What’s New in Windows v.Next

Here are some resources relative to what may be in the next version of Windows. Note that this list is by far nowhere near complete and rather feature focused.

• Microsoft TechNet Forum for Technical Preview
• TechNet: What’s New in Hyper-V in Windows Server TP
• TechNet: What's New in Storage Services in Windows Server TP
• TechNet: What’s New in Failover Clustering in Windows Server TP

One can download the Windows 10 TP RSAT here.

Here are some quick snips of Windows Server TP:

Okay, so we’ve gone back to a “traditional” Start Menu format.

The Start Menu right click options:

I’m not convinced. :(

There are a number of us out here that actually _did_ like the Metro style Start Menu.

From what we understand there is a way to toggle between this style and the Metro style but it has not become a priority to figure out yet as we are somewhat buried with projects at the moment.

Here is a PowerShell Get-WindowsFeature output:

Display Name                                            Name                       Install State
------------                                            ----                       -------------
[ ] Active Directory Certificate Services               AD-Certificate                 Available
    [ ] Certification Authority                         ADCS-Cert-Authority            Available
    [ ] Certificate Enrollment Policy Web Service       ADCS-Enroll-Web-Pol            Available
    [ ] Certificate Enrollment Web Service              ADCS-Enroll-Web-Svc            Available
    [ ] Certification Authority Web Enrollment          ADCS-Web-Enrollment            Available
    [ ] Network Device Enrollment Service               ADCS-Device-Enrollment         Available
    [ ] Online Responder                                ADCS-Online-Cert               Available
[X] Active Directory Domain Services                    AD-Domain-Services             Installed
[ ] Active Directory Federation Services                ADFS-Federation                Available
[ ] Active Directory Lightweight Directory Services     ADLDS                          Available
[ ] Active Directory Rights Management Services         ADRMS                          Available
    [ ] Active Directory Rights Management Server       ADRMS-Server                   Available
    [ ] Identity Federation Support                     ADRMS-Identity                 Available
[X] DHCP Server                                         DHCP                           Installed
[X] DNS Server                                          DNS                            Installed
[ ] Fax Server                                          Fax                            Available
[X] File and Storage Services                           FileAndStorage-Services        Installed
    [X] File and iSCSI Services                         File-Services                  Installed
        [X] File Server                                 FS-FileServer                  Installed
        [ ] BranchCache for Network Files               FS-BranchCache                 Available
        [ ] Data Deduplication                          FS-Data-Deduplication          Available
        [ ] DFS Namespaces                              FS-DFS-Namespace               Available
        [ ] DFS Replication                             FS-DFS-Replication             Available
        [ ] File Server Resource Manager                FS-Resource-Manager            Available
        [ ] File Server VSS Agent Service               FS-VSS-Agent                   Available
        [ ] iSCSI Target Server                         FS-iSCSITarget-Server          Available
        [ ] iSCSI Target Storage Provider (VDS and V... iSCSITarget-VSS-VDS            Available
        [ ] Server for NFS                              FS-NFS-Service                 Available
        [ ] Work Folders                                FS-SyncShareService            Available
    [X] Storage Services                                Storage-Services               Installed
[ ] Hyper-V                                             Hyper-V                        Available
[ ] MultiPoint Services                                 MultiPointServerRole           Available
[ ] Network Controller                                  NetworkController              Available
[ ] Network Policy and Access Services                  NPAS                           Available
[ ] Print and Document Services                         Print-Services                 Available
    [ ] Print Server                                    Print-Server                   Available
    [ ] Distributed Scan Server                         Print-Scan-Server              Available
    [ ] Internet Printing                               Print-Internet                 Available
    [ ] LPD Service                                     Print-LPD-Service              Available
[ ] Remote Access                                       RemoteAccess                   Available
    [ ] DirectAccess and VPN (RAS)                      DirectAccess-VPN               Available
    [ ] Routing                                         Routing                        Available
    [ ] Web Application Proxy                           Web-Application-Proxy          Available
[ ] Remote Desktop Services                             Remote-Desktop-Services        Available
    [ ] Remote Desktop Connection Broker                RDS-Connection-Broker          Available
    [ ] Remote Desktop Gateway                          RDS-Gateway                    Available
    [ ] Remote Desktop Licensing                        RDS-Licensing                  Available
    [ ] Remote Desktop Session Host                     RDS-RD-Server                  Available
    [ ] Remote Desktop Virtualization Host              RDS-Virtualization             Available
    [ ] Remote Desktop Web Access                       RDS-Web-Access                 Available
[ ] Volume Activation Services                          VolumeActivation               Available
[ ] Web Server (IIS)                                    Web-Server                     Available
    [ ] Web Server                                      Web-WebServer                  Available
        [ ] Common HTTP Features                        Web-Common-Http                Available
            [ ] Default Document                        Web-Default-Doc                Available
            [ ] Directory Browsing                      Web-Dir-Browsing               Available
            [ ] HTTP Errors                             Web-Http-Errors                Available
            [ ] Static Content                          Web-Static-Content             Available
            [ ] HTTP Redirection                        Web-Http-Redirect              Available
            [ ] WebDAV Publishing                       Web-DAV-Publishing             Available
        [ ] Health and Diagnostics                      Web-Health                     Available
            [ ] HTTP Logging                            Web-Http-Logging               Available
            [ ] Custom Logging                          Web-Custom-Logging             Available
            [ ] Logging Tools                           Web-Log-Libraries              Available
            [ ] ODBC Logging                            Web-ODBC-Logging               Available
            [ ] Request Monitor                         Web-Request-Monitor            Available
            [ ] Tracing                                 Web-Http-Tracing               Available
        [ ] Performance                                 Web-Performance                Available
            [ ] Static Content Compression              Web-Stat-Compression           Available
            [ ] Dynamic Content Compression             Web-Dyn-Compression            Available
        [ ] Security                                    Web-Security                   Available
            [ ] Request Filtering                       Web-Filtering                  Available
            [ ] Basic Authentication                    Web-Basic-Auth                 Available
            [ ] Centralized SSL Certificate Support     Web-CertProvider               Available
            [ ] Client Certificate Mapping Authentic... Web-Client-Auth                Available
            [ ] Digest Authentication                   Web-Digest-Auth                Available
            [ ] IIS Client Certificate Mapping Authe... Web-Cert-Auth                  Available
            [ ] IP and Domain Restrictions              Web-IP-Security                Available
            [ ] URL Authorization                       Web-Url-Auth                   Available
            [ ] Windows Authentication                  Web-Windows-Auth               Available
        [ ] Application Development                     Web-App-Dev                    Available
            [ ] .NET Extensibility 3.5                  Web-Net-Ext                    Available
            [ ] .NET Extensibility 4.5                  Web-Net-Ext45                  Available
            [ ] Application Initialization              Web-AppInit                    Available
            [ ] ASP                                     Web-ASP                        Available
            [ ] ASP.NET 3.5                             Web-Asp-Net                    Available
            [ ] ASP.NET 4.5                             Web-Asp-Net45                  Available
            [ ] CGI                                     Web-CGI                        Available
            [ ] ISAPI Extensions                        Web-ISAPI-Ext                  Available
            [ ] ISAPI Filters                           Web-ISAPI-Filter               Available
            [ ] Server Side Includes                    Web-Includes                   Available
            [ ] WebSocket Protocol                      Web-WebSockets                 Available
    [ ] FTP Server                                      Web-Ftp-Server                 Available
        [ ] FTP Service                                 Web-Ftp-Service                Available
        [ ] FTP Extensibility                           Web-Ftp-Ext                    Available
    [ ] Management Tools                                Web-Mgmt-Tools                 Available
        [ ] IIS Management Console                      Web-Mgmt-Console               Available
        [ ] IIS 6 Management Compatibility              Web-Mgmt-Compat                Available
            [ ] IIS 6 Metabase Compatibility            Web-Metabase                   Available
            [ ] IIS 6 Management Console                Web-Lgcy-Mgmt-Console          Available
            [ ] IIS 6 Scripting Tools                   Web-Lgcy-Scripting             Available
            [ ] IIS 6 WMI Compatibility                 Web-WMI                        Available
        [ ] IIS Management Scripts and Tools            Web-Scripting-Tools            Available
        [ ] Management Service                          Web-Mgmt-Service               Available
[ ] Windows Deployment Services                         WDS                            Available
    [ ] Deployment Server                               WDS-Deployment                 Available
    [ ] Transport Server                                WDS-Transport                  Available
[ ] Windows Server Essentials Experience                ServerEssentialsRole           Available
[ ] Windows Server Update Services                      UpdateServices                 Available
    [ ] WID Connectivity                                UpdateServices-WidDB           Available
    [ ] WSUS Services                                   UpdateServices-Services        Available
    [ ] SQL Server Connectivity                         UpdateServices-DB              Available
[ ] .NET Framework 3.5 Features                         NET-Framework-Features         Available
    [ ] .NET Framework 3.5 (includes .NET 2.0 and 3.0)  NET-Framework-Core               Removed
    [ ] HTTP Activation                                 NET-HTTP-Activation            Available
    [ ] Non-HTTP Activation                             NET-Non-HTTP-Activ             Available
[X] .NET Framework 4.5 Features                         NET-Framework-45-Fea...        Installed
    [X] .NET Framework 4.5                              NET-Framework-45-Core          Installed
    [ ] ASP.NET 4.5                                     NET-Framework-45-ASPNET        Available
    [X] WCF Services                                    NET-WCF-Services45             Installed
        [ ] HTTP Activation                             NET-WCF-HTTP-Activat...        Available
        [ ] Message Queuing (MSMQ) Activation           NET-WCF-MSMQ-Activat...        Available
        [ ] Named Pipe Activation                       NET-WCF-Pipe-Activat...        Available
        [ ] TCP Activation                              NET-WCF-TCP-Activati...        Available
        [X] TCP Port Sharing                            NET-WCF-TCP-PortShar...        Installed
[ ] Background Intelligent Transfer Service (BITS)      BITS                           Available
    [ ] IIS Server Extension                            BITS-IIS-Ext                   Available
    [ ] Compact Server                                  BITS-Compact-Server            Available
[ ] BitLocker Drive Encryption                          BitLocker                      Available
[ ] BitLocker Network Unlock                            BitLocker-NetworkUnlock        Available
[ ] BranchCache                                         BranchCache                    Available
[ ] Canary Network Diagnostics                          Canary-Network-Diagn...        Available
[ ] Client for NFS                                      NFS-Client                     Available
[ ] Data Center Bridging                                Data-Center-Bridging           Available
[ ] Direct Play                                         Direct-Play                    Available
[ ] Enhanced Storage                                    EnhancedStorage                Available
[ ] Failover Clustering                                 Failover-Clustering            Available
[X] Group Policy Management                             GPMC                           Installed
[ ] IIS Hostable Web Core                               Web-WHC                        Available
[ ] Ink and Handwriting Services                        InkAndHandwritingSer...        Available
[ ] Internet Printing Client                            Internet-Print-Client          Available
[ ] IP Address Management (IPAM) Server                 IPAM                           Available
[ ] iSNS Server service                                 ISNS                           Available
[ ] LPR Port Monitor                                    LPR-Port-Monitor               Available
[ ] Management OData IIS Extension                      ManagementOdata                Available
[ ] Media Foundation                                    Server-Media-Foundation        Available
[ ] Message Queuing                                     MSMQ                           Available
    [ ] Message Queuing Services                        MSMQ-Services                  Available
        [ ] Message Queuing Server                      MSMQ-Server                    Available
        [ ] Directory Service Integration               MSMQ-Directory                 Available
        [ ] HTTP Support                                MSMQ-HTTP-Support              Available
        [ ] Message Queuing Triggers                    MSMQ-Triggers                  Available
        [ ] Multicasting Support                        MSMQ-Multicasting              Available
        [ ] Routing Service                             MSMQ-Routing                   Available
    [ ] Message Queuing DCOM Proxy                      MSMQ-DCOM                      Available
[ ] Multipath I/O                                       Multipath-IO                   Available
[ ] MultiPoint Connector                                MultiPoint-Connector...        Available
[ ] Network Load Balancing                              NLB                            Available
[ ] Peer Name Resolution Protocol                       PNRP                           Available
[ ] Quality Windows Audio Video Experience              qWave                          Available
[ ] RAS Connection Manager Administration Kit (CMAK)    CMAK                           Available
[ ] Remote Assistance                                   Remote-Assistance              Available
[ ] Remote Differential Compression                     RDC                            Available
[X] Remote Server Administration Tools                  RSAT                           Installed
    [ ] Feature Administration Tools                    RSAT-Feature-Tools             Available
        [ ] SMTP Server Tools                           RSAT-SMTP                      Available
        [ ] BitLocker Drive Encryption Administratio... RSAT-Feature-Tools-B...        Available
            [ ] BitLocker Drive Encryption Tools        RSAT-Feature-Tools-B...        Available
            [ ] BitLocker Recovery Password Viewer      RSAT-Feature-Tools-B...        Available
        [ ] BITS Server Extensions Tools                RSAT-Bits-Server               Available
        [ ] Failover Clustering Tools                   RSAT-Clustering                Available
            [ ] Failover Cluster Management Tools       RSAT-Clustering-Mgmt           Available
            [ ] Failover Cluster Module for Windows ... RSAT-Clustering-Powe...        Available
            [ ] Failover Cluster Automation Server      RSAT-Clustering-Auto...        Available
            [ ] Failover Cluster Command Interface      RSAT-Clustering-CmdI...        Available
        [ ] IP Address Management (IPAM) Client         IPAM-Client-Feature            Available
        [ ] Network Load Balancing Tools                RSAT-NLB                       Available
        [ ] SNMP Tools                                  RSAT-SNMP                      Available
        [ ] WINS Server Tools                           RSAT-WINS                      Available
    [X] Role Administration Tools                       RSAT-Role-Tools                Installed
        [X] AD DS and AD LDS Tools                      RSAT-AD-Tools                  Installed
            [X] Active Directory module for Windows ... RSAT-AD-PowerShell             Installed
            [X] AD DS Tools                             RSAT-ADDS                      Installed
                [X] Active Directory Administrative ... RSAT-AD-AdminCenter            Installed
                [X] AD DS Snap-Ins and Command-Line ... RSAT-ADDS-Tools                Installed
            [ ] AD LDS Snap-Ins and Command-Line Tools  RSAT-ADLDS                     Available
        [ ] Hyper-V Management Tools                    RSAT-Hyper-V-Tools             Available
            [ ] Hyper-V GUI Management Tools            Hyper-V-Tools                  Available
            [ ] Hyper-V Module for Windows PowerShell   Hyper-V-PowerShell             Available
        [ ] Remote Desktop Services Tools               RSAT-RDS-Tools                 Available
            [ ] Remote Desktop Gateway Tools            RSAT-RDS-Gateway               Available
            [ ] Remote Desktop Licensing Diagnoser T... RSAT-RDS-Licensing-D...        Available
            [ ] Remote Desktop Licensing Tools          RDS-Licensing-UI               Available
        [ ] Windows Server Update Services Tools        UpdateServices-RSAT            Available
            [ ] API and PowerShell cmdlets              UpdateServices-API             Available
            [ ] User Interface Management Console       UpdateServices-UI              Available
        [ ] Active Directory Certificate Services Tools RSAT-ADCS                      Available
            [ ] Certification Authority Management T... RSAT-ADCS-Mgmt                 Available
            [ ] Online Responder Tools                  RSAT-Online-Responder          Available
        [ ] Active Directory Rights Management Servi... RSAT-ADRMS                     Available
        [X] DHCP Server Tools                           RSAT-DHCP                      Installed
        [X] DNS Server Tools                            RSAT-DNS-Server                Installed
        [ ] Fax Server Tools                            RSAT-Fax                       Available
        [ ] File Services Tools                         RSAT-File-Services             Available
            [ ] DFS Management Tools                    RSAT-DFS-Mgmt-Con              Available
            [ ] File Server Resource Manager Tools      RSAT-FSRM-Mgmt                 Available
            [ ] Services for Network File System Man... RSAT-NFS-Admin                 Available
            [ ] Share and Storage Management Tool       RSAT-CoreFile-Mgmt             Available
        [ ] Network Controller Management Tools         RSAT-NetworkController         Available
        [ ] Network Policy and Access Services Tools    RSAT-NPAS                      Available
        [ ] Print and Document Services Tools           RSAT-Print-Services            Available
        [ ] Remote Access Management Tools              RSAT-RemoteAccess              Available
            [ ] Remote Access GUI and Command-Line T... RSAT-RemoteAccess-Mgmt         Available
            [ ] Remote Access module for Windows Pow... RSAT-RemoteAccess-Po...        Available
        [ ] Volume Activation Tools                     RSAT-VA-Tools                  Available
        [ ] Windows Deployment Services Tools           WDS-AdminPack                  Available
[ ] RPC over HTTP Proxy                                 RPC-over-HTTP-Proxy            Available
[ ] Simple TCP/IP Services                              Simple-TCPIP                   Available
[X] SMB 1.0/CIFS File Sharing Support                   FS-SMB1                        Installed
[ ] SMB Bandwidth Limit                                 FS-SMBBW                       Available
[ ] SMTP Server                                         SMTP-Server                    Available
[ ] SNMP Service                                        SNMP-Service                   Available
    [ ] SNMP WMI Provider                               SNMP-WMI-Provider              Available
[ ] Soft Restart                                        Soft-Restart                   Available
[ ] Telnet Client                                       Telnet-Client                  Available
[ ] TFTP Client                                         TFTP-Client                    Available
[X] User Interfaces and Infrastructure                  User-Interfaces-Infra          Installed
    [X] Graphical Management Tools and Infrastructure   Server-Gui-Mgmt-Infra          Installed
    [ ] Desktop Experience                              Desktop-Experience             Available
    [X] Server Graphical Shell                          Server-Gui-Shell               Installed
[ ] Windows Biometric Framework                         Biometric-Framework            Available
[X] Windows Defender                                    Windows-Defender               Installed
    [ ] GUI for Windows Defender                        Windows-Defender-Gui           Available
[ ] Windows Internal Database                           Windows-Internal-Dat...        Available
[X] Windows PowerShell                                  PowerShellRoot                 Installed
    [X] Windows PowerShell 5.0                          PowerShell                     Installed
    [ ] Windows PowerShell 2.0 Engine                   PowerShell-V2                    Removed
    [ ] Windows PowerShell Desired State Configurati... DSC-Service                    Available
    [X] Windows PowerShell ISE                          PowerShell-ISE                 Installed
    [ ] Windows PowerShell Web Access                   WindowsPowerShellWeb...        Available
[ ] Windows Process Activation Service                  WAS                            Available
    [ ] Process Model                                   WAS-Process-Model              Available
    [ ] .NET Environment 3.5                            WAS-NET-Environment            Available
    [ ] Configuration APIs                              WAS-Config-APIs                Available
[ ] Windows Search Service                              Search-Service                 Available
[ ] Windows Server Backup                               Windows-Server-Backup          Available
[ ] Windows Server Migration Tools                      Migration                      Available
[ ] Windows Standards-Based Storage Management          WindowsStorageManage...        Available
[ ] Windows TIFF IFilter                                Windows-TIFF-IFilter           Available
[ ] Windows Volume Replication                          WVR                            Available
[ ] WinRM IIS Extension                                 WinRM-IIS-Ext                  Available
[ ] WINS Server                                         WINS                           Available
[ ] Wireless LAN Service                                Wireless-Networking            Available
[X] WoW64 Support                                       WoW64-Support                  Installed
[ ] XPS Viewer                                          XPS-Viewer                     Available

The addition of Windows Defender as a regular part of the install leaves us a bit of cause for pause. We generally do _not_ put A/V endpoint clients on servers since the endpoints actively working with the data are the weak links in the chain. Plus, we sanitize all incoming mail to further reduce attack vectors.

We shall see if we run into a situation where servers go offline after an update due to the A/V client eating its own. We’ve seen A/V vendors of all stripes go through this problem thus reaffirming our position.

There’s a lot to learn folks. No doubt. There are most certainly new bits within the various Roles and Features as mentioned in the initial and very incomplete bullet list.

This time around we are being buoyed up by a wave of enthusiasm and support from within Microsoft itself. So, ride the wave and get to know the OS our solution sets will be built on soon!

Oh, and one more thing. We are working with really early release bits. That means that everything above may be wiped out in a single stroke of the pen/keyboard. Just because it’s there now does not mean that it will be there in the next release bits we see or in RTM for that matter!

Philip Elder
Microsoft Cluster MVP
MPECS Inc.
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen ASP Project
Find out more at
Third Tier: Enterprise Solutions for Small Business

Microsoft: Excitement Rekindled

Back in the day, heh ;) , I was privileged to work with the SBS team both prior and post MVP award.

Many of us in SBS Land can remember just how active the team was around SBS 2003 RTM/R2, SBS 2008 Standard/Premium, and finally SBS 2011 Standard.

By the latter product release much of the old guard had moved on but the new team and us SBS MVPs had a strong business relationship.

The key here is in the relationships and communication levels we were experiencing with the teams.

For must of us both within the MVP realms but also in the public that came to a full-stop when development of the then Windows Server 2012 pre-release cycle became better known.

We were all held in the dark. This situation continued with the 2012 R2 development cycle.

Silence. Dead Silence *insert sound of crickets here*

For those of us both within the MVP community and outside the MVP community that are truly passionate about the clients we serve, the products we work with, and just all-around geeking out about tech the silence was deafening and deadening.

Tie that into the seemingly endless “Death to the IT Pro” messages coming out of Microsoft over the last number of years and there were a lot of flames snuffed out these last two product release cycles.

Change for the Good

One thing is for certain: Something has changed at Microsoft.

While I most certainly cannot provide “insight” into Microsoft’s motivations for the recent change I can most certainly say that the change is welcome. Big Time!

We now have a public release of Windows vNext bits. We have forums to discuss these bits.

For many of us MVPs we have, and I can’t say “unprecedented” given previous experience, an amazing amount of information flowing from our product teams.

The conversations we’ve been having with the team(s) lately have been refreshing. Yes, they’ve been listening to us.

And, I’ll make no bones about it, I feel very excited about this upcoming product release like I had been with the then new versions of SBS Standard!

So, hat’s off to you in Microsoft whoever you are that allowed the floodgates of communication, shared tech passion, and business relationships to happen again!

And thanks to the Microsoft Teams that have been sharing your product excitement. It is refreshing and invigorating for us to experience and work with!

We both stand to benefit greatly from this “new” openness from Microsoft.

Oh, and Cluster is definitely key to our company’s future. ;)

Philip Elder
Microsoft Cluster MVP
MPECS Inc.
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen ASP Project
Find out more at
Third Tier: Enterprise Solutions for Small Business

HP Colour LaserJet M476dw Firmware Bug – DHCP Assigns Self IP for Gateway

After beating our collective heads against the wall wondering why our newly deployed HP Colour LaserJet M476dw refused to make SMTP connections for Scan to E-mail we found our source in the _very_ last place we expected.

IP Address Configured by: DHCP
IP Address: 192.168.75.6
SubNet Mask: 255.255.255.0
Gateway: 192.168.75.6

Note that the gateway address currently points to _itself_ instead of the router that is assigning the IPs.

This is the IPConfig /ALL output for one of the systems on the network:

Note the Gateway address is correctly pointing to the router.

What this means is that for now we are setting the IPv4 configuration to Manual and putting in the correct IP address for the Gateway:

What a pain that has been.

Sure enough:

The above status came out really quick and so did the test e-mail:

So, after all of the time we spent getting frustrated with the ISP, thinking they had blocked SMTP outbound, and everything else in between the least expected source for the problem has turned out to be the one.

NOTE: Printer firmware was updated to the most current version as of this writing.

NOTE TO SELF: Check the hanger bearing before replacing that rear-end! ;)

Philip Elder
Microsoft Cluster MVP
MPECS Inc.
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen ASP Project
Find out more at
Third Tier: Enterprise Solutions for Small Business

Cluster: Why We Always Deploy a Physical DC in a Cluster Setting

A somewhat new feature with Windows Server was the ability to cold-boot a cluster after a full shutdown thus “eliminating the need for a physical DC” in a cluster setting.

While this feature is indeed there and does indeed work we have found that there are a number of very key reasons why we have taken up the practice of always having a physical DC in cluster deployments.

• AD may be needed in the event of a cluster failure
• DNS IS required in the event of a cluster failure
• Physical DC is our time authority (Critical in a virtualized environment especially with high-load VMs where time skews)
• Point of management in the event of a problem

The third point is probably the most important in the mix. Keeping time in a domain is absolutely critical. One cannot configure a time authority to continually poll NTP.ORG without receiving a Kiss-of-Death packet from the polled server.

So, we have a physical DC polling NTP.ORG at the standard interval and all domain members looking to it for time. Then, any VM that requires a much more frequent polling frequency can be configured to poll the DC without being shut down.

For obvious reasons if a VM’s time hits the five minute mark for variance it loses its ability to continue serving whatever services and/or LoBs that may be running on it to the domain.

We make sure to install an iDRAC Enterprise, HP iLO Advanced, or Intel RMM in that physical DC so that we can have out-of-band access to the server along with KVM over IP to manage from the “console”.

Philip Elder
Microsoft Cluster MVP
MPECS Inc.
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen ASP Project
Find out more at
Third Tier: Enterprise Solutions for Small Business

KB913086: Security Updates Available as ISO Files at Microsoft Download Centre

Microsoft’s security updates can be downloaded in ISO form.

• Microsoft Support KB913086: Security updates are available on ISO-9660 DVD5 image files from the Microsoft Download Center

The above site has a list of links to the ISO downloads.

We have set up a link on Microsoft’s Download Centre site to sort the ISO files with newest at the top:

• Microsoft Download Centre: Security Release ISO Image – Search Microsoft.com

We suggest bookmarking this link to gain quick access to the newest or latest ISO downloads.

Hat Tip: Thanks to Derek Knight and Russ Stamm (quietman7).

Philip Elder
Microsoft Cluster MVP
MPECS Inc.
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen ASP Project
Find out more at
Third Tier: Enterprise Solutions for Small Business

Our SBS (Small Business Solution) Options with Standalone and Cluster Hardware Considerations

We’ve received a number of questions about the “How” we present our SBS to prospective and existing clients.

Our primary focus is on what we have provided with Small Business Server starting with SBS 2003 Standard.

• Active Directory permissions based security
• Remote Web Access (RWA/RWW) Portal
• Remote Desktop access via RD Gateway (since SBS 2008 Standard)
• RemoteApp access via RD Gateway for LoBs (since SBS 2008 Standard)
• E-mail services access via Outlook, Outlook Anywhere, Exchange ActiveSync, and Outlook Web Access
• Remote Folders and Files access
• SharePoint based document management system
• SQL backend for LoB, SharePoint, and other needs

We focus on the services the prospect would require while our existing clients are already used to them.

Once we have an understanding of the prospect’s needs, since we already know our client’s business really well, we move forward with a proposal that would be geared towards their business size and sensitivity to downtime.

On the services front where we are installing into a standalone host we would have two options:

1. Base
1. Requires two Windows Server OS Licenses
2. DC, Exchange, RDS, and LoB (WSUS and LoBs)
2. Premium Add-On
1. Requires one Windows Server OS License
2. SQL and SharePoint

Obviously the server and CALs would also be needed for the various components that will be installed into the guest OS.

If we are setting up a cluster then one needs to consider the number of VMs running on one or more of the nodes in the event of a node failure.

On the hardware side we would have a number of options:

1. Entry-Level Single
1. E3-1270v3, 32GB ECC, Hardware RAID, 8x 2.5” 10K SAS
2. Mid-Level Single
1. Single Socket 1U R1208JP4OC, E5-2600 series, 128GB ECC, Hardware RAID, 8x 2.5” 10K SAS
3. High-Level Single
1. Dual Socket 2U R2208GZ4GC, E5-2600 pair, 128GB-256GB ECC, Hardware RAID, 8x 2.5” 10K SAS or 16x 2.5” 10K SAS
4. Entry-Level Asymmetric Cluster
1. Pair of 1U R1208JP4OC or 2U R2208GZ4GC and an Intel JBOD2224S2DP
5. Mid-Level Cluster
1. Four 2U R2208GZ4GC and an Intel JBOD2224S2DP
• Two Scale-Out File Server cluster nodes
• Two Hyper-V cluster nodes
6. High-End Cluster
1. Six 2U R2208GZ4GC and three Intel JBOD2224S2DP units
• Three Scale-Out File server cluster nodes
• Three Intel JBODS with Two-Way or Three-Way Mirror and Enclosure Resilience
• Three Hyper-V server cluster nodes

Within the above hardware configurations we would have a lot of flexibility that allows us to customize to the specific needs of the prospective client or our clients.

We work with a number of different firms that are prime candidates for at least an asymmetric cluster setup to minimize the possibility of downtime. The cost associated with these entry-level clusters versus a single larger server for the host platform makes them very attractive.

The basic VM configuration would involve fixed VHDX files unless the files are installed on dedicated partitions/LUNs. Note that we would use a shared set of partitions/LUNs if there are around 10 or more VMs as things get to be a bit of a bear to manage otherwise.

Our base VM configurations would be as follows:

• DC: 4GB, 95GB OS VHDX, and 1TB Data VHDX
• Exchange: 8GB, 95GB OS VHDX, and 250GB + 20GB/Mailbox Data VHDX
• RDS: 4GB+, 95GB OS VHDX, and 100GB + 20GB/User Profile Disk
• LoB: 8GB, 95GB OS VHDX, and 1TB Data VHDX Minimum
• SQL: 16GB, 95GB OS VHDX, and 250GB+ Data VHDX
• SharePoint: 16GB, 95GB OS VHDX, 200GB Data VHDX

We have a set of PowerShell steps and scripts that we use to configure these environments. PowerShell helps to greatly reduce the amount of time required to set things up. It also gives us consistency across all of our client deployments which is vital to troubleshooting if the need arises.

Shameless Plug: We’ve spent some time on the above in our SMBKitchen ASP Author Chats. If you are looking for more information the Author Chat is one of the best ways to do so.

Philip Elder
Microsoft Cluster MVP
MPECS Inc.
Co-Author: SBS 2008 Blueprint Book
Chef de partie in the SMBKitchen ASP Project
Find out more at
Third Tier: Enterprise Solutions for Small Business

MANDATORY: Intel JBOD2224S2DP Firmware Update for Same Enclosure ID Storage Spaces Problem

Intel has released a new firmware for the Intel JBOD2224S2DP storage enclosure that deals with the enclosure delivering the same Enclosure ID to Windows Server 2012 R2 Storage Spaces.

•   Intel Download Center: Intel Storage System JBOD2000 Family Expander Firmware

Why is this firmware mandatory?

Because up until now when two or more Intel JBOD2224S2DP units were connected to Scale-Out File Server nodes and one ran the Get-StorageEnclosure PowerShell command one would get the same ID back for every one.

The firmware problem killed Storage Spaces enclosure resilience. What is that you ask?

In Storage Spaces, with a Two-Way or Three-Way mirror one can have three enclosures set up to allow one to drop out completely and things keep going.

If one has configured five enclosures with a Three-Way Mirror then the Storage Spaces setup can tolerate two enclosures dropping out.

• Storage Spaces FAQ: Enclosure Awareness Support – Tolerating an Entire Enclosure Failing

If the Intel JBOD unit is already in a production setting with plans to add more enclosures at a later date then it is important to note that this firmware update would be required prior to adding the new units.

For new setups, this firmware update should be a part of the preparation steps for the JBOD prior to implementation or baseline testing.

Philip Elder
Microsoft Cluster MVP
MPECS Inc.
Co-Author: SBS 2008 Blueprint Book
Chef de partie in the SMBKitchen ASP Project
Find out more at
Third Tier: Enterprise Solutions for Small Business

Hyper-V VM: Set Up PDCe NTP Time Server plus other DC's time service

When we are running a greenfield deployment, a migration, or a domain reconfiguration one of the key configurations to get right is the Domain Time setup.

We've had situations where anomalies in the time setup have brought down clusters (node's time was out of whack).

In Hyper-V Management disable time integration for the DC(s).

On the primary DC (PDCe) VM that will be the time authority for the domain we run the following steps (please copy and paste into NotePad to clean up):

w32tm /config /syncfromflags:manual "/manualpeerlist:0.ca.pool.ntp.org,0x1 1.ca.pool.ntp.org,0x1 2.ca.pool.ntp.org,0x1 3.ca.pool.ntp.org,0x1" /reliable:yes
w32tm /config /update
net stop w32time && net start w32time
w32tm /resync /force
w32tm /query /source

If you hit ENTER after the last line above and copy from the line underneath to the beginning of the first line and paste into an elevated CMD all of the steps will run automagically. Note that the NTP.ORG servers are Canadian localized. There are servers for most regions in the world.

On every other DC in the domain we run the following steps in an elevated CMD:
w32tm /config /syncfromflags:domhier /reliable:no /update
net stop w32time && net start w32time
w32tm /resync /force
w32tm /query /source

Note that the above step(s) may need to be run a couple of times to get the settings to seat.

Once the above setup has been completed the domain's time should remain on time. If there are any issues with time, that is it starts to slip or jumps ahead, check in Hyper-V Management to see if the IS setting for Time Sync has not somehow become enabled again.

If it has run the above steps again to reseat the settings.

NOTE: For SQL or high load VMs that tend to skew time, we've seen situations where the VM's time skews before our eyes, then set up a BATCH file with the following in it:
w32tm /resync /force

Set it to run in the VM's Task Scheduler every five minutes. If time still gets too far out of whack then decrease the time increment until the VM keeps its time as much as possible.

Philip Elder
Microsoft Cluster MVP
MPECS Inc.
Co-Author: SBS 2008 Blueprint Book
Chef de partie in the SMBKitchen ASP Project
Find out more at
Third Tier: Enterprise Solutions for Small Business

Blogging Lull and Business News

Hay all, it's been either really busy or quite quiet around here. During the lulls I've been taking the time to spend at home with the family. Thus the lack of blog posts for the last while.

We are now in the process of flipping our entire setup into a new 2012 R2 DC/HV Cluster setup. Our existing 2008 R2 RDS server dropped a drive, so rather than risk losing data (did not want to waste time on an RMA and we do not have anymore of them in stock) on the old RDS everything is being transferred over to the new system.

This includes Windows Live Writer (all posts have been RemoteApp WLW posted for a number of years now). We've not quite finished setting the RDS server up yet which includes installing WLW into 2012 R2 RDS and delivering via RemoteApp again.

Our SBS 2011 Standard server will also be deprecated in favour of 2012 R2 DCs with failover DHCP configured and Exchange 2013 CU5 providing our mailbox experience. One of those DCs will reside on the cluster while the other is a physical server (we _always_ set up a physical DC in cluster environments).

In the midst of all of that our primary APC 6KV 208/220V UPS and step-down transformer went full stop on us. Unfortunately the 2 year warranty was over by a good 10 months so no go for replacement. We negotiated a decent deal to replace both via the TRADE-UPS program APC offers plus toss in an extended warranty for a total of 5 years coverage.

We looked to Eaton as a possible replacement but unfortunately economics took precedence in our decision to accept APC's deal (we're in a costly PoC for a new business endeavour).

What's on the agenda for this coming fall?

• Our Proof of Concept (PoC) testing will start up again
• Scale-Out File Server and Storage Spaces SSD, HDD, SSD Tiers, and resilience testing
• Hyper-V VM storage thrashing (VHDX via SMB3 share on SOFS)
• Hyper-V Network Virtualization for Multi-Tenancy
• Dell SonicWALL NSA2600 HA Testing (we have a pair on the way)

We are excited about the new business we are in the process of  building. We plan on jumping into the Cloud Services mix with a product offering no one out there can come close to offering at this time!

We are also keeping our clients very happy with their very stable I.T. environments. :)

My Third Tier involvement, both with the Help Desk and the ASP Project, has been awesome. I will continue to work with Third Tier clients and ASP subscribers to the best of my abilities. The clients are great and it's a great gig.

Well, that's about all for now. Thank you for reading and supporting us over the years!

NOTE: The Third Tier Brain Explosion slated to happen in September as a GFI conference Pre-Day has been cancelled due to the lack of sign-ups. Perhaps all y'all could comment on some of the conferences you attend, why, and where they are located. That would help us to pick a venue that would work better for you.

Philip Elder
Microsoft Cluster MVP
MPECS Inc.
Co-Author: SBS 2008 Blueprint Book
Chef de partie in the SMBKitchen ASP Project
Find out more at
Third Tier: Enterprise Solutions for Small Business

Third Tier Brain Explosion: Technical Training Sept 7-8 in Orlando

If you’ve been to one of Third Tier’s Brain Explosion (BE) then you know to expect a day packed with intense tech. This is the 4th annual Brain Explosion. We’re splitting the BE into two days so you can properly digest the content and have time to socialize in between. This makes it an intimate affair where you’ll get to know the speakers and your fellow attendees both during the event and afterwards socially.

We’re very social; we’re very technical and this event is going to be as fun as learning new tech can be. Our staff dedicates their days to supporting IT Professionals in the SMB market space and they run their own small IT firms too! The content of the Brain Explosion is designed to be boots on the ground issues of today that you can go and implement right away.

Read all about it: http://www.thirdtier.net/brain-explosion/

You can register one of two ways. Register for the Brain Explosion as a pre-day event at the GFI conference. This option will allow you to automatically extend your hotel stay too. Or registered directly with Third Tier for the Brain Explosion only. For this second option, register an account at http://www.thirdtier.net/helpdesk, press Payments, Buy Credit, Purchase more Support, add the BE to your cart and proceed to checkout. It’s $99 which includes Content, food and a pub meet up. Questions? Email Amy@thirdtier.net
 
Onward,

Amy Babinchak, Susan Bradley and Philip Elder
SMBKitchen ASP