THE OFFICIAL BLOG OF THE SBS "DIVA"

In this Issue:

TOP SUPPORT ISSUES
NEW & UPDATED KB ARTICLES
NEW & TOP DOWNLOADS
NEW WEBCASTS

TOP SUPPORT ISSUES
===============
The following "hot topics" were posted and resolved during the month of May:


Issue #1
======
Problem Description
-------------------------
you would like some user accounts and computers to exclude from receiving
the password policy settings. You need to make sure that domain
Administrator account does not get affect it by the GPO.


Cause:
--------
In Windows 2003 environment, we are limited to use a single password policy
per domain. As you mentioned, password policy only work while linked to
Domain node. So all user accounts will be affected by a single password
policy in Windows 2003 environment.


We can apply the password policy settings to Organization Group (OU) or
computer accounts in Windows Server 2008 directly.


Issue #2
=======
Problem Description
-------------------------
DNS records (Forward and Reverse zones) are not registered correctly. The
client IP is resolved to other computer names.


Resolution
--------------
This issue can occur if:

1. DNS scavenging is not enabled on the Reverse lookup zone. Removed client
computers may leave their PTR records there.
2. There are backup/restore applications on DNS server, restoring DNS
database.

Remove Old records and enable DNS scavenging on reverse DNS zones.

Issue #3
======
Problem Description
--------------------------
SRMSVC event 8197 and the FRSM console appear: "Unable to connect to the
FSRM service on the computer..." with a red X.


Cause:
---------
The issue is caused by the BMC software and we manually register the
following dlls.

1 Stop the BMC Patrol agent.

2  Register the following dlls

- Regsvr32 srm.dll
- Regsvr32 srmsvc.dll
- Regsvr32 srmsched_ps.dll

3. Restarted the FSRM service


Issue #4
=======
Problem Description
-------------------------
unable to install the OCS Web Access

Resolution
-------------
1. We download and install MBExplorer by installing IIS 6 Resource Kit
Tools:
http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71A-4C73-B628-ADE629C89499&displaylang=en.

2. Used Metabase Explorer

3. Expand LM and click on W3SVC

4. We go to the properties of WebSvcExtRestrictionList in the right hand
pane.

5. Click on the General Tab.

Check if the "User Type" is set to "FILE" If so, let's change the "User
Type" to "SERVER"

6. Click OK and closed Metabase Explorer

7. Do the following commands to restart the IIS:

IISRESET /RESTART


Issue #5
=======
Problem Description
-------------------------
Windows Server 2008 printer supports both X86 and X64 printer drivers.


Resolution
--------------
To support client computers that use different processor architectures than
the print server, you must install additional drivers. For example, if your
print server is running a 64-bit version of Windows and you want to support
client computers running 32-bit versions of Windows, you must add x86-based
drivers for each printer.

 To add client printer drivers to the print server

 1.  Right-click the printer to which you want to add additional printer
drivers, and then click Manage Sharing.

2.  Click Additional Drivers. The Additional Drivers dialog box appears.

3.  Select the check box of the processor architecture for which you want to
add drivers.

For example, if the print server is running an x64-based edition of Windows,
select the x86 check box to install 32-bit version printer drivers for
client computers running 32-bit versions of Windows.

4.  If the print server does not already have the appropriate printer
drivers in its driver store, Windows prompts you for the location of the
driver files. Download and extract the appropriate driver files, and then in
the dialog box that appears, specify the path to the .inf file of the
driver.

Note:   You might not be able to extract some printer drivers without
installing them. If this is the case, log on to a client computer that uses
the same processor architecture as the printer drivers that you want to add
to the print server, and install those printer drivers. Then use Print
Management from the client computer to connect to the print server, and add
the additional drivers from the Additional Drivers dialog box. Windows
automatically uploads the drivers from the client computer to the print
server.

Issue #6
=======
Problem Description
-------------------------
You are unable to block File and printer share in firewall. Even we
explicitly block port 139 and 445, clients are still able to access server
shares.

Cause:
------------
You have defined a security policy in which "Ports used by System RPC
Applications" is enabled. The ports are enabled by Upload manager and will
always open regardless of whether those ports are explicitly enabled or not

Resolution
--------------
We manually remove "Ports used by System RPC Applications" and reboot the
server. Now, we can successfully block port 139 and 445 while enabling
custom scope successfully.

Issue #7
=======
Problem Description
-------------------------
Unable the activate the Windows 2008 Server Core via slmgr.vbs.

Cause:
--------
There is no KMS server in the current domain.

Solution:
-----------
Change the product key and use the "slmgr.vbs - ato" to activate the server
core.


Issue #8
=======
Problem Description
-------------------------
Virtual Server Host clustering meeting problems when VMs connects to the
three different Virtual networks

Cause:
--------
- Two nodes virtual server hosting cluster
- Three Virtual Networks connect to the same physical network adapter (three
VLAN)

Resolution
--------------
1. Place the .VNC files on the C:\ on each node--------------Notice the
event 1042 on the host server
2. Correct the options.xml file on each node to have  the same ID for each
network----------------Virtual Server service stops responding
3. Install the hotfix 941125-------------------this fixed the issue

944815 Network connection of guest machine is broken after performing a
Cluster failover
http://support.microsoft.com/default.aspx?scid=kb;EN-US;944815

The Virtual Server service may stop responding when the service is starting
if one or more of the virtual machines are configured to automatically start
when the Virtual Server service starts
http://support.microsoft.com/kb/941125/en-us

Issue #9
=======
Problem Description
-------------------------
Host server loses Lan connections when we attach the internal network
adapters


Resolution
--------------
DisableTaskoffload

1. Update the NIC drivers of the host physical NIC

2. Click Start, click Run, type regedit, and then click OK.

3. Locate and then click the following registry subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

4. Click Edit, point to New, and then click DWORD Value.

5. Type DisableTaskOffload as the entry name, and then press ENTER.

6. Right-click DisableTaskOffload, and then click Modify.

7. In the Value data box, type a value of 1, and then click OK.

8. Quit Registry Editor.

9. Restart your computer.
You experience intermittent communication failure between computers that are
running Windows XP or Windows Server 2003
http://support.microsoft.com/kb/904946




NEW & UPDATED KB ARTICLES
====================
(949229) - Describes a problem that occurs in Virtual PC 2007 and in Virtual
PC 2004. Specifically, the clipboard on the host computer does not function
correctly. A workaround is provided.
- 4/9/2008 - /default.aspx?scid=kb;en-us;949229

(840319) - Lists the host operating systems that you can use to install and
run Microsoft Virtual Server 2005.
- 5/5/2008 - /default.aspx?scid=kb;en-us;840319

(951041) - Describes the supported paths for upgrading from Windows Server
2003 to Windows Server 2008. Also provides upgrade considerations for Server
Core installations of Windows Server 2008.
- 4/28/2008 - /default.aspx?scid=kb;en-us;951041

(950824) - Describes an issue in which the AuthzInitializeContextFromSid
function does not enumerate domain local groups of the domain user account
in Windows Server 2003 when you run the function in a different domain
context.
- 4/29/2008 - /default.aspx?scid=kb;en-us;950824

(109626) - Describes how to enable logging of debug information by using a
debug version of Net Logon and the required debug .dll files.
- 4/21/2008 - /default.aspx?scid=kb;en-us;109626

(258503) - Describes a problem where event ID 5788 and event ID 5789 are
logged when the DNS domain name and the Active Directory domain name differ
on a Windows-based computer.
- 5/5/2008 - /default.aspx?scid=kb;en-us;258503

(294418) - In the following table, the increased maximum resources of
computers that are based on 64-bit versions of Windows and the 64-bit Intel
processor are compared with existing 32-bit resource maximums.
- 4/29/2008 - /default.aspx?scid=kb;en-us;294418

(837361) - Lists the registry entries in Windows Server 2003 that can be
used for Kerberos protocol testing and for troubleshooting Kerberos
authentication issues.
- 4/11/2008 - /default.aspx?scid=kb;en-us;837361

(871236) - Describes new events that appear when user rights are missing
from the Cluster service account.
- 4/30/2008 - /default.aspx?scid=kb;en-us;871236

(885013) - Describes an issue where a Warning event ID 1009 is logged in the
System log on the Terminal Server License server. Requires the addition of a
registry entry to resolve this issue.
- 4/16/2008 - /default.aspx?scid=kb;en-us;885013

(884049) - Describes a problem where the Aclui.dll file displays incorrect
ACLs for Active Directory objects that have permissions set for the Domain
Administrators group. Notice that this is a display issue only. Permissions
are correctly enforced.
- 4/18/2008 - /default.aspx?scid=kb;en-us;884049

(918165) - You may experience one or more issues with the Windows shell or
with Windows Explorer after you apply security update MS06-015 (908531).
- 4/25/2008 - /default.aspx?scid=kb;en-us;918165

(884070) - Discusses a problem that occurs when your program crashes because
of disk errors.
- 4/29/2008 - /default.aspx?scid=kb;en-us;884070

(894571) - Describes an ActiveX control deployment problem that occurs when
you use the methods that are described in KB articles 241163 and 280579 to
deploy an ActiveX control through Active Directory. Resolution is provided.
- 4/22/2008 - /default.aspx?scid=kb;en-us;894571

(895361) - This article documents the support boundaries for customers who
run Office on 64-bit versions of Windows operating systems.
- 4/29/2008 - /default.aspx?scid=kb;en-us;895361

(925876) - Discusses the Remote Desktop Connection 6.0 client update that is
available for download in the Download Center.
- 4/29/2008 - /default.aspx?scid=kb;en-us;925876

(923628) - Fixes a problem that occurs when you perform a backup in Windows
Server 2003 with SP1. If the backup uses a volume snapshot, the backup
application stops responding.
- 4/30/2008 - /default.aspx?scid=kb;en-us;923628

(950310) - Fixes an issue in which a Windows Server 2003-based computer may
encounter a nonpaged pool memory leak when the Single Instance Storage
driver processes an alternative stream. A workaround is provided.
- 4/29/2008 - /default.aspx?scid=kb;en-us;950310

(935640) - Provides a list of the recommended hotfixes and program updates
for cluster nodes that are running Windows Server 2003 Service Pack 2.
- 4/14/2008 - /default.aspx?scid=kb;en-us;935640

(947478) - Describes a problem that may occur on a Windows Server 2003-based
computer that has a McAfee product installed.
- 5/5/2008 - /default.aspx?scid=kb;en-us;947478

(951202) - Fixes an issue in which the Diskpart.exe utility is unable to
convert local disks to dynamic disks on a Windows Server 2003-based computer
that has the Cluster service installed.
- 4/25/2008 - /default.aspx?scid=kb;en-us;951202


NEW & TOP DOWNLOADS
================
Step-by-Step Guide for Testing Hyper-V and Failover Clustering
http://www.microsoft.com/downloads/details.aspx?FamilyID=cd828712-8d1e-45d1-a290-7edadf1e4e9c&DisplayLang=en

Documentation for Windows Deployment Services in Windows Server 2008
http://www.microsoft.com/downloads/details.aspx?FamilyID=f199c4db-1737-42dc-902b-67fc48bf58d1&DisplayLang=en

Security audit events for Microsoft Windows Server 2008 and Microsoft
Windows Vista
http://www.microsoft.com/downloads/details.aspx?FamilyID=82e6d48f-e843-40ed-8b10-b3b716f6b51b&DisplayLang=en

Windows Server 2008 Multilingual User Interface Language Packs
http://www.microsoft.com/downloads/details.aspx?FamilyID=e9f6f200-cfaf-4516-8e96-e4d4750397ff&DisplayLang=en

Group Policy Documentation Survival Guide
http://www.microsoft.com/downloads/details.aspx?FamilyID=66643d52-bd3d-4b10-972c-316eca5dbedf&DisplayLang=en

Windows Server 2008 Step-by-Step Guides
http://www.microsoft.com/downloads/details.aspx?FamilyID=518d870c-fa3e-4f6a-97f5-acaf31de6dce&DisplayLang=en

Microsoft Operations Framework (MOF) 4.0
http://www.microsoft.com/downloads/details.aspx?FamilyID=457ed61d-27b8-49d1-baca-b175e8f54c0c&DisplayLang=en

Microsoft Baseline Security Analyzer 2.1 (for IT Professionals)
http://www.microsoft.com/downloads/details.aspx?FamilyID=f32921af-9dbe-4dce-889e-ecf997eb18e9&DisplayLang=en

NEW WEBCASTS
==========
MSDN Webcast: Windows Server 2008 and Hyper-V Virtualization for Building
Server Appliances (Level 100)
http://www.microsoft.com/events/EventDetails.aspx?CMTYSvcSource=MSCOMMedia&Params=%7eCMTYDataSvcParams%5e%7earg+Name%3d%22ID%22+Value%3d%221032376314%22%2f%5e%7earg+Name%3d%22ProviderID%22+Value%3d%22A6B43178-497C-4225-BA42-DF595171F04C%22%2f%5e%7earg+Name%3d%22lang%22+Value%3d%22en%22%2f%5e%7earg+Name%3d%22cr%22+Value%3d%22US%22%2f%5e%7esParams%5e%7e%2fsParams%5e%7e%2fCMTYDataSvcParams%5e

Momentum Webcast: Client Virtualization Solutions from Microsoft and HP
(Level 100)
http://www.microsoft.com/events/EventDetails.aspx?CMTYSvcSource=MSCOMMedia&Params=%7eCMTYDataSvcParams%5e%7earg+Name%3d%22ID%22+Value%3d%221032375769%22%2f%5e%7earg+Name%3d%22ProviderID%22+Value%3d%22A6B43178-497C-4225-BA42-DF595171F04C%22%2f%5e%7earg+Name%3d%22lang%22+Value%3d%22en%22%2f%5e%7earg+Name%3d%22cr%22+Value%3d%22US%22%2f%5e%7esParams%5e%7e%2fsParams%5e%7e%2fCMTYDataSvcParams%5e

TechNet Webcast: Managing Windows Server 2008 with Server Manager (Level
200)
http://www.microsoft.com/events/EventDetails.aspx?CMTYSvcSource=MSCOMMedia&Params=%7eCMTYDataSvcParams%5e%7earg+Name%3d%22ID%22+Value%3d%221032375368%22%2f%5e%7earg+Name%3d%22ProviderID%22+Value%3d%22A6B43178-497C-4225-BA42-DF595171F04C%22%2f%5e%7earg+Name%3d%22lang%22+Value%3d%22en%22%2f%5e%7earg+Name%3d%22cr%22+Value%3d%22US%22%2f%5e%7esParams%5e%7e%2fsParams%5e%7e%2fCMTYDataSvcParams%5e

Momentum Webcast: Plan Your Windows Server 2008 Migration in Less Time with
Fewer Resources (Level 200)
http://www.microsoft.com/events/EventDetails.aspx?CMTYSvcSource=MSCOMMedia&Params=%7eCMTYDataSvcParams%5e%7earg+Name%3d%22ID%22+Value%3d%221032375368%22%2f%5e%7earg+Name%3d%22ProviderID%22+Value%3d%22A6B43178-497C-4225-BA42-DF595171F04C%22%2f%5e%7earg+Name%3d%22lang%22+Value%3d%22en%22%2f%5e%7earg+Name%3d%22cr%22+Value%3d%22US%22%2f%5e%7esParams%5e%7e%2fsParams%5e%7e%2fCMTYDataSvcParams%5e