SBS2011 standard running in lab. Have first Windows 8 Pro (virtual machine as guest off of Windows 2008 r2 Hyper-v host.

Am testing applications we use often. GoToAssist Express wants .net lower than 4.x so have tried under turn windows features on or off and the files try to download but fail. This looks like the issue with WSUS not being able to download update and that I should be adding/changing to allow Windows Update.

Have found above WSUS 3.2 update KB2734608.

Has anyone else updated yet on SBS2011 and what was your experience? Thanks. I will wait for some sort of comment but need to get GoToAssist going soon as clients are ready to go Win8.

Thanks.

Guzzifrank

Hi, we have just taken over support of an SBS2003 server which is using the POP connector. They are having some delivery issues and we thought we should turn off the POP connector and go fully with smtp. Can someone clarify that these are the steps we need to take:

1. Create MX record to point to the SBS static IP address
2. Turn POP connector off

Is that all we need to do? Should we use DNS for mail routing or use a smarthost?

Thanks in advance

Kev

Hopefully there is a solution to this.

I am converting an organization from Windows 2003 standard server and Exchange 2003. The organization has 2 DCs in the same domain, 1 exchange controller.

I ran the SBS 2011 Prep tool and cleaned up all the errors found except one: Found an offline domain controller present in Active Directory. Server: br-mail.baker-rock.local

From the SourceTool.log:

01/27/2012 08:09:21          Starting health scan using MBCA engine..
01/27/2012 08:09:22          Health scan: MBCA model has been imported.
01/27/2012 08:09:22          Health scan: SBSMigrationPrep model is in the mbca model list.
01/27/2012 08:09:22          Health scan: Invoking SBSMigrationPrep model at 01/27/2012 08:09:22
01/27/2012 08:09:32          Health scan: invoke result: True
01/27/2012 08:09:32          Health scan: scan end time: 01/27/2012 08:09:32, duration: 00:00:10.6093750
01/27/2012 08:09:33          Health scan: 1 issues found.
01/27/2012 08:09:33          1: id=1, title=Found an offline domain controller present in Active Directory. Server: br-mail.baker-rock.local, description=If the offline domain controller br-mail.baker-rock.local has been retired, remove it from Active Directory. Go to http://support.microsoft.com/kb/216498 for more information., severity=Error
01/27/2012 08:09:33          1 error(s) and 0 warning(s) found during BPA scan
01/27/2012 08:09:44          Writing migration ready flag to False
01/27/2012 08:09:44          Writing time stamp to registry
01/27/2012 08:09:44          Writing Errors and warnings count to registry

I ran DCDIAG on the source DC all tests passed:

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
  
   Testing server: Beaverton\BR-MAIL
      Starting test: Connectivity
         ......................... BR-MAIL passed test Connectivity

Doing primary tests
  
   Testing server: Beaverton\BR-MAIL
      Starting test: Replications
         ......................... BR-MAIL passed test Replications
      Starting test: NCSecDesc
         ......................... BR-MAIL passed test NCSecDesc
      Starting test: NetLogons
         ......................... BR-MAIL passed test NetLogons
      Starting test: Advertising
         ......................... BR-MAIL passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... BR-MAIL passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... BR-MAIL passed test RidManager
      Starting test: MachineAccount
         ......................... BR-MAIL passed test MachineAccount
      Starting test: Services
         ......................... BR-MAIL passed test Services
      Starting test: ObjectsReplicated
         ......................... BR-MAIL passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... BR-MAIL passed test frssysvol
      Starting test: frsevent
         There are warning or error events within the last 24 hours after the

         SYSVOL has been shared.  Failing SYSVOL replication problems may cause

         Group Policy problems.
         ......................... BR-MAIL failed test frsevent
      Starting test: kccevent
         ......................... BR-MAIL passed test kccevent
      Starting test: systemlog
         ......................... BR-MAIL passed test systemlog
      Starting test: VerifyReferences
         ......................... BR-MAIL passed test VerifyReferences
  
   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
  
   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
  
   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
  
   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
  
   Running partition tests on : baker-rock
      Starting test: CrossRefValidation
         ......................... baker-rock passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... baker-rock passed test CheckSDRefDom
  
   Running enterprise tests on : baker-rock.local
      Starting test: Intersite
         ......................... baker-rock.local passed test Intersite
      Starting test: FsmoCheck
         ......................... baker-rock.local passed test FsmoCheck

From the  

I have remote web access working, and clicking computers from the web based dashboard allows me to establish an remote desktop connection to computers on my internal network, it's great.

however, i want to try and establish a connection to WHS and awake machines on my LAN using mstsc directly from a remote machine. on the advanced dialog box I see these options. i fill them in as shown and try to connect. 

When i press connect i get this:

However after putting in my whs administrator username and password i get this error.

"Your computer can't connect to the remote computer because the Remote Desktop Gateway server is expecting an authentication method different from the one attempted. Contact your network administrator for assistance."

Anyone know how to get this working?

Tim

Hi Guys,

I've seen many questions regarding backup failures in SBS, but nothing quite answering my question, so I hope you can help by way of advice.

I have two external 2TB disks (Seagate) of which one is reporting imminent failure, however it is important to retain the existing backup data on SOON TO BE FAULTY DISK for future use. So I can't simply add NEW DISK into the backup rotation as I then lose the data on SOON TO BE FAULTY DISK.

My question is simple : Is there a documented way of migrating (keeping) the data from SOON TO BE FAULTY onto NEW DISK while keeping it usable in SBS Backup ? In essence, either clone SOON TO BE FAULTY to NEW DISK (which I don't think will work due to volume identifiers in SBS backup, as far as I can see the Backup destinations in SBS Backup are referenced not only by Volume Name such as is visible from Disk Management but also via a unique volume identifier which is then linked, probably somewhere in the registry to the Volume Name)

I have tried one or two of my tricks and though the data is visible on NEW DISK post insertion into the backup rotation, SBS Backup does not "see" the data as valid copies of the backup data.

What are my options to sort this out, I need to retain the old data. Should I try to clone the device using a 3rd party tool such as Acronis or Ghost ? Will this resolve my issue (somehow I don't think so, referring to Volume Identifier)

Any help will be appreciated.

Hi,

I'm able to connect a remote Outlook over the Internet to an Exchange mailbox via VPN (ie. used Connection Manager) on the SBS 2003 Premium Server. So the VPN is working fine. However, if I try to add one of the SBS's printers to the remote PC, the remote PC doesn't find any printers on the SBS server network (ie. the shared printers are "listed in the directory" and thus are seen in Printers on the SBS box).

Is the problem that I don't have File/Printer sharing enabled on the WAN NIC (that's not such a good idea is it).

What am I missing here?

I appreciate your help.

Regards,

Brcobrem

Installed windows update KB2687442 and now can no longer access Companyweb

I ran the the Sharepoint products and technologies configuration wizard which has fixed Sharepoint but created new internal website (Teamsite). i have attached content database "sharewebdb" which I believe is the default one where all data is but still cant see any of the documents.

Can anyone please help sort this for me

Richard Bentley

I have been getting the bellow error on sbs 2008.

‘The Forest Trust Check in the Licensing component did not pass because error 0x800706ba occurred in function f1100a [PZRC]. The RPC server is unavailable. Make sure that your DNS server can be contacted and the following services are running on it: Active Directory Domain Services (NTDS), DNS Server (DNS), Kerberos Key Distribution Center (KDC). This server will be automatically shut down if the issue is not corrected.’

I have tried to Google a solution but have not been having much luck. Does anyone have any resources about this issue or point me in the right direction of where I will be able to find more information on this? 

Thanks for your help in advance.

Dave

Hi,

I want to assign a static IP address to a NAS I am about to add to the network, all of the clients on the network have static IP's and I use the SBS server's IP as the gateway and DNS.

My question is: should I also use the SBS server IP address as the gateway and DNS for the NAS?

Thanks

Hi,

          I'm experiencing a problem when initiating a backup on my SBS 2011 Standard Server, I am receiving the following error:

‘The backup operation that started at @2011-07-22T10:04:09.931000000Z’ has failed because the Volume Shadow Copy Service operation
to create a shadow copy of the volumes being backed up failed with the following error code ‘2155348129’.  ‘

The ‘Configure Server Backup’ wizard completed and configured the backup device (a 2TB WD Elements external USB drive) without issue.

Can anybody shed some light on this or point me to a thread that might have addressed this problem in the past.

The event log details are as follows:

- System

  - Provider

   [ Name]  Microsoft-Windows-Backup
   [ Guid]  {1DB28F2E-8F80-4027-8C5A-A11F7F10F62D}
 
   EventID 9
 
   Version 1
 
   Level 2
 
   Task 0
 
   Opcode 0
 
   Keywords 0x4000000000000000
 
  - TimeCreated

   [ SystemTime]  2011-07-22T10:05:11.629326800Z
 
   EventRecordID 9
 
   Correlation
 
  - Execution

   [ ProcessID]  8196
   [ ThreadID]  3808
 
   Channel Microsoft-Windows-Backup
 
   Computer MYSERVER.mydomain.local
 
  - Security

   [ UserID]  S-1-5-18

- EventData

  BackupStartTime 2011-07-22T10:04:09.931000000Z
  BackupSetId {83A4430F-BD19-478A-B8A1-20E2EF34ACF5}
  SppErrorCode 2155348129

-------------------------- Many thanks for your time.

In the server console under security it show me that BPA is reporting 3 errors all of which I have exluded in BPA.

The server is running with 2 NIC cards  everything is functioning OK but BPA doesnt like a few things.

How can I stop the server consiole from seeing the excluded items in BPA.

At the moment its showing critical when i know its OK.

All 3 errors are to do with DNS and that is working fine for our internal PC's

I just want the server console to stop complaining about them

My small business
server 2003 R2 with latest patches has been failing the Security Metrics PCI
scan since December. The cause listed for the failure is:

Description: web program allows cross-site scripting in query string (/Remote/logon.aspx)

Vulnerability Details:

Service: https Sent: GET /Remote/logon.aspx? ><SCRIPT>alert('SAINT'
;)</SCRIPT> HTTP/1.0 Host: myhost.org User-Agent: Mozilla/4.0 Connection:
Keep-alive Received: ??<form name="logon" method="pos t"
action="logon.aspx?><SCRIPT>alert('S AINT' )</SCRIPT>"
id="logon" autocomplete="off">

There are lots of suggestions that seem to relate to products that are not installed and one that
suggests creating a custom error page that does not display the URI. 

How does one resolve this when the WEB site is the default supplied with SBS 2003?

Thanks in advance

Michael T. Glenn

I posted a question about migrated security groups, see http://social.technet.microsoft.com/Forums/en-US/smallbusinessserver/thread/53c89c2b-fd20-4a1d-8264-badaf1ea9827 (migration of SBS 2003 to SBS 2011).

That question was about security groups in AD > MyBusiness > Security groups. When I look in AD under Users (AD > Users) I see a bunch of migrated users and security groups as well. They can easily be found by looking at their creation date. Again I wonder if those groups and users are still needed in SBS 2011? They are:

• Certificaatuitgevers (certificate publisher) members: <domain controller>
• DHCP-administrators (mind the hyphen) members: none
• DHCP-gebruikers (DHCP-users) members: none
• DnsAdmins members: none
• HelpServicesGroup members: SUPPORT_388945a0
• IIS_WPG  members: IWAM_<old SBS 2003 server>; local service; Network service; Sharepoint Administrators; Sharepoint Farm account; System; Windows SBS internal Web site account
• OWS_3759772115_admin  members: none
• RAS- en IAS-servers  members: none
• SQLServer2005MSFTEUser$<old SBS 2003 server>$MICROSOFT##SSEE  members: none
• SQLServer2005MSSQLServerADHelperUser$<old SBS 2003 server>  members: none
• SQLServer2005MSSQLUser$<old SBS 2003 server>$A2ESQLSERVER member: add2exchange
• SQLServer2005MSSQLUser$<old SBS 2003 server>$MICROSOFT##SSEE  members: none
• SQLServer2005SQLBrowserUser$<old SBS 2003 server>  members: none
• STS_WPG  members: sharepoint administrators
• TelnetClients  members: none
• WINS-gebruikers (WINS-users)  members: none
• WSS_ADMIN_WPG members: Administrator; Sharepoint Farm Account
• WSS_RESTRICTED_WPG  members: none
• WSS_RESTRICTED_WPG_V4 members: Sharepoint Farm account
• WSS_WPG  members: Sharepoint Farm account; Sharepoint Search Service account; Windows SBS Internal Web site account
• WSUS-administrators  members: none
• WSUS-reporters  members: none
• WSUS Administrators  members: none
• WSUS Reporters  members: none
• DnsUpdateProxy  members: none
• Exchange Domain Servers  members: none

And then there are a couple of users:

• IUSR_<old SBS 2003 server> member of: domainusers; guests
• IWAM_<old SBS 2003 server>  member of: domainusers; IIS_WPG
• krbtgt member of: Domainusers; Denied RODC Password Replication Group
• MDT member of: Domainusers
• SQLAdmin member of: Administrators; Domainusers
• SUPPORT_388945a0  member of: Domainusers; HelpServiceGroup

Simon

R, J

hi, we get event id 12289 when the native sbs 2008 backup runs,

Volume Shadow Copy Service error: Unexpected error VSS_E_WRITER_STATUS_NOT_AVAILABLE. An older active writer session state is being overwritten by a newer session. The most common cause is that the number of parallel backups has exceeded the maximum supported limit. hr = 0x80042409.

The job completes successfully. I can do a test recovery of files but have not tested a bare metal restore. Should I be concerned about the event id?

`joe prior

Hi,

I've added a Windows 7 computer to the network, but the Network Sharing indicates the machine is unauthenticated.  My thinking goes like this:

If unauthenticated, there must be a bad certificate from the domain somewhere on the machine.  I checked the console root certificates on the (Local Computer) and there was not a certificate listed in the Personal folder.  When I try thehttp://connect under the SBS Administrator account (logged on as the SBS Administrator) I receive the weird error above telling me to logon as the SBS Administrator.  While I can add the [Go-Daddy] certificate to the Personal folder, it does not appear to fix the problem with the wizard.  For this reason, I suspect a hardware issue may be afoot, but it feels more like a permission problem than hardware, and I'm wondering if there are additional steps I can take to try to remedy the situation.  I also can fiddle a bit and get a second error that says:  The remote endpoint is not currently in service at this location. 0x803d000e  (way over my head)

Trying to install using the right click of the computer properties and adding the machine to the network via sysadmin account (after removing the machine from the network) yields:

You computer could not be joined to the domain because the following error has occurred:  The specified server cannot perform the requested operation.

(Answering with links is okay but please make them Microsoft links... security here is tight and while I can get to Microsoft links, other links my be blocked by proxy)

thanks....

R, J