Idit. (The solution was provided by Assaf F. )

Read Full Post »

Older Posts »