Showing posts with label W2012E. Show all posts
Showing posts with label W2012E. Show all posts

Monday, 9 September 2013

Windows Server 2012 and Essentials: Error 80073718 on Update(s)

We may be seeing some issues in Windows Server 2012 and W2012E:

In the end the problem points to a "servicing stack corruption" with the OP needing to re-install the operating system from scratch.

While this may be a possible suggestion for a new server setup, those that have had their systems in production for any amount of time are left in a bit of a conundrum.

At this time there is no "fix" for the "problem".

So given that Microsoft would not recommend a third party action, our suggestion for those that have a full server setup in production is to look into running a Swing Migration. Fellow MVP Jeff Middleton's methodologies will preserve Active Directory, Group Policy, and more.

If the setup is a VM then there are a number of options one can pursue to Swing the AD off and back on again.

This method would save a good chunk of time as one would not need to migrate the local profiles over to the rebuilt domain nor have to deal with Group Policy Tattoos if one rebuilds with the same domain name. Plus, if there are on-premises services running in Exchange, SQL, and other Line of Business applications the time savings would be _huge_.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen
Find out more at
www.thirdtier.net/enterprise-solutions-for-small-business/

Windows Live Writer

Sunday, 1 September 2013

Exchange 2013 ECP Error: The user has insufficient access rights. Active directory response: 00002098: SecErr: DSID-03150BC1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

After setting up Exchange 2013 Standard on a VM we hit the following problem:

image

Server Error in '/owa' Application.

The user has insufficient access rights.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.DirectoryServices.Protocols.DirectoryOperationException: The user has insufficient access rights.
Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

[DirectoryOperationException: The user has insufficient access rights.]

System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut) +1904

System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout) +381

Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, Nullable`1 clientSideSearchTimeout) +3849

Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync) +1062

[ADOperationException: Active Directory operation failed on vW2012E.MPECSINC.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation.

Active directory response: 00002098: SecErr: DSID-03150BC1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

]

Microsoft.Exchange.Data.Directory.ADDataSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer) +3736

Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync) +1945

Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException) +27

Microsoft.Exchange.Data.Directory.ADDataSession.Save(ADObject instanceToSave, IEnumerable`1 properties, Boolean bypassValidation) +2082

Microsoft.Exchange.Data.Storage.ExchangePrincipal.Save() +1078

[StoragePermanentException: There was a problem accessing Active Directory. Check your network connections and try again.]

Microsoft.Exchange.Data.Storage.ExchangePrincipal.Save() +1600

Microsoft.Exchange.Clients.Owa2.Server.Core.RequestDispatcher.HandleLanguagePost(RequestContext requestContext, CultureInfo culture, String timeZoneKeyName, Boolean isOptimized, String destination) +2072

Microsoft.Exchange.Clients.Owa2.Server.Core.RequestDispatcher.DispatchIfLanguagePost(RequestContext requestContext) +642

Microsoft.Exchange.Clients.Owa2.Server.Core.RequestDispatcher.InternalDispatchRequest(RequestContext requestContext) +620

Microsoft.Exchange.Clients.Owa2.Server.Core.RequestDispatcher.DispatchRequest(RequestContext requestContext) +297

Microsoft.Exchange.Clients.Owa2.Server.Core.OwaRequestHandler.OnPostAuthorizeRequest(Object sender, EventArgs e) +352

System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +80

System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +165

Version Information: Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.0.30319.17929

There was not a lot that turned up in our searches.

In the end, we needed to run the following command on the Windows Server 2012 Essentials server from the Exchange 2013 install disk:

  • Setup /PrepareAD /IAcceptExchangeServerLicenseTerms
  • image

Once the above command finished running we hit refresh in IE and we were in.

image

Please note that these shots are via one of our labs we are running through in preparation for some SMB Kitchen Project content.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen
Find out more at
www.thirdtier.net/enterprise-solutions-for-small-business/

Windows Live Writer

Saturday, 31 August 2013

Windows Server 2012 Essentials Error: DHCP Failed To Install 0x800F0922

We are running a greenfield Windows Server 2012 Essentials with Exchange on-premises setup this weekend.

After setting the server’s IP to static we ran the DHCP Role install and hit:

image

Feature Installation

The request to add or remove features on the specified server failed.

Installation of one or more roles, role services, or features failed. Error: 0x800F0922

This particular setup is being done in our shop. So, we are using one of our own Cisco units to provide gateway services.

In the end it turned out that when we configured the Cisco ISA520 for the network’s subnet we had left DHCP on!

So, when that error happens make sure there are no DHCP services running on the network. Once we turned the Cisco DHCP service off we were able to install the DHCP Role, Authorize it, and set up our scope.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen
Find out more at
www.thirdtier.net/enterprise-solutions-for-small-business/

Windows Live Writer

Friday, 8 March 2013

Some thoughts on possibly migrating to Windows Server 2012 Essentials and Cloud

This post is a copy of a comment left on Susan Bradley’s post here: A Social Question About the Future of SMB Servers.

In our move from SBS to the Stack we've seen about a 15% increase in overall licensing costs for our clients (Open Value Agreement with the 3 year spread payment option).

Most businesses can absorb a 15% uptake on their server side licensing costs. Those that can't have other problems needing to be dealt with first.

We've done a few 2012 Essentials with Exchange 2013 greenfield deploys and are relatively happy with the results barring a few deadly misses in Exchange 2013 RTM.

Many of you may have used our SBS 2003 to SBS 2011 Standard migration guide. It's one of the busiest pages on our blog. One of the reasons that guide and the others that we have was put together was due to the terrible documentation from so many different Microsoft sources for the whole process.

Why should the SBS to W2012E migration documentation be any different? It is not, in fact as already mentioned it is worse than before.

The biggest drawback to bringing a well thought-out SBS Standard setup into a W2012E via migration is the huge step back we would take with the AD/GPO structure.

SBS 2003, 2008, and 2011 Standard all had a beautiful OU structure that was easy to manage with simple to deploy targeted GPO settings.

With W2012E we lose all of that and in the end had to resort to WMI filtering to gain some of the targeting we had previously.

Since RDS has been a part of our client's licensing makeup since Day 1 with us we will be avoiding W2012E. RDWeb on 2012 or even 2008 R2 works well as a landing page. Users can then open their RemoteApp or log on to their internal desktop PC or dedicated VM.

DirectAccess gives our clients the ability to access their files seamlessly. Again, all are on Desktop OS SA+MDOP with Enterprise on their laptops. So, this is a fairly seamless transition from VPN.

Yes, the solution stack is a bit more complex. But, and I mean BUT, we gain access to the ability to put together solutions that we could only have dreamed of with the one-box solution SBS gave us.

Is W2012E a worthy successor of SBS? In all reality we are comparing Apples to Oranges here. IMNSHO W2012E is a blip on the road to the Cloud in Microsoft's eyes.

It is up to us to build and provide the best on-premises SBS-Like IT Solution our clients need.

While many Cloud vendors, including Microsoft, can’t seem to see beyond their particular vision for SMB IT over the next five to ten years those of us on the ground have a _very different_ vision of what SMB IT is all about.

To us, the Cloud tends to be a cookie cutter solution. That is, the customer must fit their business structures _into_ the Cloud Vendor’s product confines.

SMB IT is anything but cookie cutter.

When we are invited into a small business to have a chat with a business owner or business IT contact about their IT needs and how to address them we have a distinct advantage over Cloud.

  1. Face-to-Face time. We build a business relationship with our business contacts _and_ their users.
    • This is one area of SMB IT that surveyors, enterprise oriented vendors, and others always seem to miss or outright get wrong.
  2. We tailor an IT Solution to the client’s very particular needs.
    • We don’t modify their business processes to fit a cookie-cutter solution.

The idea here for us is to take what the business has already built up in the way of business processes and workflows and help them grow more efficient.

The attitude that SMB IT belongs in the Cloud, whether it be from Microsoft, Cloud vendor, or Cloud Proponent is at best misplaced.

I really wish folks would stop telling us that on-premises IT Solutions for SMB should not exist anymore.

Ultimately, the decision is up to the small business owner and IT management to decide what is best for their company.

We prefer to give SMB IT an on-premises virtualized solution stack that incorporates all of the SBS Standard goodness across two to four virtual machines (VMs) as an option and then _let the market decide_ whether Cloud or on-premises is right for them.

The EOLd Essential Business Server in a virtualized setting would have been a great product to build a virtualized product stack today with almost the entire greenfield deploy being wizard driven. A solid migration story may have changed that product’s longevity too.

It is our end-game here at MPECS Inc. to provide the best on-premises solution stack that our client’s IT budget can buy.

And, with our blog here, as well as others, and the SMBKitchen initiative it is our goal to provide SMB IT Solution Providers with the best Microsoft Stack solution _your_ clients can buy along with the skillset needed to properly deploy and maintain that solution set!

Providing SMB businesses with an SMB IT Solution built on the Microsoft Stack that runs stable and provides the same SBS like experience they are all used to is one of the _only_ ways we can push back against the Cloud’s onrush.

Remember, value is not about the lowest price. If it was, Wal-Mart would be the _only_ retailer on the block and Mercedes Benz, BMW, and Cadillac would be out of business.

And, cost of “ownership” is always higher when someone else owns the equipment. That is one reality that has yet to be made concrete in the SMB Cloud initiatives.

One more thing, Susan and I have been having an ongoing conversation since the above was posted. Might be wise to have a boo yourself. :)

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen
Find out more at
www.thirdtier.net/enterprise-solutions-for-small-business/

Windows Live Writer

Thursday, 28 February 2013

How to test the Autodiscover._tcp SRV record for Exchange

We needed to test a domain's autodiscover setup that we had them configure since we are not confident in the hoster's abilities anymore.

  1. Open an elevated command prompt.
  2. NSLookup [Enter]
  3. set type=srv [Enter]
  4. _autodiscover._tcp.mpecsinc.ca [Enter]
    • image

And, the test for the hosting provider shows that they did indeed make a mess of it. Back to the drawing board. :(

The How-To for formatting the Autodiscover SRV record is in the TechNet article below. That method works for our own SBS 2011 Standard integrated Exchange and our client's setups as well.

We now use this SRV record for all of our client's Internet DNS setup.

Hat tip: Unify and Conquer: Quick Tip: Testing DNS SRV Records with NSLookup

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen
Find out more at
www.thirdtier.net/enterprise-solutions-for-small-business/

Windows Live Writer

Tuesday, 20 November 2012

A Moment Of Inspiration For Tough Times

As mentioned in my previous post I spent quite a few years in the automotive industry before getting bit by the Computer Bug.

We are now in the midst of a huge change in our industry on so many fronts that many of us feel a little lost for direction.

This angst has been the general theme/feeling at SMB Nation right through to the SBS User Group event we attended while in Dallas last week. Many of us are feeling the pinch.

Henry Ford: The Underdog

Just think for a moment if Henry Ford had threw in the towel. Where would we be?

Most certainly not where we are today with our transportation systems being a very key aspect throughout our lives. Not to mention the advancements in production he is responsible for.

We can and will make the transition from SBS to the new Windows Server 2012 Essentials stack including Exchange 2013 as a part of that solution!

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

Windows Live Writer

Monday, 29 October 2012

Stormy Cloud: Vendor Deleted Mailboxes by Mistake and Could NOT Recover Them!

A vendor that shall remain nameless, not OWN/ExchangeDefender, that hosts a domain e-mail setup for a client that we are deploying Windows Server 2012 Essentials, Exchange 2013 Standard, RDS, and an LoB server for had an “internal miscommunication” and deleted the client’s entire e-mail setup on their own systems.

We started getting calls Saturday afternoon with our team walking up and down our steps and communications with the Cloud Vendor to make sure we were in the right.

It turns out that an update was posted to the service ticket:

image

Other than the spelling error for “waive” in the last sentence this particular vendor has really messed up.

How is it that they are unable to recover any mailboxes that they host? In this case they are POP3/SMTP/IMAP that is probably on some sort of Linux operation.

About 50% of the client’s users were only using the Webmail interface for their e-mail with little to no device interaction either. So, these folks are at a complete loss.

The Outlook POP3 based users are not so bad off.

Wow, what a way to start a Monday morning for many of the client’s users.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

Windows Live Writer

Friday, 26 October 2012

Installing Microsoft Exchange 2013: Unified Communications Managed API 4.0 Runtime Not Found

During our test run at installing Microsoft Exchange 2013 Standard on our newly minted Windows Server 2012 Essentials domain we hit a weird error that turned out to be a PEBKAC (me) issue.

When one does a search for Exchange 2013 Prerequisites a number of different sites come up that deal with installing Exchange 2013. However, most, if not all have Exchange 2013 Preview and or Preview components linked in their posts.

image

The above snip is from the Microsoft Download site. Note the top one. Most of the blog posts link to the (Preview) download! :P

image

So, about half an hour after exercising our ability to discover the definition of insanity (doing the same thing over and over all the while expecting a different result) We discovered that the download was different via a Microsoft link (not sure which one).

Another clue that should have rattled the brain cells at this late hour in the day was not the following:

image

It was actually the fact that all of the Unified Communications Managed API 4.0 Runtime (Preview) was in that list!

Oh, and by the way, the Exchange 2013 setup routine will do the necessary AD preparation:

image

So, please make sure to have a System State Backup in place before running the Exchange 2013 Setup Routine!

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

Windows Live Writer

Thursday, 20 September 2012

SBS 2011 Standard Versus The Stack: Pricing Comparison

Let's take a 10 seat firm that is looking at their options today versus a month ago when SBS 2011 STD and the Premium Add-On (PAO) was still available on the Open Value Agreement pricelist with the Spread Payment Option.

Here we are talking about a _new_ agreement that was put together when the SBS SKUs were still available to us. The Spread Payment option was chosen so the indicated price would be paid on the agreement's anniversary at the beginning of year's 2 and 3. All Open Value Agreement SKUs are a composite of License + Software Assurance for the duration of the agreement.

Again, the following is for a 10 seat firm:

  • Small Business Server Standard 2011 (Mid-July SKUs)
    • $750 - SBS 2011 STD with 5 CALs
    • $325 - SBS 2011 STD 5 CAL Pack
    • $590 - Windows Server 2008 R2 Standard
      • Virtualization Rights: 1+1
    • $800 - Remote Desktop Services CALs ($80/Each)
    • TOTAL: $2,465/Year
  • Windows Server Stack Solution (Mid-September SKUs)
    • $1,500 - Windows Server Standard ($750/License x2)
      • Virtualization Rights: 1+2
      • VM1: Windows Server 2012 Essentials RTM (when it releases)
      • VM2: Server + Exchange Standard
      • VM3: Remote Desktop Services
      • VM4: WSUS, SharePoint, LoBs
    • $450 - Exchange Server Standard
    • $250 - Windows Server CALs ($25/Each)
    • $650 - Exchange Server STD CALs ($65/Each)
    • $800 - Remote Desktop Services CALs ($80/Each)
    • TOTAL: $3,650/Year

So, our difference in cost between the two solutions is $1,185.00/Year.

  • Cost difference breakdown:
    • $118.50/Year/User
    • $9.88/Month/User

Most firms that are not facing a cash crunch or impact due to the uncertainty in the economy can afford an extra $10/Month for each user in the firm.

What does an on-premises solution based on the new stack give our clients?

  • Remote Web Access Portal (Windows Server 2012 Essentials)
  • Remote Desktop Gateway (Windows Server 2012 Essentials)
  • IIS Application Request Routing (Windows Server 2012 Essentials)
    • W2012E uses a single IP for _all_ inbound services requests including OWA, ActiveSync, and Outlook Anywhere.
  • Exchange Standard Services
    • Outlook Web Access, ActiveSync, and Outlook Anywhere
  • DirectAccess
    • Where the Remote Web Workplace/Access portal was the killer app for SBS 2003, then RD Gateway and RemoteApp for SBS 2008 and SBS 2011, DirectAccess will be the Killer App for W2012E deploys.
  • Failover Cluster
    • Windows Server 2012 Standard now has all of the great new and old failover clustering features built in. For the larger and/or more advanced clients this becomes a very lucrative option.

What do we have today?

We have _everything_ our clients have come to expect from their Small Business Server IT Solutions that we have been designing for them for the last eight to ten years. But, now they have a lot more!

  • RemoteApp, Remote Desktop Services, full device access, and Internet based remote access features remain the same.
  • DirectAccess gives full remote access _and_ management.
  • Expansion opportunities in Lync, SharePoint Portal Server, and other Microsoft Core CAL Suite covered products.

As we have mentioned before the new solution set offers us so much more in the way of flexibility to tailor IT Solutions for our clients.

Custom IT Solutions is one area that Cloud cannot touch. We can pull together a broad base of technologies and customize them for our client's environments. Cloud is a one-size-fits-all kind of solution that is very difficult to tailor into a client's needs.

Thus, we see a huge opportunity for our clients and our own IT Business going forward!

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

Windows Live Writer