Re-register VSS Writers for Server 2012-2016

 

1. Create a batch file by:
   1. Copy the following list:
      • net stop vss
      • net stop swprv
      • regsvr32 /s ole32.dll
      • regsvr32 /s oleaut32.dll
      • regsvr32 /s vss_ps.dll
      • vssvc /register
      • regsvr32 /s /i swprv.dll
      • regsvr32 /s /i eventcls.dll
      • regsvr32 /s es.dll
      • regsvr32 /s stdprov.dll
      • regsvr32 /s vssui.dll
      • regsvr32 /s msxml.dll
      • regsvr32 /s msxml3.dll
      • regsvr32 /s msxml4.dll
      • vssvc /register
      • net start swprv
      • net start vss
   2. Open a blank text file
   3. Paste the copied list
   4. Save As fixvss.bat to an easily accessible location like the desktop of the workstation
2. Right-click batch file > Run as administrator
3. Immediately reboot device

RDP cert manual changing

Добавить новый сертификат в Personal Store LocalMachine

Находим отпечаток нового сертификата

Get-Childitem Cert:\LocalMachine\My

выполняем 

wmic /namespace:\\root\CIMV2\TerminalServices PATH Win32_TSGeneralSetting Set SSLCertificateSHA1Hash="полученный_отпечаток_нового_сертификата"

проверяем, что всё хорошо

Get-WmiObject -Class "Win32_TSGeneralSetting" -Namespace root\cimv2\terminalservices | select SSLCertificateSHA1Hash

net stop SessionEnv

net start SessionEnv

Windows Server 2012 RDS deployment “The server has reboots pending and needs to be restarted.”

Solution #1
Reboot the server
Open Command Prompt then type “shutdown /r” and wait for the server to reboot.
Retry deployment, if the deployment fails, move to Solution #2
Solution #2
This solution requires editing the registry of the Windows 2012 Server.
Run “regedit” to open the Registry Editor
Navigate to: “HKLM\System\CurrentControlSet\Control\Session Manager
If PendingFileRenameOperations exists,  DELETE the key and reboot the server.
After reboot, you will be able to finish the deployment.

Cluster DNS registration errors

Use some PS commands:
to force register A records:
Get-ClusterResource | ? resourcetype -like 'Network Name' | Update-ClusterNetworkNameResource
Get-ClusterResource -Name "Cluster Name" | Update-ClusterNetworkNameResource
 
 To force register PTR records - restart instance!
Set PTR registration setting to all instances
Get-ClusterResource | where-object {$_.ResourceType.name -eq "Network Name"} | Set-
ClusterParameter -Name PublishPTRRecords -Value 1
 
 Check PTR registration settings:
Get-ClusterResource | where-object {$_.ResourceType.name -eq "Network Name"} | get-
ClusterParameter
 
Get-ClusterResource -Name "Cluster Name" | get-ClusterParameter

add Authenticated Users to full access into re

Ntfs Audit Log Parser

GPO
Computer Configuration -Windows Settings - Security Settings - Local Policies/Audit Policy - Audit Object Access - Success, Failure
Computer Configuration -Windows Settings - Security Settings - Advanced Audit Configuration - Object Access Audit File System - Success, Failure

Access Denied Trying to Connect to Administrative Shares C$, D$

Подключаем админ-шару с правами администратора :

C:\>net use \\192.168.175.129\c$ /user:win7-2\admin *

Type the password for \\192.168.175.129\c$:

System error 5 has occurred.

Access is denied.

Automatic Virtual Machine Activation

Applies To: Windows Server 2012 R2 (Windows Server 2016)

Automatic Virtual Machine Activation (AVMA) acts as a proof-of-purchase mechanism, helping to ensure that Windows products are used in accordance with the Product Use Rights and Microsoft Software License Terms.

MMC could not create the snap-in

Столкнулся с такой проблемой на Windows Server 2008 Std
Решение простое:

Which ports to unblock for VPN traffic to pass-through?

Little Background: Microsoft RRAS server and VPN client supports PPTP, L2TP/IPSec, SSTP and IKEv2  based VPN connection. PPTP control path is over TCP and data path over GRE. L2TP tunnel traffic is carried over IPSec transport mode and IPSec protocol internally has a control path through IKE and data path over ESP. SSTP control and data path is over TCP. IKEv2 control path is over IKE and data path over ESP.

Настройка Hyper-v репликации между серверами в рабочих группах

Для настройки репликации ВМ между серверами в рабочей группе (или в разных недоверенных доменах ) необходимо выполнить несколько простых действий:

1. корректно настроить имена hyper-v серверов
2. раздать сертификаты на hyper-v серверы
3. настроить репликацию серверов
4. сконфигурировать репликацию ВМ
5. проверить всё....

Настройка Hyper-v репликации между серверами в рабочих группах

Для настройки репликации ВМ между серверами в рабочей группе (или в разных недоверенных доменах ) необходимо выполнить несколько простых действий:

1. корректно настроить имена hyper-v серверов
2. раздать сертификаты на hyper-v серверы
3. настроить репликацию серверов
4. сконфигурировать репликацию ВМ
5. проверить всё....

Ошибка GPO - Registry

В командной строке при обновлении групповых политик появляется сообщение:

gpupdate /force
Updating Policy...
User Policy update has completed successfully.
Computer Policy update has completed successfully.
The following warnings were encountered during computer policy processing:
Windows failed to apply the Group Policy Registry settings. Group Policy Registry settings might have its own log file. Please click on the "More information" link.
For more detailed information, review the event log or invoke gpmc.msc to access information about Group Policy results.

WMI information 5605 "root\MSCluster namespace is marked with the RequiresEncryption flag."

root\MSCluster namespace is marked with the RequiresEncryption flag. Access to this namespace might be denied if the script or application does not have the appropriate authentication level. Change the authentication level to Pkt_Privacy and run the script or application again.

Error: "...pending system changes that require a reboot" when installing Endpoint Protection

при установке сервера SEPM возникает ошибка  "...pending system changes that require a reboot".

Из статьи от вендора (https://support.symantec.com/en_US/article.TECH95608.html)  - установщик определяет,

PowerShell VPN connection in Windows

Задача: обеспечить автоматический запуск windows-based VPN соединения при входе пользователя( а также контроль его работоспособности).
Решение:

Reset windows 8.1 administrator password

There is, but you need to have the Windows (7|8|8.1) install media available.

1. Start your PC off the (Disk|USB|HDD) that contains the install media

IIS, localhost, Access Denied

You are almost certainly running into the Windows loopback check that was introduced with IIS 5.1. This is a security feature to avoid certain types of reflection attacks against the system.

Microsoft has a KB article describing workarounds. They basically boil down to modifying the registry to either disable the loopback check, or to allow certain hostnames (e.g. your local host name or site name) to back-connect.

You can quickly disable the check via PowerShell:

PowerShell to Import User Photos into AD and Office365

#variables
$location = 'C:\User_Photos'

#settings
$Dir = get-childitem $location
$List = $Dir | where {$_.extension -eq ".jpg"}

Hyper-V Cluster Backup problem: Unexpected failure. Error code: 48F@01000003

It seems that we are seeing some of the same issues running Data Protection Manager 2012 R2 and Windows Server 2012 R2 as we did in the earlier versions

So for now until further fixes

Set-ItemProperty hklm:\system\currentcontrolset\control\filesystem -Name "FilterSupportedFeaturesMode" -Value 1

is your best friend

This was against a HP 3PAR but its know to be a issue against EMC also 

Deploying Enterprise PKI on Windows Server 2012 R2

There are many reasons to deploy your own public key infrastructure (PKI). If you are looking to set up DirectAccess, in certain circumstances – like for instance, when you want Windows 7 clients to access corporate resources over DirectAccess – then you have to deploy an enterprise PKI. Microsoft’s implementation of PKI is called Active Directory Certificate Services, or AD CS, and it comes built into the Windows Server 2012 R2 operating system.