Posts

Active Directory Command Line One-Liners

Domain Controllers Nltest /dclist:%userdnsdomain% Domain Controller IP Configuration for /f %i in (’dsquery server -domain %userdnsdomain% -o rdn’) do psexec \\%i ipconfig /all Stale computer accounts dsquery computer domainroot -stalepwd 180 -limit 0 Stale user accounts dsquery user domainroot -stalepwd 180 -limit 0 Disabled user accounts dsquery user domainroot -disabled -limit 0 AD Database disk usage for /f %i in (’dsquery server -domain %userdnsdomain% -o rdn’) do dir \\%i\admin$\ntds Global Catalog Servers from DNS dnscmd %logonserver% /enumrecords %userdnsdomain% _tcp | find /i "3268" Global Catalog Servers from AD dsquery * "CN=Configuration,DC=forestRootDomain" -filter "(&(objectCategory=nTDSDSA)(options:1.2.840.113556.1.4.803:=1))" Users with no logon script dsquery * domainroot -filter"(&(objectCategory=Person)(objectClass=Us...

NT Storage Device Stack

Image
Today we are going to discuss the NT Storage Device Stack in brief. I am sure most of you would have encountered a server hang issue where the one of the Antivirus or Storage driver was pointed out to be the root cause of the issue. It is important to understand the layers which are in picture when you are trying to write a file to the disk, because every I/O operation in windows is done via IRPs (I/O Request Packets - Data structures representing the I/O) and these IRPs have to pass through all the layers to achieve the completion of the task and any of these layer can potentially block the I/O from completion mostly due to code bug or at times due to the workload. NT-based operating system class and filter drivers for peripheral storage devices act as an interface between any intermediate or highest level drivers layered above the class or filter driver and a system-supplied port driver. I/O requests from a user application or kernel component reach storage class drivers through ...

Clustering and HA Resources -- clustering Blog

General Resources · Cluster Team Site: Clustering Technical Resources · Guide: Failover Clustering Deployment · Guide: Validating Hardware for a Failover Cluster · Guide: Migrating Cluster Settings · Guide: Configuring the Quorum in a Failover Cluster · Guide: Configuring Accounts in Active Directory · Guide: Configure a Service or Application for High Availability · Guide: Modifying Settings for a Failover Cluster · Guide: Installing a Failover Cluster · Guide: Creating a Failover Cluster · Guide: Cluster Requirements · Guide: Validating a cluster · Guide: Managing a Failover Cluster · Guide: The Failover Cluster Management Snap-In · TechNet: Support Policy · Webcast: Top 10 Windows Server 2008 Failover Clustering Enhancements over Windows Server 2003 Clustering, Based on Best Practices (Level 300) · Webcast: Failover Clustering 101 · Webcast: Achieving High Availability with Windows Server “Longhorn” Clustering (Le...

Windows Server 2008 Step-by-Step Guides

These step-by-step guides help IT Professionals learn about and evaluate Windows Server 2008. Creating_and_Deploying_Active_Directory_Rights_Management_Services_Templates_Step-by-Step_Guide.doc Deploying Active Directory Rights Management Services in an Extranet Step-by-Step Guide.doc Deploying Active Directory Rights Management Services with Microsoft Office SharePoint Server 2007 Step-By-Step Guide.doc Deploying SSTP Remote Access Step by Step Guide.doc Server Core Installation Option of Windows Server 2008 Step-By-Step Guide.doc Server Manager Scenarios Step-by-Step Guide.doc Step-by-Step Guide for Configuring a Two-Node File Server Failover Cluster in Windows Server 2008.doc Step-by-Step Guide for Configuring a Two-Node Print Server Failover Cluster in Windows Server 2008.doc Step-by-Step Guide for Windows Deployment Services in Windows Server 2008.doc Step-by-Step Guide to Deploying Policies for Windows Firewall with Advanced Security.doc Using Identity Fe...

Storage Manager for SANs Step-by-Step Guide

With Storage Manager for SANs, you can create and manage logical unit numbers (LUNs) on Fibre Channel and iSCSI disk drive subsystems that support Virtual Disk Service (VDS) in your storage area network (SAN). This guide provides server and storage subsystem requirements, an introduction to managing LUNs, and step-by-step walkthroughs for creating and assigning LUNs using Storage Manager for SANs in Windows Server 2008. Download: http://www.microsoft.com/downloads/details.aspx?FamilyID=06556478-838c-450e-9173-9851378271ad&DisplayLang=en Thanks Aresh

Failover Cluster Validation Report failed for Duplicate IP address Windows 2008

Image
Cluster validation wizard is used to check pre-requisite\best practices before building the cluster. While playing with my lab, I came across a issue under Network Test. Error: Found duplicate IP address fe80::100:7f:fffe%14 on node node1.vodka.com adapter Local Area Connection* X and node node2.vodka.com adapter Local Area Connection* X.   Resolution: It turns out that this is the result of the Teredo, an IPv6 Tunneling Protocol. Teredo allows IPv6 communications to pass through IPv4 NATs and IPv4 servers. However Teredo gives an identical IPv6 address to its network interfaces, which Failover Clustering flags as an error since it require unique IP addresses. So how do you fix this? There are 2 ways, some details are provided here: http://technet2.microsoft.com/WindowsVista/en/library/91d35c9f-3049-44f4-b711-743dc152c7c31033.mspx?mfr=true 1) Disable Teredo through command line a. Open ‘Command Prompt’ and ‘Run as Administrator’ b. Type: ...

Troubleshoot Active Directory Logon issue – By Anang Kumar

Note the error message (Sometime the error message is very specific ) Login to the machine using local admin account Check the system Date and time / Time zone – Make sure they are similar to authenticating DC Check DNS – Make Sure they are pointing to Right DNS (DNS which is alive and doing the name resolution) Check DNS records with the help of NSLOOKUP Ping the DC – IP, Netbios Name and FQDn Ping the DC to DC with 1500 MTU Run Netdiag and check DNS and Trust and Kerberos test Make sure NIC card is enabled of “register me in DNS” Check event viewer for any know errors like Userenv, Kerberos, netlogon Enable netlogon log and do the further troubleshooting   Don't forget to post your comments :) Thanks, Anang Kumar