December 22nd, 2011
paulw
When attempting to access the reporting part in the SCOM console we found that we were getting an error message similar to the one below:

This is caused by IIS using a 32bit worked process on a 64bit system.
To resolve this we had to run the following:
1. Open a command prompt and CD to C:\Inetpub\Adminscripts
2. Type in the following and press enter:
cscript adsutil.vbs find Enable32BitAppOnWin64
3. Type in following and press enter:
cscript %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs SET W3SVC/AppPools/Enable32bitAppOnWin64 0
4. Type in following and press enter:
%SYSTEMROOT%\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.exe –i
If you then go back into SCOM and open the Reporting part you should no longer get an error:

Cheers
Paul
December 22nd, 2011
paulw
We have set up DAG monitoring scripts for one of our customers which tell us the status of all the mailbox copies and we noticed that one of the database copies had been stuck in a status of “Crawling” for over a day.
To rectify this problem we did the following:
1. Log onto the affected server and open up services.
2. Restart the “Microsoft Exchange Search Indexer” service:

3. Run the following PowerShell command in EMC:
Update-MailboxDatabaseCopy –Identity DATABASE\SERVER –CatalogOnly
This will update the search index of the database and then you can run the following command to ensure that the database index is now healthy:
Get-MailboxDatabaseCopyStatus -Identity DATABASE\SERVER

Cheers
Paul
Hi Guys just to let you know a Microsoft Lync 2010 app has been released for the iPhone 
Please see “http://itunes.apple.com/us/app/microsoft-lync-2010-for-iphone/id484293461?mt=8” for more information.
We came across an issue recently , where VPN via PPTP all of a sudden stopped working after a reboot to the ISA Server.
Whenever we tried to VPN in we were getting error “800” messages on our client machines and if we did logging on the ISA we could see that our VPN attempts were just failing to connect and not actually getting denied by any rule.

We had a look in routing and remote access on the ISA server and checked what ports were open and we could see no PPTP ports showing at all which we would expect to see.

Also when we look at the RASMAN log (C:\Windows\Tracing) we could see quite a lot of errors relating failure to opening the VPN port.
[3840] 12-19 12:20:04:379: GetProtocolInfo..
[3840] 12-19 12:20:04:379: GetProtocolInfo: rc=0×0
[3840] 12-19 12:20:04:645: PortOpen (15). OpenInstances = (0)
[3840] 12-19 12:20:04:645: d:\nt\net\rras\ras\rasman\rasman\request.c: 3077: port 15 state chg: prev=0, new=4
[3840] 12-19 12:20:04:645: PortOpen (15) : OpenInstances = 1
[3840] 12-19 12:20:04:645: PortOpen (16). OpenInstances = (0)
[3840] 12-19 12:20:04:645: d:\nt\net\rras\ras\rasman\rasman\request.c: 3077: port 16 state chg: prev=0, new=4
[3840] 12-19 12:20:04:645: PortOpen (16) : OpenInstances = 1
[3840] 12-19 12:20:04:645: PortOpen (17). OpenInstances = (0)
[3840] 12-19 12:20:04:645: d:\nt\net\rras\ras\rasman\rasman\request.c: 3077: port 17 state chg: prev=0, new=4
[3840] 12-19 12:20:04:645: PortOpen (17) : OpenInstances = 1
[3840] 12-19 12:20:04:645: PortOpen (18). OpenInstances = (0)
[3840] 12-19 12:20:04:645: d:\nt\net\rras\ras\rasman\rasman\request.c: 3077: port 18 state chg: prev=0, new=4
[3840] 12-19 12:20:04:645: PortOpen (18) : OpenInstances = 1
[3840] 12-19 12:20:04:645: PortOpen (19). OpenInstances = (0)
[3840] 12-19 12:20:04:645: d:\nt\net\rras\ras\rasman\rasman\request.c: 3077: port 19 state chg: prev=0, new=4
[3840] 12-19 12:20:04:645: PortOpen (19) : OpenInstances = 1
[3840] 12-19 12:20:04:645: PortOpen (35). OpenInstances = (0)
[3840] 12-19 12:20:04:645: PortOpen: failed to open port VPN9-4. 0×80000048
[3840] 12-19 12:20:04:645: PortOpen (36). OpenInstances = (0)
[3840] 12-19 12:20:04:660: PortOpen: failed to open port VPN9-3. 0×80000048
[3840] 12-19 12:20:04:660: PortOpen (37). OpenInstances = (0)
[3840] 12-19 12:20:04:660: PortOpen: failed to open port VPN9-2. 0×80000048
[3840] 12-19 12:20:04:660: PortOpen (38). OpenInstances = (0)
[3840] 12-19 12:20:04:660: PortOpen: failed to open port VPN9-1. 0×80000048
[3840] 12-19 12:20:04:660: PortOpen (39). OpenInstances = (0)
[3840] 12-19 12:20:04:660: PortOpen: failed to open port VPN9-0. 0×80000048
To resolve this issue we did the following on the ISA Server
- Open RegEdit
- Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ReservedPorts
- Edit the Multi-String Value to have the following Value Data

Once the above was done and the server was rebooted the VPN kicked back into life and PPTP VPN ports displayed in Routing and Remote Access 

December 12th, 2011
paulw
There is a registry key that can be set to allow administrators who are remote controlling a Windows 7 system to view and interact with a UAC prompt without pausing the session:

All you need to do is set the EnableUIADesktopToggle registry key to 1:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
Cheers
Paul
We had an issue recently when running an upgrade to exchange 2010 SP2 where the Pre-Requisite checker would fail on the Hub Transport role with the following error “Setup cannot continue with the upgrade because the ‘cscript’ () process (ID:7284) has open files. Close the process and restart Setup”.

The issue turned out being due to SCOM agent we had installed on the server , so we simply stopped the system centre management service on the machine and re-ran the checker then all went through ok 
We had an issue recently when trying to upgrade Exchange SP1 to SP2 , while running through the Pre-Reqs we failed on the Unified Message role due to having more than the en-us language pack present.
You can find what additional UM language Packs you have installed via running the following in the Exchange Management Shell.
Get-UmServer | fl name,languages
You can then uninstall the management pack by running the following command (Our example is en-GB)
setup.com /removeumlanguagepack:en-GB

After this you should pass that part of the Pre-Requisite check 
Here is a simple command line that can be saved as a scheduled task that can be used to backup all of your printer settings in Windows Server 2008 R2:
CD %WINDIR%\System32\Spool\Tools Printbrm.exe -s \\<sourcecomputername> -b -f <filename>.printerExport
To restore the settings to another server run the following command:
Printbrm -s \\<destinationcomputername> -r -f <filename>.printerExport
Cheers
Paul
A customer has requested recently that they want to be able to RDP to Direct Access Machines. You Can do this by doing the following.
- Create a Group Policy and only Apply it to your DA devices group.
- Edit the GPO, Expand “Computer Configuration > Policies > Windows Settings > Security Settings > Windows Firewall with Advanced Security > Windows Firewall with Advanced Security > Inbound Rules”
- Now Create a new Inbound Rule
- Right Click New Rule
- Select Port
- Choose TCP and Specific port will be “3389”
- Select Allow the Connection
- Choose profiles “Private and Public”
- Name the Rule “Remote Desktop Services via DirectAccess”
- Right click the rule named “Remote Desktop Services via DirectAccess” and choose properties
- Go to the “Advanced” Tab and change the Edge Traversal option to “Allow edge traversal”
Finally run a GPupdate on the DA machine and you should then be able to RDP onto the DA machine
(Please note you must have ISATAP configured and Remote via IPV6 Address)
Just to let you know Exchange 2010 SP2 has been released 
Here is the link to the service pack http://www.microsoft.com/download/en/details.aspx?id=28190&WT.mc_id=rss_alldownloads_all