tag:blogger.com,1999:blog-4975738836697617702008-07-16T16:10:58.399-07:00Michael Khanin | Network AdministrationMichael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comBlogger49125tag:blogger.com,1999:blog-497573883669761770.post-46076232652196503262008-07-02T17:44:00.000-07:002008-07-02T17:46:16.396-07:00"Outlook Anywhere" and problems with IPv6 in Windows Server 2008It's not a secret, that <strong>IPv6</strong> has some "issues". When I've been in Seattle, at last MVP summit, a lot of <strong>IT professionals</strong> said that, and all of them recommended to disable <strong>IPv6</strong> on <strong>Windows 2008</strong> or / and <strong>Vista</strong> machines. <strong>Kevin Reeuwijk</strong> from "<a href="http://thesystemadministrator.com/redir?www.buit.org/2008/01/04/outlook-anywhere-is-broken-on-ipv6-in-windows-server-2008/" target="_blank"><strong>Innovative Technology Weblog</strong></a>" posted a very good article; <a href="http://thesystemadministrator.com/redir?www.buit.org/2008/01/04/outlook-anywhere-is-broken-on-ipv6-in-windows-server-2008/" target="_blank"><strong>Outlook Anywhere is ‘broken’ on IPv6 in Windows Server 2008</strong></a>.<br />So, if you run <strong>Exchange 2007</strong> on <strong>Windows Server 2008</strong> and want to use <strong>Outlook Anywhere</strong> (aka RPC over HTTP) you probably get a problem. It would not work if the <strong>RPC-over-HTTP Proxy</strong> and the <strong>Exchange</strong> Mailbox installed on the same <strong>Windows 2008 Server</strong>.<br />To make the long story short, simply unselect IPv6 from the properties of your NIC <strong>AND</strong> (it's very important) make a changes to the <strong>HOSTS</strong> file. Simply open up your <strong>hosts</strong> file and make the following changes:<br /><ul><li>Comment out the line “:::1 localhost”</li><li>Add the following two lines:</li></ul> <div align="left"><em> <ipv4> <hostname> <ipv4><fqdn></fqdn></ipv4></hostname></ipv4></em>This will resolve all queries for your computer’s name to its IPv4 address, effectively disabling the use of IPv6 for self-communication. You can confirm that this works by doing a “telnet localhost 6004″.<br /><br /></div>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-69920190161877108422008-04-21T16:00:00.000-07:002008-04-21T16:01:52.355-07:00CoreConfigurator - Graphic Management Tool for Windows Server 2008 CoreThe default management for <b>Windows Server 2008 Core </b>is the command line. Yes, the main powerful of <b>Windows Server Core </b>becomes available when using such an approach, but sometimes it's not so user friendly. This is why I've been asking so many times if exist anything more graphic :). Yes, one of the first recommendations to work and manage <b>Windows 2008 Server Core </b>is to use <b>MMC</b> from a remote machine, but <b>MMC</b> cannot do everything. Of course to allow work with remote tools this tool should be allowed passage through the firewall packages Server Core. In addition, this is for many more difficult than editing the registry. :) Therefore, I would like to have a simple graphical tool for configuring local system. The task of developing such an interface is complicated by that the Server Core has a limited set of graphics API, this is a reason why so beautiful MMC doesn't work on it.<br /><br />So, if Microsoft has not established such utilities anybody else did this. Look at the utility <b>CoreConfigurator</b> developed by <b>Guy Teverovsky</b>, <i>MVP from Israel</i>.<br /><br />This is what it can:<br /><ul><li>Product Activation Product Activation </li><li>Configuration of display resolution Configuration of display resolution </li><li>Clock and time zone configuration Clock and time zone configuration </li><li>Remote Desktop configuration Remote Desktop configuration </li><li>Management of local user accounts (creation, deletion, group membership, passwords) Management of local user accounts (creation, deletion, group membership, passwords) </li><li>Firewall configuration Firewall configuration </li><li>WinRM configuration WinRM configuration </li><li>IP configuration IP configuration </li><li>Computer name and domain/workgroup membership Computer name and domain / workgroup membership </li><li>Installation of Server Core features/roles Installation of Server Core features / roles </li></ul>To setup this utility use MSI package and then run the CoreConfigurator. exe file. The following interface will appear.<br /><br /><div align="center"><img src="http://thesystemadministrator.com/images/stories/Windows_2008_Core/coreconfigurator_1.jpg" align="bottom" border="0" hspace="0" /><br /></div><br />Just in case, it's not necessary to install CoreConfigurator, we can simply copy its files into the system. The result will be the same. The video settings look like this:<br /><br /><div align="center"><img src="http://thesystemadministrator.com/images/stories/Windows_2008_Core/coreconfigurator_2.jpg" align="bottom" border="0" hspace="0" /><br /></div><br />Setting "Show window content while dragging" may very markedly improve display window objects, if you work with the server via terminal connection. Please note that the setting affects only the current user. According to the picture, to change the time zone, the developer did not reinvent the wheel, and just call to standard <b>timedate.cpl </b><br /><br /><div align="center"><img src="http://thesystemadministrator.com/images/stories/Windows_2008_Core/coreconfigurator_3.jpg" align="bottom" border="0" hspace="0" /><br /></div><br />Remote Desktop Options look like this: <br /><br /><div align="center"><img src="http://thesystemadministrator.com/images/stories/Windows_2008_Core/coreconfigurator_4.jpg" align="bottom" border="0" hspace="0" /><br /></div><br />All would be good, but in this version you still have to allow RDP connections in the firewall manually using netsh. Hopefully, in the next version this will be fixed. Management of local users and groups is done through the following windows.<br /><br /><div align="center"><img src="http://thesystemadministrator.com/images/stories/Windows_2008_Core/coreconfigurator_5.jpg" align="bottom" border="0" hspace="0" /><br /></div> <div align="center"><img src="http://thesystemadministrator.com/images/stories/Windows_2008_Core/coreconfigurator_6.jpg" align="bottom" border="0" hspace="0" /><br /></div><br />Installation of Roles and Features became a more visual :<br /><br /><div align="center"><img src="http://thesystemadministrator.com/images/stories/Windows_2008_Core/coreconfigurator_7.jpg" align="bottom" border="0" hspace="0" /><br /></div><br />Instantly, functionality of firewall management is very limited, but at least he had already to incorporate all necessary rules for the remote control.<br /><br /><div align="center"><img src="http://thesystemadministrator.com/images/stories/Windows_2008_Core/coreconfigurator_8.jpg" align="bottom" border="0" hspace="0" /><br /></div><br />Configuring your network interfaces habitually looks fairly.<br /><br /><div align="center"><img src="http://thesystemadministrator.com/images/stories/Windows_2008_Core/coreconfigurator_9.jpg" align="bottom" border="0" hspace="0" /><br /></div><br />To set the activation key and Activate the OS is also very simple and all this done via GUI :)<br /><br /><div align="center"><img src="http://thesystemadministrator.com/images/stories/Windows_2008_Core/coreconfigurator_10.jpg" align="bottom" border="0" hspace="0" /><br /></div><br />In addition, let me show winrm interface, interface to rename computer and join it to domain:<br /><br /><div align="center"><img src="http://thesystemadministrator.com/images/stories/Windows_2008_Core/coreconfigurator_11.jpg" align="bottom" border="0" hspace="0" /><br /></div><br /><div align="center"><img src="http://thesystemadministrator.com/images/stories/Windows_2008_Core/coreconfigurator_12.jpg" align="bottom" border="0" hspace="0" /><br /></div><br />It is understandable that <b>CoreConfigurator</b> is not officially supported by Microsoft. Many IT professionals probably have any doubts, whether to trust manufacturer of the software. As usual choice, set its server utility or not is up to you. :)Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-30299392327132712402008-04-09T12:43:00.000-07:002008-04-09T12:44:06.523-07:00How to Create File for a Desired File SizeTime to time I get the need to have some temp files of varying sizes. In <b>Linux</b> environment it's not a problem to do. And, in <b>Windows</b> environment it's not a problem anymore :).<br />I've used a "<a href="http://thesystemadministrator.com/redir?www.chrysocome.net/dd"><b>dd for windows</b></a>". "<b>dd for windows</b>" could be downloded from <a href="http://thesystemadministrator.com/redir?www.chrysocome.net/dd" target="_blank"><b>official web site</b></a>. I've created a very simple script, <b>mkef.bat</b>. Here is a syntax for using <b>mkef.bat</b>:<br /><br /><div class="code"><i>mkef.bat <filename> <size></i></div><br /><br />And now the content of <b>mkef.bat</b>:<br /><br /><div class="code"><i>@echo off<br />if {%1}=={} @Echo Please use the following syntax: mkef.bat filename size &goto :EOF<br />if {%2}=={} @Echo Please use the following syntax: mkef.bat filename size &goto :EOF<br />dd if=/dev/zero of=%1 bs=1024 count=%2</i></div>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-47853142579815212122008-02-28T15:36:00.000-08:002008-02-28T15:37:31.344-08:00What NAP is and how it works?<p>Yesterday was the first <b>Windows 2008</b> event in Canada. The first event was in Toronto and had almost 3000 attendees. Twenty <b>MVP</b>s participated in <b>Ask-The-Expert </b>and I was one of them :). One of the commonly asked questions was question about “<i><b>What NAP is and how it works?</b>“</i> </p> <p>So, I’d like to show what posted on <b>TheLazyAdmin.com</b> about <b>NAP</b>: <br /><i>With the recent launch of Windows Server 2008 you are no doubt spending all your free time playing around with everything new. One thing you might be playing around with is Network Access Protection. There is a great <a href="http://thesystemadministrator.com/redir?www.microsoft.com/downloads/details.aspx?FamilyID=ac38e5bb-18ce-40cb-8e59-188f7a198897&displaylang=en">document on getting a DHCP based NAP lab set up</a> but one thing the document is missing is how to configure the NAP client in XP SP3. In Windows Vista you simply start the service then enable the client through the NAP Client Configuration MMC (napclcfg.msc) but XP SP3 does not include the MMC. So how does one configure the NAP Client without a Nap Client configuration tool? Netsh, that is how!</i> </p> <p><i>To enable the <b>NAP Client</b> on <b>XP SP3</b> you need to do the following:</i> </p> <ol><li><i>Start –> Run –> Services.msc</i></li><li><i>Change the Network Access Protection Agent service to start automatically</i></li><li><i>Start the Network Access Protection Agent service</i></li><li><i>Start –> Run –> CMD.exe</i></li><li><i>Type netsh nap client set enforcement ID = ##### Admin = “Enable”</i></li><li><i>Start –> Run –> GPEdit.msc</i></li><li><i>Drill down to Computer Configuration | Administrative Templates | Windows Components | Security Center</i></li><li><i>Enable the Security Center</i></li><li><i>Start –> Run –> Services.msc</i></li><li><i>Start the Security Center service</i></li></ol> <p><i>You will need to replace the ##### with the ID based on whichever enforcement method you are using. You can use the following IDs for the various enforcement methods:</i> </p> <ul><li><i>DHCP = 79617</i></li><li><i>RAS = 79618</i></li><li><i>IPSec = 79619</i></li><li><i>TS Gateway = 79621</i></li><li><i>EAP = 79623</i></li></ul> <p><i>For more labs and information see:</i> </p> <p><i><a href="http://thesystemadministrator.com/redir?www.microsoft.com/downloads/details.aspx?FamilyID=298ff956-1e6c-4d97-a3ed-7e7ffc4bed32&displaylang=en" id="ctl00_mainContentContainer_ctl12"><span style="color:#0033cc;">Step-by-Step Guide: Demonstrate IPsec NAP Enforcement in a Test Lab</span></a></i> </p> <p><i><a href="http://thesystemadministrator.com/redir?www.microsoft.com/downloads/details.aspx?FamilyID=8a0925ee-ee06-4dfb-bba2-07605eff0608&displaylang=en" id="ctl00_mainContentContainer_ctl13"><span style="color:#0033cc;">Step-by-Step Guide: Demonstrate 802.1X NAP Enforcement in a Test Lab</span></a></i> </p> <i><a href="http://thesystemadministrator.com/redir?www.microsoft.com/downloads/details.aspx?FamilyID=729bba00-55ad-4199-b441-378cc3d900a7&displaylang=en" id="ctl00_mainContentContainer_ctl14"><span style="color:#0033cc;">Step-by-Step Guide: Demonstrate VPN NAP Enforcement in a Test Lab</span></a></i>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-36228900022202366612008-02-03T19:47:00.000-08:002008-02-03T19:48:03.341-08:00Microsoft doesn’t recommend creating Vista ‘Lite’<p>As many of you know, it’s possible to create a “Lite” version of operating system by using well know program <a target="_blank" href="http://www.vlite.net/about.html">vLite</a>. But, recently Microsoft said in an e-mail to CNET News.com:</p> <p><em>“Microsoft does not recommend using any tool to strip out applications from Windows Vista prior to installing it on your system, as it may affect your ability to download future Windows updates and service packs, and may cause your system to become unstable,”</em> </p> <p>So, think twice before you creating Vista ‘Lite’ <img src="http://itknowledgeexchange.techtarget.com/network-administrator/wp-includes/images/smilies/icon_wink.gif" alt=";)" class="wp-smiley" /></p>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-70507782411998587332008-01-18T12:34:00.000-08:002008-01-18T12:35:28.893-08:00SEP 11: virus definition folder takes too much disk space<p>For those who did not give up trying to deploy <span style="font-weight: bold;">Symantec Endpoint Protection 11</span>.<br /><br />On client computers you might notice that virus definition folder (by default it is located in C:\Program Files\Common Files\Symantec Shared\VirusDefs) takes up large amounts of disk space. In my case - more than 5 Gb. When you open VirusDefs folder you can see a lot of temporary folders called tmpXXXX.tmp, where XXXX are hexadecimal characters.<br /><br />The cause of the problem is that virus definitions may be corrupted.<br /><br />To solve this issue, follow the steps below:<br /><br />1. Stop the Symantec Management Client service:<br /></p><ul><li>Start -> Run </li><li>Type "smc –stop" (without qoutes) and click OK</li></ul><p>2. Stop the Symantec Endpoint protection Service in services snap-in</p><p>3. Go to "Virusdefs" folder. Delete all ".tmp" files and folders <strong>AND</strong> any numbered folders (such as "20070820.048", "20080115.021" etc.)</p><p>4. Install new definitions manually using the Intelligent Updater:</p><ul><li>Follow this link: <a href="http://www.symantec.com/avcenter/defs.download.html">http://www.symantec.com/avcenter/defs.download.html</a></li><li>Select the language and for the product, select Symantec Endpoint Protection</li><li>Click "Download Updates" button</li><li>Select the correct file to download for Symantec Endpoint Protection 11 depending on whether it is for 32-bit or 64-bit OS</li><li>Click the ".exe" file specified for Symantec Endpoint Protection 11, download to your hard drive and run it</li></ul><p>5. Start the Symantec Endpoint Protection Service </p><p>6. Start the Symantec Management Client service:</p><ul><li>Start -> Run </li><li>Type "smc –start" (without qoutes) and click OK</li></ul><div style="text-align: right;">Source: http://youradmin.blogspot.com/<br /></div>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-9575284988178739992008-01-16T12:11:00.000-08:002008-01-16T12:12:08.887-08:00Internet Explorer 7 (IE7) deployment - New white paper<strong>Microsoft</strong> just released a new version of their <a href="http://www.microsoft.com/downloads/details.aspx?familyid=e41d8800-d134-4356-a2e7-c01bee790908&displaylang=en&tm">IE7 deployment paper</a>. The document has 156 pages. IE7 deployment can get tricky. Try to read this document before deployment, if you haven’t done it yet. It might be a useful reference if you run into problems.Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-1164466562317964592008-01-09T11:39:00.000-08:002008-01-09T11:42:34.701-08:00Things that Virtual PC needs to be run as Administrator for...<p>For the most part Virtual PC is able to happily run when you are using a non-administrative user account and everything will work. There are - however - a couple of things that will not work correctly unless Virtual PC is run under an Administrative account:</p> <ol><li>Using ping (or other ICMP based tools) over shared networking. <br /> <br />In order to create ICMP packets (as opposed to standard TCP/IP packets) that appear to originate from the virtual machine when using shared networking - we need to access Windows APIs that are restricted to only being accessed by administrators.<br /> <br />The reason why these APIs are restricted is that there are a number of known <a href="http://www.javvin.com/networksecurity/ICMPAttacks.html" target="_blank">ICMP based network attacks</a> that malicious software could try to utilized on your computer. <br /> <br />The impact of this is that you will simply be unable to ping other computers from a virtual machine. Note that this does not affect virtual machines that are using a direct connection to the physical network adapter.<br /> <br /></li><li>Using or converting linked virtual hard disks. <br /> <br />Linked virtual hard disks require us to open a handle to the raw physical disk object (and bypass the Windows file system). As this mechanism could also be used to bypass file system security it is restricted to administrative processes only.<br /> <br />If Virtual PC is not running as an administrative process you will be unable to create linked virtual hard disks, convert linked virtual hard disks or boot virtual machines with linked virtual hard disks connected to them.<br /> <br /></li><li>Accessing copy protected CDs. <br /> <br />Virtual PC attempts to access the physical CD by using a handle to the raw disk (like with linked virtual hard disks) but if that fails it will fall back to using the Windows file APIs to access the CD.<br /> <br />The Windows file APIs work fine for accessing normal data off of CDs - but is unable to provide the information necessary to support the use of copy protected CDs inside of virtual machines.<br /> <br />If Virtual PC is not running as an administrative process access to normal CDs will function correctly - as will data access to copy protected CDs - however any software that attempts to check the authenticity of a copy protected CD will fail.<br /> <br /></li><li>Configuring the Virtual PC security options. <br /> <br />Configuring the <a href="http://blogs.msdn.com/virtual_pc_guy/archive/2006/05/22/602866.aspx" target="_blank">Virtual PC security options</a> requires that we change registry keys stored in the Local Machine registry hive. The values are stored here so that non-administrative users cannot undo security settings changes made by an administrative user.<br /> <br />If Virtual PC is not running as an administrative process the settings on this options page will be disabled.</li></ol> <p>Now remember that under Windows Vista Virtual PC will be running as a non-administrative process even if you are using an administrative account. To get these features to work under Vista you need to right click on the Virtual PC icon in the start menu and select <strong>'Run as administrator'</strong> (with the exception of the Virtual PC security options where we will prompt you to give administrative approval if you are not running as administrator).</p>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-62618902637543059172007-12-19T17:10:00.000-08:002007-12-19T17:12:36.417-08:00Windows, iSCSI and NAS (Network-attached Storage) in Test Environment<p>Recently, I worked on a project to be deployed on a <strong>Windows servers cluster</strong>.<br />Before setting up the production environment, it was necessary to check if one of the required applications will work on a cluster.<br /><br />To those of you who doesn’t know what a cluster is, just take a look at what’s written on Wikipedia: <a href="http://thesystemadministrator.com/redir?en.wikipedia.org/wiki/Computer_cluster" title="" target="_blank">http://en.wikipedia.org/wiki/Computer_cluster</a></p> <p> That time, I had no extra servers for testing, so I decided to setup the cluster in a virtual environment. To do this, I created 2 <strong>Windows 2003 Servers </strong>on my <strong>VMWARE </strong>station.<br />However, the biggest problem was the storage space.<br /><br />Anyone who worked at least once with clusters, knows that they need a shared storage, also called a <strong>NAS</strong> (<strong><em>Network-attached Storage</em></strong>).<br />Unfortunately, I have no <strong>NAS</strong> in my lab, so I used another technique for my test.<br />If you do Googling a bit, you will find a lot of Linux-based NAS software, like <strong>FreeNAS</strong>.<br /><br />However, I wanted a Windows-based software and I founded probably one of the best (IMHO), which is <strong>StarWind</strong>, available for <strong>FREE</strong> in a <em><strong>Personal edition</strong></em>.<br />Now, I’m not going to show you how to install a cluster, I just would like to show how to connect two (or more) servers to the same <strong>Network-attached Storage</strong> by using the <strong>iSCSI technology</strong>, and how to do this in a test environment.</p> <p>When you launch StarWind for the first time, you will see a screen like this one:</p> <div align="center"><img alt="" title="" src="http://thesystemadministrator.com/images/iSCSI-tartget-1.png" height="" width="" /><br /></div> <p> The first step is to add a device.<br />To do this, right click on the <em><strong>localhost:3260</strong></em> icon and select <strong>Connect</strong>.<br />For the <em><strong>username</strong></em> and <em><strong>password</strong></em>, simply use the word <span style="color:#ff0000;"><strong><em>test</em></strong></span>.<br /><br />When the connection will be established, click on the <strong>Add device</strong> button to display the following screen:</p> <div align="center"> <p><img alt="" title="" src="http://thesystemadministrator.com/images/iSCSI-tartget-2.png" height="" width="" /><br /></p></div> <p>Here, select <strong>Image File device</strong> and click on the<strong> Next </strong>button.<br /><br />On the next window, select <strong>Create new image</strong> and click on the <strong>Next </strong>button. You'll have to enter a name, a location and a size for the image.<br />For best performance, it's recommended to avoid image compression and encryption.<br />The next screen is of the highest importance.</p> <div align="center"><img alt="" title="" src="http://thesystemadministrator.com/images/iSCSI-tartget-3.png" height="" width="" /><br /></div> <p><strong>REMEMBER</strong> to select <strong><em>Allow multiple concurrent iSCSI connections (clustering)</em></strong>. <br />If you forgot to select this option, your cluster setup will fail.<br /><br />The next steps are just about few clicks on some <strong>Next</strong> buttons and a <strong>Finish</strong> one.<br /><br />Finally, you should see a screen similar to this one:</p> <div align="center"><img alt="" title="" src="http://thesystemadministrator.com/images/iSCSI-tartget-4.png" height="" width="" /><br /></div> <p> Before connecting the <strong>Windows Server 2003</strong> to the <strong>iSCSI storage</strong>, we need to install the <strong>iSCSI Initiator</strong>, that can be downloaded from Microsoft.<br /><br />While I was writing this article, the setup of a <strong>Windows Server 2008 RC1 with Hyper-V Beta</strong> finished.<br /><br />Since the procedure for connecting iSCSI disks to a Windows Server 2008 is quite similar to connecting them to a Windows Server 2003, I'd like to show how to do this on a Windows Server 2008.<br /><br />So, from the Control Panel we start iSCSI initiator. When we do that for the first time, we get the message below:</p> <div align="center"><img alt="" title="" src="http://thesystemadministrator.com/images/iSCSI-tartget-5.png" height="" width="" /><br /></div> <p> Click on the <strong>Yes</strong> button. On the next window also click on the <strong>Yes</strong> button and you will see the following window:</p> <div align="center"><img alt="" title="" src="http://thesystemadministrator.com/images/iSCSI-tartget-6.png" height="" width="" /><br /></div> <p> Click on the <strong>Discovery</strong> tab, click on the <strong>Add Portal </strong>button, enter the<strong> IP address</strong> of the <strong>iSCSI </strong>machine (<em>where StarWind is installed</em>), and click on the <strong>OK</strong> button.<br /><br />Click on the <strong>Targets</strong> tab, and click on the <strong>Log on</strong> button.<br /><br />Select the options according to the picture below, and then don't forget to click on the <strong>OK</strong> button.</p> <div align="center"><img alt="" title="" src="http://thesystemadministrator.com/images/iSCSI-tartget-7.png" height="" width="" /><br /></div> <p> Click on the <strong>Volumes and Devices</strong> tab, and click on the <strong>Autoconfigure</strong> button.<br /><br />Now, we are ready to click on the last <strong>OK </strong>button, and go to the <strong>Disk Management</strong>.<br /><br />If all the previous steps were done correctly, you should see a screen similar to this one:</p> <div align="center"><img alt="" title="" src="http://thesystemadministrator.com/images/iSCSI-tartget-8.png" height="" width="" /><br /></div> <p> The next steps are very simple, and I don't think that I've to explain how to create a <strong>volume</strong> and a <strong>partition</strong> in Windows.<br /><br />When done, if we open <strong>My Computer </strong>we will see a new <strong>Local Disk</strong>, like in my example:</p> <div align="center"><img alt="" title="" src="http://thesystemadministrator.com/images/iSCSI-tartget-9.png" height="" width="" /><br /></div> <p> At this point, we have successfully configured an <strong>iSCSI storage</strong> under <strong>Windows</strong>, and we are ready to go on.</p>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-71852377137536817302007-12-16T09:09:00.000-08:002007-12-16T09:10:38.540-08:00PXE, aka Pre-Execution Environment and Acronis - Part 2<p>Since I've published article "<a href="http://thesystemadministrator.com/the_system_administrator/tips_%26_tricks/pxe%2c_aka_pre-execution_environment_-_part_1/" title="" target="_blank"><strong>PXE, aka Pre-Execution Environment - Part 1</strong></a>" I've got a lot of emails with the same question - 'Where is a Part 2?". So, here it is.</p> <p> I know many <strong>Network Administrators</strong> who work with <strong>Acronis</strong> products and i also sometime work with those good products. This week i did a project for one of my clients in <strong>Seattle</strong>, <strong>WA</strong>. The main idea was to deploy an Acronis image on new servers and configure those servers according to system requirements. So, again, those servers came without floppy drive and CD/DVD :) and as all of you know, to restore Acronis image on a new machine we have to use <strong>Bootable Rescue Media</strong>, aka <strong>Bootable CD</strong> with <strong>Acronis</strong> on it. Yes, I know, that Acronis provides a products with PXE integrated, but i don't have it :) and I've used my own PXE server.</p> <p>The first step I did was create <strong>Bootable Rescue Media</strong>. Then I took 2 files, <em><strong>kernel.dat</strong></em> and<strong><em> ramdisk.dat</em></strong> from Acronis's directory and put them into <em><strong>C:\PXEServer\TFTPRoot\Boot </strong></em>directory. Well, now was the time to make a small changes to our "<strong>default</strong>" file (<strong>default </strong>file located in <strong><em>C:\PXEServer\TFTPRoot\Boot\pxelinux.cfg\</em></strong> directory). After all those changes my "default" file now looks as follow:</p> <div style="font-style: italic;" class="code">DEFAULT menu.c32<br /><br />TIMEOUT 300<br />ALLOWOPTIONS 0<br />PROMPT 0<br /><br />MENU TITLE PXE Boot System<br /><br />LABEL ACRONIS<br />MENU LABEL ^Acronis Bootable<br />kernel kernel.dat<br />append initrd=ramdisk.dat vga=791 ramdisk_size=32768 acpi=off quiet noapic<br /><br />LABEL NetworkBoot<br />MENU LABEL ^Network Boot<br />kernel memdisk<br />append initrd=w98se-netboot.IMA<br /><br />LABEL CleanBoot<br />MENU LABEL ^Clean Win 98 Boot<br />kernel memdisk<br />append initrd=W98.IMA<br /><br />LABEL MemTest<br />MENU LABEL ^Memory Test<br />kernel memdisk<br />append initrd=W98_MemTest.IMA</div> <p>The next steps were pretty simple ;), Boot, Select Acronis from the menu, Select Image for recovery and.....<br /><br />Thanks to time PXE saved me I was able to spend some time in very beautiful city Seattle.<br /><br /><br /><strong>Relaited Articles</strong><br /><a href="http://thesystemadministrator.com/the_system_administrator/tips_%26_tricks/pxe%2c_aka_pre-execution_environment_-_part_1/" title="" target="_blank">PXE, aka Pre-Execution Environment - Part 1</a></p>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-20631749568950667172007-12-07T03:46:00.000-08:002007-12-07T03:47:33.650-08:00PDC 2008 Announced<p>Next<strong> Microsoft Professional Developers Conference </strong>(<em>PDC</em>): October 27–30, 2008 at the Los Angeles Convention Center.</p> <p><strong>PDC</strong> is the definitive Microsoft event for software developers and architects focused on the future of the Microsoft platform.</p>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-83378791819903772372007-12-06T00:33:00.000-08:002007-12-06T00:34:04.571-08:00Windows XP Service Pack 3 white paperMicrosoft has released a white paper on <span style="font-weight: bold;">Windows XP SP3</span>, which can be downloaded from the Microsoft download center.<br /><br /><a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=68c48dad-bc34-40be-8d85-6bb4f56f5110&DisplayLang=en">Windows XP Service Pack 3 Overview</a>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-52066994827735209392007-12-05T10:34:00.000-08:002007-12-05T10:36:52.104-08:00Download Windows XP SP3 RC directly from Microsoft ;)Today, one of my friends asked me how to get <strong>SP3 RC1</strong> for <strong>Windows XP</strong>. Many of you know that this release available for Beta Testers, but Friend of mine is NOT beta tester. So, you can use a Hack that will allow you to download <strong>Windows XP SP3 RC1</strong> directly from Microsoft. <strong><em>Windows XP SP3</em></strong> will be the final service pack for really good Operating System from Microsoft. SP3 will bring a lot of bug fixes and some new features from Vista. Well, if you can't wait for official release, create a .bat file, let say <em><strong>xpsp3rc1.bat</strong></em>. <strong>Copy & Past</strong> to<strong><em>xpsp3rc1.bat</em></strong> following commands: <div class="code"><em><br />@echo off<br />reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\XPSP3 /f 2> NUL<br />reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\XPSP3 /v RCPreview /t REG_SZ /d 1c667073-b87f-4f52-a479-98c85711d869 /f<br />echo XP SP3 RC1 registry key has been set. Please check for updates in Windows Update.<br />pause<br /><br /></em></div> Once you have created the file run the file by double clicking it. Wait for the Confirmation Message on screen. The Above file adds a few entries to the Windows Registry that makes Microsoft suppose that you are a part of the Private beta program Check for new updates on Windows Update. You will see Windows XP SP3 listed in the available updates. Download and install it. Remember to Reboot :). Please note this hack is the exact way Microsoft expects its beta testers to try Windows XP SP3 out, so you don’t have to worry too much about Microsoft catching hold of you.<br /><br /> I tried this on Windows XP Machine and this hack worked.Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-32028778281264051752007-11-28T13:11:00.000-08:002007-11-28T13:13:06.922-08:00More VHDs availableOn the <a href="http://www.microsoft.com/vhd">Microsoft VHD site</a> and there have been some new VHDs added. New on the VHD site recently are:<br /><a href="http://www.microsoft.com/downloads/details.aspx?familyid=bcae4531-6689-4016-89da-ffe60d061cef&displaylang=en">Biztalk Server 2006</a>, <a href="http://www.microsoft.com/downloads/details.aspx?familyid=9aa65956-4a13-46a3-9711-82939a041792&displaylang=en">Windows Server 2008 Beta 3</a>, <a href="http://www.microsoft.com/downloads/details.aspx?familyid=bc381af4-9bd0-49dd-be1a-0c6ee49cd2bc&displaylang=en">Exchange Server 2007 SP1 Beta 2</a> and <a href="http://www.microsoft.com/downloads/details.aspx?familyid=c2c27337-d4d1-4b9b-926d-86493c7da1aa&displaylang=en">Windows Vista Enterprise 30-day Eval Edition</a>. There is also a new VHD available for <a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=6662c7be-d79b-475a-863c-f976239ac0af&DisplayLang=en">Microsoft Search Server 2008 Express</a>.Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-86333177946726021452007-11-23T01:42:00.000-08:002007-11-23T01:44:57.639-08:00Content on log files via browser<p>I’ve a client that runs special program on about <strong>100 servers</strong>. This program writes a log on central server every 3 minutes. So, when I checked main server, I found a directory <strong>Logs </strong>(<strong><em>C:\Logs</em></strong>). Log’s directory contains many log files (each log for each server). On this server installed and runs a web server, <strong>Apache</strong> ;). So, I’d like to show a small <strong>AppsRuns.php</strong> file, which stored on web server. If we go to the <strong><em>http://server1/AppsRuns.php</em></strong> we will see a content of each log file on one web page. This web page refreshing every <strong><em>10 sec</em></strong>. Here is a content of <strong>AppsRuns.php</strong> file: </p> <p><em></em></p> <pre><em><?php<br /> $refresh_time = 10; // seconds<br /> $path = "C:\LOGS";<br /><br /> header("Content-Type: text/plain");<br /> header("Refresh: $refresh_time");<br /> <br /><br /> if($handle = opendir($path)) {<br /> while (false !== ($file = readdir($handle))) {<br /> $pi = pathinfo($path . '/' . $file);<br /> if($pi['extension'] === 'txt') {<br /> include($path . '/' . $file);<br /> }<br /> }<br /> }<br />?></em><br /></pre>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-89137070345089342642007-11-17T00:27:00.000-08:002007-11-17T00:28:45.296-08:00Updates: Free Deployment System Scripts<p>I have made a small change in my "<a href="http://thesystemadministrator.com/the_system_administrator/tools/free_deployment_system/" title=""><strong><em>Free Deployment System</em></strong></a>", the set of script allows to deploy, install or run applications on any remote computer.<br />Equally, I just added a few new lines. In to <em><strong>Config.bat</strong></em> added a new line:</p> <pre><em>set DSRV= 192.168.211.1</em></pre>By using a DSRV environment i can set IP or Computer Name of my <em><strong>Deployment Server.</strong></em><br />Also, added two new lines to the <strong><em>INSPKG.bat</em></strong> script (Script in original article already changed, so you can simply take a changed script). One of new lines contains following:<br /><em></em> <pre><em>%Tools%\psexec.exe \\%RCOMP% -u %USR% -p %PASS% -i cmd /c md C:\Updates</em></pre>This line creates a directory <em><strong>C:\Updates</strong></em> on remote computer. I use C:\Updates on remote computer to copy there necessary scripts and source of installation programs. The other new line in <em><strong>INSPKG.bat</strong></em> is:<br /><em></em> <pre><em>@echo set DSRV=%DSRV%> \\%RCOMP%\C$\updates\config.bat</em></pre>As you can see, by this line I create a <strong><em>config.bat</em></strong> file on remote computer and put in to environment, that sets a name or IP of our deployment server. Additionally, we need to change a package script. So, after changes, our package script looks like follow:<br /><br /><em></em> <pre><em>@echo off<br />call c:\updates\config.bat<br />\\%DSRV%\packages\7ZIP\7z442.exe /S</em></pre>So, now, if we are changed our deployment server, we have not to change our packages script.Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-68689934339285849152007-11-16T04:05:00.001-08:002007-11-16T04:05:56.835-08:00MTEE Commandline Standard Stream Splitter - sends any data it receives to the console and / or to any number of log files<p>For me and my clients I create many <strong>scripts</strong> to simplify daily Administration tasks. Many of this script should be running from a <strong>command line</strong> ( cmd. exe). It’s very easy to run any script and to get a result of it to the log file. But, if you would like to run script and watch the result on the screen and in same time you need a hard copied log, you can use a <strong>MTEE</strong> command line utility. <strong>Mtee</strong> is a commandline utility that sends any data it receives to the console and to any number of files. Useful if you want to watch and record the output from a batch file or program.</p> <p>Mtee is an 11kb standalone executable. There is no installation procedure, just run it.<br />Mtee is simple to use and only has several options. To list them, type <strong>mtee/?</strong></p> <p>You can download <strong>Mtee</strong> from offisial web site by following to the <a href="http://www.commandline.co.uk/mtee/index.html">http://www.commandline.co.uk/mtee/index.html</a></p>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-53962180484757197092007-11-09T07:57:00.000-08:002007-11-09T07:58:40.804-08:00DirectX 9.0c - Unattended (Silent) Installation<p>I've asked by one of companies, where i provide an IT consulting services, how to install directx on client's computers unattended? </p>Equally, on internet existed a lot of articles about how to do this. Who use an old <strong>dxsetup.exe</strong> file, who try to edit an exe file in <strong>HEX-Editor</strong> and then use switch <strong>OPK</strong> . Also, admins use other tricks, likes an AutomatIT or similar products. Just one consider i can't understand :), why nobody tries to read a HELP?<br /><p>By going to the <a href="http://thesystemadministrator.com/redir?msdn2.microsoft.com/en-us/library/bb219742.aspx" title="">http://msdn2.microsoft.com/en-us/library/bb219742.aspx</a> you can find, black on white, how to install directx in unattended mode. All you have to do, is to add the switch "<strong>/silent</strong>"!</p> <p>Admins, I'm also VERY lazy admin, but reading a HELP save your time, remember the <strong>RTFM</strong> rule ;)</p>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-45823379516806851812007-11-06T05:10:00.001-08:002007-11-06T05:10:45.047-08:00WSUS will become optional role for Windows Server 2008 Server Manager<p class="MsoNormal" style="margin: 0in 0in 0pt;" align="justify"><span style="font-family:Arial;font-size:85%;">In addition to roles and features that are included with Windows Server 2008 by default, Server Manager enables integration of additional roles and features that are available on the Microsoft Download Center and Windows Update Web sites as optional updates to Windows Server 2008. </span></p> <p class="MsoNormal" style="margin: 0in 0in 0pt;" align="justify"> </p> <p class="MsoNormal" style="margin: 0in 0in 0pt;" align="justify"><span style="font-family:Arial;font-size:85%;">One role that will be available as an update is Windows Server Update Services 3.0 Service Pack 1 (WSUS 3.0 SP1). This update to Server Manager enables <strong>full integration of WSUS 3.0 SP1 into Server Manager, allowing installation, configuration, and management of WSUS 3.0 SP1 using the Server Manager console and wizards.</strong></span></p> <p class="MsoNormal" style="margin: 0in 0in 0pt;" align="justify"> </p> <p class="MsoNormal" style="margin: 0in 0in 0pt;" align="justify"><span style="font-family:Arial;">Beta testers can download a server manager update for Windows Server 2008 RC0 to enable this new optional role, for now that is just WSUS. But since MS removed Windows Sharepoint Services as default available rol on WS08 I think this will become an optional role for Server manager too.</span></p><p class="MsoNormal" style="margin: 0in 0in 0pt;" align="justify"><span style="font-family:Arial;"><br /></span></p><div style="text-align: right;"><span style="vertical-align: middle; padding-left: 5px;">Source: <a href="http://connect.microsoft.com/" target="_blank">connect.microsoft.com</a></span><br /></div>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-39914609705530234382007-10-23T16:00:00.000-07:002007-10-23T16:01:23.307-07:00Windows XP Service Pack 3 RC Preview is now available on Connect<p>Microsoft just released <span style="font-weight: bold;">Windows XP Service Pack 3 RC Preview</span> is now available on Connect.</p> <p>Beta testers can get it now!<br /><br /></p><div style="text-align: right;"><span style="vertical-align: middle; padding-left: 5px;">Source: <a href="http://connect.microsoft.com/" target="_blank">connect.microsoft.com</a></span><br /></div>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-84001170032678460772007-10-23T13:09:00.000-07:002007-10-23T13:10:39.762-07:00Goodbye Windows Vista!<p>Goodbye Windows Vista!</p>A little over two weeks ago I gave up using Windows Vista, reformatted my hard drive and reinstalled Windows XP.<br /><p>For now, this is only a temporary Goodbye while we wait for the Windows Vista Service Pack 1 and I’m not quite ready yet to say <a href="http://goodbye-microsoft.com/" target="_blank">Goodbye Microsoft</a>.</p><strong>Why Windows XP instead of Windows Vista?</strong><br /><p>Quite simply because I got sick and tired of this revolutionary operating system being so slow and of having to wait while it would load up dialog boxes for opening or saving files.</p>This type of ordinary operation on a regular workday sometimes had me waiting for over half a minute before allowing me to see the contents of the directory I was trying to explore.<br /><p>In the end, a lot of time wasted every day and therefore a decrease in productivity.</p>Since the change, everything is great. My PC now runs with clockwork precision and I no longer spend time waiting for my computer’s operating system to finish off some unknown or imaginary task before finally doing what I’m asking it to do.<br /><p>English translation of the French article “<a href="http://blogs.media-tips.com/bernard.opic/2007/10/16/goodbye-windows-vista/" target="_blank">Goodbye Windows Vista !</a>” by <a href="http://www.transtyler.com/en/default.aspx" target="_blank">Andrew Kovacs, Ph. D</a>.</p>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-79218408334590597992007-10-21T16:43:00.000-07:002007-10-21T16:44:20.444-07:00Create Windows Live Messenger Buttons !Create a handy button for your <span style="font-weight: bold;">Windows Live Messenger</span> contact so your friends can easily add you to their contact list.<br /><br />Buttons make it easy! Use the button builder to create a button that fits your personal style or even just your mood. Add the button to your Windows Live Hotmail, Outlook and other email<br />signatures, Windows Live Space, or blog, and your friends and family can simply click your button to add you to their contact list.<br /><br />Click <a href="http://www.gowindowslive.com/messenger/button/Default.aspx" style="font-weight: bold;">here</a> for Button Builder.Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-89404821558323644322007-10-20T19:33:00.000-07:002007-10-20T19:34:21.561-07:00Get Serial Number of Main Board from command line<p><strong>Windows XP</strong> and <strong>Windows Server 2003</strong> contain the <strong>WMI</strong> <strong>(Windows Management Instrumentation</strong>) <strong>Wmic.exe</strong> command-line utility. By using Wmic.exe we can get a lot of information about computer (server).<br /><br />To display the local computer name and serial number of <strong>Main Board </strong>I’ve created a very simple script, <em><strong>SerNum.bat</strong></em>. <em><strong>SerNum.bat </strong></em>contains:</p> <div class="code"><em>@echo off<br />Setlocal<br />For /F %%a in ('wmic baseboard GET SerialNumber /value^|find "SerialNumber"') do Set %%a<br />@echo %Computername% - %SerialNumber%<br />endlocal</em></div><br />On my desktop, the above script displays:<br /><br /><em>PELEKAN-XP1 - VF0SA75A0SK<br /><br /></em>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-79350121395082933992007-10-13T14:55:00.001-07:002007-10-13T14:55:52.098-07:00Apache looses share to IIS again, never been so close<p>In the <b>October 2007</b> survey we received responses from <b>142,805,398</b> sites, an increase of 7.6 million sites since last month. This continues the strong gains seen last month, a rate of over 5% monthly growth, with MySpace, Microsoft Live.com, and Google's Bloggereach gained over 1 million sites this month. Benefitting from the gains at MySpace and Microsoft Live, Microsoft-IIS now hosts over 50 million sites.</p> <div class="blogsubtitle"><strong>Total Sites Across All Domains August 1995 - October 2007</strong></div> <p> </p> <p><img alt="Total Sites Across All Domains, August 1995 - October 2007" src="http://news.netcraft.com/archives/2007/10/site_count_history.gif" align="middle" /><br /><br /></p> <p>Apache loses 2.8% share this month, partly through the strong growth at the major blogging systems, and partly due to 2.5 million domains on Apache expiring at trouble-free.net. Apache has around a 10% market share advantage over IIS now, which is the smallest gap between the two since IIS was launched in 1996.</p> <p>On the active sites measure which excludes templated sites, Apache gains 1 million sites this month, though this is eclipsed by growth of nearer 3 million for Microsoft-IIS.</p> <div class="blogsubtitle"><a class="" name="October"></a><strong>Market Share for Top Servers Across All Domains August 1995 - October 2007</strong><strong> </strong></div> <p><img alt="Graph of market share for top servers across all domains, August 1995 - October 2007" src="http://news.netcraft.com/archives/2007/10/overallc.gif" align="middle" /> </p><br /><p style="text-align: right;"><span style="vertical-align: middle; padding-left: 5px;">Source: <a href="http://news.netcraft.com/archives/2007/10/11/october_2007_web_server_survey.html" target="_blank">news.netcraft.com</a></span></p><p><br /></p>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-497573883669761770.post-46240241314347451992007-10-13T14:52:00.000-07:002007-10-13T14:53:42.802-07:00SharePoint End User Training Kit now available!<p>The <strong>SharePoint End User Training Kit </strong>is our offering, and it's available at no cost!</p> <p>The initial release of the kit includes training content for SharePoint's collaboration capabilities. To be added over the next couple of months are additional modules covering portals and personalization, enterprise content management, search, business processes, and business intelligence. All of the content will have been written by the Office Online User Assistance team.</p> <p>The kit will be provided with two deployment options. The first, which is available now, is via the <a href="http://www.codeplex.com/SLK" target="_blank">SharePoint Learning Kit</a> ("SLK"), which is SCORM 2004 conformant e-learning delivery and tracking application built as a WSS 3.0 solution. With the SLK, IT personnel can control the look and feel of the training kit, matching it to corporate branding standards, and administrators can add or remove content and customize it as necessary. The SLK also provides a reporting function that shows which topics have been completed and by whom. </p><p>The SharePoint End User Training Kit will also have a standalone deployment option, which can be installed on a PC and used by an individual. This version of the kit will be available within the next few weeks. </p><p>For more information about the kit and instructions on how to obtain it, please go to our end user focused "<a href="http://sharepoint.microsoft.com/blogs/GetThePoint/Lists/Posts/Post.aspx?ID=23" target="_blank">Get the 'Point</a>" blog. <br /></p><p style="text-align: right;"><span style="vertical-align: middle; padding-left: 5px;">Source: <a href="http://blogs.msdn.com/sharepoint/archive/2007/10/11/sharepoint-end-user-training-kit-now-available.aspx" target="_blank">http://blogs.msdn.com/</a></span></p>Michael Khaninhttp://www.blogger.com/profile/10032281165922418711noreply@blogger.com