Koldov

Yeah quite possibly but I have no access, so I'm not sure I can reinstall the OS remotely...? Also that means I leave it rebooting every few minutes until Monday morning...

The last command I ran before the restart was to reset the local security settings if that helps...? secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose In the event logs I did see: svchost (8640) Database recovery/restore failed with unexpected error -551. svchost (8640) Database recovery failed with error -551 because it encountered references to a database, 'C:\Windows\system32\LogFiles\Sum\SystemIdentity.mdb', which does not match the current set of logs. The database engine will not permit recovery to complete for this instance until the mismatching database is re-instated. If the database is truly no longer available or no longer required, procedures for recovering from this error are available in the Microsoft Knowledge Base or by following the "more information" link at the bottom of this message. Don't actually know what that means... Not sure if that would cause a reboot though...

Unfortunately the iDRAC seems to be version 7 and Basic Management... which somehow seems to mean NO MANAGEMENT... There are no options in there at all. I missed the last reboot, but did shutdown the VM before that - it still rebooted... Will try to get to the .dmp file next time round...

I also managed to briefly look through the SYSTEM event log but nothing really stood out as a reason...

No, it's the HOST for my VM PDC! This is all I managed to get before it rebooted again... The computer has rebooted from a bugcheck. The bugcheck was: 0x0000007e (0xffffffffc0000005, 0xfffff800acd5f58f, 0xffffd000213b8288, 0xffffd000213b7aa0). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 080622-28109-01.

Actually, everything has been fine until just now..... Working remotely and the SERVER 2012 R2 host has just gone into a boot loop!!!! http://www.edugeek.net/forums/windows-server-2012/228940-2012r2-server-just-gone-into-boot-loop-working-remotely.html#post1963711

Anybody got a sure fire way of stopping this remotely?

This has come about after: 1. Installing a new Server 2019 DC 2. Removing Internet Explorer 11 (Chrome is set to Default Web Browser) error.bmp

Anybody full on DENY NTLM throughout their Domain....? I can't really tell if it's just that Server 2019 is suddenly more secure (which is probably obvious) or it is suddenly taking notice of GPOs that the previous 2012R2 DC wasn't. I haven't changed any settings or GPOs, but suddenly things aren't working... Scan to folder has died... after a LOT of investigation I have ruled out SMBv1 and can see it is using SMBv2, then settled on NTLM being the problem (which I already thought I was blocking through GPO - but now it appears I actually am and the MFD doesn't like it). We have a Kyocera Model : TASKalfa 5052ci and have a 2012R2 file server which it has happily scanned to for years. Now I have introduced a SERVER 2019 DC (no change in GPOs) it is suddenly not connecting. I have checked on the DC and changed a GPO: Network security: Restrict NTLM: Audit NTLM authentication in this domain to 'Disable' and it works - however previously it had been set to 'Deny All'... but scanning still worked... now with the 2019 DC it actually seems to be taking notice of it and denying the NTLM request from the MFD (I have also tried adding the file server as an NTLM exception - maybe it should be the DC... but I don't want that)! As I have never had 'member servers' (only DCs) What I can't seem to get my head around is how do I allow the NTLM to hit the 2012R2 File Server (is it the DC that is denying the scanner to log-on)....? Basically I'm just really confused why it suddenly stopped working as I thought I was already denying NTLM (but I guess I can't have been)...

Having just created a new Server 2019 DC VM... I am starting to lose the plot with certain things not working anymore... The latest one is that my BM cannot open an Egress link from Outlook (2016): error.bmp Now, I can't really tell which part of the process is being blocked here... is it an Outlook setting or a Chrome setting? Edit: Is my picture displaying... looks like it just downloads for me...?

Well, although that solved some of my issues (so far), the scan to folder issue persists.... and it's taken up too much of my time already (but needs to be sorted by the end of the week so I can't leave it). I have actually narrowed it down now (and it wasn't SMB as such), it appears the new 2019 DCs have actually taken notice of a GPO to block NTLM: I'm not about to stop blocking NTLM, but can't really find anywhere in the Kyocera settings to change this to Kerberos (if it is actually possible), the only setting there seemed to imply that the actual printer itself would need to authenticate by signing in to it with a domain user account (could have got that wrong but on a restart it was asking for a domain user)...

Ah, ok so I've just had a brainwave as I couldn't see SIMS firewall rules applied anymore... The old DCs have now gone from 'Domain Controllers' OU in AD, they have moved themselves into the 'built-in 'Computers' OU therefore no GPOs were applying!

No, I don't think it will make a difference, I'm sure SMBv1 has been disabled for a while.... Actually now my SIMS agents are not connecting back to server!

Just to mention the last successful scan was on Friday 22/07/2022, so it's definitely something I've done this week taking out the 2012R2 DC and putting in a 2019 DC... I'm going to presume it's an extra something and is security related, but no idea what...

Another question for anyone whose got this far... On the 'old' DCs I have still have Windows\SYSVOL_DFSR folders... do I need to keep them now?

I don't 'think' so... The Kyocera web portal for the MFD just says SMB on/off (it uses port 445 if that means anything). There isn't any way I could find to tell, but I'm pretty sure I've had SMBv1 turned off everywhere I could find for a while now (even on the 2012R2 servers). It does have this in the settings though: "Note : To use these settings, set the Authentication to the Network Authentication using this link. Authentication Settings" This takes me to an 'Authentication Settings' page where I can enter all sorts of domain info, but I've never needed to before... Just created a user, gave it permissions to the folder on the server and entered that info on the Kyocera...

I've got 2 VMs up and running as DCs now and transferred FSMO roles to one of them (these sit on 2012R2 hosts unfortunately). 1. Should I raise the function level to 2016 now? 2. I can't view 'Effective Access' now on the 2012R2 server shares (from the 2012R2 server) "you do not have permission to evaluate effective access rights for the remote resource". I 'think' this is telling me that I can't view the properties as it has to look at the 2019 DC... why doesn't the Domain Admin have that permission? But when I try to view it from the 2019 servers it errors out telling me the RPC server is unavailable! 3. It seems I have broken scan to folder from our old Kyocera MFDs (the reason I was looking at 'Effective Access') to our 2012R2 file server... I have no idea why? It was working when the 2012R2 servers were DCs... So far Google has come up with a possible solution of adding 'Authenticated Users' into the 'Pre-Windows 2000 Compatible Access' group. EDIT: Also now having trouble with printer deployment again.... "Group Policy Object did not apply because it failed with error code '0x800704ec This program is blocked by group policy"... I thought it would have moved all the policies and groups over with the DC... Does anyone have a list of reg edits? Remind me again how it is worth upgrading...

So, it appears this isn't quite working here as I'd hoped... we have a sync trolley but... iTunes is asking me to physically confirm on each iPad (meaning I have to take each one out of the trolley anyway)... iPhoto says they are locked with a passcode... they aren't, they are just at the screen lock page! The image capture app is also asking me to unlock each device, so as our charging cable are short and there is no room in the trolley I have to take them out individually and unlock the screen and accept 'trust this computer'...

Unfortunately we don't have a great history with dongles, Powerpoint clickers, projector remotes. The idea is for it to be used with the 'big' speakers in the hall and remove the small active (classroom) speakers to have 'one sound system to rule them all'. At the moment the small speakers are plugged into a desktop at the front of the hall for 'presentation' and the big speakers are roughly in the middle attached to an ancient amp for louder music for disco/end of year leavers stuff. So I don't want to overcomplicate it by buying an amp/mixer/dongle, just want to make it simple... plug in, turn on.. sound... Yeah we have got a set of something similar to be hauled around the school/out onto the field for sports day, but they mainly stay with either the P.E. dept. This needs to be 'rack' mount (old Hi-Fi cabinet) in the Hall and permanently attached (so nothing gets lost/moved/unplugged)...

Hi, I thought I would start a new thread as I originally posted on the end of another and it seems it warrants it's own to stop it getting overlooked. I've come in today to thousands of errors on the SIMS server: I have previously done as suggested by @eddyc in the original thread: http://www.edugeek.net/forums/mis-systems/227859-sims-update-patch-strategy-via-solus-3-a.html#post1953936 But as this is the third time it has happened I'm not sure if I should raise this with support or if anyone knows what the actual problem is and how to fix it... Is it something misconfigured on my server or in SOLUS? Also, it seems to always get stuck downloading something I've already downloaded and installed (although I seem to remember having to do it manually as the URL changed and it wouldn't download the update it needed to change the URL)...

I am now looking at a consumer unit amp due to the 'need' for the Headmaster to play tunes from his phone via Bluetooth... Speakers are big passive jobs... high on the wall so no chance to get specs (there's nothing visible from the ground - not even a make). Site have chickened out of moving them (or it's too much work) so they stay in the middle of the hall! https://www.richersounds.com/sony-str-dh190.html?nosto=nosto-plp-hi-fi-deals https://www.richersounds.com/yamaha-dab-bluetooth-stereo-receiver.html I'm presuming this will negate the need for a mixer and I'll only have to plug the relevant cables into the rear inputs for (1x) desktop and (1x) laptop use. The purchase is imminent so please someone shout if I have got it wrong...

I don't think 14 minutes was too bad... I do have another job to do other than reading Edugeek all day you know...

Enjoyed Umbrella Academy... Didn't make it to the end of the first episode of Ms Marvel... nothing to do with race/religion/skin colour/gender... it's just I think I've reached a level of 'jaded' that means I can't really watch anything 'made for teens' (obviously I'm not the demographic they are looking to engage with, which is I think both good and bad in equal measure)... Also the latest Spiderman film didn't really do it for me, I can just about deal with that level of trite nonsense when he cameos in the other movies, but a whole film of it wore thin real quick...

To be fair they should have known before it happened and reported it to Instagram to get the 'fake' account banned in advance...

Customers of psychics and tarot readers are being tricked... Fixed that for both of you!