http://www.petri.co.il/forums/ For questions related to Microsoft Windows Server 2008 / 2008 R2 en Thu, 23 May 2013 13:24:21 GMT vBulletin 60 http://www.petri.co.il/forums/images/steelblue/misc/rss.jpg http://www.petri.co.il/forums/ http://www.petri.co.il/forums/showthread.php?t=63480&goto=newpost Tue, 21 May 2013 22:26:56 GMT I want to upgrade from windows 2003 to 2008 r2, I have to 2008 r2 up I found an interesting article on a MS Site http://social.technet.microsoft.com/Forums/en-US/winserverMigration/thread/a2dca83f-0a2e-49b1-87f9-3fbb6f493218/ it states to run adprep32 on the domain server it that the... I want to upgrade from windows 2003 to 2008 r2, I have to 2008 r2 up I found an interesting article on a MS Site

http://social.technet.microsoft.com/...-3fbb6f493218/

it states to run adprep32 on the domain server it that the 2003 server? ]]> Windows Server 2008 / 2008 R2 sgoldberg http://www.petri.co.il/forums/showthread.php?t=63480 http://www.petri.co.il/forums/showthread.php?t=63479&goto=newpost Tue, 21 May 2013 19:01:58 GMT HI all,

Goal - audit user logons & logoffs. I enable auditing at the domain level. I go to the OU with the computer object of the user I want to audit and set it to audit "account logon events" and "logon events" for success.

I check the security logs on the local PC (win7) and I can see multiple logon and logoffs. I can see the "account name" for the user I am looking for - so auditing is working.

Q - when I go to filter the log for just that user - no matter what I seem to put in the filter - I get ZERO results. Even though I can see that it is - in fact - there.

So what I am doing wrong? In 2003 server I could do a filter in seconds but something is missing with this.

Should I export the log as a .csv and use excel to do a filter?

So - if anyone has the proper way to do do this - audit an individual logon & logoff and then filter it to just a particular user - it would be greatly appreciated.

Rob ]]> Windows Server 2008 / 2008 R2 Sternfan2012 http://www.petri.co.il/forums/showthread.php?t=63479 http://www.petri.co.il/forums/showthread.php?t=63475&goto=newpost Tue, 21 May 2013 13:46:04 GMT I started a forum a while ago about deleted files across a mapped drive. All of the answers were the same, that if you delete a file, it's gone. Understood!!!

But what I'm curious about, is how Facebook, Twitter, Ebay, etc work. I guess I'm just assuming that all of these (god knows how many servers) run together. I would think that it would be a good logical guess to assume that the whole world is not stored on 1 server. Meaning 1 user accounts data could be stored across multiple servers.

I have a setup where I have 3 servers all part of a domain. The platform is set up as Terminal Services. 1 Domain Controller. 1 Terminal Server, and 1 Data Server.

The company shares files are on the Data Server. So I have a lot of mapped drives from each user's profile on the Terminal Server, to the Data Server. There are 4 different locations that use these servers.

I don't know of any other way to accomplish these users of retrieving a file from the Data Server without mapping a drive, except of coarse a backup. But if you do that once a day, and the person doesn't realize that they deleted a file till the next day, it's gone to because the backup has been overwritten.

I guess what I'm asking, is after reading this, isn't this the normal way that companies run their severs, if so, I would think by now, there would be something in place to retrieve data deleted across a map, in which makes me think I have this whole platform set up wrong. If I'm wrong, what would you do to set this up properly.




Thanks ]]> Windows Server 2008 / 2008 R2 Kobe 310 http://www.petri.co.il/forums/showthread.php?t=63475 http://www.petri.co.il/forums/showthread.php?t=63443&goto=newpost Thu, 16 May 2013 15:07:45 GMT Hi, Ive been looking all over the internet and i can't find a forum with my problem.

I have RRAS configured on Windows Server 2008r2 with ip 192.168.10.5. I have a vpn client 192.168.10.39 with a successful vpn connection to the server. I am able to ping the vpn server from the client. I am also able to ping local pcs behind the vpn server because I configured static routes to those pcs on the vpn server.

However I am unable to ping the client (192.168.10.39) from the vpn server and therefore I am unable to ping the vpn client (192.168.10.39) from any local pc behind the vpn server.

Can anyone please advice as to why I can ping the vpn server form the client but not the other way around?

It doesn't make any sense. The vpn server has no idea how to get to the client. ]]> Windows Server 2008 / 2008 R2 Jurg http://www.petri.co.il/forums/showthread.php?t=63443 http://www.petri.co.il/forums/showthread.php?t=63439&goto=newpost Thu, 16 May 2013 05:38:39 GMT Subject: NTFS Permissions-Want to allow users to view other users' files, but not modify or delete them

Hi all,

I am trying to accomplish the following setup, and I cannot understand how to set the NTFS and/or sharing permissions to accomplish it.

The computers concerned are:

(a) A server, running Windows 2008 Server SP1, 32-bit, (not the R2 version), configured as a domain controller.

(b) Several network clients, joined to the domain, running Windows 7 Professional, 32-bit.

The requirements are:

On a Windows 2008 Server, create a shared folder for users in the Engineering Department, a department in the company. This folder is to be used to store documents created by the Engineering Department's users.

The requirements for this shared folder are:
-All users in the department can open all files and, if necessary, run scripts or executable files.
-All users in the department can create new folders and files.
-Users can delete and change permissions only on files they create.
-The Administrators group has full control over the Engineering Department folder.

-The part I am having difficulty with, is the third requirement, that users can delete and/or make changes to files only on files they create; specifically preventing users from being able to make changes to files created by other users.

I have been able to accomplish the following so far:
-All users can open all files, created by themselves or another user, and can run scripts and executable files.
-All users can create new folders and files.
-Users can delete files they created, but cannot delete files created by other users.
-Users can make changes to files they created. However, users can also make changes to files created by another user-this is not supposed to happen!!

Any help offered with this will be appreciated. Please let me know if I need to supply further information about this scenario.

Thanks,
Peter Selig ]]> Windows Server 2008 / 2008 R2 Peter Selig http://www.petri.co.il/forums/showthread.php?t=63439 http://www.petri.co.il/forums/showthread.php?t=63434&goto=newpost Wed, 15 May 2013 12:14:25 GMT Hi , We are using Windows server 2008 R2 Edition and Isa server 2004 system . Now i am able to block normal http sites using firewall policy inside isa but when i am trying to block https sites its not working. I can block www.youtube.com using domain name sets *.youtube but in that case... Hi ,

We are using Windows server 2008 R2 Edition and Isa server 2004 system . Now i am able to block normal http sites using firewall policy inside isa but when i am trying to block https sites its not working.


I can block www.youtube.com using domain name sets *.youtube but in that case my users are starting opening https://www.youtube.com . I have also made one url set and manually block https://www.youtube.com but still its opening....so can anyone suggest me the way to block https sites using isa server 2004. In my all client machine , we are using webproxy address ...server ip , 8080...

please help...

Thanks.... ]]> Windows Server 2008 / 2008 R2 kathy http://www.petri.co.il/forums/showthread.php?t=63434 http://www.petri.co.il/forums/showthread.php?t=63428&goto=newpost Wed, 15 May 2013 07:58:02 GMT Hi, I am new to this forum and Active Directory. I was able to create users using DSAdd command. But I am unable to create home directories for the users from command line. Can you help me with any specific command line utility which would create users along with their home directories... Hi,

I am new to this forum and Active Directory.

I was able to create users using DSAdd command. But I am unable to create home directories for the users from command line.

Can you help me with any specific command line utility which would create users along with their home directories in AD setup? ]]> Windows Server 2008 / 2008 R2 psantosh http://www.petri.co.il/forums/showthread.php?t=63428 http://www.petri.co.il/forums/showthread.php?t=63401&goto=newpost Fri, 10 May 2013 20:34:12 GMT I am in an environment with many users, some in the company and some outside customers. We use a system that is based on GP, and it has an issue with a setting about relying on system fonts that must be disabled in order to create PDF's using a collection of Acrobat products from version 8 to XI. Everyone logs in to a single terminal server, which runs Citrix. Each user must be able to access all their printers through the Citrix environment (It's Xenapp 5). The problem is that, with 20-30 users signing in, each gets a uniquely-named Adobe PDF printer based on their computer name and session ID. We lose many reports and duplicate much work because of this "Rely on System Fonts" setting defaulting to being ENABLED. Adobe does not support disabling it, and Microsoft has admitted it is a problem in GP starting at version 8 and up to the present time- Their recommended fix is to go in to the Adobe PDF Printer and turn off the setting. This would work fine if we were dealing with one PDF printer at the Workstation level... But what happens is that when one user logs in to Citrix from a computer they have not logged in on before, it creates a new Adobe PDF printer.... and if any one of the Adobe PDF printers has the "Rely on System Fonts" box enabled, every user has to comb through 15 or 20 Adobe PDF printer preferences dialogs before they can work, or else their reports get lost.

Printers are created on Citrix at login.

With all that said, what's the best solution? I would think the best thing would be to create a GPO that prevents printers starting with Adobe PDF from being created. I'm new to printer management thru GPO's. how do I even begin this- is it a WMI filter or something?

Please let me know.
Thanks! ]]> Windows Server 2008 / 2008 R2 dspahn http://www.petri.co.il/forums/showthread.php?t=63401 http://www.petri.co.il/forums/showthread.php?t=63374&goto=newpost Wed, 08 May 2013 04:20:10 GMT Hello, Would anybody be able to tell me if a domain with 2003 R2 and 2008 R2 domain controllers, does the FSMO role holder have to be the 2008 R2 system? Reason I ask is because my management wants to add two domain controllers to a small domain that would be 2008 R2. It is presently 2003... Hello,
Would anybody be able to tell me if a domain with 2003 R2 and 2008 R2 domain controllers, does the FSMO role holder have to be the 2008 R2 system?

Reason I ask is because my management wants to add two domain controllers to a small domain that would be 2008 R2. It is presently 2003 domain function level. One of the 2008 R2 systems is going to be at an offsite disaster recovery center. Cold. No replication, closed network. The plan is to take the drives from one of the new 2008 R2 systems and physically move them to the DR system in case of a DR running site. I am worried on what that would do if the 2008 R2 is the FSMO holder.
Any suggestions would be helpful.
Thanks… ]]> Windows Server 2008 / 2008 R2 derdude http://www.petri.co.il/forums/showthread.php?t=63374 http://www.petri.co.il/forums/showthread.php?t=63370&goto=newpost Tue, 07 May 2013 18:31:38 GMT Hi, I have a Question and I need help, I have server 2008r2 broker with Farm of four terminal servers 2008r2. I need to add two more terminal servers 2008r2 and i want to use the same broker but in a Separated farm. can i do that????? Thank you Rinat Hi,
I have a Question and I need help,
I have server 2008r2 broker with Farm of four terminal servers 2008r2.
I need to add two more terminal servers 2008r2 and i want to use the same broker but in a Separated farm.
can i do that?????

Thank you
Rinat ]]> Windows Server 2008 / 2008 R2 rinata http://www.petri.co.il/forums/showthread.php?t=63370 http://www.petri.co.il/forums/showthread.php?t=63368&goto=newpost Tue, 07 May 2013 14:17:31 GMT We need to change the IP addresses on our server as the current range clashes with others within the our global network.

We curreny have x2 DC's x1 exchange & a load of other VM's which need to be changed.

Does anyone know if I can change the IP address on a DC or will this cause issues with DNS, replication etc etc.?

Would I be better off moving the roles & demoting it, the last thing I want to do is mess up the entire network. ]]> Windows Server 2008 / 2008 R2 Deland01 http://www.petri.co.il/forums/showthread.php?t=63368 http://www.petri.co.il/forums/showthread.php?t=63352&goto=newpost Sat, 04 May 2013 20:57:26 GMT Hello Experts,

My apologies if this has been answered before. The issue I'm having is RDP'ing into a (total of 3) member server that are joined to a Windows 2008 R2 Domain.

I could login with the server's local admin credentials. But when I'm trying to use domain\administrator with correct passwords. I am unable to do so.

Usually, this issue is the other way around. Obviously, on the ADC Server itself once you DcPromo the local administrator account is replaced. I don't have a problem there.

Thanks for your help!! ]]> Windows Server 2008 / 2008 R2 DaQsta http://www.petri.co.il/forums/showthread.php?t=63352 http://www.petri.co.il/forums/showthread.php?t=63347&goto=newpost Fri, 03 May 2013 09:16:17 GMT Core i3 with 4GB RAM running Windows Server 2008. > 2 NIC available.]]> Requirement:
Need to run DC, ADS, DHCP, VPN in same server.
Is it possible ?
If not, may i run VBOX in the same machine and run VPN from it.


Environment Details:
Server Info.:
> Core i3 with 4GB RAM running Windows Server 2008.
> 2 NIC available.

Workstation Info.:
> 15 Clients running Win 7 and XP.
> Remote office running 5 Win 7.

Remote office user have to connect and work via VPN. ]]> Windows Server 2008 / 2008 R2 arun_cdm http://www.petri.co.il/forums/showthread.php?t=63347 http://www.petri.co.il/forums/showthread.php?t=63340&goto=newpost Wed, 01 May 2013 15:53:34 GMT I am wanting to take advantage of DFSR; My current sitrep is: We are in a workgroup but striving towards AD. We do currently have an AD (forest level 2008) but none of our current production users are in it yet. Production is all in workgroups. We have two Dell servers running 2008 r2 with 3tb... I am wanting to take advantage of DFSR;
My current sitrep is:
We are in a workgroup but striving towards AD. We do currently have an AD (forest level 2008) but none of our current production users are in it yet. Production is all in workgroups.
We have two Dell servers running 2008 r2 with 3tb each, which we plan to implement DFSR and replecation:

1. The files that will be in the name space are very dynamic. Various and many users are consatntly making changes to the files throughout the day.
2. We are in two locations linked by a slow wan and bandwith is an issue
3. if replication occurs every time a file changes, i am afraid bandwith will choke and the network will slow to a crawl
4. if replication only occurs after hours (most of our users only work 9 to 5) then there is danger of many users using outdated versions, which could be catastrophic.

I am considering scheduling replication to occur during the lunch break, but am unsure of the duration needed for such to occur..

Any input? ]]> Windows Server 2008 / 2008 R2 dbeu http://www.petri.co.il/forums/showthread.php?t=63340 http://www.petri.co.il/forums/showthread.php?t=63336&goto=newpost Tue, 30 Apr 2013 18:31:20 GMT Hi,

I'm looking for some good ways to practice all the stuff I learned in MCITP, thru some VM's at home.

The problem is that I got a bit rusty (finished the course 2 years ago, and the last design exam was about a year ago).

The thing is that I don't get to practice the stuff in real life, so I want to at least practice it in VM.

I'm looking for some good sites, that give some exercises, Labs, and even some scripts that simulate network/AD problems (like - completely mess up your server, and leave you looking and fixing some problems).

I'm not looking for the Labs from the MCITP itself, but more of a full system simulation.

can anyone suggest such sources? ]]> Windows Server 2008 / 2008 R2 JMG http://www.petri.co.il/forums/showthread.php?t=63336