Microsoft : Change Remote Desktop port

 The step

1. Start the registry editor. (Type regedit in the Search box.)
2. Navigate to the following registry subkey: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp
3. Find PortNumber
4. Click Edit > Modify, and then click Decimal.
5. Type the new port number, and then click OK.
6. Close the registry editor, and restart your computer.

 

Check the current port by running the following PowerShell command:

Get-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -name "PortNumber"

 

To add a new RDP Port to the registry:

$portvalue = 3390

Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -name "PortNumber" -Value $portvalue

New-NetFirewallRule -DisplayName 'RDPPORTLatest-TCP-In' -Profile 'Public' -Direction Inbound -Action Allow -Protocol TCP -LocalPort $portvalue
New-NetFirewallRule -DisplayName 'RDPPORTLatest-UDP-In' -Profile 'Public' -Direction Inbound -Action Allow -Protocol UDP -LocalPort $portvalue 

Source : https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/change-listening-port

Read More

Microsoft : Reboot a Server in a Failover Cluster

The guide:

1. Login to the windows host to reboot
2. Select Start> Administrative tools> Failover Cluster Manager
3. Select Failover Cluster Manager
4. Verify which server you need to reboot
5. Select Nodes, right click the desired server, and select Drain Roles
6. Verify that the Roles have migrated successfully by selecting the Node, and navigating to the Roles tab
7. Reboot the host
8. After the reboot has successfully, navigate back to Failover Cluster Manager> Nodes> Right click and select Fail Roles Back

Source:

• https://serverfault.com/questions/963382/how-to-reboot-a-server-in-a-failover-cluster
  

Read More

Active Directory : The Security Database on the Server does not have a Computer Account for this Workstation Trust Relationship

Issue : 

The Security Database on the Server does not have a Computer Account for this Workstation Trust Relationship

Solutions:

1. Login to local Administrator (make sure you set a local administrator password on machine and or set an user account password which is a member of local administrators group). Then unjoin the PC from the domain
   
2. Reboot the PC.
3. On the domain controller, go to Active Directory Users and Computers and delete the computer account.
4. This may take up to a few minutes for the changes to replicate between all of the Active Directory domain controllers. So wait for few minutes.
5. Rejoin the PC to the domain. 
   

Read More

Microsoft : \WINDOWS\SYSTEM32\CONFIG\SYSTEM is missing or corrupt

Restore the registry manually

1.Insert the Windows XP setup CD and restart the computer
2.Press any key to boot from the CD
3.Press R to access Repair Console
4.Enter the Administrator password. When the Command Prompt appears, type the following commands, one at a time and press Enter after each command, replacing C: with the Windows’ drive letter:

Backup current file to temp folder:

md tmp
copy c:\windows\system32\config\system c:\windows\tmp\system.bak
copy c:\windows\system32\config\software c:\windows\tmp\software.bak
copy c:\windows\system32\config\sam c:\windows\tmp\sam.bak
copy c:\windows\system32\config\security c:\windows\tmp\security.bak
copy c:\windows\system32\config\default c:\windows\tmp\default.bak

Delete corrupt file:

delete c:\windows\system32\config\system
delete c:\windows\system32\config\software
delete c:\windows\system32\config\sam
delete c:\windows\system32\config\security
delete c:\windows\system32\config\default 

Copy file from repair to system32\config:

copy c:\windows\repair\system c:\windows\system32\config\system
copy c:\windows\repair\software c:\windows\system32\config\software
copy c:\windows\repair\sam c:\windows\system32\config\sam
copy c:\windows\repair\security c:\windows\system32\config\security
copy c:\windows\repair\default c:\windows\system32\config\default

5.Exit
6.Enter
7.Restart computer

source : https://neosmart.net/wiki/windows-system32-config-system-missing-corrupt/

Read More

Microsoft : Force repilcation between AD server

Source : https://helpdeskgeek.com/how-to/active-directory-force-replication/

Read More

Microsoft : Install SQL 2016

source : https://thycotic.force.com/support/s/article/Adv-Install-SQL-2016

Read More

Microsoft : IIS Issue

Issuse:
IIS Application pool cannot be deleted


Solutions:

Here are the Powershell commands:

• import-module WebAdministration
• iis:
• ls *optional* This just shows you the AppPools folder exists
• cd AppPools
• dir
• del *name_of_Web_Pool*
• Will ask you if you really do want to remove the App Pool. “Hit A for “Yes to all”.
• ls – This will allow you to verify the AppPool is gone.

Source : http://jaredheinrichs.com/fix-application-pool-cannot-be-deleted-because-it-contains-1-applications.html

----------------------------------------------------------------------------------------------------------

Issue :
Handler "PHP_via_FastCGI1" has a bad module "FastCgiModule" in its module list.

Solutions/Source:
https://domagojsalopek.com/post/handler-php-via-fastcgi-has-a-bad-module-fastcgimodule-in-its-module-list

Read More

Microsoft : IIS Redirect

1. Redirect HTTP to HTTP
 

        <rewrite>
            <rules>
                <rule name="redirect" stopProcessing="true">
                    <match url="(.*)" />
                    <conditions>
                        <add input="{HTTPS}" pattern="^OFF$" />
                    </conditions>
                    <action type="Redirect" url="https://{HTTP_HOST}{REQUEST_URI}" />
                </rule>
            </rules>
        </rewrite>

• Permanent (301) – preferable type in this case, which tells clients that the content of the site is permanently moved to the HTTPS version. Good for SEO, as it brings all the traffic to your HTTPS website making a positive effect on its ranking in search engines.
• Found (302) – should be used only if you moved the content of certain pages to a new place *temporarily*. This way the SEO traffic goes in favour of the previous content’s location. This option is generally not recommended for a HTTP/HTTPS redirect.
• See Other (303) – specific redirect type for GET requests. Not recommended for HTTP/HTTPS.
• Temporary (307) – HTTP/1.1 successor of 302 redirect type. Not recommended for HTTP/HTTPS.

Read More

Microsoft: Install SSL Certificate in Windows 2012

Step to install certificate :

1.Convert current SSL format to Windows support format (.PFX or .P12 or P7B or .SST)

2.Import the certificate used mmc.exe. Under mmc, add Snap-in Certificates - This snip-in will always certificates for : Computer account. Then finish

3.Under personal, import the certificate to server

4.Now, certificate is install in server.

Read More

Windows : Install and configure SNMP

source : https://support.managed.com/kb/a764/how-to-install-snmp-and-configure-the-community-string-for-windows.aspx

Read More

Microsoft : Fix Autoconfiguration IPv4 Address issue Windows Server 2012 r2

source : https://techridez.com/blog/how-to-fix-autoconfiguration-ipv4-address-issue-windows-server-2012-r2/

Read More

Microsoft : Windows 2012 R2 GUI Missing after remove .Net Frame 4.5

Issue : GUI Missing after reboot

Solve:

1.  Run the below commands in the Server Core’s command prompt window to help you recover:
DISM.exe /online /enable-feature /all /featurename:NetFx4
DISM.exe /online /enable-feature /all /featurename:MicrosoftWindowsPowerShell

2.  The above commands will re-install .Net 4.0 and PowerShell on the server. Once PowerShell is installed, you can add the Graphical Shell (Windows Explorer) using the following command:
Install-WindowsFeature Server-Gui-Shell, Server-Gui-Mgmt-Infra

3.  Once the GUI Shell is installed, you will need to restart the server with the following command:
Restart-Computer

 Source:

 https://social.technet.microsoft.com/Forums/ie/en-US/e46b5087-4780-4a50-803f-4cf340f8db5c/windows-server-2012-r2-std-gui-went-missing-after-uninstalling-net-frame-45?forum=winserver8gen

Read More

Microsoft : The trust relationship between this workstation and the primary domain failed.

Issue :

The trust relationship between this workstation and the primary domain failed.

Solutions :

To resolve this issue, remove the computer from the domain, and then connect the computer to the domain.

• Use a local administrator account to log on to the computer.
• Select Start, press and hold (or right-click) Computer > Properties.
• Select Change settings next to the computer name.
• On the Computer Name tab, select Change.
• Under the Member of heading, select Workgroup, type a workgroup name, and then select OK.
• When you are prompted to restart the computer, select OK.
• On the Computer Name tab, select Change again.
• Under the Member of heading, select Domain, and then type the domain name. 
• Select OK, and then type the credentials of the user who has permissions in the domain.
• When you are prompted to restart the computer, select OK.
• Restart the computer.

Source :

• https://support.microsoft.com/en-us/help/2771040/-the-trust-relationship-between-this-workstation-and-the-primary-domai

Read More

Microsoft : Manual failover in a SQL Server cluster

Source :

• http://tomaslind.net/2014/04/15/manual-failover-sql-server-cluster/

Read More

Microsoft : How to disable RDP access for Administrator

Solutions:

To deny a user or a group logon via RDP, explicitly set the "Deny logon through Remote Desktop Services" privilege.

• Start | Run | secpol.msc if editing the local policy or chose the appropriate policy and edit it
• Go to -> | Local Policies | User Rights Assignment.
• Find and double click -> "Deny logon through Remote Desktop Services"
• Add the user and / or the group that you would like to dny access.
• Click ok

Source : 

• https://support.microsoft.com/en-us/help/2258492/you-notice-that-the-check-box-deny-this-user-permissions-to-logon-to-a

Read More

Microsoft : Install Microsoft Security Essentials on Server 2012

Source : https://www.amixa.com/blog/2016/02/29/how-to-uninstall-mse-from-windows-server-2012-r2/

Read More

Microsoft : Change policy password AD Server

Solution:

1. Run gpmc.msc (Group Policy Manager)
2. Expand domain
3. Go to <Group Policy Object> and select <Default Domain Policy>
4. Expand <Computer Configuration><Policies><Windows Setting><Security Setting><Account Policy><Password Policy>
5. Disable Password complexity

Read More