THE OFFICIAL BLOG OF THE SBS DIVA

This year I'm mad scientist at the door greeting trick or treaters..... or translation the best "door" costume I could come up with given the fact that I saw trick or treaters heading down the road.  A little hair gel to make the hard  hair stand up a bit more than it normally does, a bit of eyeliner around the eyes and eyebrows and nose to make a mustache and a bit of masking tape around the glasses.  Oh and a lab coat.  What can I say, I was pressed for time and the Princess costume takes too much time to throw on.

I must admit the mad scientist costume was inspired by Raymond Chen's blog today.

http://blogs.msdn.com/b/oldnewthing/archive/2011/10/31/10231476.aspx

At least for me it's effective

Error message when you start your computer with a non-system disk:
http://support.microsoft.com/default.aspx?scid=kb;en-us;812492

When remotely patching, ensure that flash drives are not stuck in machines.  I nearly started tearing apart and replacing a hard drive on a workstation before I spotted a flash drive in the back causing the system not to boot.

QuickBooks Loan Manager and Internet Explorer 9 Problem FIXED : Practical QuickBooks:
http://qbblog.ccrsoftware.info/2011/10/quickbooks-loan-manager-and-internet-explorer-9-problem-fixed/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+PracticalQuickbooks+%28Practical+QuickBooks%29

I've had IE9 installed for a while - mainly because if you never use the items that have issues with IE9, you never see the issues.  Bottom line if you were holding back, there's now a fix.

Post: Cannot Setup Active Sync

http://social.microsoft.com/Forums/en-US/partnermsgexchange/thread/cac6adfd-0426-45c4-8234-a564c515e041

Problem Description:

================

Environment: Exchange 2010

Symptom: In order to fix the Active Sync setup issue, the customer reinstalled IIS and Client Access Server for several times. After that, the Exchange Management Console/Shell cannot be opened successfully.

Cause:

================

1. The Default Web Site also hosts another web site which contains a web.config file and its sub virtual directory inherits settings from this web.config file.

2. The binding of the Default Web Site is incorrect.

Resolution:

================

1. Remove the web.config file of the Default Web Site.

2. Correct the binding settings of the Default Web Site.

Best regards,

Ryan Ye
Partner Online Technical Community
-----------------------------------------------------------------------------------------
We hope you get value from our new forums platform! Tell us what you think:
http://social.microsoft.com/Forums/en-US/partnerfdbk/threads
------------------------------------------------------------------------------------------
This posting is provided "AS IS" with no warranties, and confers no rights.

>>>Exchange Server Solution Sharing - 2011 October<<<:
http://social.microsoft.com/Forums/en-US/partnermsgexchange/thread/174a90a6-8140-4a1b-a591-3bee775ce8a0

Post: <Link redirection in IE 9>

<http://social.microsoft.com/Forums/en-US/partnerinternetie/thread/e781f225-8328-459a-8ac4-7b5421a5fc12>

Description:

==============

Environment: Windows 7 SP1 with IE 9 installed

While trying to open a link terminates with .pdf in IE9 (such ashttp://support.domain.com/report.pdf), the link cannot open. We have tried add the sites to "trusted sites".

Cause:

==============

This can be caused by ProxySubClsid32 pointing to the incorrect value.

Resolution:

==============

Verify the following REG_SZ value is {A4A1A128-768F-41E0-BF75-E4FDDD701CBA} under:

[HKEY_CLASSES_ROOT\Interface\{79EAC9C5-BAF9-11CE-8C82-00AA004BA90B}\ProxyStubClsid32]

>>>Solution Sharing----Internet Explorer-----September<<<:
http://social.microsoft.com/Forums/en-US/partnerinternetie/thread/7a9accdd-24dd-41a6-9013-42580e2e793e

.... patching/updating an iPhone better known as ... about as entertaining as watching paint dry. 

The STARTTLS certificate will expire soon: subject: domain.com, hours remaining: 76EB0A88D2FAE18ACD758189A6C630A1771990D0. Run the New-ExchangeCertificate cmdlet to create a new certificate.

So if you are like me and running a SBS box with a third party cert, you'll get to a stage where the internal self signed leaf certificates will expire and the third party cert won't be impacted.  You could ignore this, but it will annoy you to smithereens in your event logs.

I know it's not my third party cert as I have that SSL cert for a LONG time.

Yeah, I didn't want that sucker to expire on me as one time I accidentally did let a SSL cert lapse.

The fix my network wizard won't get rid of this unless you are using a self signed cert.

The two certs that are not liking this are:

AccessRules        : {System.Security.AccessControl.CryptoKeyAccessRule, System
                     .Security.AccessControl.CryptoKeyAccessRule, System.Securi
                     ty.AccessControl.CryptoKeyAccessRule}
CertificateDomains : {domain.com, SERVER.internaldomain.lan}
HasPrivateKey      : True
IsSelfSigned       : False
Issuer             : CN=domain-SERVER-CA
NotAfter           : 11/23/2011 11:24:00 PM
NotBefore          : 11/23/2009 11:24:00 PM
PublicKeySize      : 2048
RootCAType         : Registry
SerialNumber       : 6139F43E000000000005
Services           : IMAP, POP, SMTP
Status             : Valid
Subject            : CN=domain.com
Thumbprint         : 76EB0A88D2FAE18ACD758189A6C630A1771990D0

AccessRules        : {System.Security.AccessControl.CryptoKeyAccessRule, System
                     .Security.AccessControl.CryptoKeyAccessRule, System.Securi
                     ty.AccessControl.CryptoKeyAccessRule}
CertificateDomains : {Sites, SERVER.internaldomain.lan}
HasPrivateKey      : True
IsSelfSigned       : False
Issuer             : CN=domain-SERVER-CA
NotAfter           : 11/23/2011 7:08:18 PM
NotBefore          : 11/23/2009 7:08:18 PM
PublicKeySize      : 2048
RootCAType         : Registry
SerialNumber       : 61269AC0000000000002
Services           : IMAP, POP, SMTP
Status             : Valid
Subject            : CN=Sites
Thumbprint         : 41ECAF354F3E542F4865FBAA970CBC65B291303A

Those thumbprint thingys will be very important.

http://geekcroft.wordpress.com/2008/10/15/renewing-internal-certificates-the-easy-way/

And we're going to fix it like that. Kinda.  I could remove these certs, but if I run this command and then say NO that I want to leave the third party cert in place, it will extend the old cert AND leave my third party cert in place.

Launch the Exchange powershell window

Get-ExchangeCertificate -Thumbprint 41ECAF354F3E542F486
5FBAA970CBC65B291303A | New-ExchangeCertificate

Now we do the list command to make sure that the new certs are there

get-exchangecertificate | fl

With the new certificate in place we may now remove the old certificate using Remove-ExchangeCertificate with the thumbprint value of the old certificate:
Remove-ExchangeCertificate -Thumbprint 76EB0A88D2FAE18ACD758189A6C630A1771990D0

(that thumbprint value is unique to the cert, so don't copy it for your setup)

Send yourself an email to make sure all is well and there you go.

Again WITH A THIRD PARTY CERT I could have just removed those internal self signed expiring certs, but I didn't want to do that.

Event Log Driven Network Capture Tool:
http://nm3eventcap.codeplex.com/

Download and copy the tool to the terminal server.

Install network monitor on the terminal server.
http://www.microsoft.com/downloads/details.aspx?FamilyID=983b941d-06cb-4658-b7f6-3088333d062f&displaylang=en

Download and copy the nm3eventcap.exe to the server.
http://www.codeplex.com/NM3EventCap

Open a command window with run as administrator, run command,
Nm3eventcap.exe 56.cap –o 56 –f "tcp.port==3389" –b 1000

NOTE: above command will keep capturing the logs until event 56 appears and the maximum log file size is 1G. Please keep it running and please do not close the command window and log off the session until the event 56 happens again.
(note that was in a partner post about TS debugging but it's a great tip for debugging something in the event logs in general)

http://social.microsoft.com/Forums/en-US/partnerwinserver7rcthreads/thread/c8face23-348a-45b5-ae8b-1152e8f10ff9

Tonight we had our Fresno partner group meeting and we talked about several topics -- how good Bob Nitrio and Karl Palachuk were at the Sacramento IT pro group.  
They discussed cloud computing and how to be a trusted advisor and really understand the business model.
We talked about SMBMVPtour content (MultiPoint in particular) and then Windows 8 and the new start menu and WHERE is the classic menu.  
Then we talked about Windows Storage Server Essentials R2.

Next month the topic will be ... so?  Can you install SBS in Azure or Amazon Web services?  Or subtitled the SMB guys and gals figure out what this cloud stuff is really.

We need to talk.  You've put on a few pounds lately.  You aren't the thin young thing you used to be.  To the point where people are talking behind your back.  In various listserves in fact, folks are starting to chat about how there's a young thin thing called Kerio that is attracting the eyes of folks.  It's lighter.  Thinner.  Less maintenance....and worse yet, CHEAPER than you are. 

I know that since you were born you have had your feet on the ground but lately you have your nose in the air so much that I'm starting to get concerned that you don't realize that not all of the people around you are too thrilled with what you are up to. 

I know you say that you want to be built for those big spender folks, but are they forking out the money for you lately?  I also know that while some people want to travel in the areas you say you plan to go to, not everyone does.  To the point where the Kerio buzz for SMB in starting to grow.  Someone even said they are putting Kerio on SBS Essentials.

Bottom line, just be aware that people are talking behind your back.  And it's not what I think you want them to be talking about.

Office 2007 and SharePoint 2007 Service Pack 3 Availability - Office Sustained Engineering - Site Home - TechNet Blogs:
http://blogs.technet.com/b/office_sustained_engineering/archive/2011/10/25/office-2007-and-sharepoint-2007-service-pack-3-availability.aspx

Starting today you'll see these in Microsoft update but the box is not prechecked.  But to say they are only on the download site.. isn't quite right.

The first time I took this exam I flunked it.  Seriously.  Got an email that my SBSC expired on October 15th.  There's like three things that you have to keep track of - expiration of Action pack, expiration of Microsoft partner membership and finally SBSC.

So this is that marketing assessment where as you take it (and get the wrong answers) you are told what the right ones are.  Even drinking an entire gallon of Koolaid ahead of time will not put enough koolaid into your system to pass it.

Bottom line, I'm not sure which made me feel more dirty today.... jailbreaking an iphone to get a mute button app on a iPhone 3, or taking this marketing assessment and trying to guess at times what answers they wanted.  The trick to pass it is to take it once, know that if you are honest consultant you WILL flunk it and then go right back in immediately and take it the second time.  Given that the exam tells you after each submit button if you got the question right or not, the second time around you can answer it the Microsoft Koolaid way.

Now on the train home from the Sacramento IT pro group (see photos posted up on www.facebook.com/smbmvptour ) and here's the answer to a couple of questions that came up...

Can you put Quickbooks on MultiPoint?

Answer:  Yes.  Officially speaking the party line of Intuit is that they will support Quickbooks Enterprise in a terminal server environment.  But here's the reality of the real world.  Quickbooks Pro (non enterprise) works just fine in a TS environment. I'd recommend that you use the CUTEPDF writer instead of Intuit's native pdf printer, but it-does-work. 

Can you put Lacerte and Lacerte's DMS on MultiPoint?

Answer:  Yes.  Both Lacerte tax program and DMS are supported in a terminal server environment.  http://www.cpapracticeadvisor.com/article/10263177/intuit-mdash-lacerte-tax-software?page=2
Although it is normally installed locally, Lacerte can be used in a Citrix/Terminal Server environment, if the firm has access to the IT expertise to set it up, providing remote offices or staff with access to the system

Bottom line MultiPoint is a terminal server box.  It it will work on TS, it will work on MultiPoint.

Just added an item to the MultiPoint wiki

http://social.technet.microsoft.com/wiki/contents/articles/windows-multipoint-server-build-document.aspx

Needed hotfixes
The SBS blog has posted regarding a needed hotfix that ensure that RDP connections will not be dropped.
http://blogs.technet.com/b/sbs/archive/2011/10/21/your-remote-desktop-connection-to-a-windows-multipoint-server-2011-or-a-windows-server-2008-r2-server-may-disconnect-on-a-regular-basis.aspx
While this will be included in an upcoming service pack for Windows, I'd urge you to get it installed.  It has been tested by various community members and the Multipoint team and is safe to install.

I meant to blog this yesterday but I was busy with my MiniCooper group last night.  This morning I'm eating a bagel and creme cheese with tea on an Amtrak heading towards Sacramento and the next stop on the SMBMVPtour (see www.smbmvptour.com ) . 

By now hopefully you've already read these two blog posts on the SBSblog (http://blogs.technet.com/sbs ) I'm about to blog about, but if you haven't, go do so now....

Read them?  Okay now I'll flesh them out a bit more.  This first one is about how there's now an update for the migration tool.  You know how I jump up and down and tell you guys never ever ever ever say yes to updates during the install because not only does it add time to your migration, but it adds potential for change and patches and this is the time you want to limit change and patching?  Okay so there's one time of the migration process I DO want you to install updates and it's right here at this point of the migration tool.  When you install the tool on your sbs 2003 there's a box there to say yes to go check for updates.  PLEASE PLEASE PLEASE get updates on this ONE spot.  Because they've added new rules to ensure that Exchange won't barf as much. 

http://blogs.technet.com/b/sbs/archive/2011/10/20/an-update-for-the-windows-small-business-server-2011-standard-migration-preparation-tool-is-available.aspx

Why does Exchange barf? 

Rule 2

This update adds the following rule to check whether the Allow inheritable permissions option is enabled for the mailbox store and for the public folder in Active Directory:

I've seen quite a few Exchange barfages due to this one issue. 

When Exchange barfs while one can manually install, end up with an eval version of Exchange and then find the kb to make it not eval, I'm still more comfy in telling folks to do a system state restore on the sbs 2003 and start the migration process over. 

Also be aware of a known issue you might hit Sub Rule 5 from the update (KB 2578426) if your _MSDCS zone is not a forward lookup zone delegated from your primary domain zone as documented in the blog:

http://blogs.technet.com/b/sbs/archive/2011/10/20/an-update-for-the-windows-small-business-server-2011-standard-migration-preparation-tool-is-available.aspx

Bottom line, you want updates right here at this one spot.

Windows SharePoint Services 3.0 Service Pack 3 (KB2526305)

Locale: All
Deployment: Windows Update, Microsoft Update, Important/Automatic Updates, WSUS, and Catalog
Classification: Service Packs
Supersedes:

• KB2553018 on Windows Server 2008 R2, Windows Server 2008, and Windows Server 2003
• MS11-074 (KB2493987) on Windows Server 2008 R2, Windows Server 2008, and Windows Server 2003

Target platforms: Windows Server 2008 R2, Windows Server 2008, and Windows Server 2003
Approximate file sizes:

• Windows SharePoint Services 3.0 Service Pack 3 x64 Edition update: ~ 32464KB
• Windows SharePoint Services 3.0 Service Pack 3 update:~28504KB

Description:
Windows SharePoint Services 3.0 Service Pack 3 (KB2526305) provides the latest updates to Windows SharePoint Services 3.0. After you install this item, you may have to restart your computer. After you have installed this item, it cannot be removed.

Description of Software Update Services and Windows Server Update Services changes in content for 2011:
http://support.microsoft.com/kb/894199


Out next Tuesday - Service pack 3 for Companyweb on SBS 2008.
http://support.microsoft.com/kb/894199


</soapbox on>

It's a service pack.  Not mandatory.  It should do a psconfig automatically.  Remember it's the older version that tries to do the psconfig.  Should being operative here.  It may fail on some boxes.

Bottom line just because Microsoft puts it out on the "other" patch Tuesday, just because it's installed nicely for them, just because ... doesn't mean you need to install it, nor will it be bulletproof.

To me that's still the price I pay for on premise.  I control when it gets installed.

</soapbox off>

"Adoption would probably be even stronger, presenter Jeff Middleton stated, if more SMBs were open to replacing their ancient implementations of SBS 2003. "Damn thing sticks like it's glued to the floor," said Middleton, who operates SBSmigration.com, a Web site offering advice and tools for performing SBS upgrades."

http://rcpmag.com/articles/2011/11/01/cloud-busters.aspx

:-)  I thought that a funny line as well.

So the question that many have had regarding SBS Essentials is looking for a way to disable the launchpad being launched on the workstations.  While one can go workstation to workstation they were looking for something a bit more group policyish.

Thread Title Disable Lauchpad
Started by: Chris Cote

Reply:

We have a GPO that stops launchpad from starting up, however since the launchpad is needed to push out any SBSe updates, use this at your own risk. That being said, after disabling this GPO and after a restart of a client computer, the launchpad starts up again.

The GPO is configured to delete "Launchpad" from "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\" in the registry.

Launch group policy management and build a new group policy object

Now right mouse click and edit it.

And go into the User Configuation, Preferences, Registry

Choose the option to delete

And I think putting that in should do the trick.

Twice now there's been bugs in Outlook that flips things over to a ndr and you'll see IMCEAMAILTO in the subject line.

http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/56b2d50d-6855-444b-abed-89aaa9176a9f/

It happened in Outlook 2007 and then people saw it again in Outlook 2010.

And it was only AFTER opening up cases that it was able to be repro'd.  The trigger is Office 2001 sp1.

==================================

Another user, RKeith - MSFT, has replied to a thread you have subscribed to in the Admin Forum.

Thread Title IMCEAMAILTO issue causing "Delivery has failed ...".
Started by: Jexx

Reply:

http://support.microsoft.com/kb/2625547 ) is the correct article to watch for the earliest notice of the release of the hotfix.

The hotfix for this issue is currently in testing, and will be a part of the Decemer 2011 Cumulative Update.  The article Dirk referenced (

Additional workarounds, while limited in their user friendliness are...

• Right click on the address, and choose copy shortcut
• Highlight the address, and copy/paste it into a new e-mail window manually

http://social.microsoft.com/Forums/en-US/partnerwinserversbs/thread/055c553d-f703-4b17-9d6e-29bb0a143de6

[<SBS 2011 Reports Are No Longer Being Sent>: SUMMARY]

Situation:

=================

Server: SBS2011

Problem:

=================

System will not generate report and will not send out the report automatically.

Analysis:

=================

Based on our troubleshooting, the problem is related with the following settings:

1. Current logon account on the SBS server must be a network administrator on the server. If not, the report cannot be send out automatically

2. Only one NIC is supported on the server. In our case, there are two NICs on the server. So, the server has two IP addresses in the network.

Solution:

=================

The second IP address of the SBS serve causing the confusion when it try to send out the report. It cannot contact the server correct due to the second IP address.

To resolve this problem, we need to remove the second NIC and verify the IP settings on the server.

Status:

=================

Resolved