Issue:
======
data encryption error in RDP
遠端桌面已中斷連線
因為資料加密錯誤，這個工作階段將結束。請嘗試重新連線到遠端電腦。 
Remote Desktop Disconnected
Because of an error in data encryption, this session will end. Please try connecting to the remote computer again.
Cause:
=====
Broadcom Advanced Control Suite property of IPv4 large send offload
Solution
========
To resolve it open the Broadcom Advanced Control Suite and disable IPv4 Large Send Offload and your problem will be solved.
問題：
當使用Windows 7+ IE8在網路上下載某些檔案時，會出現以下視窗，如果不小心將「開啟這類型檔案之前，一定要先問我」取消，想讓它再出現的話，可以這樣做。
1.找到 HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\AttachmentExecute 機碼。
2.在此機碼的下方，會看到類似{0002DF01-0000-0000-C000-000000000046}的機碼，右方會看到文件的類型。如下圖，如果我的doc或是xls類型的檔案下載時不會出現「開啟這類型檔案之前，一定要先問我」的視窗，請將{0002DF01-0000-0000-C000-000000000046} 刪除。
3.開啟IE，再嘗試下載該類型的檔案，即會出現詢問視窗。
問題描述︰SBS 2003/WINDOWS UPDATE無法正常更新
說明與方法︰
- 自動更新服務無法正常啟動, 手動去啟動服務會發生存取被拒
- 執行IE進行 Windows Update 則會發生 0x80070005的錯誤
- 手動安裝 AU Agent 在註冊DLL檔案發生 0x80070041D的錯誤
[Compare the windows update file]
good one: (from VM machine)
2009-11-18 10:17:25:171 536 408 Setup Update NOT required for C:\WINNT\system32\cdm.dll: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-18 10:17:25:171 536 408 Setup Update NOT required for C:\WINNT\system32\wuapi.dll: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-18 10:17:25:203 536 408 Setup Update NOT required for C:\WINNT\system32\wuapi.dll.mui: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-18 10:17:25:203 536 408 Setup Update NOT required for C:\WINNT\system32\wuauclt.exe: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-18 10:17:25:203 536 408 Setup Update NOT required for C:\WINNT\system32\wuaucpl.cpl: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-18 10:17:25:203 536 408 Setup Update NOT required for C:\WINNT\system32\wuaucpl.cpl.mui: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-18 10:17:25:218 536 408 Setup Update NOT required for C:\WINNT\system32\wuaueng.dll: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-18 10:17:25:218 536 408 Setup Update NOT required for C:\WINNT\system32\wuaueng.dll.mui: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-18 10:17:25:218 536 408 Setup Update NOT required for C:\WINNT\system32\wucltui.dll: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-18 10:17:25:234 536 408 Setup Update NOT required for C:\WINNT\system32\wucltui.dll.mui: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-18 10:17:25:234 536 408 Setup Update NOT required for C:\WINNT\system32\wups.dll: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-18 10:17:25:250 536 408 Setup Update NOT required for C:\WINNT\system32\wups2.dll: target version = 7.4.7600.226, required version = 7.4.7600.226
bad one: (which is SBS 2003)
2009-11-13 08:43:26:218 12224 244c Setup Update NOT required for C:\WINDOWS\system32\cdm.dll: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-13 08:43:26:218 12224 244c Setup Update NOT required for C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wuapi.dll\7.4.7600.226\wuapi.dll: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-13 08:43:26:218 12224 244c Setup Update NOT required for C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wuapi.dll\7.4.7600.226\wuapi.dll.mui: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-13 08:43:26:218 12224 244c Setup Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-13 08:43:26:218 12224 244c Setup Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-13 08:43:26:218 12224 244c Setup Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-13 08:43:26:218 12224 244c Setup Update NOT required for C:\WINDOWS\system32\wuaueng.dll: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-13 08:43:26:218 12224 244c Setup Update NOT required for C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-13 08:43:26:218 12224 244c Setup Update NOT required for C:\WINDOWS\system32\wucltui.dll: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-13 08:43:26:218 12224 244c Setup Update NOT required for C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-13 08:43:26:218 12224 244c Setup Update NOT required for C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll: target version = 7.4.7600.226, required version = 7.4.7600.226
2009-11-13 08:43:26:234 12224 244c Setup Update NOT required for C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll: target version = 7.4.7600.226, required version = 7.4.7600.226
在更新 AU Agent的時候, wuapi.dll也沒正確被複製到正常的資料夾
[windowsupdate.log]
2009-11-13 08:41:18:578 8244 2d7c Setup Starting file operations for section cdm
2009-11-13 08:41:33:640 8244 2d7c Setup Successfully copied source file C:\WINDOWS\SoftwareDistribution\WebSetup\cdm.dll to C:\WINDOWS\system32\cdm.dll.wusetup.2406118265.new
2009-11-13 08:41:33:796 8244 2d7c Setup Setup successfullly moved C:\WINDOWS\system32\cdm.dll.wusetup.2406118265.new to C:\WINDOWS\system32\cdm.dll
2009-11-13 08:41:33:796 8244 2d7c Setup File operations for section cdm completed successfully
2009-11-13 08:41:33:796 8244 2d7c Setup Starting file operations for section wuapi
2009-11-13 08:41:37:406 8244 2d7c Setup Successfully copied source file C:\WINDOWS\SoftwareDistribution\WebSetup\wuapi.dll to C:\WINDOWS\system32\wuapi.dll.wusetup.2406122015.new
2009-11-13 08:41:37:406 8244 2d7c Setup WARNING: Could not move C:\WINDOWS\system32\wuapi.dll to C:\WINDOWS\system32\wuapi.dll.wusetup.2406122031.bak due to 0x80070020
解決方法︰
1. 手動將以下檔案從 system32\SoftwareDistribution 資料夾複製到 C:\Winodws\System32 資料夾底下
- wuapi.dll
- wuapi.dll.mui
- wups.dll
- wups2.dll
2. 執行 regsvr32 filename 手動註冊以上的 dll 檔案
3. 把以下機碼手動刪除
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Setup\ServiceStartup]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Setup\ServiceStartup\wuapi.dll]
"TargetFile"="C:\\WINDOWS\\system32\\wuapi.dll"
"CacheFile"="C:\\WINDOWS\\system32\\SoftwareDistribution\\Setup\\ServiceStartup\\wuapi.dll\\7.4.7600.226\\wuapi.dll"
"RegistrationFlags"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Setup\ServiceStartup\wups.dll]
"TargetFile"="C:\\WINDOWS\\system32\\wups.dll"
"CacheFile"="C:\\WINDOWS\\system32\\SoftwareDistribution\\Setup\\ServiceStartup\\wups.dll\\7.4.7600.226\\wups.dll"
"RegistrationFlags"=dword:00000001
"NoVersionCheck"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Setup\ServiceStartup\wups2.dll]
"TargetFile"="C:\\WINDOWS\\system32\\wups2.dll"
"CacheFile"="C:\\WINDOWS\\system32\\SoftwareDistribution\\Setup\\ServiceStartup\\wups2.dll\\7.4.7600.226\\wups2.dll"
"RegistrationFlags"=dword:00000001
"NoVersionCheck"=dword:00000001
4. 打開 IE執行Windows Update, 已可正常更新
5. 重新開機檢查以下服務, 正常執行中, Windows Update也可正常安裝更新
- Automatic Updates
- Background Intelligent Transfer Service
- Cryptographic Services
Q. How to configure force tunneling for DA so that client are forced to use IP-HTTPS
A. To configure force tunneling, you must enable force tunneling on DirectAccess clients through Group Policy and add a special entry in the NRPT.
To enable force tunneling with Group Policy, enable the Computer Configuration\Policies\Administrative Templates\Network\Network Connections\Route all traffic through the internal network setting in the Group Policy object for DirectAccess clients.
For More Info: Choose an Internet Traffic Separation Design http://technet.microsoft.com/en-us/library/ee382262(WS.10).aspx
You can configure DirectAccess clients to send all of their traffic through the tunnels to the DirectAccess server with force tunneling. When force tunneling is configured, DirectAccess clients that detect that they are on the Internet modify their IPv4 default route so that default route IPv4 traffic is not sent. With the exception of local subnet traffic, all traffic sent by the DirectAccess client is IPv6 traffic that goes through tunnels to the DirectAccess server.
Enabling force tunneling has the following consequences:
- DirectAccess clients use only Internet Protocol over Secure Hypertext Transfer Protocol (IP-HTTPS) to obtain IPv6 connectivity to the DirectAccess server over the IPv4 Internet. IP-HTTPS-based connections have lower performance and higher overhead on the DirectAccess server than 6to4 and Teredo-based connections.
- The only locations that a DirectAccess client can reach by default with IPv4 traffic are those on its local subnet. All other traffic sent by the applications and services running on the DirectAccess client is IPv6 traffic sent over the DirectAccess connection. Therefore, IPv4-only applications on the DirectAccess client cannot be used to reach Internet resources, except those on the local subnet.
- Connectivity to the IPv4 Internet must be done through servers and devices on the intranet that translate the IPv6 traffic from DirectAccess clients to IPv4 traffic for the IPv4 Internet. If you do not have the appropriate servers or translators, your DirectAccess clients will not have access to IPv4 Internet resources, even though they are directly connected to the IPv4 Internet.
This is by design.
Windows 2000 SP4-based virtual machine only support IDE controller.
958667 Error message when you add a SCSI controller to a Windows 2000 SP4-based virtual machine in Hyper-V Manager on server that is running Windows Server 2008: "STOP c0000263"
<http://support.microsoft.com/kb/958667/en-us>
