THE OFFICIAL BLOG OF THE SBS "DIVA"

In this Issue:

TOP SUPPORT ISSUES
NEW & UPDATED KB ARTICLES
NEW & TOP DOWNLOADS
NEW WEBCASTS

TOP SUPPORT ISSUES
===============
The following "hot topics" were posted and resolved during the month of
August:

Issue #1
======
Problem Description
-------------------------
create a boot disk on windows 2008 server core

Resolution:
--------
1. Run cmd
2. Diskpart select disk
3. Convert MBR (maybe show that no GPT exist)
4. Attribute disk clear readonly
5. Online disk
6. Wait for the disk prepared for future operation

Issue #2
=======
Problem Description
-------------------------
You want to delete the previous defective OS from the boot menu

Resolution
--------------
We select "show hidden files and folders", and unselect "hide protected
operating system files". Then rename the legacy boot file boot.ini to
oldboot.ini. That corrects the issue.

Issue #3
======
Problem Description
--------------------------
1. We need to ensure that the domain clients in one site authenticate to a
DC in the same site.
2. How to confirm which DC a client authenticates to?

Cause:
---------
By default, a client authenticates to one of the DCs in the same site as it.
We need to ensure:
1. The site is created.
2. The subnets are defined for the site.
3. Expected DCs are moved to the site.

The "Net" and "LogonSessions" command tools can be used to confirm which DC
a client authenticated to.

Suggestions:
--------
1. Check the time zone settings for the server and workstation's system
clock
2. Check if the required updates for DST are installed on the server and
clients
3. Verify the server has been configured as authoritative time server
properly
4. Configure the clients for automatic domain time synchronization


Issue #4
=======
Problem Description
-------------------------
You have three sites for three physical locations and five DCs in a forest.
On one of the DCs at a remote location, event ID 1566, 1311 and 1865 were
frequently generated.

Resolution
-------------
The primary DNS server was set to an external one on the problem DC.
1. Change the primary DNS server.
2. Re-register the DNS records.
3. Reset the machine account passwords.

Issue #5
=======
Problem Description
-------------------------
Metrics for default gateway on Windows 2003 Server may not work after a
reboot. And you would like to know how to manually change routing table.

Resolution
--------------
This issue occurs because Metrics for default gateway is reset after reboot.
To keep the modifications, we will have to create a schedule task, or use a
script to modify metric everytime Server reboots.

We use schedule task to modify routing table on reboot.


Issue #6
=======
Problem Description
-------------------------
Te workstations cannot FTP to an outside resource.

Cause:
------------
It seems that the issue is caused by the SP2.  Perform the steps suggested
in the KB article solved the issue.

TCP traffic stops after you enable both receive-side scaling and Internet
Connection Sharing in Windows Vista or in Windows Server 2003 with Service
Pack 1 or Service Pack 2
http://support.microsoft.com/kb/927168/en-us

A Windows Server 2003-based computer may stop responding during shutdown
after you install the Scalable Networking Pack
http://support.microsoft.com/kb/940202/en-us

"Cannot Connect to the FTP Server" Error Message When You Access an FTP Site
http://support.microsoft.com/kb/817136/en-us

Issue #7
=======
Problem Description
-------------------------
PDC emulator (Windows 2008 Server) cannot not sync time with external time
source: ntp1.sp.se.

Solution:
-----------
This issue can occur if one of the following is true:

1. NTP traffic is blocked by firewall or network device.
2. Windows time settings are not correct.
3. Other applications are interfering with windows time service.

Time Sync works after turning off ISA firewall client. You will use one of
the following method to resolve this issue:

1. Turn off ISA firewall client.
2. Change ISA server configuration to allow NTP traffic.


Issue #8
=======
Problem Description
-------------------------
When server starts, it prompted the following error message:

"At least one service or driver failed during system startup. Use Event
Viewer to examine the event log for details."

Cause:
--------
Two TrendMicro related drivers are not started but their startup mode is set
to "Auto". Disabling the TrendMicro services fixed the issue.


Issue #9
=======
Problem Description
-------------------------
The message "There is not enough disk space on
C:\WINDOWS\$NtServicePackUninstall$ toinstall Service Pack2. Setup requires
a minimum of 3 additional megabytes of free space or if you also want to
archive the files for uninstallation, Setup requires a minimum of 3
additional megabytes of free space. Free additional space on your hard disk
and then try again" is received while trying to install Windows Server 2003
SP2

Resolution
--------------
This issue is caused by the registry key "BootDir" under
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Setup
Add the registry key "BootDir" resolves this issue

Issue #10
=======
Problem Description
-------------------------
When logon the Virtual Server administration website, you notice the
following error message:

LsaRegisterLogonProcess()failed! Access is denied.

Resolution
--------------
1. Follow the KB KB 923833
2. Change the Virtual Server website from Windows Authentication to Basic
authentication.
3.  Uninstall and reinstall the Virtual Server 2005


NEW & UPDATED KB ARTICLES
====================
The contents of a DFS share do not appear if you access the share by using a
shortcut to the DFS link from a Windows Vista-based computer or from a
Windows Server 2008-based client computer
(953537) - Fixes an issue in which the contents in a DFS share do not appear
if you access the share by using a shortcut to the DFS link from a Windows
Vista-based computer or from a Windows Server 2008-based client computer.
- 8/1/2008 - /default.aspx?scid=kb;en-us;953537

MS08-038: Vulnerability in Windows Explorer could allow remote code
execution
(950582) - Resolves a vulnerability in Windows Explorer that could allow
remote code execution when a specially crafted saved-search file is opened
and saved.
- 7/8/2008 - /default.aspx?scid=kb;en-us;950582

You cannot create multiple RMS Client sessions for one user context on a
Windows Vista-based computer
(950888) - Fixes an issue in which you cannot create multiple RMS Client
sessions for one user context on a Windows Vista-based computer.
- 7/28/2008 - /default.aspx?scid=kb;en-us;950888

You experience issues with UDP-dependent network services after you install
DNS Server service security update 953230 (MS08-037)
(956188) - Describes how to resolve issues that may occur with UDP-dependent
network services after you install the DNS Server service security update
953230 (MS08-037).
- 7/25/2008 - /default.aspx?scid=kb;en-us;956188

Error message when you try to create a RODC IFM in Windows Server 2008 if an
earlier IFM procedure was canceled or has closed unexpectedly: "Could not
initialize the Jet engine: Jet Error -1216"
(954403) - Describes a problem where RODC IFM creation fails in Windows
Server 2008 if an earlier IFM procedure was canceled or has closed
unexpectedly. A resolution is provided.
- 7/25/2008 - /default.aspx?scid=kb;en-us;954403

Microsoft Security Advisory: Increased threat for the DNS spoofing
vulnerability
(956187) - Provides a link to Microsoft Security Advisory (956187):
Increased threat for the DNS Spoofing vulnerability.
- 7/25/2008 - /default.aspx?scid=kb;en-us;956187

MS08-040: Vulnerabilities in Microsoft SQL Server could allow elevation of
privilege
(941203) - Resolves four privately disclosed vulnerabilities. The more
serious of the vulnerabilities could allow an attacker to run code and to
take complete control of the system.
- 7/8/2008 - /default.aspx?scid=kb;en-us;941203

August 2008 cumulative time zone update for Microsoft Windows operating
systems
(951072) - Describes August 2008 cumulative time zone update for Microsoft
Windows operating systems.
- 7/9/2008 - /default.aspx?scid=kb;en-us;951072

A multiprocessor computer that is running a Microsoft Windows operating
system stops responding on a black screen after you resume the computer from
hibernation
(951126) - Fixes an issue in which a multiprocessor computer that is running
Windows Vista or Windows XP or Windows 2003 stops responding after you
resume the computer from hibernation (S4). This problem occurs on a computer
that has multiple processors.
- 7/21/2008 - /default.aspx?scid=kb;en-us;951126

MS08-040: Description of the security update for SQL Server 2005 GDR: July
8, 2008
(948109) - Resolves privately disclosed vulnerabilities. The more serious of
the vulnerabilities could allow an attacker to run code and to take complete
control of the system.
- 7/24/2008 - /default.aspx?scid=kb;en-us;948109

When you run the Validate a Configuration Wizard on a Windows Server
2008-based computer or on a Windows Vista-based computer, the validation
does not pass
(950179) - Fixes a problem that occurs when you run the Validate a
Configuration Wizard in the Failover Cluster Management tool. The validation
fails, and you receive a "The operating system SKU is not compatible" error
message.
- 7/10/2008 - /default.aspx?scid=kb;en-us;950179

On a computer that is running Windows Vista or Windows Server 2008 and that
has UAC and Internet Explorer 7 protected mode enabled, Internet Explorer 7
may stop responding when you try to visit any Web site
(951738) - Fixes an issue in which Internet Explorer 7 may stop responding
when you try to visit any Web site on a Windows Vista-based or Windows
Server 2008-based computer that has UAC and Internet Explorer 7 protected
mode enabled.
- 7/18/2008 - /default.aspx?scid=kb;en-us;951738

A Windows Server 2008-based multi-homed DHCP server is not authorized in the
DHCP MMC snap-in even though you authorized the DHCP server by using Server
Manager
(954416) - Describes an issue in which a Windows Server 2008-based
multi-homed DHCP server is not authorized because the Server Manager uses an
incorrect IP address for the DHCP server in Active Directory Domain
Services. A resolution is provided.
- 7/15/2008 - /default.aspx?scid=kb;en-us;954416

After you restore a clustered disk from a VSS transportable hardware
snapshot in a Windows Server 2008 cluster, the clustered disk cannot come
online
(954475) - Fixes a problem that occurs when you use the hardware restore
feature in a Windows Server 2008 cluster. Specifically, a clustered disk
cannot come online after you perform the restoration process from a VSS
transportable hardware snapshot.
- 7/22/2008 - /default.aspx?scid=kb;en-us;954475

After you apply hotfix 951126 on a computer that is running Windows Server
2003, Windows Vista, or Windows Server 2008, the computer may stop
responding when you try to resume from standby again
(954429) - Fixes a problem that may occur when you try to resume a
multi-core computer from standby.
- 7/28/2008 - /default.aspx?scid=kb;en-us;954429

The Print Spooler service consumes a large amount of memory because of
unsuitable RPC caching in Windows Server 2008 and in Windows Vista
(952178) - Fixes an issue in which the Print Spooler service consumes a
large amount of memory in Windows Server 2008 or in Windows Vista. This
problem occurs because of unsuitable RPC caching.
- 7/25/2008 - /default.aspx?scid=kb;en-us;952178

Summary list of monthly detection and deployment guidance articles
(910723) - Provides a summary list of the detection and deployment guidance
articles that are released on the second Tuesday of each month.
- 7/8/2008 - /default.aspx?scid=kb;en-us;910723

A download is available for Windows Vista and Windows Server 2008 that
resolves an issue in which you cannot open Help files that require the
Windows Help (WinHlp32.exe) program
(917607) - Starting with Windows Vista, the Windows Help program is no
longer included with Windows operating systems.
- 7/23/2008 - /default.aspx?scid=kb;en-us;917607

Sleep and hibernate power features are not available when you enable Hyper-V
technology on a Windows Server 2008-based portable computer
(954418) - Describes that sleep and hibernate power features are not
available when you enable Hyper-V technology on a Windows Server 2008-based
portable computer.
- 7/29/2008 - /default.aspx?scid=kb;en-us;954418

DNS queries that are sent across a firewall do not use random source ports
after you install security update 953230 (MS08-037)
(956190) - Describes an issue in which NAT devices change the source and
destination IP addresses and the source port to avoid resource conflicts
that might occur when multiple internal hosts try to send traffic by using
the same source port.
- 7/25/2008 - /default.aspx?scid=kb;en-us;956190

How to set appropriate I8 values for PSO time attributes on a Windows Server
2008-based computer
(954414) - Describes how to set appropriate I8 values for Password Settings
object (PSO) time attributes on a Windows Server 2008-based computer.
- 7/7/2008 - /default.aspx?scid=kb;en-us;954414

An access violation may occur if you pass an INTEGER value to the ValuePtr
parameter of the SQLSetConnectAttr function in Windows Vista or in Windows
Server 2008
(953589) - Fixes an access violation that occurs when you assign an INTEGER
value to the ValuePtr parameter of the SQLSetConnectAttr function in
Windows Vista or Windows Server 2008.
- 7/4/2008 - /default.aspx?scid=kb;en-us;953589

The IPsec remote management registry value is not preserved when you upgrade
your computer to Windows Server 2008 or to a Server Core installation of
Windows Server 2008
(954412) - Describes an issue in which the IPsec remote management registry
value is not preserved if the registry value is configured incorrectly. A
resolution is provided.
- 7/4/2008 - /default.aspx?scid=kb;en-us;954412

Event ID 1699 is logged many times and fills the Directory Service event log
of a Windows Server 2008-based writable domain controller
(953392) - Fixes an issue in which Event 1699 fills the directory service
event log of a Windows Server 2008-based writable domain controller that
exists in a site together with a read-only domain controller that exists in
a perimeter network.
- 7/7/2008 - /default.aspx?scid=kb;en-us;953392

Data exported to a CSV file is formatted incorrectly in Excel on a computer
that is running a localized non-Latin character based language version of
Windows Server 2008
(954406) - Describes a problem where data exported to a CSV file is
displayed incorrectly in Excel on a computer that is running a localized
non-Latin character based language version of Windows Server 2008. A
workaround is provided.
- 7/4/2008 - /default.aspx?scid=kb;en-us;954406

How to install third-party mass storage drivers for the 64-bit editions of
Windows Server 2008 and of Windows Vista
(954701) - Discusses how to install third-party mass storage drivers for the
64-bit editions of Windows Server 2008 and of Windows Vista.
- 7/10/2008 - /default.aspx?scid=kb;en-us;954701

You receive a Kerberos PAC validation error message when you start multiple
processes on multiple Windows Server 2008-based computers
(954409) - Describes why you receive a Kerberos PAC validation error message
when you start multiple processes on multiple Windows Server 2008-based
computers from domains that do not directly trust one another.
- 7/11/2008 - /default.aspx?scid=kb;en-us;954409

How to remove administrative shares in Windows Server 2008
(954422) - Describes how to remove administrative shares in Windows Server
2008.
- 7/10/2008 - /default.aspx?scid=kb;en-us;954422

MS08-037: Description of the security update for DNS in Windows Server 2008,
in Windows Server 2003, and in Windows 2000 Server (server-side): July 8,
2008
(951746) - Resolves a reported vulnerability in implementations of DNS in
Windows Server 2008, in Windows Server 2003, and in Windows 2000 Server that
could allow spoofing.
- 7/17/2008 - /default.aspx?scid=kb;en-us;951746

A physical disk resource may unexpectedly fail or go offline when the
IsAlive function is executed on a Windows Server 2008 cluster node
(953652) - Fixes an issue in which a physical disk resource on a Windows
Server 2008 cluster node may randomly be offline when you delete a file on a
root folder of the cluster disk.
- 7/7/2008 - /default.aspx?scid=kb;en-us;953652

The Exchange Server Outlook Anywhere feature does not work correctly if it
is installed on a Windows Server 2008-based server that has Terminal
Services Gateway installed
(954034) - Fixes a problem that occurs on a Windows Server 2008-based
computer that has Terminal Services Gateway and the Exchange Server Outlook
Anywhere feature installed. Specifically, users cannot connect to Exchange
Server by using RPC-over-HTTP.
- 7/22/2008 - /default.aspx?scid=kb;en-us;954034

MS08-037: Vulnerabilities in DNS could allow spoofing
(953230) - Resolves a reported vulnerability that could allow spoofing in
implementations of DNS.
- 7/25/2008 - /default.aspx?scid=kb;en-us;953230
The Event Log service may stop responding because of a deadlock on a Windows
Server 2008-based computer

(952664) - Fixes an issue in which the Event Log service stops responding
because of a deadlock in Windows Server 2008. This deadlock occurs when a
remote event subscription is disconnected from the Windows Server 2008-based
computer.
- 7/16/2008 - /default.aspx?scid=kb;en-us;952664

MS08-021: Vulnerability in GDI could allow remote code execution
(948590) - Resolves a reported vulnerability in GDI that could allow remote
code execution.
- 7/18/2008 - /default.aspx?scid=kb;en-us;948590

The System Center Operations Manager 2007 console may crash in Windows
Server 2008 or in Windows Vista when you open the Health Explorer window
(951327) - Fixes an issue in which the System Center Operations Manager 2007
console may crash in Windows Server 2008 or in Windows Vista when you open
the Health Explorer window in the Alerts view
- 7/30/2008 - /default.aspx?scid=kb;en-us;951327

Volume Shadow Copy Service (VSS) System Writer backup fails, and error
messages reference nonexistent files in Windows Server 2008
(955078) - Discusses a problem in which a Volume Shadow Copy Service (VSS)
System Writer backup fails, and you receive error messages that reference
nonexistent files in Windows Server 2008. A resolution is provided.
- 7/9/2008 - /default.aspx?scid=kb;en-us;955078

Detection and deployment guidance for the July 8, 2008 security release
(955133) - Provides detection and deployment guidance for the July 8, 2008
security release.
- 7/9/2008 - /default.aspx?scid=kb;en-us;955133

A Windows Server 2003-based computer becomes unresponsive because the paged
pool memory is exhausted when an application calls the GetFileAttributesEx
and MoveFileEx functions on lots of files
(953325) - Fixes an issue in which Windows Server 2003 may become
unresponsive because the paged pool memory is exhausted. This problem occurs
when an application calls the GetFileAttributesEx function and the
MoveFileEx function on many files.
- 7/5/2008 - /default.aspx?scid=kb;en-us;953325

IPP does not support multiple operating system .inf files on a print server
that is running Windows Server 2008, Windows Vista, Windows Server 2003, or
Windows XP
(953267) - Describes a problem in which IPP does not support multiple
operating system .inf files in Windows Server 2008, in Windows Vista, in
Windows Server 2003, and in Windows XP. A workaround is provided.
- 7/8/2008 - /default.aspx?scid=kb;en-us;953267

The words "Friendster," "Klum," "Nazr," "Obama," and "Racicot" are not
recognized when you check the spelling in Windows Vista and in Windows
Server 2008
(955020) - Fixes an issue in which the words "Friendster," "Klum," "Nazr,"
"Obama," and "Racicot" are not recognized when you check the spelling in
Windows Vista and in Windows Server 2008.
- 7/8/2008 - /default.aspx?scid=kb;en-us;955020

The update for Forefront Client Security (update 952265) may not be
installed on a Server Core installation of Windows Server 2008 when you use
Windows Update
(955884) - Describes a problem in which the Forefront Client Security update
is not installed when you use Windows Update to update a Server Core
installation of Windows Server 2008.
- 7/22/2008 - /default.aspx?scid=kb;en-us;955884

Services or processes that require authentication may stop responding
because of a deadlock condition in the Lsass.exe process on a Windows Server
2008-based computer or on a Windows Vista Service Pack 1-based computer
(948790) - Describes a problem in which services or processes that require
authentication may stop responding because of a dead lock condition in the
Lsass.exe process. This problem occurs on computers that are running Windows
Server 2008 and Windows Vista SP1.
- 7/23/2008 - /default.aspx?scid=kb;en-us;948790

In Windows Vista and in Windows Server 2008, the Content Indexer service
cannot index the custom properties of a document
(947265) - Fixes an issue in which the Content Indexer service cannot index
the custom properties of a document in Windows Vista or in Windows Server
2008.
- 7/22/2008 - /default.aspx?scid=kb;en-us;947265

MIB interface information that is collected by the IP Helper API is blank or
incomplete on a computer that is running a non-English version of Windows
Server 2008 or Windows Vista
(954664) - Fixes a problem that occurs when an application uses the IP
Helper API to collect Management Information Base (MIB) interface
information.
- 7/17/2008 - /default.aspx?scid=kb;en-us;954664

Description of the Windows Vista or Windows Server 2008 hotfix that resolves
certain system and application crashes on computers that have multi-core
processors
(953186) - Fixes a race condition in the MmProbeAndLockPages routine on a
computer that is running Windows Vista or Windows Server 2008.
- 7/21/2008 - /default.aspx?scid=kb;en-us;953186

A computer that is running Windows Server 2008 or Windows Vista may restart
repeatedly with different Stop error codes when multicast forwarding is
enabled
(943650) - Describes the problem in which a computer that is running Windows
Server 2008 or Windows Vista may restart repeatedly with different Stop
error codes because of a problem in the Tcpip.sys file.
- 7/28/2008 - /default.aspx?scid=kb;en-us;943650

You receive a "STOP 0x0000010E" error message on a Windows Vista-based
computer or on a Windows Server 2008-based computer
(953026) - Fixes a problem in which a "STOP 0x0000010E" error occurs on a
Windows Vista-based computer or on a Windows Server 2008-based computer.
- 7/31/2008 - /default.aspx?scid=kb;en-us;953026

An extra forward slash mark (/) is appended to the query path of a WebDAV
PROPFIND request when you visit a SharePoint Portal Server site by using
Internet Explorer on a Windows-based computer
(945015) - Describes a problem in which an extra forward slash mark (/) is
appended to the query path of a WebDAV PROPFIND request when you use
Internet Explorer to visit a SharePoint site in Windows XP, Windows Vista,
or Windows Server 2008.
- 7/28/2008 - /default.aspx?scid=kb;en-us;945015

Error message when you use cluster nodes that have Domain Controller roles
in Windows Server 2008: "Computer cannot be managed"
(954027) - Describes an issue that occurs because the Storagemgmt.msc tool
does not correctly detect operating system roles in Windows Server 2008.
Provides a workaround.
- 7/29/2008 - /default.aspx?scid=kb;en-us;954027

The page file size may become alternately too small or too large when you
start Windows Server 2008 or Windows Vista if there is no available free
disk space, and the page file size is managed by the system
(955635) - Describes a problem in which in the page file size may become
alternately too small or too large on each startup of Windows Server 2008 or
Windows Vista.
- 7/25/2008 - /default.aspx?scid=kb;en-us;955635

Error message when you use smart card authentication to log on to a Windows
Server 2008-based terminal server from a client computer that is running
Windows Vista or Windows Server 2008: "0xC000040C"
(954910) - Fixes an issue in which you receive a "0xC000040C" error code
when you try to log on to a Windows Server 2008-based terminal server. This
problem occurs if you use smart card authentication from a Windows
Vista-based client computer.
- 7/15/2008 - /default.aspx?scid=kb;en-us;954910

The TS Gateway NAP Wizard does not set correctly the device redirection
attribute for the TS Gateway on a Windows Server 2008-based computer
(954417) - Describes an issue in which the Terminal Server (TS) Gateway
Network Access Protection (NAP) wizard does not set correctly the
TSG-Device-Redirection attribute for the TS Gateway on a Windows Server
2008-based computer. A workaround is provided.
- 7/16/2008 - /default.aspx?scid=kb;en-us;954417

You may experience authentication issues when you access a network-attached
storage device after you upgrade to Windows Server 2008, to Windows Vista,
to Windows Server 2003, or to Windows XP
(954387) - Describes an issue in which you cannot access a network-attached
storage device after you upgrade to Windows Server 2008, Windows Vista,
Windows XP, or Windows Server 2003. A resolution and a workaround are
provided.
- 7/14/2008 - /default.aspx?scid=kb;en-us;954387

Stop error when you resume a Windows Vista-based computer that is connected
to a USB optical disc drive from standby "STOP: 0x000000E4" or "STOP:
0x0000000A"
(954029) - Describes an issue in which you may receive an error message
"STOP: 0x000000E4" or an error message "STOP: 0x0000000A" on a Windows
Vista-based computer when you resume the computer from standby. Provides a
hotfix to resolve this issue.
- 7/14/2008 - /default.aspx?scid=kb;en-us;954029

When you run an NDISTest on a Windows-based computer that has a RNDIS driver
installed, a failure is reported, or the computer may become unresponsive
(949729) - Fixes an issue that occurs when you run an NDISTest on a
Windows-based computer that has an RNDIS driver installed.
- 7/14/2008 - /default.aspx?scid=kb;en-us;949729

NEW & TOP DOWNLOADS
================
Active Directory Migration Tool version 3.1
http://www.microsoft.com/downloads/details.aspx?FamilyID=ae279d01-7dca-413c-a9d2-b42dfb746059&DisplayLang=en

Update for Windows Server 2008 x64 Edition (KB952664)
http://www.microsoft.com/downloads/details.aspx?FamilyID=ab6ac072-5af8-4011-b21c-81c051e9688c&DisplayLang=en

NEW WEBCASTS
==========
Momentum Webcast: Introduction to the Microsoft Core Infrastructure
Optimization Model (Level 100)
http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032345981&EventCategory=5&culture=en-US&CountryCode=US