Chris Beams’s Blog

Active Directory and more….

Archive for June, 2009

iPhone 3.0 .. downloading!!

Posted by chrisbeams on June 17, 2009

after watching blogs etc for the day about when 3.0 would be released, i have just managed to kick off the download from itunes.

 hopefully everything will work ok !!!

Posted in Uncategorized | Tagged: | Leave a Comment »

Windows 2008 R2 Docs

Posted by chrisbeams on June 13, 2009

Link

Posted in Active Directory | Tagged: | Leave a Comment »

AD Recovery Docs

Posted by chrisbeams on June 13, 2009

Taken from Jorge’s blog

  • Best Practices: Active Directory Forest Recovery (W2K)
  • Planning for Active Directory Forest Recovery (W2K3)
  • Planning for Active Directory Forest Recovery (W2K8)
  • Posted in Active Directory | Tagged: | Leave a Comment »

    RODC Branch Office Guide

    Posted by chrisbeams on June 13, 2009

    just spotted this

    Download link

    Technet Link

    Posted in Active Directory | Tagged: , | Leave a Comment »

    Server Core – Time and Regional Settings

    Posted by chrisbeams on June 13, 2009

    So I have been having a few problems in my new W2k8 Forest. Seems that my server core Dc has the wrong time. 

    This made me thnk about how you can change regional settings and date time on server core. Turns out its pretty easy using the control panel applets

    Regional settings – c:\windows\system32\intl.cpl

    internationalsettings-servercore

    which brings up a familar looking interface

    intl.cpl

     

    and for date and time – c:\windows\system32\timedate.cpl

    which brings up this:

    timedate.cpl

    Posted in Active Directory | Tagged: | Leave a Comment »

    Microsoft Security Bulletin MS09-018 – Critical

    Posted by chrisbeams on June 10, 2009

    This looks like a major one

    Vulnerabilities in Active Directory Could Allow Remote Code Execution (971055)

    Link

    Posted in Uncategorized | Leave a Comment »

    DRM Errors .. still

    Posted by chrisbeams on June 6, 2009

    so today I have the same issue with DRM… so no Live TV on either Extender. Channel 15 worked for a while and has stopped again. I have uninstalled McAfee but still no joy. I havent installed any updates .. it just stopped working.

    Proving to be a real pain , perhaps its time to move to media portal.

    Posted in Vista | Tagged: , | Leave a Comment »

    Windows Media Center Extender encountered a DRM failure. Error code: 1, hr: 0x8004b822

    Posted by chrisbeams on June 5, 2009

    Aghhh no Live TV on MCE !!!

    For some reason  I started getting the above error today on my meda centre box… after some investigation I killed a mcafee process in the taskmgr. The clue was spotting this error:

    An unauthorized window was detected while running the Windows Media Center Experience, ‘McAfee Notification Window’, with file name ‘C:\Program Files\McAfee.com\Agent\mcagent.exe’.
    I killed this exe that was running under the MCX2 profile (ensure you have ticked show processes for all users) and suddenly live tv started again,

     

    UPDATE – so the above only worked for a short period  , however today I manged to fix this properly

     I unplugged both (2) TV cards and added one back in , rescanned all the channels and its working again on the extender. I am guessing that one of the TV cards was having issues and this was the one I was connecting to .. hence why it worked briefly as I must have for a short period connected to the working TV Card

    Posted in Uncategorized | Tagged: , | Leave a Comment »

    Operations Master Role Functionality Risk Assessment

    Posted by chrisbeams on June 2, 2009

    Always good to have close at hand .. just in case you lose a FSMO role and are unsure of the impact.

    Taken from Link:

    Posted in Active Directory | Tagged: , | Leave a Comment »

    Active Directory – Remove a Domain Using NTDSUTIL

    Posted by chrisbeams on June 2, 2009

    Active Directory – Remove a Domain Using NTDSUTIL
    So say for some reason you want to remove a Domain from Active Directory that no longer exists… how do you do it?

    As always with Metadata Cleanups NTDSUTIL is your friend.

    To remove the domain you need to remove the following using NTDSUTIL:
    1. All Domain Controllers for the domain you want to remove.
    2. All Naming Contexts for the Domain you want to remove.

    You can then remove the actual Domain itself. Its important to remember when removing the naming contexts that there will be more than one. So for example:
    DC=domain,DC=net
    DC=DomainDnsZones,DC=domain,DC=net Its the DNS Zone that people tend to forget !!

    If you get an error about Leaf Objects you havent removed all the Naming Contexts. You also need to ensure you are connected to the Domain Naming Master to perform the actual Domain Removal.

    ———————————————————————————————————————————————————————————
    Please ensure you are 100% certain you want to do the below, and dont do in a production environment without testing first
    Below are some screenshots and bullet points on the end to end process:
    With NTDSUTIL all of the commands can be abbreviated as long as they are unique, I have put some in brackets next to the full command.
    First of all Connect to the Domain Naming Master

    Connect using NTDSUTIL
    1. Start up NTDSUTIL from a command prompt
    Go into the Metadata Cleanup (M C for short)
    2. Metadata Cleanup
    Go into connections
    3. Connections
    Connect to the Domain Naming FSMO holder for your forest
    4. Connect to <Server>

    ntdsutil-2

    First of all remove any Domain Controllers from the Domain you wish to remove.
    Quit Connections (Q)
    1. Quit
    Select the object you want to remove by using Select Operations Target ( S O T for short)
    2. Select Operations Target
    List the Domains in your Forest
    3. List Domains
    Connect to Domain you wish to remove
    4. Select Domain <number>
    List the Sites in your Forest and Select the Site which contains the first (or only) domain controller you wish to remove
    5. Select Site <number>

    ntdsutil-3

    List Domain Controllers in the site you connected to above
    1. List Servers in Site
    Select Domain Controller you want to remove
    2. Select Server <number>

    ntdsutil-4

    You are ready to remove the Domain Controllers
    1. Quit
    Remove the Domain Controller
    2. Remove Selected Server
    3. Select Yes on the pop up window

    ntdsutil-5

    4. Select Yes on the pop up windows

    ntdsutil-6

    5. You will get back a message saying the Domain Controller has been removed.

    ntdsutil-7

    Then you need to remove the naming contexts for the Domain you wish to remove.

    Move back to the objects you can select to select the Naming Context you want to remove
    1. S O T
    List the naming contexts for your Forest
    2. List Naming Contexts
    Select the Naming Context you wish to remove
    3. Select Naming Context <number>

    ntdsutil-8

    Then quit back to remove the Naming Context
    1. Quit
    2. Remove Selected Naming Context
    3. Select yes to remove the naming Context

    ntdsutil-9

    4. You will get back a message saying the Naming Context has been removed.

    ntdsutil-10

    Repeat the above steps for all Domain Controllers and Naming Contexts for the Domain you wish to remove.
    Next you need to remove the Domain itself !!PLEASE TAKE NOTE OF THE MESSAGE !!!

    1. Remove Selected Domain

     

    ntdsutil-11

    And thats it .. should be all gone..

    Posted in Active Directory | Tagged: , | 5 Comments »