Thursday 31 January 2008

QuickBooks 2008 Warning

We have a client that has reached critical mass with their QuickBooks (QB) 2008 installation.

They have been running on QB 08 for about a month now.

There were some static issues at one workstation that caused some hiccups in the company file. They were rectified by running the built-in utilities to clean up the data files.

Today, they were running some cheques and noticed that the numbers were wrong.

Upon further investigation, and a long support call with Intuit, there are a large number of dropped deposits, invoices, bill payments, and more in the time period since the upgrade to QB 08.

Apparently there are some known issues in this new version according to the Intuit support technician our client was working with.

These issues are also a part of the built in QB 08 backup system. So, they cannot go back any number of degrees.

We call it the First Version Blues with the customer being the "beta code" tester on the front line. Only in this case, issues with the product could end up costing a business its livelihood and possibly its life.

In this case, our client has a good backup in place of their QB 07 files. We will be backing them off to QB 07 on the advice of Intuit!

Philip Elder
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Wednesday 30 January 2008

Mental Health Day

Lately, we have been putting in some extremely long hours.

In our company, we have a policy that we do not work Sundays unless there is an absolute need such as a weekend install or emergency.

We have not been able to maintain that rule as a result of the many client deadlines that required huge preparation beforehand over the last three weeks.

Yesterday was the first day we had no critical client needs in that time period.

So, we rescheduled anything that needed to be for that day and shut the shop down for the full day.

For those of us who are reward oriented, having a full day off with pay is definitely a neat surprise.

Perhaps, for us smaller shops this type of reward is easier to do. But, one can also reward one's hard working technicians in larger organizations with the same.

When we run our own small business, it is very important to recognize poor performance as a result of fatigue. It is not too difficult for smaller shops to get caught up in client needs while forgetting the health and well being of our employees and ourselves.

This is especially true in a small shop where everyone really enjoys what they are doing and are passionate about the services and products they provide. For some, our wife/husband or girlfriend/boyfriend can provide the AWA (Audible Warning Alarm) when the limits are close or breached! ;)

Even then, the best of us can reach the edge of burn-out without realizing it until it is too late.

So, even though we have more client deadlines to deal with, we take the opportunity to rejuvenate, regenerate, and refresh our selves by doing other things. And that is very important: No reading tech or researching tech! The time should be for other things: Like spending time with our family, significant others, or some sort of leisure activities.

Philip Elder
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Monday 28 January 2008

SBS and Intel SE7520JR2 Warranty Replacement Experience

One of the worst warranty replacement experiences for us ever was when we needed to replace a defective Intel SE7505VB2 on a production SBS 2000 server.

Needless to say, things did not go very well. We made sure to have the replacement board's BIOS level and settings identical to the outgoing board.

Once we had things back together and the OS was booting, we hit a BSOD ... and hit a BSOD ... and hit a BSOD.

Nothing we did brought the server back. We even put the defective board back into the system (on board RAID controller was flaky) and tried to get the server back up.

We ended up spending a huge chunk of time in recovery mode to bring back that SBS 2K server.

This time around, there was a little of that "once bitten" fear for this particular project.

We are working on a 2U, SR2400 series chassis with the SE7520JR2 board in it. The board's USB ports are done for. Nothing USB would be recognized in the OS.

Once we swapped the board out, we booted the system up and were greeted with a BIOS beep code of 3. This error indicates a problem with memory.

We reseated the 4 x 1GB Kingston sticks of RAM and tried again. Still, we received the 3 beep code.

We ended up pulling 2GB out of the server to see if that worked and it did.

For whatever reason, Intel shipped this board to us with the factory original BIOS installed once we were into it.

So, we booted to a USB flash drive with the current BIOS on it and flashed away.

After booting back into the new BIOS, we changed the settings as appropriate and rebooted again. We shut the server down as soon as we saw the POST screen.

In went the extra sticks of RAM. After firing up the server and the diagnostic LEDs started dancing we knew we were in.

This time around, we now have a happy SBS 2K3 Premium SP1 server back online. *phew*

And, our USB ports are now working.

Philip Elder
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Outlook 2003 - Error - MAPI32.DLL is corrupt or the wrong version.

We were working with a client system that had a copy of Office 2007 Trial on it.

We removed the trial version of Office. After Office 2007 was uninstalled and we went to start Outlook 2003 we ended up with:

Microsoft Office Outlook

Cannot start Microsoft Office Outlook. MAPI32.DLL is corrupt or the wrong version. This could have been caused by installing other messaging software. Please reinstall Outlook.
Note that the error message indicates that we are supposed to reinstall Outlook. So, we ran a repair and then a reinstall of Office 2003 Professional both of which did not work.

After searching around for a fix, we came up with the following Microsoft Knowledgebase article: KB926196: Error message when you try to start Outlook 2003: "MAPI32.DLL is corrupt or the wrong version".

Here is the proper fix:
  1. Start Windows Explorer.
  2. Locate and then open the following folder on your computer: C:\Program Files\Common Files\System\Msmapi\1033
  3. Right-click the MSMapi32.dll file, and then click Rename.
    • Note The file (Msmapi32.dll) that you are renaming differs from the file (Mapi32.dll) that is mentioned in the error message.
  4. Type Msmapi32.old, and then press ENTER to rename the file.
  5. Start Outlook 2003.
The above method worked.

And, we have learned a little lesson here: A little time invested in searching out the error would have saved us the repair/reinstall time and had our client up and running a lot quicker.

It also reminds us that product error messages can be quite situational and time limited in their orientation. When the above message was written into Outlook 2003, the possible conflicts caused by Office 2007 were unknown to the product teams.

Philip Elder
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Friday 25 January 2008

SBS - CEICW Fails - ISA will not start Event 14109

You know it has been a very long day when the CEICW wizard fails on the Firewall Configuration and Web Certificate portions and there is no clue as to why.

The icwlog.txt found in C:\Program Files\Microsoft Windows Small Business Server\Support\ only shows somewhat generic errors about the Firewall Rules and an inability to bind to port 443.

It just so happens that this SBS box is a dual Xeon 5345 series box. That means eight (8) cores.

Looking into the logs, we find the reason:
Event Type: Error
Event Source: Microsoft ISA Server Control
Event Category: None
Event ID: 14109
Date: date
Time: time
User: N/A
Computer: computer name
Description: The ISA Server Standard Edition cannot run. Either the server is using more than 4 processors, or it is configured to use the Active Directory service. Use the source location to report the failure. Contact Microsoft (R) Corporation for more information.
And the fix?

Obtain the latest ISA 2004 Standard Edition service pack.

Microsoft Knowledgebase: KB884569: The ISACTRL and WSPSRV services do not start when you install ISA Server 2004 on a multiprocessor computer.

Philip Elder
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Bringing the Barn Identity with You

Most of us operate on the same level: It is the little things that can make or break any kind of relationship.

The business relationship is not any different.

The little things are really what can set us apart from the other guy:
  • Microsoft Small Business Specialist (MSBS) designation.
  • MSBS Logo on our proposals, quotes, correspondence.
  • Calling "quiet" clients to check up on things and see if they need anything.
  • Picking up that box for warranty work at no charge.
  • Passing along some of the NFR software and Swag that we receive from vendors to our clients.
  • Removing all of the boxes and garbage associated with a delivery of product or products.
  • Taking the time to make sure we haven't missed anything before leaving by checking in with our client contact and their users.
  • Being there Monday morning after a weekend fresh SBS install or major upgrade to train on the new system or facilitate the transition to an upgraded system.
When a technician or technicians are on-site, it is very important that they leave the locations they visit at least in the same condition as they found it. Even better, they make sure the client locations are better organized and cleaner than when they first arrived.

This principle really comes home when we need to walk into a new client location where the previous I.T. shop's technicians left a total mess in the server closet and in and around the network.

These principles apply in virtually any industry professionals:
  • Journeyman Mechanics
  • Journeyman Plumbers
  • Journeyman Electricians
  • Rough, Framing, Finishing Carpenters
  • Foundation Formers
  • Etc...
One can tell a lot about the professional by the condition of their tools, their vehicle, and the condition of their client's products and projects after they finish working for that client.

The school of "Good Enough" just does not cut it here.

The Barn Identity is a previous blog post that delves deeper into personal professional presentation and self, employer, and client respect.

Philip Elder
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Latop will not power up when the power button is pressed

Ever get one of these calls: "Hi, my laptop won't power up. I can't seem to do anything to get it to start".

While it does not happen too frequently, it does happen, and there does not seem to be a limitation to one manufacturer.

The only fix for this problem is to pull the battery and the A/C and leave the laptop sit for about 5 minutes.

After the time period, plug the A/C in only, and press the power button. The laptop fires up with no issues.

Once the machine is up, have the user power it down, then plug the battery back in.

They should be good to go from there.

We have seen Toshiba, Acer, Lenovo (today's call), and others do this.

Philip Elder
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Wednesday 23 January 2008

Setting the Num Lock Key for Logon

There is a registry setting that one can change to enable or disable the Num Lock key for the user at the logon screen.


For users on desktop PCs, setting this value to 2 in order for the Num Lock key to be lit before logon is generally a good idea.

For laptop users however, the opposite is true since in most cases the "number pad" is embedded on the actual user's keyboard. Thus, when the user goes to logon to the network, they get an unexpected character from that section of the keyboard. It also gets a little annoying to have to use the Fn key on the laptop every time they logon to turn Num Lock off.

For laptop users, we set this key to "0".

One of our Acer laptops came back from a visit to the warranty depot with this setting enabled for some reason.

From the Microsoft Knowledgebase: How to enable the NUM LOCK key for the logon screen.

Philip Elder
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Tuesday 22 January 2008

Intel SS4000-E NAS Firmware Update 1.4

We are in the process of updating the firmware on a client's SS4400-E NAS device.

The newest firmware gives us a number of enhanced features, with the essential one being the ability to plug in 1TB drives.

The firmware update cannot be run from within the standard Web interface on the NAS though. One must go through a particular procedure to follow through on it:
  1. Download the 1.4 firmware file from the SS4000-E Download Page .
  2. Extract the files from the downloaded file and save them to your hard drive on your laptop, desktop, server, etc.
  3. Backup the data on the SS4000-E to another system. (Important to note that data on the array(s) will be destroyed during this process!)
  4. Shutdown the Intel® Entry Storage System SS4000-E system
  5. Unplug all hard disks installed in the Intel® Entry Storage System SS4000-E system.
  6. Boot up the Intel® Entry Storage System SS4000-E system
  7. Login to the system by browsing the main web page:
    1. http://Intel Entry Storage System SS4000-E system’s IP Address/ (Ours defaulted back to - so we set the workstation's IP to static .102)
    2. NOTE: this will display the system initialization screen, not the login screen. DO NOT insert the hard drives.
  8. Enter the following url to display the firmware upgrade page:
    1. https://Intel Entry Storage System SS4000-E system’s IP Address/system_init_vendorF.cgi
  9. Select the v1.4 software package file (fs-bc-v1.4-b709.pkg) to update the flash firmware. (We put it on the desktop of the system we were on for simplicity)
  10. After the previous step completes, the system should be rebooted but without the disks inserted. After the system completes the boot sequence, the disks can be inserted (one at a time while the system is running and wait for the disk LED to illuminate) and scanned for (scan for each disk after the LED illuminates) and the firmware reinstalled. If the firmware package is installed and the disks are reinserted prior to rebooting the system, the system will boot off the drives and not properly complete a clean install. The drives must be inserted while the system is running for this process to complete properly.
    Note that the firmware update process takes a quite a while.

    Also, once one logs in at the Management Web page, the NAS will have picked up a set of IP addresses from the internal DHCP server again. So, make sure to reset the workstation's IP back to DHCP after step 7.

    All in all, the process went very smooth.

    We will also now be utilizing the Active Directory integration on this particular NAS unit to manage user access. This feature simplifies data and folder permissions leaps and bounds over the built in Samba share structure.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    SBS Install - Workstation Laundry and Professionalism

    Part of what distinguishes us as professionals is in the way we do things and how things end up when we are done.

    Some aspects of our professionalism are:
    • We are meticulous
    • Our results are consistent
    • We keep extensive check lists (a blogged SBS example) for all aspects of the work we do.
    • We utilize the Wiki feature in WSS v3 in a side-by-side install on our own SBS boxes for:
      • Procedural Manuals
      • Client Relations Manuals
      • Professionalism Manuals
      • Technical Manuals
    • We have that Wiki accessible via RWW
    • We keep WSS based document libraries of all needed base scripts accessible to us via RWW
      • Group Policy Software install scripts for Office 2007
      • Custom logon batch files
    • We keep WSS based image libraries of all screenshots needed for reference
    • We keep WSS based folders available for our technicians to upload screenshots to along with some notes on them for later addition to the Wiki.
    • Our policies and procedures (P&Ps) are well documented and available to our technicians all the time.
    • Our technicians can comment on those P&Ps, updating the P&P Wikis on the go.
    No matter what SBS fresh install we do or SBS install we walk into after the fact, our workstations, servers, shares, and other infrastructure aspects are as similar in their structure and appearance as we can get them within reason.

    Maintaining consistency makes it much easier for any of our technicians to walk into a situation blind and know with relative confidence what is going on at any given client.

    This is what distinguishes a professional from the one who flies by the seat of their pants.

    We pay attention to the details.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Monday 21 January 2008

    Office 2007 Suite Grid - What is in what again?

    It is a perennial question that all I.T. professionals get: "What is in what version of Office please?"

    Here is a screenshot of the Office 2007 Suite product comparison grid:

    Office 2007 Suites Comparison Grid

    The original grid can be found here: 2007 Microsoft Office System suites.

    Note that the step from Small Business Edition to Professional Edition is Microsoft Access. Since those are the most popular non-licensing versions we deal with, that is a good thing to remember.

    Also, when selling OEM versions, we make a point of informing our clients that there is no accompanying media with OEM licenses and that it comes installed on a new system before the system leaves our shop. They can then order a copy of the media via a Web link in the license case for a small shipping fee.

    Here is a link to our previous blog post on Windows Vista's editions: Windows Vista - Now ... Just Exactly What is in What Edition Again?!?

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Seagate Barracuda 7200.7 Series Heads-Up - Dropping Like Flies

    We are seeing a rash of failures on the Seagate Barracuda 7200.7 series drives.

    Essentially they drop off causing the system to die, then an attempt to reboot brings up nothing for the user.

    The drive spins up then sits there with the "tick of death". It sounds like the drive heads are jumping back and forth inside the drive. They are all doing the same thing with regards to the failures.

    In some cases we can get data off of them, but in most we cannot. Swapping the electronics from a known good drive produces nothing. Even freezing them seems to get no where. It looks like there is an internal component of some sort failing in the drives.

    The sizes we have been seeing are the following:
    • 120GB ST3120021A, ST3120023A (PATA)
    • 160GB ST3160023A (PATA)
    • 120GB ST3120026AS (SATA)
    • 160GB ST3160023AS (SATA)
    There are a lot of those drives out there, so we will be paying particular attention to our client's system configurations.

    This situation demonstrates why it is so important to have good backups in place.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    SBS - Speed up a reboot - command line services shutdown script

    One of the ways to speed up an SBS reboot is to shutdown certain key services before clicking the Restart button on updates or when needing to manually reboot the server.

    By downing the Exchange services, SMTP, and IIS beforehand, one will see a marked decrease in the amount of time the SBS box will take to reboot.

    There are two versions of the batch file:

    1. Local Console - shuts down IIS
    2. Remote Console - leaves IIS alone so as to not break the RWW connection
    Console Batch File

    Copy and paste the following into a batch file called something like "ConsoleShutdown.bat" "ConsoleServicesOff.bat":
    net stop mspop3connector
    net stop msexchangeis
    net stop msexchangemgmt
    net stop resvc
    net stop msexchangesa
    net stop smtpsvc
    net stop w3svc
    Note that the first service for the POP3Connector does not need to be there if the feature is not being used. This applies for both versions of the batch file.

    The order for shutting down the services is particularly important. Shut down a service that has a dependency first, and an error will be generated for each of the service's dependents.

    Remote Batch File

    Copy and paste the following into a batch file called something like "RemoteShutdown.bat" "RemoteServicesOff.bat":
    net stop mspop3connector
    net stop msexchangeis
    net stop msexchangemgmt
    net stop resvc
    net stop msexchangesa
    net stop smtpsvc
    Note the absence of the last command to shutdown the IIS (W3SVC ) service!

    It may not be a good idea to combine the scheduled reboot batch file (previous blog post) and these batch file commands just in case one of the services hangs while stopping.

    Best schedule this batch file about 5 minutes before the reboot batch file depending on the speed of the SBS box. Give more time between the two batch files the older the SBS box is.

    If something hangs in the first batch file, the -f Force option in the subsequent shutdown command will take care of it.

    If you can suggest any further services to shutdown that will not adversely affect things before actually rebooting the server, please do feel free to add a comment with the net stop command! :)

    We find the name of the service to be used in the net stop command by looking at the service's properties:

    MSExchangeIS = Exchange Information Store Service

    In the above example, our command would be: net stop msexchangeis [Enter]

    Note that the commands in the batch file are not case sensitive. To start the services from the command line is just as simple: net start msexchangeis [Enter].

    UPDATE 2008-02-15: Changed the name of the suggested batch files to better reflect what the batch will do. P.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    New Vantec NexStar 3 version does not like S3000AH Intel Boards

    We have been using Vantec NexStar 3 USB 3.5" HDD enclosures with our backup solutions for a long time now.

    Just recently though, we have hit a snag: With the NexStar plugged in and turned on, we go to warm boot a server with an S3000AH based server board setup and the server hangs. Cold boot the server and head into the BIOS to make some changes, save them, then warm boot the server and it also hangs.

    Vantec recently went through a product revision with their NexStar 3 USB HDD 3.5" enclosures.

    Here is a side by side of the previous version (left)and the newest version (right):

    Vantec NexStar 3 Left=Old Right=New

    The differences are pretty obvious when the two sit side by side:
    • New uses a fixed SATA/Power Connector
    • New uses far fewer electronic components on the PCB
    When we move the the back side of the enclosures where the connectors are located, the differences become even more obvious:

    Vantec NexStar 3 Left=Old Right=New

    They are a mirror image of each other.

    One would assume that the differences in the amount of electronics would be offset by some of them being located on the backside of the PCB on the new unit. This is not the case.

    So, we are now in a quandry as we have at least a dozen of these new units either in the field or sitting here in the shop waiting to be delivered to our client sites.

    For now, we have been in touch with our supplier to indicate to them that the units are seemingly defective. We will also be looking into an alternative enclosure right away.

    We have sent an email into Vantec's support and, when we have a little more time, we may get in touch with Intel about it. For now though, the problem is definitely in Vantec's court.

    UPDATE: Vantec has responded already! We provided some more feedback as well as sent a link of a short video of the two problem scenarios we experience on an S3000AH based 1U sitting on our bench in the process of a Swing Migration.

    Kudos to Vantec for being so quick to respond!

    UPDATE 2008-01-28: It now seems that we can include the Intel S5000PSLSATAR series server board in this situation. We helped out on a new SBS install utilizing that board with dual Xeon 5345 Quad Core processors this last weekend.

    The server hung on reboot with the enclosure plugged in and turned on.

    We sent a note off to Vantec's tech support to update them on the situation.

    We have also ordered in an alternative enclosure made by Thermaltake: Silver River DUO Enclosure. The key feature on this unit is the ability to flip a switch on the back to choose between the USB 2.0 or eSATA interfaces.

    We have yet to hear back from Vantec.

    Now that we are seeing this issue on more than one server board, when we have more time later this week we will be initiating a support ticket with Intel too.

    UPDATE 2008-02-01: We plugged one of the new sled based NexStars into an existing SE7230NH1-E based Pentium D SBS box as part of this particular client moving over to a ShadowProtect based backup solution.

    In this case, the SE7230NH1-E does not hang up like the S3000AH or S5000PSLSATAR boards do on a warm boot.

    UPDATE 2008-02-05: We just plugged a new sled based NexStar into a server with the Intel SE7520JR2 server board in it.

    We warm booted the server after some updates and configuration changes and there was no issue.

    The following list will remain at the bottom of this post for clarity:
    • Intel SR1560SF and S5400SF Series (SRCASRB RAID) Warm Boot Failure
    • Intel S3000AH and AHLX (On board RAID used) Warm Boot Failure
    • Intel S5000PSLSATAR (On board RAID used) Warm Boot Failure
    • Intel SE7320NH1-E (On board RAID used) Warm Boot Okay
    • Intel SE7520JR2 (SRCS16 RAID controller) Warm Boot Okay
    The hard drives in the enclosures are all Seagate hard drives with at least 320GB of storage capacity. All of the Seagate hard drives have the 150Gbps jumper removed (Previous blog post).

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Saturday 19 January 2008

    Symantec now biting the hand that feeds it?

    Occasionally, Symantec is the product of choice for a client.

    Setting up an SBS install for this weekend, we registered the client licenses for Symantec's new EndPoint Protection Suite and proceeded to download the files.

    This is what we were greeted with on the file download page:



    In some cases our clients have registered and downloaded the Symantec products.

    Where would something like this leave us if they decided to pursue Symantec's install service? Out in the cold.

    Click the link to the REIS site and we see the following costs:

    Symantec Remote Expert Installation Services Cost

    Given our most terrifying moment of 2007 (previous blog post) was relinquishing control of a key system in our organization to one of Symantec's "Experts", we can only wait and see how this service actually works out.

    Unfortunately for Symantec, when one of our "partners" begins to compete with us, we will walk away from them and their products if at all possible. In this case, the walk away process has already been started, with this situation only adding further evidence that we have made the right decision.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Friday 18 January 2008

    Windows XP - Grub "Error 22"?!?

    Anyone know what a Grub is other than the critters in the ground? ;)

    A long time client brought in a PC that was only a month old from their local church.

    Things were not running properly on the system and they wanted us to clean things up.

    The system booted into Windows XP with no issues.

    We cleaned up the user setup, set security on the user profiles and the Line of Business (LoB) applications, and checked into the partitioning since there were two partitions on the machine with My Documents and their key LoB application moved and installed on the second partition respectively.

    When we opened the Computer Management console and checked out the Disk Management console the partitioning was particularly strange.

    The OS sat on a small C: partition at the beginning of the drive and the D: partition sat at the end of the drive.

    There were two unknown partitions in between. Our client did not know what they were and, given the newness of the system, knew they were not supposed to be there. So, we deleted them, restructured the two partitions to take up the unused space and continued on our way.

    When we rebooted the system after some updates though, we found out that there was a little more going on than a goofy partition scheme.

    We saw:
    Grub 1.5
    Error 22
    *blinking cursor*
    Upon seeing that, the light came on upstairs: Linux.

    How Linux was installed on the new machine was a mystery.

    How to get our Windows XP back was also a bit of a mystery. A search on the Web brought us to instructions that we already knew: We needed to reset the MBR (Previous blog post).

    Once we reset the MBR following the above instructions, we were greeted with the Windows XP boot screen and eventually the OS desktop.

    Needless to say, access to that machine will be restricted and monitored from now on!

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Trend Micro Partner Program

    We have taken the next steps in our severing our business relationship with Symantec: We have registered with Trend Micro's Partner Program.

    We started this process earlier this week by phoning the Trend toll free number to inquire about some part numbers and the person we spoke with pointed us in the direction of the Partner Program.

    We eventually received a call from Casey, who in turn answered all of our questions and provided a good bit of background information on the Partner Program and what it has to offer us. She then emailed us with further information and links to relevant Partner resources.

    So far, the conversations with our initial contact in the company and subsequently Casey in Distribution Channel Support have been refreshing. It is good to talk to someone who knows their company's products and is quite competent at their job. This is a huge step over the Symantec front line on the other end of their Corporate/Enterprise phone numbers.

    One of the benefits of the Partner Program we will take advantage of immediately is the ability to obtain NFR versions of their products. This will provide us the means to work with the products we intend to install and support at our client sites.

    Some relevant Trend Micro links: We should receive our NFR keys pretty soon. Once we do, we will download the software and begin our adventure into Trend's security products.

    We will keep you posted.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Thursday 17 January 2008

    Windows XP - IE 7 Icon on the Start Menu is Broken

    We recently finished installing an XP downgrade on an Acer laptop.

    Once we finished setting things up, running all Microsoft updates, installing the unit on the SBS network and finally installing their Line of Business applications we ended up with the following mystery:

    IE Icon Broken

    It took a while to discover the correct keywords to use in our search for a solution.

    Eventually, the solution was actually quite simple:
    • Edit the registry
    • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInter net\IEXPLORE.EXE\DefaultIcon
    • Default value: C:\Program Files\Internet Explorer\iexplore.exe,-7
    • Change the value to: C:\Program Files\Internet Explorer\iexplore.exe,-32528
    • Close Regedit
    • Reboot
    After the system was rebooted, the IE icon was as it should be.

    Here is a screen shot of the registry change:

    IE Default Icon Registry Change

    Thanks to the Neowin Forums: Start Menu IE Icon for that fix. Fix is near the bottom in a post by leggom.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Tuesday 15 January 2008

    VISA - Forced Transaction and Symantec

    We just discovered what a "Forced Transaction" is to the credit card companies.

    We received an email from Symantec indicating that our subscription was automatically renewed.

    However, we do not have a subscription to any Symantec products. We have purchased them for some of our single seat clients or non-profits, but only for the year. Or, at least we thought so.

    This is the content of the email:

    Symantec Subscription Auto Renew

    When going through the various purchases that we do in this manner, we are pretty careful about such "automatic" settings.

    Perhaps we missed this one ... it is sure a lesson to be a lot more careful in the future.

    There are a couple of things to note about this particular situation:
    1. When we called the credit card company to enquire about the transaction - the original card's expiry was long gone - we were told that the credit card company allows for subscription services to be "Forced" through despite the expiry date on the credit card!
      • This information was really surprising since one assumes that upon a credit card expiring, any associated recurring transactions would no longer apply. This is obviously not the case when it comes to ongoing subscription type services.
    2. The credit card company contact was not the least bit surprised that Symantec was the culprit. It seems to be a quite common experience.
    The credit card representative recommended we contact Symantec Support and ask them to reverse the charge. They also recommended that we save a transcript of the conversation (we used the chat feature), just in case the charge reversal does not go through and we need to initiate the payment dispute mechanism at the credit card company.

    In a business we have to reconcile all of our various statements, so things like this tend to be caught in smaller organizations.

    What happens to those who do not pay too much attention to their credit card statements? They get billed for a product they very well may not be using anymore! What happens to larger organizations that may not pay attention to every single transaction going through their books? They pay too.

    Symantec indicated that they would reverse the charge and discontinue the "subscription". We now need to wait 2-3 business days for the transaction to appear on our credit card.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Monday 14 January 2008

    Outlook 2007 - Stalled Send and Receive

    This is what Outlook has looked like all day today:

    Outlook 2007: Stalled Send/Receive

    Nothing seems to have fixed the issue short of a reboot. Shutting Outlook down as well as killing its process in the Task Manager did not do it. Cancelling the Send/Receive and clicking on the S/R button or F9 on the keyboard does not always bring in new email either.

    Given time constraints, a reboot has not been possible since the last one. We need to get some work done on this machine!

    So, hopefully the reboot, when it happens, will fix it for now.

    The machine that Outlook is misbehaving on is due for a significant component upgrade. So, the OS and all applications will be reinstalled to see if a start from OS Ground Zero will resolve the Outlook issues on it.


    UPDATE 2007-01-17: Tried ripping Office 2007 right out of the system and allowing our GP install to run fresh. Problem is still there after the reinstall.

    There are a number of other workstations here that can connect to that Exchange profile with no issues. The one difference is the POP3 pulls that happen on the one workstation with the problem. Yet, the POP3 pulls are accomplished with no hang ups. Only the Exchange portion seems to get hung up indefinitely.

    Service Pack 1 has been deployed via WSUS and all workstations have it installed.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Lenovo T61 Windows XP Downgrade Experience

    We picked up three new Lenovo T61 from a client to prep them with their Line of Business (LoB) apps and for installation onto the client's SBS network.

    The T61 comes with Windows Vista Business out of the box, so we were also going to downgrade them.

    When we received the boxes, we did some research on the downgrade process. We erroneously picked up on some forum posts that indicated that we were required to call Lenovo to order the downgrade CDs.

    This was, of course, before opening up the boxes and having a look at the contents! ;)

    Lenovo support was very straight forward. After obtaining some product codes off of the box they sent us the CDs no questions asked.

    When the disks arrived - all eight of them - we opened up the T61 boxes to have a look at the laptops. Originally we planned on making copies of the disks to enable us to run all three laptops at the same time. This was not necessary since we discovered that the laptops also came with their own copy of the recovery CD set.

    The first thing we noticed was that the set that was sent to us by Lenovo were stamped "Recorded in the USA" as opposed to the set that came in the box with the T61s that was stamped "Recorded in Hong Kong".

    Curiosity kill the cat ... :D

    Okay ... so, is there a difference in the image contents too? Technically an image should be an image.

    So, we downgraded two of the laptops using the in-the-box media (referred to as HKs) and one of the laptops via the media that came directly from Lenovo (referred to as USA).

    The first difference was abrupt: After running Rescue & Recovery 3 via the first recovery disk on USA and starting the "recovery" process to factory defaults for the XP downgrade we were prompted to reboot the system to continue the process. The reboot happened without a problem. The HKs on the other hand both erred out on the reboot request in what seemed to be a disk format utility error. We were offered the following button options on the error dialogue: Cancel, Retry, and Ignore. On one we clicked Retry which hung the system indefinitely and required a hard reset (hold the power button for about 10 seconds). On the other we clicked Ignore which caused the machine to pause for about half a minute before rebooting itself and continuing the recovery process. No ill effect seemed apparent after this though.

    Once the three laptops finished their post recovery initialization, they seemed to be the same desktop wise, but there were some initial subtle differences. The HKs would pop up OS information bubbles at the same time while the USA would not. There were a couple of post SBS domain Windows Update hiccups on the HKs where the USA seemed to accept the changes and run through the Windows Updates smoothly.

    There were a number of other anomalies associated with the LoB apps too. The LoBs installed with little or no issue on the USA but set themselves up differently on the HKs which was really odd. We saw some errors out of the LoBs on the HKs that we have not seen in years from those particular applications.

    When it came time to run the Lenovo built in software updates, all three were asking to download 1.6GB each or more! That, in and of itself, is pretty scary ... especially for those who are charged by the bit or in our client's case, have a small bandwidth Internet connection.

    Also, keep in mind that two of the updates required by the Lenovo software are two Windows XP hotfixes that should be applied before adding the T61s to the SBS domain: Lenovo (& Others) XP Specific Updates: Hotfixes required via Product Support Services (previous blog post).

    If the hotfixes are not applied before adding the T61s to the domain, one needs to log on to the unit as a domain admin before the hotfix will allow itself to be installed citing insufficient admin rights.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Friday 11 January 2008

    Windows Vista - Kingston DTSP Data Traveler Error: Requires Two Free Drive Letters

    Having recently placed our first Windows Vista client into one of our accounting firm clients, we are discovering all sorts of interesting hiccups.

    One hiccup is with the Kingston DataTraveler Secure - Privacy Edition. Every member of the firm is required to use this device when carrying around client data.

    This keeps the client data protected by a strict password and hardware encryption.

    On Windows XP Professional, the flash drive works really well. On Windows Vista however, the security software stalls.

    Essentially there are two partitions on the flash drive: One that mimics a CDROM and spools up the software to access the second partition that is hardware encrypted.

    Even if we allow the software on the "CD" partition to run when prompted by Windows Vista, it stalls.

    It turns out that there is a Kingston support entry for this problem on Windows Vista: Issue: KTP-012210-3 After inserting the DTSP into a Windows Vista computer, I received an error stating, "DTSecure Privacy requires two free drive letters.".

    To resolve the error, we need to update the firmware on the DataTreveler. We contacted Kingston's Technical Support and were directed to a password protected FTP site with the appropriate firmware update.

    Note that the firmware update will format the encrypted partition, so make sure that no data resides on the DataTreveler before updating it.

    Once the firmware was updated, we needed to run through the setup routine to set the access password and user information to the flash drive.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Thursday 10 January 2008

    Photosynth Video Demo is truly a neat thing to see

    This is the link on TED: Blaise Aguera y Arcas: Jaw-dropping Photosynth demo.

    In an era of Web 2.0 and "Social Network" hype and circumstance, this video is quite refreshing.

    We get to see Blaise run through a very stunning demonstration of the product he is the architect of: Photosynth.

    The product is totally "social" in its abilities to pull hundreds if not thousands of images together based on a keyword search that incorporates all of the image search result's meta data.

    Think "Image Wiki" anyone?

    The usage models for this product are truly amazing in their breadth and probably the significant reason why Microsoft, wisely in our opinion, purchased the company in 2006.

    This is a link to Blaise's Bio: Blaise Aguera y Arcas: Software architect.

    Something to check out in an off moment. :D

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Wednesday 9 January 2008

    WSUS 3.x Update Directory Data Volume Is Getting Up There

    We have not looked at the update directories for WSUS version 3 on SBS in a while.

    This evening we are completing an SBS Swing and got the chance to size them up ... and they are large ... in the order of 40GB large.

    The size of the update directories are definitely something to keep in mind when evaluating an older SBS box for WSUS 2.x or 3.x or an in-place upgrade to SBS R2.

    With the advent of Office 2007, Windows Vista, and soon Windows Server 2008 we can probably expect to see WSUS update directories into the 100GB+ magnitude.

    That is definitely something to keep in mind when future planning a server configuration.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    From Symantec to Trend Micro and a little ForeFront Client Security

    We are moving away from Symantec.

    In one case, we have a relatively new install at a long time client who moved offices and needed a fresh start.

    It is now almost 18 months later, and we have finally worked out getting the Symantec licensing .slf file problems worked out ... almost. The management console keeps telling us that certain clients are in license violation mode and won't update the client's definition files when this happens. And there are seemingly no good answers forthcoming from Symantec ... even with the Gold Support.

    *sigh* and a deep breath.

    So, we are going to try out the Trend Micro NeatSuite with a new client.

    Trend's name passes through the RSS reader every once in a while. Sometimes good, and sometimes bad, but from what we can tell, a number of leading SBSers out there rely on it for protection.

    What this means is a heavy investment of time to learn a new product. Hopefully the Trend setup will be fairly straight forward.

    By the way, we did look into ForeFront Client Security as a possible option, but the management console requires a full version of SQL2005 server installed. SQL 2005 Workgroup on SBS 2K3 R2 Premium does not cut it. Even on the Open Value Licensing scheme it was too expensive for SMB to include SQL. While we can install the workstation client in a "not managed" mode, this does not strike us as the right direction to go in a server/client environment.

    So, a new product adventure begins! :D

    And, in the case of our existing clients, once their Symantec licensing lapses we will move them over to Trend.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Tuesday 8 January 2008

    Zune Finally Comes To Canada!

    Not being one to buck the trend! ;)

    All I can say is Finally! and Whoo Hooo!

    We will be seeing the Zune here in the spring according to CBC: Zune to launch in Canada this Spring.

    You can bet that we will be ordering a number of them for our office and household as soon as they are SKUd up at our suppliers.

    Why have we waited for Zune as opposed to jumping on the iPod ship?

    Primarily because we all have a vested interest in keeping the industry healthy by providing competition to Apple.

    And, it would be nice to carry around a Microsoft hardware product while visiting our SBS clients ... as we are proud of the Microsoft products we sell and support.

    Good move Microsoft!

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Acer & IBM-Lenovo seem to include the XP Downgrade now

    We have been working with a number of Windows Vista based Acer TravelMate 6592G and Lenovo T61 laptops.

    Out of the box, we fire them up and run through the Windows Vista initialization which can take anywhere from 15 to 45 minutes depending on the speed of the system.

    We do that for each new laptop we receive on behalf of our clients. Once the initialization is finished, we create the Windows Vista recovery media for our archives.

    Initially, laptop manufacturers were not necessarily providing the ability for us to easily downgrade the Windows Vista installation to Windows XP Professional. We had to install an OEM copy of Windows XP Pro, then download and install every component driver which could be a hit and miss affair.

    Fortunately, that has changed lately. Both Acer and IBM are now supplying a set of recovery disks to downgrade the laptop to Windows XP Pro.

    That is no simple feat either. The manufacturer essentially has to double up on image creating for each Windows Vista model.

    Now we can essentially babysit the system to change disks as the Windows XP Pro recovery media runs.

    While the cost of providing the downgrade disks can be distributed across hundreds of thousands of units for the manufacturer the same cannot be said for our clients.

    So, this is definitely a step in the right direction for all concerned.

    Oh, and remember to make a copy of those disks for your archives. ;)

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Monday 7 January 2008

    First Working Monday - What does Microsoft do? Take down the Licensing Advisor :( - Take 2

    My apologies to Microsoft for the previous post ... I was wearing my "Rose" coloured glasses of frustration.

    Here is a little more level headed approach:

    Microsoft, I do believe that we who support the SBSC/SMB clients have a request for you: Since we work through the holidays while our clients are down we suggest that any work of significant impact be done then too or at off hours to least impact your Partners.

    For us and our clients the holiday seasons or evenings/overnights are a time to accomplish the big projects like server migrations, upgrades, and other large projects.

    We then take our break sometime later in the off season.

    The Microsoft Licensing Advisor is currently unavailable

    Taking down the licensing site on the first full working day of the year is not exactly the best way to work with us Partners.

    Unfortunately, we now have to wait on the phone for who knows how long before we can hopefully get the right answers to our Open Value licensing questions.

    We realize that once something gets out on the Internet, it is out there for good.

    So, this is a good lesson: Take a deep breath before hitting that "Send" button. :) The previous post has been removed at least from the blog.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Windows Vista - Control Panel icons missing - Compmgmt.msc not working

    When we first came across this issue, restarting the Software Licensing service would bring the icons back or the ability to start the Computer Management console.

    However, they would disappear randomly after that.

    Microsoft has a Knowledgebase article on it: KB936686 Icons are missing from Control Panel, or you cannot start Control Panel, the Welcome Center, or games in Windows Vista.

    This in turn leads us to: KB929637 Icons are missing from Control Panel, or you cannot start Control Panel, the Welcome Center, or games in Windows Vista which requested that we contact PSS via the link:
    This link seems to be the primary method that Microsoft is providing for obtaining hotfixes. There is a secondary link there for phone numbers with the hint of "support costs" associated with it. From the KB article:
    Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit...
    For us, being on the spot at the client, a possible 8 hour wait was not acceptable, so we went to our "Back Door" (previous blog post):
    The concierge emailed the hotfix to us within 10 minutes.

    There are x86 and x64 flavours to this hotfix, so make sure to obtain both.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Friday 4 January 2008

    Blog and Business

    Things are really intense in here right now.

    We have a number of Swing Migrations on the go, a bunch of system setups, XP downgrades, and deliveries to take care of.

    So, things might be a little lite on the blog for the next little while.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Wednesday 2 January 2008

    Suspicious Search Result for Free AVG

    In the process of searching for AVG's site for the previous post, which is on the domain, we turned up the following result:

    AVG Free Search Results

    Note the link to "free-avgDOTorg" as the first result under the sponsored sites before Grissoft's Grisoft's site links.

    After clicking on the free-avg link, one is presented with this site:

    AVG Free Download

    Note that the button includes the line to "Get Full Support" in it.

    The following page is presented after clicking on the button and resides on a completely different domain - ordersignupDOTcom:

    Sign Up: General Information

    Note the now distinct absence of the AVG logo and software reference. Enter an email address and:

    AVG - No where to be found

    The orginal AVG .org domain is protected by Domains by Proxy. This in and of itself leads one to be really suspicious as the original owners of the domain cannot be contacted at all.

    Go to the ordersignupDOTcom root page that is hosting the "Membership Type" page and one is lead on a wild goose chase that ends up on sites that also look like their sole purpose in life is to garner a person's credit card info.

    All in all, this is one very good reason to be "street smart" on the Internet and for companies like Grissoft Grisoft to be aware of what others are doing with their online reputation.

    UPDATE: Updated the spelling of Grisoft!

    UPDATE 2: Courtesy of Alex over at the Sunbelt Blog: Anti-virus vendor AVG subpoenas information on counterfeiters.

    My apologies to Grisoft for the inference above that they are not taking care of their reputation. It seems that they are, but as the article indicates, it is very difficult for them to follow through on it!

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Licensing and AVG "Free" Edition in a corporate setting?

    We just received an email from a company that contained the following at the bottom of their email:

    AVG Free Edition Signature

    So, what do we do?

    Not say anything? Let it slide?

    Since we receive email from around the world, the motive to inform a client, or non-client, would be one of principle versus one of "getting the sale".

    We believe in operating our business and working with our clients' businesses above board. This means making sure that our client's licensing and our own licensing are in proper order for any software product installed on any system or device.

    Here is how we would possibly respond to above situation:
    As a professional I.T. company, the following AVG antivirus message at the bottom of your email caught our eye:

    No virus found in this outgoing message.
    Checked by AVG Free Edition.
    Version: 7.5.516 / Virus Database: 269.17.13/1207 - Release Date: 1/2/2008
    11:29 AM

    Please note AVG's Web site states clearly that the Free Edition of AVG is for personal or non-commercial use only.

    We strongly suggest that Insert Company Name Here look into properly licensing a corporate level Antivirus solution. A proper solution would preferably be centrally (server) managed and not rely on the user to initiate updates or run scans. The proper solution would also be very difficult to circumvent ... which the free edition of AVG may not be.

    As a commercial enterprise, Insert Company Name Here would be liable for any virus spreading itself from within the Insert Company Name Here corporate network. There are organizations that track the source of all virus and Spam infections via IP and provide that data publicly. Thus, it may not be too difficult to trace back to the original sending organization.

    Also, a software audit by CAAST of Insert Company Name Here would turn any system the "free" software was installed on into a very significant monetary liability via fines and more.
    In most cases, we get "Oh ... we did not realize that" or "Thanks for pointing that out".

    We carry this policy into any prospective client relationship as well. If we are assessing a prospect's network and there are licensing issues, we make a point of documenting them and then discussing the issues with the contact there.

    If there is a firm and in writing commitment to address those issues within a fixed time frame then we will continue working with them.

    For those instances where cooperation is not forthcoming, the Microsoft Partner Site has some great legal resources and people to talk to. Consulting with them will make it clear where we would stand as far as our culpability and possible complicity in a prospective client's licensing quagmire and how we should proceed.

    For those who live and work in countries where litigation is flung about like a big stick, it is even more important to be absolutely clear where one's company stands legally.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.