#windowsserver2012r2

[itzonesblog-blog]

Bit locker and Drives Encryption Security Practical Video 1 | Windows  Server 2012 R2   | IT Zone

“ BitLocker is a full volume encryption feature included with Microsoft Windows versions starting with Windows Vista. It is designed to protect data by providing encryption for entire volumes. By default, it uses the AES encryption algorithm in cipher block chaining or XTS mode with a 128-bit or 256-bit key. “

[enterinit]

All OUs in this domain should be protected from accidental deletion

All OUs in this domain should be protected from accidental deletion. All OUs in this domain should be protected from accidental deletion.Severity: WarningProblem: Some organizational units (OUs) in this domain are not protected from accidental deletion.Impact: If all OUs in your Active Directory domains are not protected from accidental deletion, your Active Directory environment can experience disruptions that might be caused by accidental bulk deletion of objects.Resolution:Make sure that all OUs in this domain are protected from accidental deletion.Best Practices Analyzer

With Active Directory Users and Computers console

To "protect an OU from accidental deletion", do the following: Open Active Directory Users and Computers console;Right click the OU that you want to protect from accidental deletion, and click Properties;Go to the tab Object, check "Protect object from accidental deletion" and click OK.

NOTE: If you don't see Object tab you must enable Advanced Features. In the Active Directory Users and Computers console click View and select Advanced Features.

With Windows PowerShell

1. Run Windows PowerShell as Admin on Domain Controller; 2. Type the following to list all OU’s where the option "Protect object from accidental deletion" is disabled: Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | where {$_.ProtectedFromAccidentalDeletion -eq $false} | ft 3. Enter the following command in PowerShell: Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | where {$_.ProtectedFromAccidentalDeletion -eq $false} | Set-ADOrganizationalUnit -ProtectedFromAccidentalDeletion $true 4. To verify all OU’s are modified, enter this command in PowerShell: Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | where {$_.ProtectedFromAccidentalDeletion} | ft 5. The column ProtectFromAccidentalDeletion should be True in all lines. Read the full article

[enterinit]

What are the minimum requirements for a domain controller server?

What are the minimum requirements for a domain controller server? According to TechNet minimum requirements for Windows Server installation is.

Windows Server Installation Requirements

Processor Processor performance depends not only on the clock frequency of the processor, but also on the number of processor cores and the size of the processor cache. The following are the processor requirements for this product: Minimum: 1.4 GHz 64-bit processorCompatible with x64 instruction setSupports NX and DEPSupports CMPXCHG16b, LAHF/SAHF, and PrefetchWSupports Second Level Address Translation (EPT or NPT) RAM The following are the estimated RAM requirements for this product: Minimum: 512 MB (2 GB for Server with Desktop Experience installation option)ECC (Error Correcting Code) type or similar technology Important: If you create a virtual machine with the minimum supported hardware parameters (1 processor core and 512 MB RAM) and then attempt to install this release on the virtual machine, Setup will fail. To avoid this, do one of the following: Allocate more than 800 MB RAM to the virtual machine you intend to install this release on. Once Setup has completed, you can change the allocation to as little as 512 MB RAM, depending on the actual server configuration.Interrupt the boot process of this release on the virtual machine with SHIFT+F10. In the command prompt that opens, use Diskpart.exe to create and format an installation partition. Run Wpeutil createpagefile /path=C:\pf.sys (assuming the installation partition you created was C:). Close the command prompt and proceed with Setup. Storage controller and disk space requirements Computers that run Windows Server must include a storage adapter that is compliant with the PCI Express architecture specification. Persistent storage devices on servers classified as hard disk drives must not be PATA. Windows Server does not allow ATA/PATA/IDE/EIDE for boot, page, or data drives. The following are the estimated minimum disk space requirements for the system partition. Minimum: 32 GB NOTE: Be aware that 32 GB should be considered an absolute minimum value for successful installation. This minimum should allow you to install Windows Server in Server Core mode, with the Web Services (IIS) server role. A server in Server Core mode is about 4 GB smaller than the same server in Server with a GUI mode. The system partition will need extra space for any of the following circumstances: If you install the system over a network.Computers with more than 16 GB of RAM will require more disk space for paging, hibernation, and dump files. Network adapter requirements Network adapters used with this release should include these features: Minimum: An Ethernet adapter capable of at least gigabit throughputCompliant with the PCI Express architecture specification.Supports Pre-boot Execution Environment (PXE). A network adapter that supports network debugging (KDNet) is useful, but not a minimum requirement. Other requirements Computers running this release also must have the following: DVD drive (if you intend to install the operating system from DVD media) The following items are not strictly required, but are necessary for certain features: UEFI 2.3.1c-based system and firmware that supports secure boot Trusted Platform Module Graphics device and monitor capable of Super VGA (1024 x 768) or higher-resolution Keyboard and Microsoft® mouse (or other compatible pointing device) Internet access (fees may apply)

Domain Controler installation requirements

Processor 2.7 - 3.2 GHz 64-bit processor with 2 or 4 cores. RAM 2 Gb for Core installation;4 Gb for Server with Desktop Experience installation option. Storage controller and disk space requirements 120 GB SSD or HDD in RAID for Desktop Experience installation option (with time and Server updates it increase the size of Windows folder). NOTE: Better use 2 or more disk in RAID 1 or 10 to increase data protection and system stability. Network adapter requirements 1 GbE Ethernet adapter, because DC always send some traffic (DNS, Auth, tickets, and more) NOTE: A network adapter that supports network debugging (KDNet) is useful, but not a requirement. Computers running this release also must have the following: DVD drive (if you intend to install the operating system from DVD media)If you use USB Flash install source, then you don't need DVD drive. NOTE: After Windows Server install finished - remove DVD drive from PC to decrease power consumption. NOTE: Domain Controller (DC) doesn't need a powerful graphic card. Also, you will need: Keyboard and mouse (disconnect if don't use them for power consumption decreasing);Graphics device and monitor capable of Super VGA (1024 x 768) or higher-resolution; UEFI 2.3.1c-based system and firmware that supports secure boot;Trusted Platform Module. NOTE: Also as Best Practices, you must have TWO Domain Controllers (one of them can be Virtual Machine). P. S. In summary, there can be better choices, based on your budget. Read the full article

[enterinit]

IIS large file 404 – File or directory not found

IIS large file 404 – File or directory not found. The following error occurs when uploading large files to the website. Server Error 404 – File or directory not found. The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable. To enable uploading large filesyou have to change a setting in IIS. NOTE: The limit is approximately 28,6 MB, because the limit of maxAllowedContent Length is 30000000 bytes. To change the maximum upload setting, named “maxAllowedContent Length”, do the following: 1. Log on to the server that holds the IIS website, and then click Start, click Programs, click Administrative Tools, click Internet Information Services (IIS) Manager; 2. Expand the website that you want to increase the maxAllowedContent Length; 3. Double click the Request Filtering icon in the main window NOTE: if you don’t have the Request Filtering icon, you need to install it through the Add Roles option. Get the instructions below. 4. Click the Hidden Segment Tab; 5. Right click web.config and click Edit Feature Setting; 6. A new window named Edit Request Filtering Settings appears; 7. Under Request Limits heading. enter a new larger value in the Maximum allowed content length (Bytes) box; 8. Click OK to apply the change.

Setup Request Filtering

The default installation of IIS 7 and later includes the Request Filtering role service or feature. If the Request Filtering role service or feature is uninstalled, you can reinstall it using the following steps. Windows Server 2012 R2 1. On the taskbar, click Server Manager. 2. In Server Manager, click the Manage menu, and then click Add Roles and Features. 3. In the Add Roles and Features wizard, click Next. Select the installation type and click Next. Select the destination server and click Next. 4. On the Server Roles page, expand Web Server (IIS), expand Web Server, expand Security, and then select Request Filtering. Click Next.

5. On the Select features page, click Next. 6. On the Confirm installation selections page, click Install. 7. On the Results page, click Close. How To Note for IIS 7.0 users: Some of the steps in this section may require that you install the Microsoft Administration Pack for IIS 7.0, which includes a user interface for request filtering. To install the Microsoft Administration Pack for IIS 7.0, please see the following URL iis.net/expand/AdministrationPack How to add a hidden segment Open Internet Information Services (IIS) Manager: If you are using Windows Server 2012 or Windows Server 2012 R2: On the taskbar, click Server Manager, click Tools, and then click Internet Information Services (IIS) Manager. If you are using Windows 8 or Windows 8.1: Hold down the Windows key, press the letter X, and then click Control Panel.Click Administrative Tools, and then double-click Internet Information Services (IIS) Manager. If you are using Windows Server 2008 or Windows Server 2008 R2: On the taskbar, click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager. If you are using Windows Vista or Windows 7: On the taskbar, click Start, and then click Control Panel.Double-click Administrative Tools, and then double-click Internet Information Services (IIS) Manager. In the Connections pane, go to the connection, site, application, or directory for which you want to modify your request filtering settings.In the Home pane, double-click Request Filtering. In the Request Filtering pane, click the Hidden Segments tab, and then click Add Hidden Segment... in the Actions pane. In the Add Hidden Segment dialog box, enter the relative path that you want to hide, and then click OK. Read the full article

[enterinit]

Failed to open the runspace pool. The Server Manager WinRM plug-in might be corrupted or missing

Failed to open the runspace pool. The Server Manager WinRM plug-in might be corrupted or missing.

Solution 1

1. Run Windows PowerShell as Administrator; 2. Type next command: netsh http show iplist NOTE: If you only see your LAN IP Address, then your issue is that http.sys isn’t listening to your local loopback address (127.0.0.1). 3. To add your local loopback address, run this: netsh http add iplisten 127.0.0.1 If you’re using IPv6, then you can run this command as well: netsh http add iplisten ::1 After running these commands restart your server.

Solution 2

It appears that WinRM/WSMAN configuration has to be reset to default values. So copying HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN registry settings from the fresh Win 2012 R2 install to the problem machine eliminates this error. Windows Registry Editor Version 5.00 "StackVersion"="2.0" "ConfigXML"="" "ConfigXML"=" " "ConfigXML"=" " "ConfigXML"=" " "ConfigXML"=" " "ConfigXML"=" " "ConfigXML"="" "WSManSafeClientList"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,01 "allow_remote_requests"=dword:00000001 Read the full article

[enterinit]

Windows Server rebooted due to Reason Code: 0x80020002

Windows Server rebooted due to Reason Code: 0x80020002.

Check that the server was rebooted by User32

1. Log into the affected Windows Server and open up the Event Viewer; 2. Navigate to Windows Logs\System\Filter Current Log and search for the Event ID: 1074; 3. Results will appear as per the screen shot below:

Update the Local Computer Policy to stop the server from rebooting

1. Run the command gpedit.msc. You will need to be an elevated user to manipulate Local Group Policy Editor. 2. Navigate to Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Windows Update; 3. Enable the policy No auto-restart for scheduled Automatic Updates installations;

Read the full article

[enterinit]

Windows Domain Controller fix Error 0xc00002e2

Windows Domain Controller fix Error 0xc00002e2. This error indicate that the Active Directory database (NTDS.DIT) is being corrupted. NOTE: Error code 0xc00002e2 may occure only on a system with Active Directory role. Resolution

Method 1

Reboot the server into Directory Services Restore Mode by pressing F8 before the OS loading. You will be required to use the local Administrator account password (for domain controller pc this is global Active Directory admin). In Directory Services Restore Mode, you can check if there is a problem with the database by running the following commands: ntdsutil.exe activate instance ntds files If there is a problem with the Active Directory database NTDS.DIT, you will see an error: Could not initialize the Jet engine: Jet Error -501. Failed to open DIT for AD DS/LDS instance NTDS. Error -2147418113 To resolve this issue, rename all of the *.log files located in C:\Windows\NTDS\ to *.log.old, so the logs can be recreated after reboot. This should fixed the database after the server is rebooted once more.

Method 2

Reboot the server into Directory Services Restore Mode by pressing F8 before the OS loading. You will be required to use the local Administrator account password (for domain controller pc this is global Active Directory admin). Run the next command: esentutl /p "c:\windows\ntds\ntds.dit" Reboot the server and the issue should be solved.

Method 3

Reinstall Active Directory Domain Controller from zero. Read the full article

[enterinit]

Hyper-V VM stuck in Stopping state

Hyper-V VM stuck in Stopping state. It stuck in the Stopping or Running state in and doesn't give any Turn Off, Shutdown, Save, Pause or Reset options. One way its possible to kill off that stuck virtual machine is to open Task Manger and end the task responsible for that machine. Unfortunately its not quite that simple because the Virtual Machine Worker Process which is responsible for running the virtual machine appears numerous times, once for each running guest machine!

Method 1

If you have small amound of VM's: Open Task Manger and view the Details tab;You will see many vmwp.exe running process with Username column including the machine GUIDs;Browse to the location where the virtual machines are stored and open the folder of the virtual machine which is currently hung. From here we can find the machine configuration file and make note of the GUID for that machine;Now we know which GUID relates to the virtual machine that we are looking to stop. Jump back to Task Manger, right click on the correct process and End Process. NOTE: this process should only be used as a last resort as it could cause corruption of the virtual machine!

Method 2

If you have bunch of running VM's. The fastest way is to find needed VM GUID with powersell command. Get-VM | fl *

Now we know which GUID relates to the virtual machine that we are looking to stop. Jump back to Task Manger, right click on the correct process and End Process. This command pulls a list of virtual machine names and GUIDs then compares that to a list of GUIDs in the Command Line of the processes running and returns virtual machine names with the associated Process ID (not VM GUID). Get-WmiObject Win32_Process -Filter "Name like '%vmwp%'" | %{$vm=get-vm -id $_.CommandLine.split(" ");"$($_.processID)`t$($vm.name)"}

Method 3

Use Sysinternals Process Explorer. Read the full article