Windows Server 2012 R2 Certificate Services - Online Responder DNS Alias

I am setting up a 2012 R2 PKI. Going with an offline standalone Root with an enterprise issuing CA. This is how I'd like to configure OSCP if possible & supported.
Build an OSCP array. Members will be in different sites. One in each office, one in the data center, and one in the DR data center. They will all be online 24x7. Host names are oscp1.company.com, oscp2.company.com, etc.
I want to create four A records in DNS for OSCP.company.com. One with each host's IP address.
The reason behind this is setting up the AIA extension. If I need to add a new online responder, I don't want to have to re-issue certificates so everyone can use it.
Will this work?

definitely, you can create A records with desired name as many as you need and use single "ocsp.company.com" URL in the AIA extension. This will work unless DNS resolves this URL to a OCSP service. In this scenario you may consider to configure "Netmask
ordering" in DNS properties, so DNS will return the nearest OCSP server IP address.
My weblog: en-us.sysadmins.lv
PowerShell PKI Module: pspki.codeplex.com
PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
Check out new:
SSL Certificate Verifier
Check out new:
PowerShell FCIV tool.

Similar Messages

  • Windows Server 2012 R2 Fax Service - Windows 7 Client "You do not have permissions to complete this operation. Contact your fax administrator for more assistance"

    First I have tried all sorts of searches and and all I come up with is things related to Windows Server 2008.
    1. I have Fax Service running on my 2012 R2 File and Print Server.
    a. It can send faxes from the logged in domain user
    b. It does not need to receive faxes because we have another machine for that
    2. I have added the domain user I am using on the Windows 7 machine to the Accounts List in Fax Manager
    3. I can not seem to find any logging saying that there is a security problem (Event Log, etc...)
    Please point me in the correct direction as I need to have my staff use Print to Fax from our Practice Management Application.

    Hi Shawn,
    à
    You do not have permissions to complete this operation. Contact your fax administrator for more assistance
    From the error message, please check if share the Fax on the server. Meanwhile, please also check if assign
    correct permissions in Security tab under Fax properties.
    If any update, please feel free to let me know.
    Hope this helps.
    Best regards,
    Justin Gu
    1. Fax Sharing is enabled and can see the Shared Fax Printer on other machines.
    2. At least 2 domain groups that the Windows 7 user is in are in the Security Section, set to be able to fax. One othem can manage fax.

  • Using Windows Server 2012 per-User RDS CAL on Server 2008 R2 Session Host

    I have a Remote Desktop Licensing Server setup on my domain controller running Windows Server 2012 R2. I have installed a
    ’Windows Server 2012 Remote Desktop Services per-User CAL’ there and activated the licensing server already.
    Currently I use ONLY Windows Server 2008 R2 machines as RDS Session Hosts (in the future I plan to transition them to 2012 R2, hence the CAL I bought is
    already in the newest version).
    I have already configured my WS 2008 RDS Session Hosts: set
    Per-User licensing mode and specified license server address. The connectivity between my Session Host(s) and my License Server seems to be ok as the
    Remote Desktop Session Host Configuration window on the Session Host correctly lists the 2012 per-user
    license (CAL installed on server) from the license server.
    On the License Server I can also see event logs entries (in
    Microsoft-Windows-TerminalServices-Licensing/Admin), indicating that the user has been issued a license.
    The issue I am having is that the license being issued is
    2008 Per User CAL license (Build-in OverUsed - temporary) and not the 2012 Per User CAL license which is the only license installed on the server. According to the RDS CAL interoperability matrix at
    social.technet.microsoft.com/wiki/contents/articles/14988.rds-and-ts-cal-interoperability-matrix.aspx, I was expecting the 2012 license to be backward-compatible with 2008 client (and that
    in the absence of legacy licenses, the (only) 2012 license would be used for all clients connecting to the licensing server)
    Before I bought my license, I found this document: 
    download.microsoft.com/download/3/D/4/3D42BDC2-6725-4B29-B75A-A5B04179958B/WindowsServerRDS_VLBrief.pdf 
    which says that - "newer version RDS CALs can be used with an older version of the server software" (In section FAQ, Q4), which means to me that
    the 2012 license would work as-is for the 2008 Server and gives me flexibility when upgrading to the new server version.
    How can I make this CAL work in my environment? 
    Note:
    I have already explicitly disabled
    Prevent license upgrade Group Policy setting which I assumed would fix the issue but nothing has changed.
    Then I have enabled License server security group Group Polity setting
    and added computers from my domain to RDS Endpoint Servers AD group. I have also created new AD group called
    Terminal Server Computers and added the computer accounts there, but it changes
    nothing. Reference - technet.microsoft.com/en-us/library/ee791761.aspx , technet.microsoft.com/en-us/library/cc725704.aspx and blogs.msdn.com/b/rds/archive/2009/09/17/control-the-issuance-of-rds-cals.aspx.
    I found one potential ‘workaround’ which involved manually downgrading my CAL license by calling
    Microsoft Clearinghouse. I am very reluctant do to so because, as I upgrade parts of my infrastructure to Server 2012, I’d need to then ask Microsoft to manually upgrade a part of my license back as well.
    Am I missing something? What should I do to get my 2012 CAL to be issued to 2008 R2 server

    Hi, I have tried several other possibilities.
    I change expire date for my temporary assigned license (2008 CAL overused). It can be done, by changing Active Directory user properties – msTSExpireDate. When I restart my Session Host server and logged again, my license was renewed
    for next 60 days (event ID - 4145).
    I also delete information about license for this user (clear msTSExpireDate and msTSLicenseVersion). And the license was successfully removed from License Manager. After another SH restart it gets the same – 2008 overused – license
    (event ID 4143 - license server has successfully issued …)
    I now, that changing info in AD attributes is a little trick, and this is not a real value - only a reference, but it was useful to delete or change expiration date of license. But it didn’t change type of license as I expected.
    Reference -
    http://discussions.citrix.com/topic/243320-windows-2008-licensing-questions/
    To TP:
    I have found your post with information:
    If you have a Server 2012 RD Licensing server you may install your 2012 RDS CALs on it (no downgrade necessary) and then set your Server 2008 R2 RDSH to
    use the 2012 RDL server.  The 2012 RD Licensing server will automatically issue the CALs as 2008. -
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/6046ded1-96bf-4d79-89ce-38aac2a6694e/can-we-use-windows-server-2012-rds-cal-license-in-rds-2008-r2-server?forum=winserverTS
    And it showing my situation in brief. I also found
    similar problems, but the solutions don’t meet my expectations.
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/dcfb1966-89a8-4b5d-bf5a-ff03ac0b7a66/rds-cal-licenses-not-recognized?forum=winserverTS
    – “sudden all of the CALS were available”
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/f1228599-8452-4a3e-a263-061de14bfcfe/server-2012-rds-builtin-overused-cals-issue?forum=winserverTS
    – “this should go away after a while”
    Is there a way to determine this time you mentioned before? Or should I just wait patiently…

  • Windows server 2012 essentials errors

    I get 2 errors in an email since I turned on my windows 2012 essentials server that I can not resolve. One is related to my router setup and the other is about the media server. Have not found any solutions to either of these problems and the router setup
    show to be good on the dash board. Anywhere access is also working fine but it show the error below. Cannot get the media services to say anything except to try restarting the server and run the setup again.
    CCS-SERVER: The router is not configured correctly
        The router is not configured correctly for Anywhere Access. You must configure the router to remotely access the network.
        12/7/2014 12:49:39 AM
    Existing alerts:
    CCS-SERVER: One or more services are not running
        The following important Windows services are not running: Windows Server Media Streaming Service (wssmss) Note: Services can be stopped when software updates are applied.
        11/13/2014 7:18:27 PM
    Any help with this would be appreciated.

    Hi,
    à
    The router is not configured correctly
    Please open Dashboard, click
    Settings. In Settings panel, navigate to Anywhere Access tab, did you find anything as “Issues detected. Click Repair to attempt resolving the issues.”? If it exists, please click “Repair…” button and check if can help you.
    For Router Setup, please refer to following article.
    Windows
    Server 2012 Essentials: Router Setup
    à
    Anywhere access is also working fine but it show the error below.
    Did you remember that encounter similar router issues when previously Set up Anywhere Access? If Remote Web
    Access and other features really run as normal, you may be able to ignore it.
    anywhere
    access wizard issues
    à
    One or more services are not running. The following important Windows services are not running: Windows Server Media Streaming Service (wssmss)
    Please logon the Windows Server 2012 Essentials, type
    services.msc on RUN to open Service panel, navigate to Windows Server Media Streaming Service, open its Properties and start it. Did it start successfully or get error message?
    If issue still exist, please open Event Viewer and check if find more clues. Meanwhile, please also check other
    relevant log files.
    Windows
    Server Essentials 2012/2012 R2 Log Files
    If any update, please feel free to let me know.
    Hope this helps.
    Best regards,
    Justin Gu
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Windows server 2012 as primary DC and DNS server and windows server 2003 as secondary DC and DNS

    Migration from windows server 2003 AD DC and DNS server to windows server 2012 R2,
    Cannot I set up Windows server 2012 R2 as primary DC and DNS  , windows server 2003 as secondary DC and DNS ? (for backup server when server 2012 fail, user can continue to login and access internet services)

    You can mix both as long as your Forest and Domain Functional level are Windows Server 2003. However, I would like to bring your attention to this blog about known problems when mixing DCs with Windows Server 2003 and 2012 R2 OS:
    http://blogs.technet.com/b/askds/archive/2014/07/23/it-turns-out-that-weird-things-can-happen-when-you-mix-windows-server-2003-and-windows-server-2012-r2-domain-controllers.aspx
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Windows Server 2012 R2 Session Host Server Temp Profile issue.

    HI,
    I successfully Deployed Windows server 2012 r2 Terminal services with High Availability.
    After Rebooting Session Host Server i am facing Temp Profile issue. After i Deleted registry and rebooting server and tried to login again but same popup message you have login with temp profile.
    Any suggestions or any hints would be GREATLY appreciated
    /HR

    how did you delete the profile?
    also are you using UPD disks?
    What errors are shown in the event log if any?
    Regards,
    Denis Cooper
    MCITP EA - MCT
    Help keep the forums tidy, if this has helped please mark it as an answer
    My Blog
    LinkedIn:

  • How to allow more than two users on remote desktop on windows server 2012 foundation?

    i have a dell server power edge T300 with windows server 2012 foundation. I am unable to connect more than two remote desktop at once.

    Hi,
    Add to Brain, you cannot have more than 15 user accounts in Windows Server 2012 Foundation.
    In order to access a hosted application, such as Microsoft® Office, a license for Windows Server 2012 Remote Desktop Services is required for each user account (not to exceed 15 user
    accounts) that directly or indirectly uses RD Gateway to host a graphical user interface, including using Remote Desktop Connection (RDC) client. When using Remote Desktop Services, you may not install or use Remote Desktop Connection Broker or Remote
    Desktop Virtualization Host role services. For more information about Remote Desktop CALs , see http://go.microsoft.com/fwlink/?LinkId=140238.
    http://technet.microsoft.com/en-us/library/jj679892.aspx
    Hope this helps.
    Jeremy Wu
    TechNet Community Support

  • How to enble trackpad gestures during a remote dekstop session to windows server 2012

    Hello, do you know a trick to enable trackpad gesture as, swype, double touch and so on duringa remote   dekstop connection to windows server 2012? because it only recognise the physical mous click,ù and it really annoying.
    thank for help

    Hi,
    Add to Brain, you cannot have more than 15 user accounts in Windows Server 2012 Foundation.
    In order to access a hosted application, such as Microsoft® Office, a license for Windows Server 2012 Remote Desktop Services is required for each user account (not to exceed 15 user
    accounts) that directly or indirectly uses RD Gateway to host a graphical user interface, including using Remote Desktop Connection (RDC) client. When using Remote Desktop Services, you may not install or use Remote Desktop Connection Broker or Remote
    Desktop Virtualization Host role services. For more information about Remote Desktop CALs , see http://go.microsoft.com/fwlink/?LinkId=140238.
    http://technet.microsoft.com/en-us/library/jj679892.aspx
    Hope this helps.
    Jeremy Wu
    TechNet Community Support

  • Windows Server 2012 - Hyper-V - iSCSI SAN - All Hyper-V Guests stops responding and extensive disk read/write

    We have a problem with one of our deployments of Windows Server 2012 Hyper-V with a 2 node cluster connected to a iSCSI SAN.
    Our setup:
    Hosts - Both run Windows Server 2012 Standard and are clustered.
    HP ProLiant G7, 24 GB RAM, 2 teamed NIC dedicated to Virtual Machines and Management, 2 teamed NIC dedicated to iSCSI storage. - This is the primary host and normaly all VMs run on this host.
    HP ProLiant G5, 20 GB RAM, 1 NIC dedicated to Virtual Machines and Management, 2 teamed NIC dedicated to iSCSI storage. - This is the secondary host that and is intended to be used in case of failure of the primary host.
    We have no antivirus on the hosts and the scheduled ShadowCopy (previous version of files) is switched of.
    iSCSI SAN:
    QNAP NAS TS-869 Pro, 8 INTEL SSDSA2CW160G3 160 GB i a RAID 5 with a Host Spare. 2 Teamed NIC.
    Switch:
    DLINK DGS-1210-16 - Both the network cards of the Hosts that are dedicated to the Storage and the Storage itself are connected to the same switch and nothing else is connected to this switch.
    Virtual Machines:
    3 Windows Server 2012 Standard - 1 DC, 1 FileServer, 1 Application Server.
    1 Windows Server 2008 Standard Exchange Server.
    All VMs are using dynamic disks (as recommended by Microsoft).
    Updates
    We have applied the most resent updates to the Hosts, WMs and iSCSI SAN about 3 weeks ago with no change in our problem and we continually update the setup.
    Normal operation
    Normally this setup works just fine and we see no real difference in speed in startup, file copy and processing speed in LoB applications of this setup compared to a single host with 2 10000 RPM Disks. Normal network speed is 10-200 Mbit, but occasionally
    we see speeds up to 400 Mbit/s of combined read/write for instance during file repair
    Our Problem
    Our problem is that for some reason all of the VMs stops responding or responds very slowly and you can for instance not send CTRL-ALT-DEL to a VM in the Hyper-V console, or for instance start task manager when already logged in.
    Symptoms (i.e. this happens, or does not happen, at the same time)
    I we look at resource monitor on the host then we see that there is often an extensive read from a VHDX of one of the VMs (40-60 Mbyte/s) and a combined write speed to many files in \HarddiskVolume5\System Volume Information\{<someguid and no file extension>}.
    See iamge below.
    The combined network speed to the iSCSI SAN is about 500-600 Mbit/s.
    When this happens it is usually during and after a VSS ShadowCopy backup, but has also happens during hours where no backup should be running (i.e. during daytime when the backup has finished hours ago according to the log files). There is however
    not that extensive writes to the backup file that is created on an external hard drive and this does not seem to happen during all backups (we have manually checked a few times, but it is hard to say since this error does not seem leave any traces in event
    viewer).
    We cannot find any indication that the VMs themself detect any problem and we see no increase of errors (for example storage related errors) in the eventlog inside the VMs.
    The QNAP uses about 50% processing Power on all cores.
    We see no dropped packets on the switch.
    (I have split the image to save horizontal space).
    Unable to recreate the problem / find definitive trigger
    We have not succeeded in recreating the problem manually by, for instance, running chkdsk or defrag in VM and Hosts, copy and remove large files to VMs, running CPU and Disk intensive operations inside a VM (for instance scan and repair a database file).
    Questions
    Why does all VMs stop responding and why is there such intensive Read/Writes to the iSCSI SAN?
    Could it be anything in our setup that cannot handle all the read/write requests? For instance the iSCSI SAN, the hosts, etc?
    What can we do about this? Should we use MultiPath IO instead of NIC teaming to the SAN, limit bandwith to the SAN, etc?

    Hi,
    > All VMs are using dynamic disks (as recommended by Microsoft).
    If this is a testing environment, it’s okay, but if this a production environment, it’s not recommended. Fixed VHDs are recommended for production instead of dynamically expanding or differencing VHDs.
    Hyper-V: Dynamic virtual hard disks are not recommended for virtual machines that run server workloads in a production environment
    http://technet.microsoft.com/en-us/library/ee941151(v=WS.10).aspx
    > This is the primary host and normaly all VMs run on this host.
    According to your posting, we know that you have Cluster Shared Volumes in the Hyper-V cluster, but why not distribute your VMs into two Hyper-V hosts.
    Use Cluster Shared Volumes in a Windows Server 2012 Failover Cluster
    http://technet.microsoft.com/en-us/library/jj612868.aspx
    > 2 teamed NIC dedicated to iSCSI storage.
    Use Microsoft MultiPath IO (MPIO) to manage multiple paths to iSCSI storage. Microsoft does not support teaming on network adapters that are used to connect to iSCSI-based storage devices. (At least it’s not supported until Windows Server 2008 R2. Although
    Windows Server 2012 has built-in network teaming feature, I don’t article which declare that Windows Server 2012 network teaming support iSCSI connection)
    Understanding Requirements for Failover Clusters
    http://technet.microsoft.com/en-us/library/cc771404.aspx
    > I have seen using MPIO suggests using different subnets, is this a requirement for using MPIO
    > or is this just a way to make sure that you do not run out of IP adressess?
    What I found is: if it is possible, isolate the iSCSI and data networks that reside on the same switch infrastructure through the use of VLANs and separate subnets. Redundant network paths from the server to the storage system via MPIO will maximize availability
    and performance. Of course you can set these two NICs in separate subnets, but I don’t think it is necessary.
    > Why should it be better to not have dedicated wireing for iSCSI and Management?
    It is recommended that the iSCSI SAN network be separated (logically or physically) from the data network workloads. This ‘best practice’ network configuration optimizes performance and reliability.
    Check that and modify cluster configuration, monitor it and give us feedback for further troubleshooting.
    For more information please refer to following MS articles:
    Volume Shadow Copy Service
    http://technet.microsoft.com/en-us/library/ee923636(WS.10).aspx
    Support for Multipath I/O (MPIO)
    http://technet.microsoft.com/en-us/library/cc770294.aspx
    Deployments and Tests in an iSCSI SAN
    http://technet.microsoft.com/en-US/library/bb649502(v=SQL.90).aspx
    Hope this helps!
    TechNet Subscriber Support
    If you are
    TechNet Subscription user and have any feedback on our support quality, please send your feedback
    here.
    Lawrence
    TechNet Community Support

  • SharePoint server 2013 Search Service App on Windows server 2012 R2 not working

    Hi all,
    I installed SharePoint server 2013 on Windows  server 2012 R2 using VirtualBox.  I created a DC(domain controller) server with a domain set up on one VM and it has SQL server 2012 SP1 installed. Then SharePoint 2013 on another VM
    was set up to access the DC server.  Everything seems working except Search Service App which cannot be sucessfully set up. Creation process for Search service app says Successful and 4 search databases were created and look fine. But when I navigate
    to search service app admin page, it gives error info:
    System status:  The search service is not able to connect to the machine that hosts the administration component. Verify that the administration component '386f2cd6-47ca-4b3a-aeb5-d9116772ef16' in search application 'Search Service Application 1' is
    in a good state and try again.
    Search Application Topology:  Unable to retrieve topology component health states. This may be because the admin component is not up and running.
    From event viewer, I see following errors:
    (1) Error From source: SharePoint Server
    Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (b7c72eb8-cbaf-435e-b4c9-963cb6e4e745).
    Reason: The object you are trying to create already exists. Try again using a different name. 
    Technical Support Details:
    System.Runtime.InteropServices.COMException (0x80040D02): The object you are trying to create already exists. Try again using a different name. 
       at Microsoft.Office.Server.Search.Administration.SearchServiceInstance.Synchronize()
       at Microsoft.Office.Server.Administration.ApplicationServerJob.ProvisionLocalSharedServiceInstances(Boolean isAdministrationServiceJob)
    (2) Error From source: SharePoint Server Search
    Could not access the Search database. A generic error occurred while trying to access the database to obtain the schema version info.
    Context: Application '386f2cd6-47ca-4b3a-aeb5-d9116772ef16'
    (3) Warning from source: SharePoint Server Search
    A database error occurred. Source: .Net SqlClient Data Provider Code: 8169 occurred 0 time(s) Description:  Error ordinal: 1 Message: Conversion failed when converting from a character string to uniqueidentifier., Class: 16, Number: 8169, State: 2   
    at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
    (4) Error From source: SharePoint Server
    Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (b7c72eb8-cbaf-435e-b4c9-963cb6e4e745).
    Reason: The gatherer application could not be mounted because the search administration database schema version does not match the expected backwards compatibility schema version. The database might not have been upgraded. 
    Technical Support Details:
    System.Runtime.InteropServices.COMException (0xC0041235): The gatherer application could not be mounted because the search administration database schema version does not match the expected backwards compatibility schema version. The database might not have
    been upgraded. 
    Since separate DC server and SharePoint server do not work, I installed SharePoint 2013 on DC server ( so DC server has everything on it now ) but it gives exactly same result. Later I installed SharePoint 2013 SP1 and still have the same problem
    with Search Service app. I spent two weeks tried all suggestions available from Web and Google but SharePoint Search Service simply does not work. Config and other databases work but why Search Service has this issue seemingly related to search DB.
    Could anybody please help out? You deserve a top SharePoint consultant award if you could find a solution. I am so frustrated and so tired by this issue.    
    Thanks a lot.

    Hi,
    According to your post, my understanding is that  SharePoint server 2013 Search Service App did not work on Windows server 2012 R2.
    Please make sure you configure Search Service Application correctly. You can refer to:Create and configure a Search service application in SharePoint Server 2013
    I recommend to created new Search Service Application, and made a full crawl. Then assigned the new SSA as the default SSA for webapplications. Finnlay checked  the issue doesnt occur now,
    If all search related components now are online, to keep the enviroonment clean, you can delete the old SSA.
    Thank you for your understanding.
    Best Regards,
    Linda Li
    Linda Li
    TechNet Community Support

  • Windows Search Service Crashes on Windows Server 2012 R2

    Hi, 
    I'm running Windows Search service on a Windows Server 2012 R2 (24GB RAM, 8-core proc). The index catalog has a little over 2 million items (files and folders indexed). 
    Every once in a while this service crashes, and either remains in limbo or automatically recovers and restarts the index from zero. I'm trying to find out information about what may be causing the crashes and about how to prevent them. Unfortunately, I don't
    seem to be able to find much about the Windows Search service on Windows Server 2012 R2. So anyone who may have input on this, please chip in.
    Additional info:
    - As mentioned above, the server OS is Windows Server 2012 R2. This is a physical server with 24GB RAM, 8-core proc and over 2TB of storage. 
    - This server acts as a DC and as a File Server. In addition to this and Windows Search service, there are no other major services running here
    - Symantec Endpoing protection is installed and running on this server, but I've made sure to exclude the Window Search database from SEP
    Here are some of the errors that are generated when the issue happens:
    The error below may show up in the event logs. If it shows up more than once, the indexing service has likely crashed and won't recover. 
    Log Name: System 
    Source: Service Control Manager 
    Date: 1/23/2015 3:32:15 PM 
    Event ID: 7011 
    Task Category: None 
    Level: Error 
    Keywords: Classic 
    User: N/A 
    Computer: myserver.mydomain.local 
    Description: 
    A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. 
    I attempted to stop the indexing service, but it didn't stop. I noticed though that the indexing GUI started responding as soon as the
    the service stop command failed. The indexing service seems to have picked up where it was (~300K items) and continued indexing. 
    Logs sequence: 
    Log Name: Application 
    Source: ESENT 
    Date: 1/23/2015 3:57:01 PM 
    Event ID: 102 
    Task Category: General 
    Level: Information 
    Keywords: Classic 
    User: N/A 
    Computer:
    myserver.mydomain.local 
    Description: 
    SearchIndexer (18232) Windows: The database engine (6.03.9600.0000) is starting a new instance (0).
    ====
     Log Name: Application 
    Source: ESENT 
    Date: 1/23/2015 3:57:01 PM 
    Event ID: 300 
    Task Category: Logging/Recovery 
    Level: Information 
    Keywords: Classic 
    User: N/A 
    Computer:
    myserver.mydomain.local  
    Description: 
    SearchIndexer (18232) Windows: The database engine is initiating recovery steps. 
    ====
    Log Name: Application 
    Source: ESENT 
    Date: 1/23/2015 3:57:01 PM 
    Event ID: 301 
    Task Category: Logging/Recovery 
    Level: Information 
    Keywords: Classic 
    User: N/A 
    Computer:
    myserver.mydomain.local 
    Description: 
    SearchIndexer (18232) Windows: The database engine has begun replaying logfile X:\IndexingService\Search\Data\Applications\Windows\edb0053D.log. 
    ====
    Log Name: Application 
    Source: ESENT 
    Date: 1/23/2015 3:57:01 PM 
    Event ID: 301 
    Task Category: Logging/Recovery 
    Level: Information 
    Keywords: Classic 
    User: N/A 
    Computer:
    myserver.mydomain.local 
    Description: 
    SearchIndexer (18232) Windows: The database engine has begun replaying logfile X:\IndexingService\Search\Data\Applications\Windows\edb0053E.log. 
    ====
    Log Name: Application 
    Source: ESENT 
    Date: 1/23/2015 3:57:02 PM 
    Event ID: 301 
    Task Category: Logging/Recovery 
    Level: Information 
    Keywords: Classic 
    User: N/A 
    Computer:
    myserver.mydomain.local
    Description: 
    SearchIndexer (18232) Windows: The database engine has begun replaying logfile X:\IndexingService\Search\Data\Applications\Windows\edb.log. 
    ====
    Log Name: Application 
    Source: ESENT 
    Date: 1/23/2015 3:57:02 PM 
    Event ID: 302 
    Task Category: Logging/Recovery 
    Level: Information 
    Keywords: Classic 
    User: N/A 
    Computer:
    myserver.mydomain.local
    Description: 
    SearchIndexer (18232) Windows: The database engine has successfully completed recovery steps. 
    ====
    Log Name: Application 
    Source: ESENT 
    Date: 1/23/2015 3:57:02 PM 
    Event ID: 105 
    Task Category: General 
    Level: Information 
    Keywords: Classic 
    User: N/A 
    Computer:
    myserver.mydomain.local 
    Description: 
    SearchIndexer (18232) Windows: The database engine started a new instance (0). (Time=1 seconds) 
    Internal Timing Sequence: [1] 0.000, [2] 0.000, [3] 0.000, [4] 0.032, [5] 1.046, [6] 0.094, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000.
    ====
    Log Name: Application 
    Source: ESENT 
    Date: 1/23/2015 3:57:02 PM 
    Event ID: 326 
    Task Category: General 
    Level: Information 
    Keywords: Classic 
    User: N/A 
    Computer:
    myserver.mydomain.local 
    Description: 
    SearchIndexer (18232) Windows: The database engine attached a database (1, X:\IndexingService\Search\Data\Applications\Windows\Windows.edb).
    (Time=0 seconds) 
    Internal Timing Sequence: [1] 0.000, [2] 0.000, [3] 0.016, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11]
    0.000, [12] 0.000. 
    Saved Cache: 1 0 

    Hi,
    Thanks for your post.
    To resolve this problem, use the Registry Editor to change the default timeout value for all services.
    http://social.technet.microsoft.com/wiki/contents/articles/13765.event-id-7011-service-timeout.aspx
    Please note before making changes to the registry, you should back up any valued data.
    Regards.
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Not working properly Computer Browser service in Windows Server 2012

    Good afternoon.
    Migrated from 2003 to 2012 Active Directory, all is good, but the service Computer Browser in Windows Server 2012 is not working properly.
    Online, there are several hundred computers, one network, no segments. PDC is the Master Browser, it is in my list of all the computers, but gives customers or Backup Browser computers only part, and in alphabetical order, giving the first 70 computers and
    all.
    Looked packet sniffer:
    Microsoft Windows Lanman Remote API Protocol 
    Entry Count: 70 
    Available Entries: 251
    So on Master Browser shows 251 computer, and the client 70.
    If disabled on Windows Server 2012 Service Computer Browser, Master Browser is a computer running Windows Server 2003. He gives all computers.
    What is the problem, how to get Windows Server 2012 to work correctly as a Master Browser?

    More info. I have high lighted in bold where the issue is. This is a massive headache for me at the moment
      Frame: Number = 377, Captured Frame Length = 182, MediaType = ETHERNET
    - Ethernet: Etype = Internet IP (IPv4),DestinationAddress:[00-13-72-52-6E-A1],SourceAddress:[00-1E-0B-2B-68-DD]
      - DestinationAddress: Dell Inc. 526EA1 [00-13-72-52-6E-A1]
         Rsv: (000000..)
         UL:  (......0.) Universally Administered Address
         IG:  (.......0) Individual address (unicast)
      - SourceAddress: 001E0B 2B68DD [00-1E-0B-2B-68-DD]
         Rsv: (000000..)
         UL:  (......0.) Universally Administered Address
         IG:  (.......0) Individual address (unicast)
        EthernetType: Internet IP (IPv4), 2048(0x800)
    - Ipv4: Src = 10.44.46.101, Dest = 10.44.44.14, Next Protocol = TCP, Packet ID = 14025, Total IP Length = 168
      - Versions: IPv4, Internet Protocol; Header Length = 20
         Version:      (0100....) IPv4, Internet Protocol
         HeaderLength: (....0101) 20 bytes (0x5)
      - DifferentiatedServicesField: DSCP: 0, ECN: 0
         DSCP: (000000..) Differentiated services codepoint 0
         ECT:  (......0.) ECN-Capable Transport not set
         CE:   (.......0) ECN-CE not set
        TotalLength: 168 (0xA8)
        Identification: 14025 (0x36C9)
      - FragmentFlags: 16384 (0x4000)
         Reserved: (0...............)
         DF:       (.1..............) Do not fragment
         MF:       (..0.............) This is the last fragment
         Offset:   (...0000000000000) 0
        TimeToLive: 128 (0x80)
        NextProtocol: TCP, 6(0x6)
        Checksum: 0 (0x0)
        SourceAddress: 10.44.46.101
        DestinationAddress: 10.44.44.14
    - Tcp: Flags=...AP..., SrcPort=65372, DstPort=NETBIOS Session Service(139), PayloadLen=128, Seq=1910965363 - 1910965491, Ack=580319796, Win=252 (scale factor 0x8) = 64512
        SrcPort: 65372
        DstPort: NETBIOS Session Service(139)
        SequenceNumber: 1910965363 (0x71E70473)
        AcknowledgementNumber: 580319796 (0x2296FA34)
      - DataOffset: 80 (0x50)
         DataOffset: (0101....) 20 bytes
         Reserved:   (....000.)
         NS:         (.......0) Nonce Sum not significant
      - Flags: ...AP...
         CWR:    (0.......) CWR not significant
         ECE:    (.0......) ECN-Echo not significant
         Urgent: (..0.....) Not Urgent Data
         Ack:    (...1....) Acknowledgement field significant
         Push:   (....1...) Push Function
         Reset:  (.....0..) No Reset
         Syn:    (......0.) Not Synchronize sequence numbers
         Fin:    (.......0) Not End of data
        Window: 252 (scale factor 0x8) = 64512
        Checksum: 0x6F65, Disregarded
        UrgentPointer: 0 (0x0)
        TCPPayload: SourcePort = 65372, DestinationPort = 139
    - Nbtss: SESSION MESSAGE, Length =124
        PacketType: SESSION MESSAGE, 0(0x00)
      - Flags: Add 0 to Length
         Reserved: (0000000.)
         Extension: (.......0)Add 0 to Length
        Length: 124(0x7C)
    - SMB: C; Transaction, Remote Administration Protocol, FileName = \PIPE\LANMAN
        Protocol: SMB
        Command: Transaction 37(0x25)
      - NTStatus: 0x0, Facility = FACILITY_SYSTEM, Severity = STATUS_SEVERITY_SUCCESS, Code = (0) STATUS_SUCCESS
         Code:     (................0000000000000000) (0) STATUS_SUCCESS
         Facility: (...0000000000000................) FACILITY_SYSTEM
         Customer: (..0.............................) NOT Customer Defined
         Severity: (00..............................) STATUS_SEVERITY_SUCCESS
      - SMBHeader: Command, TID: 0x2001, PID: 0x276C, UID: 0x3801, MID: 0x0140
       - Flags: 24 (0x18)
          LockAndRead:     (.......0) LOCK_AND_READ and WRITE_AND_UNLOCK NOT supported (Obsolete) (SMB_FLAGS_LOCK_AND_READ_OK)
          NoAck:           (......0.) An ACK response is needed (SMB_FLAGS_SEND_NO_ACK[only applicable when SMB transport is NetBIOS over IPX])
          Reserved_bit2:   (.....0..) Reserved (Must Be Zero)
          CaseInsensitive: (....1...) SMB paths are case-insensitive (SMB_FLAGS_CASE_INSENSITIVE)
          Canonicalized:   (...1....) Canonicalized File and pathnames (Obsolete) (SMB_FLAGS_CANONICALIZED_PATHS)
          Oplock:          (..0.....) Oplocks NOT supported for OPEN, CREATE & CREATE_NEW (Obsolete) (SMB_FLAGS_OPLOCK)
          OplockNotify:    (.0......) Notifications NOT supported for OPEN, CREATE & CREATE_NEW (Obsolete) (SMB_FLAGS_OPLOCK_NOTIFY_ANY)
          FromServer:      (0.......) Command - SMB is being sent from the client (SMB_FLAGS_SERVER_TO_REDIR)
       - Flags2: 51207 (0xC807)
          KnowsLongFiles:            (...............1) Understands Long File Names (SMB_FLAGS2_KNOWS_LONG_NAMES)
          KnowsEas:                  (..............1.) Understands extended attributes (SMB_FLAGS2_KNOWS_EAS)
          SmbSecuritySignature:      (.............1..) Security signatures enabled (SMB_FLAGS2_SMB_SECURITY_SIGNATURE)
          Compressed:                (............0...) Compression Disabled for REQ_NT_WRITE_ANDX and RESP_READ_ANDX (SMB_FLAGS2_COMPRESSED)
          SecuritySignatureRequired: (...........0....) Security Signatures are NOT required (SMB_FLAGS2_SMB_SECURITY_SIGNATURE_REQUIRED)
          Reserved_bit5:             (..........0.....) Reserved (Must Be Zero)
          IsLongName:                (.........0......) DO NOT use Long File Names (SMB_FLAGS2_IS_LONG_NAME)
          Reserved_bits7_9:          (......000.......) Reserved (Must Be Zero)
          ReparsePath:               (.....0..........) NOT a Reparse path (SMB_FLAGS2_REPARSE_PATH)
          ExtendedSecurity:          (....1...........) Aware of extended security (SMB_FLAGS2_EXTENDED_SECURITY)
          Dfs:                       (...0............) NO DFS namespace (SMB_FLAGS2_DFS)
          Paging:                    (..0.............) Read operation will NOT be permitted unless user has permission (NO Paging IO) (SMB_FLAGS2_PAGING_IO)
          NTStatus:                  (.1..............) Using 32-bit NT status error codes (SMB_FLAGS2_NT_STATUS)
          Unicode:                   (1...............) Using UNICODE strings (SMB_FLAGS2_UNICODE)
         PIDHigh: 0 (0x0)
         SecuritySignature: 0x0
         Unused: 0 (0x0)
         TreeID: 8193 (0x2001)
         ProcessID: 10092 (0x276C)
         UserID: 14337 (0x3801)
         MultiplexID: 320 (0x140)
      - CTransaction:
         WordCount: 14 (0xE)
         TotalParameterCount: 32 (0x20)
         TotalDataCount: 0 (0x0)
         MaxParameterCount: 8 (0x8)
         MaxDataCount: 4200 (0x1068)
         MaxSetupCount: 0 (0x0)
         Reserved: 0 (0x0)
       - Flags: Do NOT disconnect TID
          Disconnect: (...............0) Do NOT disconnect TID
          NoResponse: (..............0.) Server response to the client
          Reserved:   (00000000000000..) Reserved
         Timeout: 5000 milli sec(s)
         Reserved2: 0 (0x0)
         ParameterCount: 32 (0x20)
         ParameterOffset: 92 (0x5C)
         DataCount: 0 (0x0)
         DataOffset: 0 (0x0)
         SetupCount: 0 (0x0)
         Reserved3: 0 (0x0)
         ByteCount: 61 (0x3D)
       - RemoteAPIBuffer:
        - FileName: \PIPE\LANMAN
         - Align: 1 Bytes
            AlignBytes: Binary Large Object (1 Bytes)
           Name: \PIPE\LANMAN
          Pad1: Binary Large Object (2 Bytes)
    - RAPRequest: NetServerEnum2 Request, InfoLevel = 1, SV_TYPE_ALL: All in NSNET
        RAPOpcode: NetServerEnum2
      - ParameterDescriptor: WrLehDz; 4 send, 1 receive parameter
         Param: (W) WORD (send parameter, 16 bit integer)
         Param: (r) Receive buffer (format in data descriptor) (receive data, 0 bit integer)
         Param: (L) Receive buffer length (send/receive parameter, 16/16 bit integer)
         Param: (e) Entries read (receive data, 0 bit integer)
         Param: (h) WORD (receive parameter, 16 bit integer)
         Param: (D) DWORD (send parameter, 32 bit integer)
         Param: (z) ASCIIZ (send parameter, 8 bit integer)
         Param: ASCII NUL (string terminator)
      - DataDescriptor: B16BBDz; data bytes send: 0, receive: 34
       - Datum: (B) BYTE[16] (receive data, 8 bit integer)
          Datum: (B) BYTE (receive data, 8 bit integer)
          Digit: 1
          Digit: 6
         Datum: (B) BYTE (receive data, 8 bit integer)
         Datum: (B) BYTE (receive data, 8 bit integer)
         Datum: (D) DWORD (receive data, 32 bit integer)
         Datum: (z) ASCIIZ* (receive data offset, 32 bit integer)
         Datum: ASCII NUL (string terminator)
      - NetServerEnum2: SV_TYPE_ALL: All in NSNET
         InfoLevel: (1) SERVER_INFO_1
         ReceiveBufferSize: 4200 (0x1068)
       - ServerType: SV_TYPE_ALL: All
          Workstation:      (...............................1) All workstations
          Server:           (..............................1.) All computers with the server service running
          Sqlserver:        (.............................1..) All running Microsoft SQL Server
          DomainCtrl:       (............................1...) All primary domain controllers
          DomainBakctrl:    (...........................1....) All backup domain controllers
          TimeSource:       (..........................1.....) All Time servers
          AFP:              (.........................1......) All Apple File Protocol servers
          Novell:           (........................1.......) All Novell servers
          DomainMember:     (.......................1........) All LAN Manager 2.x domain members
          PrintqServer:     (......................1.........) All print servers
          DialinServer:     (.....................1..........) All dial-in servers
          ServerUnix:       (....................1...........) All Unix/Xenix servers
          NT:               (...................1............) All Windows NT workstations or servers
          WFW:              (..................1.............) All Windows for Workgroups servers
          ServerMFPN:       (.................1..............) All Microsoft File and Print for NetWare servers
          ServerNT:         (................1...............) All non-domain controller servers
          PotentialBrowser: (...............1................) All servers that can run the browser service
          BackupBrowser:    (..............1.................) All backup browsers
          MasterBrowser:    (.............1..................) All master browsers
          DomainMaster:     (............1...................)  All domain master browsers
          Reserved1:        (..........11....................)
          Windows:          (.........1......................) All Windows 95 or later
          DFS:              (........1.......................) All DFS root servers
          ClusterNT:        (.......1........................) All NT Clusters
          Terminalserver:   (......1.........................) All Terminal Servers
          ClusterVSNT:      (.....1..........................) All NT Cluster Virtual Server Names
          DCE:              (....1...........................) AllIBM DSS (Directory & Security Services)
          Reserved2:        (...1............................)
          AlternateXport:   (..1.............................) Return list for alternate transport
          LocalListOnly:    (.1..............................) Return local list only
          DomainEnum:       (1...............................) Enumerate primary domain
         Domain: NSNET
    Then the reply;
        Frame: Number = 378, Captured Frame Length = 1514, MediaType = ETHERNET
    + Ethernet: Etype = Internet IP (IPv4),DestinationAddress:[00-1E-0B-2B-68-DD],SourceAddress:[00-13-72-52-6E-A1]
    + Ipv4: Src = 10.44.44.14, Dest = 10.44.46.101, Next Protocol = TCP, Packet ID = 27036, Total IP Length = 1500
    + Tcp: Flags=...A...., SrcPort=NETBIOS Session Service(139), DstPort=65372, PayloadLen=1460, Seq=580319796 - 580321256, Ack=1910965491, Win=253 (scale factor 0x8) = 64768
    + Nbtss: SESSION MESSAGE, Length =2013
    + SMB: R; Transaction, Remote Administration Protocol
    - RAPResponse: NetServerEnum2 Response, Count = 31
        Win32ErrorCode: 0x00000000 - ERROR_SUCCESS - The operation completed successfully.
        Converter: 2251 (0x8CB)
      - NetServerEnum2: Count = 31
         EntriesReturned: 31 (0x1F)
         EntriesAvailable: 31 (0x1F)
       + NetServerInfo1: APOLLO
       + NetServerInfo1: ARTEMIS
       + NetServerInfo1: ASKLEPIOS
       + NetServerInfo1: CASTOR
       + NetServerInfo1: DCC4503-131L
       + NetServerInfo1: DCC4503-155L
       + NetServerInfo1: DCC4503-157L
       + NetServerInfo1: DCC4503-161L
       + NetServerInfo1: DCC4503-171L
       + NetServerInfo1: DCC4503-172L
       + NetServerInfo1: DCC4503-175L
       + NetServerInfo1: DCC4503-177L
       + NetServerInfo1: DCC4503-183L
       + NetServerInfo1: DCC4503-184L
       + NetServerInfo1: DCC4503-185L
       + NetServerInfo1: DCC4503-188L
       + NetServerInfo1: DCC4503-196L
       + NetServerInfo1: DCC4503-197L
       + NetServerInfo1: DCC4503-199L
       + NetServerInfo1: DCC4503-202L
       + NetServerInfo1: DCC4503-203L
       + NetServerInfo1: DCC4503-205L
       + NetServerInfo1: DCC4503-210L
       + NetServerInfo1: DCC4503-213L
       + NetServerInfo1: DCC4503-219L
       + NetServerInfo1: DCC4503-220L
       + NetServerInfo1: DCC4503-228L
       + NetServerInfo1: DCC4503-233L
       + NetServerInfo1: DCC4503-234L
       + NetServerInfo1: DCC4503-236L
       + NetServerInfo1: DCC4503-241L
        StringData: Binary Large Object (586 Bytes)

  • Windows Server 2012 Standard - Remote Desktop Management service won't start

    Dear colleges, I'm seeking your help in resolving a weird issue with Remote Desktop.
    The Remote Desktop Management service gives the following error message any  time it is attempted to start:
    "The Remote Management Service on Local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs."
    The Event Viewer error message is as follows:
    "The Remote Desktop Management service failed to start. Error code: 0x88250001"
    Whenever I connect to the server with RD I get error message that the Remote Desktop Licensing Server isn't configured and that the RD trill will expire in N-days. The server is up to date updates wise and has been licensed for 5 RD CALs. The server hosts DNS
    server and has AD DS role installed, is virtualized to have one Hyper-V server.
    I read some blogs about having both DNS and AD DS on one box is a bad sea and a root cause of the issue. Well, that very well may be, but for me that's an option as I'm not going to get a box to just host DNS. There should a solution to this as I shouldn't
    only one suffering from this issue.
    I also read about KB2871777 - Servicing stack update supposedly addressign this issue. Well, it's on my system and the issue is there too. :)
    Will I loose ability to RD when the trial expires or it's just another misleading MS message that can be ignored?
    How do I mend Remote Desktop Management service to start?
    Appreciate your help!
     

    Hi,
    Thank you for posting in Windows Server forum.
    Can administrators perfectly connect to RDS environment?
     In meantime please check that you have properly configured and activated RD License role service and install RDS CAL on it. It might also possible that you have configured RD License server but it server can’t find it and giving you error due to certificate
    also. Please check that you have properly configured certificate on your RDS Server. Try to install and update below hotfix for License related issue.
    No RDS license when you connect to an RDS farm in Windows Server 2012
    http://support.microsoft.com/kb/2916846
    If you have configured both RDS and AD DS on single server then also you may find some error reading this. If so please try to setup both roles on different server and check the result. In addition to this, please check below articles.
    What's New in Remote Desktop Services in Windows Server 2012
    http://technet.microsoft.com/en-in/library/hh831527.aspx
    Install Remote Desktop Services Failed on Windows 2012 Server
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/bbf47aa2-8ae5-4f22-9827-afee5a11417a/install-remote-desktop-services-failed-on-windows-2012-server?forum=winserverTS
    Hope it helps!
    Thanks.
    Dharmesh Solanki

  • New Windows Server 2012 unable connect to Netlogon Service or update DNS records

    Hi everybody, all of my Windows Servers 2012 decided to collapse after innocuous group policy update that was meant to make user passwords more secure.
    The AD and DNS seem to be functioning "normally", I am able to add new Windows7 and Windows Server 2008 machines to the domain, I can see them in listed in the AD and DNS record are update correctly, however, as soon as I try to join Windows Server
    2012 it breaks.
    The event log is littered on the new server with:
    The system failed to register host (A or AAAA) resource records (RRs) for network adapter
    with settings:
               Adapter Name : {DB7F73CE-E011-4F3C-BEBC-2CE7A871DF51}
               Host Name : CHEETAH
               Primary Domain Suffix : somedomain.com
               DNS server list :
    192.168.0.5
               Sent update to server : <?>
               IP Address(es) :
    192.168.0.15
    The reason the system could not register these RRs was because the update request it sent to the DNS server timed out. The most likely cause of this is that the DNS server authoritative for the name it was attempting to register or update is not running
    at this time.
    You can manually retry DNS registration of the network adapter and its settings by typing 'ipconfig /registerdns' at the command prompt. If problems still persist, contact your DNS server or network systems administrator.
    and
    Name resolution for the name _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.somedomain.com. timed out after none of the configured DNS servers responded.
    When I try to ping the primary DC (WS2003) it fails, the Secondary DC (WS2012) responds.
    The >nltest /sc_query:somedomain.com on Windows Servers 2012 returns:
    Flags: 0
    Trusted DC Name
    Trusted DC Connection Status Status = 1311 0x51f ERROR_NO_LOGON_SERVERS
    The command completed successfully
    yet it works on all other machines.
    I tried removing 2012 servers from the domain and rejoining - without success. The cookie crumbled when I added two new installations of Windows Server 2012 & 2008 and 2008 worked fine but 2012 showed same symptoms.
    There is one peculiar thing that I had noticed on all Windows 2012 machines, it constantly showing "Workplace Connection - Connecting" in the networks pane on the right side of the screen, which I can't say i ever noticed before.
    Unfortunately, the secondary DC is a multihoming server with Direct Access role - I am not sure if this may play some part but our existing configuration worked for a year now without any problems. Issue appeared when I changed the password complexity rule,
    which boggles the mind. I wonder if there has been some other changes in GPO that did not propagate from years ago and finally comeback to break things.
    Any suggestions would be really appreciated.
    wmin

    Hello Ace, i wish you a Happy New Year! I hope your break was enjoyable and filled with cheer.
    In the end I had to bite the bullet and reinstall all troublesome servers. Your recommendations from above removed some serious problems with the DA and DNS resolution.
    I was able to attach new server to the domain without any problems and begin painful process of rebuild.
    I have promoted TIGER to full DC controller role, but having some issues with replication. Although running >repadmid /showrepl gives positive
    feedback, the sysvol folder on the secondary DC is empty.
    Also there is a couple of warnings in the event log:
    Event ID 4012
    Log Name: DNS Server
    Source: DNS-Server-Service
    The DNS server is waiting for Active Directory Domain Services (AD DS) to signal that the initial synchronization of the directory has been completed. The DNS server service cannot start until the initial
    synchronization is complete because critical DNS data might not yet be replicated onto this domain controller. If events in the AD DS event log indicate that there is a problem with DNS name resolution, consider adding the IP address of another DNS server
    for this domain to the DNS server list in the Internet Protocol properties of this computer. This event will be logged every two minutes until AD DS has signaled that the initial synchronization has successfully completed.
    - which has not repeated since 3rd of Jan.
    These events occur on the primary DC every few minutes:
    Event ID 1030
    Source: Userenv
    Log Name: NT AUTHORITY\SYSTEM
    Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.
    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Event ID 1058
    Source: Userenv
    Log Name: NT AUTHORITY\SYSTEM
    Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=somedomain,DC=com. The file must be present at the location <\\somedomain.com\sysvol\somedomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
    (The network name cannot be found. ). Group Policy processing aborted.
    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Should sysvol folder be shared on the secondary DC? Another interesting thing to point out is that
    \\somedomain.com\sysvol\somedomain.com\Policies\ can be access
    from all other machines except the DC1.
    Cheers!
    kind regards,
    wmin

  • Set up Search Service App For SharePoint server 2013 on Windows server 2012 R2 not working

    Hi all,
    I installed SharePoint server 2013 on Windows  server 2012 R2 using VirtualBox.  I created a DC(domain controller) server with a domain set up on one VM and it has SQL server 2012 SP1 installed. Then SharePoint 2013 on another VM was set up to access
    the DC server.  Everything seems working except Search Service App which cannot be sucessfully set up. Creation process for Search service app says Successful and 4 search databases were created and look fine. But when I navigate to search service app
    admin page, it gives error info:
    System status:  The search service is not able to connect to the machine that hosts the administration component. Verify that the administration component '386f2cd6-47ca-4b3a-aeb5-d9116772ef16' in search application 'Search Service Application 1' is in
    a good state and try again.
    Search Application Topology:  Unable to retrieve topology component health states. This may be because the admin component is not up and running.
    From event viewer, I see following errors:
    (1) Error From source: SharePoint Server
    Application Server Administration job failed for service instance  Microsoft.Office.Server.Search.Administration.SearchServiceInstance
    (b7c72eb8-cbaf-435e-b4c9-963cb6e4e745).
    Reason: The object you are trying to create already exists. Try again using a different name.  
    Technical Support Details:
    System.Runtime.InteropServices.COMException (0x80040D02): The object you are trying to create already exists. Try again using a different name.  
       at Microsoft.Office.Server.Search.Administration.SearchServiceInstance.Synchronize()
       at Microsoft.Office.Server.Administration.ApplicationServerJob.ProvisionLocalSharedServiceInstances(Boolean
    isAdministrationServiceJob)
    (2) Error From source: SharePoint Server Search
    Could not access the Search database. A generic error occurred while trying to access the database to obtain the schema version info.
    Context: Application '386f2cd6-47ca-4b3a-aeb5-d9116772ef16'
    (3) Warning from source: SharePoint Server Search
    A database error occurred. Source: .Net SqlClient Data Provider Code: 8169 occurred 0 time(s) Description:  Error ordinal: 1 Message:
    Conversion failed when converting from a character string to uniqueidentifier., Class: 16, Number: 8169, State: 2    at
    System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
    (4) Error From source: SharePoint Server
    Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance
    (b7c72eb8-cbaf-435e-b4c9-963cb6e4e745).
    Reason: The gatherer application could not be mounted because the search administration database schema version does not match the expected backwards compatibility schema version. The database might not have been upgraded.  
    Technical Support Details:
    System.Runtime.InteropServices.COMException (0xC0041235): The gatherer application could not be mounted because the search administration database schema version does not match the expected backwards compatibility schema version. The database might not have
    been upgraded.  
    Since separate DC server and SharePoint server do not work, I installed SharePoint 2013 on DC server ( so DC server has everything on it now ) but it gives exactly same result. Later I installed SharePoint 2013 SP1 and still have the same problem with Search
    Service app. I spent two weeks tried all suggestions available from Web and Google but SharePoint Search Service simply does not work. Config and other databases work but why Search Service has this issue seemingly related to search DB.
    Could anybody please help out? You deserve a top SharePoint consultant award if you could find a solution. I am so frustrated and so tired by this issue.    This seems also to be a SP set up issue.
    Thanks a lot.

    Using new Search Service App wizard to create SSA is always a success. I could delete existing SSA and recreate it and no problem. It says successful but when I open Search Admin page from CA, it gives me errors as mentioned.
    Now I used the following PS script for creating SSA from Max Mercher, but it stays at the last setps in following script:
    Add-PsSnapin Microsoft.SharePoint.PowerShell -ErrorAction SilentlyContinue
    $IndexLocation = "C:\Search"  #Location must be empty, will be deleted during the process!
    $SearchAppPoolName = "SSAPool"
    $SearchAppPoolAccountName = "mydomain\admin"
    $SearchServiceName = "SSA"
    $SearchServiceProxyName = "SSA Proxy"
    $DatabaseServer = "W12R2DC1"
    $DatabaseName = "SSA"
    $spAppPool = Get-SPServiceApplicationPool -Identity $SearchAppPoolName -ErrorAction SilentlyContinue
    if (!$spAppPool)
     $spAppPool = New-SPServiceApplicationPool -Name $SearchAppPoolName -Account $SearchAppPoolAccountName -Verbose
    $ServiceApplication = Get-SPEnterpriseSearchServiceApplication -Identity $SearchServiceName -ErrorAction SilentlyContinue
    if (!$ServiceApplication)
    # process stays at the following step forever, already one hour now.  
    $ServiceApplication = New-SPEnterpriseSearchServiceApplication -Name $SearchServiceName -ApplicationPool $spAppPool.Name -DatabaseServer  $DatabaseServer -DatabaseName $DatabaseName
    Account mydomain\admin is an farm managed account, domain admin account, in WG_ADMIN role, It is in all SQL server roles and is DBO. I see search DBs are already on SQL server. From Event viewer, I got following errors in sequence:
    (1) Crawler:Content Plugin under source Crawler:Content Plugin 
    Content Plugin can not be initialized - list of CSS addresses is not set.
    (2) Warning for SharePoint Server Search
    A database error occurred. Source: .Net SqlClient Data Provider Code: 8169 occurred 0 time(s) Description:  Error ordinal: 1 Message: Conversion failed when converting from a character string to uniqueidentifier., Class: 16, Number: 8169, State: 2   
    at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
    (3) Error for SharePoint Server Search
    Could not access the Search database. A generic error occurred while trying to access the database to obtain the schema version info.
    Context: Application 'cbc5a055-996b-44a7-9cbc-404322f9cfdf'
    (4) Error for SharePoint Server
    Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (b7c72eb8-cbaf-435e-b4c9-963cb6e4e745).
    Reason: The gatherer application could not be mounted because the search administration database schema version does not match the expected backwards compatibility schema version. The database might not have been upgraded. 
    (5) Error Shared Services for SharePoint Server Search 
    Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (b7c72eb8-cbaf-435e-b4c9-963cb6e4e745).
    Reason: The object you are trying to create already exists. Try again using a different name. 
    Technical Support Details:
    System.Runtime.InteropServices.COMException (0x80040D02): The object you are trying to create already exists. Try again using a different name. 
       at Microsoft.Office.Server.Search.Administration.SearchServiceInstance.Synchronize()
       at Microsoft.Office.Server.Administration.ApplicationServerJob.ProvisionLocalSharedServiceInstances(Boolean isAdministrationServiceJob
    Above errors keep being generated. Last step for SSA creation stay there forever.  Any clue what is really going on?  Thanks.

Maybe you are looking for

  • So I can't use an OAM file from Animate as a button in Muse?

    I placed 3 oam files into muse but it doesn't allow me to use them as buttons (links) to anchors within my page, is this correct. OAM's can't be used as buttons?

  • How do I get text to align and look uniform?  This shouldn't be as hard as I am making it!

    Basically, I am trying to get the heading centered and the text aligned left....or at least aligned uniformly here.  Unfortunately, for some reason I am unable to just mess with it in "design" as I usually do.  The design page is blank and I can only

  • [HTTP Sender]How to send different XML using static URL

    Hi all, I have a problem, my legacy system send XML messages to SAP XI by HTTP, I know that I need to use HTTP Sender adapter, the problem is that legacy system support only a static URL. I have more than one interface, how could I fix this problem?

  • Opening old AW files

    I am in the process of updating some archived files which included a batch of old AppleWorks Files. I cannot seem to get Excel or Numbers to open these files. It says that the proper translators cannot be found. Is there a program or a way to install

  • Strange number appears

    Hello , could someone help me , I sent 3 text messages to a friend , they received my messages , but the call id was NOT MINE , the messages were mine and the times were correct , but the caller id was from an Italian number , and I send from a Swiss