THE OFFICIAL BLOG OF THE SBS DIVA

So you are joining a workstation to a SBS 2011 standard  and connect isn't working?  Just like Essentials, check out the log files

But unlike Essentials they are in a different location:

They are located at C:\Program Files (x86)\Microsoft Windows Small Business Server\Clients

But also unlike Essentials , you can manually join the clients to the domain http://msmvps.com/blogs/bradley/archive/2005/01/23/33632.aspx  The ONLY think you lose if you don't use connect is the move profile wizard.  If that's not a biggie or you have other ways to move the profile data, manually joining the domain is an acceptable alternative. 

Sweet peas blooming this morning

Foxgloves also in bloom in the front flower beds

Listening to a bit of UK Gardening radio shows while in the office this afternoon.

While we may have rain (we need it!) tomorrow, today we're hitting 83 degrees today!  Ack it's too warm for spring!

Happy Spring and Happy Easter to all.

Issue with Automatic Updates Enabled & Office Web Apps Server 2013 Update - Doug Deitterick's Blog - Site Home - TechNet Blogs:
http://blogs.technet.com/b/dodeitte/archive/2013/03/29/issue-with-automatic-updates-enabled-amp-office-web-apps-server-2013-update.aspx

Example of why we don't want a SBS like thing ever built again.

Or

Example of why Microsoft cannot build Server products that can automatically update.

Pick one.

Windows 8 Calendar App and the Great Google Flip-Flop | Windows 8 content from Paul Thurrott's SuperSite for Windows:
http://winsupersite.com/windows-8/windows-8-calendar-app-and-great-google-flip-flop

"That said, Microsoft could have done a better job of communicating this change. The official blog post announcing the updated communications apps doesn’t mention this issue at all."

What he said.

I realize that these Win8 store apps are not normal "patches" but I'm not a fan of this new era of no details of Windows 8 updates.  And I'm really not a fan of promising one thing and ending up doing another.

Not good Microsoft, not good.

Since the wiki site is barfing tonight... I'm trying to add this to the PCI DSS document on the wiki and it will also be in the SMB Kitchen doc on PCI DSS

Server flagged as failing IIS BEAST vulnerability

Solution courtesy of Bob Groger on the SBS2k listserve:
Client used Trustwave for their PCI DSS scans and they kept failing for BEAST vulnerability. I did all the registry edits, rearranged cipher orders, rescanned for hours. It either failed, or RWW didn't work. Finally I found the tool at
https://www.nartac.com/Products/IISCrypto/Default.aspx and followed the instructions athttp://www.amixa.com/blog/2012/12/22/how-to-get-iis-7-5-web-server-to-pass-the-beast-pci-vulnerability-compliance-scans/

That error code should read "yo Susan, ya blogged about it enough, you'd think you'd remember to install it on your network"

Deploy Windows 2012 as a hyperV member server and join it to a domain where WSUS is deployed.  If you haven't installed An update for Windows Server Update Services 3.0 Service Pack 2 is available (KB2734608):
http://support.microsoft.com/kb/2734608  you will hit an issue (not right away mind you) where you'll see 

Windows could not search for new updates

Error(s) found:

Code 800B0001 Windows update ran into a problem

And because it can't go to WU the help file tells you nothing. 

But googling or remember that you haven't installed that WSUS update yet because you said to yourself "I don't have Windows 8 machines, why do I need that update..."

Duh, I DO have Server 2012 though.

File this under dumb moves

http://ccolonbackslash.com/2012/09/13/code-800b0001-windows-update-ran-into-a-problem-on-windows-8-and-2012-when-using-wsus-or-wsus-with-sccm/
 

http://partnersupport.microsoft.com/en-us/mpnpartnermem/forum/mpnpartpq-mpnpmcless/cloud-essentialsaccelerate-top-ten-faqs/ce4738b0-68ae-41b5-abcd-e57a999c1a25

Hello Partners,

In an effort to clarify many Cloud program questions, I want to share with you the top ten frequently asked questions.

How do I resell Cloud Services to my client?

To learn more about becoming a Microsoft Cloud Services Partner, please see our enrollment information athttps://mspartner.microsoft.com/en/us/Pages/Solutions/Microsoft-online-services-partner-enrollment.aspx.

Where do I obtain my benefits for being a Cloud Partner?

Instructions and information about the benefits you are entitled to can be located by navigating tohttps://www.microsoftcloudpartner.com and selecting the appropriate product. Note: You must be a Global Administrator or higher within the Microsoft Partner Network and have the Microsoft Online Services Partner Agreement signed to access these benefits.

What are the requirements to join Cloud Essentials?

You are now automatically enrolled into Cloud Essentials when you sign the Microsoft Online Services Partner Agreement within the Partner Program portal.

How do I obtain charity pricing for my non-profit/charity clients?

Please contact your local Regional Service Center to open a request for charity pricing. Please be ready to provide the following information:

Non-profit Organization Name

Organization Address

If within the United States, provide EIN (Employer Identification Number): XX-XXXXXXX

If within the United Kingdom or Canada, provide Registered Charity number

If in any country other than those above, provide company website.

Office 365 plan requested (E2 or E3)

Number of seats

How do I purchase additional subscriptions on an Office 365 account?

Additional subscriptions can be purchased directly from the Microsoft Online Portal using a Company Administrator account.

Can I switch to a different subscription?

As long as you do not have a Small Business Plan 1 (or P1) account, you can mix and match different subscriptions within the same tenant. This is done by purchasing subscriptions through the Microsoft Online Portal and contacting your local Regional Service Center to cancel any unused subscriptions and re-assigning the appropriate license.

My client needs more time to trial the subscription; can I get a trial extension?

To request a trial extension, please contact your local Regional Service Center.

How much do charities or non-profits pay for an Office 365 subscription?

At this time we cannot provide the prices to these types of subscriptions. To obtain pricing, please contact your local Regional Service Center using the information found on question 4 above.

I’m having a problem with my subscription, the billing of a subscription, or I need to cancel my subscription.

If you, as the Partner, are encountering issues with your subscription or your client’s subscription, please contact your local Regional Service Center.

How do I add my Partner of Record to a client using an Enterprise Agreement?

Please fill out the latest form found at https://mspartner.microsoft.com/en/us/Pages/Solutions/Downloads/online-services-advisor-attach-form-english.aspx and submit it to your local Regional Service Center.

I hope the above information can be of great use to everyone.

Best regards,

Joe

Partner Support Community

---------------------------------------------------------------------------------

We hope you get value from our new forums platform! Tell us what you think:

http://partnersupport.microsoft.com/en-US/mpnfeedback/forum

----------------------------------------------------------------------------------

http://technet.microsoft.com/en-us/library/jj204618.aspx

If you are following this direct access document.  Instead of this command:

Set-NetNatTransitionConfiguration –IPv4AddressPortPool @("192.168.1.100, 10000-46499","192.168.1.100, 46499-47000" )

You want this command instead:

Set-NetNatTransitionConfiguration --IPv4AddressPortPool @("192.168.1.102, 6001-6601", "192.168.1.102, 6603-47000")

(Of course change the IP range to be your network range as needed)

The issue is port 6602 is grabbed by the server for Windows Server solutions stuff and upon reboot DA can grab that port.

Documentation connect bug has been raised, so hopefully the next time you need this the command will ensure that 6602 is kept clear.

So you have an Essentials 2012 and want to migrate from Windows Server 2003 and can't?

You'll want to check out this workaround....

Server migration tool problem:
http://social.technet.microsoft.com/Forums/en-US/winserveressentials/thread/a8781760-5c99-4db6-a130-1a4930675eb9
I'm trying to migrate a Windows 2003 SP2 (R1) to Server 2012 Essentials. It won't allow migration until the Server Migration Tool is run on the old server. However, it stops at the beginning of the process with an error that the DFS Replication service is not running. But as far as I know, the DFS Replication service did not exist until Server 2003 R2. How can I get around this?

Resolution


1. Open SBSMigrationPrep.ps1 located in C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Baseline Configuration Analyzer

2\Models\SBSMigrationPrep in Notepad.
Find "DFSR"
3. We will get the function as shown bellow
function Check-DFSReplicationServiceStatus()
{
$service = Get-Service -Name 'DFSR'
$status = $service.Status
@"
< DFSReplicationServiceStatusSection>
<DFSReplicationServiceStatus>$status</DFSReplicationServiceStatus>
< /DFSReplicationServiceStatusSection>
"@
}

4. Change the contents of "$service = Get-Service -Name 'DFSR'" to $service = Get-Service -Name 'DFS'

Once we have done this re-run the Migration and Preparation Tool

John Harris, Longtime SBSer, Passes… - SMB Nation Blogs:
http://www.smbnation.com/content/news/entry/john-harris-longtime-sbser-passes

If you ever deployed SBS 2003 you probably got touched by John Harris.  As Microsoft wanted to get up close and personal with interaction with small businesses, he was located near the area where SBS 2003 was developed. So he was one of the fearless TAP partners who let Microsoft developers loose on their clients.

(from SBS Unleashed book)

All of us who ever used the Small Business platform benefitted from his generousity and volunteerism over the years.

My condolences to his family and friends and anyone else impacted by this loss.

http://www.thirdtier.net/2013/03/join-us-for-a-chat-with-the-smbkitchen-crew/

For those that are subscribers you can ask about the content as well as topics coming up as well as please use this opportunity to ask for topics you want to see covered. 

For those that aren't subscribers you can ask about what this funky smb kitchen thing is all about.

Bottom line it's a chance for you to help build a guide of documentation that YOU want for your upcoming SMB projects.

Office 365 Integration Service reports do not run after you install Update Rollup 1 for Windows Server 2012 Essentials:
http://support.microsoft.com/kb/2828257/en-us?sd=rss&spid=16526

Install Update Rollup 2781267 if you transition from Windows Server 2012 Essentials to Windows Server 2012 Standard:
http://support.microsoft.com/kb/2828232/en-us?sd=rss&spid=16526

If you transitioned out of Essentials, right now the update rollup won't be offered up.  If you want it now, you can manually download it.

Detection will be fixed, but I'm not sure when.

As a fan of RSS feeds myself seeing Google reader get killed off means that I'm sweating bullets for the RSSable stuff as a whole.

Google Reader joins graveyard of dead Google products - Slate Magazine:
http://www.slate.com/articles/technology/map_of_the_week/2013/03/google_reader_joins_graveyard_of_dead_google_products.single.html

I use RSS feeds to stay informed  and to keep up with changes and I hope this is not a bellweather event for RSS feeds as a whole.

KB 2828269 - Running SFC (System File Checker) command may corrupt web configuration file
http://support.microsoft.com/kb/2828269

Bottom line, don't run sfc /scannow on an Essentials 2012 system.

One of the things I wrote up in the SMBKitchen patching tips is the reason KB2807986 is unchecked...Microsoft is throttling the update for some unknown reason...

Known issues with this security update

• In certain automated update deployment scenarios (such as from Windows Update or Microsoft Update), this update may not always install. This would also cause other pending updates not to install. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:
  2552343

  (http://support.microsoft.com/kb/2552343/ )

  Time-out error occurs when you install a Windows Update package that contains drivers on a computer that is running Windows 7 or Windows Server 2008 R2
  This issue can occur with any windows update package that contains drivers on systems that do not have the critical non-sec GDR update 2552343 installed.
  
  We recommend that you install update 2552343 before you deploy this security update

Great but http://support.microsoft.com/default.aspx?scid=kb;en-us;2552343 only is offered up from the Windows update site and I already have this on my computer... so why is the update unchecked?

If you are a SMBKitchen subscriber from Thirdtier

https://www.thirdtier.net/helpdesk/staff/index.php?/Core/Dashboard/Index#u=/Knowledgebase/ViewKnowledgebase/Article/42/0

Patching tips for March patch Tuesday. What to patch on which devices, which ones to skip for now.

I'll be updating it as I see issues.

https://www.thirdtier.net/helpdesk/staff/index.php?/Core/Dashboard/Index#u=/Knowledgebase/ViewKnowledgebase/Article/43/0

And a special how to for that optional Windows 7 update to import into WSUS and to get it on your workstations.

http://blogs.laweekly.com/squidink/2013/02/mountain_dew_breakfast_drink.php

Do I even need to say anything?

Reader Keith Templin shares this handy tip about remote tools and HP ilos....

He says....

I found a undocumented (well maybe severely under documented) way to mount a ISO over http.  I have documented these on my blog:  http://torxsmind.blogspot.com/search/label/iLO

Now all I have to do is make the ISO available on any IIS server on the same network, and connect over gigabit speeds.  The days of a Java applet timing out is over!

Enjoy.

If you are insane enough to do this tomorrow:

Microsoft Security Bulletin MS13-024 - Critical : Vulnerabilities in
SharePoint Could Allow Elevation of Privilege (2780176):
http://technet.microsoft.com/en-us/security/bulletin/ms13-024

Don't forget to do this:

You Must Manually Run PSCONFIG after Installing SharePoint 2010 Patches
- The Windows Server Essentials and Small Business Server Blog - Site
Home - TechNet Blogs:
http://blogs.technet.com/b/sbs/archive/2011/05/24/you-must-manually-run-psconfig-after-installing-sharepoint-2010-patches.aspx

I'll be doing a full write up including all the known ways to get around a failed psconfig in the http://www.thirdtier.net/enterprise-solutions-for-small-business/ SMB kitchen content

AWS Just Made It A Whole Lot Easier For Anyone To Create A Virtual Private Cloud Showing Again How Enterprise Tech Is Obsolete | TechCrunch:
http://techcrunch.com/2013/03/11/aws-just-made-it-a-whole-lot-easier-for-anyone-to-create-a-virtual-private-cloud-showing-again-how-enterprise-tech-is-obsolete/

The enterprise market has shifted in the past 12 to 18 months as CIOs have come to accept cloud computing, said Scott Sandell, a general partner with NEA Ventures in a conversation here at SXSW. He said it means all enterprise technology in a data center is obsolete. AWS’ move points to the shift in the market and the higher value on services that leverage the cloud as opposed to significant investments in new and existing infrastructure.


====


If all enterprise technology in a data center is obsolete, isn't Amazon a data center too?  And should I trust a conversation between two geeks at a Texas party event?  But it is something interesting to look into regardless.  I still say that as long as I can get to it over an Internet connection it's not completely private but then again none of us truly have a private network these days do we?