THE OFFICIAL BLOG OF THE SBS DIVA

http://support.microsoft.com/KB/2592687

I've been uninstalling KB2592687 as I've found it doesn't let the RDP connection to remember which ones have rdgateway settings and which ones do not.

To remove it, go into programs and features, then into "installed updates".  Then scroll down in the Windows section and find KB2592687.  Click on it and it will ask you if you want to remove the update.  Approve it and it will uninstall and then prompt for a reboot.

Helping out with a friend's Home server that had been failing.  We googled on that error and found this blog post:

http://dedyukh.in/index.php/windows-server-client-computer-backup

"To fix it you have just to delete the Commit.dat file from Client Computer Backups folder and restart the service."

I then started the Windows Server client backup service that had been stopped on the server.  And then the client backups started up again.

Next project at the office.  Thin client deployment/testbed for MultiPoint 2011

These are the HP thin client units that support up to four monitors - note the pigtail ready video card, the onboard hdmi and the funky HP (built in a Foxcon plant in China) adapter things (I forget what they are called)

This particular unit is the onboard wireless one.  And I had to pull out this little serial card on the back and read the part numbers to figure out that this one has the wireless on it. We bought one with wireless support and the rest with wired support. 

http://h10010.www1.hp.com/wwpc/us/en/sm/WF06b/12454-12454-321959-338927-3640406-5226823-5226824-5302897.html?dnr=1

Why MultiPoint 2011?  Because some of my apps don't support Windows 8/Server 2012 yet.  So 2011 MultiPoint will be the base.

On a Facebook post the question was asked...if the RSB (Really Small Businesses) have to go to Office 365 plan E3, why should they buy a (OEM) server with WS2012 Ess??? Just for back-up/imaging of their workstation(s)??

I thought I'd post the response here too ...

Remote Web access on the box to allow for easy access back to the desktops. Direct Access wizard that allows you to set up DA even for really small offices. And yes, I really love my Backup box by gramps (it's the same backup engine) as it makes changing out harddrives to SSDs a snap and ensuring that I can recover workstations to exaclty what they were. Also without Essentials you don't have password sync ability in a RSB. Essentials has glue to allow for easy password sync that you cannot do without multiple servers and two DCs. 

Essentials is not just about backups.  And it's certainly not all about Exchange.  If you see it as cheap email, there's a lot of things you need to have bulletproof email that it doesn't have.  For example to really have bulletproof email you need to add some sort of backup mx service or mail hygiene. 

http://www.facebook.com/#!/notes/windows-small-business-server/merry-christmas-oems-start-to-offer-windows-server-2012-essentials-now/10151564361360898?comment_id=29540834&notif_t=note_reply

But to everyone out there in cyberland who is asking Microsoft to bring back SBS.  Folks, Santa is not bringing it back. 

After getting a bluray player that had Netflix on it, we were setting it up last night...

Yeah... that last night http://gigaom.com/cloud/christmas-eve-aws-outage-stings-netflix-but-not-amazon-prime/

Who knew one needs to include reviewing twitter accounts in the support process.

either SBS 2011, SBS 2008 or SBS 2003?  While it's fully supported to run connect with SBS 2008 and 2011 with the latest updates, I personally think you will be a lot happier if you just set it up manually.  Go to the control panel, system and maually join the pc to the domain. 

Everything BUT the migration profile will be done with group policy.  Given that it's a brand new pc you probably don't have a profile to worry about migrating.

SBS 2008 in particular - even for Windows 7 machines - will look to install .net 2.  Make your life easier on the "standard" platform these days and with the newer OS's just manually join them.

http://blogs.technet.com/b/sbs/archive/2012/12/13/connecting-windows-8-to-small-business-server-2011-standard-after-the-installation-of-the-latest-update-rollup-3.aspx

I need help on voting up a bug - THE OFFICIAL BLOG OF THE SBS DIVA:
http://msmvps.com/blogs/bradley/archive/2012/12/22/i-need-help-on-voting-up-a-bug.aspx#1821497

Send an email to kbeares@microsoft.com indicating your business case for the reason you need to add multiple backup locations without having to pull all of the backup locations back on the box.

MPECS Inc. Blog: SBS 2011 Backup Error: Add Destination Drive Failure – Cannot Configure Backup Schedule:
http://blog.mpecsinc.ca/2011/06/sbs-2011-backup-error-add-destination.html

If you want a rotating backup in SBS 2011 and even Windows 2012 Essentials you have one slightly large problem.  There's what I consider to be a bug in the process.  A big bug.  But it's a bug that Microsoft doesn't see as a bug.

Error message when you try to add an additional disk to a scheduled backup: "The filename, directory name, or volume label syntax is incorrect":
http://support.microsoft.com/kb/2009365?ppud=4&wa=wsignin1.0

The "bug" resides in the fact that if you want add another usb backup location to your offsite rotation, the only way you can do so is to bring ALL of the drive locations back so that the system sees all of them at the same time and then and only then can you add an additional drive location.  If you don't have all the drives, the wizard won't let you add a new drive to the disk rotation but you'll have to set the backups all over again.  Which kinda defeats the idea behind father/grandfather backup rotations.

Here's a current manifestation of the "bug"

Cannot add additional backup drives to existing schedule | Microsoft Connect:
https://connect.microsoft.com/WindowsServer/feedback/details/775013/cannot-add-additional-backup-drives-to-existing-schedule

"It is not possible to add additional backup destinations to a backup schedule unless ALL the drives are plugged into the server.

This means if you have more backup drives that can be plugged in at once (i.e. more USB disks than USB ports) the drives cannot be added to the schedule.

Also if a new drive needs adding to the schedule then ALL drives must be brought back on site and plugged in. This is an issue as it means there is no "off site" backup.

I have a support case SR112122010094252 open for this issue.

I have uploaded a text file with PowerShell output showing the issue and a Procmon log showing the issue - VDS cannot find the path it is looking for."

"Create backup schedule to one USB drive. Re run the wizard to add a destination. Choose a drive. This fails with a path not found error.

This can be reproduced on all Server 2012 editions using GUI and PowerShell"

More on this thread here.

Has wbadmin changed since 2011 Essentials?:
http://social.technet.microsoft.com/Forums/en-US/winserveressentials/thread/8c16b6c7-85d2-4522-9ea3-9c71f4e78fef/

Help me out by voting up that bug please.  We shouldn't have to bring all the usb attached backup locations to add another backup to the rotation.

So Nick built a survey that I'd like to see more than just 6 responses to...

Most of the users we support are local admins on their PCs and I know this isn't the greatest, but it's what our users want. I've created a quick 1 question survey to see if people in the communities I'm in are the same:
http://www.opensurveys.org/takesurvey.php?SID=610

If you know this isn't the greatest... and you know... you don't have to be an admin on your desktop all the time.  You can still give a person admin password in order to install things but just not have them RUN as an admin all the time.  If they were running Macs they wouldn't so why do they want this on Windows?  On Win7 is no big deal to run as a non admin these days.

So this is going to be new MultiPoint server at the office...

HP ProLiant ML310e G8 4U Micro Tower Server - 1 x Intel Xeon E3-1240V2 3.4GHz - 1 Processor Support - 8 GB Standard/32 GB
Maximum RAM - DVD-Writer - 6Gb/s SAS RAID Supported Controller - Gigabit Ethernet

Four HP 300 Gig SAS 10,000 RPM drives

32 gigs of RAM

And yes I'll be making it on a HyperV Base.

http://h10010.www1.hp.com/wwpc/us/en/sm/WF05a/15351-15351-241434-241646-241477-5249594.html?dnr=1

Hanging off of that will be several http://h10010.www1.hp.com/wwpc/us/en/sm/WF06b/12454-12454-321959-338927-3640406-5226823-5226824-5302897.html?dnr=1 Thin client stations.

Expanded Software Assurance (SA) grant for Windows SBS 2011 Standard - The Windows Server Essentials and Small Business Server Blog - Site Home - TechNet Blogs:
http://blogs.technet.com/b/sbs/archive/2012/12/20/expanded-software-assurance-sa-grant-for-windows-sbs-2011-standard.aspx

Software Assurance is one of those things where sometimes you just have to believe...  and Christmas came early this year for those with Software Assurance

Microsoft doesn't rerelease updates often, this is one of those times

Today Microsoft rereleased update KB2753842 to resolve an issue with OpenType fonts not properly rendering after the original update was installed.
All customers to install the rereleased update, even those who have successfully installed the original KB2753842 update.

More Information:

MS12-078 - Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2783534) - http://technet.microsoft.com/en-us/security/bulletin/MS12-078  
KB2753842 - MS12-078: Description of the security update for the Windows OpenType Compact Font Format (CFF) driver - http://support.microsoft.com/kb/2753842  

http://social.technet.microsoft.com/Forums/en-US/smallbusinessserver/thread/76cfdd73-dace-4984-8896-fdaed0dcf818/

Another user, c_h_u_c_k_o, has replied to a thread you have subscribed to in the Small Business Server Forum.

Thread Title Do not install 2506143 (optional WMF 3.0 patch) on your SBS 2011
Started by: Susan Bradley

Reply:

Unfortunately, uninstalling it apparently brings forth another problem - it deletes a registry key that causes problems and errors with your event logs.

Here is the key that is deleted:  

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\ForwardedEvents

I had to export the key from another system and install it into the registry of the affected SBS2011 box to restore the ability to view the event logs without error.

Who knows what else it breaks. 

This update should be pulled.  NOW!

I can repro his reporting of the issue.

And as of around 5 p.m this evening:

http://marc.info/?l=patchmanagement&m=135588298213669&w=2

Thanks to each of you who reported this issue and helped identify the affec=
ted cases.

As a result of these regressions and feedback from customers and experts li=
ke you, we have expired the WMF 3.0 Update for all platforms (Windows 7, Se=
rver 2008, and Server 2008 R2) as of 5:07 pm PDT.

2506143 Windows Management Framework 3.0 for Windows 7 (KB2506143)
Windows Management Framework 3.0 for Windows 7 for x64-based System=
s (KB2506143)
Windows Management Framework 3.0 for Windows Server 2008 R2 for x64=
-based Systems (KB2506143)

2506146 Windows Management Framework 3.0 for Windows Server 2008 (KB2506146=
)
Windows Management Framework 3.0 for Windows Server 2008 for x64-ba=
sed Systems (KB2506146)

We're engaged in an internal post-mortem to identify and resolve the issues=
that led to these updates being released that resulted in the regressions.

We work hard to ensure updates always release with an exceptionally high qu=
ality bar. That bar was not met for these updates and we're working to ens=
ure we can prevent this from happening again. Thank you for your feedback =
through this and other channels - and please keep providing helpful feedbac=
k so we can continue to improve.


doug neal
Microsoft Update (MU)

The wordpress side of the blog is being rebuilt - again - due to having found a lovely file that allows for GUI access to the server.  wp-xml.php

http://blog.hacktalk.net/wso-2-5-shell-released/

Now digging into the root cause and testing/code auditing the rest of the wordpress install.

I don't claim to be an expert in securing wordpress sites by any means, and will certainly be looking to hire someone to do a through review, but trying to keep that site secure is a near full time job some days.

For a day or two last week, an optional root certificate update was up on Microsoft update.  If you happened to install it on your server 2008r2 you may be seeing some side effects:

Root Certificates Optional Windows Update December 2012 - KB931125 triggers Event ID 36885 - SCHANNEL:
http://social.technet.microsoft.com/Forums/en-US/winserveressentials/thread/2636b892-7113-4692-a4f4-53d330ca6062

What doesn't make sense to me is that normally we all get this root certificate.  It's normally a silent behind the scenes update on Vista and later platforms.  So it honestly doesn't make any sense to me that this 'extra' patch that shouldn't have been a manual patch would be causing this side effect.

Regardless if you've been impacted, check out that thread.

And there they are...

http://msmvps.com/blogs/bradley/archive/2012/12/14/a-bit-off-topic-an-old-chocolate-chip-cookie-recipe.aspx

Definitely the shortening makes them stand up and not smoosh out.  In case you are wondering that's a "silpat" a silicone baking liner that keeps the items from sticking to the pan.

Dug this out of the family recipe archives

Chocolate Chip Cookies

2 and 1/4 cups flour
1 teaspoon soda (baking soda)
1 teaspoon salt
Sift together and set aside

Cream together (mix in the Kitchenaid mixer)
1/2 cup butter
1/2 cup shortening (softened - have at room temperature)
3/4 cup sugar
3/4 cup brown sugar (packed)

In a cup place
1/2 teaspoon water
1 teaspoon Vanilla
2 beaten eggs

Add to creamed sugar and shortening mixture

Add the flour to the creamed sugar/egg/vanilla mixture.

Add a large bag of chocolate chips and mix in well at the last.

Place dough in container overnight in refridgerator.  Bake in 375 degree oven

The timing of the baking is not specified in the old recipe... but normally about 12 to 15 minutes is my guess?  Dough made tonight, cookies will be baked tomorrow.

 edited note:  these have "Crisco" added in addition to the butter.  This makes them more chewy and "puffy" than normal Chocolate Chip Cookies.

Office retail licenses could... up until 2013 ... be moved from computer to computer.

Apparently...not any more.  Check out the 2013 retail EULA:

Office 2013 Software License Agreement - Office Watch:
http://news.office-watch.com/t/n.aspx?a=1782
Under our license we grant you the right to install and run that one
copy on one computer (the licensed computer) for use by one person at a
time, but only if you comply with all the terms of this agreement. Our
software license is permanently assigned to the licensed computer
You may not transfer the software to another computer or user.

Windows Management Framework 3.0 on Exchange 2007 and Exchange 2010 - Exchange Team Blog - Site Home - TechNet Blogs:
http://blogs.technet.com/b/exchange/archive/2012/12/14/windows-management-framework-3-0-on-exchange-2007-and-exchange-2010.aspx

Windows Management Framework 3.0 / PowerShell 3.0 and Exchange - Michael's meanderings...:
http://theessentialexchange.com/blogs/michael/archive/2012/12/13/windows-management-framework-3-0-powershell-3-0-and-exchange.aspx

While you are at it, don't install WMF 3.0 on SBS 2008 either.

Windows Management Framework 3.0 for Windows Server 2008 (KB2506146)

Locale: All
Deployment: Optional/Automatic Updates, WSUS, and Catalog
Classification: Updates, Non-Security
Target platforms: Windows Server 2008
Approximate file sizes:

• Windows Management Framework 3.0 for Windows Server 2008 update: ~ 10778KB
• Windows Management Framework 3.0 for Windows Server 2008 for x64-based Systems update: ~ 14804KB

Description:
Windows Management Framework 3.0 provides updated management functionality for Windows Server 2008. Windows Management Framework 3.0 includes Windows PowerShell 3.0, WMI, and WinRM 3.0, along with other management features.