SBITS.Biz - SBS2003 SBS2008 SBS2011 Links - Russ Grover [SBS-MVP]

Blog Moved

2011-04-28T19:49:00.003-07:00

How to customize a default user profile in Windows 7

2010-07-19T01:00:00.000-07:00

http://support.microsoft.com/kb/973289/en-us

To customize a default user profile or a mandatory user profile, you must first...To customize a default user profile or a mandatory user profile, you must first customize the default user profile. Then, the default user profile can be copied to the appropriate shared folder to make that user profile either the default user profile or a mandatory user profile.

When the default user profile is customized in the manner that is described in this article, it reconstructs the source profile in a format that is appropriate for use by multiple users. This is the only supported method of customizing the default user profile for the Windows operating system. If you try to use other methods to customize the default user profile, it may result in extraneous information being included in this new default user profile. Such extraneous information could lead to serious problems with applications and system stability.

Back to the top

MORE INFORMATIONHow to customize a default user profile in Windows 7 and in Windows Server 2008...How to customize a default user profile in Windows 7 and in Windows Server 2008 R2

You can customize the default user profile by using the following Copy Profile parameter in the Unattend.xml answer file that is passed to the Sysprep.exe tool:

Microsoft-Windows-Shell-Setup\CopyProfile

To do this, follow these steps:

Use the local administrator account or an local account that has administrative privileges to log on to the computer.

Note You cannot use a domain account for this process. This is because when sysprep is executed it deletes that profile and the copying of the profile occurs during specialize phase on first bootup of the image. If you use a domain account the copy profile process will copy the profile with the latest time/date stamp.

Configure the settings that you want to use in the profile. This includes desktop settings, favorites, and Start menu options.

Create an Unattend.xml file that contains the Copy Profile parameter. By using this Copy Profile parameter, the settings of the user who is currently logged on are copied to the default user profile. This parameter must be set to "true" in the specialize pass. For example, the parameter must be as follows:

true

You can use the Windows System Image Manager tool to create the Unattend.xml file. The Windows System Image Manager tool is included as part of the Windows Automated Installation Kit (Windows AIK). For more information about Windows AIK, visit the following Microsoft Web site:

http://technet.microsoft.com/en-us/library/dd349343.aspx (http://technet.microsoft.com/en-us/library/dd349343.aspx)

For more information on how to create an answer file, see the Help information that is included with Windows AIK and then visit the following Microsoft Web site:

http://technet.microsoft.com/en-us/library/dd744394(WS.10).aspx (http://technet.microsoft.com/en-us/library/dd744394(WS.10).aspx)

At a command prompt, type the following command, and then press ENTER:

sysprep.exe /oobe /reboot /generalize /unattend:c:\answerfile\unattend.xml

Sysprep.exe is located in the %systemdrive%\Windows\System32\sysprep directory. For more information about Sysprep, visit the following Microsoft Web site:

http://technet.microsoft.com/en-us/library/cc766049.aspx (http://technet.microsoft.com/en-us/library/cc766049.aspx)

Note You must use the /generalize switch so that the Copy Profile parameter can be used. The /unattend option is used to point to the desired Unattend.xml file. Therefore, in this example, the Unattend.xml file is located in the c:\answerfile folder.

Back to the top

How to turn the default user profile into a network default user profile in Windows 7 and in Windows Server 2008 R2

Log on to the computer that has the customized default user profile by using an account that has administrative privileges.

Use the Run command to connect to the NETLOGON shared folder of a domain controller. For example, the path resembles the following:

\\\NETLOGON

Create a new folder in the NETLOGON shared folder, and name it Default User.v2.

Click Start from the Start menu, right-click Computer, click Properties, and then click Advanced system settings.

Under User Profiles, click Settings. The User Profiles dialog box shows a list of profiles that are stored on the computer.

Select Default Profile, and then click Copy To.

In the Copy profile to text box, type the network path of the Windows 7 default user profile folder that you created in step 3. For example, type the following path:

\\\NETLOGON\Default User.v2

Under Permitted to use, click Change, type the name Everyone, and then click OK.

Click OK to start to copy the profile.

Log off the computer when the copying process is completed.

Back to the top

How to turn the default user profile into a mandatory user profile in Windows 7 and in Windows Server 2008 R2

You can configure the default local user profile to become a mandatory profile. By doing this, you can have one central profile that is used by all users. To do this, you have to prepare the mandatory profile location, copy the local default user profile to the mandatory profile location, and then configure a user’s profile location to point to the mandatory profile.

Step 1: Prepare the mandatory profile location

On a central file server, create a new folder or use an existing folder that you use for roaming user profiles. For example, you can use the following folder name "Profiles":

\Profiles

If you are creating a new folder, share the folder by using a name that is suitable for your organization.

Note The share permissions for shared folders that contain roaming user profiles must enable Full Control permissions for the Authenticated Users group. The share permissions for folders that are dedicated to storing mandatory user profiles should enable Read permissions for the Authenticated Users group and enable Full Control permissions for the Administrators group.

Create a new folder in the folder that is created or identified in step 1a. The name of this new folder should start with the logon name of the user account if the mandatory user profile is for a specific user. If the mandatory user profile is for more than one user, name it accordingly. For example, the following domain has a mandatory profile, and the folder name begins with the word "mandatory":

\Profiles\mandatory

Finish naming the folder by adding .v2 after the name. The example that is used in step 1c has the folder name "mandatory." Therefore, the final name of the following folder for this user is "mandatory.v2":

\Profiles\mandatory.v2

Step 2: Copy the default user profile to the mandatory profile location

Log on to the computer that has the customized local default user profile by using an account that has administrative privileges.

Click Start from the Start menu, right-click Computer, click Properties, and then click Advanced System Settings.

Under User Profiles, click Settings. The User Profiles dialog box shows a list of profiles that are stored on the computer.

Select Default Profile, and then click Copy To.

In the Copy profile to text box, type the network path of the Windows 7 default user folder that you created in the "step 1: Prepare the mandatory profile location" section. For example, type the following path:

\\\Profiles\mandatory.v2

Under Permitted to use, click Change, type the name Everyone, and then click OK.

Click OK to start to copy the profile.

Log off the computer when the copying process is completed.

On the central file server, locate the folder that you created in the "step 1: Prepare the mandatory profile location" section."

Click Organize, and then click Folder options.

Click the View tab, click to select the Show hidden files and folders check box, click to clear the Hide extensions for known file types check box, click to clear the Hide protected operating system files check box, click Yes to dismiss the warning, and then click OK to apply the changes and close the dialog box.

Locate and right-click the NTUSER.DAT file, click Rename, change the name of the file to NTUSER.MAN, and then press ENTER.

Note Previously it was possible to copy profiles by using the System Control Panel Item. This copy to default profile option is now disabled as it could add data that made the profile unusable.

Step3: Prepare a user account

As a domain administrator, open the Active Directory Users and Computers management console from a Windows Server 2008 R2 or Windows Server 2008 computer.

Right-click the user account to which you want to apply the mandatory user profile, and then click Properties.

Click the Profile tab, type the network path that you created in the "step 1: Prepare the mandatory profile location" section in the profile path text box. However, do not add ".v2" at the end. In our example, the path would be as follows:

\\\Profiles\mandatory

Click OK, and then close the Active Directory Users and Computers management console.

The user will now use the customized mandatory user profile.

Connecting an iPhone to Exchange

2010-04-08T14:37:00.000-07:00

Source:
http://simultaneouspancakes.com/Lessons/2009/09/10/connecting-iphone-3-x-to-exchange/

Connecting iPhone 3.x to Exchange

By Q .I originally posted instructions for configuring an iPhone 2.0 device to an Exchange server back when the iPhone 3G was originally released. While those instructions still hold for the most part, the iPhone interface has changed somewhat, so here’s an updated post with pics for connecting the iPhone 3.x OS to an Exchange server.

1.From the Home screen (unless you’ve relocated the icon) open the Settings app.
2.Click the Mail, Contacts, Calendars item in the list.
3.Click Add Account.
4.Click Microsoft Exchange at the top of the list.
5.Enter your e-mail account information.
For the Email field, enter your default e-mail address exactly as it appears on your outgoing messages. This is important: if your outgoing e-mail address is Jon.Dough@smallbizco.net, you must match it exactly. If you enter jon.dough@smallbizco.net, you may encounter issues with calendar items. You may not need to enter the Domain field, but do enter it if you know what it is. Your username and password should match what you enter to access Outlook Web Access or your network account. If you do not know this information, you will need to get it from your system administrator.

6.Once you have entered the account information, click Next. The iPhone will attempt to connect to your mail server. You may be prompted to enter the name of the mail server if it could not be found automatically. This is the same as the server you use to access Outlook Web Access. If your Outlook Web Access server is https://remote.smallbizco.net/owa, then you need to enter remote.smallbizco.net as the mail server. Then click Next.

7.If the iPhone cannot correctly validate the security certificate on your mail server (this may be the case if your Exchange server is running on Small Business Server 2003 or 2008), you will be asked what to do about the connection. If you know you have entered the correct information about your mail server, click Accept. If not, click Cancel.

8.Choose which items from the Exchange server you want to sync with your iPhone. If you already have your contacts or calendar synchronizing with another source, you may want to hold off on selecting those to avoid a potential loss of data.

9.Click Done when finished.
The iPhone will now start the initial connection to the Exchange server and synchronize the selected information.

Media Player doesn't start in IE8 When Clicking on Links containing .avi, asf, ,wmv, mpg, mpeg,

2010-03-31T11:11:00.000-07:00

When I moved to Win7 I noticed that any Links that contained a URL with
.wmv, mpg, mpeg, avi,

Why I didn't have a clue I did some looking and I found this answer:
>>>>>>>>>>>Microsoft Answer was. <<<<<<<<<<<<<<
To resolve this behavior, reregister the Wmpdxm.dll file.
To do this, follow these steps:
1.At a command prompt, type one of the following commands:
•%systemroot%\system32
•c:\windows\system32
2.At a command prompt, type the following command:
regsvr32.exe wmpdxm.dll
3.Start Registry Editor. Verify that the following registry key points to the correct path and file name for the (Default) value:
HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\InprocServer32
Typically, the registry key points to the following path and file name:
C:\Windows\System32\Wmpdxm.dll
>>>>>> End of Microsoft Answer <<<<<<<<

However I found that didn't work
Looking around I found a post from Charles_Flook
http://social.answers.microsoft.com/Forums/en-US/w7pictures/thread/12fd4dd3-344b-4f5e-9201-ccaf2eefae13

And he suggested this which worked.

Open up notepad.exe
past the below into notepad and save as a MediaPlayerFix.reg file and open.
(allow it to make the changes)

>>>>>>>>>> MediaPlayerFix.reg <<<<<<<<<<<<<
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\.avi]
@="WMP11.AssocFile.AVI"
[HKEY_CLASSES_ROOT\.asf]
@="WMP11.AssocFile.ASF"
[HKEY_CLASSES_ROOT\.wmv]
@="WMP11.AssocFile.WMV"
[HKEY_CLASSES_ROOT\.mpg]
@="WMP11.AssocFile.MPG
[HKEY_CLASSES_ROOT\.mpeg]
@="WMP11.AssocFile.MPEG
>>>>>>>>>>>>>>>>>> End <<<<<<<<<<<<<<<

Then any links that end in the .avi, asf, ,wmv, mpg, mpeg, wiill open media Player.
Thanks Charles_Flook

BlackBerry Enterprise Server Express for Free SBS2008

2010-03-06T20:34:00.000-08:00

BlackBerry Enterprise Server Express for Free

http://na.blackberry.com/eng/services/business/server/express/

Connect two people via BlackBerry® Smartphone's and ideas get bigger.
Progress happens faster. Answers get smarter. So imagine what happens when
you give a business the freedom to connect all its employees.
BlackBerry® Enterprise Server Express enables businesses of any size to
quickly and easily get started with the BlackBerry solution. It provides
advanced BlackBerry Smartphone features with no additional software or user
license fees, and works with any Internet-enabled BlackBerry data plan or a
BlackBerry enterprise data plan.

System Requirements
http://na.blackberry.com/eng/services/business/server/express/RIM707_System_Requirements.pdf

TIP: Install Basic Apps easily - www.ninite.com

2010-02-10T18:00:00.000-08:00

Someone pointed this site out to me looks really promising:

www.NiNite.com

Install
Adobe
Java
Flash
and other needed apps
with one click.

Can't see Drive mapings in SBS2008 on XP Systems

2010-02-10T17:54:00.000-08:00

I don't know if this a duplicat post of mine
However if you've set up SBS2008 for Drive mapping in the login scripts
and you still can't get drive mappings.

It's probably because the client side extentions are not installed on the XP system and it needs "ALL" the Updates
First go to updates.microsoft.com and update the System

and then

Group Policy Preference Client Side Extensions for Windows XP (KB943729)
http://download.microsoft.com/download/f/e/b/feb2da1e-3611-452a-b134-1ddbe5567e5f/Windows-KB943729-x86-ENU.exe

Cannot See \\Server when VPN into a SBS2008 Server

2010-01-29T12:17:00.000-08:00

From http://nicholas.piasecki.name/blog/2009/06/getting-wins-like-computer-name-resolution-over-vpn-in-sbs-2008/

Getting WINS-like computer name resolution over VPN in SBS 2008
by Nicholas Piasecki on June 13th, 2009
So this week concluded several sleepless nights and much heartburn as I migrated Skiviez’s SBS 2003 machine (running as our domain controller and our mail server) to SBS 2008. As far as things go, it went relatively smoothly, and the remainder of the week was dealing with lots of small niceties that I had forgotten that I had set up on the 2003 server that I now needed to set up once again.

One of these was something that I used for my convenience over a VPN connection from home. You see, the internal order processing application that I wrote uses some shared folders to store some temporary data, such as e-mails that are generated but not yet released to Exchange, or a local copy of images that are available on the Web site. This software–and our users–are used to referring to Windows file shares as \\COMPUTER-NAME\SHARE-NAME; for example, \\CYRUS\Pickup Holding, because for some reason some of the older servers are named after my boss’s dead cats.

When connecting through VPN to SBS 2008, however, that “suffix-less” name resolution was not working. So when \\CYRUS\Pickup Holding failed to resolve to anything, \\cyrus.skiviez.com\Pickup Holding would work fine. This was super annoying.

The reason this worked previously with our SBS 2003 installation is that it was acting as a WINS server, which provided this type of computer name resolution for us. SBS 2008 finally retires this ancient technology by default, however, so I had two choices: I could either install the WINS server role on SBS 2008, or I could just figure out how to get the 015 DNS Domain Name option from DHCP to relay through the VPN connection.

I chose the latter option, since it’s certainly less confusing to be able to say to someone in the future “we don’t use WINS, DNS does everything.” So here’s how to do it:

1.On the SBS 2008 server, click Start > Administrative Tools > Routing and Remote Access.
2.In the tree view, drill down past the server name to IPV4 > General. Right-click the General option and choose “New Routing Protocol” and choose DHCP Relay Agent.
3.Now right-click the newly appended “DHCP Relay Agent” node and choose Properties. Add the IP address of your DHCP server (which is probably your SBS server itself), and click OK. Then click it again and choose “New Interface” and add the “Internal” interface.
4.Now if you connect through VPN, an ipconfig /all should show your domain name as a “Connection-specific DNS suffix” and pinging machines by their suffix-less computer names should work. (If it doesn’t, make sure your DHCP server is using that 015 DNS Domain Name option, which the SBS 2008 wizards set up by default.)

SBS 2008 Outlook Pop Ups and Continuous Logon Prompts

2010-01-28T16:42:00.000-08:00

SBS 2008 Outlook Pop Ups and Continuous Logon Prompts

http://wintivity.wigital.net/sbs/exchange-2007-sp1-update-rollup-9-fix-outlook-pop-up-sbs-2008/

SYMPTOM: for client workstations, when Outlook is launched, all users are continuously prompted for logon credentials in order to authenticate with Exchange even though they are properly authenticated on the domain. Authentication is in the Intranet Zone. Active Directory is fully functional and integrated with Exchange.

Exchange 2007 SP 1 Update Rollup 9
The resolution to restoring Exchange authentication communication with SBS 2008 Active Directory has been, in all cases, to download and install Exchange 2007 SP1 Update Rollup 9

Here are issues we’re aware of when installing the Update Rollup 9 for Exchange.

1.When installing Exchange 2007 Sp1 Update Rollup 9 on Small Business Server 2008 it is advisable to open the command prompt and install the update using RunAs and Administrator credentials. Update Rollup 9 has failed on SBS Installations WIGITAL has attempted unless initially launched in this manner. Navigating to the path where the update package is, and launching the installer using RunAs from the command line seems to solve some UAC (User Account Control) issues.
2.You may see the following Event IDs when installing this Update Rollup: Event ID 1024, Event ID 1603, Event ID 11321. Details follow….

Log Name: Application
Source: MsiInstaller
Date: 1/11/2010 1:22:21 PM
Event ID: 1024
Task Category: None
Level: Error
Keywords: Classic
User: DOMAIN\administrator
Computer: SBS2008-SERVER.DOMAIN.local
Description:
Product: Microsoft Exchange Server - Update 'Update Rollup 9 for Exchange Server 2007 Service Pack 1 (KB970162) 8.1.393.1' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127
as well as Event ID 11321

Log Name: Application
Source: MsiInstaller
Date: 1/11/2010 1:13:04 PM
Event ID: 11321
Task Category: None
Level: Error
Keywords: Classic
User: DOMAIN\Administrator
Computer: SBS2008-SERVER.DOMAIN.local
Description:
Product: Microsoft Exchange Server -- Error 1321. The Installer has insufficient privileges to modify this file: C:\Program Files\Microsoft\Exchange Server\RelNotes.htm.

NOTE: For more information about errors, Exchange Server 2007 SP1 Update Rollup 9 creates a log file here:

C:\Users\Administrator.DOMAIN\AppData\Local\Temp\3\MSIec215.LOG

Review the LOG to determine a course of action if you experience errors during your install.

To remedy the 11321 error ( which we’ve seen every time we’ve installed Update Rollup 9 ):

•Open Explorer
•Go to C:\Program Files\Microsoft\Exchange Server\RelNotes.htm
•Change the permissions on this file to allow the current Administrator FULL CONTROL
•Apply the changes
•Restart Update Rollup 9 using RunAs from the Command Line
Oddly enough, the installers permissible access to RelNotes.htm has ended more than one installation prematurely

You receive a ".pst is not compatible" error message when you open an Outlook 2003 or Outlook 2007 .pst file in earlier versions of Outlook

2010-01-28T15:59:00.000-08:00

You receive a ".pst is not compatible" error message when you open an Outlook 2003 or Outlook 2007 .pst file in earlier versions of Outlook

http://support.microsoft.com/kb/839109

When you use a version of Outlook that is earlier than Microsoft Office Outlook 2003, you may experience the following problem. If you to try to open or to import a personal folder file (.pst) that contains information that was exported from Microsoft Office Outlook 2003 or from Microsoft Office Outlook 2007, you may receive the following error message:
The file file_name.pst is not compatible with this version of the Personal Folders information service.
Contact your Administrator.

This problem occurs when the information in the .pst file was exported from Outl...This problem occurs when the information in the .pst file was exported from Outlook 2003 or from Outlook 2007 by using the Import and Export Wizard. Outlook 2003 and Outlook 2007 use the Unicode format to export information to a .pst file. Earlier versions of Outlook cannot open or import Unicode-formatted .pst files. Earlier versions of Outlook can open only .pst files that are formatted in American National Standards Institute (ANSI) format

To work around this problem, copy the contents of the Outlook 2003 or Outlook 20...To work around this problem, copy the contents of the Outlook 2003 or Outlook 2007 .pst file to a .pst file that has not been converted to the Outlook 2003 or Outlook 2007 Unicode format.

To copy information from a Unicode-formatted .pst file to an ANSI-formatted .pst file in Outlook 2003 or in Outlook 2007, follow these steps.

Note To follow these steps, you must use a .pst file from an earlier version of Outlook.
Start Outlook.

On the File menu, click Data File Management, and then click Add.
Click Outlook 97-2002 Personal Folders File (PST).
Click OK.
Click OK to accept the default name, and then click OK again.

Outlook 2003 now creates a new .pst file that is based on the earlier .pst file and maintains the ANSI formatting for that .pst file.
Click Close.
At the bottom of the navigation pane, click Folder List.

In the navigation pane, you now see the new .pst file.
Drag the information from your existing Outlook 2003 or Outlook 2007 folders to the new .pst file. You may also use the Import and Export Wizard on the File menu to move the information from your existing Outlook 2003 or Outlook 2007 folders to the new .pst file.
In the navigation pane, right-click the new .pst file, and then click Close "file_name".

Note E-mail messages or other items that contain Unicode characters will not be copied to the new .pst file.

Folder Sync Still Grabbing Old Sync Folder

2010-01-28T13:31:00.000-08:00

If you have an Issue where the PC is still grabbing an Old offline folder sync and the offline path dosn't exist anymore!

How to re-initialize the offline files cache and database

http://support.microsoft.com/kb/230738

The Offline Files (CSC or Client Side Caching) cache and database has a built-in capability to restart if its contents are suspected of being corrupted. If corruption is suspected, the Synchronization Wizard may return the following error message:
Unable to merge offline changes on \\server_name\share_name. The parameter is incorrect.

MORE INFORMATION
Method 1
The Offline Files cache is a folder structure located in the %SystemRoot%\CSC folder, which is hidden by default. The CSC folder, and any files and subfolders it contains, should not be modified directly; doing so can result in data loss and a complete breakdown of Offline Files functionality.

If you suspect corruption in the database, then the files should be deleted using the Offline Files viewer. After the files are deleted out of the Offline Files viewer, a synchronization of files may then be forced using Synchronization Manager. If the cache still does not appear to function correctly, an Offline Files reset can be performed using the following procedure:

1. In Folder Options, on the Offline Files tab, press CTRL+SHIFT, and then click Delete Files. The following message appears:
The Offline Files cache on the local computer will be re-initialized. Any changes that have not been synchronized with computers on the network will be lost. Any files or folders made available offline will no longer be available offline. A computer restart is required.

Do you wish to re-initialize the cache?
2. Click Yes two times to restart the computer.

Method 2
Use Registry Editor
If you cannot access the Offline Files tab, use this method to reinitialize the Offline Files (CSC) cache on the system by modifying the registry. Use this method also to reinitialize the offline files database/client-side cache on multiple systems. Add the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache
Key Name: FormatDatabase
Key Type: DWORD
Key Value: 1
Note The actual value of the registry key is ignored. This registry change requires a restart. When the computer is restarting, the shell will reinitialize the CSC cache, and then delete the registry key if the registry entry exists.

Warning All cache files are deleted and unsynchronized data is lost.
Use Reg.exe
You can also automate the process of setting this registry value by using the Reg.exe command line editor. To do this, type the following command in the Reg.exe window:
REG.EXE. REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache" /v FormatDatabase /t REG_DWORD /d 1 /f

Note For specific steps to re-initialize the offline files cache and database in Windows Vista, click the following article number to view the article in the Microsoft Knowledge Base:
942974 http://support.microsoft.com/kb/942974/

On a Windows Vista-based client computer, you can still access offline files even though the file server is removed from the network

Russ

Unable to login to companyweb from SBS server console

2010-01-22T12:50:00.000-08:00

This is an old issue but I still run into it so I'm blogging it.

Unable to login to companyweb from SBS server console
you get prompted for a password and even though you enter the correct credentials it gives you an error

Microsoft post found on (They have a fix it button on there.)

http://support.microsoft.com/kb/896861

When you use the fully qualified domain name (FQDN) or a custom host header to browse a local Web site that is hosted on a computer that is running Microsoft Internet Information Services (IIS) 5.1 or a later version, you may receive an error message that resembles the following:
HTTP 401.1 - Unauthorized: Logon Failed
This issue occurs when the Web site uses Integrated Authentication and has a name that is mapped to the local loopback address.

Note You only receive this error message if you try to browse the Web site directly on the server. If you browse the Web site from a client computer, the Web site works as expected.

Additionally, an event message that resembles the following event message is logged in the Security Event log. This event message includes some strange characters in the value for the Logon Process entry:
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537
Date: Date
Time: Time
User: NT AUTHORITY\SYSTEM
Computer: Computer_Name
Description: Logon Failure:
Reason: An error occurred during logon
User Name: User_Name
Domain: Domain_Name
Logon Type: 3
Logon Process: Ðùº
Authentication Package: NTLM
Workstation Name: Computer_Name
Status code: 0xC000006D
Substatus code: 0x0
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: IP_Address
Source Port: Port_Number

Note Sometimes, the strange characters that appear in this event message may resemble the following characters:
Ðù²
You may also receive an error message that resembles the following when you try to debug a Microsoft ASP.NET project in Microsoft Visual Studio 2003:
Error while trying to run project: Unable to start debugging on the web server. You do not have permissions to debug the server.

Verify that you are a member of the 'Debugger Users' group on the server.
Note The word "Web" is incorrectly capitalized in this error message.

Calls that are made from a Web service do not result in an HTTP 401 message in the IIS logs. An HTTP 401 message may be noted in the Description section of an Error event for an application that uses a Web service. For example, this behavior may occur for Microsoft Commerce Server 2002. If this behavior occurs, it is a symptom of a change that is made by Microsoft Windows Server 2003 Service Pack 1 (SP1) and the loopback check security feature.

CAUSE This issue occurs if you install Microsoft Windows XP Service Pack 2 (SP2) or Mi...This issue occurs if you install Microsoft Windows XP Service Pack 2 (SP2) or Microsoft Windows Server 2003 Service Pack 1 (SP1). Windows XP SP2 and Windows Server 2003 SP1 include a loopback check security feature that is designed to help prevent reflection attacks on your computer. Therefore, authentication fails if the FQDN or the custom host header that you use does not match the local computer name.

WORKAROUNDImportant This section, method, or task contains steps that tell you how to modi...Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 (http://support.microsoft.com/kb/322756/ ) How to back up and restore the registry in Windows

There are two methods to work around this issue, use one of the following methods, as appropriate for your situation.

Method 1: Disable the loopback check
The first method is to disable the loopback check by setting the DisableLoopbackCheck registry key.

To set the DisableLoopbackCheck registry key yourself, follow these steps:
Set the DisableStrictNameChecking registry entry to 1. For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:
281308 (http://support.microsoft.com/kb/281308/ ) Connecting to SMB share on a Windows 2000-based computer or a Windows Server 2003-based computer may not work with an alias name
Click Start, click Run, type regedit, and then click OK.
In Registry Editor, locate and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Right-click Lsa, point to New, and then click DWORD Value.
Type DisableLoopbackCheck, and then press ENTER.
Right-click DisableLoopbackCheck, and then click Modify.
In the Value data box, type 1, and then click OK.
Quit Registry Editor, and then restart your computer.

Method 2: Specify host names
To specify the host names that are mapped to the loopback address and can connect to Web sites on your computer, follow these steps:
Set the DisableStrictNameChecking registry entry to 1. For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:
281308 (http://support.microsoft.com/kb/281308/ ) Connecting to SMB share on a Windows 2000-based computer or a Windows Server 2003-based computer may not work with an alias name
Click Start, click Run, type regedit, and then click OK.
In Registry Editor, locate and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
Right-click MSV1_0, point to New, and then click Multi-String Value.
Type BackConnectionHostNames, and then press ENTER.
Right-click BackConnectionHostNames, and then click Modify.
In the Value data box, type the host name or the host names for the sites that are on the local computer, and then click OK.
Quit Registry Editor, and then restart the IISAdmin service.
Back to the top

How to install Exchange SP2 on SBS2008 (Exchange 2007)

2009-12-31T20:23:00.000-08:00

Microsoft Exchange Server 2007 SP2 Installation Tool for Windows SBS 2008
http://www.microsoft.com/downloads/details.aspx?FamilyID=ffd2fe61-9278-489e-9b96-3816394c9cb6&displayLang=en

If you didn’t have this tool you’d have to do this.

Download Exchange 2007 SP2
http://www.microsoft.com/downloads/details.aspx?FamilyID=4C4BD2A3-5E50-42B0-8BBB-2CC9AFE3216A&displaylang=en

How to install Exchange 2007 SP2 on SBS2008 without tool
http://support.microsoft.com/default.aspx?scid=kb;EN-US;973862

PDF Handler for Vista not working in outlook 2007 on Win7 64bit

2009-12-27T19:38:00.000-08:00

I found this fix from Leo Davidson,
for PDF Handler not working in Outlook 2007 on Win7 64bit and it Works Great!

Frome Source Page
http://www.pretentiousname.com/adobe_pdf_x64_fix/

Download Fix

http://www.pretentiousname.com/adobe_pdf_x64_fix/Reader_x64_fixer_1001_source.zip

Alternate Download: (Without permission from Leo)
http://www.sbits.biz/PDFviewerfix/Reader_x64_fixer_1001.zip

Thanks Leo :)

Improve RWW Performance in SBS2008

2009-12-16T11:08:00.000-08:00

SBS2008 RWW Has Changed the way RWW works
For one thing There is no Default Connect To Local Drives Option in RWW
Next it Automatically Enables the Background Image During a REMOTE RWW Session
(Which is Stupid IMO)

Below are some notes I've found across the web in speeding up RWW Experiance on SBS2008 *Use at your own perial

First thing I'd like to Address is NO Local Hard Drive Access Option in RWW
Let me guess You'd like to see this?

Where you Have the Option to Show Local drives and Ports.

To Enable this.
In Directory
C:\Program Files\Windows Small Business Server\Bin\webapp\Remote
Find tsweb.aspx
First thing make a backup Copy of this file
then open up Notepad in an elevated mode and then make the changes.

For Remote drives find!
MsRdpClient.AdvancedSettings2.RedirectDrives = FALSE
and set it to TRUE

If you want Remote Port Access Find
MsRdpClient.AdvancedSettings2.RedirectPorts = FALSE
And set it to TRUE

There are other things you can change but that will give you Remote Port and Drives.

Next is a way to Speed up RWW since RWW Defaults Allows the Background to display.
a. Again open notepad in elevated mode and open above file
b. Find the line "' Performance settings"
c. Insert this line below it
"MsRdpClient.AdvancedSettings2.PerformanceFlags = 111"

What this does: According to http://msdn.microsoft.com/en-us/library/aa381215(VS.85).aspx, you see it will disable Wallpaper, Full-window drag, Menu animations, Themes, Cursor shadow, Cursor blinking. So basically you can also change the value 111 to something else to just disable some of them.

2. Screen size:
Actually we have the logic to limit the TS window resolution to 1600*1200 as maximum. The reason is some low RDP version will not support the size larger than that. If you do want to use full screen size, and you don't have an low RDP version that will be using on a large resolution monitor (local one) (say using RDP 5.x or 6.0 on a 1920*1080 resolution monitor), then you could do below things to remove the limitation.

Steps:
a. Open notepad in elevated mode and open file (C:\Program Files\Windows Small Business Server\Bin\webapp\Remote\tsweb.aspx)
b. Find below content
if ( screen.width > 1600 ) then
sresWidth = 1600
else
sresWidth = screen.width
end if
if ( screen.height > 1200 ) then
sresHeight = 1200
else
sresHeight = screen.height
end if
c. replace them to
sresWidth = screen.width
sresHeight = screen.height

Note: after change this, if you do remote from RDP 5.x on a 1920*1080 resolution monitor, then most likely it will be failed with errors.
And the RDP 5.x are shipping with Windows XP SP2, RDP 6.0 are shipping with Vista RTM

The edited ASP Can be found here
http://www.sbits.biz/rwwfix/

(This only includes the Drive, ports and Background mods does not contain the screen resolution mod.) Use at own risk! :)

How to troubleshoot performance issues in Outlook 2007 Size Limits for OST PST and Outlook Slow issues

2009-11-16T12:20:00.000-08:00

Coppied from
http://support.microsoft.com/kb/940226

Very Good Article:

The performance issues may be caused by one or more of the following:
Insufficient computer specifications
The latest service pack for Outlook 2007 not installed
Large Personal Folders files (.pst) or Offline Folder files (.ost)
Outlook .ost files or .pst files that are stored on a drive with insufficient write performance
Third-party add-ins
Gadgets that access Outlook data (This only applies to Windows Vista)
Microsoft Office Communicator integration
Antivirus software interaction
Windows Desktop Search indexing
Incomplete closure of .pst files or .ost files
POP3 accounts on Windows Vista clients
Many Really Simple Syndication (RSS) feeds
To-Do Bar and Online mode with Exchange server
Back to the top
Does the computer meet the system requirements for the 2007 Office suite that you are using?
Make sure that the computer meets the system requirements for the 2007 Microsoft Office suite that you are using. For more information about the system requirements for the 2007 Office system, visit the following Microsoft Web site:
http://office.microsoft.com/en-us/outlook/HA101668651033.aspx (http://office.microsoft.com/en-us/outlook/HA101668651033.aspx)
If the computer meets only the minimum system requirements, you will not experience optimal performance of the 2007 Office suite.
Back to the top
Are you running the latest version of Outlook 2007?
We recommend that you run Outlook 2007 Service Pack 1 (SP1) with the February 2009 cumulative update. Outlook 2007 SP1 includes the changes from the performance update and from the Business Contact Manager update that is mentioned in this topic.

If you are running the release version of Outlook 2007, we recommend that you install the Service Pack 1 (SP1) update and the Outlook 2007 February 2009 cumulative update that is mentioned in the following Microsoft Knowledge Base article, 961752:
961752 (http://support.microsoft.com/kb/961752/ ) Description of the Outlook 2007 hotfix package (Outlook.msp): February 24, 2009
For more information about the Outlook product team's work on the February 2009 cumulative update, click the following article number to view the article in the Microsoft Knowledge Base:
968009 (http://support.microsoft.com/kb/968009/ ) Outlook 2007 improvements in the February 2009 cumulative update
Back to the top
Do you have a large .pst file or a large .ost file?
If you have a large .pst file or a large .ost file, you may experience application pauses during typical operations in Outlook. These typical operations include reading e-mail messages, moving e-mail messages, and deleting e-mail messages.

When you use Outlook 2007 with the Performance Update, or you use Outlook 2007 SP1 versions before the February 2009 cumulative update, the following .ost size guidelines generally apply:
Up to 2 gigabytes (GB): This size should provide a good user experience on most hardware.
Between 2 GB and 4 GB: This size is typically hardware dependent. Therefore, if you have a fast hard disk and much RAM, your experience will be better. However, slower hard drives, such as drives that are typically found on portable computers or early generation solid state drives (SSDs), experience some application pauses when the drives respond.
More than 4 GB: This size is where short pauses begin to occur on most hardware.
Very large, such as 10 GB or larger: This size increases the frequency of the short pauses, especially while you are downloading new e-mail. You can use Send/Receive groups to manually sync your mail. This synchronization minimizes changes in the local data file during heavy e-mail usage. For more information about how to manage Outlook synchronization, visit the following Microsoft Web sites:
http://office.microsoft.com/en-us/outlook/HP052421871033.aspx (http://office.microsoft.com/en-us/outlook/HP052421871033.aspx)
http://office.microsoft.com/en-us/outlook/HP030829231033.aspx (http://office.microsoft.com/en-us/outlook/HP030829231033.aspx)

When you use Outlook 2007 SP1 with the February 2009 cumulative update or higher, the following .ost size guidelines generally apply:
Up to 5 gigabytes (GB): This size should provide a good user experience on most hardware.
Between 5 GB and 10 GB: This size is typically hardware dependent. Therefore, if you have a fast hard disk and much RAM, your experience will be better. However, slower hard drives, such as drives that are typically found on portable computers or early generation solid state drives (SSDs), experience some application pauses when the drives respond.
More than 10 GB: This size is where short pauses begin to occur on most hardware.
Very large, such as 25 GB or larger: This size increases the frequency of the short pauses, especially while you are downloading new e-mail. As described above, you can use Send/Receive groups to manually sync your mail.

The default maximum size for a Unicode .pst or .ost file is approximately 20 GB. The following KB article describes how to increase the maximum size of a .pst or .ost file:
832925 (http://support.microsoft.com/kb/832925/ ) How to configure the size limit for both (.pst) and (.ost) files in Outlook 2007 and in Outlook 2003

The following blog post describes how to reduce the size of your local data file by using synchronization filters:
http://msexchangeteam.com/archive/2007/12/17/447750.aspx (http://msexchangeteam.com/archive/2007/12/17/447750.aspx)
This is a stop-gap solution and is provided here for reference if you cannot reduce the size of your mailbox. For example, you may be unable to reduce the size of your mailbox if you have to maintain an archive of all e-mail messages, both sent and received, over a time span of several years.
Back to the top
Are you running a computer that has a first generation Solid State Drive (SSD) or a slow rotational Hard Disk Drive (HDD)?
If you are running Outlook 2007 on a computer that has a first generation solid state drive (SSD) or a slow rotational hard disk drive (HDD), you may experience frequent pauses when you perform typical operations in Outlook.

Storing and retrieving data in an Outlook data file involves a high number of small noncontiguous reads and writes. A good metric to use when gauging data file performance on specific hardware is the disk drive’s noncontiguous write performance. The Windows performance team has provided a tool named WinSAT (see below for download and execution instructions) that can be used to benchmark specific disk drives. As you can see in the table below, the estimated experience for Outlook 2007 SP1 with the February 2009 cumulative update is better.

The WinSAT tool is part of the Windows Vista Upgrade Advisor and is included in Windows Vista. For non-Windows Vista-based computers, you can download the Windows Vista Upgrade Advisor here:
http://www.microsoft.com/downloads/details.aspx?FamilyId=42B5AC83-C24F-4863-A389-3FFC194924F8&displaylang=en (http://www.microsoft.com/downloads/details.aspx?FamilyId=42B5AC83-C24F-4863-A389-3FFC194924F8&displaylang=en)
The following table shows an estimated Outlook experience based on the score returned by the WinSAT tool.
Collapse this tableExpand this tableWinSAT score Drive characteristics SP1 before Feb update SP1 after Feb update and later versions
Less than 15 MB/s Generation 1 and Generation 2 SSDs (early 2008) Unusable Reasonable, responsive, limited hangs and pauses
Between 15 MB/s and 30 MB/s Most Generation 2 SSDs (after April 2008); many 5400 rpm laptop rotational drives Many hangs and pauses throughout the day Reasonable, responsive, limited hangs and pauses
Between 30 MB/s and 40 MB/s Some high-end Generation 2 SSDs (after September 2008); many 7200 rpm rotational drives Reasonable, responsive, limited hangs and pauses Quick, responsive, only occasional hangs
Greater than 40 MB/s Generation 3 SSDs, both MLC and SLC technology (November 2008); many 10000 rpm rotational drives Quick, responsive, only occasional hangs Quick, responsive, rarely hangs

NOTE: The following command-line was used to generate the results for the above table.
Winsat disk -drive c -ran -write -count 10
The results are found in the C:\Windows\Performance\Winsat\Winsat.log file.

Back to the top
Do you have many items in a single folder?
If you have a large number of items in any single folder, you may experience performance issues during certain operations in Outlook while using Cached Exchange mode or using a Personal Folders (.pst) file. . These performance issues are especially noticeable when you switch into and out of that folder.

When you use Outlook 2007 with the Performance Update, or you use Outlook 2007 SP1 versions before the February 2009 cumulative update, generally, when 10,000 or more items are in a single folder, these issues can occur.

When you use Outlook 2007 SP1 with the February 2009 cumulative update or higher and have more than 50,000 items in a single folder, views other than Arranged By: Date can be slower.

We recommend that you move several items in these larger folders to separate folders in the same store or to an archive store, and use Arrange By: Date when running Service Pack 1 (SP1) with the February 2009 cumulative update for folders that have a large number of items.

If you are not using Cached Exchange mode, please review one of the following resources. The resources document some performance issues on an Exchange server that has high item counts and restricted views. Additionally, the resources discuss how these performance issues might affect the overall client user experience.

For more information about understanding the performance impact of high item counts and restricted views, visit the following Microsoft Web site:
http://technet.microsoft.com/en-us/library/cc535025.aspx (http://technet.microsoft.com/en-us/library/cc535025.aspx)

For more information about mailbox size limits, visit the following Microsoft Exchange Team blog entry:
http://msexchangeteam.com/archive/2005/03/14/395229.aspx (http://msexchangeteam.com/archive/2005/03/14/395229.aspx)
Back to the top
Do you have any nonessential add-ins or out-of-date add-ins that are installed in Outlook?
If you have nonessential add-ins installed, you may want to remove them from Outlook. To view the add-ins that are installed, follow these steps:
In Outlook, click Trust Center on the Tools menu.
Click Add-ins to display a list of the COM add-ins that are installed.
By default, the following COM add-ins are included in the 2007 Office system:
Microsoft Access Outlook Add-in for Data Collection and Publishing
Microsoft Exchange Unified Messaging
Microsoft Office Groove Proxy for Outlook Add-in
Microsoft Office SharePoint Server Colleague Import Add-in
Microsoft Office Outlook Mobile Service
Microsoft VBA for Outlook Add-in
OneNote Notes about Outlook Items
Windows Search E-mail Indexer
Any other COM add-ins that are listed in the Trust Center were installed by other software.

Outlook can also use Microsoft Exchange Server client extensions that may cause performance issues. To see the list of currently installed Exchange Server client extensions, click Exchange Client Extensions in the Manage list in the Add-ins section, and then click Go. The Add-In Manager dialog box displays the list of currently installed Exchange Server client extensions.

By default, the following Exchange Server client extensions are included in the 2007 Office system:
Delegate Access
Deleted Item Recovery
Exchange Extensions commands
Exchange Extensions property pages
Any other extensions that are listed in the Add-In Manager dialog box were installed by other software.

To determine whether the performance problem is caused by add-ins, run Outlook in safe mode. To do this, press and hold CTRL when you start Outlook. When Outlook starts in safe mode, all COM add-ins and Exchange Server client extensions are disabled.

If the problem goes away when Outlook is running in safe mode, it is likely that one of the add-ins is causing the performance issue. To troubleshoot possible problems that are caused by COM add-ins or Exchange Server client extensions, disable any items that you do not use regularly. Then, restart Outlook. If that does not resolve the problem, disable the remaining add-ins one by one. If that does not resolve the problem, the issue may not be caused by an add-in.

To disable COM add-ins, follow these steps:
On the Tools menu, click Trust Center.
Click Add-ins, click COM Add-ins in the Manage list, and then click Go.
In the COM Add-Ins dialog box, click to clear the check boxes for any COM add-ins that you want to disable.
After you disable the add-ins, click OK, and then restart Outlook.
To disable Exchange Server client extensions, follow these steps:
On the Tools menu, click Trust Center.
Click Add-ins, click Exchange Client Extensions in the Manage list, and then click Go.
In the Add-In Manager dialog box, click to clear the check boxes for any extensions that you want to disable.
After you disable the extensions, click OK, and then restart Outlook.
Back to the top
Did you install any gadgets that integrate with Outlook?
On a Windows Vista-based computer, remove any gadgets that you downloaded to show your Outlook data. For example, this data may include the Outlook calendar, Outlook tasks, Outlook mail, and Outlook contacts. To remove gadgets on a Windows Vista-based computer, follow these steps:
Click StartCollapse this imageExpand this image, and then click Control Panel.
Click Control Panel Home.
Click Programs.
Click Windows Sidebar Properties.
In the Maintenance section, click View list of running gadgets.
Click any gadget that you want to disable, and then click Remove.
For more information about the Windows Sidebar, view the "How do I customize Windows Sidebar?" Help topic in Windows Vista.
Back to the top
Is Outlook integration with Communicator enabled?
By default, Outlook includes feature integration with Microsoft Office Communicator. The features that Outlook and Communicator share relate primarily to presence information such as whether someone is busy, away, or in a meeting. To disable feature integration, follow these steps:
In Outlook, click Options on the Tools menu.
Click the Other tab, click to clear the Display online status next to a person name check box under Person Names, and then click OK.
Restart Outlook.
Back to the top
Is antivirus software running?
If your antivirus software includes integration with Outlook, you may experience performance issues in Outlook. In this case, you can disable all Outlook integration within the antivirus software. Or, you can disable any antivirus software add-ins that are installed in Outlook.

You may have to contact the antivirus manufacturer to determine how to configure the antivirus software to exclude any integration with Outlook or to exclude scanning in Outlook.
Back to the top
Did you install Windows Desktop Search on a Windows XP-based computer or install Outlook on a Windows Vista-based computer?
Windows Desktop Search (WDS) will index all data in .ost files and in .pst files. However, the indexing of Outlook data occurs only when Outlook is running. Therefore, you may have to leave Outlook running overnight to determine whether the performance issues were related to the building of your search indexes.

Performance issues may increase when Outlook is running in online mode. Such performance issues occur because running Outlook in online mode increases the load on the Exchange Server. This performance issue is especially noticeable when Outlook is configured in a non-default state to index the items from the Exchange Server to the local client index, and more than one user indexes the Outlook data at the same time by using Windows Desktop Search.

To determine the indexing status for Outlook data, follow these steps:
In Outlook, point to Instant Search on the Tools menu, and then click Indexing Status.
In the Microsoft Office Outlook dialog box, view the number of items that remain to be indexed.
The built-in back-off mechanisms in the indexing component of Windows Desktop Search pause the indexing of Outlook data when the system is under heavy use. The easiest way to let the indexing finish is to leave Outlook running overnight.

Additionally, performance issues are reduced when you run Outlook in Cached Exchange Mode. In this mode, Windows Desktop Search searches the local copy of the mailbox instead of the mailbox content that is located on the server.
Back to the top
Did the .pst file or the .ost file shut down incorrectly?
If you are running Service Pack 1 (SP1) with the February 2009 cumulative update, the frequency of the operations described in this section will be dramatically reduced.

If the .pst file or the .ost file shuts down incorrectly, you may receive one of the following error messages the next time that you start Outlook:
Error message 1
Outlook cannot open the data file filename until it has been checked for problems.
Error message 2
Microsoft Office Outlook’ exited without properly closing your Outlook data file ‘drive:\Users\username\AppData\Local\Microsoft\Outlook\outlook.ost’. ‘Microsoft Office Outlook’ must be restarted. If this error message recurs, contact support for ‘Microsoft Office Outlook’ for assistance.
Error message 3
The data file filename was not closed properly’. This file is being checked for problems.
If you receive one or more of these error messages, you may experience performance issues until Outlook finishes the reconciliation process for the .ost file or for the .pst file. The following gear icon is displayed in the status bar while Outlook checks the data file in the background:
Collapse this imageExpand this image
When this icon disappears, the .pst file or the .ost file is reconciled. If you are running Outlook 2007 SP1 without the February 2009 cumulative update, and you exit Outlook while the gear icon is present, reconciliation must restart the next time that you run Outlook. In this case, we recommend that you leave Outlook running until the gear icon disappears before you exit Outlook. If you are running Outlook 2007 SP1 with the February 2009 cumulative update, the reconciliation process will pause at shutdown and resume (from where it was paused) the next time you start Outlook.

An incorrectly shut down .ost file or .pst file may occur for one of the following reasons:
Antivirus scanning of the file
Forced Microsoft Windows shutdown before the Outlook.exe process shuts down completely
Outlook add-ins
If you see this issue frequently, and you have to exit Outlook shortly before you shut down your computer, it may be better to shut down Windows while Outlook is still running. We recommend that you do this instead of exiting Outlook and then shutting down Windows shortly after that.
Back to the top
Do you use a rule that moves items out of the default store?
Rules that move items from your default store into another store can cause performance issues when Outlook downloads e-mail messages. Such performance issues are especially prevalent if you are not running Outlook with the SP1 update.

If you are using rules to move mail from a POP3 account to another store, you can use new functionality in Outlook 2007 that lets you change the delivery location of the POP3 account. In this case, you do not have to use rules to deliver the mail from that account to the separate store.

To do this, follow these steps:
On the Tools menu, click Accounts, and then select the POP3 account in the list.
Click Change Folder at the bottom of the dialog box to select a folder in the separate store to which you want to deliver that account.
If you do not use a POP3 account, you can also work around this issue by setting your target folder for all rules to be in the same Outlook store. Then, use the AutoArchive feature to move messages out of the default store in bulk. For more information about how to configure the AutoArchive feature, click the following article number to view the article in the Microsoft Knowledge Base:
830119 (http://support.microsoft.com/kb/830119/ ) Description of the AutoArchive feature in Outlook 2007 and in Outlook 2003
Back to the top
Are you connected to a POP3 server?
For more information about a possible workaround if you are connected to a POP3 server and your download speeds are very slow, click the following article number to view the article in the Microsoft Knowledge Base:
935400 (http://support.microsoft.com/kb/935400/ ) It takes a very long time to download an e-mail message from a POP3 server in Outlook 2007
Back to the top
Are you synchronizing many RSS feeds?
If you are running Service Pack 1 (SP1) with the February 2009 cumulative update, the issues described in this section are significantly reduced in frequency.

If you are synchronizing many RSS feeds into Outlook, you may experience performance issues with certain ordinary operations. By default, all RSS feeds are synchronized automatically at set intervals. If you have too many feeds, Outlook may become unresponsive.

You can create a separate Send/Receive group that contains only your RSS feeds, and you can remove them from the group your default mail account is in. This will enable you to sync the RSS feeds on-demand instead of at set intervals.

For more information about how to manage Send/Receive groups, see the articles on the following Office Online Web site:
http://office.microsoft.com/en-us/outlook/CH101395511033.aspx (http://office.microsoft.com/en-us/outlook/CH101395511033.aspx)
Thank you! Your feedback is used to help us improve our support content. For more assistance options, visit the Help and Support Page (http://support.microsoft.com/) .
Back to the top
Are you running Outlook with the To-Do Bar enabled when Outlook is running in online mode against an Exchange server?
If you are running Outlook with the To-Do Bar enabled when Outlook is running in online mode against an Exchange server, the additional data that is displayed in the To-Do Bar is retrieved from the server. Therefore, additional data requests are performed. These additional data requests for the To-Do Bar cause additional network traffic that can affect the performance of some standard Outlook operations.

If you are running Service Pack 1 (SP1) with the February 2009 cumulative update, the amount of network traffic caused by the To-Do Bar has been reduced from earlier versions, especially when loading recurring calendar items.

To avoid additional network traffic and the resulting performance effect in Outlook, you can turn off the To-Do Bar and reduce the network traffic between Outlook and Exchange in online mode. This reduction in data retrieval requests affects the user experience most significantly if you have a network that has high latency or limited bandwidth. To turn off the To-Do Bar in Outlook, point to To-Do Bar on the View menu, and then click Off.

Administrators can also disable the To-Do Bar on users’ computers by using the following registry information.

If you do not use a policy setting, use the following information.

Registry location: HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Options\ToDoBar
Value name: DisableToDoBar
Value type: DWORD
Value data: 1 or 0

Note If the value data is set to 1, the To-Do Bar is turned off. If the value data is set to 0, the To-Do Bar is turned on.

If you use a policy setting, use the following information.

Registry location: HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Outlook\Options\ToDoBar
Value name: DisableToDoBar
Value type: DWORD
Value data: 1 or 0

Note If the value data is set to 1, the To-Do Bar is turned off. If the value data is set to 0, the To-Do Bar is turned on.

For more information about how administrators can control the user interface through policy settings, visit the following Microsoft Web sites:
http://technet.microsoft.com/en-us/library/cc178990.aspx (http://technet.microsoft.com/en-us/library/cc178990.aspx)
http://technet.microsoft.com/en-us/library/cc179100.aspx (http://technet.microsoft.com/en-us/library/cc179100.aspx)

0X80004005 Error

2009-11-08T10:31:00.000-08:00

From http://support.microsoft.com/kb/318908

If you are using a Microsoft Outlook client computer, you cannot download an offline Address Book. When you try to download an Address Book in Outlook, the following error is logged in the synchronization log:
7:59:00 Microsoft Exchange offline address book
7:59:00 0X80004005

This issue may occur if the mailbox store has not been associated with a valid o...This issue may occur if the mailbox store has not been associated with a valid offline Address Book.
Back to the top

To resolve this issue, follow these steps: Start Exchange System Manager. Expand...To resolve this issue, follow these steps:
Start Exchange System Manager.
Expand Organization, and then expand Administrative Groups.

If "Administrative Groups" does not appear under Organization, make sure that you have configured Exchange System Manager to display Administrative Groups. To do so, right-click Organization, click Properties, and then click Display administrative groups.

Expand the administrative group to which the server belongs.
Expand Servers, expand the server that you want to configure, and then expand First Storage Group.

Right-click Mailbox Store, and then click Properties.
In the Offline Address Book section, make sure that a valid offline Address Book is listed.

If one is not listed, click Browse, and then click a valid offline Address Book. You can use Default Offline Address Book as the default setting.

How to test a Fax. (Free Fax Test)

2009-10-22T18:40:00.000-07:00

HP Fax Test Instructions

To test the capability of your fax machine, follow the directions below.

NOTE: Be sure that your phone number is not Caller ID blocked by your telephone company prior to attempting to send and receive a fax. Pressing *82 before dialing the toll free number will unblock the Caller ID blocking feature in most areas. Other phone company services can prevent you from receiving a fax, including voice mail, call blocking, or call privacy features.

NOTE: Whenever troubleshooting a fax issue, it is good practice to set the Automatic Reports option to Every Error before attempting a test fax. This way, even if the sent fax fails, an error code will be generated that will guide you in future troubleshooting. This option is available in different places on different products, consult the product User's Guide for specific steps.

Send a one page black and white text fax to
1-888-hpfaxme (1-888-473-2963).

When your fax is received by the HP Test Fax Service, we will generate a return fax to you within five minutes confirming that we received your fax. This verifies that you can both send and receive a fax with your fax machine.

If you do not receive a return fax within 5-7 minutes, there may be a problem with the setup of your fax machine. Consult the user manual that came with the product for proper setup and configuration.

NOTE: The most common cause of failure is that the fax number set in the Fax Header on the machine does not match the number of the phone line connected to the fax. Also, ensure that the fax header contains the full 10-digit telephone number of the fax machine, including the area code.

Why small businesses use Windows Small Business Server

2009-09-10T08:09:00.000-07:00

Why small businesses use Windows Small Business Server:

http://blogs.technet.com/sbs/archive/2009/09/10/why-small-businesses-use-windows-small-business-server.aspx

SBS2008 not sending email out on a Dell PE2900

2009-08-28T12:34:00.000-07:00

Issue with SBS2008 Sending email out on a Dell PE2900
Mail would receive just fine into the SBS2008 however sending email out would get stuck halfway and never get delivered.
No Return Bounce NO indication of any issues.

Found out that Broadcom NIC was the issue in the Dell PE2900
Even though it had Version 9 drivers Dell claimed that version 12 “Might”
I repeat “MIGHT” work.

Instead of dealing with it not working after new drivers, I disabled Onboard NICs
Purchased a DLINK 1GB Nic Card.

Installed and mail going out correctly now with no issues!
Information Courtesy of Lafayette Jefferson.

How to get WINS to work with SBS2008 over VPN

2009-08-23T10:43:00.000-07:00

Info Taken From:
http://nicholas.piasecki.name/blog/2009/06/getting-wins-like-computer-name-resolution-over-vpn-in-sbs-2008/

By Nicholas Piasecki:

So this week concluded several sleepless nights and much heartburn as I migrated Skiviez’s SBS 2003 machine (running as our domain controller and our mail server) to SBS 2008. As far as things go, it went relatively smoothly, and the remainder of the week was dealing with lots of small niceties that I had forgotten that I had set up on the 2003 server that I now needed to set up once again.

One of these was something that I used for my convenience over a VPN connection from home. You see, the internal order processing application that I wrote uses some shared folders to store some temporary data, such as e-mails that are generated but not yet released to Exchange, or a local copy of images that are available on the Web site. This software–and our users–are used to referring to Windows file shares as \\COMPUTER-NAME\SHARE-NAME; for example, \\CYRUS\Pickup Holding, because for some reason some of the older servers are named after my boss’s dead cats.

When connecting through VPN to SBS 2008, however, that “suffix-less” name resolution was not working. So when \\CYRUS\Pickup Holding failed to resolve to anything, \\cyrus.skiviez.com\Pickup Holding would work fine. This was super annoying.

The reason this worked previously with our SBS 2003 installation is that it was acting as a WINS server, which provided this type of computer name resolution for us. SBS 2008 finally retires this ancient technology by default, however, so I had two choices: I could either install the WINS server role on SBS 2008, or I could just figure out how to get the 015 DNS Domain Name option from DHCP to relay through the VPN connection.

I chose the latter option, since it’s certainly less confusing to be able to say to someone in the future “we don’t use WINS, DNS does everything.” So here’s how to do it:

1.On the SBS 2008 server, click Start > Administrative Tools > Routing and Remote Access.

2.In the tree view, drill down past the server name to IPV4 > General. Right-click the General option and choose “New Routing Protocol” and choose DHCP Relay Agent.
3.Now right-click the newly appended “DHCP Relay Agent” node and choose Properties. Add the IP address of your DHCP server (which is probably your SBS server itself), and click OK. Then click it again and choose “New Interface” and add the “Internal” interface.

4.Now if you connect through VPN, an ipconfig /all should show your domain name as a “Connection-specific DNS suffix” and pinging machines by their suffix-less computer names should work. (If it doesn’t, make sure your DHCP server is using that 015 DNS Domain Name option, which the SBS 2008 wizards set up by default.)

WARNING: IE Security update KB963027 Breaks Companyweb (SBS2003)

2009-08-17T23:26:00.000-07:00

Companyweb requires login but doesn't work.

The issue is that that you are prompted for credentials
(user/password) that will not be accepted under any conditions.

reguardless of what account you use.
One solution is to removing IE 7 Security update KB963027,

And then companyweb can be accessed again.

Login failed for user 'NT AUTHORITY\NETWORK SERVICE'. [CLIENT: ]

2009-08-14T09:45:00.000-07:00

MSSQL$MICROSOFT##SSEE Event Error 18456 on your SBS2003 server.

This issue is generally related to WSUS 3.0 that uses Windows Internal Database (MSSQL$MICROSOFT##SSEE), and the event is logged because the permissions is not correctly set for 'NT AUTHORITY\NETWORK SERVICE' on the SUSDB database file, or the MSSQL$MICROSOFT##SSEE instance.

The suggestions are to check NTFS permission on the SUSDB, and grant login permission to 'NT AUTHORITY\NETWORK SERVICE' on the instance. To do so:

1. Check NTFS permission on the SUSDB folder:

------------------

a. Locate the SUSDB.mdb on the WSUS server. By default, it is under the UpdateServicesDbFiles folder such as C:\WSUS\UpdateServicesDbFiles\SUSDB.mdf.

b. Check the Security Permissions on the C:\WSUS\UpdateServicesDbFiles folder, and grant 'NT AUTHORITY\NETWORK SERVICE' Full Control permission

2. To grant 'NT AUTHORITY\NETWORK SERVICE' login permission on the instance:

----------------

a. Open a Command Prompt on the SBS2003 server, then run the following commands:
osql -E -S servername\Microsoft##SSEE
sp_grantlogin 'NT AUTHORITY\NETWORK SERVICE'

Note: Replace servername with the host name of the SBS2003 server
b. Restart the Microsoft##SSEE service, and update service.

How to Restore the Windows Logo Screen Saver Back in Windows 7

2009-08-12T21:10:00.000-07:00

How to Restore the Windows Logo Screen Saver Back in Windows 7
http://www.sevenforums.com/tutorials/7226-windows-logo-screen-saver-restore.html

Known issues in Worry-Free Business Security (WFBS) Standard / Advanced 6.0

2009-08-10T18:37:00.000-07:00

Known issues in Worry-Free Business Security (WFBS) Standard / Advanced 6.0

http://esupport.trendmicro.com/Pages/Known-issues-in-Worry-Free-Business-Security-(WFBS)-Standard--Advanced-60.aspx

Find Dell Current Server PC and Laptop Deals

2009-08-10T18:32:00.001-07:00

These are not Paid Links (I get no Commission)

Just Posted here for a quick link to Dell Deals

Current Dell Deals:
Server - http://www.dell.com/content/topics/topic.aspx/us/segments/bsd/dell-deals-servers?c=us&cs=04&l=en&s=bsd

Desktop - http://www.dell.com/content/topics/topic.aspx/us/segments/bsd/dell-deals-desktops?c=us&l=en&cs=04

Laptop - http://www.dell.com/content/topics/topic.aspx/us/segments/bsd/dell-deals-laptops?c=us&cs=04&l=en&s=bsd&~tab=1&redirect=1

How to Switch from 32bit to 64bit or 64bit to 32bit in IIS7

2009-08-08T23:02:00.000-07:00

Open a Command Prompt and enter the following Command Line

To Switch from x64bit to x32bit
-------------------------------
cscript c:\inetpub\adminscripts\adsutil.vbs SET /w3svc/AppPools/Enable32BitAppOnWin64 True
-------------------------------

To Switch from x32bit to x64bit
-------------------------------
cscript c:\inetpub\adminscripts\adsutil.vbs SET /w3svc/AppPools/Enable32BitAppOnWin64 False
-------------------------------
(The above command lines should all be one line)

.

How to allow more than 1 TS Admin Session in SBS2008

2009-08-08T16:58:00.000-07:00

In SBS2003 you could have three admin sessions
1 at the console and 2 RDC.
this would allow you to use Shadow so two admins can view screens.

(Type Shadow in a dos box and see what it says for more information)

On SBS2008 By DEFAULT you cannot do this.

From the Run line in SBS2008 type
tsconfig.msc

Find the sections on Allow remote connections to only one.
and uncheck the box!

Then you can have your regular Two or more sessions in SBS2008
(just remeber only 1 in SBS console is allowed at a time.)

How to Remote Manage PC's in SBS2008

2009-08-08T16:56:00.000-07:00

In SBS2003 you could right click on the PC name on the server and click MANAGE!

On SBS2008 that feature is not visable.

On the server open "computer management"
and then from the file menu, connect to another computer.

Then you can manage the computer like before.

(I'm not talking about RDC here)

Blackberry Wireless Carrier account links

2009-08-03T06:44:00.000-07:00

====================================================

To set it up: Go to the respective carrier's site link below,
setup a new email address (keep your current carrier's email), add an
account, provide the Exchange email address, and hit next. Let it time out
when it says it can't find it, then tell it you'll set it up manually, then
set it up manually by indicating it's a corporate account using OWA, hit
next, provide the OWA address, user alias, etc.

Nextel:
https://bis.na.blackberry.com/html?brand=nextel

Sprint
https://bis.na.blackberry.com/html?brand=sprint

Verizon:
https://bis.na.blackberry.com/html?brand=vzw&locale=en

ATT/Cingular:
https://bis.na.blackberry.com/html?brand=mycingular

=================================================

-Posting information from Ace Fekay

How to Repair the information store Exchange 2003 with the eseutil

2009-07-28T23:29:00.000-07:00

Repair the information store:
At a command prompt, change to the drive:\Program Files\Exchsrvr\Bin folder, where drive is the letter of the drive on which Exchange is installed. Use one of the following commands:
If you are trying to restore the mailbox store, type eseutil /p "drive:\Program Files\Exchsrvr\MDBDATA\priv1.edb", and then press ENTER.
If you are trying to restore the public folder store, type eseutil /p "drive:\Program Files\Exchsrvr\MDBDATA\pub1.edb", and then press ENTER.
At the command prompt, type eseutil /mh "drive:\Program Files\Exchsrvr\MDBDATA\priv1.edb" (or pub1.edb), and then press ENTER to verify the consistency information that is returned.
At the command prompt, type eseutil /d "drive:\Program Files\Exchsrvr\MDBDATA\priv1.edb" (or pub1.edb), and then press ENTER to defragment and to compact the database.
At the command prompt, type ISINTEG -S Server_Name -FIX -TEST ALLTESTS, and then press ENTER. Repeat this several times until it reports zero fixes and zero errors.
Mount the store.
Back up the store.

Remote Web Workplace Requires the Microsoft Remote Desktop Active X Control

2009-07-27T18:28:00.000-07:00

Remote Web Workplace Requires the Microsoft Remote Desktop Active X Control

“This portion of Remote Web Workplace requires the Microsoft remote desktop Active X control. Your browser security settings may be preventing you from downloading Active X controls. Adjust these settings and try to connect again”

Option 1:

1.In IE7, go to the Tools menu.
2.Choose Internet Options > Programs > Manage add-ons.
3.Look for ‘Microsoft RDP Client Control (redist)’.
4.Click on it and then look below and click on ‘Enabled’.

If you can't find 'Microsoft RDP Client Control (redist)'
It maybe need to be re installed.
Try going into registry and deleting key
7584C670-2274-4EFB-B00B-D6AABA6D3850

Then it should prompt you into installing the active X again.

Option 2:

1.“Tools” menu > Internet Options > Advanced.
2.Now click on the Reset button at bottom to reset the IE7 settings.
3.Restart Internet Explorer and retry logging into Remote Web Workplace.
4.Download and install the Active X plugin.

Once you do that you should be able to log in to Remote Web Workplace also known as RWW.

How to recover an Mailbox using Exchange Recovery Store (Exchange 2003)

2009-07-22T23:34:00.001-07:00

Instructions Here.
http://www.msexchange.org/tutorials/Recovering-Mailboxes-Exchange2003-SP1.html

FYI: Do not delete Computer Groups SBS2008 WSUS 3.0

2009-07-16T20:15:00.000-07:00

Why? the Windows SBS Console Crashes when running reports
(And Daily Weekly Reports will have Stopped)

I ran into This last week and I thought I'd post it.
Running a report I get a Crash/Error

With Error
Problem Signature 09: N3CTRYE2KN3C34SGL4ZQYRBFTE4M13NB
In log
C:\Program Files\Windows Small Business Server\Logs\console.log
there is a "NullReferenceException"

The problem was I deleted a computer group in WSUS 3.0
I deleted the Group "Update Service Excluded Computers"

(Since I felt it didn't matter since there were no computers in that group.)
Well WRONG it does matter Make sure you have all Groups.

Unassigned Computers
Update Service Excluded Computers
Update Services Client Computers
Update Services Server Computers

Note "Update Service Excluded computer" and it should NOT be "Update
Services Excluded computer" which 'Services' is plural

If any groups are not in the list or the names are not exact same, the
report will crash.

Russ

How to restore a corrupted Windows SharePoint 3.0 Services home page

2009-07-16T20:09:00.000-07:00

Windows SharePoint Services 3.0
Windows SharePoint Services 3.0 includes a feature that you can use to re-ghost a page. The option to re-ghost a page lets you revert to the template that does not contain any errors which is stored in the database. Follow these steps:
Start SharePoint Designer 2007.
On the File menu, click Open Site.
In the Open Site dialog box, type in the Site Name box, and then click Open.
In the Folder List dialog box, click to select , and then right-click Check-Out.
On the Edit menu, click Check-In.

Note A Green circle next to the page is displayed to indicate that the page is un-ghosted.
In the Folder List dialog box, right-click , and then click Revert to Template.

How to restore a corrupted Windows SharePoint 2.0 Services home page

2009-07-16T20:04:00.000-07:00

Restore a corrupted Windows SharePoint Services 2.0 home page
Copy the Default.aspx file in the Windows SharePoint Services site that contains the corrupted home page, rename the copy Defaultold.aspx, and then delete the Default.aspx file. To do so, follow these steps:
Start FrontPage 2003, and then open the Windows SharePoint Services site that contains the corrupted home page.
In the Folder List, double-click the Default.aspx file.
On the File menu, click Save As.
In the Save As dialog box, type Defaultold.aspx in the File name box, and then click Save.
In the Folder List, right-click the Default.aspx file, and then click Delete.
When you are prompted to confirm the deletion, click Yes.
Create a new Windows SharePoint Services site. To do so, follow these steps:
On the File menu, click New.
In the New task pane, under New Web site, click SharePoint team site.
In the Web Site Templates dialog box, click SharePoint Team Site, and then click OK.
Under Options, type the URL of the new Windows SharePoint Services site.

For example, you can create the new site as a subsite of the site that contains the corrupted home page. If the URL of the site that contains the corrupted home page is http://ServerName/Sites/TeamSite, you can specify a URL such as http://ServerName/Sites/TeamSite/SubsiteName for your new site.
Open the new site that you created.

To do so, on the File menu, click Open Site, in the Site name box, type the URL of the new site that you created earlier in step 2, and then click Open.
In the Folder List, double-click the Default.aspx file, and then click Copy.
Change to the original site that contains the corrupted home page, right-click an empty area under the Folder List, and then click Paste.
Delete any corrupted Web Parts that are located on the Default.aspx page. To do so, follow these steps:
Connect to the home page (the Default.aspx page) of your original site in your Web browser.
Click Modify Shared Page, and then click Design this Page.
Click the down arrow next to the Web Parts that you want to delete, and then click Delete.
Click Yes when you are prompted to confirm the deletion.
Add the Web Parts that you deleted to the Default.aspx page. To do so, follow these steps:
Click Modify Shared Page, click Add Web Parts, and then click Browse.
Add the Web Parts that you want to your home page.

For example, drag the Announcements Web Part and the Events Web Part to the page.
If the Home link is missing from the top link bar, add the link to the home page back to the top link bar. To do so, follow these steps:
In FrontPage 2003, open the site (if it is not already open).
In the Folder List, double-click the Default.aspx file.
In the link bar, click add link.
In the Add to Link bar dialog box, type Home in the Text to display box, click the Default.aspx file, make sure that Default.aspx is displayed in the Address box, and then click OK.
Double-click the link bar.
In the Link Bar Properties dialog box, click the General tab, and then in the Links box, make sure that Home link appears at the top of the list.
After you finish recovering the home page, delete the Defaultold.aspx file. To do so, follow these steps:
In the Folder List, right-click the Defaultold.aspx file, and then click Delete
When you are prompted to confirm the deletion, click Yes

Installing Trend Micro WFBS 6.0 Error Copying File tmplcinf.xml

2009-07-14T11:13:00.000-07:00

Installing Trend Micro WFBS 6.0 Error Copying File tmplcinf.xml

Check to make sure file tmplcinf.xml exists in Directories.

\Program Files\Trend Micro\Security Server\PCCSRV\
\Program Files\Trend Micro\Security Server\PCCSRV\pccnt\common
\Program Files\Trend Micro\Security Server\PCCSRV\Admin
\Program Files\Trend Micro\Security Server\PCCSRV\download\pattern

If not copy it from another place and try to reinstall on the client.

Known issues in Worry-Free Business Security (WFBS) Standard / Advanced 6.0

2009-07-14T11:12:00.000-07:00

For Current List Go to link:

http://esupport.trendmicro.com/Pages/Known-issues-in-Worry-Free-Business-Security-(WFBS)-Standard--Advanced-60.aspx

From Link Above!
Published: 6/9/2009 5:34 AM
--------------------------------------
The following are known issues in WFBS Standard / Advanced 6.0:

• Client Deployment and Upgrade

o Worry-Free Business Security is unable to install CSA to a Windows Vista computer using Remote Install if the Remote Registry service is not running or if the computer does not allow File and Printer Sharing through Windows Firewall.

o When remotely installing an agent to a computer running Windows XP, disable Simple File Sharing on the target computer. Also, note that you cannot use Remote Install to deploy to a computer with Windows XP Home Edition.

o To completely reinstall or upgrade CSA, you will need to restart the computer. A restart will also be necessary when updating some components, including the firewall and the proxy drivers.

o After installing CSA on a computer with IIS 7.0, you must restart the IIS service. IIS 7.0 may not work as expected with CSA, which uses the Windows Filtering Platform, until it is restarted.

o You cannot run the Autopcc.exe, the login script, and the Client Packager from a terminal session.

o You cannot run Update Now on Windows 2000 computers from a terminal session.

o When accessing a computer with CSA from a terminal session, another unnecessary instance of the PccNTMon process is created in memory on the remote computer.

o Some CSA components, such as the Trend Micro Web Protection Add-On or the TrendProtect Desktop, can be installed without CSA. These components may conflict with the CSA installation and must be removed before CSA is installed.

o To use Trend Micro Vulnerability Scanner (TMVS) to deploy the CSA, you need to run TMVS on a computer running Windows 2000 or Windows Server 2003. TMVS does not support terminal sessions.

o Real-time scan on CSA can prevent Hyper-V Manager from creating virtual machines. If you encounter this issue, configure real-time scan to exclude the storage folder for your virtual machines from scanning. Hyper-V Manager uses "C:\ProgramData\Microsoft\Windows\Hyper-V" as the default storage folder, but a different folder may be specified during virtual machine creation.

o Installing or uninstalling the CSA on Windows 7 Build 7048 or Build 7057 will cause the Network Interface Card to get an IP address through DHCP with a 169.254 prefix, no matter the IP address is configured (static or dynamic). The NIC must be disabled first before installation to prevent this issue.

• Security Server

o The Security Server sends notifications for all triggered events whenever the Trend Micro Security Server Master Service is restarted.

o The following default Security Server and Scan Server ports must not be used or blocked by other applications, such as Microsoft ISA Server and other firewalls:

- HTTP: 8059
- SSL: 4343 and 4345

o Behavior Monitoring only blocks programs in the exact path specified in the list of blocked programs.

o No plug-in programs are currently available for versions 5.1 and 6.0.

o The Security Server installation automatically checks for Microsoft Data Access Components (MDAC) 2.6 or later. If MDAC 2.6 or later is not installed, it automatically installs MDAC 2.8.

Note: MDAC installation requires a restart.

o Update agents do not roll back to a previous pattern file, even if the Security Server rolled back to a previous version. If the agent updates its components from the Update Agent, the agent pattern file is used, not the Security Server pattern file.

o If an Internet connection problem occurs during Security Server installation, the installer will keep trying to validate the Activation Code without indicating any problem.

o Web installation and Remote installation will fail if another computer on the network has the same name as the Security Server.

• Web Console

o Trend Micro recommends accessing the Web console from computers that do not have adware installed. If Hotbar or other adware is installed, ActiveX errors may occur when accessing certain console screens.

o Trend Micro recommends setting Internet Explorer to apply Medium or lower security levels when accessing the Web console. Higher security settings may block necessary ActiveX controls.

By default, Internet Explorer applies Medium-low security levels for intranet sites and Medium security levels for sites in its Trusted Sites list. To help ensure you can access the console properly, add it to the Trusted Sites list.

• Firewall

o While installing CSA, the computer could temporarily lose network connection. Some applications, such as Secure Shell (SSH), Terminal Services Client, or Remote Desktop could be affected by the disconnection. If this occurs, restart the application after installing CSA.

o The CSA firewall might conflict with other firewall applications. Trend Micro recommends uninstalling or disabling the other firewall applications.

o On VMWare clients, the CSA firewall may block all incoming packets. To address this issue, add the following value to the client's registry:

- Key: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\PFW
- Name: EnableBypassRule
- Type: REG_DWORD
- Data: 1

• Transaction Protector

o After Transaction Protector scans a wireless access point, it shows the "unchecked" status if a timeout occurs while trying to connect to the access point.

o Transaction Protector only supports:

- Windows XP SP2 32-bit
- Windows Vista and Vista SP1 (32-bit and 64-bit)

o Transaction Protector does not support remote administration software, such as Remote Desktop.

• TrendProtect

o TrendProtect cannot start automatically when installed for the first time on a computer with Internet Explorer 7.0 and Windows XP. To manually enable TrendProtect, go to View > Toolbars > TrendProtect in the Internet Explorer menu.

o TrendProtect only supports:

- Windows 2000 Professional
- Windows XP SP2 32-bit
- Windows Vista and Vista SP1 (32-bit and 64-bit)

• Behavior Monitoring

o Behavior Monitoring only supports 32-bit operating systems; 64-bit operating systems are not supported.

o Files without valid digital signatures that violate policies may be blocked by Behavior Monitoring. Files with valid signatures are always allowed to start.

• Trend Micro Anti-Spam Toolbar
o The Trend Micro Anti-Spam Toolbar only supports:

- Windows XP SP2 32-bit
- Windows Vista and Vista SP1 (32-bit and 64-bit)

• Messaging Security Agent

o The Messaging Security Agent (MSA) only supports typical installations of Exchange Server 2007 that include the Hub Transport, the Mailbox, and the Client Access server roles.

o As an anti-spam solution on Exchange Server 2003, users can choose between EUQ or Junk Mail integration. If you use Junk Mail integration, install Exchange Server 2003 SP2, which includes the Intelligent Message Filter (IMF), before installing MSA.

o During MSA installation, the installer may be unable to submit passwords that have special, non-alphanumeric characters to the Exchange Server computer. As a result, you may be unable to install the MSA if the domain administrator account you are using has a complex password. To work around this issue, temporarily change the password for the domain administrator account.

o When installing MSA remotely using the Web console or the Worry-Free Business Security Advanced installer to a computer running Windows Server 2008, SBS 2008, or EBS 2008, you need to specify the built-in domain administrator account because of User Access Control restrictions. Note that for computers with other operating systems, you need an account that is in the Exchange Organization Administrators group.

o During MSA installation, the setup program adds a Windows Firewall exception on the Exchange Server computer to allow the MSA to communicate with the Security Server through port 16372.

o The MSA cannot be installed on a Windows EBS 2008 computer with the Exchange Server 2007 Edge Transport server role.

• Email Reputation Services

o Email Reputation Services (ERS) is an online hosted service and its activation takes about eight hours.

Where Can I get the Microsoft Font?

2009-06-19T08:34:00.000-07:00

I'm unsure of the license with this?

But like me when you want to use the word "Microsoft" in your Documents and you want it to look just as Cool as Microsoft does.
(Especially when you write sales flyers for the clients)

You need the Font.

The font is: Helvetica 96 Black Italic.ttf
and can be downloaded here.
http://www.sbits.biz/MicrosoftFont/
Downloaded it to your Font directory
%windir%\fonts (AKA C:\Windows\Fonts\)
and next reboot you have them.

No Warranties with this file, use at your own risk!

How to Change the CompanyWeb Timeout in SBS 2008

2009-06-18T11:14:00.001-07:00

The CompanyWeb site in SBS 2008 is configured with a 30 minute idle timeout in the default master page. This timeout is unique to CompanyWeb in SBS 2008 and affects connections to CompanyWeb from the LAN or over the Internet. To change this timeout:

1.Create a backup of your current CompanyWeb using the native SBS backup.
2.Browse to http://companyweb.
3.Click Site Actions and then click Site Settings.
4.In the Galleries section, click Master pages.
5.Right-click default.master, point to Send To and then click Download a copy. Save the file in the My Documents or some folder of your choosing.
6.Make a backup copy of this file.
7.Open the default.master file in Notepad.
8.Locate this section:

//this value indicates after how many miliseconds
var LOGIN_SESSION_TIMEOUT_VALUE = 1800000;
function EndSession()
{
window.location = "/_layouts/SignOut.aspx";
}

9.Modify the 1800000 value to the desired timeout in milliseconds.
60000 milliseconds = 1 minute
1800000 milliseconds = 30 minutes (default)
3600000 milliseconds = 1 hour
10.In Notepad, click File and then click Save. The file should be saved as default.master and not default.master.txt. Note the MASTER File type in the screenshot below.
11.In CompanyWeb, click Upload, and select the default.master file. Leave the box Add as a new version to existing files checked and click OK. You can also specify the change you made in the comments section.
12.After the document is uploaded, click OK.
Note: It should appear in the master page gallery default.master and not default.master.txt (or any other extension).

How to Enable OOF (out of office assistant) in SBS2008 to send outside the domain

2009-05-31T18:33:00.000-07:00

Open up Exchange Management Console
Expand Organization Configuration
Right Click on "Hub Transport"
Click TAB "Remote Domains"
Right click on Default (And Select Properties)
In the General TAB (Default)
you will see those options for OOF

Where is the Show Desktop icon in Windows 7

2009-05-27T22:31:00.000-07:00

The Show Desktop icon in Windows 7 is located on the far right of the toolbar
(Just right of the toolbar Clock)

How to Reinstall SharePoint 3.0 on SBS2008

2009-05-27T22:17:00.000-07:00

To uninstall sharepoint 3.0 on SBS2008, please follow these steps:
======

Step 1: Uninstall WSS3.0:
======
Disable and Stop the following services
-Windows SharePoint Services Administration
-Windows SharePoint Services Search
-Windows SharePoint Services Timer
-Windows SharePoint Services Tracing
-Windows SharePoint Services VSS Writer

Note the following registry keys:
From HKLM\Software\Microsoft\Office Server\12.0
-InstallPath (default is C:\Program Files\Microsoft Office Servers\12)

From HKLM\Software\Microsoft\Shared Tools\Web Server Extensions\12.0
-Location (default is C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12)

Delete the following registry hives:
HKLM\Software\Microsoft\Shared Tools\Web Server Extensions\12.0
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\WSS

Delete the following folders:

The value of the InstallPath key (default is C:\Program Files\Microsoft Office Servers\12)
The value of the Location key (default is C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12)
C:\%CommonProgramFiles%\Microsoft Shared\SERVER12

Step 2: use Windows Installer cleanup:
======
This utility is to clean the product code information:

1. please download and install installer cleanup utility from this link:
http://www.sbits.biz/msicuu2.zip

Description of the Windows Installer CleanUp Utility
http://support.microsoft.com/kb/290301

2. please run these commands after you have installed the utility:

Cd c:\program files(x86)\windows installer clean up\
MSIZAP TW {90120000-1015-0409-0000-0000000FF1CE}
MSIZAP TW {90120000-1014-0000-0000-0000000FF1CE}
MSIZAP TW {90120000-1110-0000-0000-0000000FF1CE}

3. please reboot server.

Step 3: reinstall Sharepoint 3.0:
======
1. save the following into notepad, and then save as a REG file.

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\Web Server Extensions\12.0\ServerLanguage]
"1033"=""

2. double click the REG file to import the registry.
3. Reinstall sharepoint 3.0 according to this link:

Reinstall Windows SharePoint Services
http://technet.microsoft.com/en-us/library/dd548327(WS.10).aspx

Where the Heck is Telnet in Windows 7?

2009-05-25T20:29:00.000-07:00

Just like Vista Telnet is disabled by default in Windows 7
To Enable it:

•open control panel
•Then go into programs
•Then in programs and features there should be a part that says ‘turn windows features on or off ‘
•Click ‘turn windows features on or off ‘ then on the list that appears simply choose: Telnet Client

After waiting your Much needed Tool Telnet is back :)

Russ

Uninstall WSUS 3.0 SP1

2009-05-13T22:42:00.000-07:00

RE: Uninstall WSUS 3.0 SP1

If you cannot uninstall WSUS 3.0 SP1 through "Add/Remove Programs", please
try the following steps to manually remove it:

1. Download the SDK to obtain MSIZAP
http://download.microsoft.com/download/e/9/d/e9d80355-7ab4-45b8-80e8-983a48d
5e1bd/msicuu2.exe

2. From a command prompt, type:
MSIZAP T {2C0D7E35-EE6E-4DC7-BA13-2C68AEDEB59D}

3. From a command prompt, type: sc delete wsusservice

4. Again, From a command prompt, type:
MSIZAP T {2C0D7E35-EE6E-4DC7-BA13-2C68AEDEB59D}

5. From a command prompt, type: iisreset
The MSIZAP switch "T" removes all info for given product code

6. Run the following command to delete Windows Internal Database:

msiexec /x {CEB5780F-1A70-44A9-850F-DE6C4F6AA8FB} callerid=ocsetup.exe

7. Delete WSUS folder C:\Program Files\Update Services

8. Open IIS manager, delete all WSUS related virtual directory:

ApiRemoting30
ClientWebService
Content
DssAuthWebService
Inventory
ReportingWebService
Selfupdate
ServerSyncWebService
SimpleAuthWebService

After Migration SBS2008 Computers not showing up in Console?

2009-05-04T10:49:00.000-07:00

Q: Why are some of my computers not showing up in the Administration Console?

A: The most likely cause is that the computer object is not present in the correct organizational unit (OU) in active directory. The SBS console will only display computers that are present in the \Domain Controllers, \MyBusiness\Computers\SBSServers, and \MyBusiness\Computers\SBSComputers OUs.

Due to the way SBS 2008 manages the domain, it is imperative that the objects are in the correct locations. Otherwise SBS 2008 will not display them as there is no assurance the objects can be configured properly. By default, new computers appear in \MyBusiness\Computers\SBSComputers.

Move the objects to the correct group and they should show up.

Exchange connection filter using a Real Time Block list, and IMFPerfmon.msc - Buckeye Gone Bad - MSMVPS.COM

2009-04-29T10:52:00.000-07:00

Exchange connection filter using a Real Time Block list, and IMFPerfmon.msc -

IMFPerfmon.msc
Posted By Buckeye Gone Bad

Here are some things I do. I may miss a step so you may have to
confirm things. After you added connection filter provider you need to
make sure you have checked that stuff in the default virtual server.

Global Settings/Message Delivery right click Properties.
Sender Filtering: Check Filter messages with a blank sender and Drop
connection if address filter matches filter.
Connection Filtering: Add your favorite RBL services. I happen to use zen.spamhaus.org Please visit www.spamhaus.org to review terms and conditions to see if you are eligible to use their services.
Intelligent Messaging Filtering: I set it at 7 and Reject. You want
reject so if there was a valid message the sender receives notice that
your server rejected the message.
Recipient Filtering: Filter recipients who are not in the Directory.

Apply and go to Servers/Servername/Protocols/Default SMTP Virtual
Server right click Properties.
Advanced.
Edit
I check everything but Sender ID Filter.

Make sure you are on Exchange SP2 and you add the registry dword
HKLM\Software\Microsoft\Exchange\ ContentFilterState set to 1. That
key lets Microsoft Updates get IMF definitions.

I open up perfmon.msc from the Run box.
On the icon bar I click on the notebook icon to get the report view.
Click on the + sign next to it to add some counters.
In the Performance Object drop down box look for
MSExchange Transport Filter Sink. Choose all counters and Add.
Back to Performance Object and choose MSExchange Intelligent Message
Filter. Choose all counters and Add. I really do not care for the per
second counters so you can choose select counters from list if you
like.

Now you have a permon that is showing how much stuff is going in to
your Exchange server that the IMF considers spam. It shows you how
many connections are being rejected by the RBL. It shows you how many
connections are being dropped because the recipient is not in your
Active Directory. I do a little math and come up with some interesting
numbers.

Click on File and save as. I save it as imfperfmon.msc. I right click
on the desktop and make a new shortcut. Type imfperfmon.msc in the
next two boxes. Now you have a shortcut on your desktop anytime you
want to see how the RBL and IMF are doing.

Back to your question. If you have the imfperfmon working you can see
a little about what is coming in. Last night I had an account getting
slammed with some mailer daemon nonsense. I need to visit to see what
is really going on.

Mail may still be stuck in the queue as your server is trying to send
out Non Delivery Reports to bogus addresses. If you have done the
clicks I mentioned and others hopefully the junk will be blocked.
Those NDRs will die off after a few days. The default setting in
Exchange is to try to deliver for 2 days and then give up. There is a
trick to flush all the messages out but it may be just as easy to let
them die out on their own. As long as you do the clicks I did you
should eventually be ok.

Windows RUN Command Shortcuts

2009-04-23T11:46:00.000-07:00

Windows RUN Command Shortcuts

RUN command shortcuts

———————————-

Accessibility Controls: access.cpl
Add Hardware Wizard: hdwwiz.cpl
Add/Remove Programs: appwiz.cpl
Administrative Tools: control admintools
Automatic Updates: wuaucpl.cpl
Bluetooth Transfer Wizard: fsquirt
Calculator: calc
Certificate Manager: certmgr.msc
Character Map: charmap
Check Disk Utility: chkdsk
Clipboard Viewer: clipbrd
Command Prompt: cmd
Component Services: dcomcnfg
Computer Management: compmgmt.msc
Date and Time Properties: timedate.cpl
DDE Shares: ddeshare
Device Manager: devmgmt.msc
Direct X Control Panel (If Installed)*: directx.cpl
Direct X Troubleshooter: dxdiag
Disk Cleanup Utility: cleanmgr
Disk Defragment: dfrg.msc
Disk Management: diskmgmt.msc
Disk Partition Manager: diskpart
Display Properties: control desktop
Display Properties: desk.cpl
Display Properties (w/Appearance Tab Preselected): control color
Dr. Watson System Troubleshooting Utility: drwtsn32
Driver Verifier Utility: verifier
Event Viewer: eventvwr.msc
File Signature Verification Tool: sigverif
Findfast: findfast.cpl
Folders Properties: control folders
Fonts: control fonts
Fonts Folder: fonts
Free Cell Card Game: freecell
Game Controllers: joy.cpl
Group Policy Editor (XP Prof): gpedit.msc
Hearts Card Game: mshearts
Iexpress Wizard: iexpress
Indexing Service: ciadv.msc
Internet Properties: inetcpl.cpl
IP Configuration (Display Connection Configuration): ipconfig /all
IP Configuration (Display DNS Cache Contents): ipconfig /displaydns
IP Configuration (Delete DNS Cache Contents): ipconfig /flushdns
IP Configuration (Release All Connections): ipconfig /release
IP Configuration (Renew All Connections): ipconfig /renew
IP Configuration (Refreshes DHCP & Re-Registers DNS): ipconfig /registerdns
IP Configuration (Display DHCP Class ID): ipconfig /showclassid
IP Configuration (Modifies DHCP Class ID): ipconfig /setclassid
Java Control Panel (If Installed): jpicpl32.cpl
Java Control Panel (If Installed): javaws
Keyboard Properties: control keyboard
Local Security Settings: secpol.msc
Local Users and Groups: lusrmgr.msc
Logs You Out Of Windows: logoff
Microsoft Chat: winchat
Minesweeper Game: winmine
Mouse Properties: control mouse
Mouse Properties: main.cpl
Network Connections: control netconnections
Network Connections: ncpa.cpl
Network Setup Wizard: netsetup.cpl
Notepad: notepad
Nview Desktop Manager (If Installed): nvtuicpl.cpl
Object Packager: packager
ODBC Data Source Administrator: odbccp32.cpl
On Screen Keyboard: osk
Opens AC3 Filter (If Installed): ac3filter.cpl
Password Properties: password.cpl
Performance Monitor: perfmon.msc
Performance Monitor: perfmon
Phone and Modem Options: telephon.cpl
Power Configuration: powercfg.cpl
Printers and Faxes: control printers
Printers Folder: printers
Private Character Editor: eudcedit
Quicktime (If Installed): QuickTime.cpl
Regional Settings: intl.cpl
Registry Editor: regedit
Registry Editor: regedit32
Remote Desktop: mstsc
Removable Storage: ntmsmgr.msc
Removable Storage Operator Requests: ntmsoprq.msc
Resultant Set of Policy (XP Prof): rsop.msc
Scanners and Cameras: sticpl.cpl
Scheduled Tasks: control schedtasks
Security Center: wscui.cpl
Services: services.msc
Shared Folders: fsmgmt.msc
Shuts Down Windows: shutdown
Sounds and Audio: mmsys.cpl
Spider Solitare Card Game: spider
SQL Client Configuration: cliconfg
System Configuration Editor: sysedit
System Configuration Utility: msconfig
System File Checker Utility (Scan Immediately): sfc /scannow
System File Checker Utility (Scan Once At Next Boot): sfc /scanonce
System File Checker Utility (Scan On Every Boot): sfc /scanboot
System File Checker Utility (Return to Default Setting): sfc /revert
System File Checker Utility (Purge File Cache): sfc /purgecache
System File Checker Utility (Set Cache Size to size x): sfc /cachesize=x
System Properties: sysdm.cpl
Task Manager: taskmgr
Telnet Client: telnet
Terminal Server Confing: tsconfig.msc
User Account Management: nusrmgr.cpl
Utility Manager: utilman
Windows Firewall: firewall.cpl
Windows Magnifier: magnify
Windows Management Infrastructure: wmimgmt.msc
Windows System Security Tool: syskey
Windows Update Launches: wupdmgr
Windows XP Tour Wizard: tourstart
Wordpad: write

Description of the Windows Installer CleanUp Utility

2009-04-12T22:00:00.000-07:00

Description of the Windows Installer CleanUp Utility

The Windows Installer CleanUp Utility is provided "as is" to help resolve installation problems for programs that use Microsoft Windows Installer. If you use this utility, you may have to reinstall other programs

How to increase the Exchange Server 2003 Service Pack 2 18-gigabyte database size limit

2009-04-11T11:34:00.000-07:00

How to increase the Exchange Server 2003 Service Pack 2 18-gigabyte database size limit

How to remove and how to install the Windows Small Business Server 2003 SharePoint Services 2.0 companyweb Web site

2009-04-10T10:00:00.000-07:00

How to remove and how to install the Windows Small Business Server 2003 SharePoint Services 2.0 companyweb Web site

The Official SBS Blog : System State Backups and SBS 2008

2009-04-09T16:33:00.000-07:00

The Official SBS Blog : System State Backups and SBS 2008: "Wbadmin start systemstatebackup –backuptarget:F:"

System State Backups and SBS 2008
[Today's post comes to us courtesy of John Bay]

The normal backup that SBS 2008 creates contains all the necessary information to restore the entire server. The normal SBS backup includes the system state data. You may wish to create a system state backup of the machine before you make critical changes to the machine or active directory. The ability to take just a system state backup is not exposed in the GUI interface of backup. If you wish to take just a system state backup you must use the wbadmin.exe utility. WBadmin.exe is a command line utility. You must first open a command prompt as administrator.

The command to start a system state backup is:

Wbadmin start systemstatebackup –backuptarget:F:

Where F: is the drive where you wish to store the system state backup.

The target volume for a system state backup cannot be a source volume by default. A source volume is any volume that has a file that is included in the backup. To change that behavior, you can add the AllowSSBToAnyVolume registry entry to the server. However, there are known issues with storing a system state backup on a source volume:

Backups can fail. The backup can be modified during the backup process, which might cause the backup to fail.
It causes an inefficient use of target space. Twice the amount of space is necessary for a backup than for the original data. The volume must allocate twice the amount of space for the shadow copy process.
The path for adding the new registry entry is as follows:

HKLM\SYSTEM\CurrentControlSet\Services\wbengine\SystemStateBackup\AllowSSBToAnyVolume
Type: DWORD
Value: 1

A value of 0 prevents the storing of system state backup on a source volume. A value of 1 allows the storing of system state backup on a source volume.

The backup process will create a directory on the target drive named WindowsImageBackup. This directory will contain the system state backup of the server. The system state backup of an SBS 2008 server is considerably larger than the same backup on an SBS 2003 server. The average system state backup size is around 11GB.

If you wish to restore a system state backup, you must first reboot the server into Directory Services Restore Mode (DSRM). Once in DSRM, you would open a command prompt with administrator rights and use the following commands to start the restore.

We must first determine the version of the backup that you wish to restore.

The command WBADMIN GET VERSIONS will display all the backups on the machine and the version identifier.

The output will look similar to this:

Backup time: 10/7/2008 3:33 PM
Backup target: Fixed Disk labeled D:
Version identifier: 10/07/2008-20:33
Can Recover: Application(s), System State

This backup job was completed on 10/7/2008 at 3:33pm and was saved to drive D:. The backup job has the ability to restore the system state and is version identifier 10/07/2008-20:33

Once we have located the version identifier, we can initiate the restore by using the following command:

WBADMIN START SYSTEMSTATERECOVERY -version:

Where version id is the version identifier you obtained with the Get Versions command.

For our example the command would be:

WBADMIN START SYSTEMSTATERECOVERY -version: 10/07/2008-20:33

WBADMIN will restore the system state information back to the data from the backup. Once the restore process is complete, you will have to reboot the machine into normal mode to complete the restore.

Download details: Exchange Server 2003 Administration Guide

2009-03-30T09:42:00.000-07:00

Download details: Exchange Server 2003 Administration Guide: "Administration Guide for Microsoft Exchange Server 2003
Brief Description
This guide will help you make the most of Microsoft® Exchange Server 2003 by explaining the core concepts of Exchange administration"

Enable Password Changing through OWA in Exchange 2003

2009-03-23T11:27:00.000-07:00

Enable Password Changing through OWA in Exchange 2003

The DevCon command-line utility functions as an alternative to Device Manager

2009-03-16T23:08:00.000-07:00

The DevCon command-line utility functions as an alternative to Device Manager

SBS2008 Console Crashes when Running Reports

2009-03-16T08:57:00.000-07:00

FYI: Do not delete Computer Groups SBS2008 WSUS 3.0
Windows SBS Console Crashes when running reports
(And Daily Weekly Reports have Stopped)

I ran into This last week and I though I'd post it.
Running a report I get a Crash/Error

With Error
Problem Signature 09: N3CTRYE2KN3C34SGL4ZQYRBFTE4M13NB
In log
C:\Program Files\Windows Small Business Server\Logs\console.log
there is a "NullReferenceException"

The problem was I deleted a computer group in WSUS 3.0
I deleted the Group "Update Service Excluded Computers"

(Since I felt it didn't matter since there were no computers in that group.)
Well WRONG it does matter Make sure you have all Groups.

Unassigned Computers
Update Service Excluded Computers
Update Services Client Computers
Update Services Server Computers

Note "Update Service Excluded computer" and it should NOT be "Update
Services Excluded computer" which 'Services' is plural

If any groups are not in the list or the names are not exact same, the report will crash.

Russ

The Official SBS Blog : How to use a Recovery Storage Group in SBS 2008

2009-03-15T17:05:00.000-07:00

The Official SBS Blog : How to use a Recovery Storage Group in SBS 2008

The Official SBS Blog : Outlook 2007 Out of Office Feature May Be Out of Office

2009-03-15T16:37:00.000-07:00

The Official SBS Blog : Outlook 2007 Out of Office Feature May Be Out of Office

Troubleshooting Out of Office

2009-03-15T16:20:00.000-07:00

Troubleshooting Out of Office

Brother toner cartridge low toner override - fixyourownprinter.com

2009-03-14T20:22:00.000-07:00

Brother toner cartridge low toner override - fixyourownprinter.com

For the Brother HL-4070cdw, if you get the Tone Life End message, and are no longer allowed to print, try this...

1) Open the front door - the message 'Cover is Open' will appear.
2) Press and hold the cancel button.
3) Press the Reprint button - the message 'Reset Parts Life' should appear.
4) Then do the following:
B.TNR-H - accepted should display. Press ^
B.TNR-S - accepted should display. Press ^
Y.TNR-H - accepted should display. Press ^
Y.TNR-S - accepted should display. Press ^
M.TNR-H - accepted should display. Press ^
M.TNR-S - accepted should display. Press ^
C.TNR-H - accepted should display. Press ^
C.TNR-S - accepted should display. Press ^
5) Cancel
6) Close the front door.

You should be able to print, assuming your HL-4070cdw still has toner and drum life left.

I believe the above sequence clears the toner for Black, Yellow, Magenta and Cyan for the High capacity or Standard capacity toner cartridge.

None of the stats for your printer will be reset (ie Image Count, Drum Count, Drum Life, Belf Life, PF KitMPLife, PF Kit|Life, Fuser Life or Laser life) and your print totals will still be unchanged (ie Toner page count, color page count, monochrome page count).

Drive Tools for Windows

2009-03-11T23:41:00.000-07:00

Drive Tools for Windows
RemoveDrive prepares drives for "Safe Removal" by commandline. It works with drives only but not for other device types.

Chris Dalby Blog » Blog Archive » Installing MSDE on SBS for Blackberry Enterprise Server

2009-02-26T19:02:00.000-08:00

Chris Dalby Blog » Blog Archive » Installing MSDE on SBS for Blackberry Enterprise Server

SharePoint Upload Size Limit on Server 2008 - IIS 7 - Windows Live

2009-02-24T12:41:00.000-08:00

SharePoint Upload Size Limit on Server 2008 - IIS 7 - Windows Live

The Official SBS Blog : How to install the File Server Resource Manager (FSRM) optional component of SBS 2003 R2

2009-01-30T11:39:00.000-08:00

The Official SBS Blog : How to install the File Server Resource Manager (FSRM) optional component of SBS 2003 R2

Vista Machine, Could not search for new Updates Code 8007007A

2009-01-29T21:12:00.001-08:00

1. Visit the following link and download the
WindowsUpdateAgent30-x86.exe
package to the client:

http://support.microsoft.com/kb/946928

2. Once finishing downloading, please open a CMD (Run as Administrator) and
run the following command to install:

C:\DownloadPath\WindowsUpdateAgent30-x86.exe /wuforce

Guide: How to make a bootable USB drive with VistaPE - SlickDeals.net Forums

2009-01-20T22:56:00.000-08:00

Guide: How to make a bootable USB drive with VistaPE

Clear a Stuck Print job from a print que

2009-01-15T23:13:00.000-08:00

Help and Support

Note To use this method, you must have Computer Administrator status. If you are using your own printer, you most likely have Computer Administrator status. If you are printing to a shared printer, you might have to ask the system administrator to cancel the print job for you.

To stop the print spooler and delete its files, we will have you create and then run a script file that automatically stops the service. This sounds difficult, but it really isn't. Just follow these steps carefully. To start, go to Step 1.

Step 1: Start Notepad

Click Start, and then click Run.
In the Open box, type notepad, and then click OK. Notice that a blank Notepad document opens.
Now, go to Step 2.

Step 2: Copy a command script to Notepad

Now we will have you paste some commands to the Notepad document.

Carefully select (highlight) all the following text:

net stop spooler
del %systemroot%\system32\spool\printers\*.shd
del %systemroot%\system32\spool\printers\*.spl
net start spooler

Right-click the text that you selected, and then click Copy.
In Notepad, right-click in the blank document, and then click Paste.
Carefully select (highlight) all the following text:
C:\DeletePrintJobs.cmd
Right-click the text that you selected, and then click Copy.
In Notepad, click Save As on the File menu.
In the File Name box, right-click, and then click Paste.
Note This file name differs from most other file names that you might have seen. That is because this file is a command script file.

Click Save.

Finally, go to Step 3.

Step 3: Run the command script file

Now that you have created the command script file, you will run it. To run it, you will paste the name of the command script file in the Open box.

Carefully select (highlight) all the following text:
C:\DeletePrintJobs.cmd
Right-click the text that you selected, and then click Copy.
Click Start, and then click Run.
In the Open box, right-click, and then click Paste.
Click OK.
Notice that a Command Prompt window opens to run the command script file that you created. Notice also that this window automatically closes when the command script file has finished running. If you do not see the Command Prompt window open, check that you saved the command script file by using the correct name and that you entered the correct command script file name in the Open box.

Note If this method does not work the first time, or if you cannot print anything after you use this method, restart your computer, and then try again

Easy Redirects for SBS2003

2009-01-10T02:22:00.000-08:00

If you are running SBS you must know by now that you need to type http://something.yourdomain.com/exchange or /remote to access OWA or RWW from the internet. One issue that I often encounter is that users forget those URLs are (specially if the are technologically-impaired J).

So, what about giving your users simpler URLs? Like http://webmail.yourdomain.com for OWA and/or http://remote.yourdomain.com for RWW

What about Sharepoint? Typing :444 at the end of an URL is really not cool at all. Wouldn’t it be great if you could use http://intranet.yourdomain.com to access your intranet directly? If this idea sounds appealing to you… then keep reading:

Method 1 –

If you have your DNS hosted with ZoneEdit, GoDaddy or any other DNS provider that provides URL redirection you can do this in less than 1 minute. Just open the DNS console and create those records. The great thing about this is that its easy, you don't have to do anything on your end and you can even keep port 80 closed on the SBS box.

Method 2 –

If you are the kind of guy (or gal) that likes to do things themselves then this is for you. Here’s an example on how to do it for OWA:

1) Create an “A” record on your public DNS for webmail.yourdomain.com that points to your server IP address. Remember that this is something you do to the public DNS so your SBS box is not involved (i.e. you probably need to call your ISP).

2) Go to the SBS box and open the IIS console. Drill down to websites, right click and select “create new”, follow the wizard. Name it “OWA redirector”, on the host header box type “webmail.yourdomain.com” and finish the wizard.

3) Right click on the newly created website and select properties. Go to the Home Directory tab, change it to “Redirection to a URL”, type “http://something.yourdomain.com/exchange” on the Redirect to box and click ok.

Now you should be able to type http://webmail.yourdomain.com and be automatically redirected to OWA. Do the same thing with RWW and Sharepoint. Heck, you could even go to Mapquest get the URL of your office location and then create a redirector from http://map.yourdomain.com to that. The possibilities are endless with just a little creativity J

BTW-> If you think about it, you could host the redirectors on your own server and then your clients can have port 80 totally closed. No reason why the redirector has to be on the same server as the target.

Corrupted volume shadow copies VSS

2008-12-31T16:27:00.000-08:00

Some times Backups and Restore Point doesn't work in Vista
And it's sometimes related to a Corrupt VSS
Here are instructions when the regular uncheck the VSS box is not available.

Step 1: Remove all but the most recent restore point using Disk Cleanup
utility
========
1. Click Start, type cleanmgr in the Start Search box and press Enter.
2. Select "Files from all users on this computer".
3. Select drive C and click OK.
4. When it finishes scanning the disk, switch to More Options tab.
5. Click "Clean up" under "System Restore and Shadow Copies" and click
Delete.

Then, check if it still displays Searching... in System Restore.

If the problem still occurs, proceed with step 2:

Step 2: Resize shadow copy storage
========
1. Click Start->All Programs->Accessories->System Tools.
2. Right click "Command Prompt" and select "Run as administrator".
3. Type the following command and press Enter:

vssadmin list shadowstorage /for=c:

4. Check Maximum Shadow Copy Storage space and remember the size.
5. Run the following command to resize the shadow copy storage:

vssadmin resize shadowstorage /for=c: /on=c: /maxsize=300MB

6. Check if you can create a restore point now.
7. Run the following command to resize the shadow copy storage to the
original size:

vssadmin resize shadowstorage /for=c: /on=c: /maxsize=

Download details: Windows User State Migration Tool (USMT) Version 3.0.1

2008-12-15T15:52:00.000-08:00

Download details: Windows User State Migration Tool (USMT) Version 3.0.1

Microsoft® Windows® User State Migration Tool (USMT) version 3.0.1 migrates user files and settings during deployments of Microsoft Windows XP and Windows Vista. You can use USMT to perform unattended migrations and to migrate files and settings for computers with multiple users. Also, with USMT you have the ability to encrypt and compress the store. USMT 3.0.1 is intended for administrators who are performing automated deployments.

This tool includes two command-line tools named ScanState and LoadState. ScanState creates an intermediate store that contains the user files and settings from the source computer. LoadState restores these files and settings to the destination computer. USMT 3.0.1 also has three default migration rule (.xml) files named MigApp.xml, MigUser.xml, and MigSys.xml. You can alter the default .xml files and you can also create customized .xml files. Depending on what you want to migrate, you can specify all or none of the default .xml files on the command line. The entire migration process is controlled by the .xml rules, which you can modify, and logic that is built into the tool. When using USMT for automated migration, in almost all cases, you should modify the migration .xml files for your unique situation.

Software updates are not managed by Windows Small Business Server 2003 Update Services after you upgrade to Windows Server Update Services 3.0 Service Pack 1

2008-12-12T03:45:00.000-08:00

Software updates are not managed by Windows Small Business Server 2003 Update Services after you upgrade to Windows Server Update Services 3.0 Service Pack 1

"The RDP Protocol Component "DATA ENCRYPTION" Detected an Error..." error message

2008-12-09T04:09:00.000-08:00

"The RDP Protocol Component "DATA ENCRYPTION" Detected an Error..." error message

How To Disable UAC Popups in Vista

2008-12-04T03:59:00.000-08:00

How To Disable UAC Popups in Vista

You can disable UAC popups, but it's a security feature you may want to keep
"Windows needs your permissions to continue." Are you tired of your computer asking you for permission to continue? User Account Control can be annoying, but you should think twice before disabling it. UAC's popups make it simpler to use a standard Vista account since you can temporarily elevate to an administrator account by typing a password. Using a standard user account helps to protect your computer from attack since malware's impact can be limited when not running with administrator rights.

If you still want to disable UAC popups, follow these instructions to disable User Account Control.

Type "user account" into the Windows Vista Start menu and click on User Account when it appears in the Programs list.

Click on the Turn User Account Control on or off link.

If UAC is currently turned on, you will be prompted for approval. Provide the administrator's password or click Continue if you are sure you want to turn UAC off.

This isn't a time when you should just blindly dismiss the UAC prompt. It's best to use a standard account for your general computing, and provide an administrator's password when UAC prompts. It helps protect your computer from attack. If you do turn off UAC, seriously consider the implications and think about turning it back on as soon as possible.

Uncheck the box next to Use User Account Control (UAC) to help protect your computer to disable UAC. Click OK to save your changes.

Tip:
Instead of disabling the UAC security feature, create a standard user account and use it for all your computing tasks. When UAC prompts for permission to continue, type an administrator's password to grant approval. That's how UAC's prompts were designed to work, and it really does help secure your computer from attack.

2008-12-02T12:45:00.000-08:00

How to enable TLS (SSL) for SMTP connector to encrypt the
SMTP traffic.

The use of the Transport Layer Security (TLS) protocol over SMTP offers
certificate-based authentication and helps provide security-enhanced data
transfers by using symmetric encryption keys. In symmetric-key encryption
(also known as shared secret), the same key is used to encrypt and to
decrypt the message. TLS applies a Hash-based Message Authentication Code
(HMAC). HMAC uses a hash algorithm in combination with a shared secret key
to help make sure that the data has not been modified during transmission.
The shared secret key is appended to the data to be hashed. This helps
enhance the security of the hash because both parties must have the same
shared secret key to verify that the data is authentic.

Enable TLS on SMTP connector in SBS:

1. Install an X.509 server certificate on the server.

For more information about X.509 certificates, click the following article
number to view the article in the Microsoft Knowledge Base:
319574 How to use certificates with virtual servers in Exchange 2000 Server

http://support.microsoft.com/kb/319574/

2. Enable TLS on the SMTP connector with smarthost configured. To enable
TLS encryption, right-click the SMTP connector, and then click Properties.
Click the Advanced tab, click Outbound Security, and then click to select
the TLS Encryption check box.

3. Restart SMTP service and Routing Engine service.

See the following article for details:
How to help protect SMTP communication by using the Transport Layer
Security protocol in Exchange Server
http://support.microsoft.com/?id=829721

Additional info on TLS:
================
How to secure Simple Mail Transfer Protocol client message delivery in
Exchange 2000 Server
http://support.microsoft.com/?id=319267

823024 How to Use Certificates with Virtual Servers in Exchange Server 2003
http://support.microsoft.com/?id=823024

329061 Exchange Server cannot communicate with non-TLS domains
http://support.microsoft.com/?id=329061

Stunnel and AT&T Worldnet Service

2008-12-02T12:44:00.000-08:00

Stunnel and AT&T Worldnet Service SSL Exchange

Download details: Windows SBS 2003 to 2008 Migration Guide

2008-11-29T22:40:00.000-08:00

Download details: Windows SBS 2003 to 2008 Migration Guide

The Official SBS Blog : How to Install a Public 3rd Party SSL Certificate on IIS on SBS 2003

2008-11-24T18:03:00.000-08:00

The Official SBS Blog : How to Install a Public 3rd Party SSL Certificate on IIS on SBS 2003

Download details: Windows SharePoint Services 3.0 with Service Pack 1

2008-11-23T22:13:00.000-08:00

Download details: Windows SharePoint Services 3.0 with Service Pack 1: "Windows SharePoint Services 3.0 with Service Pack 1"

Download details: Installing WSS 3.0 on a Server Running Windows SBS 2003

2008-11-23T22:09:00.000-08:00

Download details: Installing WSS 3.0 on a Server Running Windows SBS 2003: "Installing Windows SharePoint Services 3.0 on a Server Running Windows Small Business Server 2003"

Using Hyper-V with Windows Small Business Server 2008

2008-11-23T00:28:00.000-08:00

Using Hyper-V with Windows Small Business Server 2008

Known Issues with Running Windows Small Business Server 2008 in a Hyper-V Environment

2008-11-23T00:27:00.000-08:00

Known Issues with Running Windows Small Business Server 2008 in a Hyper-V Environment: "Known Issues with Running Windows Small Business Server 2008 in a Hyper-V Environment"

Extending the ISA Firewall’s SSL Tunnel Port Range (2004)

2008-11-18T12:09:00.000-08:00

Extending the ISA Firewall’s SSL Tunnel Port Range (2004)

Screencast: How to Add a GoDaddy (Trusted) SSL Certificate in SBS 2008. Step-by-step video tutorial.

2008-11-15T02:42:00.000-08:00

Screencast: How to Add a GoDaddy (Trusted) SSL Certificate in SBS 2008. Step-by-step video tutorial.

Download details: Hyper-V Server 2008

2008-11-13T19:19:00.000-08:00

Download details: Hyper-V Server 2008

Configuring Hyper-V Server for Remote Management - x(perts)64

2008-11-13T13:56:00.000-08:00

Configuring Hyper-V Server for Remote Management - x(perts)64

Windows 2003 Terminal Services (Part 1)

2008-11-13T13:22:00.000-08:00

Windows 2003 Terminal Services (Part 1)

Description of the Windows Server Update Services 3.0 Service Pack 1 package

2008-11-02T17:41:00.000-08:00

Description of the Windows Server Update Services 3.0 Service Pack 1 package: "Error MWUSSetup CUpgradeDriver::PerformPresetupActions: Failed to set SMTP_USERPASSWD"

Using Hyper-V with Windows Small Business Server 2008

2008-10-30T15:11:00.000-07:00

Using Hyper-V with Windows Small Business Server 2008: "Using Hyper-V with Windows Small Business Server 2008"

Downloadable documentation for Windows Small Business Server 2008

2008-10-05T22:23:00.000-07:00

Downloadable documentation for Windows Small Business Server 2008

How to Create a New Mail-Enabled User

2008-10-02T14:53:00.000-07:00

How to Create a New Mail-Enabled UserIE Forward to an external Mailbox like yahoo.com or gmail.com

How to share an SMTP address space in Exchange 2000 Server or in Exchange Server 2003

2008-10-01T11:10:00.000-07:00

How to share an SMTP address space in Exchange 2000 Server or in Exchange Server 2003 Share the same SMTP address space with a different e-mail system

Enable Password Changing through OWA in Exchange 2003

2008-09-29T17:44:00.000-07:00

Enable Password Changing through OWA in Exchange 2003

Unblock Attachments | HowTo-Outlook

2008-09-29T12:52:00.000-07:00

Unblock Attachments | HowTo-Outlook

Download details: Outlook 2007 with Business Contact Manager (Beta) Update: Software and Instructions for Updating to Outlook 2007 with BCM Beta 2 Technical Refresh

2008-09-24T13:53:00.000-07:00

Download details: Outlook 2007 with Business Contact Manager (Beta) Update: Software and Instructions for Updating to Outlook 2007 with BCM Beta 2 Technical Refresh

Matt Johnson's Technical Adventures : Moving WSS 3.0 Databases

2008-09-22T23:28:00.000-07:00

Matt Johnson's Technical Adventures : Moving WSS 3.0 Databases

How to configure the size limit for both (.pst) and (.ost) files in Outlook 2007 and in Outlook 2003

2008-09-15T16:07:00.000-07:00

How to configure the size limit for both (.pst) and (.ost) files in Outlook 2007 and in Outlook 2003

E-mail to external recipients with the same e-mail domain causes NDR messages when using the POP3 Connector

2008-09-14T20:28:00.000-07:00

E-mail to external recipients with the same e-mail domain causes NDR messages when using the POP3 Connector

Getting a "This computer cannot be upgraded to the OEM version of Small Business Server"? - THE OFFICIAL BLOG OF THE SBS "DIVA"

2008-08-31T17:36:00.000-07:00

Getting a "This computer cannot be upgraded to the OEM version of Small Business Server"? - THE OFFICIAL BLOG OF THE SBS "DIVA"

Error message: "Files of this type cannot be made available offline"

2008-08-26T22:31:00.000-07:00

Error message: "Files of this type cannot be made available offline"

Error message: "Files of this type cannot be made available offline"
View products that this article applies to.
Article ID : 252509
Last Review : August 17, 2007
Revision : 4.0
This article was previously published under Q252509
SYMPTOMS
When you attempt to make files or folders available offline, the following error message may be displayed:
Offline files (\\server\share): Unable to make file Filename available offline on \\server\share. Files of this type cannot be made available offline.
Back to the top

CAUSE
By default, files with the following extensions are excluded:
.db?
.ldb
.mdb
.mde
.mdw
.pst
.slm
Back to the top

RESOLUTION
Microsoft does not recommend modifying the list of excluded files. See the "More Information" section for more details.
Back to the top

STATUS
This behavior is by design.
Back to the top

MORE INFORMATION
Certain file types are excluded by default as a means to prevent file conflicts and data loss. The mechanism that the Offline Files feature uses is Client-Side Caching (CSC). CSC can recognize when synchronization issues exist (for example, if the copy of a file on the server has been modified since the last synchronization). In such a case, you can select which version to use, but you cannot merge the contents.

There may also be another synchronization mechanism that is typically used for the file type. One such file type is .pst files. This type is included in the list to prevent conflicts with the built-in offline and synchronization features in Microsoft Outlook. The Offline Files feature uses a replacement method of synchronization, so there is no way to merge the two copies.

You can modify the list of excluded extensions by editing the appropriate Group Policy object (local, domain, organizational unit, and so on). For example, to remove the .pst extension from the list of excluded files, enable the following sample policy in Policy Editor:
Computer Configuration\Administrative Templates\Network\Offline Files\Files not cached
Then, type the following string in the Extensions box:
*.slm;*.mdb;*.ldb;*.mdw;*.mde;*.db?
Log off, and then log back on. This replaces the default list, preserving all but the *.pst extension. You can use the same method for any of the other extensions.

To edit the local policy, click Start, click Run, type gpedit.msc, and then click OK. To edit the domain policy, use Active Directory Users and Computers snap-in.

Description of the Windows Installer CleanUp Utility

2008-08-19T12:35:00.000-07:00

Description of the Windows Installer CleanUp Utility

Microsoft has updated the Windows Installer CleanUp Utility. With the Windows Installer CleanUp Utility, you can remove a program's Windows Installer configuration information. You may want to remove the Windows Installer configuration information for your program if you experience installation (Setup) problems. For example, you may have to remove a program's Windows Installer configuration information if you have installation problems when you try to add (or remove) a component of your program that was not included when you first installed your program.

The Windows Installer CleanUp Utility does not perform the following functions: • Remove Windows Installer
• Remove files of any programs that are installed by Windows Installer, such as Microsoft Office 2003
The Windows Installer CleanUp Utility does perform the following functions: • Provides a dialog box in which you can select one or more programs that were installed by Windows Installer

To do this, select the programs that you want in the Installed Products list in the Windows Installer CleanUp dialog box. After you make this selection, the utility removes only the Windows Installer configuration information that is related to those programs.
• Removes the files and registry settings that make up the Windows Installer configuration information for programs that you select
If you use this utility to remove the Windows Installer configuration information for your program and you plan to reinstall the program, you should reinstall the program in the same folder where you originally installed it. This prevents duplication of files on your hard disk or disks.