Exchange – Certificate Invalid ‘Revocation Check Failed’
KB ID 0001121 Problem When you check the status of a certificate in Exchange and it it displayed at ‘Invalid’ and the details show that the revocation check has failed. Solution This can happen if your certificate CA has its CRL or OCSP information setup incorrectly, or the Exchange sever simply cannot access them to verify the validity of the certificate. If you are using your own CA the correct way to fix the problem is...
Event ID 213
KB ID 0000115 Problem Replication of license information failed because the License Logging Service on server ServerName could not be contacted. Solution AD cannot see the licensing server. 1. Open Active Directory Sites and Services. 2. Click the site on which the server is located. 3. In the details pane, click License Site Settings. 4. On the Action menu, click Properties. 5. Under Licensing Computer, select a different site...
Failed to open the GP object. You may not have appropriate rights
KB ID 0000008 Problem When you try and edit a GPO, you get the error above. Solution 1. Install the Support Tools from the Windows media 2. Start > All Programs > Windows Support tools > command prompt. 3. dfsutil.exe /purgemupcache {enter} 4. Click Start, click Run, type regedit in the Open box, and then click OK. 5. Navigate to HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon 6. If the WaitForNetwork...
Password Does Not Meet Complexity Requirements
KB ID 0000229 Problem Windows Server has a password complexity requirement to make sure passwords are strong. Yes it can be disabled, but while it is in place you need your passwords to confirm to the following. Error within AD Error at Logon Note: To disable password complexity click here. Solution To meet the policy your password MUST, 1. Passwords cannot contain the user’s account name or parts of the user’s...
Windows – Location Based Printing with con2prt
KB ID 0000510 Problem Yes these days we would prefer to use GPO or GPP to do this, but some printers simply refuse to be farmed out this way, and a lot of clients don’t want to install their network printers in that manner. Con2prt is a very old piece of software it’s part of the Windows NT4 ZAK (Yep it’s that old!). Its purpose in life is to connect clients to printers. So how can we do that based on location? We...
Mapping Printers based on Computer OU (via Script)
KB ID 0000645 Problem Location based printing has long been a pain. In the past I’ve tackled it with Group Policy Preferences, and I’ve even gone ‘old school’ and mapped printers with con2prt. A few months ago I put in a new network at a school, they were using a vbs script to deploy all their classroom printers, and I had a quick (unsuccessful) attempt to do the same. But time was against me and I used GPP...
Finding Out the Last Time Domain Users have Logged in
KB ID 0000682 Problem Active directory keeps a log of the last time a domain user has authenticated to the domain (from server 2000 onwards) , the drawback with 2000 is that this value didn’t replicate so you had to query each domain controller and cobble the results together. After 2003 this value was replicated (after convergence,) to all domain controllers. Solution Update Here’s a much better way of showing who logged...
Deploy ODBC Settings via Group Policy
KB ID 0000805 Problem I’ve briefly mentioned this before when I wrote about Group Policy Preferences so when I had to do this on-site this week, I jumped straight into the group policy management console, and found that because my ODBC connection was using SQL authentication (with the SQL sa account), this would NOT WORK, (it only works with Windows authentication and even then it needs a tweak). If you are using SQL...
Server 2012 – ‘The Active Directory Services Installation Wizard is relocated in Server Manager’
KB ID 0000714 Problem I’ve already written about promoting or adding a Windows Server 2012 Domain Controller; Add a Server 2012 Domain Controller to a 2008 Domain But if you attempt to run ‘dcpromo’ from command line, you will see this error, and a link to a Technet article. (Perhaps a clickable link to a picture showing where dcpromo now lives would be better!) Solution Note: I’m assuming you have already...
Configure Wireless Network Stings via Group Policy
KB ID 0000923 Problem If you have a corporate wireless network, you can send the settings out to your clients, rather than have them all ask you what the wireless settings are, and how do they connect. Here I’m going to use Domain group policies, but the procedure is the same for local policies (just run gpedit.msc instead). And the dialog boxes are exactly the same as if you were configuring them on the client machine. (You...