Quickie: Kerio has also some bug

March 14th, 2013 No comments

Today I solved one network issue. Customer has Tomcat webserver. This server is located at central site. Users which use this Tomcat website are located at branches. These branches are connected via MLPS network. There is Kerio in between MPLS network and central site. Problem was that people from central site could use Tomcat website, but people from branch offices couldn’t use it. After couple minutes of analyzing network using Wireshark, I found out that problem is caused by IP fragmentation.

I solved it by Enabling PMTU black hole detection and Disabling PMTU Discovery as described HERE.

I found also old article about this issue at Kerio support forum.

Quickie: Exchange analyzer as stant-alone applications

March 12th, 2013 No comments

Today was new version of Exchange testing applications released. More about it is HERE.

Run script in elevated mode with active UAC

March 4th, 2013 No comments

I had to run one vbs script on Windows 7 with UAC enabled. This script was implemented as part of Run/RunOnce technology in Windows. When you want some script/application to run everytime you log in or just once you log in, you can use this technology built-in Windows. You can read about it here. Implementation of these registry keys was easy. Problem raised when I found out that script doesn’t run in elevated mode – without administrative privileges.

If you need to run some script in elevated mode, you can right-click on script and select “Run as administrator”. This is fine, but what about script that is part of registries? There is no way to right-click 🙂 You have to use UNDOCUMENTED parameter “runas” of parameter ShellExecute of object Shell.Application. It’s really undocumented on official sites!

Another bad thing of running script in elevated mode is that you cannot access network drives which you have mapped. You need to remap them and then you can use them.

There are nice articles which describe how to run scripts in elevated mode:

This saved me couple hours of fight with scripts 🙂

 

VBS Script: How to find out actual path of running script

March 1st, 2013 No comments

When you need to find out what path is the running script located at you can use following script:

Dim strFullPath, strPath

strFullPath = WScript.ScriptFullName

strPath = Left(strFullPath, InStrRev(strFullPath,”\”))

Enjoy,

Quickie: Lync Server 2010 has same problem Exchange does

February 28th, 2013 2 comments

When I wanted to Enable AD users in Lync Server 2010 which were members of Domain Administrators and Enterprise Administrators I received error:

Active Directory operations failed on “DC_server”.  You cannot retry this operation: “Insufficient access rights to perform the operation 00002098: SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0”

It’s same problem as Exchange has. You cannot be member of those two groups, because periodically all accounts in this groups have cleared Include inheritable permissions from this object’s parent and set explicit permissions by AD. But if you want to add members of those administrative groups into Lync you can check checkbox Include inheritable permissions from this object’s parent, enable user in Lync and uncheck checkbox Include inheritable permissions from this object’s parent after you are done.

Inheritance AD User

Exchange fixed this issue after couple year in Exchange 2010 SP3. Hopefully we will have some fix also for Lync Server.

Quickie: Updates for Lync Server 2010

February 28th, 2013 No comments

Today I was wondering why I don’t see any updates for Lync Server on Windows Update webpage. After couple minutes I found out article about LyncServerUpdateInstaller.exe. This little (50MB) utility will do updates for Lync Server.

Warning: This utility will not patch database. You need to use Install-CsDatabase instead as described in articles published with updates, which update database.

Microsoft Lync 2010 server – preparation of OS

February 25th, 2013 No comments

Today I started installation of Standard version of Microsoft Lync server. There are some prerequisites for OS where Lync server will run. Here is a quick step-by-step howto:

  • Installation of .NET Framework 3.5. Run following commands in Admin Powershell:
    • Import-Module ServerManager
    • Add-WindowsFeature NET-Framework-Core

Install .NET 3.5

  • In same Powershell windows run following command to install IIS Feature with all required components:
    • Add-WindowsFeature Web-Static-Content,Web-Default-Doc,Web-Http-Errors,Web-Asp-Net,Web-Net-Ext,Web-ISAPI-Ext,Web-ISAPI-Filter,Web-Http-Logging,Web-Log-Libraries,Web-Http-Tracing,Web-Windows-Auth,Web-Filtering,Web-Stat-Compression,Web-Mgmt-Console,Web-Scripting-Tools,Web-Client-Auth

Install all IIS requirements

 

  • Install RSAT-ADDS by running following command in same Powershell windows:
    • Add-WindowsFeature RSAT-ADDS

RSAT-ADDS installation

 

  • Reboot server
  • We need to install Windows Media Format Runtime. We can do it by running following command from elevated command prompt:
    • %systemroot%\system32\dism.exe /online /add-package /packagepath:%windir%\servicing\Packages\Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum /ignorecheck

Install WMFR

 

  • Press “Y” to reboot server again.

Tomorrow we will prepate Schema, Domain and Forest to support Lync 2010.

 

Quickie: New features in new RDP

February 25th, 2013 No comments

Today I connected to Windows 2012 server an notices weird little arrow in the left upper corner (full screen):

New RDP

Maybe this will be usefull for some people. I can use only “Start” 🙂

You can access same Remote commands even not in Full Screen RDP:

New RDP

Enjoy,

Quickie: SCSI sniffer/tracer

February 22nd, 2013 No comments

I was debugging problem with SCSI tape library and I wanted to inspect data on SCSI connection. I found great utility on Symantec website. It’s kinda SCSI command sniffer.

Here you can read how to install it.

Here is manual how to use it.

I hope this works with all SCSI devices and not only those supported by Symantec 😉

Quickie: How to re-create tape library in Symantec Backup Exec

February 22nd, 2013 4 comments

Here is my best practice to re-create tape library under Symantec Backup Exec (I used version 12.5):

  • Delete all tape devices from Symantec
    • You must disable Robotic Library first by unchecking “Enable”

 

Disable Robotic Library

 

    • When it’s disabled you can “Delete” tape Drives and then Robotic Libraries

 

Delete Library

 

  • Uninstall all Symantec drivers using tapeinst.exe
    • In Symantec installation directory look for file tapeinst.exe file and run it.
    • Choose to “Uninstall and remove all Symantec devices…” and run it.

 

Remove Symantec drivers

 

    • There shouldn’t be any tape drives and media changers in Device Manager at this time

 

  • Reboot server

 

  • Install Symantec drivers using tapeinst.exe
    • In Symantec installation directory look for file tapeinst.exe file and run it.
    • Choose to “Use Symantec tape drivers for all supported tape devices” and run it

 

Install Symantec drivers

 

    • Now you should see new devices in Device Manager

 

  • Create new tape devices using hotswap.exe
    • This is really straightforward process without need of any explanation.

 

And you are all done 🙂

Remarks:

Thanks to Róbert Švec for refreshing my memories 🙂