Vulnerable server : KB4025339 or superseding KB cannot be found
"The remote Windows host is missing security update KB4025339. It is, therefore, affected by multiple vulnerabilities :" The server is running Server 2016 version 1607 build 14393.5356 and is patched monthly, the latest patch being KB5017305. The issue I have is that the Microsoft Update Catalogue has broken the links between KB superseded versions and I'm not able to locate the relevant patch details to remediate CVE-2017-8486 :: Critical level Server vulnerability.Server 2016 support.
Why since January 2022 Microsoft has broken every OS? After several more updates, Windows Server 2016 refuses to let new users have access to the creation of a new profile. Second, the user needs to be elevated to a power user to create his profile but, once in their desktop environment, nothing works not even with administrator rights. Any thoughts?
Windows server 2016 page file too small
Hi, We are sporadically seeing following issue while invoking jvm to execute Sonarqube scans. We have increased the virtual memory and manually configured it to be between 4g (inital) to 8g (max). I have attached the complete error log along with windows configuration in the attachments. Appreciate your feedback. OpenJDK 64-Bit Server VM warning: INFO: os::commit_memory(0x0000000200000000, 262144000, 0) failed; error='The paging file is too small for this operation to complete' (DOS error/errno=1455)
Can some one enable the windows server 2016 guest account without admin access?
I have a windows server 2016 in one of my clients office. It is accessible to many people physically. I noticed that the guest account automatically enables it from time to time even though I disable it every time. Only I have the admin password. Can this be done by hackers. Server is not connected to the internet.Direct Mode didn’t work on ReFS formated Cluster Shared Volumes
Hi, why is direct access not possible with a ReFS format CSV volume? Instead of direct access, all reFS formatted CSVs that are provided by a SAN runs with "FileSystemRedirected". This behavior is critical because the "FileSystem Redirected" mode, compared to direct access, has up to 90% or more performance losses depending on the environment. Neither the fact that ReFS formatted CSV only run in "FileSystem Redirected" mode nor the associated performance penalties are mentioned in any official Microsoft statement. On the contrary, Microsoft actively recommends using ReFS for VHDX files. That is why, like many others, I have formatted the CSV with ReFS since the server in 2016, because I hoped that this would be an advantage for the customer systems. Unfortunately, this procedure led to the opposite and it was not easy to find the reason for it. Mainly because Microsoft has absolutely nothing documented about this behavior. I personally had to postpone more than 100 TB of data on various customer systems over the past few months in order to eliminate this problem and to bring the CSV formatted with ReFS back to NTFS. This action cost my company a considerable amount and also led to massive annoyance of the customer. However, if you know what to look for, you can now find a lot of posts on the Internet that confirm this behavior. Here are a few examples. https://github.com/MicrosoftDocs/windowsserverdocs/issues/2051 https://www.hyper-v-server.de/hypervisor/performance-probleme-hyper-v-cluster-mit-san-storage-und-csvs-mit-refs-formatiert/ https://techcommunity.microsoft.com/t5/failover-clustering/understanding-the-state-of-your-cluster-shared-volumes/ba-p/371889 https://www.windowspro.de/marcel-kueppers/refs-ntfs-vor-nachteile-dateisysteme-server-2016 https://www.wowrack.com/blog/microsofts-latest-system-refs-compared-to-ntfs/ https://4sysops.com/archives/windows-server-2019-cluster-shared-volumes-best-practices/ https://social.technet.microsoft.com/Forums/ie/en-US/6b2dcc4f-e735-4700-81f3-df45d94e7e01/refs-for-a-hyperv-csv-volume?forum=winserverhyperv https://forums.veeam.com/veeam-backup-replication-f2/latest-veeam-community-forums-digest-oct-2-oct-8-t46019.html Therefore, I now spare myself any further details and come directly to my demand. If ReFS does not fundamentally support direct mode, then I also expect Microsoft to publicly clarify it accordingly and also clearly indicate which disadvantages could arise if the CSVs are formatted with ReFS. If it should work and there is only a bug in between, please finally fix it. This problem has existed since Server 2016, so enough time should have passed to fix the problem. Best Regards from Germany Alex
Server 2016 Std DNS BPA Errors
I have three DNS errors and a large number of warnings which I cannot resolve. There is also a problem with Windows Time which cannot resolve the time server and defaults to the CMOS clock. There is only one ethernet adaptor: IPConfig/all gives: Windows IP Configuration Host Name . . . . . . . . . . . . : XXX-Server Primary Dns Suffix . . . . . . . : XXX.local Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : XXX.local Ethernet adapter Ethernet: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) I210 Gigabit Network Connection Physical Address. . . . . . . . . : AC-1F-6B-6A-2F-F5 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::f8db:3ccb:4fb6:a153%12(Preferred) IPv4 Address. . . . . . . . . . . : 10.0.0.100(Preferred) Subnet Mask . . . . . . . . . . . : 255.0.0.0 Default Gateway . . . . . . . . . : 10.0.0.1 DHCPv6 IAID . . . . . . . . . . . : 61611883 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-22-E0-CA-14-AC-1F-6B-6A-2F-F5 DNS Servers . . . . . . . . . . . : 10.0.0.100 127.0.0.1 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter isatap.{7E07F518-866F-449E-8032-3F6AAF177C0F}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter Teredo Tunneling Pseudo-Interface: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes DCDiag /test:dns gives: Directory Server Diagnosis Performing initial setup: Trying to find home server... Home Server = XXX-Server * Identified AD Forest. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\XXX-Server Starting test: Connectivity ......................... XXX-SERVER passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\XXX-SERVER Starting test: DNS DNS Tests are running and not hung. Please wait a few minutes... ......................... XXX-SERVER passed test DNS Running partition tests on : ForestDnsZones Running partition tests on : DomainDnsZones Running partition tests on : Schema Running partition tests on : Configuration Running partition tests on : XXX Running enterprise tests on : XXX.local Starting test: DNS Test results for domain controllers: DC: XXX-Server.XXX.local Domain: XXX.local TEST: Dynamic update (Dyn) Warning: Failed to delete the test record dcdiag-test-record in zone XXX.local XXX-Server PASS PASS PASS PASS WARN PASS n/a ......................... XXX.local passed test DNS Any help gratefully received.
