The Foley House

Unable to complete configuration wizard for System Center Essentials 2007

Karl — Sat, 11 Oct 2008 23:30:00 GMT

The confugration wizard was generating the following error:

Date: 12/10/2008 00:23:47
Application: System Center Essentials
Application Version: 6.0.1251.0
Severity: Error
Message:

: Verification failed with [1] errors:
-------------------------------------------------------
Error 1:
: Failed to verify Override [OverrideForRuleMicrosoftSystemCenterEssentialsInternalScheduledDiscoveryForContextMicrosoftSystemCenterRootManagementServer6c1cc55796f6477f97fbe53bcdb1154f].
Override [OverrideForRuleMicrosoftSystemCenterEssentialsInternalScheduledDiscoveryForContextMicrosoftSystemCenterRootManagementServer6c1cc55796f6477f97fbe53bcdb1154f] is a duplicate to Override [OverrideForRuleMicrosoftSystemCenterEssentialsInternalScheduledDiscoveryForContextMicrosoftSystemCenterRootManagementServere2f7dfce1adc45e0adbcbf63664743af] defined within the same ManagementPack. Please remove any one of the duplicate overrides.
-------------------------------------------------------

Failed to verify Override [OverrideForRuleMicrosoftSystemCenterEssentialsInternalScheduledDiscoveryForContextMicrosoftSystemCenterRootManagementServer6c1cc55796f6477f97fbe53bcdb1154f].Override [OverrideForRuleMicrosoftSystemCenterEssentialsInternalScheduledDiscoveryForContextMicrosoftSystemCenterRootManagementServer6c1cc55796f6477f97fbe53bcdb1154f] is a duplicate to Override [OverrideForRuleMicrosoftSystemCenterEssentialsInternalScheduledDiscoveryForContextMicrosoftSystemCenterRootManagementServere2f7dfce1adc45e0adbcbf63664743af] defined within the same ManagementPack. Please remove any one of the duplicate overrides.
: Failed to verify Override [OverrideForRuleMicrosoftSystemCenterEssentialsInternalScheduledDiscoveryForContextMicrosoftSystemCenterRootManagementServer6c1cc55796f6477f97fbe53bcdb1154f].
Override [OverrideForRuleMicrosoftSystemCenterEssentialsInternalScheduledDiscoveryForContextMicrosoftSystemCenterRootManagementServer6c1cc55796f6477f97fbe53bcdb1154f] is a duplicate to Override [OverrideForRuleMicrosoftSystemCenterEssentialsInternalScheduledDiscoveryForContextMicrosoftSystemCenterRootManagementServere2f7dfce1adc45e0adbcbf63664743af] defined within the same ManagementPack. Please remove any one of the duplicate overrides.
: Override [OverrideForRuleMicrosoftSystemCenterEssentialsInternalScheduledDiscoveryForContextMicrosoftSystemCenterRootManagementServer6c1cc55796f6477f97fbe53bcdb1154f] is a duplicate to Override [OverrideForRuleMicrosoftSystemCenterEssentialsInternalScheduledDiscoveryForContextMicrosoftSystemCenterRootManagementServere2f7dfce1adc45e0adbcbf63664743af] defined within the same ManagementPack. Please remove any one of the duplicate overrides.

I found this closed bug:
http://connect.microsoft.com/OpsMgrFeedback/feedback/ViewFeedback.aspx?FeedbackID=286212
(Didn't help)

Then I found this, which did...
http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=2253298&SiteID=17

System Center Essential OpsMgr Error 0x80004005

Karl — Sat, 11 Oct 2008 23:18:00 GMT

After an install of SCE 2007, the OpsMgr service would not start and kept throwing an 0x80004005 error.
Found another blog with a fix:
http://blogcastrepository.com/blogs/brian_tucker/archive/2008/01/16/scom-opsmgr-2007-health-service-error-0x80004005-event-id-7023.aspx

It was a little different in my case, I had to remove LMIRfsClientNP from the registry key:
HKEYLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\HwOrder\ProviderOrder

D-Link DCS-6620G - HTTP 400 Bad Request

Karl — Sat, 27 Sep 2008 15:59:00 GMT

After the install of Silverlight - My D-Link DCS-6620G camera started returning HTTP 400 Bad Request errors.
After a bit of investigation, I found this:
http://silverlight.net/forums/p/7452/77779.aspx

Locating the key, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Accepted Documents, I removed a couple of XML document type I figured that I would never use.

Everything now works fine.

Kaspersky Internet Security 7 will not install

Karl — Mon, 25 Aug 2008 14:21:00 GMT

I'd forgotten this one... Something gets left in the registry so that the Kaspersky install keeps giving you this error:
"You must restart your computer before proceeding with the installation."

Download and apply this registry fix from Kaspersky.

More details here:
http://support.kaspersky.com/kolt/?eid=207694096

Network connection keeps stopping in Windows Vista Ultimate x64

Karl — Thu, 14 Aug 2008 08:41:00 GMT

I've recently had an issue with my main desktop machine losing network connectivity overnight. No other machines are affected, only my desktop one. The problem computer is connected via wired ethernet to a Netgear GS105 Gigabit switch. The lights on the switch stay on, so there appears to be nothing wrong with the physical connection but the system still can contact nothing on the network.

What has worked as a fix, was to go into the network connections, disable and then enable the LAN connection. The computer will then work fine for another 24 hours.

After some searching, I read this:
http://forums.techarena.in/vista-help/791873.htm

Which then led to this:
http://support.microsoft.com/kb/927168

Now, each time the connection has stopped working, I have had my Windows Mobile 6.0 phone plugged in, synchronising and charging. I wondered if this was the same as Internet Connection Sharing as the phone is given an IP and can access the network via my desktop computer. When I had network problems with my network camera, I do remember switching on RSS (receive side scaling) as part of the changes made to the IP stack.

I've disabled RSS for now using the command:
netsh interface tcp set global rss=disabled

I'll followup with any further lockups or not!

Poor performance with D-Link DCS-6620G and Microsoft Windows Vista - Solved

Karl — Tue, 29 Jul 2008 11:20:00 GMT

I recently bought a D-Link DCS-6620G IP camera to replace a failed Panasonic one. I found the performance to be terrible. After running a network capture I discovered the following:

My Vista desktop would send two TCP SYN requests with ECN and CWR flags set.
The camera would resond to each of these with a TCP RST.
My Vista desktop would then send a TCP SYN request without ECN and CWR flags and the camera would then respond normally.

This problem also meant that I could not add the camera to D-Link D-ViewCam Monitor as the request to add a camera failed with an unable to connect message.

After a bit of reading, I discovered the CWR and ECN flags were being set because I had ECN enabled in my IP stack. I verified this by running:

netsh interface tcp show global

Querying active state...

TCP Global Parameters
----------------------------------------------
Receive-Side Scaling State          : enabled
Chimney Offload State               : disabled
Receive Window Auto-Tuning Level    : disabled
Add-On Congestion Control Provider : none
ECN Capability                      : enabled
RFC 1323 Timestamps                 : disabled

Running the following, disabled the setting:

netsh interface tcp set global ecncapability=disabled

Ok.

And...

netsh interface tcp show global

Querying active state...

TCP Global Parameters
----------------------------------------------
Receive-Side Scaling State          : enabled
Chimney Offload State               : disabled
Receive Window Auto-Tuning Level    : disabled
Add-On Congestion Control Provider : none
ECN Capability                      : disabled
RFC 1323 Timestamps                 : disabled

The camera is now working very well.

Microsoft DPM 2007 - Enable colocation of data on tape

Karl — Sat, 12 Jul 2008 10:26:00 GMT

If you have multiple storage groups with the same data retention policies, you can now colocate the data on the same tapes as long as you have installed the DPM 2007 feature pack. Most useful if you have a single drive rather than a library.

It's not settable in the GUI, but the following Powershell command turns it on:
Set-DPMGlobalProperty -DpmServer <DPM Server Name> -OptimizeTapeUsage $true

More details here.

Update Rollup 3 for Exchange Server 2007 Service Pack 1

Karl — Thu, 10 Jul 2008 12:48:00 GMT

This (KB949870), was applied by Windows Update last night, and I woke up to no incoming email. On investigation, I found that there was no smtp (25) port open, and that the Microsoft Exchange Transport hadn't started after the reboot.

I attempted to manually start the service, but no joy as it timed out after 30 seconds. I reviewed the event logs, nothing there, tried again and it worked. Did a trawl back through the event logs when the server restarted, and again nothing. There were some eventid 3001\3003 from the EvntAgnt (log file not at end) so I may be missing some logs.

The only other issue I can think of, is that this is a single server Exchange 2007 installation - I.e. The transport service is running on the same server as the mailboxes rather than on a separate edge server. I would think this receives no testing by Microsoft!

I will have to monitor this the next time I reboot. Is anyone else having this issue?

DPM 2007 Feature Pack - Out!

Karl — Thu, 10 Jul 2008 12:36:00 GMT

The feature pack that is supposed to fix quite a few issues was released on the 1st July. I seemed to have missed it even though my DPM server is subscribed to Windows Update.

Found out about it here:
http://blogs.technet.com/dpm/archive/2008/07/01/dpm-2007-rollup-update-now-available.aspx

Details from Microsoft here:
http://www.microsoft.com/downloads/details.aspx?FamilyID=e9e1fe35-b175-40a8-8378-2f306ccc9e28&DisplayLang=en
http://www.microsoft.com/downloads/details.aspx?FamilyID=ad5cd1a2-9b87-4a2c-90a2-9dbaf1024310&DisplayLang=en

Configure Server 2008 Time

Karl — Sat, 05 Jul 2008 14:36:00 GMT

I used the command:
"w32tm /config /manualpeerlist:"uk.pool.ntp.org europe.pool.ntp.org" /syncfromflags:manual /reliable:yes /update"

More details here:
http://technet2.microsoft.com/windowsserver/en/library/f3d6b66c-5fdc-4a77-a901-5efbcb4d4bb71033.mspx?mfr=true

Active directory permissions inheritance being cleared

Karl — Fri, 20 Jun 2008 15:18:00 GMT

I've been having an issue for some time where certain users and groups were having thier AD inheritance flag cleared and an arbitary set of permissions made.

It turns out that this is by design. Because the users belonged to a group, which belonged to Print Operators, thier permissions were being set to match the System\AdminSDHolder object. The PDC emulator runs an hourly process which copies the permissions from AdminSDHolder to these protected objects.

The following article describes how to remove Print Operators from this protected list of groups. The article talks about a hotfix, but this is only relevent for Windows 2003 SP1. Windows 2003 SP2 already has this change.

You can find the article here:
http://support.microsoft.com/kb/817433/en-us

A couple of great Media Center addons

Karl — Sun, 15 Jun 2008 19:44:00 GMT

Just wanted to share a couple of excellent Media Center addons I have found recently.

The first, called WebGuide4, allows you to access your Media Center PC through a web interface, including mobile:
http://www.asciiexpress.com/wiki/

The second allows access to BBC iPlayer, ITV Catch Up and Channel 4 Catch Up from within Media Center:
http://www.milliesoft.co.uk/index.php?option=com_content&view=article&id=9&Itemid=11

DPM 2007 Agent failing to protect Windows Vista SP1

Karl — Sun, 15 Jun 2008 08:03:00 GMT

I recently modifed my DPM 2007 installation to backup my local users folder on Windows Vista Ultimate x64. This would not work and kept producing the following event logs when I attemted to manually sync the share:

Log Name:      Application
Source:        Application Error
Date:          15/06/2008 08:50:37
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Cartman2.thefoleyhouse.co.uk
Description:
Faulting application DPMRA.exe, version 2.0.5820.0, time stamp 0x46f990f7, faulting module kernel32.dll, version 6.0.6001.18000, time stamp 0x4791ada5, exception code 0x80070002, fault offset 0x000000000002649d, process id 0x1ff8, application start time 0x01c8cebaac1ac7c8.

After some research I found the following fix:
http://www.eggheadcafe.com/software/aspnet/31450629/cant-create-recovery-poi.aspx

You have to create the following DWORD registry key with a value of 1:
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\kernel\obcaseinsensitive

Windows Vista Ultimate x64 Component Registration Problem

Karl — Sat, 14 Jun 2008 10:33:00 GMT

My Media Center PC randomly decided to stop working. After a lot of searching and trying I finally found this:

http://mymce.wordpress.com/2006/11/30/a-component-registration-failurea-critical-process-failurea-tuner-not-found-error/

The steps were:

Close Media Center
Click on the Start menu, choose run and type cmd
Execute the command regsvr32.exe atl.dll
Execute the command C:\WINDOWS\eHome\ehSched /unregServer
Execute the command C:\WINDOWS\eHome\ehSched /service
Execute the command C:\WINDOWS\eHome\ehRecvr /unregServer
Execute the command C:\WINDOWS\eHome\ehRecvr /service
Execute the command C:\WINDOWS\eHome\ehRec.exe /unregServer
Execute the command C:\WINDOWS\eHome\ehRec.exe /regserver
Execute the command C:\WINDOWS\eHome\ehmsas.exe /unregServer
Execute the command C:\WINDOWS\eHome\ehmsas.exe /regserver
Restart Media Center

Thanks so much guys!

DPM 2007 DPMRA Error 10048 (0x2740)

Karl — Sun, 25 May 2008 16:39:00 GMT

After rebooting my Exchange server because of DNS issue, the DPM protection stopped. Further investigation found this in the event log:
The DPMRA service terminated with service-specific error 10048 (0x2740).

Google found this:
http://support.microsoft.com/kb/947682

Essentialy you use 'netstat -oan' to find the PID of the process using port 5718 or 5719, which are both required by DPMRA.
Then use 'tasklist' and 'tasklist /svc' to discover which process it is. In my case, it was the MS Exchange Information Store.

I fixed it by stopping all Exchange services, starting DPMRA and then restarting Exchange.

It's kind of weird that MS Exchange can use the DPMRA ports when DPM is speciffically for protecting Exchange (amongst other things).

How to re-create the Show Desktop icon on the Quick Launch toolbar

Karl — Thu, 22 May 2008 08:45:00 GMT

Create a text file called Show Desktop.scf containing:

[Shell]
Command=2
IconFile=explorer.exe,3
[Taskbar]
Command=ToggleDesktop

More details here:
http://support.microsoft.com/kb/190355/en-us

How to enable user environment debug logging in retail builds of Windows

Karl — Thu, 22 May 2008 08:19:00 GMT

I've found this quite useful in debugging slow logins or incorrect application of group policy.

Create the following DWORD value:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserEnvDebugLevel

Set:
0x00030002 - Masses of debug info
0x00010001 - Normal

It logs to:
%Systemroot%\Debug\UserMode\Userenv.log

More details here:
http://support.microsoft.com/kb/221833

DPM 2007 Internal error code: 0x80990A93

Karl — Thu, 22 May 2008 08:12:00 GMT

When changing the PG (Protection Group) that my server belongs to, I normally get this error message:
DPM cannot protect \\CHEF2.thefoleyhouse.co.uk\Optical Drive\. The recycle bin, the System Volume Information folder, non-NTFS volumes, DFS links, CDs, Quorum Disk (for cluster) and other removable media cannot be protected. (ID: 38)

Today, it suddenly changed to:
DPM cannot access the path \\CHEF2.thefoleyhouse.co.uk\Optical Drive\ because part of the path has been deleted or renamed.
Check the path and enter it again.
ID: 36
Details: Internal error code: 0x80990A93

It took me a little while to realise that this was because I had removed the DVD from the drive! I thought I'd broken something by reinstalling the DPM client!

SQL Database missing from DPM 2007

Karl — Tue, 20 May 2008 17:22:00 GMT

Having fixed my SQL 2005 issues with DPM 2007, I found my main production SQL database was missing from the list of resources available to be protected. When attempting a normal SQL backup, I got an error message telling me that the Full Text Index was missing.

I recreated the Full Text Index, (got lost when changing SQL versions - No backup, that's what DPM was supposed to do!), and everything worked great.

The thing i learned here was, if DPM is having problems protecting a resource, try another backup type for more information on the error!

DPM SQL Issues

Karl — Tue, 20 May 2008 17:17:00 GMT

I had the following scenario:

DPM 2007 Running on Windows Server 2003 R2 SP2 (x86)
SQL 2005 Standard (x86) running on Windows Server 2008 (x64)

DPM would not protect the SQL databases, and kept giving errors that the protection was "inconsistant". There were lots of SQLVDI errors in event viewer, including a BADMEM error.

To cut a long story short, I found the fix was to replace the x86 version of SQL 2005 with an x64 version.

Windows Vista SP1 x64 - Multiple Taskeng processes consuming resources

Karl — Tue, 20 May 2008 13:33:00 GMT

I think I've found the cause, with not a littlew help, of all my multiple taskeng processes that have been plaguing my x64 SP1 Vitsa box:

Open Task Scheduler from Administrative Tools
Delete any User_Feed tasks
Type 'msfeedssync enable' at the command line to recreate

http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=3087879&SiteID=17

Thanks guys!

Blog Tags were not working

Karl — Sat, 16 Feb 2008 20:14:00 GMT

I've added the following to web.config to allow these to work:

<security>
<requestFiltering allowDoubleEscaping="True" />
</security>

I added it just before the </system.webserver> tag.

Moved to new server

Karl — Sat, 16 Feb 2008 12:34:00 GMT

We are now running on Server 2008.

Let me know of any issues please!

Virtual Server on Server 2008

Karl — Sat, 16 Feb 2008 08:54:00 GMT

You must remember to add the CGI service role to IIS 7.0:
http://www.hostingforum.ca/838516-virtual-server-2005-sp1-vista-x64-vswebapp-exe-being-downloaded-instead-executed.html

How-to Create antispam reports

Karl — Sat, 16 Feb 2008 08:18:00 GMT

There are a number of reports avaiable in Exchange Management Shell.

You must first change into the scripts directory (cd C:\Program Files\Microsoft\Exchange Server\Scripts) and then try the following:
get-AntispamFilteringReport.ps1
get-AntispamSCLHistogram.ps1
get-AntispamTopRecipients.ps1
get-AntispamTopRBLProviders.ps1
get-AntispamTopBlockedSenders.ps1
get-AntispamTopBlockedSenderDomains.ps1