1. Make sure that the virtual machine in question is turned off and is not in any hibernation state.
2. Once that is done you right click the Virtual machine. Remove any NIC’s that may currently be installed.
3. Click “Add hardware”. It should be the top most option.
4. You will select Legacy NIC
5. Apply the settings and start the virtual machine

Notice that the Legacy Network Adapter will be yellowie-orangish color and say “Legacy Network Adapter”.

We’ve been seeing more and more issue regarding DNS with Server 2008. It seemed like if you restarted the cache/ or restarted the DNS service everything would start working right away. I later found that if you pinged the domain you were having trouble with on the client machines directly from the DNS server, that too would correct the connection issues for that one domain.

I later figured I would use forwarders for all external DNS requests as the company wasn’t having any issue before I setup their SBS. I hadn’t heard back from them.

After some investigation I found the cause of the problem to be a bug in the DNS cache information, where the Time To Live (TTL) on certain top level domains is incompatible with the minimum TTL allowed by Windows Server 2008 DNS, the information would expire but not be removed from the cache, making the information unusable by the DNS server, but not make it fetch new information, because it was still in the cache.

Basically there is two fixes. Either use DNS forwarders or edit a registry setting.

1. Start Registry Editor (regedit.exe).
2. Locate the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters
3. On the Edit menu, click New, click DWORD (32-bit) Value, and then add the following value:
4. value: MaxCacheTTL
5. Data Type: DWORD
6. Data value: 0x2A300 (172800 seconds in decimal, or 2 days)
7. Click OK.
8. Quit Registry Editor.
9. Restart the DNS Server service.

The next thing I did was to go look in the Error Event Log on the server. When I went to open the MMC for the server manager it came back with the error: 18ea3f92-d6aa–41d9-a205-2023400c8fbb. I tried a few other things that used MMC’s and almost all of them came back with that same error: 18ea3f92-d6aa–41d9-a205-2023400c8fbb.

After doing some searches most people gave up and redid their servers if they got this error. Some of the things they had suggested I tried. Still nothing.

I thought, I wonder if I remotely opened up the event viewer. I entered the server name.Voila! I could see all the errors.

After further inspections I found what seemed to be the error that started them all. It was Event 5173 – WAS. The error read:

• The Windows Process Activation Service encountered an error trying to read configuration data for config section ‘system.applicationHost/webLimits’ from file ‘\\?\C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\machine.config’, line number ’146′.  The error message is: ‘The configuration section ‘system.serviceModel’ cannot be read because it is missing a section declaration
  ‘.  The data field contains the error number.

I went to that folder and opened the machine.config file. It’s an XML file that contains a bunch of configuration information about the machine for .net. When I saw that file I figured that there was going to be some crazy ASCII characters in it. Everything seemed to be fine.

According to this Microsoft KB the server supposedly backs up files in another location. Don’t even bother. No dice.

I did notice in the C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG folder that there was a machine.config.default file. It was from several years ago and it was 2kb smaller then the current file which was 22kb. I renamed the current machine.config file  and called it machine.config.old and made a copy of the “default” file. I renamed it to machine.config.

I went into services and started World Wide Web service. It took a few seconds but it started! I then proceeded to go and start the rest of the services that should have auto started with the machine. They all started! I went and checked my Outlook client. The emails in the outbox had already left. Within about 20 minutes the mail was flowing again like it should have been.

Hopefully this helps anyone who had the same issues I had.

Following the successful installation of System Center Essentials 2007 SP1 on Windows Server 2008 Standard x86, we typically install Remote Web Workplace on the server as part of our System Center Remote Operations Manager deployment.

Just as with installing SCE on Windows Server 2008, there are a few tricks to installing RWW.

Conventions

In this post I use the terms <server> to indicate the NETBIOS name of the server on which we are installing RWW and <domain> to indicate the FQDN of the domain that the server belongs to.

Install Remote Web Workplace

1. Log on to your server as an administrator 
2. Run remoteww.msi from the Remote Operations Manager CD
3. Click Next at the welcome screen
4. Click Next after accepting the license agreement
5. Click Install
6. Click Finish after installation succeeds

Create an Application Pool to Support Remote Web Workplace

1. Start > Run > Inetmgr
2. Expand <server> and select Application Pools
3. Click Add Application Pool… in the right pane
4. Click OK after specifying the following settings:
   1. Name: Remote AppPool
   2. .NET Framework Version: .NET Framework v2.0.50727
   3. Managed pipeline mode: Classic
   4. Start application pool immediately: Checked
5. Click Advanced Settings… in the right pane
6. Change Idle Time-out (minutes) to 480 and click OK

It took me about a month to figure out why my Remote Web Workplace sessions were being dropped after 20 minutes.  Setting the idle timeout for the application pool is critical when using Remote Web Workplace with IIS7 on Windows Server 2008.  This value determines the maximum duration of a remote session.  If left at the default of 20 minutes, your connection will be dropped after 20 minutes and you will receive an error VBScript: an internal error has occurred.

Secure Remote Web Workplace 

1. Expand Sites > Default Web Site in the left pane
2. Select Remote and click Basic Settings… in the right pane
3. Click the Select… button
4. Select Remote AppPool in the Application pool dropdown and click OK
5. Click OK
6. Double click Authentication in the middle pane
7. Select Anonymous Authentication and click Enable in the right pane
8. Highlight Default Web Site in the left pane and click Bindings… in the right pane
9. Click Add…
10. Select https… in the Type dropdown
11. Select <server>.<domain> in the SSL certification dropdown
12. Click OK
13. Click Close

Test Remote Web Workplace

1. Open https://<server>/remote in a web browser
2. Accept any certificate warnings that may be issued by your browser
3. Log on to Remote Web Workplace using your network logon
4. Verify that you can connect to a server or desktop on your network

After doing some searching around I found a great article about setting up a private virtual NIC on both the Hyper-V Host and Hyper-V client and setting the IPs to the same subnet.

While this might be OK for some people I really miss the ability to just copy files from the host machine like I could in Virtual PC/VMware.

After day dreaming for a bit how this could be done I thought I remember seeing an option in Windows 7 Disk manager to not only CREATE but Mount VHD files. I then started thinking what if I create a VHD and then mount it. Copy the files to the VHD and then mount the VHD in the virtual machine.

It could be like using a networked USB Drive.

Open Disk Management in Windows 7. Create VHD.

I saved this file to my desktop. It doesn’t seem to let you save to a network location.

You will need to initialize the disk

This will walk you through the volume and format wizard. I am assuming you have experience with this.

Copy the files you want on the virtual disk drive.

You will need to “detach” the VHD drive in Drive Manager.

Click “OK” when this window pops up.

Copy this VHD to the Hyper-V Host. I like to put it in a shared directory I use for media. ie. iso’s & vhd’s etc.

Open the properties of the virtual machine.

Add a Hard drive. Point the wizard to where ever you copied the newly created VHD.

Hit apply.

Boot up the Virtual Machine.

1.) Hyper-V Manager can be installed as a download for Windows Vista and Windows 7. I’ve written a How to manage Hyper-V server from Windows 7 article.

2.) System Center Virtual Machine Manager (SCVMM) is so much better then Hyper-V Manager. In my opinion this should not be an add-on. Unfortunately it isn’t. Here’s a link to the SCVMM website.

1. Open the Internet Information Services (IIS) Manager.

2. Double-click “Handler Mappings” from the main IIS screen.

3. Click on “Add Script Map.” to add "script mappings" handler for for c:\PHP\php5isapi.dll with extension *.php and answer "yes" to create "isapi and cgi restrictions" when prompted

4. Set your web site application pool to "Classic mode"

5. Add ISAPI filters to point to c:\PHP\php5isapi.dll

Done !!

What is Sysprep?

Sysprep is a tool that Microsoft released way back to help with cloning physical machines. Because Virtual machine act very much like their Physical brethren, one would think that you could use it on virtual machines as well. You would be write! In fact I find that it’s usage in Virtual machines makes even more sense.

Pre-requisites

1. Make sure you have installed a Virtualization software. Virtual PC , VM Workstation etc.
2. Have all Server Media. You will need to copy some files off the server disks.

Windows 2003 Server

1.) Make sure that you install the Windows Server 2003

2.) Run all the updates you will want on the Base server. You can do this by visiting Windows Update and applying all the updates. This will most likely take a very long time.

3.) Open “My Computer” and create a folder called “Support”.

4.) Put in CD/DVD into computer or mount an ISO of the OS. (if it isn’t still there from the install)

5.) Go to the “\Support\Tools” folder on the disk. Open the support.cab file by double clicking on it.

6.) Highlight all the files and copy them to “C:\Support”.

7.) Right click “My Computer” and select properties.

8.) Click the “Advance Tab”.

9.) Click “Environment Variables” button

10.) Go to the end of the “Variable value” box and type “;c:\support”. The “;” makes sure the OS knows to make “support” a separate value.

11.) Hit “OK” , “OK’” etc till you have all the windows closed.

12.) Restart your machine to enable the path setting you just entered.

13.) Log into the server after reboot.

14.) open command prompt by clicking “STAT – RUN” then typing “CMD”.

15.) Type “sysprep” at the command prompt.

16.) A new window will open called “System Preparation Tool 2.0”. Click “Ok”.

17.) Click “Reseal”

Machine will turn off.

18.)This file can now be used on several machines. I’d make a folder where you store you’re VMS and create a folder called one called “Sysprep Image”.

19.) Turn on your machine. You will see something similar to a default install without waiting for files to be copied!

Once you click finish your machine is production ready. Best of all this machine is supported by Microsoft. If you use a program to just change the SID of the machine Microsoft will NOT support it.

Service Pack Cleanup Tool In Vista SP2 To Clean up Old RTM & SP1 Backup Files

The recently released Windows Vista SP2 has shown significant enhancement and improvement in terms of compatibility, reliability, performance, and speed compared to the earlier SP1. If users had noticed, after installing the Vista SP2, the hard disk’s space had been taken up substantially. This was mainly because a lot of old Vista RTM and SP1 backup files and components were not deleted upon the installation of new SP2.

To housekeep your hard disk and clean up those old and unused SP1 backup files, users probably can try the new Service Pack Cleanup Tool which is also named as compcln.exe. This successor for SP1 cleanup tool, Vsp1cln.exe, can easily remove all the system files (RTM & SP1) inherited from the older versions but replaced by Vista SP2.

Running this compeln.exe tool is pretty simple:

1. Click Start>All Programs>Accessories>Command Prompt or click Start>Run and type cmd to open Command Prompt Windows
2. Execute the command “Compcln.exe”. The path is “c:\Windows\System32 \compcln.exe”.
3. Users will be prompted a question whether to keep Vista SP2 permanently in the system.
4. Once users type “Y” and press enter, the system will start performing the windows components clean

After the cleansing process, users will notice the free hard disk space has increased substantially.

Depending on your background, you may find different sections of the newly published Microsoft Security Intelligence Report (SIR) to be of more interest.  In today’s post, we would like to highlight the section on infection rates based on the operating system (OS) version and the service pack level.  Microsoft has consistently observed that machines with newer OS and with more recent service packs are less likely to be infected by malware.  The graph below shows the number of computers having malware removed per 1,000 executions of the MSRT on that OS/SP during the second half of 2008 (2H08).

In the SIR, you will find the the following conclusions based on this data:

• The infection rate for Windows Vista is significantly lower than that of its predecessor, Windows XP, in all configurations.
• Comparing the latest service packs for each version, the infection rate of Windows Vista SP1 is 60.6 percent less than that of Windows XP SP3.
• Comparing the RTM versions of these operating systems, the infection rate of the RTM version of Windows Vista is 89.1 percent less than that of the RTM version of Windows XP.
• The infection rate of Windows Server 2008 RTM is 52.6 percent less than that of its predecessor, Windows Server 2003 SP2.
• The higher the service pack level, the lower the rate of infection. This trend can be observed consistently across client and server operating systems.

There are two reasons for this:

1. Service packs include all previously released security updates. They can also include additional security features, mitigations, or changes to default settings to protect users.
2. Users who install service packs generally maintain their computers better than users who do not install service packs and may also be more cautious in the way they browse the Internet, open attachments, and engage in other activities that can open computers to attack.

Server versions of Windows typically display a lower infection rate on average than client versions. Servers tend to have a lower effective attack surface than computers running client operating systems as they are more likely to be used under controlled conditions by trained administrators and to be protected by one or more layers of security. In particular, Windows Server 2003 its successors are hardened against attack in a number of ways, reflecting this difference in usage.

Continue http://blogs.technet.com/mmpc/archive/2009/04/21/malware-distribution-across-operating-systems.aspx