RD Gateway Server Credentials in SBS 2011, new prompt in RWA

Hey All,
I know this has been asked and answered in one way or another, but I am having difficulties finding the answer. I have several SBS 2011 Standard clients and most use RWA to remote connect to their desktops. Just recently, one of them, it started to prompt
for the RD Gateway Server credentials. If the user puts in domain\user then password, they are then handed to the next sign in and then they have access. For the past 2 years it has never done that before. It is not so much of a problem, but an annoyance to
have to login 3 times before having access to the computer. This happened to my SBS box and I fixed it when addressing another issue, but I don't know how I did it. Any help would be great.

Did they check the box to save the password in the RD Gateway Credential prompt?
Robert Pearman SBS MVP
itauthority.co.uk |
Title(Required)
Facebook |
Twitter |
Linked in |
Google+

Similar Messages

New Dell Server with OpenManage Essentials adds SQL Server 2012 Native Client to existing SQL Server 2008R2 in SBS 2011

Had to upgrade my server to new Dell T320. Support wanted me to install OpenManage Essentials which unfortunately installed SQL Server 2912 native client. Now I have 2 sqlserv apps running at the same time.
Is there a problem with SBS 2011 Standard running two different SQL Server native clients?
I have no idea why Dell OpenManage did not use the existing 2008R2 native client, but that is the way it is.
Can I combine or upgrade the database so they all use one and not both?
Thanks
Gerald Fay

Hi,
I have asked some who similar the SQL product, in general you can install the different version SQL client on the same operation system, but when the OpenManage Essentials
install a SQL instance on your SQL server, it will automatic upgrade same SQL component to the newer version.
For example, if your SQL server is 2008r2, you install the OpenManage Essentials built-in SQL instance which version is higher(such as 2012), by default it will automatic
upgrade the same SQL component to SQL 2012, I don’t similar with the OpenManage Essentials
tool, I think you can ask DELL® support for the further support.
Thanks.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Adding a 2012 r2 server to an SBS 2011 network

I have an established SBS 2011 network. Remote Web Access is activated and works fine. FQDN is: server1.companyname.com
I added a 2012 r2 server (to be used as an RDS server) and have joined it to the network. Name of this server is: server2. I can access the published apps on the server from within the network by going to IE and typing https://server2/rdweb.
However, I cannot access the server from the web and although I tried a few different suggested methods from various forums, including wiping and reinstalling the OS twice, I have not been successful. I know I am missing something
very important in the setup, not sure what though. And then is the certificate issue.
Is there a step by step process that somebody can help me with, or point me to, to configure the RDS sever to work with the SBS network? I would like to see my users accessing published programs on the RDS server from within and outside the network by
using the RemoteApp and Desktop Connection applet.
Thanks in advance.

Hi,
Thanks for posting.
There are a couple of options here, assuming i am understanding your question correctly, and that you want to allow connections to https://server2/rdweb from the public internet.
If this is the case then i would recommend you use the remote desktop gateway service installed on a separate server. It sounds like you have an all in one setup currently with the RDWEB role and session host on the same server. Whilst you could put the
gateway role on this server it isn't recommended for security reasons.
The other option you have is to allow connections directly from the internet by forwarding https and tcp389 from your firewall to your server - this isn't really recommended as it is a security risk.
Im not overly familiar with the setup provided by SBS, but my understanding is that it uses a pre-configured / customised version of the remote desktop gateway role. So you can't use this server.
Hope this helps.
Thanks
Denis
Regards,
Denis Cooper
MCITP EA - MCT
Help keep the forums tidy, if this has helped please mark it as an answer
Blog: http://www.windows-support.co.uk
Twitter: LinkedIn:

Server 2003 to SBS 2011 Error

Hello, I am migrating a customer from Server 2003 64bit with Exchange 2007 to SBS 2011.
I installed SBS 2011 in Migration mode, The install has completed. But in the SBS console there are no users or computers listed. I have done this migration from SBS 2008 many times and they are always there. But this is the first
time from Server 2003. Also, When I try to open the "Migrate the server program in the console it says that only supports migration from Small business server. I am pretty much stuck at this point as the migration guide doesn't mention
anything like this.
if I go to Active Directory Users and computers they users and computers are there.
Brian

I'd use the 2nd link, it seems complete. Its for SB2008 but it should apply to SBS0211 as well. Just make sure you have good backups of the source server in case you need to start over (I'd personally virtualize it and run a test migration).
Just make sure your answerfile was correct when you installed SBS2011. Note because you are coming from server 2003 the standard SBS OU structure won't be there which is why the SBS console won't see the users or computers. You'll need to
fix this up but I'm not sure if you should do it early on or last...
http://titlerequired.com/2013/12/04/quick-fix-sbs-essentials-ou-structure/
-- Al

Sudden Server Infrastructure Licensing errors SBS 2011 Standard install (10 months old)

The following errors began about a month ago and I can't figure out how to fix it. I especially don't like that it states the server will be shut down in 22 days. When I rebooted the server last week the problem went away for exactly 24 hours
then came back and seems to report every 4 hours.
Background:
Fresh SBS 2011 install last Dec. 7th (2012).
We did have an SBS 2003 server but it was never on the same network. We simply backed up the data off of its data drive. Exchange was backed up via OST to PST conversion then imported in. Only 10 - 12 users.
HP ProLiant server and the SBS 2011 DVDs were OEM supplied by HP but we installed NOT pre-installed.
Thx,
D
Server Infrastructure Licensing
38 10/8/2013 2:47:03 AM
18
Event Details:
The Root Domain Check detected a condition in your environment that is out of compliance with the licensing policy. This server will be automatically shut down if the issue is not corrected in 22 day(s) 8 hour(s) 0 minute(s). Please look for additional events
for Root Domain Check to troubleshoot.
Server Infrastructure Licensing 2
10/8/2013 2:47:03 AM 12
Event Details:
The Forest Trust Check in the Licensing component did not pass because error 0x80070008 occurred in function fe1 [RKIQ]. Not enough storage is available to process this command. Make sure that each primary domain controller in your Active Directory forest can
be contacted and the following services are running on it: Active Directory Domain Services (NTDS), DNS Server (DNS) and Kerberos Key Distribution Center (KDC). This server will be automatically shut down if the issue is not corrected.
Server Infrastructure Licensing 3
10/8/2013 2:47:03 AM 12
Event Details:
The FSMO Role Check in the Licensing component did not pass because error 0x80070008 occurred in function f2 [KRTC]. Not enough storage is available to process this command. Make sure that your DNS server can be contacted and the following services are running:
Active Directory Domain Services (NTDS), DNS Server (DNS), Kerberos Key Distribution Center (KDC). This server will be automatically shut down if the issue is not corrected.
Server Infrastructure Licensing 50
10/8/2013 2:47:03 AM 6
Event Details:
Root domain check did not pass because error 0x80070008 occurred in function f1980 [QJTA]. Not enough storage is available to process this command. Make sure that the domain that this computer is joined is reachable. This server will automatically shut down
if the issue cannot be corrected.

Not sure if it helps but I just wanted to add the following alerts emailed to me:An alert was detected on your network. Further investigation into the issue is recommended.
Computer: NESRV
Date/Time generated: 10/8/2013 2:47:03 PM
Title: Forest trust licensing error
Source: License Compliance service
Description:
The Forest Trust Check in the Licensing component did not pass because error 0x80070583 occurred in function fe1 [ZHUS].
Class does not exist.
Make sure that each primary domain controller in your Active Directory forest can be contacted and the following services are running on it: Active Directory Domain Services (NTDS), DNS Server (DNS) and Kerberos Key Distribution Center (KDC). This server will be automatically shut down if the issue is not corrected.
Computer: NESRV
Date/Time generated: 10/8/2013 2:47:03 PM
Title: FSMO roles licensing error
Source: License Compliance service
Description:
The FSMO Role Check in the Licensing component did not pass because error 0x80070583 occurred in function f2 [OKDF].
Class does not exist.
Make sure that your DNS server can be contacted and the following services are running: Active Directory Domain Services (NTDS), DNS Server (DNS), Kerberos Key Distribution Center (KDC). This server will be automatically shut down if the issue is not corrected.

Oracle 10g Express Edition doesn't works on Win SBS 2011

Deutsch
Hallo zusammen!
Ich ein kleines Problem mit der Installation von Oracle 10g Express Edition Release 10.2.0.1.0. Zuerst, ich muss die ältere Version nehmen, weil das Programm welches dann auf Oracle zugreift sehr „sensibel“ ist und wohlmöglich mit der neueren Version 11g nicht klar kommt.
Die Version 10g habe ich nun auf einen Server mit Windows SBS 2011 Essentials SP1 64-Bit installiert. Doch leider bekomme ich nach der Installation keinen Zugriff zum Localhost 127.0.0.1:8080/apex. Weder mit IE noch mit Firefox.
Meine Frage wäre funktioniert die Version 10g auf Windows SBS 2011 mit 64-bit überhaupt und falls ja, wo müsste man eventuell in Windows noch etwas einstellen damit man Zugriff auf 127.0.0.1:8080/apex hat?
Vielen Dank vorab!
English
Hello at all!
I’ve some problems with the installation of Oracle 10g Express Edition Release 10.2.0.1.0. At first i must take the old version of Oracle, because the program which needs Oracle ist very “sensitive” and i fear this program doesn’t cope with the new version.
So i install the version 10g on a server with Windows SBS 2011 Essentials SP1 64-Bit. Unfortunately i don't get an access to the localhost 127.0.0.1:8080/apex. I try it with IE and Firefox.
My question is does Oracle 10g works on Windows SBS 2011 64-bit and if yes, is there any setting to do on Windows to get the an access to 127.0.0.1:8080/apex?
Thank!

does Oracle 10g works on Windows SBS 2011 64-bitYou can see supported OSes in System Requirements for Windows platforms.
As always, not certified does not necessarily mean it won't work, but if you have problems...

SBS 2011 Migration Plan need advice

Hello,
I currently have an issue with our SBS 2011 server, its about to hit its 75 device limit and I need to seriously consider migration to a standard server. So I will need to migrate my MS exchange onto a new server as I don't like having exchange and my domain controller on the same box (want this is house and not 365)
If possible I want to upgrade the SBS 2011 license to a Server 2012 license and upgrade the CALs along with it. Is this possible and does anyone know where I can obtain pricing for exchange and the upgrade?
Thanks
Martyn.
This topic first appeared in the Spiceworks Community

I checked that and they are only pointing to the new SBS 2011 server. I turned off the DHCP server on the old server per the SBS 2011 Migration doc. If I Login to that computer as admin it logs in fine. I believe it's getting helled up on loading the GP.
Thanks for the quick reply!!!! I can remote in right now so if you can think of anything else. I am not even worried so much about the slow login as I am the folder redirection issues. I need to get these users going on the
new server as the old one will shutdown in 5 days.

Remote Web Access SBS 2011

My users are needing access to their computers from home and on work sites. they can log into remote web access to see their folders and email, but when we try to connect to their computers it downloads an rdp file and brings up RD gateway Server credentials
dialog box, and when credentials are put in it brings up the RD gateway dialog box again. it was working a few months back using administrative credentials. I have tried using different browsers to achieve this as it was working with Chrome, IE, and
Firefox, we can still get to the dashboard with Chrome and Firefox, but IE goes to the dashboard and then straight to a 404 error. I have checked to see if any certificates had expired and none have expired. I don't know what has changed, I have looked through
all information on this and no help. I am at my wits end, any help would be greatly appreciated.

Hi,
-->and when credentials are put in it brings up the RD gateway dialog box again.
Did you get any error message or just RD gateway dialog box bring up again and again?
Please check if that problematic user account was assigned correct permission to access those computers.
In addition, please use
Configuration Troubleshooter tool that Robert created to check IIS and Certificate. Meanwhile, please check if find more clues in log files.
Key Small Business Server 2011
Essentials Log Files
If any update, please feel free to let us know.
Hope this helps.
Best regards,
Justin Gu
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Migrate from Standard 2003 domain with seperate Exchange 2003 to SBS 2011 - possible? how-to?

Hi there,
I am currently planning on replacing two servers (one server 2003 standard (DC) and one server 2003 standard with exchange 2003) with a single machine running SBS 2011.
I already did several migrations SBS 2003 to SBS 2011, SBS 2008 to SBS 2011 - and I am wondering if the same can be done from 2003 Standard with separate exchange server 2003 to a single SBS 2011. Technically I can see no reason why this shouldn't work -
but so far I have been unsuccessful in finding guidelines or at least some success-stories from other users.
Did anyone do something like that? Any caveats I have to be aware of? Or is it supposed to be flawless as the SBS to SBS migrations I did so far?

Hi,
From the problem description, I understand that you would like to migrate Exchange server 2003 on Windows Server 2003 to SBS 2011.
At first, I would like to clarify one thing. Microsoft doesn’t have the official documentation towards this scenario. And Microsoft doesn’t
recommend dealing with that.
I noticed that there are two servers in your organization. One is Windows server 2003 for DC; the other one is Exchange server 2003. So it can’t
be the same as the documentation (Migrate to Windows Small Business Server 2011 Standard from Windows Small Business Server
2003).
I got your key point that you would like to know the detailed procedures (HOW TO). I suggest that you could visit the
SBSmigration.com to get further information you need. Since it’s not the Microsoft official method,
please do the test before your put it into your production environment.
Regards,
James
James Xiong
TechNet Community Support

A Global Catalog Server could not be located - All GC's are down SBS 2011

I have been searching through these forums and manage to find similar errors but am struggling to find an answer that applies to this me.
I seem to be having a number of issues with our SBS. I believe this was originally domain was previously on a SBS 2003 box before being moved to this SBS 2011 box last year, it has been running fine until yesterday. I cant see anything that has changed then
though.
Everything seems to point to DNS although I am struggling to pinpoint the actual cause. The most worrying is when I try to open something on the SBS such as AD sites and services.
the error is
Active Directory Domain Services - Naming information cannot be located because: The specified domain either does not exist or could not be contacted. Contact your system administrator to verify that your domain is properly configured and
is currently online.
Here is the IPconfig/all from the server
v
Host Name . . . . . . . . . . . . : SBS2012
Primary Dns Suffix . . . . . . . : Contosso.local
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : Contosso.local
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) 82575EB Gigabit Network Connecti
on #2
Physical Address. . . . . . . . . : 00-1E-67-39-23-14
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::8087:34f0:59f9:6a26%12(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.35.250(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.35.1
DHCPv6 IAID . . . . . . . . . . . : 301997671
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-17-39-46-22-00-1E-67-39-23-15
DNS Servers . . . . . . . . . . . : 192.168.35.250
NetBIOS over Tcpip. . . . . . . . : Enabled
PPP adapter RAS (Dial In) Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : RAS (Dial In) Interface
Physical Address. . . . . . . . . :
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.35.24(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{6E06F030-7526-11D2-BAF4-00600815A4BD}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.{A23E95B8-B5C2-4D88-BDE9-E9F1C2DD3902}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
and here is the nltest
nltest /server:sbs2012 /dsgetdc:contosso.local
DC: \\SBS2012.contosso.local
Address: \\192.168.35.250
Dom Guid: c50b6df3-9d22-4c87-b2a7-adadc4fd5ec1
Dom Name: contosso.local
Forest Name: contosso.local
Dc Site Name: Default-First-Site-Name
Our Site Name: Default-First-Site-Name
Flags: PDC GC DS LDAP KDC TIMESERV GTIMESERV WRITABLE DNS_DC DNS_DOMAIN
DNS_FOREST CLOSE_SITE FULL_SECRET WS
The command completed successfully
As far as I can see everything so far looks ok (highly possible I am missing something) but when I run a DCDIAG it gets messy
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = SBS2012
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SBS2012
Starting test: Connectivity
......................... SBS2012 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SBS2012
Starting test: Advertising
Fatal Error:DsGetDcName (SBS2012) call failed, error 1355
The Locator could not find the server.
......................... SBS2012 failed test Advertising
Starting test: FrsEvent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... SBS2012 passed test FrsEvent
Starting test: DFSREvent
......................... SBS2012 passed test DFSREvent
Starting test: SysVolCheck
......................... SBS2012 passed test SysVolCheck
Starting test: KccEvent
......................... SBS2012 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... SBS2012 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... SBS2012 passed test MachineAccount
Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=Contosso,DC=local
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=Contosso,DC=local
......................... SBS2012 failed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\SBS2012\netlogon)
[SBS2012] An net use or LsaPolicy operation failed with error 67,
The network name cannot be found..
......................... SBS2012 failed test NetLogons
Starting test: ObjectsReplicated
......................... SBS2012 passed test ObjectsReplicated
Starting test: Replications
[Replications Check,SBS2012] DsReplicaGetInfo(PENDING_OPS, NULL)
failed, error 0x2105 "Replication access was denied."
......................... SBS2012 failed test Replications
Starting test: RidManager
......................... SBS2012 passed test RidManager
Starting test: Services
Could not open NTDS Service on SBS2012, error 0x5
"Access is denied."
......................... SBS2012 failed test Services
Starting test: SystemLog
An error event occurred. EventID: 0x0000041E
Time Generated: 07/12/2013 08:27:32
Event String:
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
An error event occurred. EventID: 0x0000041E
Time Generated: 07/12/2013 08:32:32
Event String:
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
An error event occurred. EventID: 0x0000041E
Time Generated: 07/12/2013 08:37:32
Event String:
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
An error event occurred. EventID: 0x0000041E
Time Generated: 07/12/2013 08:42:32
Event String:
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
An error event occurred. EventID: 0x0000041E
Time Generated: 07/12/2013 08:47:32
Event String:
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
An error event occurred. EventID: 0x0000041E
Time Generated: 07/12/2013 08:52:32
Event String:
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
An error event occurred. EventID: 0x00000457
Time Generated: 07/12/2013 08:54:09
Event String:
Driver EPSON WorkForce 645 Series required for printer EPSON WorkForce 645 Series is unknown. Contact the administrator to install the driver before you log in again.
An error event occurred. EventID: 0x00000457
Time Generated: 07/12/2013 08:54:10
Event String:
Driver FX DocuCentre-IV C2270 PCL 6 required for printer scanner - 212 Manukau Rd Epsom is unknown. Contact the administrator to install the driver before you log in again.
An error event occurred. EventID: 0x00000457
Time Generated: 07/12/2013 08:54:10
Event String:
Driver HP ePrint required for printer HP ePrint is unknown. Contact the administrator to install the driver before you log in again.
An error event occurred. EventID: 0x00000457
Time Generated: 07/12/2013 08:54:11
Event String:
Driver PDF Complete Converter required for printer PDF Complete is unknown. Contact the administrator to install the driver before you log in again.
An error event occurred. EventID: 0x00000457
Time Generated: 07/12/2013 08:54:14
Event String:
Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again.
An error event occurred. EventID: 0x0000041E
Time Generated: 07/12/2013 08:57:32
Event String:
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
An error event occurred. EventID: 0x0000041E
Time Generated: 07/12/2013 09:02:33
Event String:
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
A warning event occurred. EventID: 0x00002724
Time Generated: 07/12/2013 09:03:32
Event String:
This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses.
An error event occurred. EventID: 0x0000041A
Time Generated: 07/12/2013 09:03:33
Event String:
The DHCP/BINL service on the local machine encountered a network error. The error was: 0x 2.
An error event occurred. EventID: 0x0000041E
Time Generated: 07/12/2013 09:03:33
Event String:
The DHCP/BINL service on this computer is shutting down. See the previous event log messages for reasons.
An error event occurred. EventID: 0xC0002720
Time Generated: 07/12/2013 09:03:45
Event String:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
An error event occurred. EventID: 0xC0002720
Time Generated: 07/12/2013 09:03:46
Event String:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
An error event occurred. EventID: 0xC0002720
Time Generated: 07/12/2013 09:03:46
Event String:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
An error event occurred. EventID: 0xC0002720
Time Generated: 07/12/2013 09:03:46
Event String:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
An error event occurred. EventID: 0xC0002720
Time Generated: 07/12/2013 09:03:46
Event String:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
An error event occurred. EventID: 0x00000406
Time Generated: 07/12/2013 09:07:33
Event String:
The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.
An error event occurred. EventID: 0x00000406
Time Generated: 07/12/2013 09:12:34
Event String:
The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.
An error event occurred. EventID: 0xC00038D6
Time Generated: 07/12/2013 09:16:24
Event String:
The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.
An error event occurred. EventID: 0x0000041E
Time Generated: 07/12/2013 09:17:34
Event String:
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
An error event occurred. EventID: 0x0000041E
Time Generated: 07/12/2013 09:22:34
Event String:
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
......................... SBS2012 failed test SystemLog
Starting test: VerifyReferences
......................... SBS2012 passed test VerifyReferences
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : Contosso
Starting test: CheckSDRefDom
......................... Contosso passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Contosso passed test CrossRefValidation
Running enterprise tests on : Contosso.local
Starting test: LocatorCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error
1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
......................... Contosso.local failed test LocatorCheck
Starting test: Intersite
......................... Contosso.local passed test Intersite
I found a few people who have had similar issues that was caused by the "netlogon" service being paused or stopped but in my case it is set to automatically start and is running.
I have also posted this to serverfault (cant post links yet serverfault.com/questions/522691/a-global-catalog-server-could-not-be-located-all-gcs-are-down) added as there may be info there that may help.
Thanks for taking the time to read this, hopefully someone out there has come across this before or can offer something in regards to the next steps I should take.

Some troubleshooting ideas:
0. Check if the DCs can resolve each other using their DNSHostName. If not, this indicates some DNS misconfiguration
-- you need to fix that first.
1. Check if the both the DCs are pointing to the same DNS server (or DNS servers that are replica of each
other). Run: "ipconfig /all" and check its output. If not, correct the DNS client settings and run dcdiag after sometime.
2. Check if dynamic updates are "turned on" on the DNS server.
3. Try re-registering the DCs SRV records by either restarting netlogon service or by running the following
command:
nltest.exe /dsregdns

Migrating from SBS 2011 to Windows Server 2012R2 Standard with 365

Im looking to move SBS 2011 to Server 2012R2 standard and with a 365 migration as well.
Im thinking
BPA for AD (health check)
Add the Server2012R2 as a DC
Ensure replication
Move DHCP
Change DNS
Now this is where I get lost, now Im lost to use either dirsync or add essentials service, I have gone for standard and 30 cals with the option as I have 28 users and the essentials service would make everything quite nice for remote access and backups
etc.... however I don't know whether to just use dirsync with password replication instead ?
Currently Im aiming towards getting the dc up and running then enabling essentials on the dc but I dont know how it will effect SBS and having essentials on the same network and sync'ing people to the cloud ? So Should I use DirSync on a different server
instead to sync up to azure ?
Finally with 365 I have only ever done a migration involving an export of pst's from an exchange box and then on a new domain with new pc's and reimport the pst's on the user accounts in outlook.
However I have read when migrating to 365 was using exchange 2010 there was a application
to move everything across however you needed an ssl cert iirc ? so I dont know how it works now since the nice new dashboard upgrade (assuming the tool has been updated like dirsync)
along with the above how does AD now know where exahcnge if you use the migration app with an ssl cert and is it a case of still running the 365 config tool to configure each user to look at their mail in the
cloud ? Also is it a good idea to enable essentials from the start of the 2012r2 dc for replication top 365 or to use dirsync ?
then finally when replications is all good start transferring the FSMO roles over to the new DC and demote and remove the SBS server
I have seen (below) but i dont think it covers this scenario and I cant be the only person in this situation =\ ?
http://blogs.technet.com/b/infratalks/archive/2012/09/07/transition-from-small-business-server-to-standard-windows-server.aspx
http://social.technet.microsoft.com/Forums/en-US/f552ef12-07a9-4f7a-bf5e-24500c3e1dc3/migrate-sbs-2011-to-server-2012-standard?forum=smallbusinessserver
http://social.technet.microsoft.com/Forums/en-US/e1d4b09f-8857-4ef6-9a80-6a906e76b688/how-to-migrate-sbs-2011-to-standard-2012-server?forum=smallbusinessserver

Hi,
Would you please let us know current situation of this issue? If any update, please feel free to let us know.
à
Currently Im aiming towards getting the dc up and running then enabling essentials on the dc but I dont know how it will effect SBS and having essentials on the same network
and sync'ing people to the cloud?
I’m a little confused with the description. Did you mean that set up DC (Windows Server 2012 Standard) and
then install the Windows Server Essentials Experience role? If so, when you migrate, please refer to the article:
Migrate from Previous Versions to Windows Server 2012 R2 Essentials or Windows Server Essentials Experience
Regarding to migrate Exchange to Office 365, please refer to following articles.
Migrate
All Mailboxes to the Cloud with a Cutover Exchange Migration
Step-By-Step:
Migrating from Exchange 2007 to Office 365
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft
does not guarantee the accuracy of this information.
Meanwhile, there is an additional article that you can refer to:
Manage Office 365 in Windows Server Essentials. It may help us to understand Office 365 in Server Essentials clearly.
If anything I misunderstand, please don’t hesitate to let me know.
Hope this helps.
Best regards,
Justin Gu

Joining Windows 2012 Server to SBS 2011 Domain

Hi All,
I have been trying to get a new Windows 2012 Server to join a SBS 2011 domain. The error message I am getting is:
The following error occurred attempting to join the domain: xxxx. The specified domain does not exist or could not be contacted.
I have a bunch of other Windows 7/XP workstations that have joined successfully. I have also tried disabling TCP/IP v6 on the 2012 server and joining the domain with the netdom command. The SBS 2011 server is listed as the primary DNS server on the 2012
server.
What else can I try here?
Thanks,
DR.

I am having the same issue has the OP. I have my DNS settings pointing to the sbs server that hosts the domain and DNS. I am receiving the same error.
Server 2012 R2 Standard
SBS 2011 Essentials
Jerry T

Expiring Exchange certs on a SBS 2011 Standard server

We have many servers running SBS 2011 standard. On one particular server (which just passed the three year mark this past weekend) we are seeing MSExchangeTransport Event ID 12015 and 12016, telling us that an internal transport certificate has expired.
Based upon research, using the Get-ExchangeCertificate command, I have found that there are five different thumbprints indicating certificates. We currently have a commercial 5 year cert for the web user interface and AD synchronization.
Looking at the results of Get-ExchangeCertificate | fl, I can see that the first certificate (server.domain.local) goes from 4/10/2014 to 4/10/2015, the second (remote.domainname.com) goes from 8/16/2011 to 8/16/2016 (this is the commercial cert), the third
goes from 8/15/2011 to 8/12/2021, the fourth (this is the thumbprint referenced in the 12015 error) goes from 8/15/2011 to 8/14/2013 and the fifth goes from 8/15/2011 to 8/14/2013.
Reviewing the event log shows that the fifth certificate (also expired) is never referenced.
Several accepted answers on technet and other sites show that running Fix My Network will correct the problem, but running FMN on this server just shows me that my DHCP server is not running (which it is) and it wants me to create a static IPv6 address (which
it did not accomplish.)
What is the best way to fix a problem where important self-signed certificates expire after only two years?
Randy
MCP SBSC

Hi Randy,
I suggest run following command to get Self-signed certificate on your Exchange 2010 server:
Get-ExchangeCertificate | FL
Please collect the certificate which "IsSelfSigned" parameter value is True.
If it is not expired, please binding the existing certificate with IIS and SMTP service. Detailed command as below:
Get-ExchangeCertificate -Thumbprint
XXXXX876C45D19BA885E9FA96C48DD0C7DCXXXXX | Enable-ExchangeCertificate
-Services "IIS,SMTP"
If it is expired, I suggest re-create a new one. Detailed command as below:
Get-ExchangeCertificate -Thumbprint
XXXXX876C45D19BA885E9FA96C48DD0C7DCXXXXX | New-ExchangeCertificate
-Services "IIS,SMTP,IMAP,POP"
Please note, the Thumbprint in the example above in the result of running Get-ExchangeCertificate | FL
command.
Since SBS is different from Exchange server, I also suggest ask SBS Forum to double confirm this issue so that you can get more professional suggestions. For your convenience:
http://social.technet.microsoft.com/Forums/en-US/home?forum=smallbusinessserver
Please correct me if there is any misunderstanding.
Thanks
Mavis
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Mavis Huang
TechNet Community Support

SBS 2011 VM and Server 2012 R2 Hyper-V host. After rebuilding the host image, no email is received, EMC states "You don't have sufficient permissions to view this data" when looking at organization config. Server config not shown on EMC.

Hyper-V Host Server 2012 R2 x64 drive c:
All VMs, including SBS 2011 Standard x64 are on drive d:
I replaced my motherboard and defined a Marvell RAID 1 Mirror for my boot drive C:. My drive D: containing all of my Hyper V machines remained untouched since the new MB had Intel Matrix Controller with RAID 5, as did the old MB.
Since the C: drives are a few bytes smaller after configured as a RAID 1, I was unable to restore drive C from the image copy, so I rebuilt a new Hyper-V Host identical as possible using Server 2012 R2 x64. I had to redefine the Hyper-V machines on
the host, and the 1st time I brought it all (host and VMs) I had to reconfigure the NICs due to new MAC addresses, and verifying SBS 2011 DNS and DHCP for all physical and Hyper-V machines. Otherwise my Hyper-V SBS 2011 x(64) wasn't touched.
Now the SBS Exchange 2010 is not receiving mail. In the Exchange Management Console clicking on the Organization config gives me a highlighted error "You don't have sufficient permissions to view this data". The Server
Config is no longer on the EMC. The Recipient Config looks fine.
Outlook 2013 x64 connects to the Exchange Server, but no new mail appeared. There were just a few older messages that came in since the last time I opened Outlook. My public DNS on GoDaddy was not changed. I did not change sending mail
through my ISP Sonic.net. The SBS internal DNS doesn't have an MX record, but I'm not sure it ever did since my GoDaddy public DNS has an MX record.
I tried restoring to an earlier Image Copy, but that made no difference. I'm using the Windows Backup from SBS 2011 for my daily image copy backups.
- Michael Faklis

Hi Michael,
à
After more research and running the Best Practices report from the EMC, I am missing a slew of ManagementRolesAndRoleGroups from the RBAC container.
Based on your description, it seems that you have find the cause of this issue. On current situation, I still
suggest that you should run
SBS 2011 BPA and then check if can find some relevant errors. Just for a confirmation.
Meanwhile, please refer to following articles and check if can help you.
Apply
missing Exchange 2010 RBAC Management Roles and Policies
RBAC Manager
(Exchange 2010 SP2)
Hope this helps.
Best regards,
Justin Gu

Server 2012 and Exchange 2013 Migration from SBS 2011

Server UpgradeI'm migrating an SBS 2011 server to a new machine with Server 2012 R2 and a Hyper-V server running Exchange 2013. I've set up the new machine, all is running well in a test environment. I now want to migrate the old server to new. These are the steps I'm going to take and I wanted advice for any modifications or errors. 1. Demote DC on Server 2012 that I set up to test. 2. Join new Server 2012 to existing SBS 2011 domain. 3. Promote Server 2012 to DC. 4. Join the Hyper-V Server 2012 to the Server 2012 domain.5. Migrate Exchange 2010 on the SBS 2011 Server to Exchange 2013. 6. Transfer FSMO role from SBS 2011 Server to Server 2012 DC. I'll copy shared data files using robocopy.The only things I'm not sure about is the FSMO order, when to do that and the fact that I already have Exchange 2013 installed in the test...
This topic first appeared in the Spiceworks Community

I recently acquired a SuperMicro chassis that has a SAS2 expander backplane. It has SFF-8087 ports on it.http://www.supermicro.com/manuals/other/BPN-SAS2-846EL.pdfI made a post on another forum and someone mentioned that the card couldn't be used with that backplane since it's a SATA controller, however, the backplane is both SAS and SATA device compliant, it's only the RAID controller, as far as I know, that is a "SATA II" controller, and not a SAS controller.So, I couldn't find anything in the official documentation of this controller on whether or not it was able to control SAS devices. The card itself has a 3 SFF-8087 ports though, couldn't this theoretically still be used with a SFF-8087 to SFF-8087 cable(seen below)since the backplane is a SAS/SATA backplane?...

RD Gateway Server Credentials in SBS 2011, new prompt in RWA

Similar Messages

Maybe you are looking for