TechNet Blogs

DHCP Server Callout API usage

teamdhcp — Mon, 06 Jul 2009 06:03:00 GMT

Microsoft DHCP Server Callout API provides a way for developers to access the critical phases of DHCP protocol processing in Windows Server 2003 family and later. This enables developers to: · Create customized extensions to the Microsoft DHCP Server · Monitor statistics · Create parallel lease databases · Provide other customized solutions var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js'...(read more)

SQL Server ソリューション解説セミナー (7/15 - 17) 開催

ysaito — Mon, 06 Jul 2009 05:33:00 GMT

マイクロソフトの斎藤です。

SQL Server ベースの最新ソリューションを徹底解説する「SQL Server ソリューション解説セミナー」 (社内では略して SSK と呼んでいます。) を 7月15日、16日、17日に開催します。

7 月 15 日 (水) 開催検証結果で語る!! Hyper-V によるデータベースサーバー統合

複数台の Windows 2000 Server と SQL Server 2000 をお使いいただいたいる方へのお勧めセミナーです。Hyper-V によるデータベースサーバー統合の How to を実検証結果から解説します。

7 月 16 日 (木) 開催ご紹介あなたにピッタリの DWH と BI の構築法

6月24日より提供を開始した Fast Track Data Warehouse の解説と、SQL Server ベースの BI システムを導入されているお客様 [東映アニメーション様] からにご登壇いただく事例セッションもあります。

7 月 17 日 (金) 開催 SQL Server 2000/2005 ユーザーのための、SQL Server 2008 への簡単アップグレード法

SQL Server 2000 または 2005 をお使いいただいている方へのお勧めセッションです。旧バージョンを使い続ける場合の課題やリスクについてと、その解決方法について解説します。

※本セミナーは企業ユーザー様向けのため、企業ユーザー様お申し込み多数の場合、同業他社様および弊社 (マイクロソフト) のパートナー様のお申し込みはお断りさせていただく場合がございます。あらかじめご了承ください。

Revisiting using a Zune with a MacBook Pro

Keith Combs — Mon, 06 Jul 2009 05:12:02 GMT

One of the first things I did when I got my Mac back in late 2007 was to see if the USB connection capabilities worked in Fusion. But that was about eighteen months ago and nearly the entire world has “rev’d” since then.

So let the updates begin… OS X is at v10.5.7. I updated VMWare Fusion to v2.0.5. I installed Service Pack 2 on the Windows Vista Enterprise x64 virtual machine. I then downloaded and installed the 64 bit version of the Zune 3.1 software.

I plugged in the trusty Zune 80 Original and sure enough, the device was detected properly and the driver installed. Time to cross your fingers and hope for the best. I launched the Zune software and synced the Zune 80. YAY !!!

Now you might be thinking so what? Well, there are a few people interested in the Zune Marketplace and a device coming out this fall.

One other thing. I haven’t tried this yet with Windows 7. I’ve been really busy the past 6 months and at this point I might as well wait for the released version.

Jun. 29 - Jul. 5 Hot-Fix KB articles Weekly Release - Windows Legacy Products

Content Team — Mon, 06 Jul 2009 03:14:00 GMT

Hi Everyone, Last week, 4 Windows legacy products related hot-fix KB articles were released, including 2 for Windows XP, and 2 for Windows Server 2003. Below are the details: Windows XP - 2 KB articles: · 971314 All PCL inbox printer drivers become unsigned after you install the Microsoft .NET Framework 3.5 SP1 or XPS Essentials Pack in Windows XP or in Windows Server 2003 · 972483 On a computer that is running Windows XP, GDI object handles become leaked when you run a multithreaded application...(read more)

Windows 7 - Prerequisites, Considerations and evaluation - UPDATED

adhall — Mon, 06 Jul 2009 03:07:36 GMT

An update to my previous post I have updated the document with some corrections and new information. Thanks to Joe Keller for some updates. As before, whilst I have tried to ensure that all information in this document is accurate, no guarantee is made. Until Windows 7 is RTM all information is subject to change. This is not an official guide :) But hopefully it will help you get going and ensure that you consider everything you need to. Click here to download the guide If you have any suggestions...(read more)

DFSR のデバッグログについて

jpntsblog — Mon, 06 Jul 2009 02:43:56 GMT

はじめまして。Windows プラットフォームサポート担当の比留間友一（ひるまともかず）です。

今回は、Windows Server 2003 R2 以降で導入された、DFS Replication (DFSR) のトラブルシューティングにおける影の主役、デバッグログについてお話したいと思います。

1. DFSR のデバッグログとは？

DFSR サービスは、バックグラウンドで人知れず（？）循環形式のデバッグログを出力しつづけています。

いざトラブルシューティング！となった際には、このデバッグログを解析する必要が出てくる場合も少なくありません。

私たちサポート担当者にとっては、まさしく命綱とも言える存在ですが、「デバッグログ」という名の通り、トラブルが発生しない限りは見る必要もありませんので、少しでもディスクの使用量や I/O を節約したい環境では、出力先のドライブを変えたいと思うこともあるかもしれません。

一方で、大規模なレプリケーショングループを構成している環境では、デフォルトの出力設定ではログサイズが足りず、肝心な情報が上書きされてしまっていて記録が残っていない、といった事も起こり得ます。

2. 現在のデバッグログの出力設定を確認する

既定の状態で、DFSR デバッグログは、 %windir%\debug フォルダに出力されます。

1ファイルにつき、約 200,000 行のエントリを出力し、100世代のファイルで循環出力を行います。

この設定で、およそ 50 – 100 MB程度のディスク容量を使用します。

現在ログが出力されているログファイルは DFSRxxxxx.log というファイル名で、その他のログファイルは、DFSRxxxxx.log.gz というファイル名で、GZ 形式で圧縮されています。

（xxxxx の部分には通し番号が入ります。）

現在のデバッグログの出力設定は、以下のコマンドで確認することができます。

コマンド構文

Dfsrdiag DumpMachineCfg /mem:<サーバー名>

3. デバッグログの出力設定を変更する

DFSRサービスを実行しているサーバー上で、WMIC コマンドを使用することで、デバッグログの出力設定を変更することができます。

なお、デバッグログの出力設定は、レプリケーションの対象となりませんので、各サーバーごとに個別に設定する必要があります。

出力対象となるログの重要度（DebugLogSeverity）を変更する：

既定値：4

有効範囲：1 – 5

コマンド構文

wmic /namespace:\\root\microsoftdfs path dfsrmachineconfig set debuglogseverity=5

DebugLogSeverity の説明は以下のとおりです。

5 で最も詳細な出力になります。

既定で 4 が設定されていますが、詳細なトラブルシューティングの場合を除けば、通常、この設定の出力で十分です。

1 … ログのヘッダ部分のみ記録します。

2 … エラー [ERROR] イベントおよび、上記の全てを出力します。

3 … 警告 [WARN] イベントおよび、上記の全てを出力します。

4 … 情報レベルのイベントおよび、上記の全てを出力します。

5 … 内部処理の詳細なトレース情報および、上記の全てを出力します。

1ファイルあたりに書き込まれるログエントリ数 (MaxDebugLogMessages) を変更する：

既定値：200000

有効範囲：1000 - 4294967295 (FFFFFFFF)

コマンド構文

wmic /namespace:\\root\microsoftdfs path dfsrmachineconfig set maxdebuglogmessages=500000

使用するログファイル数 (DebugLogFiles) を変更する：

既定値：100

有効範囲：1 – 10000

コマンド構文

wmic /namespace:\\root\microsoftdfs path dfsrmachineconfig set maxdebuglogfiles=200

ログの出力先パス (DebugLogFilePath) を変更する：

既定値：%windir%\debug

コマンド構文

wmic /namespace:\\root\microsoftdfs path dfsrmachineconfig set debuglogfilepath="d:\dfsrlogs"

注意：出力先のパスは事前に手動で作成しておく必要があります。

指定されたパスが存在しない場合、 DFSR サービスの再起動時に、既定の %windir%\debug に設定が戻ります。

デバッグログの出力の有無 (EnableDebugLog) を変更する：

既定値：TRUE

有効範囲：TRUE または FALSE

コマンド構文

wmic /namespace:\\root\microsoftdfs path dfsrmachineconfig set enabledebuglog=true

注意：FALSE 設定にすると、デバッグログが一切出力されなくなります。これにより、トラブルの発生時に原因の特定が困難になる可能性があります。デバッグログの出力自体がシステムに何らかの悪影響を及ぼしている場合以外は、デバッグログの出力を無効にすることはお勧めできません。

「コミュニティにおけるマイクロソフト社員による発言やコメントは、マイクロソフトの正式な見解またはコメントではありません。」

Feedback Needed from IT Pro’s

jeffa36 — Mon, 06 Jul 2009 01:48:21 GMT

Well it’s that time of year again. Another financial year has gone by and we are beginning to plan for the new year. Well to be honest we have been planning for some time now. But this time around I thought I would call out to the community to get your thoughts on a couple of areas myself and Deeps have been thinking about so that we can tailor events and content delivery that best meets your needs. So what I’ve done is setup some simple polls on Twitter using Polldaddy. Now some of you are not on Twitter so I thought i would post the links to the online polls so you have a chance to respond.

Question 1: Where do you get your technical Information on Microsoft products?

Link to Poll: http://poll.fm/11qya

Question 2: What type of content do you consume the most regarding Microsoft Products?

Link to Poll: http://poll.fm/11qyo

Question 3: What is the number one technical issue you worry about the most?

Link to Poll: http://poll.fm/11qz0

We really want to get your feedback because this will help us make sure that we target content to you that best meets your needs. The polls are very quick and have the option to put in your own answer if you don’t feel the options I put in best describe the question for you.

If you have a moment I would really appreciate hearing what you think and thanks if you have filled in the polls.

Technorati Tags: IT Pro's,Feedback,Poll

Jeffa

Outlook 주소록에서 전체 주소 목록 또는 연락처를 먼저 표시하는 방법

koreapartner — Mon, 06 Jul 2009 00:47:00 GMT

안녕하세요. mikshi입니다 ^^

Outlook에서 주소록을 클릭하거나 메일 보낼 때 받는 사람을 클릭하면, “연락처” 목록들이 표시되어 매번 주소록에서 “전체 주소 목록”을 선택해야 하는 경우가 있습니다. 바로 아래 그림처럼 말이죠..

오늘은 이러한 경우 전체 주소 목록이 연락처 보다 먼저 표시되도록 하는 방법에 대해 말씀드리려 합니다. ^^

먼저, Outlook 메뉴에서 [도구]-[주소록]을 선택합니다.

주소록 창이 열리면, 다시 [도구]-[옵션]을 선택합니다.

주소 창에서 “이 주소 목록 먼저 보기”에서 “연락처” 대신 “전체 주소 목록”을 선택한 후 확인을 클릭합니다.

다시 Outlook에서 주소록을 클릭하거나, 메시지 작성 시 받는 사람을 클릭하게 되면 전체 주소 목록이 먼저 표시되는 것을 확인하실 수 있습니다. 반대로, 기존에 전체 주소 목록이 표시되고 연락처를 먼저 표시되도록 하고 싶을 경우에는 “이 주소 목록 먼저 보기”에서 “전체 주소 목록” 대신 “연락처”를 선택하신 후 확인 버튼을 클릭하시면 됩니다.

[참고 문서]
주소록에 연락처 먼저 표시
http://office.microsoft.com/ko-kr/outlook/HA011127381042.aspx

그럼 오늘도 좋은 하루 되세요. ^^
-by mikshi

More Floors Added to the Tower of Babel: Free-as-in-beer Maren Arabic Romanizer

tonyso — Sun, 05 Jul 2009 23:41:41 GMT

Microsoft recently released a free-as-in-beer Windows extension that allows you to type Arabic in Roman characters and have it converted on the fly to Arabic script. Maren integrates seamlessly with Windows and works in most Windows applications and websites. From the website: “Lack of access to an Arabic keyboard or lack of familiarity with one are two of the most common problems preventing Arabic users from communicating in their own language. Microsoft Maren is a Windows extension that comes...(read more)

DPM 2007 - Drive visualizzati come Standalone drive

itentblg — Sun, 05 Jul 2009 23:00:00 GMT

Lo scopo di questo post è quello di fornire le informazioni per risolvere una potenziale problematica relativa ai drive di una library esposti da Data Protection Manager 2007.

Potrebbe capitare che, in seguito all'installazione di una library sul nostro server DPM 2007, i relativi drive siano visualizzati come Standalone Drives:

La prima cosa che dobbiamo verificare è il modo in cui sono visualizzati i drive e la library in Device manager:

Questo è un tipico caso in cui i driver della library non sono installati correttamente e dunque la library è visualizzata come "Unknown Medium Changer" e potenzialmente anche i drive non sono riconosciuti correttamente.

Occorrerà dunque richiedere al vendor i driver corretti, portandosi in una situazione coerente come quella riportata nella seguente figura:

Se anche dopo aver installato l'hardware in maniera corretta ed aver effettuato un rescan dalla console DPM, o se questo fosse stato già installato correttamente in precedenza, si continuano a visualizzare i drive come standalone, verificare se la library che si sta utilizzando è tra quelle certificate per DPM.
A tal fine sarà possibile utilizzare il seguente link:

System Center Data Protection Manager 2007 Tested Hardware
http://technet.microsoft.com/it-it/dpm/cc678583(en-us).aspx

Se il problema ancora persiste, una volta accertato che la nostra library è tra quelle testate per Data Protection Manager 2007, possiamo effettuare un remapping dei drive.

Per eseguire questa procedura, accertarsi che:

Il servizio DPMLA dovrà essere arrestato
Occorrerà rimuovere tutte le tape dai vari drive

Eseguire i seguenti task:

Effettuare un backup del file <DPM Installation path>\Config\DPMLA.xml ed eliminarlo
Rigenerarlo attraverso il tool: <DPM Installation path>\Bin\DriveMappingTool.exe
Aprire la console DPM ed eseguire un rescan

L'esecuzione del tool fallirà se eseguito per un drive standalone, restituendo il seguente errore:

La procedura sopra esposta è documentata al seguente link:

Remapping Tape Drives
http://technet.microsoft.com/en-us/library/bb795782.aspx

Mattia Tocco
Senior Support Engineer
Microsoft Enterprise Platform Support

BlogMS Monthly - Articles Published in June 2009

Daniel Good — Sun, 05 Jul 2009 22:29:00 GMT

253 Microsoft Team blogs searched

1271 new articles found in 178 blogs between 1^st June 2009 and 30^th June 2009

BlogMS consolidates a large number of highly relevant and up to date information sources across the Microsoft product and online services portfolio. You can expect to find important announcements and details of Microsoft news, product releases, service packs and important support issues.

There are a large number of articles published on a monthly basis, the intention of this monthly report is for those who have missed the weekly updates which you can find published on BlogMS. All the blogs are grouped into logical categories sp you can quickly skim the entire document and find the most relevant information which is important for you.

The PDF report can be found attached to the article:

Adding the SSTP Magic to the UAG Charm

edgeaccessblog — Sun, 05 Jul 2009 20:43:29 GMT

One of the interesting features in this Forefront UAG release is our integration with SSTP (Secure Socket Tunneling Protocol) – a firewall-friendly VPN technology introduced into Windows in Vista SP2. SSTP is another RRAS (Routing and Remote Access) tunneling protocol, which relies on standard SSL technology for implementing a ‘layer 3 VPN’.

Supporting layer 3 VPN to enable remote users full access into the corporate network is not new in UAG – it’s supported in IAG via the Network Connector component that resides on both the user’s endpoint machine and the IAG server. However, Network Connector is a proprietary technology which is being replaced by the SSL-based in-box technology. That replacement brings several benefits:

Saves installation of a driver on endpoint machines
Scalability gains (requires a single HTTPS connection to the UAG server)
Supports DHCP for VPN client IP provisioning

Network Connector is still supported in UAG, primarily for down-level clients (more on that a bit later in this blog), but the direction is clear: rely on standard platform technologies where possible.

“Sounds great – show me how!” – configuring UAG\SSTP has 3 steps:

Step 1 - Enablement

The first step is enabling SSTP, and it’s performed by launching the “SSL Tunneling Configuration” dialog via Admin->Remote Network Access->SSL Network Tunneling (SSTP):

In the “General” tab you specify the max number of client connections and choose a trunk to rely on. That trunk must already exist, and SSTP would pull several elements from that trunk, like its public hostname (for the clients to dial to), port and server certificate (which must be valid).
The Protocols tab is pretty straightforward – you just make sure the SSTP protocol is checked (which it is by default) and the rest (PPTP and L2TP/IPSEC) are not as these two are not supported in this beta.
The IP Address Assignment is more interesting, as here is where you configure the policy of assigning IP addresses to VPN clients. We support two modes: static and dynamic via DHCP. In the case of static, you will notice that you’ll need to exclude the IP range from the definition of your internal network - you’ll get an error message if you don’t.
Access Control is preserved for dial-up scenarios which are not supported in beta – please leave it blank.

Step 2 - Publishing

The second step is publishing the Remote Network Access app. You use the standard “Add Application Wizard” for that- you’ll find the Remote Network Access app, alongside Network Connector, in the “Client/Server and legacy” dropdown list.

This is a good opportunity to elaborate about why Network Connector is still relevant and supported in this release: as mentioned above, SSTP is only supported on Vista SP2 clients and above. When an end-user launches the Remote Network Access app from the trunk, a client-side logic determines if the client OS version is Win 7 or a previous version. In the former case SSTP will be used to establish a connection; in the latter – NC (assuming NC is also enabled on UAG). You might be wondering why we’re using NC on a Visa SP2 client machine; the reason is to provide a single sign-on experience. Let me elaborate a bit: typically when a user dials-into RRAS\SSTP she needs to undergo some kind of authentication. But in the scenario where the user has already logged into the UAG trunk, and launched Remote Network Access from there, we don’t want her to need to provide log-in credentials to RRAS again; that’s why we’ve implemented an RRAS admin plug-in that delegates authentication and authorization decisions to UAG. Now comes the tricky part: that plug-in is only supported on Win 7 clients, not on Vista SP2 clients. Hence, we’ve made a decision to treat Vista SP2 as ‘legacy’ for this case, and use NC.

Step 3 - End-user Testing

The last step is, well – just try it out. Log in to the trunk and launch the Remote Network Access app (or whatever name you gave to that app during the publishing phase). You will see a dialog showing the connection attempt, and if successful – a “connection started” bubble:

That’s pretty much it – you’re connected and can ping and browse internal resources. You can end the connection from the Portal Activity window or by just logging off from the portal.

Happy networking,

Asaf Kariv | Lead Program Manager | Microsoft Unified Access Gateway

Connexion VPN en SSTP sur un serveur Small Business Server 2008

pierrc — Sun, 05 Jul 2009 20:20:00 GMT

Les connexions VPN en SSTP sur SBS 2008 c'est possible ! :-)

Vous avez des abonnements avec des opérateurs qui vous bloquent les connexions VPN en filtrant le port TCP 1723 (PPTP) ou UDP 500,4500,1701 (L2TP/IPsec), vous pourrez quand même vous connectez en VPN sur votre serveur SBS 2008 à l'aide du protocole Secure Socket Tunneling Protocole sur du TCP port 443, c'est à dire au travers de tous pare-feu. Pour en savoir un peu plus : http://technet.microsoft.com/en-us/magazine/2007.06.cableguy.aspx

Avant de commencer le paramétrage , il faut être à jour au niveau du serveur comme du client et surtout faire une sauvegarde de votre serveur. Attention pour les connexions en SSTP, il faut avoir au minimum un client Windows Vista SP1 !

Comme vous avez pu le voir, dans le lien plus haut, une connexion SSTP s'appuie sur une session "HTTP over SSL" donc l'installation et le paramétrage du certificat "authentification du serveur" "remote.mon-domaine-pulic.com" sur le serveur SBS 2008 doit être correcte. Normalement, tout cela été installé automatiquement lors de l'assistant "configurer votre adresse internet".

C'est le même certificat qui nous servira à nous connecter en SSTP et en HTTPS avec le server IIS

N'hésitez pas à aller dans la console pour "checker" votre réseau et lancer l'assistant "Réparer mon réseau" pour fixer les problèmes éventuels.

Si vous n'avez pas acheté un vrai certificat :-) auprès d'une autorité tiers ( VeriSign, Twate, Godaddy .....), les clients doivent "truster l'autorité du certificat" qui est en fait le serveur de certificat dans SBS 2008.

Les clients membres du domaine SBS "trustent" l'autorité du certificat de SBS.

Pour les clients non membres du domaine ou PDA, il existe un utilitaire (C:\Users\Public\Downloads sur le serveur SBS ) pour installer le certificat de l'autorité de certificat ...

Il est beaucoup simple d’acheter un vrai certificat auprès d’une autorité de certification tiers. Il existe un assistant pour faire la demande et l’installation correctement.

Pour vérifier que l’installation du certificat est correcte, connectez vous à distance avec un client sur le site https://remote.mon-domaine.com. Si tout est correct il resta deux étapes.

1) Dans un premier temps il faut paramétrer le service RRAS du serveur SBS pour les connexions VPN :

le plus simple c'est d'aller dans la console de SBS 2008 et de lancer l'assistant

A la fin de l'assistant , cinq entrées PPTP seront créées, mais aucune pour les connexions SSTP entrantes.

Pour paramétrer les connexions SSTP entrantes:

-> Outils d'administration -> Routage et accès distant

-> Clic droit sur Ports -> sélectionnez Wan Miniport [SSTP] -> Configurer ...->

Mettre le nombres de connexions entrantes souhaitées et cochez l'option "Connexions d'accès à distance entrantes"

2) Dans un deuxième temps, il restera à paramétrer le certificat pour la connexion SSTP. -Par chance les connexions SSL du serveur IIS et les connexions en SSTP cohabitent :-) ! Il faut passer par des commandes "netsh" de manière à pouvoir “binder le certificat " authentification du serveur" "remote.mon-domaine-pulic.com" pour le service SSTP de RRAS.

Pour bien comprendre :

En lançant une "invite de commandes" avec les droits administrateur puis la commande "netsh http show sslcert" on voit :

la partie " Port IP : 0.0.0.0:443" => correspond à l'adresse IP et le port d'écoute du serveur IIS
la partie "Hachage du certificat : 510072587d6bd6203c6cbaca3d29753f8bb4b0a8" => correspond au hash du certificat "remote.mon-domaine.com" .Pour vérifier le hash du certificat il suffit de lancer une console "mmc " certificats -> compte ordinateur et sélectionner le certificat "remote.mon-domaine.com" -> "empreinte numérique".

la partie " ID de l'application : {4dc3e181-e14b-4a21-b022-59fc669b0914}" => correspond à l'URI (Uniform Resource Identifier) de IIS 7. Sachant que les connexions SSTP sur RRAS utilisent un URI unique {BA195980-CD49-458b-9E23-C84EE0ADCD75}(cela peut être vérifié dans la base de registre HKLM\ System\ CurrentControlSet\ Services\ Sstpsvc\ Parameters\ ServerURI)

Pour binder le certificat, pour les connexions SSTP, lancer les commandes suivantes

· “netsh http delete sslcert ipport=0.0.0.0:443”

· “netsh http add sslcert ipport=0.0.0.0:443 certhash=510072587 d6bd6203c6cbaca3d29753f8bb4b0a8 appid={ba195980-cd49-458b-9e23-c84ee0adcd75} certstorename=MY”

Pour vérifier que cela à bien fonctionner lancer la commande “netsh http show sslcert” et vérifier l‘URI SSTP (ID de l’application) ainsi que le hash du certificat

Relancer les services IIS et RRAS et c’est terminé pour ceux qui utilisent un certificat acquis auprès d’une autorité publique.

Pour ceux qui utilisent un certificat émis par l’autorité de certification de SBS il y aura un paramétrage (bidouillage) supplémentaire à faire sur les postes clients. En effet, avant d’établir la connexion, un client SSTP doit contacter la CRL (Certificate Revocation list) de l’autorité de certification.

Plus d’info : http://fr.wikipedia.org/wiki/Liste_de_r%C3%A9vocation_de_certificats

Regardons la CRL d’un certificat émis par l’autorité de certification de SBS :

Ceci veut dire que le client SSTP doit se connecter sur l’ URL “http://srv.mtam.local/CertEnroll/mtam-SRV-CA.crl” avant d’établir une connexion SSTP.

Pour joindre un serveur distant avec un nom FQDN en .local avec un poste connecté à internet, une seule façon, créer une entrée dans le fichier host du client:

Lancer une "invite de commandes" avec les droits administrateur
“notepad %windir%\system32\drivers\etc\hosts”
X.X.X.X (l’adresse IP public) mon-serveur-sbs.local

Il ne restera plus qu’à rendre disponible l’URL “http://srv.mtam.local/CertEnroll/mtam-SRV-CA.crl” sur le serveur SBS .

Menu “Démarrer” –> “Gestionnaire du serveur” –> “Services de certificats Active Directory”-> “ajouter des services de rôle”-> et “ Inscription de l’autorité de certification via le Web”

Ne pas oublier de paramétrer le port forwarding tcp 80 au niveau du routeur/pare-feu. Redémarrer les services IIS et RRAS et c’est terminé :-)

Pour paramétrer une connexion VPN en SSTP sur le poste client, rien de plus simple !

Bon tests !

Un grand merci à mon collègue Pascal Saulière pour le prêt de son serveur SBS pour les tests sans oublier Stanislas Quastanas de m’avoir ouvert l’esprit sur la CRL :-)

Tennis as a way of testing search.

jamesone — Sun, 05 Jul 2009 18:54:42 GMT

Like a lot of people who would really call themselves Tennis fans I was watching the Wimbledon final with that very long last set. I wondered what the longest set at Wimbledon was. A quick tap into my favourite search engine pulled up this page on wikipedia

What impressed me was that someone was updating the games count as the match progressed. Of course, because I used bing I already had the answer: it was 26-28 in a doubles match.

One of the things I’m liking about bing is the way it displays results with a little “hover for a précis” beside them. So I wondered what Google would get.

Hmmm. Looks like Google got the wrong answer. Not sufficient to overturn your search engine preference overnight perhaps, but if you haven’t yet taken a good look at bing then you might be missing a trick,

Dual boot desde VHD con Windows 7 y con Windows Server 2008 R2

Guillermo Taylor — Sun, 05 Jul 2009 17:04:12 GMT

Como ya saben, tengo un ambiente configurado para correr Windows 7 en una partición y Windows Server 2008 en otra partición. Sin embargo, con esta nueva funcionalidad disponible en Windows 7 y en Windows Server 2008 R2, tengo entonces posibilidades de correr una demostración que requiera solo el VHD en cuestión y tener a mi disposición todo el ambiente actual, no el emulado, para ejecutar la demostración. Sospecho que debe haber otros escenarios y en la medida que los encuentre los compartiré con ustedes.

Si quieren saber como se hace esto, revisen este video en TechNet Edge y este excelente post en el blog de Keith Combs. Es larga la revisión pero les aseguro que vale la pena.

Recuerden que pueden probar Windows 7 y Windows Server 2008 R2 descargando las versiones de estos productos. De hecho, si todavía tienen una máquina de pruebas o una máquina virtual con versiones beta de estos productos, les recomiendo pasarse a las versiones nuevas de evaluación porque estas versiones dejan de tener soporte y están en modo de reinicio cada cierto tiempo. Para Windows Server 2008 R2, visiten este vínculo y para Windows 7 visiten este otro.

Saludos.

Herramienta web para comprobar el Soporte de aplicaciones y servidores Microsoft en entornos virtualizados

DavidCervigon — Sun, 05 Jul 2009 16:43:23 GMT

Hola

Mi compañero Mauricio, autoridad local en el soporte de “cosas” en entornos virtuales, me hace llegar la disponibilidad de una herramienta Web que nos ayudará en tres sencillos pasos a resolver la pregunta recurrente de si tal o cual producto esta o no soportado sobre tal o cual sistema de virtualización:

Esto junta por un lado los productos de Microsoft que han sido testeados y cuyo funcionamiento está garantizado (soportado) en entornos virtualizados, y por otro los Hypervisores que de los que forman parte del programa SVVP (Windows Server Virtualization Validation Program)

El acceso directo al asistente lo tenéis aquí:

Support Policy Wizard

Espero que os resulte de utilidad.

Saludos

David Cervigón

Dynamics AX Intelligent Data Management Framework in Beta

Freek — Sun, 05 Jul 2009 13:23:00 GMT

We zijn al een tijdje bezig om te zorgen dat de Dynamics AX database op orde te houden. Nu is de Intelligent Data Managment tool in Beta gegaan. Momenteel is daar het purgen van data een relevante aanvulling op de reguliere onderhoudstools omdat dit helpt bij een upgrade. Je kunt nu eerst je data opschonen alvorens ze mee te nemen naar het nieuwe systeem. Momenteel is de tool alleen verkrijgbaar voor onze Dynamics partners.

The beta version of the Intelligent Data Management Framework offers organizations the ability to analyze data storage on tables and indexes and helps in removing redundant historical data. This release is only available in U.S. English and only supports Microsoft SQL Server databases. A release with additional functionality is planned for Q1 of CY2010.

The framework will support the following releases:

Microsoft Business Solutions–Axapta® 3.0
Microsoft Dynamics AX 4
Microsoft Dynamics AX 2009 on Microsoft SQL Server 2005 and 2008

Sicherung von Hyper-V Maschinen mit Windows Server Backup

breiff — Sun, 05 Jul 2009 13:13:00 GMT

Nicht jeder von uns hat einen System Center Data Protection Manager (DPM) zur Sicherung seiner virtuellen Maschinen zur Verfügung. Den wenigsten ist bekannt, dass es auch eine Möglichkeit gibt, Hyper-V virtuelle Maschinen unter Windows Server 2008 mit Windows Server Backup zu sichern. Dazu sind ja auch nur ein paar kleine Befehle nötig. :-)

Gut beschrieben ist die ganze Vorgangsweise im KB958662. bzw. im Askcore Blog. (An dieser Stelle möchte ich mich bei unseren Lesern entschuldigen, dass ich es vorziehe auf den englischen Artikel zu verlinken, da ich die deutsche Version als nicht besonders gut leserlich empfinde).

Zunächst müssen Sie den Hyper-V VSS Writer von Windows Server Backup registrieren. Das funktioniert automatisch, indem man den Fix-It Button dieses Knowledgebase Artikels drückt.

Gehört man eher zu jenen, die lieber selber alle Befehle eingeben, können Sie diese Befehle auch direkt in der Registry selbst eintragen:

Click Start, click Run, type regedit, and then click OK.
Locate the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
Right-click CurrentVersion, point to New, and then click Key.
Type WindowsServerBackup, and then press ENTER.
Right-click WindowsServerBackup, point to New, and then click Key.
Type Application Support, and then press ENTER.
Right-click Application Support, point to New, and then click Key.
Type {66841CD4-6DED-4F4B-8F17-FD23F8DDC3DE}, and then press ENTER.
Right-click {66841CD4-6DED-4F4B-8F17-FD23F8DDC3DE}, point to New, and then click String Value.
Type Application Identifier, and then press ENTER.
Right-click Application Identifier, and then click Modify.
In the Value data box, type Hyper-V, and then click OK.
On the File menu, click Exit.

Nun können Sie die virtuellen Maschinen mit Windows Backup sichern. Bitte achten Sie hierbei darauf, dass alle Laufwerke gesichert werden, wo sich Dateien der zu sichernden virtuellen Maschine befinden. Virtuelle Maschinen ohne Integration Services schalten sich während des Backups in den Saved-State. Virtuelle Maschinen mit Betriebssystemen, die VSS nicht unterstützen (Windows 2000, Windows XP), schalten sich ebenfalls in den Saved-State. Virtuelle Maschinen mit dynamischen Datenträgern können nur offline gesichert werden.

Zu diesem Thema habe ich auch einen ausgezeichneten Webcast gefunden, den Sie hier ansehen können. Hier wird unter anderem auch gezeigt, wie das Restore funktioniert, und wie man mit ein paar PowerShell Befehlen identifizieren kann, welche Maschine welche ist.

Anbei noch ein Link zur Spezifikation von Hypersivor 2.0 für Windows Server 2008 R2.

Beitrag von Martina Grom

Winkey 쌤과 꼬알라의 Windows 7 만담 시리즈 관련…

백승주(Seung Joo Baek) — Sun, 05 Jul 2009 12:58:33 GMT

무더운 주말 잘 보내고 계시죠? 꼬알라입니다~! 2009년 2월 11일에 시작하여, 다음주면 만 6개월을 진행하였네요. Windows 7이라는 주제를 가지고 6개월 동안 한주도 빠짐없이… 만담내에서도 몇번 말씀드렸던 이야기지만, 처음에는 2-3편만 해보자라는 실험 정신(?)으로 시작한 이야기들이.. 22편.. 그리고 앞으로도 2-3편의 이야기를 더 진행하게 된 장기 프로젝트가 되어버렸습니다. Windows 7의 기업용 시나리오에 대해서는 처음부터 다루지 않을 예정으로 시작하였기에, 소재를 찾는 것.. 매주매주 산고의 고통(!)의 느낌으로 Winkey 쌤과.. Windows 7 RTM이 다가오고 있기에.. 슬슬 종영이 다가온다는 느낌이 오시는지요? 고화질 영상으로는 2.5G라는 대용량이 되어버렸고, 많은 사용자 입장에서의 이야기를 대부분 다(어떤 내용은 조금 오버일 정도로) 다뤘다고 살짝 생각하는데요.. 이쯤되면 꼬알라의 하얀집을 방문하시는 분들께 한번 여쭤볼 때가 된 것 같습니다. 만담...(read more)

Kurs MDOP: 50235 Managing Enterprise Desktops Using the Microsoft Desktop Optimization Pack

PL System Center — Sun, 05 Jul 2009 11:46:31 GMT

W ofercie edukacyjnej Microsoft pojawił się nowy kurs dotyczący Microsoft Desktop Optimization Pack - Managing Enterprise Desktops Using the Microsoft Desktop Optimization Pack. Nowy kurs trwa 5 dni i opisuje jak wykorzystać MDOP w celu optymalnego zarządzania infrastrukturą IT.

Kurs OpsMgr: 50231 System Center Operations Manager 2007: Advanced Management Pack Authoring

PL System Center — Sun, 05 Jul 2009 11:33:00 GMT

W ofercie edukacyjnej Microsoft pojawił się bardzo ciekawy i potrzebny kurs dotyczący tworzenie Management Pack do Operations Manager 2007 - System Center Operations Manager 2007: Advanced Management Pack Authoring. Do tej pory jedynym kursem o OpsMgr był kurs 50028, w którym zagadnienia związane z tworzeniem MP były tylko cześcią kursu.

Nowy kurs w całości jest poświecony tylko i wyłącznie zagadnieniom związanym z prawidłowym tworzeniem MP. Trwa on 3 dni i prowadzony jest na poziomie 400.

La newsletter de Juin

GuillaumeD — Sun, 05 Jul 2009 09:37:00 GMT

L’année fiscale est terminée et tout repart à zéro mais pas nos incidents :-)

Beaucoup de nouveautés ont été livrées l’an passé (Windows Server 2008, Hyper-V, SCVMM, DPM, App-V, j’en passe et des meilleures) : beaucoup de changements dans le code, le comportement ou encore les fonctionnalités et une adoption rapide par nos clients ont fait de ces douze derniers mois une année riche en apprentissage !

Le contexte financier a bien provoqué quelques remous mais rien qui n’a entamé notre détermination à rester à fond de 5ème et continuer à assister nos clients !

Un changement important à venir pour nous : notre déménagement à Issy-les-Moulineaux vers le milieu du mois de Juillet. Un grand projet qui prend forme qui va certainement changer certaines de nos habitudes mais qui a le bénéfice de nous apporter des bureaux tout neufs et tout brillants à quelques encablures de la Seine :-)

En attendant, nous vous souhaitons une bonne lecture.

Bing

Effets d’annonces et budget énorme mais ambitions humbles, Bing est le nouveau moteur de recherche de Microsoft.

Les efforts consentis ont été bénéfiques. Dans sa version US, Bing est très pertinent ce qui semble se vérifier avec la croissance de son utilisation outre-atlantique.

Vivement que la version finale pour la France soit disponible !

Server Virtualization Validation Program - Support Policy Wizard

Comment déterminer rapidement la politique de support d’un produit Microsoft exécuté dans un environnement virtualisé.

Lien : Support Policy Wizard

Microsoft File Server Migration Toolkit

Cet outil permet de simplifier la migration ou la consolidation des serveurs des fichiers.

Lien : Microsoft File Server Migration Toolkit

Windows 7 approche, MDT2010 également !

Michael Niehaus a publié plusieurs bulletins présentant les nouvelles fonctionnalités de MDT 2010 (Microsoft Deployment Toolkit). Ayant joué un peu avec la Beta 2, il s’avère en effet qu’il y a quelques changements significatifs.

Liens :

MDT 2010 New Feature #1: Logging directly to the network

MDT 2010 New Feature #2: Gathering virtualization details

MDT 2010 New Feature #3: Suspend and resume a Lite Touch task sequence

MDT 2010 New Feature #4: Folders everywhere

MDT 2010 New Feature #5: Support for multiple deployment shares

MDT 2010 New Feature #6: Drag and drop

MDT 2010 New Feature #7: Boot image creation optimized

MDT 2010 New Feature #8: No more visible command windows when booting Lite Touch Windows PE

MDT 2010 New Feature #9: Copy and paste support in the Deployment Workbench task sequence editor

MDT 2010 New Feature #10: Detection of signed drivers

MDT 2010 New Feature #11: Windows 7 and Windows Server 2008 R2 support

MDT 2010 New Feature #12: USMT 4.0 hardlink support

MDT 2010 New Feature #13: New task sequence templates

MDT 2010 New Feature #14: Database improvements

Il y en aura certainement d’autres alors n’hésitez pas à consulter le blog de Michael Niehaus régulièrement : http://blogs.technet.com/mniehaus/default.aspx

Ce que peuvent faire les accélérateurs IE8 pour vous

Courte présentation des accélérateurs Internet Explorer 8 pour trouver plus rapidement ce que vous cherchez.

Accelerators in IE8 Help Save Time!

Hypervisor Functional Specification v2.0: For Windows Server 2008 R2

Document publié sous le cachet Microsoft Open Specification Promise et détaille les spécifications de la prochaine version de l’hypervisor Microsoft.

Lien : Hypervisor Functional Specification v2.0: For Windows Server 2008 R2

Un peu de nostalgie pour finir

L’histoire de Microsoft de 1975 à 1995 (pour le moment) en vidéo et avec Bill Gates.

Lien : The History of Microsoft

Guillaume

Windows Core Support Escalation Engineer

For Sale – some gadgets and goodies

Keith Combs — Sun, 05 Jul 2009 04:23:34 GMT

I am going to start selling off some of the stuff taking up space in my drawers and home office. Some of this stuff is in mint condition so be sure and let me know if you have any questions. All of the photos are just stock photos from the internet. If you are concerned about wear and tear on any of the items, let me know and I’ll take a few pictures with my digital camera.

My wife has an ecommerce site for her costume business so I created a section there so I could easily take credit card transactions. I’ll probably put them up on eBay later. All sales are final. Most items have their original box and contents. USA and Canada sales and shipping only. Sorry.

Happy shopping @ Keith’s Gadgets and Electronics.

If you want to keep up with new items I am adding, follow me on twitter. My twitter account is twitter.com/keith_combs. I still have a number of items I’ll be adding over time and I don’t want to spam my blog too much.

Technet Webcast: Sparen Sie IT Kosten mit Windows Server 2008 R2 und Hyper-V

breiff — Sat, 04 Jul 2009 19:04:21 GMT

Für Ende Juli sagt sich ein interessanter Webcast an: am 23. Juli wird Chris Avis, Senior IT Pro Evangelist in diesem Webcast zeigen, wie man Virtualisierung zur Konsolidierung von Servern nutzen kann, wie man die Verwaltung von Hyper-V Servern erleichtert und wie man Deployments für Hyper-V und physische Maschinen plant. Ebenso wird auf Failover Clustering eingegangen.

Durch den Einsatz der Microsoft Assessment und Planning Accelerators können Deploymentkosten reduziert werden. Ebenso zeigt dieser Webcast Verbesserungen im Hyper-V Manager, im Server Manager, Powershell cmdlets.

Beitrag von Martina Grom

Quando la montagna va da Maometto: Microsoft Security Essentials (ex Morro)

Microsoft Italy PCfSV2 Team — Sat, 04 Jul 2009 17:16:38 GMT

Il post di Lorenza su MClips mi da la possibilità di aggiornarvi, anche se in ritardo :-(, dei progressi del famoso Microsoft “Morro” , l’antimalware gratuito di Microsoft di cui vi avevo detto all’epoca del suo annuncio . Sapevo che lo scorso 23 giugno sarebbe stata aperta la disponibilità limitata al download della prima beta pubblica, ma il limite di soli 75.000 copie e l’audience ristretta a poche nazioni (non l’Italia), come cita ancora il sito relativo , mi ha sinceramente scoraggiato dall’avvisarvi...(read more)

TechNet Blogs

DHCP Server Callout API usage

SQL Server ソリューション解説セミナー (7/15 - 17) 開催

Revisiting using a Zune with a MacBook Pro

Jun. 29 - Jul. 5 Hot-Fix KB articles Weekly Release - Windows Legacy Products

Windows 7 - Prerequisites, Considerations and evaluation - UPDATED

DFSR の デバッグログについて

Feedback Needed from IT Pro’s

Outlook 주소록에서 전체 주소 목록 또는 연락처를 먼저 표시하는 방법

More Floors Added to the Tower of Babel: Free-as-in-beer Maren Arabic Romanizer

DPM 2007 - Drive visualizzati come Standalone drive

BlogMS Monthly - Articles Published in June 2009

Adding the SSTP Magic to the UAG Charm

Step 1 - Enablement

Step 2 - Publishing

Step 3 - End-user Testing

Connexion VPN en SSTP sur un serveur Small Business Server 2008

Tennis as a way of testing search.

Dual boot desde VHD con Windows 7 y con Windows Server 2008 R2

Herramienta web para comprobar el Soporte de aplicaciones y servidores Microsoft en entornos virtualizados

Dynamics AX Intelligent Data Management Framework in Beta

Sicherung von Hyper-V Maschinen mit Windows Server Backup

Winkey 쌤과 꼬알라의 Windows 7 만담 시리즈 관련…

Kurs MDOP: 50235 Managing Enterprise Desktops Using the Microsoft Desktop Optimization Pack

Kurs OpsMgr: 50231 System Center Operations Manager 2007: Advanced Management Pack Authoring

La newsletter de Juin

For Sale – some gadgets and goodies

Technet Webcast: Sparen Sie IT Kosten mit Windows Server 2008 R2 und Hyper-V

Quando la montagna va da Maometto: Microsoft Security Essentials (ex Morro)

DFSR のデバッグログについて