Search This Blog

Wednesday, May 27, 2015

makecert -- write error

makecert -sky exchange -r -n "CN=RootCertificateName" -pe -a sha1 -len 2048 -ss My "RootCertificateName.cer"

run this cmd in admin mode
http://geekswithblogs.net/pranav/archive/2010/08/31/makecert.aspx

Sunday, May 24, 2015

whoami /user

whoami /user

shows sid as well

Firday's VPN - PPTP broken - drama

someone's (sum1' else customer) PPTP broken, they said it used to work

I showed dryatek router does not support two pptp session to the same VPN host.

they do not want to hear ...

lots of bullets and blame in the air .......

tried to replace adsl router 2 times

even get vdsl

tried anohter sonicwall , same problem

remove sonicwall, its getting worse

Thursday, May 14, 2015

Friday, May 8, 2015

monitors and rules in operations managers


https://technet.microsoft.com/en-us/library/hh457603.aspx

Create a monitor if…

  • You want to affect the health of an object. In addition to generating an alert, a monitor will affect the health state of its target object. This is displayed in state views and availability reports.
  • You want to automatically resolve an alert when the error condition has been cleared. An alert from a rule cannot be automatically cleared since a rule has no way of detecting that the problem has been resolved. A monitor can detect that the problem has been resolved when the condition for its healthy state is met, and the alert can automatically be resolved.
  • You are creating an alert based on a performance threshold. There are no rules available to generate an alert from a performance threshold. A monitor should be used for this scenario anyway since you can use the condition where the performance counter is under the defined threshold.
  • You have a condition that requires more complex logic than is possible with rules. The Operations console provides a variety of options for setting the health state of a monitor but only simple detection for a rule. If you need more complex logic for a rule but don’t have a method to detect the monitor’s healthy state, then you can create a monitor using Manual or Timer reset. See Event Monitor Reset for more information.


Create a Rule if…

  • You want to collect performance counters or events for analysis and reporting. Monitors only collect this information when it initiates a change in health state. If you want to collect the information you need to create a collection rule.

    If you want to both collect a performance counter and set a threshold for it to set a health state, then create both a rule and a monitor using the same performance counter.
  • You want to generate an alert that is not related to health state of an object.


Designating a Preferred Network for Cluster Shared Volumes Communication

Designating a Preferred Network for Cluster Shared Volumes Communication

https://technet.microsoft.com/en-us/library/ff182335(v=ws.10).aspx

you can designate one or more preferred networks for CSV. This topic describes how to designate the most preferred network by setting the value for a cluster network property

give it the lowest metric value of all your networks.

Thursday, May 7, 2015

another hell day in professional life -- upgrade the ram in a HP pro 3000 SFF

today, its the 2nd attempt to upgrade the memory from 2 x 1GB to 2x2GB.

tried 2x2GB our own spare ECC memory

tried 2x2GB HP original upgrade memeory

no luck at all, the screen is just blank

after disconnecting the power I had to push the power button again to discharge

in disrepair , I discharged CMOS battery, all the hell broke loose

first , it wont start, it reboots in a cycle, I saw this before, w7 startup repair didnot work, in the bios, I changed from IDE to AHCI, it starts ok

next  problem is the clock, fixed the clock

next , it failed to connect to domain, trust relationship broken, reset the computer account,

move off domain. rejoin the domain

all seems still in place,

it could be the mb faulty, doesn't like high density rams

Saturday, May 2, 2015

brand new computer network disconnect -- realtek on asus mb

just got a work PC, the network connection showed x and disconnected sometimes over night, sometimes in the midday.

the mb cd got realtek 2013 driver in it

I found the mb model on asus website, and download the lastest 2014 realtek driver. it seemed better now

Virtual machine network health detection - What's New in Failover Clustering in Windows Server 2012 / R2


 https://technet.microsoft.com/en-us/library/dn265972.aspx#BKMK_2012R2

for server 2012 R2

New
Enables a Hyper-V host to automatically live migrate virtual machines if a network disconnection occurs on a protected virtual network.

BitLocker: How to enable Network Unlock

BitLocker: How to enable Network Unlock

https://technet.microsoft.com/en-us/library/jj574173

The BitLocker Network Unlock feature will install the WDS role if it is not already installed. If you want to install it separately before you install BitLocker Network Unlock you can use Server Manager or Windows PowerShell. To install the role using Server Manager, select the Windows Deployment Servicesrole in Server Manager.

To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature using Server Manager, select the BitLocker Network Unlock feature in the Server Manager console.

Network Unlock can use imported certificates from an existing PKI infrastructure, or you can use a self-signed certificate.

With the certificate and key created, deploy them to the infrastructure to properly unlock systems.

With certificate and key deployed to the WDS server for Network Unlock, the final step is to use Group Policy settings to deploy the public key certificate to computers that you want to be able to unlock using the Network Unlock key. Group Policy settings for BitLocker can be found under \Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption using the Local Group Policy Editor or the Microsoft Management Console.

Friday, May 1, 2015

connection lost to Windows Azure VM , set DNS in the network portion in the portal , get pass the NLA thing

I lost a connection to my RDS VM, its a shock, as it was working yesterday (ie I can logon locally). I tried downsizing , not working still asking for the NLA which I dont think I ever set. eventually set the dns in the network via Azure Portal  to the DC solved the issue. I kind of know I have to set my test DC and RDS to reserved IPs, unfortunately this happened before I tried to make changes. another rough learning day for me about Windows Azure

http://blogs.msdn.com/b/sql-bi-sap-cloud-crm_all_in_one_place/archive/2014/07/06/windows-azure-vm-error-the-remote-computer-that-you-are-trying-to-connect-to-requires-network-level-authentication-nla.aspx?CommentPosted=true#commentmessage


quote

Solution:
For Azure VMs, when you increase the size of the VM (adding CPU and Memory), the network configuration is reset. This means that if you have a static DNS defined inside the VM, it would be set to DHCP assigned which is the public DNS in Azure.
Use local admin account to log on to the virtual machine and set the DNS to point to your DC. Alternatively, assign the IP address of the DC/DNS under DNS servers of virtual network.