Tuesday, April 9, 2013

to help prevent malicious code running outlook 2010 lync

above behaviour may occur if the following registry key is present: 
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\Security\ 
DWORD: DisableAllActiveX 
Value: 1
Note: The above registry value does not affect the default Outlook Contact Form.

Resolution:

To resolve the problem, either rename the DisableAllActiveX registry key or change the value to 0.

excel cannot complete this task with available resources 2010

The files are saved on a network drive and I am able to open them fine on my PC which is the exact same spec and setup. I have deleted the files in C:\Users\xxx\AppData\Local\Microsoft\Office\15.0\OfficeFileCache and rebooted the PC but the error still appears. It is happening to all sheets, no matter their size or content, most don't have macros.

http://www.sevenforums.com/microsoft-office/217074-excel-2010-out-memory-not-enough-resources.html

Monday, April 1, 2013

How to Fix the "Bootmgr is missing" Error in Windows

Boot your computer to the Windows 7 DVD (or to a "Repair CD"). At this screen choose to install now.


2. Select your language and click next.


3. Click the button for "Use recovery tools".


4. Then select "Command Prompt".


5. When open, the command prompt will look like this:


6. The command we will use, bootsect.exe, is in a folder (named boot) on the DVD.
We need to know what drive letter has been assigned the DVD drive to access the folder.
Code:
Type: diskpart
and press Enter
 
Type: select disk 0 (zero)
and press Enter
 
type: list volume
and press Enter
In this screen shot, the 7 DVD is letter: G


7. Use your DVD drive letter and

Code:
Type: exit
and press Enter
 
to close Diskpart
 
Type: G: (use the letter of your DVD drive)
and press Enter
 
Type: cd boot
and press Enter
 
Type: dir
and press Enter
to verify that bootcect.exe is there (if you really need to)


8. To restore the "bootsector code":

Code:
TYPE: bootsect /nt60 SYS /mbr
and press Enter

NOTE: If this method fails to restore the MBR, you can try the bootrec command as it is also a tool for repairing the MBR.

9. When completed successfully,

Code:
Type: exit
and press Enter
This will close the command prompt window.
10. Now select Shut Down or Restart


11. Then you can reboot your computer into Windows.
 http://www.sevenforums.com/tutorials/104341-bootmgr-missing-fix.html

Friday, March 22, 2013

The Auto-Complete list doesn’t remember names or email addresses

The Auto-Complete List is a feature which displays suggestions for names and email addresses as you start to type them. These suggestions are possible matches from a list of names and email addresses from the email messages that you have sent.
Auto-Complete list
If names and email addresses that you enter aren’t saved to the Auto-Complete list, do the following:

Microsoft Exchange Server accounts

  1. Prepare Outlook to run without Cached Exchange Mode.
    1. Click the File tab, and then click Account Settings.
    2. Click Account Settings.
    3. Click your Microsoft Exchange Server account, and then click Change.
    4. Clear the Use Cached Exchange Mode check box, click Next, and then click Finish.
    5. On the Account Settings dialog box, click Close.
  2. Exit Outlook.
  3. Open the %LOCALAPPDATA%\Microsoft\Outlook folder.
  • Click Start, and then enter %LOCALAPPDATA%\Microsoft\Outlook in the Search program and files or Start Search box. You can also copy and paste the location into Windows Explorer address bar.
  1. Right-click the RoamCache folder, click Rename, and change the folder name to old_RoamCache.
  2. Start Outlook.
  3. Turn on Cached Exchange Mode.
    1. Click the File tab, and then click Account Settings.
    2. Click Account Settings.
    3. Click your Microsoft Exchange Server account, and then click Change.
    4. Select the Use Cached Exchange Mode check box, click Next, and then click Finish.
    5. On the Account Settings dialog box, click Close.
  4. Exit and then restart Outlook.
Names or email addresses that are entered in the To, Cc, or Bcc boxes should be remembered after each message is sent. Those names and addresses are available as a suggestion the next time that you compose a message.
Top of Page Top of Page

All other email accounts

  1. Exit Outlook.
  2. Open the %LOCALAPPDATA%\Microsoft\Outlook folder.
  • Click Start, and then enter %LOCALAPPDATA%\Microsoft\Outlook in the Search program and files or Start Search box. You can also copy and paste the location into Windows Explorer address bar.
  1. Right-click the RoamCache folder, click Rename, and change the folder name to old_RoamCache.
  2. Start Outlook.
Names or email addresses that are entered in the To, Cc, or Bcc boxes should be remembered after each message is sent. Those names and addresses are available as a suggestion the next time that you compose a message.

http://office.microsoft.com/en-in/outlook-help/the-auto-complete-list-doesnt-remember-names-or-email-addresses-HA102534585.aspx?CTT=3
 

Friday, March 1, 2013

exchange administration center 2013 http 500 error

https://SERVER-FQDN/ecp?ExchClientVer=15

If you're installing on Windows Server 2012, please make sure that you've installed the Windows Identity Foundation Windows feature on all Exchange 2013 Preview servers. If it's not installed, install it and then reboot the server.
If you're installing on Windows Server 2008R2 SP1, install the Windows Identity Foundation package from here -http://support.microsoft.com/?kbid=974405.
Can you check the eventvwr and check for the errors there ?
2nd reset the IIS.
3rd. YOU can reboot the box and then give a try .

http://social.technet.microsoft.com/Forums/en-US/exchangeserverpreview/thread/945fedae-8e47-4dd6-9d42-b82cd51a6901/

Monday, February 25, 2013

Exchange 2013 Prerequisites

The prerequisites that are needed to install Exchange 2013 on a Windows Server 2008 R2 SP1 computer depends on which Exchange roles you want to install. Read the section below that matches the roles you want to install.
Follow the instructions in this section to install the prerequisites on Windows Server 2008 R2 SP1 computers where you want to do one of the following:
  • Install only the Mailbox server role on a computer.
  • Install both the Mailbox and Client Access server roles on the same computer.
Do the following to install the required Windows roles and features:
  1. Open Windows PowerShell.
  2. Run the following command to load the Server Manager module.
    Import-Module ServerManager
    
  3. Run the following command to install the required Windows components.
    Add-WindowsFeature Desktop-Experience, NET-Framework, NET-HTTP-Activation, RPC-over-HTTP-proxy, RSAT-Clustering, RSAT-Web-Server, WAS-Process-Model, Web-Asp-Net, Web-Basic-Auth, Web-Client-Auth, Web-Digest-Auth, Web-Dir-Browsing, Web-Dyn-Compression, Web-Http-Errors, Web-Http-Logging, Web-Http-Redirect, Web-Http-Tracing, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Lgcy-Mgmt-Console, Web-Metabase, Web-Mgmt-Console, Web-Mgmt-Service, Web-Net-Ext, Web-Request-Monitor, Web-Server, Web-Stat-Compression, Web-Static-Content, Web-Windows-Auth, Web-WMI
    
After you've installed the operating system roles and features, install the following software in the order shown:
  1. Microsoft .NET Framework 4.5
  2. Windows Management Framework 3.0
  3. Microsoft Unified Communications Managed API 4.0, Core Runtime 64-bit
  4. Microsoft Office 2010 Filter Pack 64 bit
  5. Microsoft Office 2010 Filter Pack SP1 64 bit
  6. Microsoft Knowledge Base article KB974405 (Windows Identity Foundation)
  7. Knowledge Base article KB2619234 (Enable the Association Cookie/GUID that is used by RPC over HTTP to also be used at the RPC layer in Windows 7 and in Windows Server 2008 R2)
  8. Knowledge Base article KB2533623 (Insecure library loading could allow remote code execution) 
  9.  
  10.  http://technet.microsoft.com/en-us/library/bb691354.aspx 

Friday, February 22, 2013

How to configure Lync 2010 on Android (Lync 2010)

How to configure Lync 2010 on Android (Lync 2010)


http://plexhosted.com/billing/knowledgebase/230/How-to-configure-Lync-2010-on-Android-Lync-2010.html

  • Synopsis

    This guide will show you how to configure Lync 2010 on Android.
  • Applicable to

    All hosted Lync 2010 accounts.
  • Prerequisite

    • a hosted Lync 2010 account
    • Lync 2010 Mobile Client
  • How to

  1. Run your Lync 2010 Mobile Client.
  2. Enter your credentials - e-mail and password.
  3. Click on the Options and choose Server Settings.
  4. Turn off Auto Detect Server option and setup servers manually using the following urls:
    External Discovery Address:
    https://autodiscover.lync.plexhosted.com
    Internal Discovery Address:
    https://autodiscover.lync.plexhosted.com
  5. Return to the main page, enter your password again. Click Sign In button and you would be able to see signing in screen.
  6. When you sign in to the Lync mobile client you can see configuration screen. Click on the button Next.
  7. You will see your phone number, click on the button Next.
  8. Click the button Done to finish configuration.
  9. You can see the screen with your information.
  10. To change your status click on the status section under your username.
  11. To start chatting click on the contact you want to chat and choose Send an IM icon. Then you can type your message and click the button Send.
  12. You can see and manage your conversations using the tab Chats.

          Wednesday, February 6, 2013

          the delegates settings were not saved correctly. cannot activate send-on-behalf-of list

          http://support.microsoft.com/kb/2593557
          One of my customers came to me with the following issue and asked if there were “better” solutions available than they found using their own Internet research. They use a mix of Outlook 2007 and Outlook 2010 clients and a lot of shared mailboxes. The access to these mailboxes is granted through group memberships, which have “full mailbox access” and “send-as” permissions granted.  Outlook is configured to use a second profile for the Shared Mailbox access.

          The Symptom:

          In the phase of testing their mailbox migration to Exchange 2010 Sp1 RU6 they encountered the following issue trying to delegate Calendar permissions using the “Outlook delegation wizard” on their shared mailboxes:
          "The Delegates settings were not saved correctly" error message

          “The Delegates settings were not saved correctly. Cannot activate send-on-behalf-of-list. You do not have sufficient permission to perform this operation on this object”

          Troubleshooting steps:

          If you do an Internet research there appear to lots of people complaining about this exact behaviour. The two most popular described solutions are the following:
          1. Using the “IgnoreSOBError” – “SendOnBehalf” Registry key to silently drop the error message and proceed with permission assignment. With the usage of this key the described error message is just dropped by Outlook and the selected permissions out of the delegation wizard are applied (without setting the SendOnBehalfof permission).
          The SendOnBehalf Permission is not needed to act as calendar delegate. If the delegate has to use the “send on behalf of” permission for writing email “in behalf of” this has to be done by an administrator using the Exchange Management Shell or Exchange Management Console.
          Outlook 2007 Registry key:
          HKCU\Software\Microsoft\Office\12.0\Outlook\Preferences or
          HKCU\Software\Policies\Microsoft\Office\12.0\Outlook\Preferences
          Dword: IgnoreSOBError value = 1
          Outlook 2010 Registry key:
          HKCU\Software\Microsoft\Office\14.0\Outlook\Preferences or
          HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Preferences
          Dword: IgnoreSOBError value = 1
          2. Create a new RBAC role and strip all parameters for “GrantSendOnBehalf plus Identity” and add the user who should be able to do their delegation without an error. In this case the Outlook Wizard will finish successfully and the delegate will be added to the list of “publicDelegates”.
          The downside of this solution about using this “Organization wide” RBAC role is that the user is now able (using remote PowerShell) to “GrantSendOnBehalf” in every mailbox, not only his delegated mailboxes.

          http://blogs.technet.com/b/mspfe/archive/2012/06/26/solving_2d00_the_2d00_delegates_2d00_settings_2d00_were_2d00_not_2d00_saved_2d00_correctly_2d00_error_2d00_on_2d00_exchange_2d00_2010.aspx

          Tuesday, January 8, 2013

          seibel objecterror ie 9

          Method 1:

          Use the Internet Explorer (No Add-ons) mode
          To do this, click Start, point to All Programs, point to Accessories, point to System Tools, and then click Internet Explorer (No Add-ons).
          If this resolves the issue, follow these steps to isolate the browser add-on that is causing the issue:
          1.    Click Tools, and then click Internet Options.
          2.    Click the Programs tab, and then click Manage add-ons.
          3.    Click an add-on in the Name list, and then click Disable.
          4.    Repeat step 3 until you identify the add-on that is causing the issue.

           http://answers.microsoft.com/en-us/ie/forum/ie9-windows_7/webpage-object-error/a7d3db83-9d9b-4bbb-83f0-63332ed3f451

          Thursday, December 6, 2012

          how to access mac remotely in windows 7


          If you have both Mac and PC and want to control Mac form PC here is the simple and easy way to do that. This guide is written using Mac OS X Snow Leopard and Windows 7 and both computer are on same network. But you can use other Windows version like Vista or XP as well to access Mac remotely.

          On Mac OS X:

          STEP-1

          Click on “Apple” icon and select “System Preferences”
          Mac system preferences
          Click on “Sharing” icon
          Mac Sharing

          STEP-2

          Click the “Screen Sharing” check box, Note down the IP address as in below screen shot “192.168.0.128″ your IP address may be different. Click on “Computer Settings” button as shown below.
          Enable screen sharing on mac
          Check the “VNC viewer…” check box,  enter a password for it and click “OK” button (you will enter this password when try to access Mac from PC).
          Settings for VNC

          STEP-3

          On Windows:

          Download this TightVNC for Windows on your PC (Download a stable version.)

          STEP-4

          Install TightVNC, during installation wizard only select “TighVNC Viewer” on “Select Components” screen. Don’t install the TightVNC Server, we don’t need that.
          TightVNC setup

          STEP-5

          Run TightVNC and enter the IP address of Mac computer (noted in step-2) and hit “Connect” button (Explore the “Options” button).
          TightVNC connection
          Enter password that you setup on Mac in step-2 and hit “OK” button
          VNC Authentication
          You are done! you have remotely accessed Mac from PC.
          Remotely access Mac on PC

          http://www.trickyways.com/2010/06/how-to-remotely-access-mac-from-pc/ 

          Friday, November 23, 2012

          windows search service disabled windows 7


          rapid boot service was disabling  search.   simply uninstall rapid boot using instructions found on link below.



          Uninstallation Instructions
          Manual Uninstall
          1. Start Windows and logon with an administrator account.
          2. Click Start, then click Control Panel.
          3. Make sure View by Category is selected, and click Uninstall a program.
          4. Select RapidBoot, and click Uninstall or Uninstall/Change.
          5. Follow the instructions on the screen to complete uninstallation and restart the computer.

          Monday, October 8, 2012

          the operation has been cancelled outlook 2010

          Note: These solutions work in all versions of IE.
          A very common question comes up often in the Microsoft forums:
          When clicking on a hyperlink in an e-mail, I get this Message : "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator." I get this message every time that I attempt to use the hyperlink. I am the administrator on this stand alone computer. How do I deactivate this feature so that I activate hyperlinks ?
          This is not an Outlook error. The most common cause is a corrupt registry key in Internet Explorer. The registry key found at
          HKEY_Local_Machine\Software\Classes\htmlfile\shell\open\command
          is either damaged or corrupt.
          To fix it, try resetting Web settings in Internet Explorer. If this does not resolve the issue, set IE as the default browser following the steps in Set Program Access in Control Panel. If you use a different browser as your default, you need to set IE as the default until you verify the links work in Outlook.
          If you uninstalled Chrome (or Firefox) and then received the error, see Edit Registry, Part 2
          In addition to Chrome and Firefox, Maxthon and other HTML rendering and editing programs may take the HTML open command and cause this error. Greg reports UltraEdit is one such program. See Edit Registry, Part 2 for the fix.
          You can find solutions suggested by others users below. Many users report successfully using Alan's suggestion here. If you are using Outlook 2010, see tgrf's suggestion to change your Junk email settings. It's quick to try and won't be a waste time if it doesn't fix your problem.

          Reset Web Settings

          To Reset Web settings in Windows XP:

          1. Close Outlook
          2. Open Internet Explorer.
          3. On the Tools menu, click Internet Options.
          4. Click the Advanced tab, and then click the Reset button.
          5. Under Internet programs, verify that the correct e-mail program is selected.
          6. Click to select the Internet Explorer should check to see whether it is the default browser check box.
          7. Click Apply, and then click OK.
          If you receive a message when Internet Explorer starts telling you that IE is not currently your default browser, click Yes to make it your default.

          If you are using Windows 7 or Vista:

          1. Close Outlook
          2. Open Internet Explorer.
          3. On the Tools menu, click Internet Options.
          4. Click the Advanced tab, and then click the Reset button.
          5. On the Programs tab, under Internet programs, click Set Programs, then "Set your Default Programs", select your e-mail program and click "Set this program as Default". Repeat for Internet Explorer.
          6. Click OK and close the dialogs.
          Note: You need to set Internet Explorer as default and verify the problem is fixed. If you prefer a different browser, you can set it as default later.

          Import a Registry Key

          When resetting the web settings doesn't help, you'll need to recreate the corrupt key. The easiest way to do this is by exporting the key from another computer. To save exporting it from another computer, download this registry key exported from my computer. Right click on the link and choose Save target as then double click on it to run it.
          If you prefer to use a key from a computer you have access to, follow these instructions to export the registry key:
          1. Press Windows key + R to open the Run command
          2. In the Open box, type regedit, and then click OK.
          3. Browse to the following registry key:
            HKEY_Local_Machine\Software\Classes\htmlfile\shell\open\command
          4. On the File menu select Export.
          5. Type in a filename and Save.
          6. Close the Registry Editor.
          Copy the *.reg file to the other computer and double-click on the .reg file. Ok the dialogs to update the registry.
          These instructions are the same as found in the Microsoft article You receive an error message when you click a hyperlink in Outlook (MSKB 310049). Note that the FixIt in this KB articles will not work with Windows 8. Use the this reg file instead.
          You need to restart Windows for the change to take effect.

          Edit Registry, Part 2

          If you received this error after uninstalling any application that takes over the HTML open command (including, but not limited to, Chrome & Firefox browsers) you may also need to change the HTM/HTML association in the registry.
          1. Start, click Run, type Regedit in the Open box, and then click OK.
          2. Browse to HKEY_CURRENT_USER\Software\Classes\.html
          3. Right click the value for the .html key and select Modify…
          4. Change the value from "ChromeHTML" to "htmlfile" (or from FireFoxHTML to htmlfile)
          Repeat these steps for htm and .shtml keys if they exist. You may also want to check the xhtml and xhtm keys. Don't want to edit the registry? Download this file (right click and choose Save target as…) Then double click on the file to run. From After uninstalling Google Chrome Links in e-mail don't work any more
          You need to restart Windows for the change to take effect.

          Set Program Access in Control Panel

          Windows XP and Vista allow you to control program defaults through Control Panel. If the above methods fail, use this method to set the default browser. In Windows XP, go to Add and Remove Programs, Set Program Access and Defaults. In "Choose a default web browser", check on the "Internet Explorer" option and click the OK button. In Vista, access the Default Programs applet from the Start menu or Control panel. Click on the "Set program access and computer defaults" (last option) then expand Custom. In "Choose a default web browser", check on the "Internet Explorer" option and click the OK button.

          Users Solutions

          tgrf makes this suggestion as one possible cause and solution:
          I am using Outlook in Office 2010, Windows 7, and IE8. I just fixed this problem when trying to set up my junk mail filter. Click on any email header. Select Junk mail menu, then Junk mail options. Clear the check mark at Disable links and other functionality in phishing messages.
          Junk Filter menu
          I can't vouch for this solution (as I haven't experienced the restrictions error with Outlook 2010) but its painless and easy to try. Links are disabled by default for all users. The restrictions error is typically caused by browser settings.

          Alan's Solution

          Alan has this suggestion:
          I found that re-installing Google Chrome or FireFox and setting it as the default, the hyperlinks worked. I then went to Internet Explorer and set it as the default browser. I again checked the hyperlinks, and again they worked. I then un-installed Google Chrome and have had no problems since. Hopefully this will work for others as well.
          While I haven't tested Alan's solution, logic tells me it will work. Possibly the most common cause is because users uninstall Firefox or Chrome while either is set as default and setting IE as default before uninstalling would prevent the problem. If Alan's solution doesn't work, make sure Chrome is not running when you set IE as the default browser.


          http://www.slipstick.com/problems/this-operation-has-been-cancelled-due-to-restrictions/
           

          Wednesday, August 22, 2012

          the user name or password you entered isn't correct. try entering it again. owa


          Bb691354.warning(en-us,EXCHG.141).gifWarning:
          The following hotfixes only apply to Windows Server 2008 R2 RTM. If you’re installing Exchange on Windows Server 2008 R2 SP1, you don’t need to apply these hotfixes.
          The following hotfixes are required for the Client Access server for Windows Server 2008 R2 RTM:
          The following hotfix is required for Hub Transport and Mailbox servers for Windows Server 2008 R2:
          The following hotfix is strongly recommended for Mailbox servers running Windows Server 2008 R2 that are members of a database availability group (DAG):
          Install the update described in Knowledge Base article 2550886, A transient communication failure causes a Windows Server 2008 R2 failover cluster to stop working. Without this update, the underlying cluster for a DAG could experience a race condition that causes a loss of quorum in the cluster and a loss of functionality in the DAG.

          1. On servers that will host the Hub Transport or Mailbox server role, install the Microsoft Filter Pack. For Exchange 2010 RTM, see 2007 Office System Converter: Microsoft Filter Pack. For Exchange 2010 SP1, see Microsoft Office 2010 Filter Packs. For more information about registering the Filter Pack, see Register Filter Pack IFilters with Exchange 2010.
            Bb691354.note(en-us,EXCHG.141).gifNote:
            On Exchange 2010 RTM, you can meet the prerequisite by installing 2007 Office System Converter: Microsoft Filter Pack. However, we recommend that you upgrade to the Microsoft Office 2010 Filter Packs.
          2. On the Start menu, navigate to All Programs > Accessories > Windows PowerShell. Open an elevated Windows PowerShell console, and run the following command.
            Import-Module ServerManager
            
          3. Use the Add-WindowsFeature cmdlet to install the necessary operating system components:
            • This example is for a server that will have the typical installation of the Client Access, Hub Transport, and Mailbox server roles.
              Add-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server,Web-ISAPI-Ext,Web-Digest-Auth,Web-Dyn-Compression,NET-HTTP-Activation,Web-Asp-Net,Web-Client-Auth,Web-Dir-Browsing,Web-Http-Errors,Web-Http-Logging,Web-Http-Redirect,Web-Http-Tracing,Web-ISAPI-Filter,Web-Request-Monitor,Web-Static-Content,Web-WMI,RPC-Over-HTTP-Proxy -Restart
              
            • This example is for a server that will host the Client Access, Hub Transport, Mailbox, and Unified Messaging server roles.
              Add-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server,Web-ISAPI-Ext,Web-Digest-Auth,Web-Dyn-Compression,NET-HTTP-Activation,Web-Asp-Net,Web-Client-Auth,Web-Dir-Browsing,Web-Http-Errors,Web-Http-Logging,Web-Http-Redirect,Web-Http-Tracing,Web-ISAPI-Filter,Web-Request-Monitor,Web-Static-Content,Web-WMI,RPC-Over-HTTP-Proxy,Desktop-Experience -Restart
              
            • This example is for a server that will host the Client Access and Hub Transport server roles.
              Add-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server,Web-ISAPI-Ext,Web-Digest-Auth,Web-Dyn-Compression,NET-HTTP-Activation,Web-Asp-Net,Web-Client-Auth,Web-Dir-Browsing,Web-Http-Errors,Web-Http-Logging,Web-Http-Redirect,Web-Http-Tracing,Web-ISAPI-Filter,Web-Request-Monitor,Web-Static-Content,Web-WMI,RPC-Over-HTTP-Proxy -Restart
              
            • This example is for a server that will host the Hub Transport and Mailbox server roles.
              Add-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server -Restart
              
            • This example is for a server that will host the Client Access and Mailbox server roles.
              Add-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server,Web-ISAPI-Ext,Web-Digest-Auth,Web-Dyn-Compression,NET-HTTP-Activation,Web-Asp-Net,Web-Client-Auth,Web-Dir-Browsing,Web-Http-Errors,Web-Http-Logging,Web-Http-Redirect,Web-Http-Tracing,Web-ISAPI-Filter,Web-Request-Monitor,Web-Static-Content,Web-WMI,RPC-Over-HTTP-Proxy -Restart
              
            • This example is for a server that will host only the Client Access server role.
              Add-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server,Web-ISAPI-Ext,Web-Digest-Auth,Web-Dyn-Compression,NET-HTTP-Activation,Web-Asp-Net,Web-Client-Auth,Web-Dir-Browsing,Web-Http-Errors,Web-Http-Logging,Web-Http-Redirect,Web-Http-Tracing,Web-ISAPI-Filter,Web-Request-Monitor,Web-Static-Content,Web-WMI,RPC-Over-HTTP-Proxy -Restart
              
            • This example is for a server that will host the Hub Transport or the Mailbox server role.
              Add-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server -Restart
              
            • This example is for a server that will host only the Unified Messaging server role.
              Add-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server,Desktop-Experience -Restart
              
            • This example is for a server that will host the Edge Transport server role.
              Add-WindowsFeature NET-Framework,RSAT-ADDS,ADLDS -Restart 
               
              http://technet.microsoft.com/en-us/library/bb691354.aspx
               

          Thursday, August 16, 2012

          Could not load all ISAPI filters for site/service. Therefore startup aborted.

          ASP.NET 2.0, 32-bit version

          To run the 32-bit version of ASP.NET 2.0, follow these steps:
          1. Click Start, click Run, type cmd, and then click OK.
          2. Type the following command to enable the 32-bit mode:
            cscript %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs SET W3SVC/AppPools/Enable32bitAppOnWin64 1
          3. Type the following command to install the version of ASP.NET 2.0 (32-bit) and to install the script maps at the IIS root and under:
            %SYSTEMROOT%\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe -i
          4. Make sure that the status of ASP.NET version 2.0.50727 (32-bit) is set to Allowed in the Web service extension list in Internet Information Services Manager.

          ASP.NET 2.0, 64-bit version

          To run the 64-bit version of ASP.NET 2.0, follow these steps:
          1. Click Start, click Run, type cmd, and then click OK.
          2. Type the following command to disable the 32-bit mode:
            cscript %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs SET W3SVC/AppPools/Enable32bitAppOnWin64 0
          3. Type the following command to install the version of ASP.NET 2.0 and to install the script maps at the IIS root and under:
            %SYSTEMROOT%\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.exe -i
          4. Make sure that the status of ASP.NET version 2.0.50727 is set to Allowed in the Web service extension list in Internet Information Services Manager.
          Note The build version of ASP.NET 2.0 may differ depending on what the currently released build version is. These steps are for build version 2.0.50727.

          Monday, August 13, 2012

          windows cannot communicate with the device or resource primary dns server

          The reset command is available in the IP context of the NetShell utility. Follow these steps to use the reset command to reset TCP/IP manually:
          1. To open a command prompt, click Start and then type CMD in the Search programs and files.
          2. Right-click CMD.exe icon in Programs and choose Run as administrator.
          3. When the User Account Control box pop up, click Yes.
          4. At the command prompt, copy and paste (or type) the following command and then press ENTER:
            netsh int ip reset c:\resetlog.txt
            Note If you do not want to specify a directory path for the log file, use the following command:
            netsh int ip reset resetlog.txt
             
            http://support.microsoft.com/kb/299357

          Monday, August 6, 2012

          How does AD AUTHENTICATION works

          A question that comes up frequently involving federated customers is how does an organization need to configure its firewalls to allow users in a trusted, but not fully trusted, domain to access their resources.  Consider the following scenario:
          [WEB RESOURCE]---|---FIREWALL---WAN---FIREWALL---|---[USER 2]
          [DOMAIN CTRL A]--|                               |---[DOMAIN CTRL B]

          User 2 wants to access a web resource in Domain A.  The two domains (A and B) are part of the same forest, but share a common root domain, through which replication occurs.  The domain controllers and other resources are not permitted for direct contact (because the firewalls are owned by someone else in the federation that doesn't care about making anything functional, only secure).  Under these circumstances, what exactly happens when User 2 attempts to connect and authenticate to the Web Resource?
          1. User 2 from Domain B logs onto Domain B workstation.
          2. Domain B workstation contacts Domain B KDC to get user authenticated.
          3. Domain B KDC creates a Ticket Granting Ticket (TGT) for User 2 on Domain B. Included in the TGT is PAC (Privilege Attribute Certificate) data, which is the list of the SIDs of the global, domain local and universal groups that user is a member of.

            NOTE: A GC (for any domain) would need to be contacted for the universal group enumeration.
          4. User 2's workstation receives TGT, extracts PAC data and puts the listed SIDs into an access token that is locally created. It also adds the SIDs of any machine local groups of which the user or the user’s groups are members. That access token is used on that machine only (tokens don’t traverse the wire).
          5. Every time User 2 accesses a member server in Domain B for the first time, User 2’s workstation uses the TGT to get a session ticket for the member server from the Domain B KDC. The KDC generates the session ticket and embeds the PAC data from the TGT that the user presented to the KDC (which keeps the KDC from having to authenticate over and over, but also means that the user has to log off and log back on to get a refreshed PAC from a KDC). The member server receives the session ticket and uses the PAC data in the same way that the workstation did, generating the access token locally and checking its local SAM for any additional SIDs to add to the token.
          6. When User 2 wants to access the Web Server resource in Domain A, User 2’s workstation goes to Domain B’s KDC to get a TGT for Domain A (this is what the trust relationship facilitates; KDCs on each end of the trust exchange long-term keys so that they can issue TGTs for each other.).
          7. User 2’s workstation presents the Domain A TGT to a Domain A KDC and requests a session ticket for the Domain A resource server (the web server in this case). Domain A's KDC works the same way as Domain B’s KDC did when it comes to constructing the session ticket for the member server, including just dumping the PAC data into the session ticket. The only difference is that the Domain B KDC actually constructed the Domain A TGT.
          8. The Domain A member server behaves just like a Domain B member server would and the Domain B workstation did.
          Now, here's where the firewalls come in: if User 2’s workstation can’t contact a Domain A KDC, then Kerberos authentication will fail and it falls back to NTLM, and then we start dealing with pass-through authentication, which is going to require direct connectivity between the DCs for the different domains.  But, the web server doesn’t need to be able to access the source KDC (Domain B). Rather, User 2 needs to be able to access the Domain A KDC, which it probably can’t do if this federation is blocking this at the firewall. 
          The problem can be somewhat compounded by the fact that the Domain Controller in Domain A won't necessarily be chosen on a consistent basis, so the hosting agency in the federation would need to allow access to potentially any DC in Domain A.  In other words, firewalls would need to be opened (gasp!). 
          Actually, Microsoft has recognized this scenario with the R2 release of Windows Server 2003 and provided what is called Active Directory Federation Services, which do allow more control over which domain controllers are used for cross agency authentication.  The problem, however, is that ADFS is designed for a mulitple forest scenario, not multiple trusted domains in the same forest.

           http://blogs.msdn.com/b/anthonw/archive/2006/08/02/686041.aspx