How to exclude an address from a scope?

To exclude an address from a scope

1. Open DHCP
2. In the console tree, click Address Pool.
3. On the Action menu, click New Exclusion Range.
4. In the Add Exclusion dialog box, type the Start IP address that you want to exclude from this scope. To exclude a range of more than one IP address, type and End IP address.
5. Click Add.

Windows Servers will not connect to network, it is says duplicate IP

I have schedule restart the server every week. Every Monday, I have got this issue. Windows server will not connect to network and all users in the company have problem log-on to domain. They cannot access the file server, network printer, etc...

Here how I solve this issue.

1.) Restart Domain Controller.
2.) Log-on to the domain with Domain Admin Account.
3.) Go to 'Regedit' and go to this patch. (HKEY_LOCAL_MACHINE\SYSTEM\CurrrentControlSet\Services\TCPIP\Parameters\)
4.) Right-click 'Parameters' and select 'DWARD (32- bit) Value'
5.) Rename DWARD (32 - bit) Value to 'ArpRetryCount' and Modify value '0'
6.) Restart Server.

 This is a way how I solved this issue.

How to deploy Internet Favorites Link with GPO?

Hi All,

Here is how to deploy the Internet Favorites link with GPO.

1.) Create new GPO Name (Internet Favorites Link)
2.) Right click the Internet Favorites Link and click on Edit.
3.) Go to (User Configuration -->  Policies--> Internet Explorer Maintanance -->URLs--> Favorites and Links)
4.) Check on (Place Favorites and links at the top of the list in the order specified below) and (Only delete the favorites created by the administrator). Add the URL link, which you would like to get it from Client computer.
5.)Add the user into the Security Filtering setting.
6.) Only Enable User Configuration Setting.
7.) When all the configuration is finish, Go to the user that you add into the Security Filtering Group and run gpupdate /force command.
8.) After that run gpresult and check the GPO is apply into the user computer or not.
9.) If the GPO is apply, try to log off and log in.
10.) Open the Internet Explorer, Now you can see URL in the Favorites. 

This is how to configure Internet Favorites Link. Hope you all understand what I mentions. If you have any question about this you can send email to (itman4872@gmail.com).

Thanks for your times.

Myo

How to deploy Restricted Groups with GPO?

Today I gonna show you how to configure restricted groups.

1.) Create new GPO name (Restricted Groups).
2.) Right click Restricted Groups and go to this computer setting path (Computer Configuration --> Policies--> Windows Settings--> Security Settings--> Restricted Groups)
3.) Right click Restricted Groups and choose Add Group
4.) Choose the Group Name (example: Administrator...etc..)
5.) Then you see Configure Membership for Administrators
6.) Within Members of this group--> click Add and type the name you want to add for this group, after that click OK.
7.) Now you see the member the name into the members of this group.
8.) Click OK.
9.) In the Security Filtering setting add the computer name you want to deploy this policy.
10.) When all this finish go to the computer, that you add it in Security Filtering group and run (gpupdate /force) command.
11.) After that run gpresult command and check GPO is apply or not.
12.) If the GPO is apply Log off and Log in.
13.) Then right click (My Computer) and click on Manage.
14.) Expand Local Users and Groups --> choose Groups--> Double click Administrators group. Now you can see the name within the members.

This is how to configure Restricted groups in GPO. Hope you all understand what I mention.

Myo

How to open Default Application File open with GPO?

Sometimes very easy step is difficult to me. Here is step how to deploy.
In this lesson I gonna show you .txt file is default open with wordpad file. And deploy user with gpo.

1.) Create new GPO name (example: BlaBla)
2.) Leave the GPO and go to regedit. Go to this path (HKEY_CURRENT_USER-->Software-->Windows-->Explorer-->FileExts-->.txt key)
3.) Right click in .txt and choose New --> String Value
4.) Then you can see (New Value #1) from the right side.
5.) Give the name to be (Application)
6.)After you name the string to be Application, then right click the Application string value and click Modify.
7.) Add value date to be wordpad.exe and click OK to close.
8.) When all this finish, Right click the .txt key file and Export into C drive or D drive.
9.) Put this reg file into the user logon script of gpo. add user into security filtering setting.

OK...That it.This is how to deploy default application file open with GPO.

Myo

Wallpaper not show in End User (GPO issue)

1 week ago,  I have got inform by ITSupport. He told me that one of his windows 7 laptop did not get the wallpaper that I deploy with GPO. So I told him to do this step.

1.) Go to command prompt - Run (GPUPDATE /FORCE) command
2.) Then Run (GPRESULT /R) and check the policy name is apply the laptop or not.
3.)  If the GPO is apply, Go to the Regedit, then check on this path (HKEY_CURRENT_USER-->Control Panel --> Desktop)
4.) Within the desktop, Right panel you can see Wallpaper. add the path into the value name of Wallpaper (Note: The value name must be C:\Windows\blabla.jpg
5.) After that put picture into that path C:\Windows\ and restart the laptop.

Then you can see the wallpaper after Windows restart.

Please note: This is fastest way to solved the wallpaper problem. Sometimes, GPO is take time to effect into the user.You can do this step to saved your wallpaper file into the local drive and assign your registry to get file from local drive.


Myo

Access Denied issue when you logon to W2K8 server

Hi All

This week I have met this issue from my office. I search from the net and I saw one of the articles. The articles say that it can fix it by registry. So I try that solution and it works. Here is the issue screen-shot and step below.

Access Denied issue

Step

1.) Type Regedit

2.) Go to (HKEY_LOCAL_MACHINE--> SYSTEM-->CurrentControlSet-->Control-->Services--> TermService)

     Then you can see just like screen-shot below-

3.) ObjectName is LocalSystem. That why you cannot logon to the W2K8 server. You have to changed it just like screen-shot below-

Change the ObjectName to be (NT Authority \NetworkService) and restart your W2K8 server. After restart the server the issue is gone. I can logon to the W2K8 server successfully.

Myo

How to check AD Replication in Windows 2008?

AD Replication is critical issue in large environments. Here is command to check AD Replication.

1. net share servername (Check SYSVOL and NETLOGON is replicate to the server, Note: It is important)
2. repadmin  /showreps servername
3. dcdiag /test:Replications

After that Go to the Active Directory Sites and Services --> Expand Server --> Right Click NTDS Settings --> All Tasks --> Check Replication Topology

Note: Check Replication Topology because It will show you the server, your server is replicate from.

You can also check your Replication partner within NTDS settings.

Myo

Account Locked Out Issue

In Large Domain Environments, Account Locked Out issue is big issue. Because It make user to automatically locked out after 15 or 20 minutes.

When Account Locked out happen?

1. User is change the new password after 30 or 60 days.  (Example: Company Policy)
2. Using Mobile Device (example: password not synchronize immediately)
3. One of the Computer is having a virus and attack to another good computer, log-in as Bad Password.

How to fix this Account Locked Out Issue?

Go to this below Microsoft Website and Download Account Locked Out. From my environment, This tools is help me alot.

Account Locked Out Checking Tools From Microsoft

Here is logo of Account Locked Out Tools



If you have any question about this please let me know.









Myo

How To Configure Power Saving Policy in Windows XP?

This is way to make Power Saving Policy in Windows XP Environment. If you have any question about this, You can send email.

1. Create 2 GPO Policy. Power Saving Policy for Win XP need 2 Policy. 1 for Computer setting and another one for User Setting. (Example: Test-Power_Saving_Policy (Computer Setting) and Test-Power_Saving_Policy (User Setting)
2. Create .bat file script for User Setting. You can create .bat file script just like this example below

Example:

\\servername\netlogon\powercfg.exe /change "always on" /monitor-timeout-ac 3
\\servername\netlogon\powercfg.exe /change "always on" /monitor-timeout-dc 3

above this script must be apply it to User Setting of Logon.

3. For the Computer Setting Policy, you have to set 2 permission for Registry and 1 permission for File System.
    Go to Computer setting --> Open Windows settings --> Expand Security settings--> and then you can see
    Registry and File System.
    Right Click Registry --> Choose Add Key --> Select this 2 file need to add in Registry.
 
   Machine\Software\Microsoft\Windows\Current Version\Control Folder\PowerCfg
   Users\.Default\Control Panel\PowerCfg
 
   When you add this above registry, there a security permission prompted and request you to add User Name and Computer Name. Add User Name and Computer Name, after that set then to full control permission for this User and Computer.
   For the File System Setting, You have to Right Click File System --> Add File. Then choose powercfg.cpl

   %SystemRoot%\System32\powercfg.cpl
   When you add this above registry, there a security permission prompted and request you to add User Name and Computer Name. Add User Name and Computer Name, after that set then to Deny permission for this User and Computer.

Note: I have set deny powercfg.cpl because I don't allow end user to change Power Setting.

So That All. This is how to configure Power Saving setting in Windows XP Environment.

Myo

How to backup the Group Policy Object?

Back Up Group Policy Object

1). Open the Group Policy Management Console
2). Expand your domain
3).Right click the Group Policy Object and select the Back Up all Tab

Restore Group Policy Object

1). Open the action tab
2). Select the Manage Backups
3). Go to the location of your Group Policy
4). Select the Group Policy Object to be restore

How to Deploy Windows Deployment Server into the Microsoft Windows 2008 Environment?

Today I test Microsoft Windows Deployment Service in the Microsoft Windows 2008 environment.I reference from this forum. (http://www.windows-noob.com/forums/index.php?/topic/446-how-can-i-setup-wds-in-windows-server-2008/).Here is the step by step instructions.

1).Install Microsoft Windows 2008 Enterprise.
2).Add the IP address.Dns suffix add.
3). Install and configure Active Directory.
4). Install and configure DNS Server.
5). Install and configure DHCP Server.
6). Install and configure Windows Deployment Service.
     (Add the image file into the install image file and boot image file) (d:\source file must be copy) (example: .wim file)

How to upgrade AD 2003 Domain Controller to AD 2008 Domain Controller?

If you are going to upgrade Microsoft Windows 2003 Domain Controller to Microsoft Windows 2008 Domain Controller you must need to  Raise the domain functional 200 native to 2003. Here is step by step installation and configuration.

1). Insert the Microsoft Windows 2008 DVD.
2). Go to the Command Prompt.Go to this path from the cd (d:\source\adprep)
3). Run the Adprep /Forestprep and Adprep /Domainprep.Reboot your computer.
4). After that boot up with your Microsoft Windows 2008 Server DVD and upgrade the Microsoft Windows 2003 Server to Microsoft Windows 2008.

Tips: Server Edition must be same. (Example: if your Microsoft Windows 2003 server is Enterprise so Microsoft Windows 2008 Server must be Enterprise Edition.

Myo

Login Screen is black in W2k3

Yesterday I have met this error at my office. I was little bit confused for this error.But I can fix it.You must need to copy color file from the another Microsoft Windows 2003 registry.Here is the step by step instructions.

1).  Copy the registry file from the another Microsoft Windows 2003 Server.The source file in (HKEY_USERS>.DEFAULT>CONTROL PANEL>COLORS).
2).  Export that Colors file.Copy it into the USB stick.
3).  After that go to the error computer.Open the registry and import that color file.

PS. You need to backup the registry and after that you have to import the registry file.

Where is the Remote Desktop .exe file?

Sometimes Remote Desktop Shortcut bar is gone.So you can get it from here.

C:\Windows\System32\mstsc.exe