THE OFFICIAL BLOG OF THE SBS DIVA

It's always interesting to see the intersection of technology and small business.

Take this box of fresh organic veggies for example.

Picked up at a local farmers market there's a lot more technology behind it than meets the eye.  First off unlike other vendors at the farmers' market this vendor indicated they took credit cards via Square (iphone use of technology).  In addition, I got this box as part of a CSA subscription.  CSA is community supported agriculture  http://www.localharvest.org/store/local.jsp?q=csa  Go to a web site, find a farmer in your area and you sign up for a monthly subscription of his or her products.  In this case, a month (or a year)'s worth of fresh vegetables from an organic farm near my city.

Pretty nifty, huh!  And pretty cool examples of how technology has impacted their business as well.

Look how much technology they've got at his disposal.  A nationwide listing.  A web site.  A means to do commerce in a phone.

http://www.amazon.com/Windows-Server-Hyper-V-Installation-Configuration/dp/1118486498/ref=sr_1_1?ie=UTF8&qid=1364971198&sr=8-1&keywords=hyperv+2012

More on HyperV replica in that book.  (the cloud Kindle app kinda mangles formatting sometimes, I bought the old fashioned non cloud paper version as well)

We’re moving the Backup Exec 2010 R3 SP3 and Backup Exec 2012 SP2 beta software availability date to May, 2013
Upcoming Beta Programs for Backup Exec | Symantec Connect Community:
http://www.symantec.com/connect/blogs/upcoming-beta-programs-backup-exec
Backup Exec 2012
Support for Exchange 2010 SP3 (pending final release from Microsoft)

So if you are considering moving to Exchange 2010 sp3 and use Backup Exec..... it's not officially supported yet!

I just bugged this in connect to fix an issue where the source tool doesn't scan a 2008r2 system that's been upgraded to 2008 schema.  If you get caught out by it, here's the workaround.

Kudos to Merv Porter for finding it:

Bug in the SBS 2011 Migration Preparation Tool, FRS & DFS | Competent Man:
http://jasonmnelson.com/2011/11/11/bug-in-the-sbs-2011-migration-preparation-tool-frs-dfs/

My service lead found a bug in Microsoft’s SBS migration tool yesterday. Here is his report on the issue. Great work Brendan!

I’m sort of proud to report that we’re responsible for
discovering a bug in the SBS 2011 Migration Preparation Tool – MS will work to
either write a rapid-response blog post outlining the issue and/or update the
tool to accommodate the issue… which is:

In a 2008R2 domain that’s had its functional level raised to
2008, FRS is deprecated in favor of DFS Replication. You cannot start the FRS
service at all. Unfortunately, the migration tool checks to make sure that the
FRS service is running – if it’s not, the tool fails.

MS worked with me on the source server to verify that the
schema version is at the right level, then made some registry edits on the
source server so that the SBS 2011 installation will proceed without saying,
“The migration prep tool hasn’t been run on the source server, blah blah blah…”

Kind of an interesting case to work on.

The things we checked for and/or edited were:

Edited HKLM\SOFTWARE\MICROSOFT\SMALL BUSINESS SERVER\MIGRATION\
ErrorsFound -> changed from 1 to 0
MigrationReady -> changed from 0 to 1

And…

Verified Schema version:
HKLM\SYSTEM\Current Control Set\Services\NTDS\Parameters
Schema Version left at 0x0000002f (47)

So you are joining a workstation to a SBS 2011 standard  and connect isn't working?  Just like Essentials, check out the log files

But unlike Essentials they are in a different location:

They are located at C:\Program Files (x86)\Microsoft Windows Small Business Server\Clients

But also unlike Essentials , you can manually join the clients to the domain http://msmvps.com/blogs/bradley/archive/2005/01/23/33632.aspx  The ONLY think you lose if you don't use connect is the move profile wizard.  If that's not a biggie or you have other ways to move the profile data, manually joining the domain is an acceptable alternative. 

Sweet peas blooming this morning

Foxgloves also in bloom in the front flower beds

Listening to a bit of UK Gardening radio shows while in the office this afternoon.

While we may have rain (we need it!) tomorrow, today we're hitting 83 degrees today!  Ack it's too warm for spring!

Happy Spring and Happy Easter to all.

Issue with Automatic Updates Enabled & Office Web Apps Server 2013 Update - Doug Deitterick's Blog - Site Home - TechNet Blogs:
http://blogs.technet.com/b/dodeitte/archive/2013/03/29/issue-with-automatic-updates-enabled-amp-office-web-apps-server-2013-update.aspx

Example of why we don't want a SBS like thing ever built again.

Or

Example of why Microsoft cannot build Server products that can automatically update.

Pick one.

Windows 8 Calendar App and the Great Google Flip-Flop | Windows 8 content from Paul Thurrott's SuperSite for Windows:
http://winsupersite.com/windows-8/windows-8-calendar-app-and-great-google-flip-flop

"That said, Microsoft could have done a better job of communicating this change. The official blog post announcing the updated communications apps doesn’t mention this issue at all."

What he said.

I realize that these Win8 store apps are not normal "patches" but I'm not a fan of this new era of no details of Windows 8 updates.  And I'm really not a fan of promising one thing and ending up doing another.

Not good Microsoft, not good.

Since the wiki site is barfing tonight... I'm trying to add this to the PCI DSS document on the wiki and it will also be in the SMB Kitchen doc on PCI DSS

Server flagged as failing IIS BEAST vulnerability

Solution courtesy of Bob Groger on the SBS2k listserve:
Client used Trustwave for their PCI DSS scans and they kept failing for BEAST vulnerability. I did all the registry edits, rearranged cipher orders, rescanned for hours. It either failed, or RWW didn't work. Finally I found the tool at
https://www.nartac.com/Products/IISCrypto/Default.aspx and followed the instructions athttp://www.amixa.com/blog/2012/12/22/how-to-get-iis-7-5-web-server-to-pass-the-beast-pci-vulnerability-compliance-scans/

That error code should read "yo Susan, ya blogged about it enough, you'd think you'd remember to install it on your network"

Deploy Windows 2012 as a hyperV member server and join it to a domain where WSUS is deployed.  If you haven't installed An update for Windows Server Update Services 3.0 Service Pack 2 is available (KB2734608):
http://support.microsoft.com/kb/2734608  you will hit an issue (not right away mind you) where you'll see 

Windows could not search for new updates

Error(s) found:

Code 800B0001 Windows update ran into a problem

And because it can't go to WU the help file tells you nothing. 

But googling or remember that you haven't installed that WSUS update yet because you said to yourself "I don't have Windows 8 machines, why do I need that update..."

Duh, I DO have Server 2012 though.

File this under dumb moves

http://ccolonbackslash.com/2012/09/13/code-800b0001-windows-update-ran-into-a-problem-on-windows-8-and-2012-when-using-wsus-or-wsus-with-sccm/
 

http://partnersupport.microsoft.com/en-us/mpnpartnermem/forum/mpnpartpq-mpnpmcless/cloud-essentialsaccelerate-top-ten-faqs/ce4738b0-68ae-41b5-abcd-e57a999c1a25

Hello Partners,

In an effort to clarify many Cloud program questions, I want to share with you the top ten frequently asked questions.

How do I resell Cloud Services to my client?

To learn more about becoming a Microsoft Cloud Services Partner, please see our enrollment information athttps://mspartner.microsoft.com/en/us/Pages/Solutions/Microsoft-online-services-partner-enrollment.aspx.

Where do I obtain my benefits for being a Cloud Partner?

Instructions and information about the benefits you are entitled to can be located by navigating tohttps://www.microsoftcloudpartner.com and selecting the appropriate product. Note: You must be a Global Administrator or higher within the Microsoft Partner Network and have the Microsoft Online Services Partner Agreement signed to access these benefits.

What are the requirements to join Cloud Essentials?

You are now automatically enrolled into Cloud Essentials when you sign the Microsoft Online Services Partner Agreement within the Partner Program portal.

How do I obtain charity pricing for my non-profit/charity clients?

Please contact your local Regional Service Center to open a request for charity pricing. Please be ready to provide the following information:

Non-profit Organization Name

Organization Address

If within the United States, provide EIN (Employer Identification Number): XX-XXXXXXX

If within the United Kingdom or Canada, provide Registered Charity number

If in any country other than those above, provide company website.

Office 365 plan requested (E2 or E3)

Number of seats

How do I purchase additional subscriptions on an Office 365 account?

Additional subscriptions can be purchased directly from the Microsoft Online Portal using a Company Administrator account.

Can I switch to a different subscription?

As long as you do not have a Small Business Plan 1 (or P1) account, you can mix and match different subscriptions within the same tenant. This is done by purchasing subscriptions through the Microsoft Online Portal and contacting your local Regional Service Center to cancel any unused subscriptions and re-assigning the appropriate license.

My client needs more time to trial the subscription; can I get a trial extension?

To request a trial extension, please contact your local Regional Service Center.

How much do charities or non-profits pay for an Office 365 subscription?

At this time we cannot provide the prices to these types of subscriptions. To obtain pricing, please contact your local Regional Service Center using the information found on question 4 above.

I’m having a problem with my subscription, the billing of a subscription, or I need to cancel my subscription.

If you, as the Partner, are encountering issues with your subscription or your client’s subscription, please contact your local Regional Service Center.

How do I add my Partner of Record to a client using an Enterprise Agreement?

Please fill out the latest form found at https://mspartner.microsoft.com/en/us/Pages/Solutions/Downloads/online-services-advisor-attach-form-english.aspx and submit it to your local Regional Service Center.

I hope the above information can be of great use to everyone.

Best regards,

Joe

Partner Support Community

---------------------------------------------------------------------------------

We hope you get value from our new forums platform! Tell us what you think:

http://partnersupport.microsoft.com/en-US/mpnfeedback/forum

----------------------------------------------------------------------------------

http://technet.microsoft.com/en-us/library/jj204618.aspx

If you are following this direct access document.  Instead of this command:

Set-NetNatTransitionConfiguration –IPv4AddressPortPool @("192.168.1.100, 10000-46499","192.168.1.100, 46499-47000" )

You want this command instead:

Set-NetNatTransitionConfiguration --IPv4AddressPortPool @("192.168.1.102, 6001-6601", "192.168.1.102, 6603-47000")

(Of course change the IP range to be your network range as needed)

The issue is port 6602 is grabbed by the server for Windows Server solutions stuff and upon reboot DA can grab that port.

Documentation connect bug has been raised, so hopefully the next time you need this the command will ensure that 6602 is kept clear.

So you have an Essentials 2012 and want to migrate from Windows Server 2003 and can't?

You'll want to check out this workaround....

Server migration tool problem:
http://social.technet.microsoft.com/Forums/en-US/winserveressentials/thread/a8781760-5c99-4db6-a130-1a4930675eb9
I'm trying to migrate a Windows 2003 SP2 (R1) to Server 2012 Essentials. It won't allow migration until the Server Migration Tool is run on the old server. However, it stops at the beginning of the process with an error that the DFS Replication service is not running. But as far as I know, the DFS Replication service did not exist until Server 2003 R2. How can I get around this?

Resolution


1. Open SBSMigrationPrep.ps1 located in C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Baseline Configuration Analyzer

2\Models\SBSMigrationPrep in Notepad.
Find "DFSR"
3. We will get the function as shown bellow
function Check-DFSReplicationServiceStatus()
{
$service = Get-Service -Name 'DFSR'
$status = $service.Status
@"
< DFSReplicationServiceStatusSection>
<DFSReplicationServiceStatus>$status</DFSReplicationServiceStatus>
< /DFSReplicationServiceStatusSection>
"@
}

4. Change the contents of "$service = Get-Service -Name 'DFSR'" to $service = Get-Service -Name 'DFS'

Once we have done this re-run the Migration and Preparation Tool

John Harris, Longtime SBSer, Passes… - SMB Nation Blogs:
http://www.smbnation.com/content/news/entry/john-harris-longtime-sbser-passes

If you ever deployed SBS 2003 you probably got touched by John Harris.  As Microsoft wanted to get up close and personal with interaction with small businesses, he was located near the area where SBS 2003 was developed. So he was one of the fearless TAP partners who let Microsoft developers loose on their clients.

(from SBS Unleashed book)

All of us who ever used the Small Business platform benefitted from his generousity and volunteerism over the years.

My condolences to his family and friends and anyone else impacted by this loss.

http://www.thirdtier.net/2013/03/join-us-for-a-chat-with-the-smbkitchen-crew/

For those that are subscribers you can ask about the content as well as topics coming up as well as please use this opportunity to ask for topics you want to see covered. 

For those that aren't subscribers you can ask about what this funky smb kitchen thing is all about.

Bottom line it's a chance for you to help build a guide of documentation that YOU want for your upcoming SMB projects.

Office 365 Integration Service reports do not run after you install Update Rollup 1 for Windows Server 2012 Essentials:
http://support.microsoft.com/kb/2828257/en-us?sd=rss&spid=16526

Install Update Rollup 2781267 if you transition from Windows Server 2012 Essentials to Windows Server 2012 Standard:
http://support.microsoft.com/kb/2828232/en-us?sd=rss&spid=16526

If you transitioned out of Essentials, right now the update rollup won't be offered up.  If you want it now, you can manually download it.

Detection will be fixed, but I'm not sure when.

As a fan of RSS feeds myself seeing Google reader get killed off means that I'm sweating bullets for the RSSable stuff as a whole.

Google Reader joins graveyard of dead Google products - Slate Magazine:
http://www.slate.com/articles/technology/map_of_the_week/2013/03/google_reader_joins_graveyard_of_dead_google_products.single.html

I use RSS feeds to stay informed  and to keep up with changes and I hope this is not a bellweather event for RSS feeds as a whole.

KB 2828269 - Running SFC (System File Checker) command may corrupt web configuration file
http://support.microsoft.com/kb/2828269

Bottom line, don't run sfc /scannow on an Essentials 2012 system.

One of the things I wrote up in the SMBKitchen patching tips is the reason KB2807986 is unchecked...Microsoft is throttling the update for some unknown reason...

Known issues with this security update

• In certain automated update deployment scenarios (such as from Windows Update or Microsoft Update), this update may not always install. This would also cause other pending updates not to install. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:
  2552343

  (http://support.microsoft.com/kb/2552343/ )

  Time-out error occurs when you install a Windows Update package that contains drivers on a computer that is running Windows 7 or Windows Server 2008 R2
  This issue can occur with any windows update package that contains drivers on systems that do not have the critical non-sec GDR update 2552343 installed.
  
  We recommend that you install update 2552343 before you deploy this security update

Great but http://support.microsoft.com/default.aspx?scid=kb;en-us;2552343 only is offered up from the Windows update site and I already have this on my computer... so why is the update unchecked?