Kazmarek

Free Site Analysis 1-858-952-5400
REMOTE ASSISTANCE

SBS 2011 won’t install because of replication issue

by

When installing SBS 2011 in migration mode it replicates Active Directory during the install. If it fails the SBS 2011 installation won’t complete. When looking at the File Replication Service in the Event Viewer, and you have NtFrs errors preventing replication, it won’t finish. Change the registry entry: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNtFrsParametersBackup/RestoreProcess at StartupBurFlags to D4. Then go to command prompt and stop the ntfrs service “net stop ntfrs”, when it stops, restart it, “net start ntfrs”

Check the File Replication Service event logs and see if the NtFrs event logs are Information now instead of Error.

http://support.microsoft.com/kb/840674

If you want to replicate ntfrs to another server use “D4”, if you want to replicated from another server use “D2” in the registry.

Renew SSL self-signed certificate in SBS 2008

by

With Small Business Server 2008, you have the option to use a third party SSL certificate or the default self-signed SSL certificate. By default the self-signed certificate is valid for two years, but how to you renew it without interrupting OWA, Outlook, and Exchange? When the certificate is expired, Outlook 2007/2010 will give you an error message when opening, that the certificate is not valid. Here are the steps to fix it.

1. Goto the Windows SBS Console, click on Network Tab, then Connectivity Tab
2. Click on the certificate icon, then click the “view certificate properties” in the right pane. In the General tab of the new window, it will show the dates that the self-signed certificate is valid for.
3. In the “Connectivity Tasks” area, click “setup your Internet address”, go through the wizard to renew your self-signed SSL certificate.
4. When you now check the certififcate properties, you will see that it is now valid for another two more years.

Windows Small Business Server – TS Gateway Authentication issue

by

We recently implemented a new SBS 2008 server for one of our clients.  A user was going to be working from home and wanted to utilize thier corporate office desktop to get some tasks done.  They were able to authenticate to the Remote Web Workplace webpage successfully,  but were unable to connect to their Windows 7 desktop computer.  Every time they attempted to do so, their account was rejected with an error message: “The logon attempt failed”

I discovered the problem was due to an incorrect setting within IIS.

Here’s what I did to correct the problem:
I went to IIS Manager → Sites → SBS Web Applications → Rpc → Authentication.  There I found only “Basic Authentication” was enabled.

Enabled “Windows Authentication” then ran an IIS reset. When IIS came back online, I was able to connect via TS Gateway to the server and at least one workstation. I connected and disconnected multiple times and it had no problems. The end user verified they were also able to authenticate without error, and gained remote control of their Windows 7 computer.

Move WSUS SQL database to another location

by

When running WSUS on a Small Business Server, the default location is the C: drive, when that drive gets full you need to move the content and the SQL database. Below are the steps to move the SQL database to another location.

1. Open command prompt and type: net stop “update services”

2. Next, at the command promt type: net stop w3svc (if it is SBS 2008 it will also stop the Terminal Services Gateway, remember to restart)

3. Open Microsoft SQL Express Management Studio (if you don’t have this, go to http://tinyurl.com/ynl9tv to download) and connect to the MICROSOFT##SSEE database, which is the WSUS database and the SharePoint databases in SBS 2008. You can’t just connect to the database normally, you need to type this in server name area:   \.pipeMSSQL$MICROSOFT##SSEEsqlquery

1577_1

 4. Detach the SUSDB database, move the SUSDB folder to the new location and attach the database again with Management Studio

5. Restart the services: “update services”, “w3svc”, and “Terminal Services Gateway”

 

 

Disable SSL v2.0 in IIS

by

While going through a vulnerability scan for PCI compliancy, the report noted that IIS 7 on a Small Business Server 2008 was still using SSL v2.0 instead of SSL 3.0 or TLS 1.0. To disable SSL v2.0:

  1. Click Start, click Run, type regedt32 or type regedit, and then click OK.
  2. In Registry Editor, locate the following registry key:HKey_Local_MachineSystemCurrentControlSetControlSecurityProvidersSCHANNELProtocolsSSL 2.0Server
  3. On the Edit menu, click Add Value.
  4. In the Data Type list, click DWORD.
  5. In the Value Name box, type Enabled, and then click OK.Note If this value is present, double-click the value to edit its current value.
  6. Type 00000000 in Binary Editor to set the value of the new key equal to “0”.
  7. Click OK. Restart the computer.

IIS negotiates the encryption with the client browser. An attacker could use a tool that tells the server it has only sslv2 (which is weaker) available. If you disable sslv2 it only uses v3 or tls, as requested by browser. A browser only supporting sslv2 would fail.

 This applies to Windows Server 2003, and Windows Server 2008, and both versions of SBS.

http://support.microsoft.com/default.aspx?scid=kb;en-us;187498

Installing Exchange 2007 SP2 on SBS 2008

by

You run into issues installing Exchange 2007 SP2 on SBS 2008 until you add the following key and DWORD to the registry.

To create the E12SP2READY registry value, follow these steps:

  1. Click Start, click Run, type regedit in the Open box, and then click OK.
  2. Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINESoftwareMicrosoftSmallBusinessServerExchange

    Note If the Exchange subkey does not exist, you must create it. To do this, follow these steps:

    1. Right-click SmallBusinessServer, point to New on the Edit menu, and then click Key.
    2. Type Exchange and then press ENTER.
  3. After you select the Exchange subkey that is specified in step 2, point to New on the Edit menu, and then click DWORD Value.
  4. Type E12SP2READY, and then press ENTER.
  5. Right-click E12SP2READY, and then click Modify.
  6. In the Value data box, type 1, and then click OK.
  7. On the File menu, click Exit to exit Registry Editor.

Full article at Microsoft – http://support.microsoft.com/kb/973862

Small Business Server Productivity Essentials FREE Webinar

by

Please join us on Wednesday, January 20, 2010 for a FREE webinar on taking your business to the next level with Windows Small Business Server. Plus there will be a Microsoft Office 2007 giveaway to one lucky attendee!

Kazmarek Technology Solutions, Inc. will show you how to protect your business data, increase productivity, and experience the freedom of working from virtually anywhere with an upgrade to the latest Windows Server technology.

Space is limited–Click here to register today!

Who should upgrade to Windows Small Business Server 2008?

If you are currently using an older version of Windows Server technology or you are currently not utilizing a server environment, you are poised for an upgrade.

Top Five Reasons To Upgrade to SBS 2008

by

1. Get a comprehensive all-in-one solution.
Windows Small Business Server 2008 brings together the Microsoft technologies that businesses need most into a single integrated solution.

2. Access business information and resources from virtually anywhere at any time.
Securely access your data whether you’re in the office, at home, or on the road.

3. Keep your network healthy and up-to-date.
Maximize uptime and ensure network health with Windows Small Business Server 2008.

4. Stay connected to your customers, vendors, and suppliers.
With access to contacts, appointments, and files from any Internet-connected PC or mobile device, you can be responsive to customers, vendors, and suppliers even when you’re not in the office.

5. Protect your business and prevent data loss.
Windows Small Business Server 2008 helps protect your business by backing up the data on your network and enabling you to recover accidentally deleted files.

Want to learn more? Register for our free SBS 2008 Webinar here!