Microsoft's official enterprise support blog for AD DS and more
New KB articles related to Directory Services for the week of 5/10-5/23.
971243
Gpresult.exe terminates unexpectedly displaying security options when using the "/v" flag on Windows Sever 2003 x64
970013
The "Active Directory Users and Computers" MMC window crashes when you try to find any object in Windows Server 2008 and Windows Vista systems
969308
You have to enter user credentials again even if you select the "Remember my password" option when you connect to the TS Gateway server from a Windows Vista SP1-based or Windows Server 2008-based Remote Desktop Connection 6.1 client
971198
Logoff from Windows Vista computer takes 5-10 minutes if there is no LDAP connectivity to forest root domain
971152
The Credentials Manager service does not save credentials when you try to map a drive by using a "net use" command together with the "/savecred" option
970485
Duplicate computer names are generated if you use a Windows Setup program to generate random names for a large number of computers
961715
Active Directory Certificate Services crashes during its startup process when the Certificate Lifecycle Manager Exit Module setting is enabled on Windows Server 2008-based systems
957414
Event Viewer crashes when you open a large event log file and sort log entries by one column on a Windows Vista-based or Windows Server 2008-based computer
971256
Error message when attempting to start the Windows Event Log Service: "Access denied"
971079
You cannot add a DFS replication member to a replication group on a Windows Server 2008 R2 Beta-based or Windows Server 2008 RC-based system if the added DFSR member comes from another domain
Hi all, Akhlesh here. Recently I’ve seen a few cases where the customers were getting event ID 22 on their Windows 2008 Terminal Services Licensing server (TSLS):
Log Name: System Source: Microsoft-Windows-TerminalServices-Licensing Date: Event ID: 22 Task Category: None Level: Warning Keywords: Classic User: N/A Computer: Description: The Terminal Services license server "TS licensing server name" does not have any Terminal Services client access licenses (TS CALs) installed and registered with the Microsoft Clearinghouse for product "Windows Server 2003 - Terminal Server Per Device CAL Token". Therefore, the Terminal Services license server cannot issue TS CALs of the type "Windows Server 2003 - Terminal Server Per Device CAL Token" to the terminal server "IP of a TS". To resolve this problem, install additional TS CALs as required.
Before I talk about the cause and resolution of this event, please follow the steps given below and make sure that the given conditions are true in your scenario*:
*If all the points given above are true in your case, you can ignore this event.
Now, let’s discuss why this warning event is still getting logged on that TSLS even when all the points discussed above are true in your scenario:
It looks like your TSLS is working the way it should. You are getting the event because of client machines which took TS CALs from a Windows 2003 TS Licensing Server which has been decommissioned in your domain. At the renewal time of the CALs for those clients, the TS forwarded the requests to the new w2k8 TSLS. The new TSLS didn’t find the references of those clients in its database so it couldn’t renew the CALs, therefore a warning event was resulted.
But after that it must have issued CALs to those clients (assuming that we have enough CALs available). This event is showing the IP of the TS because TS will interact with TSLS on client's behalf for the issuance of the TS CAL.
The event will stop occurring once TS CALs on all the clients will be renewed. To prove this theory, you can take a client machine for which the CALs is about to expire in the next few days. Then connect to a w2k3 TS, see if you get an event on w2k8 TSLS. Then check the list of issued CALs and see if that client is listed on the new TSLS or not.
- Akhlesh Sharma
Some concepts and troubleshooting methods regarding printing and Active Directory from our friends over at AskPerf.
http://blogs.technet.com/askperf/archive/2009/05/05/printing-and-active-directory.aspx
New KB articles related to Directory Services for the week of 4/26-5/2.
970770
Differences in NTDS Writer PostSnapshot behavior on Server 2003 vs Server 2008
958058
When you try to log on to a Windows XP SP3-based computer by using a roaming profile, the roaming profile cannot load.
960898
Name resolution is broken between a Windows Server 2003-based parent domain and its child domains, and among the child domains, when scavenging is configured on both the parent and child DNS zones
970875
Large Kerberos tokens cause WinRM requests to fail
970879
Blank Desktop on Windows Vista or Windows Server 2008
Ned here. The invite finally came through, and AskDS now supports a built-in MS Translation widget. It's linked on the left column (scroll down a bit). Simply select your native language and the blog will magically turn from English to Spanish, German, French, Italian, Russian, Polish, Chinese, Dutch, Japanese, Korean, Portuguese, or Arabic. Probably with occasionally hilarious mistranslations, but overall hopefully quite accurate and helpful.
Cool!
- Ned Pyle
New KB articles related to Directory Services for the week of 5/3-5/9.
969710
How to enable the half-open TCP connections limit in Windows Vista with Service Pack 2 and in Windows Server 2008 with Service Pack 2
971133
Verbose logging may have adverse effects on system performance
969902
Many services do not start when you enter a computer name that exceeds 15 bytes during the initial setup of Windows Vista or of Windows Server 2008
970914
How to Manually Restore Files Backed Up Using Windows Backup
971070
The Debug Diagnostics 1.1 Whitepaper is now available
967358
You receive error messages when you try to create a domain GPO or edit an existing domain GPO in a Windows Server 2008 Active Directory domain environment
Here is a nice overview of the new MPSReports and what it collects. Proactively running this before contacting support has been known to greatly reduce time to resolution. :-)
http://blogs.technet.com/askperf/archive/2009/05/01/two-minute-drill-the-new-mps-reports.aspx