Search the Community

Afternoon, I have been following the following guide to setup Always on VPN with IKE but I am having issues with IKE not finding a valid machine certificate and I don't know why. Part 1 https://www.petenetlive.com/KB/Article/0001399 ​Part 2 https://www.petenetlive.com/KB/Article/0001403 I am using a Windows Server 2016 with RRAS and NPS. I have a public certificate which is installed under Local Computer > Personal > Certificates and two internal certificates stored under the same location. The one private cert just has the following EKU Client and Server Authentication where as the other cert has Client & Server Authentication as well as IP Security IKE Intermediate. The client machine has a user certificate with client authentication and a machine certificate with client & server authentication. Can anyone help me to see where I am going wrong? I know Microsoft does not have a lot of documentation on the Always On VPN feature but it is something I would like to implement with the new staff laptops. Regards I

I am running Windows 7 Workstations and Windows Server 2016 Datacenter Domain Controller. I am using group policy to manage printers on my workstations. When I push out these policies it will apply to most of the PCs in a classroom but not all. I have had this issue with multiple group policies in the past and can never workout why they aren't applying. As far as I can see there is no pattern, it is never the same PCs that policies dont apply. Does anyone know any reasons why policies wouldn't apply. James Taylor ICT Technician

Good morning i have some questions about the Update Microsoft Defender for Endpoint core components Security Recommendation. Windows Server 2016 64-bitVersion 1607 I have done update path 2 as the servers that seem to be effect are 2016. I have installed the onboarding package that installs Microsoft Defender for Endpoint and ran the onboarding script. the Microsoft Monitoring Agent is still installed. I have also ran all windows updates so the server is fully patched. However that security recommendation does not go away. I know sometimes you have to give it 24 hours before that list updates, but the other security recommendation have fell off since i have done them. How come this still lingers around? Does any one else have this issue? Is their something I'm missing? ======================= DescriptionIndicates that the Microsoft Defender for Endpoint EDR sensor (Windows Server 2012 R2, 2016) or Microsoft Defender for Endpoint agent (Linux, macOS) installed on the machine is not up to date.Windows Server 2012 R2 and 2016 If you’re currently running the legacy Microsoft Defender for Endpoint agent solution (based on the Microsoft Monitoring Agent - MMA) with MsSenseS.exe version 10.3720.*, please skip directly to Update path 2. Update path 1 Update the latest EDR sensor version described in Microsoft Defender for Endpoint update for EDR Sensor using one of the following methods:Windows UpdateA patch management solution such as WSUSDownloading and applying the package from the Microsoft Update Catalog. Update path 2 This option only applies if you’re currently running the legacy Microsoft Defender for Endpoint agent solution (based on the Microsoft Monitoring Agent - MMA) with MsSenseS.exe version 10.3720.*, in which case you will first need to upgrade to the new solution by following these steps:Go to the onboarding page in the M365 Defender portalSelect the ‘Windows Server 2012 R2 and 2016 (Preview)’ operating systemsChoose your preferred deployment methodDownload the installation and onboarding packagesInstall the package and apply the onboarding script via your chosen deployment channelOnce the new solution has been installed, future updates should be done by following the instructions described in Update path 1.For additional information on what’s new and how to install, including applying Defender Antivirus passive mode configuration if you’re using a non-Microsoft antimalware solution,please refer to Onboard Windows servers to the Microsoft Defender for Endpoint service | Microsoft Docs.

Hi all, I am attempting to backup my Hyper V machines using a local external SSD drive, however I am receiving an error message “Not enough space to create the volume shadow copy on the storage location”. The drive has been formatted so it is completely empty. My Hyper V storage size is 1.3TB and my SSD drive is a 2TB. Am I missing something obvious here? Many thanks V

We have user-space quotas setup across the board split by the key stage of learning-e.g KS3 -500mb KS4 - 1GB KS5 - 2GB Year on year as they progress up though the school the student's groups get automatically provisioned in AD but the quota change is still a manual process... anyone know of a way this can be automated?

Hi all, I am attempting to extend the volume on my c: on Server Manager. The error comes up as "Extend Failed - Error extending volume: Not enough available capacity Activity ID: {75dab509-0078-4f8a-a030-5c0f067d534e}. I definitely know I have spare unallocated space on the disk available. Could you assist please.

Hi all, We have two Active Directory Domain Controllers running on separate hypervisor servers on-site. AD16-01 is the operations master and AD16-02 is the backup. These both run on Windows Server 2016. AD16-01 rebooted without cleanly shutting down on Sunday evening at 22:04:22, I believe that this is what has caused the sync to break. When I run "repadmin -showrepl" this is the issue we are getting: I have attempted to manually resync AD16-01 and AD16-02 using "repadmin /syncall /A /e /P" but I am still getting the same issue that a disk operation failed even after retries. I have also used w32tm /resync in order to resync the time as I know this can also cause issues when syncing. I am very new to AD, especially syncing issues. Any advice would be greatly appreciated as I worry the longer this doesn't sync, the more data that could be lost if I have to revert AD16-01 to a previous backup whilst its the operations master. Thanks!

Hi All, I've been asked to disable groove music for students. I can't seem to find any good info on how to do it via GP, Has anyone done this? Cheers

Due to a server failure I had to move our HAP to a new server. The old server was running Windows Server 2008 R2 Standard and the new server is running Windows Server 2016 Standard. Well, moving the site did not go well. We were running an older version of HAP+ (v9.0.x) on the old server. I ran into issue after issue trying to get it to run on the new server so I decided to do a clean install of 10.6 on the new server. I cannot install under the default website directory as we have another site running there so I created it's own folder in a directory that I put another website in. I followed the documentation that came with 10.6 specifically the IIS 7 section but I am getting the following error. Any suggestions would be appreciated. [DirectoryServicesCOMException (0x8007052e): The user name or password is incorrect.] System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) +563130 System.DirectoryServices.DirectoryEntry.Bind() +45 System.DirectoryServices.DirectoryEntry.get_AdsObject() +40 System.DirectoryServices.PropertyValueCollection.PopulateList() +27 System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName) +119 System.DirectoryServices.PropertyCollection.get_Item(String propertyName) +162 System.DirectoryServices.AccountManagement.PrincipalContext.DoLDAPDirectoryInitNoContainer() +341 System.DirectoryServices.AccountManagement.PrincipalContext.DoDomainInit() +47 System.DirectoryServices.AccountManagement.PrincipalContext.Initialize() +123 System.DirectoryServices.AccountManagement.PrincipalContext.get_QueryCtx() +40 System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithTypeHelper(PrincipalContext context, Type principalType, Nullable`1 identityType, String identityValue, DateTime refDate) +26 System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithType(PrincipalContext context, Type principalType, String identityValue) +83 System.DirectoryServices.AccountManagement.UserPrincipal.FindByIdentity(PrincipalContext context, String identityValue) +38 HAP.AD.User.get_UserP() +89 HAP.AD.User.Authenticate(String username, String password) +174 HAP.Web.Global.Application_Start(Object sender, EventArgs e) +149

Wondering if someone could help with this problem I am having installing Windoes Server 2016 on a Dell PowerEdge R630. The server came with a non-raid controller (think it was a H330) I've replaced this card with a Dell H730P raid controller. After installing, I configured all the raid virual drives and proceeded to install Windows Server 2016 via USB. However, when I try installing Windows Server 2016 I can't seem to do it. When I select the OS drive I get the message "We couldn't create a new partition or locate an existing one..." I have tried all sorts, DISKPART to configure the volume, adding the drivers for the raid controller dur Windows Server 2016 setup but nothing seems to work. Does anyone have any ideas what I can do to install Windows Server? I tired to do the install via the Lifecycle Controller but I'm stuck here because it only recognises FAT32 formatted drives and the Windows Server ISO is over 5GB in size.

Hey! Bit of a quick one - Is it possible to schedule a GPO to apply from a specific point? I can't find anything online about this, so I presume that it isn't possible, but maybe someone here knows how to work some magic! The query relates to changing proxy settings if anyone is wondering. Any suggestions are greatly appreciated.

Hi all, If you were in the process of setting up a domain for your school network, what are some of the best practices you would adhere to in order to have a secure and efficient network? This is something I will be doing over the half-term to fix a botch job that was done before I started and want to make sure I get it right! Equipment wise, we have two HP Proliant servers with 160gb of ram and 12 cores each. There are around 200 computers (desktops and laptops) in the school and then a few MFP and BYOD devices. Thanks a bunch

Working with a school to upgrade, cleanup and generally simplify an aging setup. Very small school (20 children, 12 Staff, plus 3 Admin staff who would access SIMS and FMS) Currently a single physical Dell server (approx 7+ years old) is doing pretty much everything: DC, DHCP, DNS, STORAGE, SQL+SIMS, and VPN. I've been in a similar position before and the server setup I put in place has proven good. Already spoken to Dave at ICTDirect and I see an option there for refrub, but I'll give them options of new and custom built along with it. Questions 1. Can SQL Server Express 2016 happily run and serve the above setup (a SIMS and FMS DB) when installed on Windows 10 EDU or LTSB edition?? 2. Is it recommended/preferred to install the other SIMS related stuff (SOLUS 3, System Manager, Document Server) on the same VM as the SQL DB ? 3. With GDPR in mind, does each VM (disk) need to be encrypted, just the SIMS DB vm disk, or none of the above? 4. Is a TPM 2.0 module for the server board compulsory to achieve any necessary encryption? 5. Will a server with an Intel E3-1220 v6 processor be sufficient to handle three VMs for the above mentioned roles? Thank you for your help