Problem:  Exchange Management Console in Exchange 2010 will not open and references a server that is down or has been removed from the environment.

Error Verbiage: Initialization Failed

The following error occurred while attempting to connect to the specified Exchange server 'exchange.customer.ch:

The attempt to connect to http://exchange.contoso.com'/powershell using 'Kerberos' authentication failed: Connecting to the remote server failed with the following error message : WinRM cannot process the request. The following error occurred while using Kerberos  authentication: The network path was not found.

Source 1, mostly seen on Admin Terminal Servers (Work Server for Admin)

We did see this on Servers where the Management Console from 2007 and 2010 were mixed.

Solution a:

1. Close all MMC/EMC instances before proceeding.
2. Open Registry Editor (regedit) as the user you run the EMC under.
3. Go to

   
   HKEY_CURRENT_USER\SOFTWARE\Microsoft\ExchangeServer\v14\AdminTools

4. Look for value NodeStructureSetting.
5. If it is there, back it up and then remove it.

Solution b:

1. Close all MMC/EMC Instances before proceeding.
2. Open Powershell or Powershell IDE as the user you run the EMC under and execute the following command:.

Remove-ItemProperty -Path HKCU:\Software\Microsoft\ExchangeServer\v14\AdminTools\ -Name NodeStructureSettings

• Close Powershell

After performing either of the methods above to remove the registry entry you should be able to open the Exchange Management Console and it will discover another Exchange server and connect.

Source 2, two form Authenticator plugin in IIS on Powershell Directory

We have also seen cases where the some kind of two form authenticator like RSA/VASCO/Safeword IIS-plugins blocks the requests. Please ask the supplier of the security software on what you can do nor not. This will be even more specials with Exchange 2013 because all of the management is done via Web Services.

If you remove the RSA Plugin on the "Powershell" Virtual Directory the GUI works again. However this is no solutions on a WAN-facing CAS Server.

Error you get while you open the Exchange 2010 EMC / GUI Console:

You also have Exchange Powershell Error:

And you are unable to access Exchange Powershell from within the BLUE-Windows_Powershell.

Status:

• Exchange GUI/EMC not opening
• OWA and ECP are running so you can check BRAC permission
• Mail flow is stable and all other services are running
• People have access to Exchange

This was caused by a missing Registry Path entry. I suspect there was a "Service Pack" or "Rollup" installed and not fully

went through (Maybe Missing MSI Sources to other MSP files) and the person did interrupt the setup of the rollup.

Get the Exchange 2010 path from without the \bin\ at the end:

Type path in dos Box

You may also get the path from C:\ExchangeSetupLogs where you see all information.

Regular Path with Exchange on C:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\Setup]

"Servcies"="C:\\Program Files\\Microsoft\\Exchange Server\\V14\\"

This sample customer who has Exchange running on D: drive.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\Setup]

"Servcies"="D:\\Program Files\\Microsoft\\Exchange Server\\V14\\"

Other related Console OPEN Error > Please also read

If you installed Exchange 2007 and 2010 console on same admin client and removed 2007:

http://www.butsch.ch/post/Exchange-Management-Console-in-Exchange-2010-Error-on-CAS.aspx

General startup failures of exchange console:

http://blogs.technet.com/b/exchange/archive/2010/02/04/3409289.aspx

If complete BRA permission is missing:

http://social.technet.microsoft.com/Forums/exchange/en-US/8f9a1881-d66d-4d8a-a6ff-06729a701999/emc-permissions-gone-part-deux?forum=exchange2010

Problem:

Customer has made a fault in configuration of Relay Options (Subnet). You are unable to manage it with GUI.

• You can't see them in GUI or it takes endless because there are some many
• You can delete by Age but not more
• If you can delete by Subject and you have Foreign spam (Asian Chars) you can't delete the special chars like "??????" in Subject.

Solution:

• Open SSH on the Interface
• Connect to the Fortimail with SSH

Use Putty or any other SSH tool to connect to Fortimail with SSH.

execute maintain mailqueue clear age 1d

We had a 100C where this did run 3+ hrs. Finall solution was:

# execute cleanqueue
This operation will remove all email files in queue.
Do you want to continue? (y/n)y

Sample of such infection rates:

Exchange 2010:

452 4.3.1 insufficient system resources (No E-Mail incoming)

Error on Exchange:

"452 4.3.1 insufficient system resources" error message from Exchange

Reason:

The Storage where the Mailbox data is stored is getting full in %-rates or GB.

Exchange 2010 has a built in Resource monitoring. Since VMware the "I Make it small and then I resize" people cause us a lot trouble ;-) Because of their weirdo "Snapshots and not too big storage is expensive" we resize 5 times a week. So Diskpart is a common used tool. Monitoring departments with endless %-rate discussion are adding spice.

Why this error happens on Exchange 2010 / backpressure

Even with "some" amount free on your MDB-files Exchange will CUTOFF the delivery of E-Mails based on statistic value so in % of the total disk. This is a good idea because if real large things could/would happen and he has absolute no space then you have trouble. There is a reason why you put the Transaction Logfiles (Not the Logfiles) on separate LUN/Volumes. So at least you don't lose any emails.

Looks "not" full right? Yes, but it does for Exchange 2010 >

So turning OFF this option I never a good idea. Anyway here is how to do it and then solve Storage problems and resize.

Search and open file EdgeTransport.exe.config with Notepad:

Add or change the option

From:

<add key="EnableResourceMonitoring" value="true" />

To:

<add key="EnableResourceMonitoring" value="false" />

Restart-Service "MSExchangeTransport" (ENG) OR "Microsoft Exchange-Mailuebergabe" (GERMAN)

Then as final step you go to the VMWARE people and hit them ;-) Tell them that you lost CHF 400.- in support compared to CHF 50.- (Prorata) in storage savings.

Tell them to read and understand "ITL Storage and Capacity Planning and Budgeting". If they don't know what ITIL is well then go to bookstore and buy them books.

Product: Netapp Snapdrive Migration from Version. 6.5.0.5474 to 7.0.2.6322.

Product running on it: Exchange 2010 DAG (Cluster components)

Following hotfixes are NEW additional required for Netapp Snapdrive Version 7.0.2.6322 P2 on an Exchange 2010 DAG Mailbox Server.

However all three of them have been Superseded by newer Patches through Microsoft. You are able to select Continue Snapdrive Installation without the above Hotfixes if you install the Updates which replaced the mentioned three.

Our solution would be to:

• install the three Hotfixes mentioned by Netapp FIRST and
• THEN install the newer version mentioned in the MS blog and listed below under NEWER

   

  Some of the newer only replace 2 DLL and the by Netapp Mentioned replace around 30 DLL.

http://support.microsoft.com/kb/2531907/en-us (Superseded by newerhttp://support.microsoft.com/kb/2559392/en-us)

• 2559392 The List Running Processes test fails when you run the Failover Cluster Validation Wizard on a Windows 7-based or Windows Server 2008 R2-based cluster node (NEW)
• 2531907 Validate SCSI Device Vital Product Data (VPD) test fails after you install Windows Server 2008 R2 SP1 (OLD)

http://support.microsoft.com/kb/2520235/en-us (Superseded by newerhttp://support.microsoft.com/kb/2860142/en-us)

• 2860142 Cluster network name resource cannot be brought online when one of the domain controllers is partly Server 2008 R2 (NEW)
• 2520235 "0x0000009E" Stop error when you add an extra storage disk to a failover cluster in Windows Server 2008 R2 (OLD)

http://support.microsoft.com/kb/2494016/en-us (Superseded by newerhttp://support.microsoft.com/kb/2871803/en-us)

• 2871803 "0x0000007E" Stop error when you log off from a Windows Server 2008 R2 SP1-based failover cluster (NEW)
• 2494016 Stop error 0x0000007a occurs on a virtual machine that is running on a Windows Server 2008 R2-based failover cluster with a cluster shared volume, and the state of the CSV is switched to redirected access (OLD)

Infos:

http://blogs.msdn.com/b/taylorb/archive/2011/04/26/kb2531907-validate-scsi-device-vital-product-data-vpd-test-fails-after-you-install-windows-server-2008-r2-sp1.aspx

http://blogs.technet.com/b/yongrhee/archive/2011/05/22/list-of-failover-cluster-windows-server-2008-r2-sp1-hotfixes.aspx

MS Blog reference:

Error:     Event 3144 on APP-V (APPV) client machine

Client:     Microsoft APPV client 4.6 SP1 with up to Hotfix6

The APPV client does not update usage data so you are unable to see which APPV apps are used also in terms of licenses.

The Windows 7 client Shows:

Here is how to solve the Microsoft Bug.

1. Logon to SQL Management Studio and select the APPVIRT table:
2. New SQL Query

    

altertable REPORTING_PACKAGE_INFORMATION

altercolumn package_name nvarchar(256)null

Press Execute Button

Or change this manual by hand:

Select table REPORTING_PACKAGE_INFORMATION

There is also a Stored Procedure mentioned which will allow you to IMPORT the existing PAST History from clients which you may not need and is rather complex because you will have to collect the XML Files from the clients by hand.

http://blogs.technet.com/b/appv/archive/2011/12/01/the-app-v-client-does-not-upload-reporting-data-resulting-with-event-3144-and-error-code-0a-200001f4.aspx

http://blogs.msdn.com/b/sgern/archive/2010/06/18/10027074.aspx

OS:     Server 2012R2, English, Domain Controller

Event:     157

Error:     Disk x has been surprise removed

This is mostly due a Backup Software (Event Windows Backup) which uses VSS-Snapshot. There seems to be no file corruption or loss of Storage.

http://social.technet.microsoft.com/Forums/en-US/9feed539-493a-4fbe-9c75-d5619bedc2a9/disk-0-has-been-surprise-removed-eventid-157?forum=windowsserverpreview

http://blogs.msdn.com/b/ntdebugging/archive/2013/12/27/event-id-157-quot-disk-has-been-surprise-removed-quot.aspx

In our case we had Windows Backup running and it was VSS disconnecting

Products:    Outlook.exe, Apple ITunes, Exchange 2010

Error:        User does not see any Calendar entries. A redo of the Outlook Profile did not solve this.

This is related due a miss configuration within the ITUNES software. There is a subfolder generated under the calendar called _MODCAL****.

1. Got to C:\Users\%useranme%\AppData\Roaming\Apple Computer\
2. Use Folder Options from the Tools menu and select Show hidden files and folders from the View Tab
3. Rename the folder SyncServices as SyncServices.old.
4. Delete this folder SyncServices.old
5. IF you like > Uninstall INTUNES > reboot
6. Give Full Access/Vollzugriff to the account you work in Exchange 2010
7. Open the users mailbox with you admin account
8. Try to Export the _MODCAL**** Folder into a PST if you want to be 100% sure
9. Delete the _MODCAL**** folder

Correct the Folder names in Outlook.exe as User logged in:

Office 2010 (From cmd.exe) (Check your Office Version and path!) (32BIT Office)

cd "C:\Program Files (x86)\Microsoft Office\Office14"

C:\Program Files (x86)\Microsoft Office\Office14> Outlook.exe  /resetfoldernames

C:\Program Files (x86)\Microsoft Office\Office14> Outlook.exe  /resetfolders

Office 2010 (From cmd.exe) (Check your Office Version and path!) (64BIT Office [about 5% of market])

Cd "C:\Program Files\Microsoft Office\Office14"

C:\Program Files\Microsoft Office\Office14> Outlook.exe  /resetfoldernames

C:\Program Files\Microsoft Office\Office14> Outlook.exe  /resetfolders

Reinstall iTUNES :

or try to avoid it by using an INTERNAL Wi-Fi access point and use Activesync (See further reading Microsoft). Do not open Activesync external WAN [Internet] without Certificates (More secure) or an MDM Management solution.

In Windows iTUNES:

Reset the sync history on your computer, which is done via iTunes preferences under the Devices tab for your iTunes preferences.

Next, under the Info tab for your iPhone sync preferences with iTunes below the advanced section, select Calendars for replace info on this iPhone. Select Apply followed by sync.

If you have a local Outlook.exe with no Exchange connected you may use: SCANPST.EXE to fix your local Mail file:

http://support.microsoft.com/kb/272227

MS14-045: Hinweise zum Sicherheitsupdate für Kernelmodustreiber: 27. August 2014

MS14-045: Description of the security update for kernel-mode drivers: August 27, 2014

Problem temporary Fonts file where the API has no permission to change because outside (c:\windows\fonts)

Files with the names Z@*.tmp block the Roaming profile from closing correct after you use Adobe Reader to print a PDF or any other related PDF product. The user is logged on with temporary profile. Extensions used are: .001 / .002 / .003 and so on (As shown in screenshot below).

This is related to all PDF-related products which have a print function and use special fonts in the PDF. With most PDF Software there is a temporary file generated which contains Fonts data when printing. Because of the Patch KB2993651 the software is unable to delete the file afterwards. We have seen this in FREEPDF with GS but also products like Adobe Reader.

Microsoft describes this in their patch bulletin:

Here is how to uninstall the patch silent:

wusa /uninstall /kb:2975331 /quiet /norestart

Solution on a Citrix Server:

• Cleaned up profiles
• Uninstalled KB2993651
• Rebooted server
• Logged in and opened C:\Users\<Username>\Appdata\Local\Temp\<number>\
• Opened a PDF and printed it - watched the Z@*.tmp files be created in temp folder
• Closed Adobe Reader - watched Z@*.tmp files be deleted.
• Logged off - confirmed that the profile was indeed deleted.

On a different server, someone tried installing Adobe Reader 11.0.09 without removing KB2993651 and the issue was still present so .09 did not resolve the issue.

Fehler Deutsches Outlook:

Diese Ordnergruppe ist einem E-Mail Konto zugeordnet. Schliessen Sie zum Entfernen des Kontos zuerst die Registerkarte "Datei".

Problem:

Zusätzliche Mailboxen anderer Benutzer erscheinen und man kann diese nicht entfernen mit schliessen ODER bei den Konto Einstellungen. (Automapping)

http://www.msoutlook.info/question/673

Diese Ordnergruppe ist einem E-Mail Konto zugeordnet. Schliessen Sie zum Entfernen des Kontos zuerst die Registerkarte "Datei".

Die zusätzliche Mailbox ist auch nicht unter Konto Einstellung (Erweitert / Postfächer)

GUI Loesung > Auf dem Exchange ohne Automapping $false Loesung mit Powershell:

Zu der anderen Mailbox gehen welche NICHT mehr erscheinen soll und dann "Den User" Vollzugriff wegnehmen bei welchem

es nicht mehr erscheinen soll. Aufpassen bei technischen Konten wie Backup oder Service. Diese so lassen.

Das Konto wegnehmen bei WELCHEM die Box erscheint > Der User diese aber nicht will.

Outlook schliessen

Eventuell noch ein elevated:

gpupdate /FORCE

Auf dem client machen.

Und weg ist der Ordner:

Several customers had problems with Windows Updates:

• KB 2952664
• KB 2949927
• KB 2995388 (APPV, Frontrange, Filemaker, SNAGIT)
• KB 3000061

Here is how to uninstall the October silent with Batch if you did not study, read inform you and wait ;-)

wusa /uninstall /kb:2952664 /quiet /norestart

wusa /uninstall /kb:2949927 /quiet /norestart

wusa /uninstall /kb:2995388 /quiet /norestart

wusa /uninstall /kb:3000061 /quiet /norestart

We also recommend to carefully study these kind of "Kernel" updates on every Patchday. Always really wait 2 weeks

For those or test them 1 week.

Something to keep an eye on because of really many applications are the XML Updates. I tend to release these slow or after weeks.

Because we also do Deployment (Enteo/Frontrange/SSCM/others) we do NOT push such packages in WSUS.

• Framework 4.0 and 4.5
• new Internet Explorer (Which we do with IEAK)

We did some in WSUS for smaller customer in the past but best way and controlled way is with deployment software.

Keep in mind that you need to adapt GPO in time if you start tom deploy such things. For the Framework 4.0 / 4.5 there

Are 12-15 HOTFIXES which you must request and ARE NOT included in Windows Update or WSUS to get it perfect running In corporate.

Technet Infos:

http://support.microsoft.com/kb/2984972

http://windowsitpro.com/msrc/kb2949927-fails-install-if-bitlocker-disabled

• Event 4002, Exchange 2010 CAS, MSExchange Availability
• Microsoft KB 2992611 (V2) gets re-releases on 19.11.2014
• Microsoft KB 3011780 (V2) gets re-releases on 19.11.2014

   

   

2992611-V2 complete revert the things done before and does not fix the high risky security leak. There are too many Tird party components and even MS Products like Exchange WITH Plugins from Third Party which don't work anymore.

I general the first patch could break all authentications against as example IIS, Exchange, Domain Controllers and Proxy Servers as example.

Remark:

The Event 4002, MSExchange Availability on Exchange 2010 has been there before [example May 2014] (Before release of 2992611). But we see it more often and just in the times range the patch was installed. This mainly in environments with Load Balancers and dedicated CAS-Server for as example Activesync and RSA. (Which is unsupported by MS still ;-)

Bulletin Information:
=====================

MS14-068 - Critical

- https://technet.microsoft.com/library/security/ms14-068 (Link ist extern)
- Reason for Revision: V1.0 (November 18, 2014): Bulletin
  published.
- Originally posted: November 18, 2014
- Updated: November 18, 2014
- Bulletin Severity Rating: Critical
- Version: 1.0


MS14-066 - Critical

- https://technet.microsoft.com/library/security/ms14-066 (Link ist extern)
- Reason for Revision: V2.0 (November 18, 2014): Bulletin revised
  to announce the reoffering of the 2992611 update to systems
  running Windows Server 2008 R2 and Windows Server 2012. The
  reoffering addresses known issues that a small number of
  customers experienced with the new TLS cipher suites that were
  included in the original release. Customers running Windows
  Server 2008 R2 or Windows Server 2012 who installed the 2992611
  update prior to the November 18 reoffering should reapply the
  update. See Microsoft Knowledge Base Article 2992611 for more
  information.
- Originally posted: November 11, 2014
- Updated: November 18, 2014
- Bulletin Severity Rating: Critical
- Version: 2.0

You can't do this file based often anymore like in XP. Except you know what files or Keys have changed but then you would have to capture an install and review it.

http://msdn.microsoft.com/en-us/library/aa394391(v=vs.85).aspx

The Win32_QuickFixEngineeringWMI class represents a small system-wide update, commonly referred to as a quick-fix engineering (QFE) update, applied to the current operating system. Starting with Windows Vista, this class returns only the updates supplied by Component Based Servicing (CBS). These updates are not listed in the registry. Updates supplied by Microsoft Windows Installer (MSI) or the Windows update site (http://update.microsoft.com) are not returned by

Win32_QuickFixEngineering.

Here are some tools we use to get the info we need

How to find a WMI class in WMI when you find it on Technet (How to browse it):

Download WMI Explorer 2.0

You can SEARCH for Classes and see where they are located and how to query them

SELECT * FROM Win32_QuickFixEngineering

Test the Query with Paessler WMI Tester

Selection from Deployment that uses WMI Querys (Like Frontrange) or Windows GPO:

1. You could make a WMI GPO Filter that selects the computers which have the patch
2. Then Uninstall the patch with GPO

SELECT * FROM Win32_QuickFixEngineering where HotFixID = 'KB2984972'

Or use the Query in Enteo FrontRange Script.

Search the Patch in Batch

%winsysdir%\wbem\wmic.exe qfe | find "KB2984972"

Gets all the info

%winsysdir%\wbem\wmic.exe qfe GET HOTFIXID | find "KB2984972"

Only shows the KB

Uninstall the Patch:

wusa /uninstall /kb:2949927 /quiet /norestart

We still see a urge for physical Desktop and laptop. Current corporate fleet hardware shipping with SSD hard disk and new CPU are still the best when it comes to performance and users who need to work and not primary save cost. See the VMWARE Analyze on their horrible lag times for certain applications like Adobe or Outlook. Still some enterprise users do not except such lag and this want change for some years.

Storage Teams round up with SSD/Flash only on their system but forget to compare performance to newer physical clients with new CPU architecture and new SSD disk only.

The prime example is VMware's May acquisition of Wanova Inc. to gain centralized image management for physical desktops. The virtualization pioneer, which for years has preached the virtues of desktop virtualization, has committed to use Wanova Mirage to provide customers with single image management for physical desktops.

"We do not see the world of end-user computing exclusively through the lenses of virtual machines, and I am very excited about this opportunity to redefine what desktop virtualization is and how it fits into our vision for [end-user computing]," said Vittorio Viarengo, VMware's vice president of marketing for end-user computing, in a July blog post.

http://searchvirtualdesktop.techtarget.com/feature/VDI-performance-still-falls-short-of-PCs

http://blogs.vmware.com/performance/2014/03/vdi-performance-benchmarking-vmware-virtual-san-5-5.html

http://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/dc-partner-vmware/white_paper_c11-727392.html

The Google Document and also from the ISP contains some interesting Information on temperature in Server rooms and the reliability of server disks.

People also found out that depending on the manufacturer of the Hard disk and the Main board sometimes the SMART+ Information

is useless on Desktop or laptop disks. Disk with Reallocation recount did not fail soon and Disk which had allocation recount Zero/0 did fail in short times.

https://kb.acronis.com/de/content/19836

https://www.backblaze.com/blog-smart-stats-2014-8.html

http://www.almico.com/sfarticle.php?id=2

http://www.easis.com/smart-value-interpretation.html

Google report:

http://static.googleusercontent.com/external_content/untrusted_dlcp/research.google.com/en/us/archive/disk_failures.pdf

Google even has a patent I think resulting from that study:

http://www.google.com/patents/US6412089

Background read scanning with defect reallocation

This may be related to the CDROM drive letter changed after Windows 2012 R2 base setup and the moment you OR a third party software tries to install Framework 3.0/3.5 in the background and does not find the 2012 R2 Media.

Also there are three patches which could disturb the installation

It's unclear if MS fixed those three since the first appearing of the problem

Here is how to uninstall them and after you add 3.5 you can install them again. A lot of products need Framework 3.5 (Exchange 2010, Mcafee EPO 5 and also WSUS-Windows Update Server, SQL Express 2007/2012). This is the first step you will have to do on those Servers.

Uninstall those three patches:

cmd

wusa.exe /uninstall /kb:2966826 /quiet /norestart

wusa.exe /uninstall /kb:2966827 /quiet /norestart

wusa.exe /uninstall /kb:2966828 /quiet /norestart

Reboot the Server

Make Sure the Server 2012R2 CD is in the Drive you specify

(Source:d:\ = CDROM Drive with Server 2012 IS D: )

In this sample Z: is the 2012R2 DVD media

dism /online /enable-feature /featurename:NetFX3 /all /Source:Z:\sources\sxs /LimitAccess

Get the DN of the Active Directory OU where you want to place the Contacts in ADS.

This means where you want to put the contacts. Maybe not under Users.

Maybe make a new seperate OU with User & computers Consolas where you can import them.

Start:

Right click on the OU and check the distinguishedName. Copy that String (red in Blog).

Sample:

OU=test,OU=Finance,OU=CONTACTS,OU=EMAIL,OU=Basel,DC=lab,DC=butsch,DC=ch

Be sure to include two " in the csv File and leave them as they are.

Place the sample File in c:\edv

Modify the CSV File with your data. Maybe first two line to see how it work and if!

Name,Email,OUPAth,alias

(DIS-JU) Matthias Maerki / EA,mm@ea.ch.com,"OU=test,OU=Finance,OU=CONTACTS,OU=EMAIL,OU=Basel,DC=lab,DC=butsch,DC=ch",DIS_JUN_mm_ea

(DIS-JU) Juergen Brei / Ubisoft,jb@ubi.global.us.com,"OU=test,OU=Finance,OU=CONTACTS,OU=EMAIL,OU=Basel,DC=lab,DC=butsch,DC=ch",DIS_JUN_jb_UBI_US

Then in Exchange 2007/2010 Powershell generate the Contacts from the CSV.

Import-CSV C:\edv\butsch.ch_exchange_powershell_contacts.csv| ForEach-Object

{New-MailContact -ExternalEmailAddress $_.Email -Name $_.Name -OrganizationalUnit $_.OUpath -Alias $_.alias }

< Make sure all above is on one line

 butsch.ch_exchange_powershell_contacts.csv (305.00 bytes)

Problem:

You have a blue screen and Event 41 under ESX 5.0.0 when you run Server 2012 R2 because you're VMWARE Team it should run

(You ask > why does it not show up under Supported OS then. They say > VMWARE says it's supported it only shows it's not)

Well not in a validated environment for sure!

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2060019

http://support.microsoft.com/kb/2902739

Event 41

The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

The computer has rebooted from a bugcheck. The bugcheck was: 0x00000109 (0xa3a01f59c38d1747, 0xb3b72be0160d1792, 0x00000000c0000103, 0x0000000000000007).

A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 011915-11203-01.

Download NITSOFT BLUESCREEN and install on the Server (Just unpack and run exe) to analyses the memory dump if you

Want to be sure.

http://www.nirsoft.net/utils/blue_screen_view.html

Two ways to solve this:

1. UPGRADE VMware 5.0.0 to 5.0.1 U-something and all behind > Project 2 days
2. Change a CPUID Mask Flag

Here is what to change if you're HAVE AMD Servers:

1. Shutdown Server
2. Edit Settings
3. Options
4. Advanced

Before change on AMD (Attention different settings for AMD and INTEL CPU)

INTEL:

----:0---:----:----:----:----:----:----

AMD:

----0---------------------------

Screenshot: This is what to change for AMD

Malformed Kalender Einträge im Outlook.exe selber suchen.

Diese ist primär bei Kalendern welche in Public Folder sind. Kann aber auch bei regulären Einträgen vorkommen.

Kalender / Liste wählen damit man alle Termine von A-Z sieht:

Kontrolle OB END START DATUM VORHANDEN

Doppelklick auf den TERMIN falls man diesen JETZT sieht

Serientyp:

Zwingend und immer gut > Ein Enddatum setzen

z.B. Fiktiv 2025

Kategorie prüfen ob keine spezielle Kategorie welche der User selber erstellt hat. Nur die im Outlook

vorhandenen am besten nehmen. (keine selber machen)

Links von uns:

http://www.butsch.ch/post/Exchange-Public-Folder-Migration-Search-for-Recurring-meeting-with-no-End-date.aspx

From customer test group feedback, Blogs, Analyze and monitoring we do not recommend following patches without further analyses, manual Controlling any version controlling V2 V3 etc. The patches are confusing because Microsoft does not do any filename_v2 anymore so you can identify the version by filename.

Check blog to see how you script the identification of Patches on OS:

http://www.butsch.ch/post/How-to-identify-WSUSWindows-Update-Patches-installed-on-a-Windows-7-in-Batch.aspx

Target: GERMAN and ENGLISH client or Server OS environments. Small Business (KMU) or Enterprise.

Patch DENY Oktober 2014 / 10

http://www.butsch.ch/post/Microsoft-Patchday-October-2011-1110201112102011.aspx

http://www.butsch.ch/post/Microsoft-October-2014-Windows-Updates-problems.aspx

KB 2952664,KB 2949927,KB 2995388 (APPV, Frontrange, Filemaker, SNAGIT),KB 3000061 DECLINED wegen Fehlern Vorab

UNINSTALL:

wusa /uninstall /kb:2952664 /quiet /norestart

wusa /uninstall /kb:3000061 /quiet /norestart

wusa /uninstall /kb:2949927 /quiet /norestart

wusa /uninstall /kb:2995388 /quiet /norestart

Patch DENY November 2014

http://www.butsch.ch/post/Microsoft-Updates-2992611-3011780-18192112014-re-releases-ExchangeIISDCe28099s.aspx

Re-release Microsoft KB 2992611 (V3) gets re-releases on 19.11.2014 and also 09.12.2014

Microsoft KB 3011780 (V2) gets re-releases on 19.11.2014

UNINSTALL:

wusa /uninstall /kb:2992611 /quiet /norestart

wusa /uninstall /kb:3011780 /quiet /norestart

Patch DENY December 2014

KB3004394 (CERTS)

KB3008923 (IE9, MS14-080)

KB2553154 (Office 2010, ActiveX)

KB3011970 (Silverlight)

UNINSTALL:

wusa /uninstall /kb:3004394 /quiet /norestart

wusa /uninstall /kb:3008923 /quiet /norestart

wusa /uninstall /kb:2553154 /quiet /norestart

wusa /uninstall /kb:3011970 /quiet /norestart