Start Menu
Type "Event Viewer" and press the Enter key
The Event Viewer will open. In the left pane of the window, disclose Windows Logs and select System
Widen the window to show the contents of the Middle pane
Choose menu item Action -> Filter Current Log.
Set Filter "Event sources:" to "MemoryDiagnostics-Results" and press the Enter key to apply it and/or simply click the OK button to close the Filter Current Log window.
...
While installing some software that links into AD it mentioned check domain topology is healthy, I opens site and services and forced replication, however it gave the RPC server is unavailable
The cause was a dns issue on the primary dc, it was set to my routers ip, I also noticed for some reason if I pinged the FQDN of the other dc it gave an external ip, which was strange, I updated dns to loopback and the other dc and sync was able to complete...
First, you need to see if VM resource metering is enabled
run PowerShell as admin on a hyper v host (or using remote powershell)
Get-VM | Format-List Name,ResourceMeteringEnabled
To Enable Metering
Enable-VMResourceMetering -VMName NameOfVM
To Disable Metering
Disable-VMResourceMetering -VMName NameOfVM
If you want to enable this for all vm's on a host replace NameOfVM with *
Basic overview
Use the below command (values only 0 if VM is off)
Get-VM | Measure-VM
This shows the columns: VMName, Avg CPU, Avg Ram, Max Ram, Min Ram, Total Disk, Network Inbound, Net Outbound
Focus on IOPS
Measure-VM -VMName NameOfVM | select VMName,
@{Label='TotalIO';Expression = {$_.AggregatedDiskDataRead + $_.AggregatedDiskDataWritten}},
@{Label='%Read';Expression={"{0:P2}" -f ($_.AggregatedDiskDataRead/($_.AggregatedDiskDataRead + $_.AggregatedDiskDataWritten))}},
@{Label='%Write';Expression={"{0:P2}" -f ($_.AggregatedDiskDataWritten/($_.AggregatedDiskDataRead + $_.AggregatedDiskDataWritten))}},
@{Label='TotalIOPS';Expression = {"{0:N2}" -f (($_.AggregatedDiskDataRead + $_.AggregatedDiskDataWritten)/$_.MeteringDuration.Seconds)}} | ft
...
Caution: Using the Ntdsutil utility incorrectly may result in partial or complete loss of Active Directory functionality.
At the command line, type "Ntdsutil" and press ENTER.
type "metadata cleanup" and press Enter.
type "connections" and press Enter.
type "connect to server <servername>", where <servername> is the domain controller (any functional domain controller in the same domain) Press Enter.
Type "quit" and press Enter
Type "select operation target" and press Enter
Type "list domains" and press Enter (lists all domains in the forest with a number associated with each)
Type "select domain <number>", where <number> is the number corresponding to the domain. Press Enter.
Type "list sites" and press Enter.
Type "select site <number>", where <number> refers to the number of the site, Press Enter.
Type "list servers in site" and press Enter. (list all servers in that site with a corresponding number)
Type "select server <number>" and press Enter, <number> refers to the domain controller to be removed.
Type "quit" and press Enter (Metadata...
Admin Credentials
Move all FSMO roles the logged-on user should be a member of the Enterprise Administrators group. This is required to transfer Schema master or Domain naming master roles.
The rest of the operations can be done with a user who is a member of the Domain Administrators group.
The most important things to look out for are the following components that are either running or registered against the system:
Global Catalog
FSMO Roles
Bridgehead server
General server checks
You have enterprise admin credentials
Global Catalog
To check what servers are functioning as a Domain Controller in your domain, type the following command:
dsquery server -domain #DomainName# | dsget server -isgc -dnsname
replace #DomainName# with the domain of the DC that you are demoting
If you have more than just the DC that you are preparing the demote, then you have nothing else to do as the DCPROMO steps will remove it automatically. If you don’t have any more, follow MS article 296882 to make another DC a...
Add GUI on a Core Server
Put Installer Disc in disk drive / load ISO
Load Powershell as admin
Enter command "Add-WindowsFeature Server-GUI-Shell"
Then "Restart-Computer"
Remove GUI on a Server
Load Powershell as admin
Enter command "Remove-WindowsFeature Server-GUI-Shell"
...
Microsoft does not fully support this as if you try to install it normally it gives the below error:
Your version of the Windows operating system is not supported by this program.
Error code 0x8004FF04
Download a copy of MSE from Microsoft: http://windows.microsoft.com/en-us/windows/security-essentials-all-versions
Right Click on the mseinstall.exe
Click on Properties.
Click on the Compatibility tab.
Check Run this program in compatibility mode for Select From the drop down menu Windows 7.
Open a Command Prompt as Administrator. Navigate to your Downloads folder or where the installer is located example: cd C:\temp
mseinstall /disableoslimit and follow the installer prompts
...
1. Go to the Local Group Policy Editor as:
Start -> Run -> gpedit.msc
2. From Local Computer Policy , go to the following location:
Computer Configuration -> Administrative Templates -> System -> Credentials Delegation.
3. Enable the following settings and add server as” TERMSRV/*” without a quotation by clicking the option “Show..” from add servers to the list as shown in the below screenshots:
Allow delegating default credentials with NTLM-only server authentication.
Allow delegating default credentials.
Allow delegating saved credentials.
Allow delegating saved credentials with NTLM-only server authentication.
4. Now all you need to update/refresh the policy, which you can do by type “gpupdate/force” from command prompt (open in administrator mode) as:...
By default you can connect to anyone session on a server, however this can be locked down via group policy. It is located:
Administrative Templates>Windows components>Remote Desktop Services>Remote Session Host>Connections
And is called "Set rules for remote control of Remote Desktop Services user sessions”...
Start Registry Editor.
Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\
Right click on the one called PortNumber
On the Edit menu, click Modify, and then click Decimal.
Type the new port number, and then click OK.
Quit Registry Editor.
Restart the computer.
...