Crashed site

A customer intranet died the other morning. The is what happend.

First user notifies of error while trying to access.

I start to look into it.

- First issue. Low/none diskspace. Frees up so its workable. This does nothing for the site. Tries restart to no avail.

- Checks all IIS-sites and Application Pools. A lot of pools are stopped. Starts these up, but not difference.

- Notices that patches been applied the previous night. Server starts warning for diskspace soon after. Ok so maybe a patch requires psconfig. Runs this but are greeted with error: Failed to initiate the upgrade sequence…. Method not found ‘void Microsoft.Sharepoint.WorkflowServices.Iworkflowservice.upgrade….

searching for this error doesn’t give much. Tries to uninstall the workflow manager services for this seems to related. the workflow 2013 mananger has given some ache in the past and isn’t used anyways. This gives nothing.

Tries to access Central Administration and curiously this works to certain degree. Until tries to access Service Application then it throws iWorkflowServices errors again.

Looks deeper into the logs and finds issues with the patches being applied.

Ok, so maybe a patch was trying to be applied but got stuck on the diskissue and landed in some unfinished state?

Tries to download the latest updates to see if this is an issue. There is some, but it takes alot of time.

Checks the size of the culprits Kb2863829. Turns out this mother is 827MB, no wonder it takes time. AND the patch requires and psconfig run after completion!

Let the update run through and then runs psconfig again. Though this failes on the Task 8 in the first run (Failed to create sample data) another run let it finishes.

Now everything works again!

What to take with us from this experience?

Always have 10-20GB free space on the sharepointserver!

References:

http://support.microsoft.com/Kb/2863829

http://social.msdn.microsoft.com/Forums/en-US/e5644dc3-3849-46fe-aa38-460e9f9d7bc2/error-in-configuration-wizard-after-installing-sharepoint-2013-service-pack-1?forum=sharepointadmin

Re-arm trial Server 2008+

While doing labs, applying snapshots and whatnot the licensekey sometimes disappears or you just dont wanna waste an activation on a testmachine.

To re-arm a Server triallicense

Elevated Cmd-prompt

Check current licenselevel

/>slmgr.vbs –dli

Extend the evalution period with another 60 days

/>slmgr.vbs –rearm

Server can be rearmed up to 3 times giving you a total of 240 days.

References:

http://support.microsoft.com/kb/948472

http://blogs.technet.com/b/johnbaker/archive/2009/08/29/extending-your-evaluation-activation-grace-period-on-windows-server-2008-and-2008-r2.aspx

Strange group by problem

A curious problem.
Environment : Sharepoint Foundation 2010 using localization on Server 2008 R2
Symptom: After migration of Sharepointsite to different host problems started occur with the Group By function in all Views that utilized this.
First time a group by view is expanded everything works, but after opening a document under a group by node all the nodes reloaded and after this no + or – does what it should. Everything just shows as “Loading” under the Group By nodes. The Ribbonmenu also get stuck on “Loading” after this has started occuring. Reload of entire site doesn’t do anything. Browsing in InPrivate node gets in rolling once, then same error again.

Solution: Install kb2353117
References:
http://support.microsoft.com/kb/2553117/en-us

Lockscreen shortcut

When bouncing about on different desktops, virtual and otherwise physical its easy to leave a computer unlocked sometimes. This isn’t so good, but shortcuts tends to flip out when accessing remote systems. A good security practice is to create a desktop shortcut that can lock the computer very easily.

So,

1. Create a shortcut

2. Enter: rundll32.exe user32.dll,LockWorkStation

3. Save and change icon to a padlock or something more logical. This among other icons can be found in Shell32.dll under system32

References:

http://www.sevenforums.com/tutorials/13278-lock-computer-create-shortcut.html

http://ask-leo.com/how_do_i_change_the_icon_of_a_desktop_shortcut.html

SQL Agent doesn’t start

SQL Agent won’t start for SQL Server 2008 R2. Everything else works.

Symptoms:

When trying to start the SQL Server Agent service, either from the service.msc or the Management Studio error “Unable to start SQLAgent” is given.

Actions:

Check output from sqlagent.out. To change the path of sqlagent.out

use msdb

go

sp_set_sqlagent_properties @errorlog_file='c:\temp\sqlagent.out'

go

Following message in sqlagent.out:

---- - ! [298] SQLServer Error: 229, The EXECUTE permission was denied on the object 'sp_sqlagent_has_server_access', database 'msdb', schema 'dbo'. [SQLSTATE 42000] (ConnIsLoginSysAdmin)

Resolution:

Added the SQL Agent service account as sysadmin on the sql server from Securites.

References:

http://codespin.blogspot.se/2008/01/fixing-startup-failure-of-sql-server.html

http://qa.social.msdn.microsoft.com/Forums/en-US/sqldatabaseengine/thread/542bab08-c8a6-4106-ae96-99bf0f895bd8

Schedule reboot of Server 2008 R2

We always need to configure it, but how was that syntax again…

Create new item in scheduler, in action browse for c:\windows\system32\shutdown.exe , add arguments /r /d p:1:1

/r         Full shutdown and restart the computer.

/d [p|u:]xx:yy  Provide the reason for the restart or shutdown.
           p indicates that the restart or shutdown is planned.
           u indicates that the reason is user defined.
           If neither p nor u is specified the restart or shutdown is
           unplanned.

P     1       1       Hardware: Maintenance (Planned)

Sharepoint 2013 and SQL Management Studio

Issue:
Just installed Sharepoint Server 2013 in standalone mode. We need to migrate a sharepointsite to new environment. But for me to able to a attach-databaseupgrade I need to get into the SQL Server and do a restore of databases. Problem is, Management Studio wasn’t included with the Sharepoint SQL Expressinstallation. Unfortunatly the good old days of SQL Management Studio 2005 are now gone. Then, all I needed to do was download the management pack and install it. Then it was good to go. Not so now.
Firstly, there is no such nice standalone package. All I find to download are fully packaged solutions where basicly goes through the same tedious process you have to when installing SQL Server like you ordinary do, check all prereqs, install setuppackage, think a bit, check bla bla bla.
So I do this, choose add features to existing instance. Gets some error about “instance id required but missing” or even better when installing gets pass this point, instead there is no Management feature to found. What the #%¤ 
I just wanna restore a bloody database!
Fine, I get tired of this. Boot up a real SQL Management Studio from another server and tries to connect to sharepointinstance, but all to avail.
now I ready to punch things.
Back to searching for an answer. I briefly consider installing a proper SQL 2008 r2 standard instead, but no, I can’t give in now.
Finally I found something
When I instead choose New installed or add shared features in the installation package, I finally get the much sought after Management Tools – Basic option!
Right, now be sure to uncheck Database Engine! Otherwise you’ll get a whole new instance dragging down your poor server.
Ok, so the solutions was pretty simple. Once you know where to go, but I did this is in a labenvironment and could be somewhat more casual about doing the new installationoption. In a production environment I usually tread more lightly.
Anyway why must it be so unlogical Microsoft?
Searching the net for this issue gave me plenty of peers with the same issue so at least Im not the only dumbfounded out there.
References:
http://goneale.com/2009/05/24/cant-install-microsoft-sql-server-2008-management-studio-express/
http://www.microsoft.com/download/en/details.aspx?id=26729
http://www.benlittler.com/2009/06/how-to-install-sql-management-studio-express-2008/
http://stackoverflow.com/questions/3536023/how-to-install-sql-server-management-studio-2008-component-only

Sharepoint 2010 and Server 2012

This will show when trying to install the prerequsites:

Always a bad sign…followed by

Server 2012 and Sharepoint 2010 is not a supported configuration. Support will come with Sharepoint 2010 Service pack 2. For now, stick to 2008 R2.

References:

http://support.microsoft.com/kb/2724471

Multiple dnsregistrations for multihomed servers

Sometimes I have more than one NIC on a server. I have my reasons for this.

This can give issues with the wrong address responding in the network. For example a user trying to reach the fileserver suddenly get answers from the fileservers other NIC, which isn’t even on the same subnet. Of course this results in a timeout until the users computer figure out that the other address for the fileserver actually works.

This is because the fileserver in this instance, have two addresses registered in the DNS.

When I remove the other, wrong address from the DNS, it’s back in an hour or so. Since all NICs are registered when netlogon service restart every hour or so.

To rid us of this annoyance and let us have our multihomed machines in solitude :

1. Disable Register this connection’s addresses in DNS

2. Disable NetBios over TCP/IP

3. Disable DNS-listening on specific interface

VPN Setup for Server 2008 R2

It’s good to have access to the home network occasionally. This is purely for my own convenience

This is how to setup Server 2008 R2

1. Install role “Network policy and Access services”

2. Select role services “Routing and Remote Access”>Remote Access Services |Routing

3. Configure and Enable Routing and Remote Access from node

4. Choose Custom Configuration

5. Choose “VPN Access”

6. Finish and Start Service.

7. Add static address pool to the IPv4 tab on the Routing and remote access.

Done!

Now for the firewall ports must be opened: PPTP:1723 TCP 47 GRE . L2TP over IPSEC: 1701, TCP 500 UDP .

These ports are opened auto in Windows Firewall. For the physical firewall, in this case a Juniper Netscreen 5GT do following.

• set service CustomPPTP group “other” 47 src 2048-2048 dst 2048-2048
• set service CustomPPTP + tcp src 0-65535 dst 1723-1723
• set vip multi-port
• Save and reboot firewall.
• set interface ethernet3 vip 2048 CustomPPTP mylocalserverIP (This might be a bit flaky and can be set from the gui instead).
• set policy from untrust to trust “any” “VIP::1” CustomPPTP permit

 

References:

• http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-server-2008-r2/
• http://www.rsivanandan.com/2010/07/16/pptp-pass-through-through-juniper-ns-5gt-firewall/

Custom Views in Server 2008 R2

Recently I had a request to create a logging system for usage on a server. A way to document how many times a machine is logged onto by a specific subset of users.
I though I would try out the custom views in Server 2008 R2 instead of making the quick and easy script at logon/logoff.
It turned out a bit more complicated than I anticipated so here it is, for documenting purposes.
1. Make sure logon events are audited in local security policy or domain policy.
2. Create a custom view from the Security Log
3. Choose tab XML and ‘Edit query manually’
4. My end result 

<QueryList>
  <Query Id="0" Path="Security">
    <Select Path="Security">
    *[System[(EventID=4624 or EventID=4647)]]
    and
    *[EventData[Data[@Name='TargetUserName'] and (Data = 'user1' or Data='user2')]]
    </Select>
  </Query>
</QueryList>

The specific properties of the event you want to log can be found by viewing XML view on the relevant event. In my case the TargetUserName was the common unit for the relevant IDs.

The cool thing about custom events is that you can attach a task to the view, allowing a program or email to be sent every time something is logged.
References:
http://blogs.technet.com/b/askds/archive/2011/09/26/advanced-xml-filtering-in-the-windows-event-viewer.aspx

Unable to load client print control

Firstly! No happy ending to this story.
Issue:
Error is shown when users use print control in an external hosted application.

Still works to print, when first pushing abort and then running anyways.
Symptoms:
Hosted application use a Microsoft SQL Server Report Viewer Control.
Users connect from Remote Desktop Server running Server 2008 R2 using Internet Explorer 9.
UAC is disabled, due to other 3^rd party application that requires this.

Addin is loaded in Internet Explorer. Probable cause is rights issue.
Only reason it works anyways is because I logged in as administrator and ran the installation above. Problem is that this control tries to download every time user access the site, just in case there is a new version.
Actions:
Registered rsclientprint.dll manually on adminlogin, and in user environment. No effect.
Removed files from Windows\Downloaded Program Files > Went back to not working at all. Copied back to allow users to print despite error message.
Registered rsclientprintx64.dll > No effect. Browser is probably running in x32 mode so the right components should be installing.
Tried to run website from Iexplore in 64bits mode > Site didn’t even work.
Set up GPO to allow server-users to autoinstall activex components > No effect.
Tried adding the user to Power Users to do the install > No effect.
Resolution: to be added….
Notes:
Most of information on Internet points to the server hosting the webapplication needing to install Microsoft Report Viewer SP1 - http://www.microsoft.com/downloads/details.aspx?FamilyID=bb196d5d-76c2-4a0e-9458-267d22b6aac6&DisplayLang=en and Report Viewer Redistributable 2008 Service Pack 1 GDIPLUS.DLL Security Update
http://www.microsoft.com/downloads/details.aspx?familyid=6aaa74bd-a46e-4478-b4e1-2063d18d2d42&displaylang=en
But since I don’t have control of the server and the company hosting the application isn’t very forthcoming I wanna solve on the clientside. This doesn’t seem to work though. So severals hours of trying to solve it has led me to take a timeout and await the company helpdesk. Annoying.

Update 1.
After calling to the supplier with my grief it turned out that they indeed had recently updated their plattform and were experiencing some issues... Well at least I could turn over my hours of research into the problem to them, hoping this would speed up their own troubleshooting.
Another great link I found : http://social.msdn.microsoft.com/Forums/is/sqlreportingservices/thread/4af03654-31b1-44b3-8514-20a3c25bfd7c
This points toward the issue only happening in environements were the user isn't administrator.

Remote Desktop Services in Workgroup mode

I had a case where a customer wanted to run RDS on singleserver. The idea was to run DC and TS on the same server to save hostingmoney. A bad practice and not really optimal to run on a virtual host with limited memory. The thought struck me if we could manage without the DC the system might run much smoother.

While googling for information a noticed that it was sparse with info for this scenario on the net. It did however work splendidly.

What you need to do

1. Install Server 2008 R2

2. Install server server role Remote Desktop Session Host and Remote Desktop Licensing

3. Configure Per User Licensing mode

4.  Add these policies to make life easier

Computer Configuration>Administrative Templates>Windows Components> Remote Desktop Services> Remote Desktop Session Host>Printer Redirection>Specify RD Session Host server fallback printer driver behavior> = default to PCL if not found

Computer Configuration>Windows Components>Remote Desktop Services>Remote Desktop Session Hos>Connections>Sets rules for remote control of Remote Desktop user sessions = enabled, with user permissions

5. Create users from Computer Management> Users and Computers and add these to Remote Desktop Users group.

For a single server environment this method might sometimes be justified, otherwise it’s a DC-environment that is recommended.

Great tool for cleaning up on Terminal Servers

Got to use ICSweep today to clean out user tempfiles on a Terminal Server. Very effective. In my case server was loosing all diskspace due to a printer spooler gone awry. Lost 4GB in 3 minutes… a bit distressing…
Check out site below for details
http://www.conetrix.com/Blog/post/Utility-to-Delete-Temp-Files-on-a-Terminal-Server.aspx
http://www.ctrl-alt-del.com.au/CAD_TSUtils.htm