User Profile
Mark_Albin
Brass Contributor
Joined Feb 11, 2023
User Widgets
Recent Discussions
Migrating from Server 2012 Essentials to Server 2019
I have this problem with the SYSVOL folder stuck in the initialized status. The new domain controller (DC2) errors are below. I have tried all the following, but it still does not pass the initial replication. If I turn DC1 off, the domain group policy fails, and authentication breaks... 1. Check Connectivity and Replication Partners: Checked the network connectivity between the domain controllers. Used repadmin /showrepl to check the replication status and ensure that the domain controller is communicating with its partners. New Domain Controller I also ran repadmin /syncall /AdeP on both the old and new domain controllers and it returned no errors. 2. Force DFS Replication: You can try to force DFSR to check with Active Directory by running the following command in an elevated command prompt: DFSRDIAG POLLAD Below is a screenshot of DC2 the SYSVOL on the new server, the folders are there, but policies and scripts, etc. are not being replicated.Re: Issues enrolling devices
There could be several reasons why your Samsung tablets are getting stuck while enrolling in Intune and installing applications. Here are a few possible solutions that you can try: Check the internet connection: Ensure that the tablets have a stable and strong internet connection during the enrollment process. Slow or intermittent connectivity can cause the installation to take longer than expected or fail altogether. Check the device compatibility: Ensure that the tablets meet the minimum system requirements for the Intune and Authenticator applications. Older devices may not support the latest versions of the applications. Clear app cache and data: Try clearing the cache and data of the Authenticator and Intune applications on the tablets. This can help resolve issues related to app installation and performance. Check for conflicting apps: Check if any other applications installed on the tablets could be conflicting with the installation of the Authenticator and Intune applications. Try uninstalling any such apps and retrying the enrollment process. Contact Microsoft support: If none of the above solutions work, you may need to contact Microsoft support for further assistance. They can help you troubleshoot the issue and provide a resolution specific to your scenario. I hope this helps you resolve the issue with enrolling your Samsung tablets in Intune.Re: Azure P2S VPN
Yes, there are alternatives to a forced tunnel VPN through Virtual WAN in Azure for your scenario. One option is to use Azure Point-to-Site (P2S) VPN. With Azure P2S VPN, you can create a secure connection between the external company's computer and the Azure Virtual Desktop, without the need for a static IP address. Azure P2S VPN allows remote users to securely connect to an Azure virtual network from any location using an Internet connection. It provides secure access to resources on the virtual network, such as Azure Virtual Desktop. To set up Azure P2S VPN, you need to create a virtual network gateway, configure the VPN client, and establish the connection. The VPN client can be installed on the external company's computer. Once the connection is established, the external company can access the Azure Virtual Desktop securely. Another option is to use Azure Bastion. Azure Bastion is a fully managed platform as a service (PaaS) that provides secure and seamless RDP/SSH connectivity to Azure Virtual Machines (VMs) directly through the Azure Portal. Azure Bastion eliminates the need for a VPN or public IP address. It provides an isolated and secure connection to the Azure Virtual Desktop. To set up Azure Bastion, you need to create a Bastion host and configure the RDP settings on the Azure Virtual Desktop. Once the Azure Bastion connection is established, the external company can securely access the Azure Virtual Desktop through the Azure Portal. Both Azure P2S VPN and Azure Bastion provide secure and isolated access to the Azure Virtual Desktop without the need for a VPN or public IP address. You can choose the option that best suits your requirements and budget. I hope this helps!Re: Sharepoint - Unknown issue
I understand that it can be frustrating to experience issues with SharePoint, especially when it's a part of your onboarding process for new employees. I'll try to provide some steps to help you troubleshoot and potentially resolve the issue. Please note that some of these steps might require SharePoint admin privileges. Check Microsoft 365 Service Health: Verify if there are any ongoing issues or incidents with SharePoint or related services on the Microsoft 365 Admin Center (https://admin.microsoft.com/). You can find the service health information under the "Health" section. Verify sharing settings: Ensure that the sharing settings in the SharePoint admin center are still configured correctly. To do this, go to the SharePoint admin center (https://%3Cyour-domain%3E-admin.sharepoint.com/) > More features > Sharing > check the sharing settings for your organization and the specific site you're trying to invite users to. Review User Licenses: Make sure the users you're trying to invite have the appropriate licenses assigned. You can check this in the Microsoft 365 Admin Center (https://admin.microsoft.com/) > Users > Active users. Check SharePoint permissions: Verify that you still have the necessary permissions to invite users. You can check this by navigating to the SharePoint site > Settings (gear icon) > Site permissions. Test with another user: If possible, ask another user with similar permissions to try inviting new starters to the SharePoint site. This will help you determine if the issue is specific to your account or a wider problem. Review Azure AD settings: Check your Azure AD settings to ensure there are no recent changes or issues related to user provisioning. You can access Azure AD through the Azure portal (https://portal.azure.com/) > Azure Active Directory. I hope this helps!Re: What happens to Cluster shared volumes during network outage?
Based on your description, it seems that the network outage caused the Hyper-V hosts to lose connectivity to the CSV volumes, which resulted in the VMs being stopped and the cluster services being interrupted. This is because the CSV volumes are a shared storage resource that relies on the network for communication between the hosts and the storage. Your understanding of the SameSubnetDelay and SameSubnetThreshold settings is correct. These settings are used by the cluster to determine how long to wait before taking action when a host becomes unavailable within the same subnet. In the case of a complete network blackout, these settings do not apply, and the remaining hosts will take action immediately. Regarding the CSV volumes, it's possible that the volumes that were not lost were owned by the hosts that were still up and running. When a host loses connectivity to a CSV volume, it will drop the volume, and the ownership of the volume will be transferred to another host in the cluster. If a host is the owner of a CSV volume and it loses network connectivity, the ownership will not be transferred to another host until the SameSubnetThreshold has been exceeded. In terms of preventing this from happening again during network maintenance, creating a separate network for heartbeat communication is a good idea. This will provide an additional layer of redundancy and help ensure that the cluster can remain online during a network outage. Additionally, you may want to consider implementing a redundant storage network, such as a separate FC fabric, to provide additional resilience for the CSV volumes.Re: Clone a Windows 2016 Server HDD to a bootable SSD for replacement/backup
Steven_A113AR5 Yes, Microsoft Server 2016 has a built-in tool called "Windows Server Backup" that can be used to clone the HDD to an SSD, including replicating the drive partitions. Here are the general steps to use this tool: Connect the SSD to the machine and make sure it is recognized by the operating system. Launch "Windows Server Backup" from the Administrative Tools menu. Select "Local Backup" and then "Backup Once" to create a one-time backup job. Choose the "Custom" option and then select the "Bare Metal Recovery" option to include all partitions in the backup. Specify the destination for the backup, which could be a network location or an external hard drive. Review the settings and start the backup job. Once the backup is complete, you can swap out the HDD with the SSD and boot up the machine. If the machine does not boot up successfully, you may need to adjust the boot order in the BIOS settings. As for saving a backup clone in case of the drive's failure, you can use the same "Windows Server Backup" tool to create periodic backups and store them in a safe location. You can also use a hardware fingerprint to ensure that the backup image can only be restored on the same machine. This can be done using tools like Windows Deployment Services or System Center Configuration Manager. If you prefer a third-party cloning tool, there are many options available such as Acronis True Image, EaseUS Todo Backup, and Macrium Reflect. These tools offer more advanced features and can be more user-friendly than the built-in Windows tool. Hope this helps!Re: Online Troubleshooting Service is not enabled for this version of Windows.
Harshit69 I hope this helps you out. If you are receiving the message "Windows Online Troubleshooting Service is not enabled for this version of Windows" when attempting to run troubleshooters in Windows 11, it's possible that the service is not enabled or that it is not available for your particular version of Windows. Here are some steps you can take to troubleshoot the issue: Check if the service is enabled: Open the Services app by typing "services.msc" in the search bar and pressing Enter. Look for the "Windows Remote Management (WS-Management)" service and check if it is running. If it is not running, right-click on it and select "Start." Then, right-click on the service again and select "Properties." Under the "Startup type" drop-down menu, select "Automatic" and click "Apply" to ensure that the service starts automatically with Windows. Use a local troubleshooter: If you are unable to use the online troubleshooter, try using a local troubleshooter instead. To do this, open the Settings app and go to "System" > "Troubleshoot." Here, you can select the troubleshooter you want to run and follow the prompts to diagnose and fix the issue. Use command-line tools: If you have some technical expertise, you can try using command-line tools to troubleshoot the issue. For example, you can use the "netsh winsock reset" command to reset the Windows Sockets API, which can help resolve network-related issues. Update Windows: Make sure that your system is up-to-date with the latest Windows updates. To do this, go to Settings > Update & Security > Windows Update and check for any available updates. Install any updates that are available and then restart your computer. Use third-party tools: If the built-in troubleshooters are not working, you can try using third-party tools that are designed to diagnose and fix specific issues. There are many reputable programs available that can help you troubleshoot and repair various aspects of your system.Re: Which Port to use (iprimus email address, Starlink Internet, Microsoft Outlook)
kysa351 It is possible that your ISP (Starlink Internet) is blocking outgoing connections on port 25, which is commonly used for sending email, to prevent spam. This is a common practice among ISPs to prevent spam and other email-related security issues. In such cases, using an alternative port like 587 is recommended, as you have already tried. However, some email servers may require a specific port to be used for outgoing email. In the case of Iprimus, they may require port 25 to be used for outgoing email. To troubleshoot the issue, you can try the following: Double-check your email settings in Microsoft Outlook to ensure that you have entered the correct email address, username, password, and server settings. Try using a different email client, such as Thunderbird, to see if the issue persists. This can help identify if the problem is with Microsoft Outlook or the email server. Try different port numbers for outgoing email, such as 465 (SSL/TLS), 2525, or 587 (TLS), to see if any of these work. Contact your email service provider (Iprimus) and ask them for the correct port number to use for outgoing email. They may also be able to provide additional support to help you resolve the issue. I hope this helps!Re: Set folder permissions to O365 Group members PS
FcoManigrasso This is how would do this: Yes, there is another way to set default permissions for the Outlook calendars of members of a specific Office 365 group using PowerShell. You can use the following command to retrieve the members of the Office 365 group: Get-UnifiedGroupLinks -Identity <groupname> -LinkType Members This will return the members of the group. You can then loop through the members and set the default permissions for their calendars using the following command: Add-MailboxFolderPermission -Identity <useremail>:\Calendar -User <useremail> -AccessRights Editor Replace <useremail> with the email address of the group member and <groupname> with the name of the Office 365 group. You can put these commands together in a script to automate the process for all members of the group. Here's an example: $members = Get-UnifiedGroupLinks -Identity <groupname> -LinkType Members foreach ($memberin $members) { $user = Get-Mailbox -Identity $member.PrimarySmtpAddress Add-MailboxFolderPermission -Identity $user:\Calendar -User $user.PrimarySmtpAddress -AccessRights Editor } This script will retrieve the members of the group, loop through them, retrieve their mailbox, and set the default permissions for their calendar. I hope this helps you.Re: Azure B2B account accessing Exchange365 Shared Mailbox
MikeGrove Hello, Here are a few things I would check to troubleshoot this issue: 1. Verify that the user account has the necessary permissions to access the shared mailbox. You mentioned that the account has been added to the mailbox under "Send as" and "Read and Manage", but it's worth double-checking that the permissions were applied correctly. You can do this by reviewing the mailbox permissions in Exchange Online, or by running the following PowerShell command: Get-MailboxPermission -Identity <shared mailbox> 2. Make sure the user account is using the correct credentials to access the shared mailbox. If the user is accessing the mailbox through Outlook or another email client, they may need to manually enter the shared mailbox credentials instead of their own. 3. Check if there are any mailbox access policies or security restrictions that might be blocking the user from accessing the shared mailbox. You can review the mailbox access policies and security settings in Exchange Online, or by running the following PowerShell command: Get-Mailbox <shared mailbox> | fl *policy*,*restriction* 4. If the issue persists, try removing the user's permissions from the shared mailbox and then re-granting them. Sometimes this can resolve permission-related issues. I hope this helps...Re: My Laptop Doesn't Connect to the External Monitor after the Latest Windows 11 Update 16.02.2023
ismailulusoy I would try the following. Check your connections: Make sure that your monitor is correctly connected to your laptop and that both the power cable and the display cable are securely plugged in. If you're using a VGA or HDMI cable, try unplugging it and plugging it back in to ensure a proper connection. Check your display settings: Make sure that your laptop is set to use the external monitor as its display. To do this, right-click on your desktop and select "Display Settings." Under "Multiple Displays," ensure that "Extend desktop" is selected. Update your graphics driver: Make sure that your graphics driver is up-to-date. You can do this by going to the manufacturer's website and downloading the latest driver for your graphics card. Once downloaded, install the driver and then restart your computer. Try a different cable: If you're using a VGA or HDMI cable, try using a different one to see if that resolves the issue. Use the Project feature: Windows 11 includes a feature called "Project," which allows you to project your laptop screen onto an external display. To access this feature, press the Windows key + P. From there, you can select the display mode you want to use. Restart your computer: Sometimes, a simple restart can fix connectivity issues between your laptop and the external display. Use the "Detect" feature: If your laptop is not recognizing the external monitor, try using the "Detect" feature in the Display Settings. To do this, right-click on your desktop and select "Display Settings." Scroll down to the "Multiple Displays" section, and click on the "Detect" button. This will force Windows to look for any connected displays and may help to resolve the issue. Check for Windows updates: Make sure that your laptop is up-to-date with the latest Windows updates. To do this, go to Settings > Update & Security > Windows Update, and click on "Check for updates." If there are any updates available, install them and then restart your computer. Use a different display adapter: If you're using a display adapter, such as a USB-C to HDMI adapter, try using a different one to see if that resolves the issue. Use the manufacturer's display software: Some laptop manufacturers include their own display software that may be more compatible with their hardware. Check to see if your laptop manufacturer offers any display software, and try using it to connect to your external monitor. Check your display and laptop compatibility: Make sure that your external monitor is compatible with your laptop's graphics card, and that it supports the display resolution that you're trying to use. You can check the compatibility of your laptop and external display by consulting their user manuals or by contacting the manufacturer. If none of these steps work, you may need to contact the manufacturer of your laptop or the external monitor for further assistance. It's also possible that the latest Windows 11 update has introduced a bug or compatibility issue, in which case you may need to wait for a future update or patch to be released. I hope this helps.Re: Name of tenant
ArKulha Hello, When creating a new Microsoft Azure tenant or Office 365 tenant, the tenant name can include hyphens, so "abc-mycompany" would be an acceptable tenant name. However, please note that when choosing a tenant name, there are certain restrictions that must be followed. For example, the name must be unique within the Azure Active Directory (AAD) and Office 365 environment, and it cannot include certain special characters such as spaces or slashes. Additionally, the tenant name cannot be changed once it has been created. So as long as the name "abc-mycompany" is not already in use by another tenant in the AAD or Office 365 environment, and it meets all the other requirements for a valid tenant name, you should be able to use it for your new tenant. Hope this helps!Re: Uninstall win32 app without uninstall.exe in programfiles folder
TechSkills This is what I would try; if the application does not have a valid uninstall string in the registry and the uninstaller is missing, you may have to resort to alternative methods to uninstall it. Here are a few options you can try: 1. Reinstall the application: Sometimes, reinstalling the application can help fix the uninstaller. Download the latest version of RapidTyping and install it again, then try to uninstall it as usual. 2. Use a third-party uninstaller: There are many third-party uninstallers available that can help remove stubborn applications. Some popular options include Revo Uninstaller, IObit Uninstaller, and Geek Uninstaller. These programs scan your computer for installed programs and offer a more thorough removal process than the standard Windows uninstaller. 3. Manual uninstall: If all else fails, you can try to manually uninstall the program. This method requires some technical expertise and should be approached with caution. Here are the general steps to follow: A) End any processes related to the program in the Task Manager. B) Delete the program folder in C:\Program Files. C). Search for any remaining files or folders related to the program and delete them. D) Open the Registry Editor (regedit) and delete any registry keys associated with the program. Be careful not to delete unrelated keys. Note: Manually deleting registry keys can be risky and may cause problems with your system if done incorrectly. It's recommended to ALWAYS create a backup of your registry before making any changes. 4. Use Endpoint Manager to create a custom script: If you're using Endpoint Manager, you can create a custom script to uninstall RapidTyping. Here's an example PowerShell script you can use: # Get the program name from the DisplayName in the registry $programName = (Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Where-Object {$_.DisplayName -like "*RapidTyping*"}).DisplayName # Uninstall the program using the program name & "$($env:windir)\System32\msiexec.exe" /x $(Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Where-Object {$_.DisplayName -like "*$programName*"}).UninstallString /qn This script searches the registry for the program name and uninstalls it using the uninstall string. To use this script in Endpoint Manager, you can create a new custom script and paste the code into the script editor. Then, assign the script to the devices you want to run it on. It's ALWAYS recommended to back up your system and registry before attempting to uninstall any program manually or using a third-party uninstaller.Re: Internet Properties (AKA Internet Options) settings apply not only to Internet Explorer
Thiago27 I hope this helps in answering your questions... Internet Options is a control panel in Windows that allows users to customize their web browsing experience. In Windows 11, Internet Explorer is still available but it's not the default browser anymore; instead, Microsoft Edge is the "Microsoft" recommended browser. However, Internet Options is still available in Windows 11, and some software connections can be influenced by its settings. Here are answers to your questions: 1. How to determine which software connections are influenced by IO's settings, including its browsing story/temporary files? Internet Options settings can affect various software connections, but it's difficult to determine which connections are impacted as it depends on the specific software and the settings that have been configured. However, in general, the settings can affect web browsing, downloading files, and accessing certain types of content on the internet. Additionally, the settings can also affect the temporary files and browsing history stored on the computer. 2. Will IO's settings be moved to another menu (e.g. "Settings")? Since some software is affected by IO's settings, shouldn't it be placed in a more convenient place? In Windows 11, Internet Options is still available in the same location as it was in earlier versions of Windows. It's unlikely that the settings will be moved to another menu, but it's possible that some of the settings may be moved to a more convenient location in the future. However, for now, if you need to access the Internet Options settings, you can do so by opening Internet Explorer and clicking on the "Settings" gear icon in the top-right corner of the window. 3. Would poor IO configuration pose a security risk? Yes, a poor configuration of Internet Options settings can pose a security risk. For example, if you don't configure the security settings correctly, you may be vulnerable to malware, phishing attacks, and other security threats. Additionally, if you don't clear your browsing history and temporary files regularly, it may be possible for others to access your personal information. 4. Why was "Enhanced Protection Mode" removed from IO? In Windows 11, Internet Explorer has been updated to version 11, and Enhanced Protection Mode has been removed. This is because Enhanced Protection Mode was introduced in Internet Explorer 10 to provide additional security protections against certain types of attacks, but these protections are no longer necessary in Internet Explorer 11 as it includes modern security features like SmartScreen and AppContainer. 5. Are IOs settings found elsewhere? Internet Options settings are only available in Internet Explorer. However, if you're using Microsoft Edge as your default browser, you can access similar settings in the Edge settings menu. To access these settings, open Microsoft Edge, click on the three-dot menu in the top-right corner of the window, and select "Settings". From there, you can access various settings related to your browsing experience.Re: TPM Attestation Not Supported after AMD Ryzen Upgrade
ultimatediddy After looking into this and based on the information you have provided, it seems that the issue may be related to the TPM firmware version not being compatible with the newer AMD Ryzen 7 5700x CPU. To troubleshoot this issue, you may want to try the following: Check the TPM firmware version: Check the TPM firmware version in the BIOS settings to see if it's up to date. If it's not up to date, update the firmware to the latest version available on the motherboard manufacturer's website. Check the TPM module connection: Check the TPM module connection to ensure that it's properly connected and seated in the motherboard. Check for any conflicting settings: Ensure that there are no conflicting settings in the BIOS that could be causing the issue. For example, if there's an option to enable both the fTPM and the hardware TPM, try disabling one of them to see if it makes a difference. Contact the motherboard manufacturer: Contact the motherboard manufacturer's technical support team for further assistance. They may be able to provide additional troubleshooting steps or suggest a solution to the problem. Consider rolling back the BIOS update: If you recently updated your BIOS, consider rolling it back to the previous version to see if that resolves the issue. Some BIOS updates can cause compatibility issues with hardware components. It's worth noting that TPM attestation is not required for the TPM to function as a secure storage for encryption keys, so if you're not planning on using attestation, this issue may not be a significant problem for you. However, if you require attestation, you may need to explore other options, such as using a separate hardware TPM module that's compatible with your system.Re: Browser launches Windows Explorer for file locating, but then freezes up. Dialog inaccessible.
klineg Hello, This issue may be caused by a number of factors, including a compatibility issue between the browser and Windows 11, a conflict with another software or hardware component, or a problem with the browser itself. Here are some steps you can try to resolve the issue: Restart your computer: Sometimes, simply restarting your computer can resolve the issue. Update your browser: Make sure that your browser is up to date with the latest version. Disable extensions: Try disabling any extensions you have installed in your browser to see if one of them is causing the issue. Check for compatibility: Check to see if there are any known compatibility issues between your browser and Windows 11. Run a virus scan: Run a full virus scan on your computer to make sure that your system is free from malware. Update your drivers: Make sure that all your drivers are up to date, especially your graphics card driver. Try a different browser: If the issue persists, try using a different browser to see if it resolves the issue. https://www.itms-us.com
