0x8007000d task scheduler Планировщик заданий
[info]admin_dm
  1. Войдите в систему как пользователь с правами администратора.
  2. Удалите все запланированные задания. Чтобы сделать это, выполните следующие действия.
    1. Нажмите кнопку Начало, Запустить, тип элемент управления schedtasks, а затем нажмите клавишу ВВОД.
    2. Проверьте список заданий, которые зарегистрированы в окне «назначенные задания».
    3. Удалите все зарегистрированные задачи.
    4. Закройте окно «назначенные задания».
  3. Нажмите кнопку Начало, нажмите кнопку Запустить, тип cmd, а затем нажмите кнопку ОК.
  4. В командной строке введите следующие действия, чтобы перейти к указанной папке:
    CD %SystemDrive%\Documents и Data\Microsoft\Crypto\RSA\S Users\Application Settings\All-1-5-18
  5. Удалите все файлы, которые начинаются с d42 *, введя следующие команды:
    DEL d42 *
  6. В командной строке введите: Exit.
  7. Изменить расписание задачи копирования теневых томов. Файлы, которые начинаются с d42 * создаются повторно после перепланирования задачи копирования теневых томов.
Сегодня столкнулся с невозможностью запуска ранее созданных заданий в планировщике
Изменить учётные данные не даёт, а пересоздавать задания - слишком много работы.
Помогло удаление указанных файлов
Tags:
  • 1
  • Leave a comment
  • Add to Memories

Импорт сертификата Tomcat javakeystore
[info]admin_dm

Бился несколько дней с проблемой обновления сертификата на продукт self-service-password aka

ADSelfService Plus

По официальной инструкции делал всё правильно, только SSL не стартовал.
http://www.manageengine.com/products/self-service-password/help/admin/general-settings/ssl-installation.html
После долгих попыток решения данного вопроса пришло в голову конвертнуть текущий PFX в формат JKS
C помощью утилиты:
http://portecle.sourceforge.net/
Конвернул, подсунул серверу.
Вуаля ...

http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html
1.  Extract from PFX file key and cert in PEM format   

 openssl pkcs12 -nocerts -in %_PFXFILE% -out %_KEYPEM% -passin pass:%_PASSWD% -passout pass:%_PASSWD%    
openssl pkcs12 -clcerts -nokeys -in %_PFXFILE% -out %_CERTPEM% -passin pass:%_PASSWD

2.  Convert both cert and key from PEM to DER format     

 openssl pkcs8 -topk8 -nocrypt -in %_KEYPEM% -inform PEM -out %_KEYDER% -outform DER -passin pass:%PASSWD%

 openssl x509 -in %_CERTPEM% -inform PEM -out %_CERTDER% -outform DER

3. Use java code to combine Cert and Key to JKS store format 

java ImportKey %_KEYDER% %_CERTDER% %_KEYSTORE% %_ALIAS% %_JKSPASSWD


keytool does not support management of private keys inside a keystore. You need to use another tool for that. If you are using the JKS format, that means you need another java-based tool. extkeytool from the Shibboleth distribution can do this.
Create an empty keystore
keytool -genkey -alias foo -keystore truststore.jks
keytool -delete -alias foo -keystore truststore.jks
Generate a private key and an initial certificate as a JKS keystore
keytool -genkey -keyalg RSA -alias "selfsigned" -keystore KEYSTORE.jks -storepass "secret" -validity 360
you can also pass the data for the DN of the certificate as command-line parameters: -dname "CN=${pki-cn}, OU=${pki-ou}, O=${pki-o}, L=${pki-l}, S=${pki-s}, C=${pki-c}"
Generate a secret key that can be used for symmetric encryption. For this to work, you need to make use of a JCEKS keystore.
keytool -genseckey -alias "secret_key" -keystore KEYSTORE.jks -storepass "secret" -storetype "JCEKS"
Generate a Certificate Signing Request for a key in a JKS keystore
keytool -certreq -v -alias "selfsigned" -keystore KEYSTORE.jks -storepass "secret" -file MYCSR.csr
Import a (signed) certificate into a JKS keystore
keytool -import -keystore KEYSTORE.jks -storepass "secret" -file MYCERT.crt
add a public certificate to a JKS keystore, eg the JVM truststore
keytool -import -trustcacerts -alias "sensible-name-for-ca" -file CAcert.crt -keystore MYSTORE.jks
If the JVM truststore contains your certificate or the certificate of the root CA that signed your certificate, then the JVM will trust and thus might accept your certificate. The default truststore already contains the root certificates of most commonly used sommercial CA's. Use this command to add another certificate for trust:
keytool -import -trustcacerts -alias "sensible-name-for-ca" -file CAcert.crt -keystore $JAVA_HOME/lib/security/cacerts
the default password of the Java truststore is "changeit".
if $JAVA_HOME is set to the root of the JDK, then the truststore is it $JAVA_HOME/jre/lib/security/cacerts
keytool does NOT support adding trust certificates to a PKCS12 keystore (which is very unfortunate but probably a good move to promote JKS)
delete a public certificate from a JAVA keystore (JKS; eg JVM truststore)
keytool -delete -alias "sensible-name-for-ca" -keystore $JAVA_HOME/lib/security/cacerts
the default password of the Java truststore is "changeit".
if $JAVA_HOME is set to the root of the JDK, then the truststore is it $JAVA_HOME/jre/lib/security/cacerts
List the certificates inside a keystore
keytool -list -v -keystore KEYSTORE.jks
-storetype pkcs12 can be used
Get information about a stand-alone certificate
keytool -printcert -v -file MYCERT.crt
Convert a JKS file to PKCS12 format (Java 1.6.x and above)
keytool -importkeystore -srckeystore KEYSTORE.jks -destkeystore KEYSTORE.p12 -srcstoretype JKS -deststoretype PKCS12 -srcstorepass mysecret -deststorepass mysecret -srcalias myalias -destalias myalias -srckeypass mykeypass -destkeypass mykeypass -noprompt


2008 R2 AD
[info]admin_dm

Windows Server 2008 R2 New Active Directory Features

Windows Server 2008 put a decent amount of new Active Directory features. But what about Windows Server 2008 R2? This is expected to be released in the 4th quater of 2009. Here are some great new features to expect.



Recycle Bin for Active Directory



Starting with Active Directory, a fear of deleting objects came almost immediate. As the process to recover deleted objects takes a decent amount of downtime. As time went on Symantec put out a Backup Exec Agent for Active Directory that supposedly eased this trouble. But, now Microsoft has created a recycle bin for Active Directory objects. This recycle bin allows recover for deleted users, groups, etc... Attributes are automatically recovered with the object, including linked attributes. Objects by default are stored in the recycle bin for 180 days. The recycle bin retention time can be modified.



There are few requirements for you to get this feature. First, all domain controllers must be Server 2008 R2. Second, you must turn on the recycle bin. To gain access to the recycle bin is done solely through PowerShell. You can use the Get-ADObject cmdlet and pipe the results to the Restore-ADObject cmdlet. You can even empty the recycle by piping the results of querying whats in the recycle bin to the Remove-ADObject cmdlet.

Of course, the Active Directory database size or DIT file size does increase because of this feature. The size increases by 10% - 15% on average.

Managed Service Accounts

Many different programs and services needed to have an associated user account to perform certain tasks. The way these service user accounts were created was just like a regular user. But, now you had to manage these service user accounts and passwords. To do away with this issue Microsoft has come up with managed service accounts.

With managed service accounts (MSA), both the password and service principal name are managed by Active Directory. To create a MSA you use the New-ADServiceAccount cmdlet in PowerShell. You will also have to assign these accounts to a computer object, and you do this with the Add-ADServiceAccount cmdlet. A MSA can only be assigned to one computer object, so you cannot have multiple computers use the same MSA. You assign permissions to the MSA just like you would any other user account.

Since Active Directory manages the password, you don't enter one. This may pose a problem when you are installing a program that requires an account be specified and a password as well. To get around this you can create a temporary user account and then when the service is created, go in and change it to the MSA.

There are a couple limitations as well. First, scheduled tasks to not work with MSA's. Second, MSA's do not work with clustered services.

PowerShell

There are a new set of cmdlets in PowerShell for Active Directory. This is now more consistent with other server roles. You can also navigate Active Directory through familiar commands in PowerShell.

Active Directory Administrative Center

Microsoft has created a new interface. This interface is task oriented and now more consistent between the CLI and GUI. The navigation design is meant to support multiple domains and forests. This is the foundation for future UI enhancements.

Active Directory Best Practices

With Active Directory, there are hundreds of best practices but it changes for each environment. Also, it is sometimes hard to distinguish between best practices and "nice to haves". Also, when analyzing an issue, it can be quite cumbersome. To answer these challanges, Microsoft will be coming out with an Active Directory Best Practices tool. This is to be exptected since more and more of their other product have been getting this tool for some time now. The AD BPA will analyze AD settings that cause most unexpected behavior. The tool will only flag the setting or config, you will have to make the changes yourself.
Tags:

Объединение текстовых файлов TXT
[info]admin_dm
copy *.txt result.txt
Или программой
http://bluefive.pair.com/txtcollector.htm
Tags:

Оптимизация виртуальных машин
[info]admin_dm

Performance optimization tips

http://www.vmware.com/files/pdf/solutions/vmware-citrix-xenapp-best-practices-EN.pdf

Tip

Why

Source

Install VM ware Tools

Installs drivers that improve overall speed of the VM

esx2_citrix_planning.pdf

Vmware tools: Do not install balloon driver

Do not install the “Memory control driver” this creates overhead for the VM

med0115.pdf

Vmware tools: Do not install shared folders

This can give problems when using roaming profiles in citrix

VMNT KB

Disable visual effects

Fade effects take more data(=time) to send to the users screen and will make the user experience slower.

esx2_citrix_planning.pdf and med0115.pdf

Disconnect the CD-ROM

The VM is checking the CD-ROM periodically using CPU time

esx2_citrix_planning.pdf

Defragment the virtual disk

Periodically defragment the virtual disks to optimize the disk speed

esx2_citrix_planning.pdf

Use only 1 virtual CPU per VM (in most cases)

No reason given

med0115.pdf

Turn of hyper threading

Read about this tip from different sources, but have not found any reason why this improves performance for Citrix vm’s. Try it anyway..

VMNT Forums

Disable COM ports

The presence of these ports can cause random spikes in CPU utilization

esx2_citrix_planning.pdf and med0115.pdf

Make sure you have the correct OS selected for the VM

No reason given. VM Settings > Options.

esx2_citrix_planning.pdf

Set the same reservation amount as the amount of memory you have given the VM

The memory usage on a citrix server can swing very fast (depending on nr of users and how much memory per users is used) if esx needs to “free” up, swap or balloon memory somewhere else it will create overhead

VMNT Forums

Processor affinity can sometimes help

When using affinity you must carefully balance and monitor workloads in order to avoid over committing some processors while other processors remain underutilized

med0115.pdf

  • Use Windows 2003\2008 R2, not Windows 2000
  • Don’t P2V your servers, but use clean templates
  • Make sure the correct HAL (single or multi) is installed in the virtual machine. Otherwise, your vCPU will spike.
  • Always assign 1vCPU. If necessary, add a 2nd vCPU. Do not use 4 vCPUs!
  • Use 2 GB to start. Scale up to +-4 GB of vRAM if necessary
  • Use 1 .vmdk for your system partition (C:\ or other remapped drive letter) and 1 separate .vmdk for your program files.
  • Put the page file on the 2nd .vmdk
  • Important: disconnect any .iso file in your virtual CD-Rom
  • Use roaming profiles and cleanup your profiles at logoff
  • Disable sound for your published apps
  • Install the UPH service (download it here)
  • User sessions: for me, 30 users on a VM is the sweet spot. Do not expect to get as many users on it as on a physical box!
  • Scale out, not up. A major advantage of VM is to clone/NewSID/sysprep existing servers and put them into your existing Citrix farm. Just stop & disable your IMA service, clean up your RMLocalDB (if you use enterprise) and NewSid the thing. Refer to this support article for more info.
  • Use dual core or quad core systems. This because ESX will have more CPU to schedule its vCPUs on.
  • Don’t ever use a 2 vCPU Citrix virtual machine in a 2 pCPU physical machine!
  • Do not install the memory ballooning driver while installing the VMware Tools
  • Do not use a complete installation Vmware tools: there is an issue with roaming profiles and the shared folders component. See my previous article for more info.
  • Disable COM ports, hyperthreading, visual effects & use speedscreen technology where possible.
  • Use snapshots when installing applications or patching your servers (yes! With VMware you can do this!). In case of disaster, you can still revert to the original working server without using backups. Make sure all snapshots are removed ASAP when finished!
  • Always check that there are no snapshot leftovers (f.e. the infamous _VCB-BACKUP_ when using VCB)
  • Don’t forget you can use DRS rules to run your citrix servers on separate physical hosts.
  • Check out this vmworld 2006 presentation
  • And last but not least: do not forget to read ESX's (excellent) performance tuning white paper.

Tags: ,

Citrix Delivery Services Console или Access management console нет дискаверинга not discover
[info]admin_dm

Зайти в установку удаление компонентов и установить Enable Dcom
R:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regasm /codebase "R:\Program Files\Common Files\Citrix\Presentation Server - Administration Snap-in\PSE.Core.dll"

rem R:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regasm /codebase "R:\Program Files\Common Files\citrix\Access Management Console - Diagnostics\CdfExtension.dll"

rem R:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regasm /codebase "R:\Program Files\Common Files\citrix\Access Management Console - Dashboard Watcher\DWExtension.dll"

rem R:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regasm /codebase "R:\Program Files\Common Files\citrix\Access Management Console - Knowledge Base\KnowledgeBaseExtension.dll"

rem R:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regasm /codebase "R:\Program Files\Common Files\citrix\Access Management Console - Hotfix Management\HotfixExtension.dll"

rem R:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regasm /codebase "R:\Program Files\Common Files\citrix\Access Management Console - Legacy Tools\MMCPlugIns\LegacyToolsExt\CMCLaunchExtension.dll"

rem R:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regasm /codebase "R:\Program Files\Common Files\citrix\Access Management Console - Report Center\ReportCentreExtension.dll"

rem R:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regasm /codebase "R:\Program Files\Common Files\citrix\License Server - Administration Snap-in\LicensingExtension.dll"
Tags:
  • Leave a comment
  • Add to Memories

Скрипт проверки и установки kb
[info]admin_dm

 "Асинхронное выполнение сценариев загрузки" в Enabled (по умолчанию он не задан, т.е. сценарии Startup выполняются синхронно, ожидая завершения предыдущего). Находится этот параметр в Computer Configuration/Administrative Templates/Система/Сценарии. также необходимо разрешить параметр "Всегда ожидать инициализации сети при загрузке и входе в систему" (если он у вас уже не разрешён в какой-либо другой политике). Он находится в соседней ветке Computer Configuration/Administrative Templates/Система/Вход в систему. Иначе может возникнуть ситуация, при которой сеть ещё не проинициализирована, а мы уже пытаемся обратиться к сетевому ресурсу с пакетом установки.

На всякий случай привожу окончательную версию скрипта, вдруг кому-нибудь ещё пригодится. Я изъял оттуда все всплывающие сообщения, которые пригодились на этапе отладки, и вставил дополнительную проверку на соответствие версии операционной системы.

Dim WshShell, WinDir, objFSO, strComputer, tFile

'Указываем, что оперируем локальным компьютером
strComputer = "."

Set WshShell = WScript.CreateObject("WScript.Shell")
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set WinDir = objFSO.GetSpecialFolder(WindowsFolder)

Set objSWbemServices = GetObject("winmgmts:\\" & strComputer)
Set colOperatingSystems = objSWbemServices.InstancesOf("Win32_OperatingSystem")

'Местоположение бэкапа исполняемого файла клиента RDC старой версии, создаваемого при установке обновления RDC 6.1
tFile = WinDir + "\$NtUninstallKB952155$\mstsc.exe"

'Проверяем, что обновление ещё не установлено
If Not objFSO.FileExists(tFile) Then
For Each objOperatingSystem In colOperatingSystems
'Проверяем, что операционка — это Windows XP pro
If objOperatingSystem.Caption = "Microsoft Windows XP Professional" Then
'Проверяем версию сервис-пака
If objOperatingSystem.ServicePackMajorVersion = 2.0 Then
'Проверяем языковой стандарт операционки
If objOperatingSystem.Locale = 0419 Then
'Запускаем установку обновления
WshShell.exec("\\domaindc\gpshare$\WindowsXP-KB952155-x86-RUS.exe /quiet /norestart")
Else
End If
Else
End If
Else
End If
Next
Else
End If
Tags: , ,

Список установленных обновлений \ програм
[info]admin_dm
wmic qfe list full /format:htable >C:\hotfixes.htm
start C:\hotfixes.htm

или какой вывод понравиться
wmic product get name,version

wmic softwareelement get name,version

wmic softwarefeature get name,version
Или в реестре

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
Tags:
  • Leave a comment
  • Add to Memories

Оптимизация Windows XP c картинками
[info]admin_dm
http://jeremywaldrop.wordpress.com/2008/12/08/how-to-build-and-optimize-a-windows-xp-image-for-xendesktop/
Tags: , ,

Optimizing XenApp on VMWare ESX
[info]admin_dm

Optimizing XenApp on VMWare ESX

 There are numerous benefits for running Citrix XenApp on XenServer; including single vendor support, built-in optimizations, and integration features. However, what if you are working in a VMWare ESX environment? As a consultant or an internal engineer, you cannot always dictate the virtualization environment. The following are some tried and true best practices for optimizing XenApp on VMWare ESX.
The key is Memory Sharing and how VMWare allows overallocation of resources as opposed to XenServer. A key to optimizing performance is to NOT over-allocate RAM, which will reduce memory sharing between guests. The memory sharing/de-duplication is a great feature for infrastructure servers, but application/terminal services can suffer faults from the shared memory. Of course, if it were that simple, everyone would do it. Along with avoiding overallocation, the OS and services should be optimized. Finally, you should consolidate/isolate your Terminal Services workloads to common hosts -- in other words, dedicate ESX Hosts to run only XenApp. This will optimize VMWare's native memory sharing as well as streamlining I/O.

OS Optimization


Create a master VMWare TEMPLATE for each flavor of OS and XenApp you plan to install
  • Align the drives - use DISKPART to create a 64k Partition, formatted using 32k allocation unit sizes
  • 1 vCPU - assuming your application can run effectively in single CPU mode. Although there are many valid reasons to NOT do this, I recommend it because this reduces CPU %READY and CPU scheduling requirements by single threading the OS. Of course, if your app set requires multiple processors, or you risk pegging the single CPU, then this may not be an option.
  • 2 GB RAM - this is a good starting point for baseline testing. Depending on the Host RAM and the app requirements, you may need to move this up or down accordingly.
  • Set Page File Min and Max at 1.5 x RAM
  • Installed latest VMTools, including the Memory Manager (aka the Balloon Driver)
  • Please note, there are a lot of recommendation to disable this, but I believe that to be a fallacy:
  • a lot of the information and recommendation out there is still based on ESX 2.x
  • The Balloon Driver is a safety net, which should not be normally called on when designed properly
  • when in doubt, and until proven otherwise, go with the standard package
  • Disconnect/Disable the CD Rom - Windows guests poll CD devices quite frequently. When multiple guests try to access the same physical CD drive, performance suffers. Disabling CD devices in virtual machines when they are not needed alleviates this.
  • Adjust the Disk timeout valie to the storage vendor's recommended: HKLM/SYSTEM/CurrentControlSet/Services/Disk/TimeoutValue = REG_DWORD Hex value 3c (60)
  • Disable Last Time Access Atrribute for NTFS, this setting that keeps track of the last time a file was accessed. Removing the necessity for the system to keep reading and writing this information may speed up performance. The command is: fsutil behavior set disablelastaccess 1
  • Disable screen savers
  • Disable animations
  • Disable USB
For more information on general performance tuning tips, see vi_performance_tuning.pdf

Services Optimization


Any and all services which are not needed should be DISABLED. These services consume Memory and CPU cycles, which are not usually noticeable on physical hardware, but are exacerbate in virtual environments.
  • Citrix ActiveSync Service
  • Citrix XML Service - enable this on your ZDCs, disable on your production app servers
  • DHCP Client - if you are using static IP addresses
  • Distributed File System
  • Help and Support
  • Human Interface Device Access
  • Indexing Service
  • Messenger
  • Netmeeting Remote Desktop Sharing
  • WebClient
  • Windows Audio - unless, ofcourse, you truely need sound for your apps
  • Wireless Zero Configuration
For more information on Windows 2003 Services, see TechNet.

Scaling Out


When virtualizing, it is key to remember to scale out, not up. Sure, 2 CPU and 4 GB RAM physical machine has more horse power than a 1 CPU / 2 GB RAM VM, but when you can fit 10 of those VMs on a single host, you get a much greater density while spreading the load around.
This is a larger hurdle with any virtualization project, to move past large amounts of CPU and RAM. Once you can accept that smaller may be better, you see the value of scaling out (more units) instead of up (larger units).

I have found 3gb is a nice "sweet spot," depending on your specific application requirements. If you are running on a physical Host of 48 GB, this could allow you to run 10-12 VMs, consuming 30-36 GB, leaving plenty of resources for the host, VMotion, and axillary servers if necessary.
My Rule of Thumb: 2 Citrix VMs = 1 Physical Citrix Server. Obviously, this will vary based upon the actual workloads and application demands. For the aforementioned 3gb Guest on a 48gb Host, you could replace 6 1U servers with a single host - saving 5U of valuable space (as well as power and cooling).

You will need to design your Load Evaluators according to your design. Because performance counters are abstracted in a virtual environment, I recommend using us custom evaluator based on Memory Utilization, CPU Utilization, Session Load, and Load Throttling.

Combine this design with the use of VMWare Templates, XenAppPrep, and/or Provisioning Services for rapid deployment and you will have a robust, efficient, and highly flexible VMWare environment for running XenApp.
Tags: ,

Автоматическое обновление VMware Tools
[info]admin_dm

How to automatically upgrade VMware Tools

The following how-to is from this VMware KB  —  http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1010048

Before you begin

Before you perform the steps in this article, ensure that you have applied these prerequisite patches:

Note: Ensure to choose the newest patch for the product you are running.

The steps in this article require these components:

Note: VMware recommends that you install NET 2.0 SP1 to avoid slow operations.

Setting all virtual machines to automatically upgrade VMware Tools

To use VI Toolkit and PowerShell to set all virtual machines to automatically upgrade VMware Tools:
  1. Start VI Toolkit from Start > Programs > VMware > VMware VI Toolkit > VMware VI Toolkit.
  2. Connect to the VirtualCenter Server with the command:

    connect-viserver -server <VirtualCenter Server IP address> -user <VirtualCenter User> -password <VirtualCenter password>

  3. Copy the following command into the Windows VI Toolkit window:

    Foreach ($v in (get-vm)) {
    $vm = $v | Get-View
    $vmConfigSpec = New-Object VMware.Vim.VirtualMachineConfigSpec
    $vmConfigSpec.Tools = New-Object VMware.Vim.ToolsConfigInfo
    $vmConfigSpec.Tools.ToolsUpgradePolicy = “UpgradeAtPowerCycle”
    $vm.ReconfigVM($vmConfigSpec)
    }

    The VI Toolkit window does not display any output until the command has completed for each virtual machine. When the command is done running, a reconfigure task displays in VirtualCenter for every virtual machine.

Note: To disable this setting, follow steps 1 and 2, then copy this command into the VI Toolkit window:

Foreach ($v in (get-vm)) {
$vm = $v | Get-View
$vmConfigSpec = New-Object VMware.Vim.VirtualMachineConfigSpec
$vmConfigSpec.Tools = New-Object VMware.Vim.ToolsConfigInfo
$vmConfigSpec.Tools.ToolsUpgradePolicy = “manual”
$vm.ReconfigVM($vmConfigSpec)
}

Tags:
  • Leave a comment
  • Add to Memories

Citrix Template VMWARE
[info]admin_dm

Creating and Deploying a Citrix Template on VMWare ESX


Similar to my other related posts, this is specific to my operating environment and may not fit all. However, the best practices referenced here should help in most environments.

Please note, we use the drive remapping (C --> M) as well as direct addressing.

Creating the Citrix GOLD Template

Base OS configuration:

  • Create the base VM per my Citrix on VMWare article.
  • Update OS (Windows 2003 R2 SP2) to the latest updates
  • Windows Server Configuration: Using Add/Remove Programs, Windows Components:
  • If installed, remove Remove .NET Frameworks 2.0 & 3.0
  • Application Server: Message Queuing (default)
  • Management and Monitoring Tools: Simple Network Management Protocol
  • Uncheck Internet Explorer Enhanced Security Configuration
  • Terminal Server / Full Security / Use Auto Discovery / Per Device Mode
  • Windows System Configuration: Modify the System Properties:
  • Advanced > Performance Settings > Data Execution Prevention: essential programs
  • Advanced > Performance Settings > Virtual Memory: Initial & Maximum: 6144MB
  • Advanced > Environment Variables: update paths for custom applications
  • Advanced > Error Reporting: Uncheck Force Queue Mode
  • Remote > Check Enable Remote Desktop
  • Copy App Install sets to local Data Drive\INSTALLS

Application Configuration:

  • Run DriveReMap.exe from INSTALLS\PS 4.5 INSTALL directory, assign C to M (will require a reboot)
  • Supporting Applications: Use the content copied to the INSTALLS folder
  • Framework 2.0.50727.42
  • Framework 3.0
  • Frameworks 3.5 SP1
  • Install SNMP Informant & Configure SNMP Settings (if used)
  • Copy any standard tools (including PSKILL, PSEXEC, UPTIME)
  • Install the any viewer Applications: Office, Notepad++, Acrobat, etc.
  • Install Citrix Presentation Server 4.5 for Windows 2003 (assume an existing Farm)
  • Apply Approved Citrix Patches for Presentation Server 4.5
  • Hotfix Roll Up #3
  • Configure Citrix Services (deviation from defaults are listed):
  • Citrix ActiveSync Service: DISABLED
  • Citrix Print Manager Service: Automatic. Set to Run as (DOMAIN ACCOUNT)
  • Citrix XML Service: DISABLED
  • Check for any additional Windows Updates
  • Apply Citrix Registry Changes, as needed, such as:
  • Seamless Windows
  • Citrix Universal Printer
  • System Page Pool Manager
  • System Beep
  • Modify Printers and Print Drivers
  • Remove any unwanted printers and drivers
  • Install any required native print drivers
  • Delete Contents of INSTALLS directory
  • Delete Service Pack Uninstall Files
  • Clear all Event Logs
  • Empty Recycle Bin
  • Stop the Following Services and set to Manual Startup:
  • Citrix IMAService
  • Citrix SMA Service
  • Citrix Print Manager Service
  • Shut down VM

Prepare and Deploy Template

  • Clone VM to Template
  • Deploy VM from Template, select Customize
  • Using SysPrep from customization, assign Machine Name and join Domain
  • Assign Static IP and AltAddr (if necessary)
  • Move computer account to proper OU
  • Run DSMAINT RECREATELHC
  • Set IMA, SMA, and CPSVC to Automatic
  • Reboot Server
  • Verify Farm Connectivity (QFARM)
  • Verify Remote Desktop Connectivity
  • Assign Election Preference and Zone in Presentation Server Console
  • Assign Load Evaluator, Hierarchy, and Published Desktop in Access Management Console
  • Verify ICA Connectivity, local and remote
  • Test/verify pre-configured applications
  • Perform any final application or system updates
  • Publish necessary applications
Some final thoughts: if you are using multiple geographic zones, I recommend having a separately prepared template for each Zone with the proper database connection and zone name pre-configured
Tags: ,

Лимиты VMWARE при включённой опции горячего добавления памяти\процессоров
[info]admin_dm

Operating System

Service Pack

Hot-Add Memory

Hot-Add CPU

Windows Server 2008 Datacenter Edition  x64

R2

Yes

Yes

SP2

Yes

Yes

SP1

Yes

Yes

Windows Server 2008 Datacenter Edition  x86

Unknown

Yes

No

Windows Server 2008 Enterprise Edition  x64

R2

Yes

No

SP2

Yes

No

SP1

Yes

No

Windows Server 2008 Enterprise Edition x86

Unknown

Yes

No

Windows Server 2008 Standard Edition x64

R2

Yes

No

SP2

Yes

No

SP1

Yes

No

Windows Server 2008 Standard Edition x86

Unknown

Yes

No

Windows Server 2008 Web Server x64

R2

Yes

No

SP2

Yes

No

SP1

Yes

No

Windows Serve 2008 Essential Business Server Premium x64

R2

Yes

No

SP2

Yes

No

SP1

Yes

No

Windows Server 2008 Essential Business Server Standard x64

R2

Yes

No

SP2

Yes

No

SP1

Yes

No

Windows Server 2008 Small Business Server Premium

R2

Yes

No

SP2

Yes

No

SP1

Yes

No

Windows Server 2008 Small Business Server Standard

R2

Yes

No

SP2

Yes

No

SP1

Yes

No

Windows Server 2003 Enterprise Edition  x64

Unknown

Yes

No

Windows Server 2003 Enterprise Edition  x86

Unknown

Yes

No

Tags:
  • Leave a comment
  • Add to Memories

Проброс FC и др оптики
[info]admin_dm
http://www.packetlight.com/?CategoryID=171&ArticleID=262

PL-1000E 10 Гбит/c и 8 /10 Гбит/c

PL-1000E - это уникальное многофункциональное устройство, поддерживающее передачу данных по оптоволоконным каналам связи со скоростью 8 Гбит/c, 10 Гбит/c и режимы работы до 10 Гбит/c. Решения PacketLight с оптимальными затратами интегрируют комплект больших технических возможностей в шасси высотой 1U при низком потреблении мощности. PL-1000E является ведущей платформой CWDM/DWDM, которая объединяет разнообразные многоскоростные режимы работы, делая возможным максимальную гибкость и расширяемость для оптоволоконных соединений. Комбинация транспондеров до 10 Гбит/c (sub-10G) и 10 Гбит/c (10G) обеспечивает незаметный переход от режимов до 10 Гбит/c к режимам 10Гбит/c при нулевом времени простоя.

Tags:

Android 4.02 Samsung Google Nexus
[info]admin_dm
Хороший, мощный аппарат.
Недостатки - нет FM радио
Пластиковый корпус
Андроид местами, но редко подвисает
Не предуставновлен Skype ICQ
Память ограничена 13 Gb и нарастить нет возможности (в принципе, этого достаточно)
Нет для шнура зарядки вилки в 220V
Пока ещё мало софта именно под Android 4
Стандартные мелодии какие-то слишком простые

SQL размер таблиц \очистка проблемной
[info]admin_dm
Покажет размер таблиц в DB
SET NOCOUNT ON

DBCC UPDATEUSAGE(0)

-- DB size.
EXEC sp_spaceused

-- Table row counts and sizes.
CREATE TABLE #t
(
[name] NVARCHAR(128),
[rows] CHAR(11),
reserved VARCHAR(18),
data VARCHAR(18),
index_size VARCHAR(18),
unused VARCHAR(18)
)

INSERT #t EXEC sp_msForEachTable 'EXEC sp_spaceused ''?'''

SELECT *
FROM #t

-- # of rows.
SELECT SUM(CAST([rows] AS int)) AS [rows]
FROM #t

Очистка определённой таблицы
DROP TABLE #tTRUNCATE table BAD_TABLE
DELETE FROM BAD_TABLE
Tags:
  • Leave a comment
  • Add to Memories

Kaspersky Antivirus Citrix
[info]admin_dm
http://support.kaspersky.ru/faq/?qid=208636082
http://support.kaspersky.com/win_srv_storage/tech?qid=208283574
 Антивирус Касперского для Windows Servers Enterprise Edition CITRIX (TERMINAL SERVER)

В данной статье приведены рекомендации специалистов компании Citrix по настройке антивирусного приложения, установленного на одном сервере с Citrix Presentation Server. Данные рекомендации адаптированы применительно к Антивирусу Касперского 6.0 для Windows Servers Enterprise Edition.

  • В задаче Постоянная защита файлов установите режим проверки объектов Интеллектуальный режим (команда Свойства контекстного меню задачи Постоянная защита файлов, закладка Режим защиты).

  • В задаче Постоянная защита файлов установите проверку только локальных дисков.


  • В задаче Постоянная защита файлов исключите из проверки файл подкачки (pagefile).


  • В задаче Постоянная защита файлов исключите из проверки папку заданий принтера (Print Spooler directory) для повышения скорости обработки заданий.

    Если при установке Антивируса вы согласились с добавлением некоторых системных папок в доверенную зону (по рекомендациям Microsoft), то этот каталог уже исключен из проверки всеми задачами Антивируса.


  • В задаче Постоянная защита файлов исключите из проверки папку \Program Files\Citrix. В ней хранится кэш доступа локальных хостов и база данных Resource Manager.


  • При использовании сквозной проверки подлинности (ICA pass-through connections), на клиентских машинах исключите из проверки локально установленным антивирусным приложением папку Presentation Server Client и папку кэша для растровых изображений (Documents and Settings\<учетная _запись>\Application Data\ICAClient\Cache).


  • Если пользователи соединяются с сервером в режиме публикации рабочего стола, то, с целью повышения скорости работы клиентов сервера, в контекстном меню узла Антивирус Касперского вызовите команду Свойства, в открывшемся окне перейдите на закладку Дополнительно и снимите флаг Показывать значок приложения в панели задач.


  • В доверенной зоне Антивируса Касперского отключите проверку файлов, к которым осуществляется доступ во время операций резервного копирования (установите флаг Не проверять файловые операции резервного копирования  на закладке Доверенные процессы).

Специалисты компании Citrix рекомендуют прежде, чем установить антивирусное приложение на основной сервер, провести полный цикл тестирования на тестовом стенде.

  • Set the task Real-time file protection to scan objects in Smart mode (right-click the task Real-time file protection, select Properties, tab General).


  • Set the task Real-time file protection to scan local disks only.


  • Exclude pagefile from scan in the task Real-time file protection.


  • Exclude Print Spooler directory from scan in the task Real-time file protection. Tasks will be processed faster in this case.


  • If you agreed to add certain system folders into trusted zone during Anti-Virus installation (Microsoft recommendations), this folder is already excluded from scan in all Anti-Virus tasks.


  • Exclude the folder \Program Files\Citrix from scan in the task Real-time file protection. This folder houses access cache for local hosts and Resource Manager database.


  • If you are using ICA pass-through connections, exclude folders Presentation Server Client and Documents and Settings\<account_name>\Application Data\ICAClient\Cache (bitmap images folder) from scan by local Anti-Virus on client hosts.


  • If users connect to server by RDP, delete the value Anti-Virus system tray load indicator (kavtray.exe) from registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Run on the server to raise server clients performance.


  • Disable scan of files accessed during backup operations in Kaspersky Anti-Virus trusted zone (check the box Do not monitor file activity of the specified processes on the tab Trusted processes).

    You should also exclude from scan the following files:

    • <sytemroot>windows\system32\drivers\BNNS.sys
    • <sytemroot>windows\system32\drivers\BNNF.sys
    • <sytemroot>windows\system32\drivers\BNPort.sys
    • <sytemroot>windows\system32\drivers\BNNS.sys
    • <sytemroot>windows\system32\drivers\bnistack.sys
  • Add the process BNDevice.exe into the trusted list.

HP Printer Administrator Resource Kit
[info]admin_dm


HP Printer Administrator Resource Kit
 


•HP Driver Configuration Utility

•HP Driver Deployment Utility
•HP Managed Printing Administrator
•HP UPD Active Directory Administrative template

Для настройки\установки драйверов HP

Tags:

VMWARE UNINSTALL VMware TP print processor + drivers
[info]admin_dm
- cd "%PROGRAMFILES%"\VMware\VMware Tools\"

- uninstall TPAutoConnect service
TPAutoConnSvc.exe /uninstall

- remove TPAC components
del /F TPAutoConnect.exe
del /F TPAutoConnSvc.exe

- cd "%WINDIR%\system32\"

- unregister TPSVC
regsvr32 /u TPSvc.dll

- unregister TP Portmonitor
rundll32 TPVMMon,InstHelper uninstall

- remove TP printer drivers
rundll32 printui.dll,PrintUIEntry /dd /m "TP Output Gateway"
rundll32 printui.dll,PrintUIEntry /dd /m "TP Output Gateway PS"

- stop spooler
net stop spooler

- remove TP print processor
run "regedit" + remove this key
HKLM\ SYSTEM\ CurrentControlSet\ Control\ Print\ Environments\
Windows NT x86\ Print Processors\ tpwinprn

- restart spooler
net start spooler

- remove all remaining TP components
del /F "%WINDIR%\system32\TPSvc.dll"
del /F "%WINDIR%\system32\TPVMMon.dll"
del /F "%WINDIR%\system32\TPVMMonUI.dll"
del /F "%WINDIR%\system32\TPVMW32.dll"
del /F "%WINDIR%\system32\TPVMMondeu.dll"
del /F "%WINDIR%\system32\TPVMMonUIdeu.dll"
del /F "%WINDIR%\system32\TPVMMonjpn.dll"
del /F "%WINDIR%\system32\TPVMMonUIjpn.dll"
del /F "%WINDIR%\system32\spool\prtprocs\w32x86\TPWinPrn.dll"

- remove TP registry key
run "regedit" + remove this
Tags: ,

Citrix WMI
[info]admin_dm

 recompile WMI ,
•Windows WMI
cd /d %windir%\system32\wbem
for %i in (*.dll) do RegSvr32 -s %i
for %i in (*.exe) do %i /RegServer
 
•Citrix WMI
cd C:\Program Files\Citrix\System32\Citrix\WMI
for /f %s in (‘dir /b *.mof *.mfl’)do mofcomp %s

Tags:

Exclude GPO
[info]admin_dm
Exclusion list - directoriesВключено
Exclusion list:
$Recycle.Bin
AppData\Local\
AppData\Local\Google\Chrome\User Data\Default\Cache
AppData\Local\Google\Chrome\User Data\Default\Plugin Data
AppData\LocalLow
AppData\Roaming\Citrix\PNAgent\AppCache
AppData\Roaming\Citrix\PNAgent\Icon Cache
AppData\Roaming\Citrix\PNAgent\ResourceCache
AppData\Roaming\ICAClient\Cache
AppData\Roaming\Macromedia\Flash Player\#SharedObjects
AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
AppData\Roaming\Microsoft\Windows\Start Menu
AppData\Roaming\Sun\Java\Deployment\cache
AppData\Roaming\Sun\Java\Deployment\log
AppData\Roaming\Sun\Java\Deployment\tmp
%USERPROFILE%\Application Data\VMware; %USERPROFILE%\Desktop; %USERPROFILE%\Start Menu; %USERPROFILE%\Application Data\Microsoft; %USERPROFILE%\Application Data\Citrix; %USERPROFILE%\Application Data\SalesLogix\MailMerge; %USERPROFILE%\My Documents; %USERPROFILE%\Application Data; Application Data\Microsoft; Application Data\Citrix; Start Menu; My Documents; Desktop; Cookies
Можно ввести несколько имен папок, разделенных точкой с запятой,
Tags: ,

bblack screen windows terminal service 2008 r2
[info]admin_dm
http://support.microsoft.com/kb/981156/en-us
http://support.microsoft.com/kb/2614066/en-us
http://support.microsoft.com/kb/2614066/en-us
http://support.microsoft.com/kb/2647409/en-us;
http://support.microsoft.com/kb/2649422/en-us .
Tags: ,

Добавление в локальные администраторы группы в домене
[info]admin_dm
'*******************************************************************
'  AddLocalAdmins.vbs
'  Скрипт добавляет доменную группу в группу
'  локальных администраторов рабочей станции
'  Запускать с правами системной учетной записи
'  или с правами алминистатора рабочей станции
'
'  изменяемые параметры:
'  DomainName - имя домена
'  DomainGroupName - имя доменной группы
'
'  параметр, который менять не надо:
'  AdminGroupSID="S-1-5-32-544" - SID группы локальных админов
'
'*******************************************************************

    DomainName="firma"
    DomainGroupName="Workstations Admins"
    AdminGroupSID="S-1-5-32-544"
   
    Set WshNetwork = WScript.CreateObject("WScript.Network")

' ******** Определение имени компьютера
    ComputerName=WshNetwork.ComputerName

' ******** Выбор всех локальных групп
    Set GroupComputer = GetObject("WinNT://" & ComputerName)
    GroupComputer.Filter = Array("Group")

' ******** Поиск группы локальных админов
    For Each Group In GroupComputer
        sid = Group.Get("objectSID")
        gSID = "S-1-5-"&Convert(4,7)&"-"&Convert(0,3)
        If gSID = AdminGroupSID Then
          ' ******** Проверяем есть ли тут уже доменная группа
          Find = False
          Group.Members.filter = Array("Group")
          For Each Grp In Group.Members
            Find = (Grp.Name = DomainGroupName)
            If Find Then Exit For
          Next
          ' ******** Если нет, то добавляем
          If not Find Then Group.Add ("WinNT://" & DomainName & "/" & DomainGroupName)
          Exit For
        end if
    Next

' ******** Функция для конверта SID в String
    Function Convert(u,l)
       Tmp = ""
       For x = UBound(sid)-u to UBound(sid)-l Step -1
           b = AscB(MidB(sid, x + 1))
           Tmp = Tmp & Hex(b \ 16) & Hex(b And 15)
       Next
       Convert = Clng("&H" & Tmp)
    End Function
  • Leave a comment
  • Add to Memories

Outlook правила
[info]admin_dm

Если подключён допольнительный ящик
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Preferences]
"DelegateSentItemsStyle"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Options\General]
"DelegateWastebasketStyle"=dword:00000004

Tags:

Чичтка профилей Citrix Terminal Services
[info]admin_dm
delprof
http://www.microsoft.com/download/en/details.aspx?id=5405

Или батник
for /f %a in (profile.txt) do (rd /s /q %SYSTEMROOT%\Profile\%a)
Tags:

Статистика почтового ящика больше МБ
[info]admin_dm
get-mailbox | Get-MailboxStatistics | where {$_.TotalItemSize -ge 600MB}
Tags: ,
  • 7
  • Leave a comment
  • Add to Memories

Скрипт с проверкой изменяет реестр для решения проблем с локальными принтерами
[info]admin_dm
myPrompt = MsgBox("This script will set up your printers for use with Terminal Services",vbOKCancel,"Setup Printers for Terminal Services?")
If myPrompt = 1 Then
Set WshShell=WScript.CreateObject("WScript.Shell")
keypath ="HKCU\Software\Microsoft\Terminal Server Client\Default\AddIns\RDPDR\FilterQueueType"
WshShell.RegWrite keypath, -1, "REG_DWORD"
If WshShell.RegRead(keypath) = "-1" Then
MsgBox "Setup was successful",,"Success"
Else
MsgBox "Sorry A Problem Was Encountered" & vbCrLf & "Make sure you have permission to write to the registry.",,"Something went wrong"
End If
End If
WScript.Quit
  • Leave a comment
  • Add to Memories

Script restart Windows 2008 R2
[info]admin_dm
C:\WINDOWS\System32\shutdown.exe /r /f /t 0 /d p:0:0

AT SMS команды
[info]admin_dm
http://www.developershome.com/sms/
Tags:

Scripts Collection от activxperts и spiceworks
[info]admin_dm
http://www.activxperts.com/activmonitor/windowsmanagement/adminscripts/
http://community.spiceworks.com/scripts


Scripts Collection

Please click on one of the following categories:

Tags:

PS завершение нежелательного процесса
[info]admin_dm
get-process | ? { $_.Description -match "%ApplicationName%" } | Stop-Process -Force
Tags:
  • Leave a comment
  • Add to Memories

Manual uninstall procedures for Symantec NetBackup
[info]admin_dm

Manual uninstall procedures for Symantec NetBackup (tm) 6.x and 7.x

Article: TECH87262 | Created: 2009-01-13 | Updated: 2011-01-01 | Article URL http://www.symantec.com/docs/TECH87262
Article Type
Technical Solution

Product(s)

Environment

Languages

Problem


Manual uninstall procedures for Symantec NetBackup (tm) 6.x and 7.x


Solution


These procedures are to be followed only under the following circumstances...
  • When the normal method of uninstall using Add-Remove Program fails.
  • When the file-system and the registry needs to be cleaned up after a failed installation of the product.
  • Uninstall using Add-Remove has been done successfully, yet some other product is reporting a presence of Veritas NetBackup on the system.

Phase 1 of Manual Uninstall
--------------------------------------------------------------------------------
These steps are for a Master server and so may contain registry keys that are not present on the Media server / client, simple ignore those keys that cannot be found.

NOTE: This was created from a former master server so some of the keys may not exist in your installation!

It is necessary to take a backup of the Registry before proceeding with these procedures. (File >> Export)
The backup reg file needs to be saved to a network location. (not on the local drive)
Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.

Perform registry clean-up
HKEY_LOCAL_MACHINE\SOFTWARE\Veritas
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
- find all folders containing Veritas entries

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\NetBackup Bin
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\NetBackup Extensions
- both may not be there

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{F3648D65-5EE7-11D3-93DD-00105A1E3D87}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- Delete the Job Tracker start value if exists

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
- Remove all references to Veritas DLLs

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2012FBAE-FC4E-447C-9BF3-A4E2DED845D4}
-----------------------------------------------------------------

** The following should not exist.
** If they do, you need to modify the permissions to allow for deletion.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NBDBD
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDMPMOVERLISTENER
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETBACKUP_DATABASE_MANAGER
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETBACKUP_DEVICE_MANAGER
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETBACKUP_INET_DAEMON
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETBACKUP_REQUEST_DAEMON
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETBACKUP_VOLUME_MANAGER

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\
NetBackup
NetBackup ACS Daemon
NetBackup AVR Daemon
NetBackup Client Service
NetBackup Database Manager
NetBackup Device Manager
NetBackup Request Daemon
NetBackup RSM Daemon
NetBackup Tape Manager
NetBackup TC4 Daemon
NetBackup TC8 Daemon
NetBackup TL4 Daemon
NetBackup TL8 Control Daemon
NetBackup TL8 Daemon
NetBackup TLD Control Daemon
NetBackup TLD Daemon
NetBackup TLH Control Daemon
NetBackup TLH Daemon
NetBackup TLM Daemon
NetBackup TS8 Daemon
NetBackup TSD Daemon
NetBackup TSH Daemon
NetBackup Volume Manager

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBackup Database Manager
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBackup Device Manager
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBackup INET Daemon
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBackup Request Daemon
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBackup Volume Manager
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSP

Perform File system clean-up
** CAUTION ** Only delete the following 3 directories if you have NO other Veritas Software on the system
C:\Program Files\Common Files\VERITAS
C:\Program Files\Common Files\VERITAS Shared
C:\<Install Path>\VERITAS\NetBackup
(If the previous installation was on a drive other than the C drive then check for above folders on that drive.)


C:\Winnt\Installer\
- Within this directory is the MSI Package that needs to be cleaned out.
- Hover your mouse over each MSI to locate the NetBackup package(s)
- Check each of the sub directories for NetBackup Icons and delete these directories as well
-----------------------------------------------------------------------------------------------------------------------------------------------------
Phase 2 of Manual Uninstall

1. Download the Windows Installer CleanUp Utility from this link ... <link removed by Microsoft>
2. Install it on local drive and then launch it.
3. Launch Control Panel >>  Add/remove programs.
4. Make sure Veritas Netbackup / Maintenance pack is not listed. If found listed then remove it. (It may not go)
5. Then launch the MSI CleanUp Utility (see below). If Veritas Netbackup is found listed, remove it.
6. If Netbackup Maintenance pack is listed, remove it.
Guidelines: Something that does not show up in the Add-Remove and yet shows up here would make it eligible for removal.
(Figure 1)
Reboot the server.

Proceed with these procedures only if you wish to attempt a fresh install of the product:
1. Delete the contents of this folder ... C:\Documents and Settings\<logged_user>\Local Settings\Temp
(Do not delete the temp directory!!)
2. Temporarily disable the Anti-virus program.
3. Install Netbackup using the setup files of version 6.x or 7.x . These files should be residing on local drive
(avoid doing the install from a UNC path or using a Terminal session)
4. If the installation fails the support technician would need the NetBackup_Install_xxxx.log and the server.log files for analysis.
5. Install the latest version of Windows installer from the links below and retry NBU installation

Windows 2000 compatible - Windows Installer 3.1 Redistributable (v2)
<http://www.microsoft.com/downloads/details.aspx?FamilyID=889482FC-5F56-4A38-B838-DE776FD4138C&displaylang=en>

Windows Server 2003; Windows Server 2008; Windows Vista; Windows XP compatible - Windows Installer 4.5 Redistributable
<http://www.microsoft.com/downloads/details.aspx?FamilyId=5A58B56F-60B6-4412-95B9-54D056D6F9F4&displaylang=en>
Tags:

Проверка почтовой квоты
[info]admin_dm
'==========================================================================
'checkmailboxquotas.vbs /f:c:\docs\Quotas.txt
'
' NAME: CheckMailboxQuotas.vbs
'
' AUTHOR: Bharat Suneja , Exchangepedia
' DATE  : 12/15/2006
'
' COMMENT:
'Checks users' mailbox quotas if set individually, else checks quotas on Mailbox Store
'and on any Mailbox Store policies (System Policies) that apply mailbox limits to a
'Store. Output to file using /f: switch with filename/path - e.g.
'checkmailboxquotas.vbs /f:c:\docs\Quotas.txt
'Suppress console output using /s switch - combine with output to file.
'Help with /help switch.
'==========================================================================
'Pickup Named Arguments
Set colNamedArguments = WScript.Arguments.Named
strOutputFile = colNamedArguments.Item("f")
strNoConOutput = colNamedArguments.Item("s")
strHelp = colNamedArguments.Item("help")

'Detect help and write help text to console
WriteHelp

Const Textmode = 1

'Get AD Path
Set objRootDSE = GetObject("LDAP://rootDSE")
strDomainContext = objRootDSE.Get("defaultNamingContext")
'WScript.Echo "strDomainContext: " & strDomainContext  '#debug remove
strADsPath = "LDAP://" & objRootDSE.Get("defaultNamingContext")
Set objDomain = GetObject(strADsPath)
Wscript.Echo strADsPath

'Setup ADODB connection
Set objConnection = CreateObject("ADODB.Connection")
objConnection.Open "Provider=ADsDSOObject;"
Set objCommand = CreateObject("ADODB.Command")
objCommand.ActiveConnection = objConnection    

'Get Mailbox Stores - msExchPrivateMDB
'Execute search command to look for Organization
    objCommand.CommandText = _
      "<LDAP://CN=Microsoft Exchange,CN=Services,CN=Configuration," & strDomainContext & ">" & ";(&(objectClass=msExchPrivateMDB)(!objectClass=msExchPrivateMDBPolicy))" & ";distinguishedName,name,msExchPolicyList,mDBStorageQuota,mDBOverQuotaLimit,mDBOverHardQuotaLimit" & _
      ";subtree"
      'Execute search to get Recordset
       Set objStoresRS = objCommand.Execute
      
        '# If no mailboxe Stores found
     '   WScript.Echo "AD Search for mailbox stores completed" '#debug remove
       If objStoresRS.RecordCount = 0 Then
          strOutput = strOutput & VbCrLf & "No Mailbox Stores found!"
          WScript.Echo strOutput  
    
        '  WScript.Quit
          Else
          strOutput = strOutput & VbCrLf & "Mailbox Stores found: " & objStoresRS.RecordCount
        '  WScript.Echo strOutput '#debug remove
         
          'Create Dictionary object here
          Set objStoresDictionary = CreateObject("Scripting.Dictionary")
          objStoresDictionary.CompareMode = Textmode
         ' WScript.Echo "Dictionary Created"   '#debug remove

         
         
          'Enumerate Stores
          While Not objStoresRS.EOF
          Set objStore = GetObject("LDAP://" & objStoresRS.Fields("distinguishedName") & "")
          WScript.Echo "Bound to Store: " & objStore.cn
          strStoreNameDictEntry = objStore.cn    'Get Store CN for Dictionary
         
        
         
              'Check Store for Policy
              If IsArray(objStoresRS.Fields("msExchPolicyList")) Then
              WScript.Echo "Store has Policy!" '#debug remove
                  For Each strPolicyDN In objStoresRS.Fields("msExchPolicyList").value
                     Set objPolicy = GetObject ("LDAP://" & strPolicyDN & "")
                     WScript.Echo "Policy Name: " & objPolicy.cn
                    
                     'Check Policy for Quota limits
                         If IsEmpty(objPolicy.mDBStorageQuota) Then  'mDBOverQuotaLimit  mDBOverHardQuotaLimit
                            WScript.Echo "Policy does not have Mailbox Quota"
                              strStoreDictEntry = strStoreDictEntry & "#null"
                            Else
                            WScript.Echo "Policy Mailbox Quota: " & objPolicy.mDBStorageQuota
                            strStoreDictEntry = strStoreDictEntry & "#" & objPolicy.mDBStorageQuota
                         
                            End If
                           
                          If IsEmpty(objPolicy.mDBOverQuotaLimit) Then  '  mDBOverHardQuotaLimit
                               WScript.Echo "Policy does not have Mailbox Over Quota Limit"
                                 strStoreDictEntry = strStoreDictEntry & "#null"
                            Else
                            WScript.Echo "Policy Mailbox Over Quota Limit: " & objPolicy.mDBOverQuotaLimit
                              strStoreDictEntry = strStoreDictEntry & "#" & objPolicy.mDBOverQuotaLimit
                            End If
                                                       
                          If IsEmpty(objPolicy.mDBOverHardQuotaLimit) Then  '
                               WScript.Echo "Policy does not have Mailbox Over Hard Quota Limit"
                                 strStoreDictEntry = strStoreDictEntry & "#null"
                            Else
                            WScript.Echo "Policy Mailbox Over Hard Quota Limit: " & objPolicy.mDBOverHardQuotaLimit
                              strStoreDictEntry = strStoreDictEntry & "#" & objPolicy.mDBOverHardQuotaLimit
                            End If
                             'End Policy Quota Check
                              
                                    strStoreDictEntry = strStoreDictEntry & "#Policy" & "#" & objPolicy.cn
                                    objStoresDictionary.Add strStoreNameDictEntry, strStoreDictEntry
                                   ' WScript.Echo "Dict count: " & objStoresDictionary.Count
                      
                    
                     Next  'Move to Next Policy
                      
              Else
              WScript.Echo "#No Policy" '#debug remove
              'Check Store Quotas Here
             
                      If IsEmpty(objStore.mDBStorageQuota) Then  'mDBOverQuotaLimit  mDBOverHardQuotaLimit
                            WScript.Echo "Store does not have Mailbox Quota"
                              strStoreDictEntry = strStoreDictEntry & "#null"
                            Else
                            WScript.Echo "Store Mailbox Quota: " & objStore.mDBStorageQuota
                              strStoreDictEntry = strStoreDictEntry & "#" & objStore.mDBStorageQuota
                            End If
                           
                          If IsEmpty(objStore.mDBOverQuotaLimit) Then  '  mDBOverHardQuotaLimit
                               WScript.Echo "Store does not have Mailbox Over Quota Limit"
                                 strStoreDictEntry = strStoreDictEntry & "#null"
                            Else
                            WScript.Echo "Store Mailbox Over Quota Limit: " & objStore.mDBOverQuotaLimit
                              strStoreDictEntry = strStoreDictEntry & "#" & objStore.mDBOverQuotaLimit
                            End If
                                                       
                          If IsEmpty(objStore.mDBOverHardQuotaLimit) Then  '
                               WScript.Echo "Store does not have Mailbox Over Hard Quota Limit"
                                 strStoreDictEntry = strStoreDictEntry & "#null"
                            Else
                            WScript.Echo "Store Mailbox Over Hard Quota Limit: " & objStore.mDBOverHardQuotaLimit
                              strStoreDictEntry = strStoreDictEntry & "#" & objStore.mDBOverHardQuotaLimit
                            End If
                             'End Store Quota Check
                           
                            strStoreDictEntry = strStoreDictEntry & "#Store#"
                            WScript.Echo "dictStoreNameDictEntry: Key:" & strStoreNameDictEntry & " - strStoreDictEntry: " & strStoreDictEntry
                               objStoresDictionary.Add strStoreNameDictEntry, strStoreDictEntry

                           
             
              End If  'End Check for Policy
             ' WScript.Echo "DictionaryEntry: " & strStoreDictEntry  '#debug remove
              WScript.Echo "Stores in Dictionary: " & objStoresDictionary.Count
              strStoreNameDictEntry = Null
              strStoreDictEntry = Null
             
          WScript.Echo "----------------------"
          
          objStoresRS.MoveNext
          Wend
          End If    
          '-----------------------------------------------------------------------------------------------------------------------------------
         
          'Part 2 of script - checks users
          'Execute search command to look for Organization
    objCommand.CommandText = _
      "<" & strADsPath & ">" & ";(&(objectClass=user)(homeMDB=*)(!CN=SystemMailbox{*}))" & ";distinguishedName,name,mDBStorageQuota,mDBOverQuotaLimit,mDBOverHardQuotaLimit" & _
      ";subtree"
      'Execute search to get Recordset
       Set objUsersRS = objCommand.Execute
       strOutput = strOutput & VbCrLf & strTitle & VbCrLf &  "===================================="
      
       '# If no mailboxes found
       If objUsersRS.RecordCount = 0 Then
          WScript.Echo "No mailboxes found!"
        
         ' WriteFile
          WScript.Quit
          Else
                strOutput = strOutput & VbCrLf & "Mailboxes found: " & objUsersRS.RecordCount
                strOutput = strOutput & VbCrLf &  "--------------------------" & VbCrLf
                strOutput = strOutput & "All limits are in Kilobytes (KB)" & VbCrLf
                strOutput = strOutput & "User#Store#Limit#Stop Send (mDBOverQuota)#Stop Receive (mDBOverHardQuotaLimit)#Set On#Policy Name" & VbCrLf
                  While Not objUsersRS.EOF
                
                     '# Check if mailbox bypasses Store/Policy limits
                      Set objUser = GetObject("LDAP://" & objUsersRS.Fields("distinguishedName") & "")
                     
                      'Get users' homeMDB
                      strHomeMDB = objUser.homeMDB
                      Set objHomeMDB = GetObject("LDAP://" & strHomeMDB & "")
                      strHomeMDBCn = objHomeMDB.cn
             
                          '# Check if User does not have default limits (does not bypass Store/Policy)
                             If objUser.mDBUseDefaults Then
                                strUserStatus = strUserLimit & objUser.displayName & "#"
                                    'Check Dictionary for Store
                                    If objStoresDictionary.Exists(strHomeMDBCn) Then
                                       ' WScript.Echo "Exists"
                                        strToAdd =strHomeMDBCn &  objStoresDictionary.Item(strHomeMDBCn)
                                       ' WScript.Echo "strToAdd: " & strToAdd
                                       strUserStatus = strUserStatus & strToAdd
                                     
                                        Else
                                        WScript.Echo "Store does not exist in Dictionary"
                                       
                                        End If
                                    
                                    
                                       
                                       
                               
                               
                               
                             Else
                               strUserStatus = strUserLimit & objUser.displayName & "#" & strHomeMDBCn & "#"
                            
                              'Check users for individual limits
                               If IsEmpty(objUser.mDBStorageQuota) Then  '  mDBOverHardQuotaLimit
                               strUserLimit = strUserLimit & "null#"
                               
                            Else
                             strUserLimit = strUserLimit &  objUser.mDBStorageQuota & "#"
                            End If
                            
                            If IsEmpty(objUser.mDBOverQuotaLimit) Then  '  mDBOverHardQuotaLimit
                              strUserLimit = strUserLimit & "null#"
                               
                            Else
                             strUserLimit = strUserLimit &  objUser.mDBOverQuotaLimit & "#"
                            
                            End If
                                                       
                          If IsEmpty(objUser.mDBOverHardQuotaLimit) Then  '
                                strUserLimit = strUserLimit & "null#"
                               
                            Else
                             strUserLimit = strUserLimit & objUser.mDBOverHardQuotaLimit & "#"
                          
                            End If
                            strUserLimit = strUserLimit & "User#"
                             
                              End If 'Ends Bypass Check  
                              strOutput = strOutput & strUserStatus  &  strUserLimit & VbCrLf
                        
                       'Empty variables here
                       strUserLimit = Null
                       strToAdd = Null
                       strHomeMDBCn = Null
                       objUsersRS.MoveNext  'Move to next user
                      
                 Wend   'End While EOF for UsersRS
                  WriteCon
              WriteFile
         
          End If                                      
                       
         
         
                        '=======================================================
              '  FUNCTIONS
              '=======================================================
             
              Sub WriteFile
              'Open new text file, write info, close file
                If IsEmpty(strOutputFile) Then
                   WScript.Echo "No file output"
                 Else
                     Set objFSO = CreateObject("Scripting.FileSystemObject")
                     Set objFile = objFSO.CreateTextFile(strOutputFile)
                     'Write Stuff
                    objFile.WriteLine strOutput
                    'Close text file
                    objFile.Close
                    End If
                  End Sub
           
                  '---------------------------------
      'SUB Write Console
       Sub WriteCon
          If Not colNamedArguments.Exists("s") Then
          WScript.echo strOutput
          Else
          WScript.Echo "No console output"
          End If
       End Sub
      
            '------------------
           
           
                 SUB WriteHelp
       If colNamedArguments.Exists("help") Then
          strHelpText = "USAGE: showMailboxQuotas.vbs" & VbCrLf & "OPTIONAL Arguments: /s:y   - no console output" & VbCrLf & _
          "/f:Output_File_Name.txt - writes output to txt file in the argument" & VbCrLf & "/help - help text" & VbCrLf & _
          "showMailboxQuotas.vbs /f:c:\MailboxLimits.txt /s:y - produces " & VbCrLf & "file MailboxLimits.txt " & " and no console output"
       WScript.Echo strHelpText
       WScript.Quit
       End If
       End Sub  
Tags: ,

Горячее добавление памяти и процессоров в VMWARE
[info]admin_dm

Enable Hot Add CPU and Memory in vSphere

In vSphere, there is a new feature, hot add memory and CPU. This is very cool as downtime can be avoided which is, at least in my company, very helpful during daily operations. This feature is not enabled by default. To enable these features, do the following:

  1. Make sure the virtual machine hardware is upgraded to version 7, if it is not, then right click the VM and choose 'Upgrade Virtual hardware'. You can find the hardware version by clicking on the 'Summary' tab.


  2. Go to edit settings for the VM, then the options tab, under 'Advanced', select 'Memory/CPU hotplug' and in the pane to the right, enable the memory hot add and CPU hot plug features. This change must be made when the VM is powered down. If the VM is running, the options will be greyed out as in the image below.

Hot add memory and CPU is not supported by all OS's, Windows 2008 Enterprise 64 bit edition is one of the suppoted OS's, for a complete list, take a look at the Guest OS Guide.
Tags:
  • Leave a comment
  • Add to Memories

Quota Permissions in Active Directory based on Group membership
[info]admin_dm
01.' Modify Group Quota Settings
03.' Modified by N3bev!
04.' Force the script to use only defined variables.
05.Option Explicit
06.Dim sUserName, oGroup, sDomain, sDrive, sGroup, sThreshold, sLimit
07.Dim WshNetwork, colDiskQuotas, oMember, oUser
08.
09.' Print the instructions for the user.
10.If WScript.Arguments.Count &lt;4 Then Call Help
11.
12.' Define the variables.
13.
14.sGroup = WScript.Arguments(0)
15.sDrive = WScript.Arguments(1)
16.sThreshold = cint(WScript.Arguments(2)) * 1024 * 1024
17.sLimit = cint(WScript.Arguments(3)) * 1024 * 1024
18.
19.Set WshNetwork = WScript.CreateObject("WScript.Network")
20.sDomain = WshNetwork.UserDomain
21.
22.' Create a quota collection and initialize its connection
23.' to the selected drive.
24.
25.Set colDiskQuotas = CreateObject("Microsoft.DiskQuota.1")
26.colDiskQuotas.Initialize sDrive&":\", True
27.colDiskQuotas.QuotaState = 2
28.WScript.Echo "Setting Quotas for " & sDrive & ":\"
29.WScript.Echo "==============================="
30.WScript.Echo "Warning Level: " & WScript.Arguments(2) & "MB, Limit: " & WScript.Arguments(3) & "MB."
31.WScript.Echo "-------------------------------"
32.' Connect to the object representing the group.
33.Set oGroup = GetObject _
34.("WinNT://" & sDomain & "/" & sGroup &", group")
35.
36.' Apply the quota to each member of that group.
37.For each oMember in oGroup.Members
38.WScript.Echo "Processing: " & oMember.Name
39.sUserName = oMember.Name
40.Set oUser = colDiskQuotas.AddUser(sUserName)
41.Set oUser = colDiskQuotas.FindUser(sUserName)
42.oUser.QuotaThreshold = sThreshold
43.oUser.QuotaLimit = sLimit
44.Next
45.
46.Sub Help
47.WScript.Echo "Instructions: This script sets up disk quotas for a group on a named Disk."
48.WScript.Echo "Example Usage: cscript AD_Group.vbs '07.5DT' D 100 110 (Where 07.5DT is the group, D is the drive, 100MB is the warning threshold, and 110MB is the quota limit)"
49.WScript.Quit
50.End Sub
Tags:
  • Leave a comment
  • Add to Memories

FTPS IIS Windows 2008
[info]admin_dm

FTP over SSL in IIS 7.5, Windows server 2008 R2 and Filezilla Client

FTP over SSL is named FTPS, FTP-SSL and FTP/S is a new feature of Microsoft FTP for IIS 7.0 and 7.5 its freshly introduced support for SSL/TLS.

Testing this new feature I configured my FTP site with SSL:
In advanced settings:
When I try to open my FTP site. Ohhhh, suprise Microsoft not have a FTPS client, Intenet Explorer 7 and 8 don't work Error:
534 Policy requires SSL.

Now then I open this FTP site with Filezilla Client 3.3 connecting with FTPS using Explicit SSL/TLS and it work sucessfully.

Tags:

Portqry Утилита для проверки связи, в том чиле UDP порты
[info]admin_dm

PortQryUI – Troubleshoot TCP/IP connectivity issues

Portqry.exe is a command-line utility that you can use to help troubleshoot TCP/IP connectivity issues. Portqry.exe runs on Windows 2000-based computers, on Windows XP-based computers, and on Windows Server 2003-based computers. The utility reports the port status of TCP and UDP ports on a computer that you select.

However, PortqryUI is GUI interface for portqry command line utility.This utility reports the port status of target TCP and User Datagram Protocol (UDP) ports on a local computer or on a remote computer.

Because PortQry is intended as a troubleshooting tool, it is expected that users who use it to troubleshoot a particular problem have sufficient knowledge of their computing environment. PortQry version 2.0 supports the following session layer and application layer protocols:

• Lightweight Directory Access Protocol (LDAP)
• Remote Procedure Calls (RPC)
• Domain Name System (DNS)
• NetBIOS Name Service
• Simple Network Management Protocol (SNMP)
• Internet Security and Acceleration Server (ISA)
• SQL Server 2000 Named Instances
• Trivial File Transfer Protocol (TFTP)
• Layer Two Tunneling Protocol (L2TP)

MORE INFO:
http://support.microsoft.com/default.aspx?scid=kb;en-us;310099

DOWNLOAD:
http://www.microsoft.com/downloads/details.aspx?familyid=8355e537-1ea6-4569-aabb-f248f4bd91d0&displaylang=en

Tags:
  • Leave a comment
  • Add to Memories

Отключение экрана Welcome Internet Explorer 8
[info]admin_dm

Отключение экрана Welcome Internet Explorer 8


  Welcome Screen

After configuring the settings, a new tab window opens automatically, redirecting to Microsoft IE8 Website.

The setup modifies the following registry keys under HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main

  1. REG_DWORD IE8RunOnceLastShown from 0 to 1
  2. REG_DWORD IE8RunOncePerInstallCompleted from 0 to 1
  3. REG_DWORD IE8TourNoShow from 0 to 1
  4. REG_BINARY IE8RunOnceCompletionTime
  5. REG_BINARY Window_Placement

It adds a REG_BINARY key called IE8RunOnceLastShown_TIMESTAMP.

Solution:

There are two ways which can be used to disable it

1. Disabling the setting on the local machine directly.

  1. Open Registry editor (regedit.exe) and navigate to the following key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main
  2. Create a new REG_DWORD value named DisableFirstRunCustomize
  3. Set its value data to 1.
  4. Exit the Registry Editor.

NOTE: We can also use the Group Policy Management Console to create this particular registry key and populate it to all clients.

2. Using Group Policy Editor

  1. Launch the Group Policy Editor (gpedit.msc)
  2. Navigate to the following branch:

Computer Configuration | Administrative Templates | Windows Components | Internet Explorer

  1. Double-click “Prevent performance of First Run Customize Settings”
  2. Set the value to Enabled and make the choice in the drop-down below. The details about this setting are as follows (taken from the gpedit console)

This policy setting prevents performance of the First Run Customize settings ability and controls what the user will see when they launch Internet Explorer for the first time after installation of Internet Explorer.

If you enable this policy setting, you must make one of two choices:

1: Skip Customize Settings, and go directly to the user’s home page.

2: Skip Customize Settings, and go directly to the "Welcome to Internet Explorer" Web page.

If you disable or do not configure this policy setting, users go through the regular first run process.

  1. Click Apply, close the dialog and exit the Group Policy Editor.
  2. Perform a gpupdate /force for the settings to apply on the machine.
Tags: ,
  • Leave a comment
  • Add to Memories

Почитать
[info]admin_dm
http://social.technet.microsoft.com/wiki/contents/articles/275.wiki-technologies-portal-en-us.aspx#R
http://technet.microsoft.com/en-us/library/dd736539%28WS.10%29.aspx
http://social.technet.microsoft.com/wiki/contents/articles/6817.remote-desktop-services-performance-and-tuning-in-windows-server-2008-r2.aspx
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=17190
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=23236
Tags:

Exchange 2010 права на календарь
[info]admin_dm
Exchange 2010 allows us to use power shell for assigning calendar permissions. You can add Reviewer, Editor and all other permission types remotely without moving from your chair.

To assign Calendar Editor permission use the following command:

Set-MailboxFolderPermission -Identity Granter_Username:Calendar -User ‘Granted_username’ -AccessRights Editor

You can review calendar permissions with following PS command

Get-MailboxFolderPermission -Identity Granter_Username:calendar

You can use the same PS command to provide all available access rights.
Just replace the attribute after -AccessRights

Tags:

You are viewing [info]admin_dm's journal