Archive for category Windows
Active Directory 2008 Notes 2
Posted by Harv in Server 2008 on December 30, 2009
Preparing Active Directory for Server 2008 DC’s
Note: These steps should be completed before promoting or upgrading an existing domain controller.
- Run adprep /forestprep on the schema master of the forest. This extends the schema to receive new 2008 features. The changes must replicate through the forest before proceeding.
You must be a member of the Enterprise Admins, Schema Admins, and Domain Admins in the forest root domain.
Any Windows 2000 DC’s must be upgraded to SP2 or later, or SP1 with hotfix QFE265089. - Run adprep /domainprep on the infrastructure master of each domain that will be accepting Server 2008 DC’s.
It adjusts ACL’s on AD objects, and the SYSVOL shared folder.
You must be a member of Domain Admins, and the domain’s functional level must be Windows 2000 server native or higher.
adprep /domainprep /prep can also be run to enable resultant set of policy planning mode functionality.
Originally posted 2009-06-29 00:32:06.
Downgrading to XP
Posted by Harv in Troubleshooting, Windows, XP on December 30, 2009
I’ve had a clients laptop for about a week now. I have to wonder – how is it that these companies, in this case Hewlett Packard, retain clients when they do stuff like this.
My client was tired of Vista. He asked me to take the laptop and downgrade it to XP. So I took it, popped in an XP Pro SP3 disk, and found out to my dismay that the SATA controller in use by the laptop (an HP DV2500-series, or the 2660se to be exact) is not naturally recognized by the XP installer.
The simplest solution is to get into the BIOS and make sure AHCI is disabled. That forces the SATA controller to “pretend” to be an IDE controller, which XP happens to know how to talk to right out of the box. HP has disabled the ability to change this setting. You don’t even see it in the BIOS, but I know from experience that it’s there. They want you instead to order their rescue disks.
The other solution is better, but not quite as simple. Find out which controller is in use, download the manufacturer AHCI/SATA drivers, pop them onto a floppy, re-do the setup, and make sure you hit F6 when it tells you to, in order to load in RAID or SCSI drivers. It searches the floppy for drivers, you select the right one, and away it goes.
So I went out and got a USB floppy drive. Somehow I’ve managed to get by without one up to now. And then I started digging around on HP’s website (among others), to figure out which controller this laptop is using. To my dismay, nothing on the HP website indicates this clearly. Absolutely nothing.
I scoured google. I half took the laptop apart, hoping to get a glimpse of the motherboard. I even downloaded and installed the ultimate boot cd. UBCD allows you to also add in a bunch of plugins. I loaded it up with tons of utilities in the hopes that one of them would tell me which controller it was using. Alas, no luck there. It did however see the hard-drive, which meant that its driver was working!
I copied its driver onto a floppy hoping that would be enough. Nope, when I ran the XP install, it gave me a message about requiring a TXTSETUP.OEM file. I searched through Microsoft documentation – clearly not worth the hassle of writing out this file.
Now I was getting desperate. I even tried a product that was supposed to be able to make tons of modifications to your BIOS from within an OS – so I stuck the installer onto a USB stick, booted the ultimate boot cd (ubcd4win), and tried it out. No luck.
I called HP. They were completely useless, and pushed me to order the XP rescue disks. Uhhh, no thanks. I already had an XP disk, and I wasn’t going to pay them for their crippled version which comes bundled with what I consider crapware.
I finally came up with the idea of downloading and installing Linux, as I was fairly certain that was a bulletproof way of finding out which controller is in use. I’ve tried many distros but in times like these, I like to pick ones I’ve never tried before, just for the heck of it. I headed over to distrowatch.com and downloaded CentOS.
I deployed it to a USB stick (quick tutorial coming soon) and booted the laptop with it. 5 minutes later I had the name of my controller – it’s an Intel ICH8M/ICH8M-E. I found the drivers on the intel site, put them on a floppy, and ran the XP install. Still no joy.
So I fired up nLite and created a new XP image, with the driver slip-streamed in. Voila.
I’m exhausted. But at least now XP is installing. I wonder why the same drivers on a floppy didn’t work.
I’m going to see if creating a USB stick to install a slipstreamed XP is a viable solution. If it works, I’ll write a quick tutorial on it.
Okay, rant over!
Originally posted 2009-08-16 11:07:32.
Active Directory: Groups
Posted by Harv in Server 2003, Server 2008, Windows on December 30, 2009
Distribution Groups
- These can not be used to perform any sort of ACL (access control) or permissions, and are therefore ill-suited for anything other than to create a list of users to whom you might want to, say, email. If in doubt, use a security group instead.
Security Groups
There are different types of security group. Note that the type simply defines the scope and replication.
- Universal: Objects in this group type are replicated to other domain trees within the forest. Note that global catalog servers have to replicate this information, so heavy use is not encouraged. Can be comprised of users or groups from any domain. See note (1).
- Global: Can only contain objects within the domain.
- Domain Local: Can contain objects from any domain, but are used to control access only to local resources. See note (2).
(1) – In Server 2008 we now have the UGMC (universal group membership caching) feature, which can counteract some of the overhead associated with using many universal groups. This doesn’t mean it’s okay to ignore common sense and best practises though!
(2) – Domain local is best used to control access to resources. Consider a file share: you create a domain local group called, for example, “Sales Share”. Now you allow the sales share read/write/whatever access. Note that this is domain local. Now instead of modifying the share permissions to add all the associated users/groups, you simply add the sales groups from each relevant domain as members of this group. Now when new sales people come in and go out of the company, your work is already done.
In short:
Domain local – can come from any domain but only access local resources.
Global – can only be from this domain but can access resources in any domain.
Universal – Replicated across the forest, can be from any domain and can have access to resources in any domain.
Originally posted 2009-09-20 01:42:14.
Noteworthy software
Posted by Harv in Quick Tips, Troubleshooting, Utilities, Windows on December 30, 2009
Here’s some of the software I use on a day to day basis.
Just because I love these tools, doesn’t mean you will. I’ll discuss what I use and why.
Originally posted 2009-03-10 14:31:32.
Synergy Setup: Part 3
This will be the last in the Synergy series. If you haven’t read the first two, links are here:
Synergy Setup: Part 1
Synergy Setup: Part 2
Okay. We’ve come up with a naming scheme, installed synergy, set up our screens, and created our links. So far we’ve only really done any configuration on the server. Now we need to configure the client. In my case, that will be my desktop, because my laptop (Eagle2) has the peripherals I want to share.
Originally posted 2009-08-09 09:00:09.
Editing remote files, locally. (Useful, I promise!)
Posted by Harv in Development, Quick Tips, Windows on December 30, 2009
Okay, I’ve done it! I’ve uploaded a screencast to YouTube for everyone to see.
Quick textual recap:
1) Install WinSCP. Get it at WinSCP.net.
2) Copy remote files to local drive or vice versa.
4) Locate “Keep remote directory up to date” in the commands menu. Set the local and remote directories.
3) Fire up your favorite editor.
4) Edit away. Changes will be reflected almost immediately. Yay!
5) Comments appreciated.
Originally posted 2009-05-12 22:27:11.
LDP
is an awesome LDAP utility. I used it in a time of need to find properly-formatted LDAP strings. Certainly worth using. And it’s free!
http://www.computerperformance.co.uk/w2k3/utilities/ldp.htm
(See http://support.microsoft.com/kb/224543 for instructions.)
Originally posted 2009-05-06 01:01:55.
iTunes has detected a problem with your audio configuration.
Posted by Harv in Quick Tips, Troubleshooting, Windows on December 30, 2009
Ever get the message, “iTunes has detected a problem with your audio configuration. Audio/Video playback may not operate properly.”?
Here’s one possible fix.
Read the rest of this entry »
Originally posted 2009-03-19 18:23:30.
Synergy Setup: Part 1
What you’ll need:
- Two computers, each with its own monitor
- At least one set of peripherals (keyboard, mouse)
- Synergy (http://synergy2.sourceforge.net/) on both computers
Okay. First, you need to find out the names of your computers. Remember, Synergy needs to know which computers to communicate with. You can use their names or their IP addresses, I suggest names simply because most people don’t use static IP addressing. If you do, you can opt to use the IP.
This can be done through the Control Panel, and selecting the System control panel.
I find it faster to click the start menu, right-click My Computer, and select Properties.
Once inside the panel, select the Computer Name tab.
My setup includes my desktop, named Eagle1. I re-named my laptop Eagle2, to keep things simple. Now, when I get home, I tend to place my laptop on my desk, so that it sits just next to my desktop’s monitor. Instead of using my desktop peripherals, I thought it would be great to set up Synergy here so that I can use my laptop keyboard and portable mouse, swing my cursor across the screen and control my desktop.
First you must decide which will be the server and which will be the client. This will mainly depend on which computer has the peripherals you want to share. I set my laptop up as the server because it’s the laptops peripherals that I want to be able to use locally (on the laptop) as well as remotely (on the desktop).
So then, step one is as follow:
- Install Synergy on all machines
- Come up with a common naming scheme if you haven’t already, and rename machines as appropriate
- Decide which set of peripherals to spare, and resolve that that will be the server
Carry on to step 2! (http://learnwithharv.com/blog/synergy-setup-part-2/)
Originally posted 2009-08-07 14:59:34.
My window got lost! Help!
Posted by Harv in Quick Tips, Troubleshooting, Windows on December 30, 2009
Ever “lost” an application or window someplace off-screen?
See it in the task bar? Right click it and select “Move”. Tap any arrow key. This “locks” your mouse cursor to the windows’ top draggy bar thing. Move your mouse cursor back onto the screen somewhere, the window will be attached. Left click once to ‘detach’ the window from your cursor. That’s it!
Alternatively, if you don’t have a mouse plugged in, instead of tapping an arrow key and moving the mouse, press and hold an arrow key to (slowly) move the window in that direction. This requires an idea as to which side/sides of the screen the window has dissapeared off of. For example, if it’s way off to the left somewhere, tap and hold the right arrow to ‘drag’ the window back.
Originally posted 2009-03-20 13:21:59.

Recent Comments