Restart

I was trying to install the Exchange 2007 Console on my Pc so that I can manage it remotely. However, when I run the executable I received a message saying that I need to restart my PC before continue. I already restarted it but even so does not work.

Searching on the web, I've found the fllowwing step:

Delete the register key bellow

HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\

Just fine ! After deleting it, the wizard works ok

Regards

Exchange Information Store does not start

This morning I check that my Exchange Server 2007 was not working. When I check the event viewer I see the following error message:

Unable to initialize the Microsoft Exchange Information Store service because the clocks on the client and on the server machine are skewed

It means that the clock of Exchange Server computer is different of AD. Because of this, some services cannot work properly.

In order to resolve this, I just put this command on Prompt

Net time \\ADServerName /Set
Then, I restarted the Microsoft Exchange Active Directory Topology Service

Remove All users from Local Administrator Group

Hi !

Today, I've needed to find a way to remove all users from local administrator group trough GPO tools. I've found a perfect script wich complete this task . Here is bellow:

Dim network, group, user
Set network = CreateObject("WScript.Network")
Set group = GetObject("WinNT://" & network.ComputerName & "/Administradores,group")
For Each user In group.members
If UCase(user.name) <> "ADMINISTRADOR" And UCase(user.name) <> "DOMAIN ADMINS" Then
group.remove user.adspath
End If
Next


Before to use it, you need to do a little change in these lines

Set group = GetObject("WinNT://" & network.ComputerName & "/Administradores,group")
For Each user In group.members
If UCase(user.name) <> "ADMINISTRADOR" And UCase(user.name) <> "DOMAIN ADMINS" Then

Creating a NetBIOS alias for the our Server

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters Add a new Multi-String value called OptionalNames. Enter one or more aliases, one per line.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters Add a new DWORD value called DisableStrictNameChecking and set to 1.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters Add a new DWORD value called DisableLoopBackCheck and set to 1.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
Add a new Multi-String Value BackConnectionHostNames. Enter one or more aliases, one per line.

Fonte: http://www.andreagallazzi.com/2010/01/creating-netbios-alias-for-our-server.html

Instalação Silenciosa do LogMein

Outro dia estava pesquisando como realizar a instalação silenciosa do LogMein e achei este pacote na internet. Dentro do zip, tem um arquivo chamado leia-me que explica passo-a-passo para fazer o pacote de instalação.

http://www.megaupload.com/?d=EHSHDQRJ

Erro ao Executar o adprep /domainprep no Windows 2000 Server

Hoje peguei um caso interessante e resolvi postar aqui. Estava para fazer a migração de um Domínio Windows 2000 para Windows Server 2003. Ao executar o adprep /forestprep não deu erro. Mas ao rodar o adprep /domainprep deu o seguinte erro:

Adprep failed in the attempt to add the Anonymous Logon SID to the Pre-Windows 2
000 Compatible Access group.
[Status/Consequence]
For backward compatibility, Adprep requires that the Anonymous Logon security gr
oup be a member of the pre-Windows 2000 Compatible Access security group if the
Everyone group is also a member. On domain controllers running Windows Server 20
03, the Everyone group no longer includes Anonymous Logon.
[User Action]
Check the log file Adprep.log in the system root System32\Debug\Adprep\Logs dire
ctory for more information.

O grupo Pre-Windows 2000 Compatible Access não existia. A explicação mais provável é que a base do Active Directory está corrompida.

Quando executamos o adprep /domainprep, o executável cria atualizações dentro do conteiner domainupdates. Como o grupo está corrompido, ele não irá criar essa atualização referente a esse grupo. Então devemos criar manualmente para enganar o executável ,pulando assim esta etapa

Para solucionar este problema abra o ADSIEDIT.MSC e crie o seguinte containet manualmente:

"cn=2416c60a-fe15-4d7a-a61e-dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,
DC=domain,DC=com"

Rode o domainprep novamente e o problema está solucionado !

Download details: Security Compliance Management Toolkit

Download details: Security Compliance Management Toolkit