Missing MSS Prefixed Settings in the Group Policy Management Editor

 Problem 

I’m currently working on a project and I was asked to create a secure configuration GPO according to CIS Standard.

I’ve noticed  that  “MSS:” prefixed is not visible in the Group Policy Management Editor , to reveal these setting please perform the following:

(Location: Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > Security Options)

 Solution

• My recommendation is to use a test virtual machine or a test server before proceeding
• Prerequisites:

Please  make sure that the following software installed on the server:

• Microsoft .Net Framework 4
• SQL Server  installed
• Download Security Compliance Manager (SCM) and install it on the server

http://technet.microsoft.com/en-us/solutionaccelerators/cc835245.aspx

• After installing SCM, copy  “LocalGPO.msi” file from the following path: “C:\Program Files (x86)\Microsoft Security Compliance Manager\LGPO\LocalGPO.msi” to your AD server.
• Run and install the file “LocalGPO.msi” on the AD server.

• Execute the following command: cscript LocalGPO.wsf /ConfigureSCE

• Close and open Group Policy Management Editor and you’ll notice that MSS Prefixed was added!

Idit 🙂

Read Full Post »

Reply from ::1: time<1ms – IPV6

Problem:
Today I encountered a problem with IPV6 (Internet Protocol Version 6) configuration, when I  tried to ping a windows 2008 R2 server I got response from IPV6 interface (Reply from ::1: time<1ms)

so I disabled the IPV6 under network connection, in spite of that I continued to get the same reply.
 Solution:

• Open Registry Editor (regedit).
• 2. Navigate to the following registry key:
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tcpip6\Parameters\
• Create the following registry value (DWORD type): DisabledComponents
• Set value to 0
• Restart your server.

Yaron

Read Full Post »

The File Cannot Be Accessed By the System

Problem

Our file server was suffered from lack of CPU resources, and it reached up to a point that users were not able to login to the file server, and us (as administrators) were not able to do anything on the server in order to troubleshoot it.

Our file server was installed on Windows 2008 storage server x64 edition and connected through iSCSi to Iomega storage system (ix12-300r).

As a solution we’ve installed the file server on a new server (Dell PowerEdge R610) , only this time we’ve decided to install on the server Windows 2008 R2 (and not Windows 2008 storage server) . Afterwards we’ve connected the file server’s storage back through iSCSi initiator, but when we’ve tried to access certain files, we’ve received the following error: “The file cannot be accessed by the system”.

First we‘ve thought that this might be a permission problem, so we’ve done the following:

• Took ownership on the file/folder
• We’ve granted Full permissions on that file/folder to our domain user
• We’ve granted Full permissions on the share itself

But none of these actions worked, and we’ve still received the same error message.

Solution

After a lot of nights without any sleep, we’ve found a solution. The problem was as a result of a service called: “Single Instance Store Groveler”

The Groveler knows to search for and consolidate duplicate files on the volume and as a result will save disk space.

After a test that we’ve done, we saw that after installing Windows 2008 storage server x64 , the Role “File Server” is installed by default and it contains the “Single Instance Storage” Role service (see the photo below) as opposed to Windows 2008 R2 that after installation does not install any role by default, and when we added the role “File server” it didn’t contain that service. “Single Instance Storage” is only available on Windows 2008 storage server.  

The consequence of installing windows 2008 R2 was that windows was not familiar with files which were stored in a hidden/inaccessible  folder called “SIS Common Store” which contains all the source files of the “Single Instance” storage role. (see photo below)

The solution was to reinstall the server with Windows 2008 storage server, and connect the iSCSi disks once again, while  windows was able to access “SIS Common Store” folder, and “Single Instance Store Groveler” was  running – all data returned to be accessible.

You can find additional information regarding “Single Instance Store Groveler “ in the following link: http://technet.microsoft.com/en-us/library/cc978292.aspx

Idit & Yaron 🙂

Read Full Post »

Unable to Install Windows 2008 Storage Server 64-bit – No drives were found

Problem

We were trying to install windows 2008 Storage Server 64-bit on Dell PowerEdge R610 , but we’ve received the following error: “No drives were found. Click Load Driver to provide a mass storage driver for installation”

Solution

• Go to Delll’s support page: http://support.dell.com/support/downloads/driverslist.aspx?os=LHS64&catid=-1&dateid=-1&impid=-1&osl=EN&typeid=-1&formatid=-1&servicetag=&SystemID=PWE_R710&hidos=WNET&hidlang=en&TabIndex=&scanSupported=True&scanConsent=False , and download > SAS RAID Controller driver for R710
• Save the driver on USB device.
• Click > Load Driver and navigate to your USB device.

             

• Choose your SAS RAID Controller.
• Fixed!

Yaron & Idit.

Read Full Post »

Can’t install Windows 2008 R2 on HP DL380 G5 – No Drives were found

 Problem

I had a server with Linux installed, I wanted to format this server and install instead Windows 2008 R2. But when I tried to install Windows 2008 R2, the installation didn’t recognize any disk at the server.

Solution

I restarted the server from the Smart Start CD and formatted the disks. Afterwards I restarted the server from windows 2008 R2 installation CD and the installation recognized the hard drives.

Fixed.

Idit. (The solution was provided by Assaf F. )

Read Full Post »

Windows 2008 Storage Server Default Password

Problem

I have installed windows 2008 storage server (64-bit) and after the OS installation I didn’t know how to log in to the server.

Solution

The default user name and password for Windows 2008 Storage Server are:

• Administrator
• wSS2008!

Fixed!

Yaron.

Read Full Post »

How to Install Windows 2008 R2 on a Different Drive Letter then C?

Problem:

 Installing windows 2008 R2 on different drive letter then C:\

I have tried to install Windows 2008 R2 on a different drive letter then C: \ but I realized that it isn’t a simple task as it was in windows 2003. I didn’t find a lot of information about it over the Internet and after I have found the solution, I would like to share it with you.

Solution

Please follow the next steps:

• Step 1 – Disconnect the network cable from the server which you are going to install windows 2008 R2 (This will prevent windows from activating).
• Step 2 – Install windows 2008 R2 normally, ** important: write down the DVD-ROM drive letter, we’ll use it later on.
• Step 3 – After the installation has ended open the registry editor
                 Click start > Run > Regedit
                 Go to HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices\
• Step 4 – Rename the following REG_BINARY name of \DosDevices\C:   to \DosDevices\T:  
                 (It doesn’t have to be T: , you can use any other drive letter )

Step 5 – Restart the server

Step 6 – After the server is powered on, you will see a blank screen, press Ctrl+Alt+Del  , choose “Start Task Manager” , type explorer and press OK.

Step 7 – Click on start and access to your DVD drive, for example: D:\  (Which you have written down in Step 2)

Step 8- run Windows 2008 R2 setup again and install it on the drive with the new letter that you have defined earlier. (In step 4)

• Step 9 – After the installation has ended you would be able to see that the system drive letter is defined with the new drive letter that you have defined 🙂 .

• Step 10- last step will be to delete the old directory of windows and you are done!!!

Yaron

Read Full Post »

Can’t change in windows 2008 R2 Internet Security Options because its Grayed out

Problem

Can’t change in windows 2008 R2 Internet security Options because its Grayed out.

Solution

• Go to Server Manager ( My Computer > Manage)
• Stand on Server Manager
• Go to Security Information > Configure IE ESC > Turn it off

            

Fixed.

Idit.

Read Full Post »

Hyper-V Error: “The virtual machine could not be started because the hypervisor is not running”

 

Problem

I created a virtual machine (object) in Hyper-V Manager, and when I tried to start the virtual machine, I received the following error: The virtual machine could not be started because the hypervisor is not running.

Solution

I restated the Hyper-V server , and entered its BIOS. In the BIOS under processor options I have noticed that the Virtualization Technology is disabled.

I enabled that option and afterwards everything was back to normal.

Idit.

Read Full Post »

Enabling sound for remote desktop (RDP) in a Windows XP / Windows 2003 / Windows 2008 virtual machine

http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=1004839&sliceId=1&docTypeID=DT_KB_1_1&dialogID=1299588&stateId=0%200%201301050

Read Full Post »