ClientDrive on Terminalserver (W2003)
Hy
When i access to my Terminalserver (Win 2003 Srv) and i have the "Mount Client Drive" Option enabled on the Windows Remotedesktop Software, the drive looks like this:
"C on Tarantella"
or
"C auf Tarantella" (in German OS)
The Enhancement Module is installed on the Server. Normally the Terminalserver shows by default the real Client Name of the Computer. How can i change this to normal mode?
thanks!
christoph
You might wanan reconsider that for simple performance reasons. PS is quite resource hungry and even a beefy terminal server could quickly run out of resources like RAM and disk swap space suing it, not to speak that you probably won't be able to use hardware acceleration features that way. Local installs are always preferable. Regarding licensing, you'll have to contact the volume licensing sales team by phone directly.
Mylenium
Similar Messages
-
High CPU Usage on Terminalserver (Win2k3)
Hi,
at the moment we are running an Exchange 2010 SP3 in combination with Outlook 2010 (Ver. 14.0.6123.5001 32bit).
Outlook is installed on Windows 7 fat clients, but most users access their mailbox with Outlook running on a Win2k3 Terminalserver (extended support till 2016).
While the users on the fat clients don't have any problems, the thin client users experience problems with high cpu usage.
Following example:
Terminalserver, 12 users, 6 running Outlook, 2 users splitting almost the whole cpu between them (usage around 90-100%).
This makes working on that terminalserver nearly impossible.
I tried safe mode, I tried disabling their add-ins, I tried deleting their terminalserver profile to no avail.
How can I figure out what's causing this?Hi,
Anti Virus email scanners are known to cause similar behavior, please first check if you have any Anti Virus scanner integrated with Outlook. Try to disable it, and check result.
A corrupted data file might also cause this kind of issue, try to repair your data file with Scanpst.exe tool.
Please refer to this article on how to use scanpst.exe:
http://office.microsoft.com/en-us/outlook-help/repair-outlook-data-files-pst-and-ost-HA102749454.aspx
Please also have a look at this thread, try the workarounds in it and see if issue persists:
http://answers.microsoft.com/en-us/office/forum/officeversion_other-outlook/constant-high-cpu-usage-when-outlook-open/b9a66791-ab73-4ecd-a73d-edf27102aa4e
Hope this helps.
Thanks,
Ethan Hua CHN
TechNet Community Support -
Setting up firefox on a Windows Terminalserver
Hi
What are the possibilities to control the usage of firefox on a Windows Terminalserver? Are there ways to manage plugins/addons used on a system? I want to provide certain Plugins for all users on the system and disable the possibility to install others.
Additionally we need to configure a proxy to contact the net, so we need to set the proxy globally (and disable the configuration, so my users won´t offline themselfs).
I did not find any Information about Firefox on Terminalsservers, so any Info, How-To or Best-Practice-Dokumentation will be helpful.
dspringerWinston – Thanks for your advice. Thanks to you, I seem to be pretty close to having this thing under control. After I designated the movies folder on the TC as my Music folder in iTunes, I double clicked on a couple of the files and each immediately showed up in my iTunes movies folder. They also streamed to my Apple TV without incident. So far so good.
My original movies folder on the TC is named M4V Movies. Somehow, iTunes created a subfolder in my M4V Movies folder, named it Movies, and moved the two movie files I had double clicked on there. From this I inferred that any movie I moved into the M4V Movies\Movies folder would show up in iTunes. Unfortunately, it didn’t work that way, as I moved another movie file from M4V Movies to the Movies subfolder and the file I had moved there didn’t appear in iTunes.
Finally, I simply dragged the remaining movie files’ icons into iTunes and, Voila!, they showed up both there and in my Shared Movies folder on Apple TV. Thus, it looks like the worst is over. The only remaining problem is that three of my movie files in iTunes are in the Movies subfolder but all of the others remain in the M4V Movies folder, although all are in the iTunes apps Movies folder. But that’s a problem for another day. By the way, dragging the movie files into the iTunes Movies folder did not cause them to be copied to the C: drive, the only full version of each is still on the TC.
Thanks for your help, I couldn’t have done it without you. -
How to ensure OC4J runs after user logs out of a W2003 Server
Greetings,
I have a question. We have BI Publisher running on a W2003 server. When I log into the server, a dos window starts up, and runs the OC4J stuff. When I log out of the server, this process stops.
In order to use the scheduling part of BI Publisher (meaning, reports can be emailed out), the OC4J window must be running (meaning, I cannot log out of the W2003 server).
How do I ensure the OC4J process remains running after I log out of the W2003 server? Note - this was fresh server, with a clean OBISE (Oracle Business Intelligence Standard Edition) install.
Thanks,
Colin JensenUse the services created at installation time to startup Oracle AS components.
thant should do the trick -
Excel 2010 crash Terminalserver
Hi all,
i have trouble with Excel 2010 that it crash and kill the terminalserver where it is running.
My enviroment:
Terminal server: VM WinServer 2008R2 with Citrix XenApp 6.5 and Office 2010 ( STD and or PRO )
Citrix Provisioning: VM WinServer 2008R2 with Citrix Provisioning services 6.1
ESX Server: ESX 5.1
Fileserver 1: VM WinServer 2008R2
Fileserver 2: VM WinServer 2012R2
My Problem:
I logon to the terminalserver and open a *.xls file from a share on the file server 2. First problem is that it takes
longer to open the file than to open it from file server 1. ( yes it is the same file with the same NTFS permission, because the two servers are in sync via DFSR )
Second problem is, that when i open that *.xls file, it can happen that the terminal server freeze. Only option than is to do a reset on the vm to reboot it.
Problem 1 and 2 will not occure when i open the file from file server 1, or when i save the same file as *.xlsx and open it than. Or when the file will be opend from the local drive on the terminal server.
Thanks for any help or idea.Hi,
This may be caused by some add-ins in Excel, please start Excel in Safe Mode:
Press Win + R, type "excel.exe /safe" in the blank box, press Enter.
When Excel starts in Safe Mode, go to FILE -> Open, browse to the file location and try to open it, check if the issue persists.
If the issue doesn't occur then, please go to FILE -> Options -> Add-Ins to disable the suspicious add-ins and verify which one caused the problem.
If Excel still crashes, please try to collect the Event Logs from the Event Viewer:
Press Win + R, type "eventvwr" in the blank box, press Enter. in Event Viewer, expand Windows Logs -> Application and see if there's any error about the Excel crash issue, we may find useful information to find the cause.
Regards,
Melon Chen
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs. -
Terminalserver Session Broker not reconnecting to existing session
Hi!
Following scenario:
Terminalserver-Farm
2x RemoteDesktopServer (Windows Server 2008R2)
1x TS Session Broker (Windows Server 2008)
A user connects to TS-Farm -> occasionally it happens that he is redirected to (for example) TS2, even if he has an active session on TS1. There is no error message displayed on the client. Subsequently he has 2 sessions, allthough the setting on the Session
Broker is set to "allow only 1 session per user". Interestingly this happens to 2 users only - both are the only ones working on Windows 8 clients (other users are on Win7).
Any ideas how to track down the problem? I don't see the correlation with Windows 8 clients at all.
Best Regards,
StefanHi!
Affected are ThinClients with RDP 5.2 - it's still working on one of the 2008R2, not on the 2nd.
I used network monitor to see traffic from an XP-Thin Client to both Terminalservers. I can see (but not understand): "T125:Disconnect Provider Ultimatum, rn-user-requested" in line 27 at the non-working Terminalserver
Client -> TS 2008R2 with working RDP:
3 11:57:33 08.01.2014 5.3233299 10.5.4.173 10.5.0.106 TCP TCP:Flags=......S., SrcPort=1633, DstPort=MS WBT Server(3389), PayloadLen=0, Seq=2968904019, Ack=0, Win=65535 ( ) = 65535 {TCP:2, IPv4:1}
4 11:57:33 08.01.2014 5.3238252 10.5.0.106 10.5.4.173 TCP TCP:Flags=...A..S., SrcPort=MS WBT Server(3389), DstPort=1633, PayloadLen=0, Seq=2063055863, Ack=2968904020, Win=8192 ( Scale factor not supported ) = 8192 {TCP:2, IPv4:1}
5 11:57:33 08.01.2014 5.3242143 10.5.4.173 10.5.0.106 TCP TCP:Flags=...A...., SrcPort=1633, DstPort=MS WBT Server(3389), PayloadLen=0, Seq=2968904020, Ack=2063055864, Win=65535 (scale factor 0x0) = 65535 {TCP:2, IPv4:1}
6 11:57:33 08.01.2014 5.3255958 10.5.4.173 10.5.0.106 X224 X224:Connection Request {ISOTS:3, TCP:2, IPv4:1}
7 11:57:33 08.01.2014 5.3273352 10.5.0.106 10.5.4.173 TCP TCP:Flags=...A...., SrcPort=MS WBT Server(3389), DstPort=1633, PayloadLen=0, Seq=2063055864, Ack=2968904031, Win=64240 (scale factor 0x0) = 64240 {TCP:2, IPv4:1}
8 11:57:33 08.01.2014 5.3274171 10.5.0.106 10.5.4.173 X224 X224:Connection Confirm {ISOTS:3, TCP:2, IPv4:1}
9 11:57:33 08.01.2014 5.3293456 10.5.4.173 10.5.0.106 T125 T125:MCSConnect Initial {T125:4, ISOTS:3, TCP:2, IPv4:1}
10 11:57:33 08.01.2014 5.3298119 10.5.0.106 10.5.4.173 T125 T125:MCSConnect Response {T125:4, ISOTS:3, TCP:2, IPv4:1}
11 11:57:33 08.01.2014 5.3315607 10.5.4.173 10.5.0.106 TCP TCP:Flags=...A...., SrcPort=1633, DstPort=MS WBT Server(3389), PayloadLen=0, Seq=2968904443, Ack=2063057917, Win=65535 (scale factor 0x0) = 65535 {TCP:2, IPv4:1}
12 11:57:33 08.01.2014 5.3322727 10.5.4.173 10.5.0.106 T125 T125:Erect Domain Request, SubHeight = 0, SubInterval = 0 {T125:4, ISOTS:3, TCP:2, IPv4:1}
13 11:57:33 08.01.2014 5.3324046 10.5.4.173 10.5.0.106 T125 T125:Attach User Request {T125:4, ISOTS:3, TCP:2, IPv4:1}
14 11:57:33 08.01.2014 5.3324212 10.5.0.106 10.5.4.173 TCP TCP:Flags=...A...., SrcPort=MS WBT Server(3389), DstPort=1633, PayloadLen=0, Seq=2063057917, Ack=2968904463, Win=63808 (scale factor 0x0) = 63808 {TCP:2, IPv4:1}
15 11:57:33 08.01.2014 5.3324293 10.5.0.106 10.5.4.173 T125 T125:Attach User Confirm, Result = rt-successful, Indicator = 0x3ef {T125:4, ISOTS:3, TCP:2, IPv4:1}
16 11:57:33 08.01.2014 5.3330774 10.5.4.173 10.5.0.106 T125 T125:Channel Join Request, UserID = 0x3ef,ChannelId = 0x3ef {T125:4, ISOTS:3, TCP:2, IPv4:1}
17 11:57:33 08.01.2014 5.3331055 10.5.0.106 10.5.4.173 T125 T125:Channel Join Confirm, ChannelId = 1007, Result = rt-successful {T125:4, ISOTS:3, TCP:2, IPv4:1}
18 11:57:33 08.01.2014 5.3340565 10.5.4.173 10.5.0.106 T125 T125:Channel Join Request, UserID = 0x3ef,ChannelId = 0x3eb {T125:4, ISOTS:3, TCP:2, IPv4:1}
19 11:57:33 08.01.2014 5.3340826 10.5.0.106 10.5.4.173 T125 T125:Channel Join Confirm, ChannelId = 1003, Result = rt-successful {T125:4, ISOTS:3, TCP:2, IPv4:1}
20 11:57:33 08.01.2014 5.3345604 10.5.4.173 10.5.0.106 T125 T125:Channel Join Request, UserID = 0x3ef,ChannelId = 0x3ec {T125:4, ISOTS:3, TCP:2, IPv4:1}
21 11:57:33 08.01.2014 5.3345856 10.5.0.106 10.5.4.173 T125 T125:Channel Join Confirm, ChannelId = 1004, Result = rt-successful {T125:4, ISOTS:3, TCP:2, IPv4:1}
22 11:57:33 08.01.2014 5.3356991 10.5.4.173 10.5.0.106 T125 T125:Channel Join Request, UserID = 0x3ef,ChannelId = 0x3ed {T125:4, ISOTS:3, TCP:2, IPv4:1}
23 11:57:33 08.01.2014 5.3357256 10.5.0.106 10.5.4.173 T125 T125:Channel Join Confirm, ChannelId = 1005, Result = rt-successful {T125:4, ISOTS:3, TCP:2, IPv4:1}
24 11:57:33 08.01.2014 5.3362559 10.5.4.173 10.5.0.106 T125 T125:Channel Join Request, UserID = 0x3ef,ChannelId = 0x3ee {T125:4, ISOTS:3, TCP:2, IPv4:1}
25 11:57:33 08.01.2014 5.3362827 10.5.0.106 10.5.4.173 T125 T125:Channel Join Confirm, ChannelId = 1006, Result = rt-successful {T125:4, ISOTS:3, TCP:2, IPv4:1}
26 11:57:33 08.01.2014 5.3450865 10.5.4.173 10.5.0.106 RDPBCGR RDPBCGR: {RDPBCGR:5, T125:4, ISOTS:3, TCP:2, IPv4:1}
27 11:57:33 08.01.2014 5.3456510 10.5.4.173 10.5.0.106 RDPBCGR RDPBCGR:TsClientSecurityExchangePDU Encrypted {RDPBCGR:5, T125:4, ISOTS:3, TCP:2, IPv4:1}
28 11:57:33 08.01.2014 5.3456706 10.5.0.106 10.5.4.173 TCP TCP:Flags=...A...., SrcPort=MS WBT Server(3389), DstPort=1633, PayloadLen=0, Seq=2063058003, Ack=2968904946, Win=63325 (scale factor 0x0) = 63325 {TCP:2, IPv4:1}
29 11:57:33 08.01.2014 5.3460200 10.5.0.106 10.5.4.173 RDPELE RDPELE:Encrypted {RDPBCGR:5, T125:4, ISOTS:3, TCP:2, IPv4:1}
30 11:57:33 08.01.2014 5.3900913 10.5.0.106 10.5.4.173 RDPBCGR RDPBCGR:SlowPathPacket Encrypted {RDPBCGR:5, T125:4, ISOTS:3, TCP:2, IPv4:1}
31 11:57:33 08.01.2014 5.3909177 10.5.4.173 10.5.0.106 TCP TCP:Flags=...A...., SrcPort=1633, DstPort=MS WBT Server(3389), PayloadLen=0, Seq=2968904946, Ack=2063058498, Win=64954 (scale factor 0x0) = 64954 {TCP:2, IPv4:1}
32 11:57:33 08.01.2014 5.4047118 10.5.4.173 10.5.0.106 RDPBCGR RDPBCGR:SlowPathPacket Encrypted {RDPBCGR:5, T125:4, ISOTS:3, TCP:2, IPv4:1}
33 11:57:33 08.01.2014 5.4047805 10.5.0.106 10.5.4.173 RDPBCGR RDPBCGR:SlowPathPacket Encrypted {RDPBCGR:5, T125:4, ISOTS:3, TCP:2, IPv4:1}
34 11:57:33 08.01.2014 5.4047946 10.5.0.106 10.5.4.173 RDPBCGR RDPBCGR:SlowPathPacket Encrypted {RDPBCGR:5, T125:4, ISOTS:3, TCP:2, IPv4:1}
Client -> TS 2008R2 with non-working RDP:
3 11:21:03 08.01.2014 4.7063150 10.5.4.173 10.5.0.144 TCP TCP:Flags=......S., SrcPort=1526, DstPort=MS WBT Server(3389), PayloadLen=0, Seq=459527613, Ack=0, Win=65535 ( ) = 65535 {TCP:2, IPv4:1}
4 11:21:03 08.01.2014 4.7067575 10.5.0.144 10.5.4.173 TCP TCP:Flags=...A..S., SrcPort=MS WBT Server(3389), DstPort=1526, PayloadLen=0, Seq=2589137033, Ack=459527614, Win=8192 ( Scale factor not supported ) = 8192 {TCP:2, IPv4:1}
5 11:21:03 08.01.2014 4.7071555 10.5.4.173 10.5.0.144 TCP TCP:Flags=...A...., SrcPort=1526, DstPort=MS WBT Server(3389), PayloadLen=0, Seq=459527614, Ack=2589137034, Win=65535 (scale factor 0x0) = 65535 {TCP:2, IPv4:1}
6 11:21:03 08.01.2014 4.7101168 10.5.4.173 10.5.0.144 X224 X224:Connection Request {ISOTS:3, TCP:2, IPv4:1}
7 11:21:03 08.01.2014 4.7101591 10.5.0.144 10.5.4.173 X224 X224:Connection Confirm {ISOTS:3, TCP:2, IPv4:1}
8 11:21:03 08.01.2014 4.7110721 10.5.4.173 10.5.0.144 T125 T125:MCSConnect Initial {T125:4, ISOTS:3, TCP:2, IPv4:1}
9 11:21:03 08.01.2014 4.7114117 10.5.0.144 10.5.4.173 T125 T125:MCSConnect Response {T125:4, ISOTS:3, TCP:2, IPv4:1}
10 11:21:03 08.01.2014 4.7130978 10.5.4.173 10.5.0.144 TCP TCP:Flags=...A...., SrcPort=1526, DstPort=MS WBT Server(3389), PayloadLen=0, Seq=459528060, Ack=2589139965, Win=65535 (scale factor 0x0) = 65535 {TCP:2, IPv4:1}
11 11:21:03 08.01.2014 4.7131136 10.5.0.144 10.5.4.173 TCP TCP:[Continuation to #9]Flags=...AP..., SrcPort=MS WBT Server(3389), DstPort=1526, PayloadLen=2286, Seq=2589139965 - 2589142251, Ack=459528060, Win=63828 (scale factor 0x0) = 63828 {TCP:2, IPv4:1}
12 11:21:03 08.01.2014 4.7137283 10.5.4.173 10.5.0.144 TCP TCP:Flags=...A...., SrcPort=1526, DstPort=MS WBT Server(3389), PayloadLen=0, Seq=459528060, Ack=2589141425, Win=65535 (scale factor 0x0) = 65535 {TCP:2, IPv4:1}
13 11:21:03 08.01.2014 4.7142557 10.5.4.173 10.5.0.144 T125 T125:Erect Domain Request, SubHeight = 0, SubInterval = 0 {T125:4, ISOTS:3, TCP:2, IPv4:1}
14 11:21:03 08.01.2014 4.7143931 10.5.4.173 10.5.0.144 T125 T125:Attach User Request {T125:4, ISOTS:3, TCP:2, IPv4:1}
15 11:21:03 08.01.2014 4.7144101 10.5.0.144 10.5.4.173 TCP TCP:Flags=...A...., SrcPort=MS WBT Server(3389), DstPort=1526, PayloadLen=0, Seq=2589142251, Ack=459528080, Win=63808 (scale factor 0x0) = 63808 {TCP:2, IPv4:1}
16 11:21:03 08.01.2014 4.7144276 10.5.0.144 10.5.4.173 T125 T125:Attach User Confirm, Result = rt-successful, Indicator = 0x3ef {T125:4, ISOTS:3, TCP:2, IPv4:1}
17 11:21:03 08.01.2014 4.7152352 10.5.4.173 10.5.0.144 T125 T125:Channel Join Request, UserID = 0x3ef,ChannelId = 0x3ef {T125:4, ISOTS:3, TCP:2, IPv4:1}
18 11:21:03 08.01.2014 4.7152672 10.5.0.144 10.5.4.173 T125 T125:Channel Join Confirm, ChannelId = 1007, Result = rt-successful {T125:4, ISOTS:3, TCP:2, IPv4:1}
19 11:21:03 08.01.2014 4.7162762 10.5.4.173 10.5.0.144 T125 T125:Channel Join Request, UserID = 0x3ef,ChannelId = 0x3eb {T125:4, ISOTS:3, TCP:2, IPv4:1}
20 11:21:03 08.01.2014 4.7163087 10.5.0.144 10.5.4.173 T125 T125:Channel Join Confirm, ChannelId = 1003, Result = rt-successful {T125:4, ISOTS:3, TCP:2, IPv4:1}
21 11:21:03 08.01.2014 4.7172413 10.5.4.173 10.5.0.144 T125 T125:Channel Join Request, UserID = 0x3ef,ChannelId = 0x3ec {T125:4, ISOTS:3, TCP:2, IPv4:1}
22 11:21:03 08.01.2014 4.7172699 10.5.0.144 10.5.4.173 T125 T125:Channel Join Confirm, ChannelId = 1004, Result = rt-successful {T125:4, ISOTS:3, TCP:2, IPv4:1}
23 11:21:03 08.01.2014 4.7183019 10.5.4.173 10.5.0.144 T125 T125:Channel Join Request, UserID = 0x3ef,ChannelId = 0x3ed {T125:4, ISOTS:3, TCP:2, IPv4:1}
24 11:21:03 08.01.2014 4.7183348 10.5.0.144 10.5.4.173 T125 T125:Channel Join Confirm, ChannelId = 1005, Result = rt-successful {T125:4, ISOTS:3, TCP:2, IPv4:1}
25 11:21:03 08.01.2014 4.7193451 10.5.4.173 10.5.0.144 T125 T125:Channel Join Request, UserID = 0x3ef,ChannelId = 0x3ee {T125:4, ISOTS:3, TCP:2, IPv4:1}
26 11:21:03 08.01.2014 4.7193736 10.5.0.144 10.5.4.173 T125 T125:Channel Join Confirm, ChannelId = 1006, Result = rt-successful {T125:4, ISOTS:3, TCP:2, IPv4:1}
27 11:21:03 08.01.2014 4.7234596 10.5.4.173 10.5.0.144 T125 T125:Disconnect Provider Ultimatum, rn-user-requested {T125:4, ISOTS:3, TCP:2, IPv4:1}
28 11:21:03 08.01.2014 4.7237173 10.5.4.173 10.5.0.144 TCP TCP:Flags=...A...F, SrcPort=1526, DstPort=MS WBT Server(3389), PayloadLen=0, Seq=459528149, Ack=2589142337, Win=64623 (scale factor 0x0) = 64623 {TCP:2, IPv4:1}
29 11:21:03 08.01.2014 4.7237356 10.5.0.144 10.5.4.173 TCP TCP:Flags=...A...., SrcPort=MS WBT Server(3389), DstPort=1526, PayloadLen=0, Seq=2589142337, Ack=459528150, Win=63739 (scale factor 0x0) = 63739 {TCP:2, IPv4:1}
30 11:21:03 08.01.2014 4.7237527 10.5.0.144 10.5.4.173 TCP TCP:Flags=...A.R.., SrcPort=MS WBT Server(3389), DstPort=1526, PayloadLen=0, Seq=2589142337, Ack=459528150, Win=0 (scale factor 0x0) = 0 {TCP:2, IPv4:1} -
Acrobat 9 crash running on terminalserver 2008 with roaming profiles
Adobe Reader 9.0 crash every time you try to open a pdf file on a terminalserver 2008, with users having roamin profiles.
If you install version 8.12 it works.
The problem is that we have a Acrobat 9.0 Destiller that we need to have running on this terminalserver, and after installing this, adobe reader 8.12 is not the default progra for opening pdf files.
What to do?
Thanks Finn!Bill@VT wrote:
> Have you cleared the TEMP folder recently?
I have tried that. I cleared everything in the TEMP folder, restarted
XP couple times and ran Norton WinDoctor. Acrobat 9 still crashed all
day especially if I tried to work on more than one PDF at the same time.
Usually when Dr. Watson pops out, that means there is something wrong
with the physical memory, doesn't it? -
W2003 DNS cache snooping vulnerability for PCI-DSS compliance.
Hi everyone.
How can I solve this security vulnerability reported by Nessus(security software) with W2003's DNS ?
DNS Server Cache Snooping Remote Information Disclosure
Synopsis:
The remote DNS server is vulnerable to cache snooping attacks.
Description:
The remote DNS server responds to queries for third-party domains that do not have the recursion bit set. This may allow a remote attacker to determine which domains have recently been resolved via this name server, and therefore which hosts have been recently
visited. For instance, if an attacker was interested in whether your company utilizes the online services of a particular financial institution, they would be able to use this attack to build a statistical model regarding company usage of that financial institution.
Of course, the attack can also be used to find B2B partners, web-surfing patterns, external mail servers, and more. Note: If this is an internal DNS server not accessable to outside networks, attacks would be limited to the internal network. This may include
employees, consultants and potentially users on a guest network or WiFi connection if supported.
Risk factor:
Medium
CVSS Base Score:5.0
CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
See also:
http://www.rootsecure.net/content/downloads/pdf/dns_cache_snooping.pdf
Solution:
Contact the vendor of the DNS software for a fix.
Plugin output:
Nessus sent a non-recursive query for example.com and received 1 answer : 192.0.43.10
I have been searching for a solution at the web...but I was unabled to find one..that could let me to use "recursion" at our DNS server.
We have an internal DNS server for Active Directory, with a forwarding to resolve external internet domains as is a requirement by our application..but now the only way to fix this is to disable "recursion" and we are working with external IP address instead
of internet DNS names..but this is not a good solution for us.
I found something about spliting DNS functions, but my point is that we have all the servers internal and DMZ, inside the same AD domain..so we need to use the same DNS server AD integrated, notwithstanding we must resolve external DNS records for our application...How
can I do this without getting the same vulnerability again ? I don´t know how to do it disabling "recursion"..If I disable recursion I will be unable to resolve external DNS names.
Any suggestion will be really appreciated!!
thx!!That's basically for your internet facing DNS. I wouldn't worry about it too much for internal DNS, since that's only hosting your internal AD zone.
Other than setting the "Secure cache against polution" setting, you can also opt to disable caching of all records so each and every query is a fresh query. This actually fixes CNAME vs A record TTL mismatch issues, too, not that you're probably seeing them
or not, but just wanted to add that:
Description of DNS registry entries in Windows 2000 Server, part 2 of 3 (applies to 2003, 2008 & 2008 R2)
http://support.microsoft.com/kb/813964
Cannot resolve names in certain top level domains like .co.uk.
http://blogs.technet.com/b/sbs/archive/2009/01/29/cannot-resolve-names-in-certain-top-level-domains-like-co-uk.aspx
============
To turn off or disable local cache: (WIndows 2000 notes, but they apply to all current OS's)
Set the MaxCacheTtl to 0 in the registry or use Dnscmd
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS\Parameters
Value: MaxCacheTtl
Type: DWORD
Default: NoKey (Cache for up to one day)
Function: Set maximum caching TTL.
MaxCacheTtl
Type: DWORD
Default value: 0x15180 (86,400 seconds = 1 day)
Function: Determines how long the DNS server can save a record of a
recursive name query.
You can use the MaxCacheTtl registry entry to specify how long the DNS
server can save a record of a recursive name query.
If the value of the MaxCacheTtl entry is 0x0, the DNS server does not save
any records.
The DNS server saves the records of recursive name queries in a memory cache
so that it can respond quickly to new queries for the same name. Records are
deleted from the cache periodically to keep the cache content current. The
interval when the records remain in the cache typically is determined by the
value of the Time to Live (TTL) field in the record. The MaxCacheTtl entry
establishes the maximum time that records can remain in the cache. The DNS
server deletes records from the cache when the value of this entry expires,
even if the value of the TTL field in the record is greater.
Change method
To change the value of the MaxCacheTtl entry, use Dnscmd.exe, a tool that is
included with the Windows 2000 Support Tools. The change is effective
immediately so that you do not have to restart the DNS server.
Start method
DNS reads its registry entries only when it starts. If you change the value
of the MaxCacheTtl entry by editing the registry, the changes are not
effective until you restart the DNS server.
Note the following items: . Windows 2000 does not add the MaxCacheTtl entry
to the registry. You can add it by editing the registry or by using a
program that edits the registry.
The MaxCacheTtl entry does not affect Windows Internet Name Service
(WINS) data that is saved in the DNS memory cache. WINS data is saved until
the Cache Timeout Value on the WINS record expires. To view or change the
Cache Timeout Value on the WINS record, use the DNS snap-in. Right-click a
zone name, click Properties, click the WINS tab, and then click Advanced.
===============================
Ace
Ace Fekay
MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007 & Exchange 2010, Exchange 2010 Enterprise Administrator, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights. -
Its compatible OWB 9.0.4.10 with W2003 and Oracle 10.2.0.1?
I have to migrate a DWH on Server 1 (OWB 9.0.4.10, Oracle Workflow 2.6.2, Windows 2000, Oracle 9.2.0.6) to Server 2 1 (OWB 9.0.4.10, Oracle Workflow 2.6.3, Windows 2003, Oracle 10.2.0.1)
Its posible to use OWB 9.0.4.10 with W2003 and Oracle 10.2.0.1?
Thanks very much in advance!Hi,
This is the relevant section from Metalink's 'Certify' section:
Server Certifications
Product Server Status Addtl. Info. Components Other Issues
10.1.0.x 9.2.0.x Certified None None Yes None
10.1.0.x 8.1.7 (8i) Desup:RDBMS None None N/A N/A
10.1.0.x 10.2.0.x Certified Yes None Yes None
10.1.0.x 10.1.0.x Certified None None Yes None
Additional info on 10gR2 DB: Database 10.2.0.x is only certifed with Oracle Warehouse builder patch set 10.1.0.4 or higher.
So: bad luck, need to upgrade OWB 10.1.0.4 to at least.
I suggest you learn to use Metalink for having these kinda questions answered.
Good luck,
Erik Ykema -
WRT320n setup not visible properly in a server using w2003
The setup display to make changes, does not show properly on the screen of this server.
The server is using W2003 and the display is generic VGA.
The setup is accessible and viewable from other pcs.
The issue is the VGA setting of the server.
Is there a setting when starting the setup to accept a lower Vga display?
Any other solutions?
Solved!
Go to Solution.Thanks for the response. I did try to lower the security to actually none.
It did not work.
Let t me add. I am using an asus MB and it does not allow to set its VGA driver under w2003.
The manufacturer says, this board do not support w2003.
The system is operating with an standard VGA.
The setup software comes up, but it does not show all the fields or labels and is not usable.
I was hoping to be able to load the router software with a starting command to use lower VGA type.
Any suggestions? -
Adobe Acrobat XI on Terminalserver 2012
We have a Installation of Adobe Acrobat X on a Terminalserver 2012 witch runs very bad. Now we would like to upgrade to XI.
Adobe Acrobat XI seems to be supportet on Windows 8 but how about Windows Server 2012 (Terminalserver) ?Hi chrisb75729216,
I checked with your account but could not find any order history so you might be using another email address on forums.
You will first need to deactivate Acrobat from old machine and then install Acrobat on the new machine by activating with the same serial number.
Please download Acrobat XI pro from here: Other downloads
If you have single user license, then remember that the software can be activated on maximum two computers, say your desktop at work and laptop at home.
Regards,
Anubha -
Hi,
we use MS terminalserver and thin Clients.
Are there any restrictions or settings for installation
lumira on terminalserver.
Regards WolfgangHi Antoine,
Arguments versus publish of storybords in the cloud are judicial reservations in our company.
We think the hana-based lumira-server is too large and expensive for us.
( normaly small amount of data)
So we evaluate for a possibility to publish the stories for a larger number of users
without send the stories ( .lums-files) to every user.and show the stories by its own lumira personal Edition.
We prefer to install the Lumira personal edition once in Citrix.
This is tested and works.
But every user needs his own private Directory.
In our concept the stories (.lums-files) are stored in a special directory and several users occupy the same directory.
( maybe multiple directories depending on user-Groups).
Is this user case possible ?
If yes, we need an agent for automated update.
This could be the lumira agent of the Standard Edition.
By script we could distribute the .lums files after update to the special Directory (s).
Regards Wolfgang -
AdobeAcrobat 8 pro on Terminalserver
Hi all,
i have installed AdobeAcrobat 8 pro installed on an W2K3 64bit Terminalserver with Citrix XenApp 4.5.
The Version of W2K3 is german an i have installed AdobeAcrobat 8 pro with german language and all patches (8.1.6).
All menue's an so on is in german. The only thing what is in english is the Adobe PDF-Settings tab in the printersettings.
Is there any way to change this Adobe PDF-Settings tab to german language?
An other issue is when i crate an form letter in MS Word2003 and check the printersettings before printing the printersettings dialog comes up and after secounds he disappeares. This is a little bit annoying for the users.
Is this an nown issue on terminalservers or is there an fix or workarround for this?
I hobe anyone has an idea for this two things.
regards
LukasI don't have an answer to your question. There is an issue that I am not clear on with the terminology, but I think you have AA8 configured in violation of the EULA. You might want to read the license carefully about the use on a server. That may actually be part of your problem, that it may not be able to be configured for a terminal server.
-
Windows Terminalserver PDF's im Internetexplorer
Hallo,
ich habe hier auf meinem Terminalserver ein kleines Problem.
Der Acrobat Reader ist installiert (8.1.3) wenn ich als Administrator im Internetexplorer (6.0.3790) eine PDF ansurfe wird mir diese auch im Internetexplorer angezeigt.
Nur wenn ich als normaler User versuche eine PDF Datei im Internetexplorer zu öffnen, öffnet sich zwar das neue Fenster, wie beim Administrator und der Ladebalken bewegt sich auch, aber das PDF wird nicht geöffnet.
Es erscheint nur nach einiger Zeit die Fehlermeldung, das die Seite nicht angezeigt werden kann.
Kennt einer von euch, diese Problem und hat vielleicht eine Lösung für mich??
Schon mal vielen Dank im vorraus.
soerenHallo Sören
hoffe mal nicht auf eine Antwort.
Wenn du auf die Neu-Fähnchen schaust, wie alt die Fragen hier sind ....
Statt mir zu helfen (Thread Kopierschutz von pdfs) wurde ich nur beleidigt und beschimpft.
Ich kann euch nur raten Hilfe in anderen Foren zu suchen.
Liebe Grüße und viel Glück!
Elli -
W2012R2 RDSH role installation stuck indefinitely on W2003 AD)
hi there
i'm setting up a fresh W2012R2 for RDSH roles
the server is joined to a W2003 AD succesfully
i had use full domain admin rights to install RDSH roles
the installation of RDSH roles under QuickStart will stop at about 30% of the progress bar, giving the following errors at the event log
error 1202 scecli
error 1002 aplication hang
if used standard deployment for rdsh, the progress will also stop when installating RDCB roles, at about 40% roles
on the same server, i had install rdsh roles on a test W2008 AD environment , working perfectly.
i had also tried using different Domain Admin and Domain Local Admin accoutns to try reinstalling the roles. but it still stuck at 30% of the installation progressHi,
Please note that you must use a domain functional level of at least Windows 2000 Server native mode. The functional levels Windows 2000 Server mixed mode and Windows Server 2003 interim mode
are not supported.
If issue persists, please collect the CBS.log under C:\Windows\Logs\CBS after reproduce the issue for further research.
Thanks.
Jeremy Wu
TechNet Community Support
Maybe you are looking for
-
Jheadstart(10.1.2.0) intergration with Jdeveloper(10.1.3)
Having followed installation notes for Jheadstart (I noted that it's certified for Jdeveloper 10.1.2 and not .3 but carried on), I cannot see "Jheadstart Settings " in Jdeveloper..tools..preferences. How can I include in Jdeveloper. Terry
-
If I delete the current iTunes to reinstall latest version what happens to the music I have downloaded from my own cd collection, do I lose it as I haven't been able to back up my music?
-
Unable to install Illutrator, InDesign, or Acrobat Pro
yet I've been paying for the full suite since late December! So many chats on the support page to no avail and since I'm a prepaid internet user these downloads are costing me bigtime. Just want a solution so I can get the whole suite running, and no
-
How to solve the issue "CUV check user equivalence failed" ?
Folks, Hello. I am installing Oracle 11gR2 RAC using 2 VMs (rac1 and rac2) whose OS are Oracle Linux 5.6 in VMPlayer according to the website http://appsdbaworkshop.blogspot.com/2011/10/11gr2-rac-on-linux-56-using-vmware.html In order to install Grid
-
What needs included in a project to run Swing components in an Applet? I have a working Applet (in CodeWarrior) but neither of my browsers seems to have what it takes to use the Swing components.