WindowsAdminGuru BLOG

After you upgrade a Microsoft Windows Server 2003-based domain controller to Windows Server 2003 Service Pack 1 (SP1), the Windows Time service may not start. In this scenario, the following events may be logged in the Windows System log. Message 1 Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7023 Description: The Windows Time service terminated with the following error: Not all privileges referenced are assigned to the caller. For more information, see Help and Support Center at http://support.microsoft.com. Message 2 Event Type: Error Event Source: W32Time Event Category: None Event ID: 46 Description: The time service encountered an error and was forced to shut down. The error was: 0x80070700: An attempt was made to logon, but the network logon service was not started. Additionally, when you try to start the Windows Time service manually, you may receive one of the following error messages: Error 1083: The executable program that this servic

. Solution 1: Rootkits are sometimes hard to remove, your first action if your antivirus detected it but did not manage to clean it , should be to run a full system scan after booting into Safe Mode. Malwarebytes as advised above should be able to fix it as well when scan is run rom safe mode. finally, if the problem persists you may want to try Combofix http://www.bleepingcomputer.com/combofix/how-to-use-combofix#use Download ComboFix from the given web link and run, follow the screenshots which mentioned in the link Please post Combofix log & Hijack this log for further analysis. Solution 2: I used Avast! too, and normally if it cannot take care of the problem then I download and run a scan from Malwarebytes: http://www.malwarebytes.org/ Make sure that you download the latest updates/definitions for Malwarebytes before running a scan. Also, choose the "Thorough" scan instead of the "Quick" one. Good Luck!!! .

. Posting this for my own future reference: http://bimvp.com/blogs/bsm/archive/2008/07/01/configuring-kerberos-for-sharepoint-2007.aspx .

I am putting this here for my own future reference. There is a useful set of Visio stencils for SQL Server 2005 at Visio Toolbox. Here is a link to the page that they are on, and a direct link to the ZIP File . These stencils appear to have actually been created by Microsoft directly, since the page is on a Microsoft website. There is also a page on the site that shows how to work with Visio and SQL Server . There are several videos and a couple of downloads.

If you are running Virtual PC 2007 on a laptop and are experience mouse stutter or hesitation (no matter how much memory or how powerful your laptop), there is a fix. Here is a link to the explanation, but the short version is find the options.xml file on your C:\ drive (in my case it is in c:\Users\Josh\AppData\Roaming\Microsoft\). Add the following section immediately after the last tag: true

I just spent several hours attempting to set my outbound SMTP traffic from Exchange 2007 to use a specific IP on my ISA Server 2006 external NIC of the 5 available. I wanted to isolate mail traffic to a specific IP address. However, it turns out that you cannot send traffic over a specific IP in ISA 2006 for any protocol, unless you install another NIC with the IP address that you want to send on. Here is a blurb that was posted by someone on Experts-Exchange after they spoke with Microsoft support on this issue (Not linking since you won’t be able to see the link): 'No version of ISA can, to date, select the IP address that will be used for outbound NAT addressing - only inbound as I have mentioned before. This facility WILL be introduced in ISA 2008 either in the beta release or in the full version. Yes, you can use an additional NIC with a public IP and route mail through that connector but long term, this is not a scaleable option'.

Over the last couple of days I have been setting up Exchange 2007 SP1 on Windows Server 2008 RTM. No matter what I tried, I was stuck in a Catch-22: If I logged in as Local Admin on the box, I didn't have permission to make the necessary changes to the domain; if I logged in as Domain Admin, I didn't have permission to write to the local log file on the C:\ drive of the Exchange server. I kept getting errors like the one at right from the GUI, or this one from the command line: Failed to initialize the log file: Access to the path 'C:ExchangeSetupLogs\ExchangeSetup.log' is denied. Setup will not continue. Those are NOT the most descriptive errors. If I logged in as local admin, those errors went away, but instead I received errors that the local admin account didn't have the rights to make massive changes to the domain (shocker). I posted on the Microsoft Technet Exchange forums, and hardly anyone read my post, much less answered it. One person responded that they h

What is SALT ? Salt is usully added to one encryption algorithm to make the encryption stronger. for Example: we use md5 encrypted passwords in /etc/shadow file where each password is prtected with additional salt value that is randmly choosen by the password program. Eg: $1$caLZPGSJ$fNw6sNf1GFiZaKUxFih9h. The structure of this encrypted password is $......$..............$................... First $ to second $ shows the Type of Encryption. Second $ to third $ is the Salt and rest of the string is the Encrypted value. so, by adding random SALT we ensure the encryption to be much stronger and difficult to crack. *********************************************************************************** TIP 1:- How to force a users to change their passwords upon first login? 1.) Firstly, lock the account to prevent the user from using the login until the change has been made: # usermod -L 2.) Change the password expiration date to 0 to ensure the

SMF ( Service Management Facility on Solaris 10v ) SMF provides a centralized configuration structure for managing system services and the interaction of a service with other services. A service can be described as an entity which provides a resource or list of capabilities to applications and other services, both local and remote. A service is not necessarily as running process, such as a web server. A service can also be the software state of a device such as a configured Network device, or a mounted file system. This service identifier is in the form of a Fault Management Resource Identifier or FMRI. The FMRI indicates the type of service or category and the name and instance of the service. # svcs --> Listing services information in Solaris 10, This command can also be used to examine the status of a specific service instance. # svcs svc:/system/console-login:default STATE STIME FMRI online 14:38:27 svc:/system/console-login:default # svcadm -v disable system/cron:default -->

Update on mazor Issue Scenario: There had been a mirror inconsistency issue with a logical volume. The issue was that there was a logical volume that had mirror copies, but one LP had 3 copies as against 2. Problem Identification: [servotsm01:root:/home/sysadmin:] lsvg -l Serverstgpvg Serverstgpvg: LV NAME TYPE LPs PPs PVs LV STATE MOUNT POINT 0516-1147 : Warning - logical volume Serverstgplv may be partially mirrored. Serverstgplv jfs2 4017 8035 30 open/syncd /tsm/yar1/stg loglv01 jfs2log 1 2 2 open/syncd N/A The logical Volume Serverstgplv has 4017 LPs mapped to 8035 PP (which ideally should have been 8034 [4017*2]). The LV has 1 extra PP to it which implies, 1 LP has an additional copy (the 3rd copy) hence the giving the warning "logical volume Serverstgplv may be partially mirrored". Problem Diagnosis / approach: Step 1. Identify which LP has the 3rd copy. [servotsm01

Veritas Powerfail Timeout setting (vxpfto or pfto) for HP-UX on a Storage Area Network environment Volume Manager uses TIMEOUT in its Powerfail Timeout (pfto) feature. You can specify a timeout value for individual Volume Manager disks using the vxdisk command. What is vxpfto or pfto? pfto (Individual Volume Manager disks): EXAMPLES Use the following command to set the value of pfto to 60 seconds on disk01: vxdisk set disk01 pfto=60 vxpfto (All disks in a volume or disk group): Powerfail Timeout is an attribute of a SCSI disk connected to an HP-UX host. The vxpfto command sets the Powerfail Timeout interval on a set of Volume Manager disks, either all disks in a disk group, or all disks underlying the volumes listed. EXAMPLES Set the pfto value on all disks in disk group testdg to 100 seconds: vxpfto -t 180 -g testdg Set the pfto value to 50 seconds on all disks underlying volume01 and volume02 in disk group testdg: vxpfto -t 50 -g testdg volume01 volume02 Set the pfto value to 300 sec