After migrating a standalone Windows domain controller to a VMWare environment, I noticed that some group policy objects weren't being enforced. It turned out some of the GPOs were missing from the SYSVOL share because it wasn't replicating on the newly virtualized DC. After checking the directory service event logs I found repeated entries for event ID 13359, stating
"The File Replication Service has detected that the replica root path has changed from "c:\windows\sysvol\domain" to "c:\windows\sysvol\domain". If this is an intentional move then file with the name NTFRS_CMD_FILE_MOVE_ROOT needs to be created under the new root path."
I didn't change the location of sysvol, and according to the event the sysvol location was changed to the same location. I did a little research and found that all I needed to do was listen to the event description and create the file requested. There's also KB 819268, but I didn't really find it useful. To fix the problem here's what you should do, assuming you have another domain controller that you can pull a new set of SYSVOL data from
1. Create a file named NTFRS_CMD_FILE_MOVE_ROOT in the directory listed in the event description where the replica root path has been moved to. In my situation I created a text file with that name in the C:\WINDOWS\SYSVOL\domain directory on the domain controller.
2. Restart the File Replication Service, either through services.msc, or with "net stop ntfrs" then "net start ntfrs" through the command prompt.
Now if you check your event log you'll find a warning that you're DC is going to be removed from the SYSVOL replica group, which is good. It'll automatically add it back to the group and start replicating the SYSVOL contents from another DC. Be patient and don't try to force a replication with replmon though as you'll want to wait until your server has been added back to the SYSVOL replication group first.
Thursday, December 30, 2010
Wednesday, December 22, 2010
Deploy Google Chrome using .msi file and Group Policy
To get started you can download an .msi installer file directly from Google at http://www.google.com/chrome/eula.html?msi=true. That's really about it. Then deploy like normal and you can either publish or assign Google Chrome.
If you want to deploy Firefox using an msi, check out my previous post.
If you want to deploy Firefox using an msi, check out my previous post.
Thursday, December 2, 2010
Create subgroups of contacts in Outlook
If you have a lot of contacts in your Outlook Contacts, you may wonder what you could do to try to organize those entries. One suggestion would be to create subfolders of contacts so you can group them together so you have multiple smaller groups, which should make it easier to locate a contact. You could always just use the search feature as well, but if you're looking to organize your contacts here is a way to do it.
1. Open Outlook and go into Contacts
2. Click on File->New->Folder...
3. Choose "Contact Items" in the Folder Contains drop-down (it should be there by default), give the subgroup a name, then pick where to store it in your mailbox. I would suggest creating it as a subfolder of your Contacts folder.
4. You'll see the new contact group in the My Contacts section, and you can add contacts to your new subgroup by either creating new within the group or dragging existing contacts into it.
Now you can click on the Group to quickly find the contacts you placed in it. If you'd like to use this group to find contacts while composing an email, there is another step you must take to make it available as an address book list.
1. Right-click your newly created subgroup and go to Properties
2. Click on the "Outlook Address Book" tab and check the box that says "Show this folder as an e-mail Address Book", then click OK
3. Now your subgroup will show up as a selectable Address Book for you to use when adding recipients to an email or calendar invitation
If you noticed the different icons on the contact groups within Contacts, you're in luck because I have the answer for you. This distinguishes where the group exists. If it has the hand holding a contact card, that means it is synchronized with the Exchange server, such as Contacts and ContactsSubgroup in the screenshot above. The ones with blue arrows are contact lists I have open from another Exchange account, and in the screenshot they are from the Administrator mailbox. If the icon is just a contact card, this means it is locally stored within a .pst file. If you're looking to use the subgroup from Outlook, webmail, a mobile device, etc, you will have to make sure to create your subgroup in your Exchange account so you get the hand holding a contact card icon. Otherwise you won't be able to use the group within webmail or your mobile device, but they will be available on the computer running Outlook where you created the group.
1. Open Outlook and go into Contacts
2. Click on File->New->Folder...
3. Choose "Contact Items" in the Folder Contains drop-down (it should be there by default), give the subgroup a name, then pick where to store it in your mailbox. I would suggest creating it as a subfolder of your Contacts folder.
4. You'll see the new contact group in the My Contacts section, and you can add contacts to your new subgroup by either creating new within the group or dragging existing contacts into it.
Now you can click on the Group to quickly find the contacts you placed in it. If you'd like to use this group to find contacts while composing an email, there is another step you must take to make it available as an address book list.
1. Right-click your newly created subgroup and go to Properties
2. Click on the "Outlook Address Book" tab and check the box that says "Show this folder as an e-mail Address Book", then click OK
3. Now your subgroup will show up as a selectable Address Book for you to use when adding recipients to an email or calendar invitation
If you noticed the different icons on the contact groups within Contacts, you're in luck because I have the answer for you. This distinguishes where the group exists. If it has the hand holding a contact card, that means it is synchronized with the Exchange server, such as Contacts and ContactsSubgroup in the screenshot above. The ones with blue arrows are contact lists I have open from another Exchange account, and in the screenshot they are from the Administrator mailbox. If the icon is just a contact card, this means it is locally stored within a .pst file. If you're looking to use the subgroup from Outlook, webmail, a mobile device, etc, you will have to make sure to create your subgroup in your Exchange account so you get the hand holding a contact card icon. Otherwise you won't be able to use the group within webmail or your mobile device, but they will be available on the computer running Outlook where you created the group.
Sunday, November 21, 2010
Setting remote desktop timeouts in the registry
If you're using terminal server you should be using the terminal server settings, or even better, group policy. However, if you are running an XP Pro install without a domain the only option is to modify the registry. Or if you have a domain but just want to change one XP Pro install it can be easier to do the registry modification instead of setting up a GPO for the single desktop. In my case there are two people with individual accounts accessing a single XP Pro computer remotely on occasion, but one of the two always leaves their session open so the other can never just log in without forcing the other's session closed. I set up an idle timeout on the XP Pro computer so now neither of them are allowed to let their session sit idle for too long.
You can change just about any remote desktop setting from within the registry, but the main two you're likely looking for since you're reading this post are MaxDisconnectionTime and MaxIdleTime. They can be found in the registry under:
HKEY_LOCAL_MACHINE->SYSTEM->CurrentControlSet->Control->Terminal Server->WinStations->RDP-TCP
MaxDisconnectionTime is how long a session that has been disconnected can be kept alive. It is useful if you have users that like to click the X on the RDP bar rather than logout. MaxIdleTime is for how long an idle session stays alive, just in case you have users who should be logging out but always stay logged in regardless of whether they're doing anything or not. These values are set in milliseconds, and make sure to enter your value in decimal (unless you figured out your value in hex, but I'm going to guess most people wouldn't bother with that). If you want to limit the overall connection time, you could change MaxConnectionTime to define a limit for that as well.
In my example above, since I didn't want either user staying logged in to this particular computer, I set MaxIdleTime to 2 hours, which is actually a value of 7,200,000 in the registry (2 hrs * 60 min/hr * 60 sec/min * 1,000 millisec/sec). That way if their session is idle for 2 hours they get disconnected automatically and no one has to worry about forcing the other session closed.
You can change just about any remote desktop setting from within the registry, but the main two you're likely looking for since you're reading this post are MaxDisconnectionTime and MaxIdleTime. They can be found in the registry under:
HKEY_LOCAL_MACHINE->SYSTEM->CurrentControlSet->Control->Terminal Server->WinStations->RDP-TCP
MaxDisconnectionTime is how long a session that has been disconnected can be kept alive. It is useful if you have users that like to click the X on the RDP bar rather than logout. MaxIdleTime is for how long an idle session stays alive, just in case you have users who should be logging out but always stay logged in regardless of whether they're doing anything or not. These values are set in milliseconds, and make sure to enter your value in decimal (unless you figured out your value in hex, but I'm going to guess most people wouldn't bother with that). If you want to limit the overall connection time, you could change MaxConnectionTime to define a limit for that as well.
In my example above, since I didn't want either user staying logged in to this particular computer, I set MaxIdleTime to 2 hours, which is actually a value of 7,200,000 in the registry (2 hrs * 60 min/hr * 60 sec/min * 1,000 millisec/sec). That way if their session is idle for 2 hours they get disconnected automatically and no one has to worry about forcing the other session closed.
Tuesday, November 9, 2010
Merge, extract, split, or rearrange your PDF files for FREE!
I love free software that is useful, and today I found PDFsam (PDF split and merge). It's an open-source program available direct from PDFsam.org, or through Sourceforge, that allows you to perform various actions such as merging and rearranging on PDF files. Normally this would require Adobe Acrobat Pro, which is pretty expensive. Instead you could use PDFsam and accomplish most of the common things a person normally buys Acrobat Pro to do. It does require Java, but you can download and install that for free from http://java.com, so that shouldn't be an issue. There are also installers for Windows, Mac OS X, and Linux, so it's pretty widely available.
The program might not be as pretty as Acrobat, but it seems to still work pretty well and isn't hard to figure out if you click around a little. I tried a couple of test runs with the merge and did have an issue with one, but the other worked just fine to create a new document. This makes me think PDFsam still has a few bugs, but it's still worth having in your arsenal.
If you're just looking to create PDF files from existing documents, check out my other post about DoPDF.
The program might not be as pretty as Acrobat, but it seems to still work pretty well and isn't hard to figure out if you click around a little. I tried a couple of test runs with the merge and did have an issue with one, but the other worked just fine to create a new document. This makes me think PDFsam still has a few bugs, but it's still worth having in your arsenal.
If you're just looking to create PDF files from existing documents, check out my other post about DoPDF.
Viewing Illustrator files on a Windows PC for free
Using free, open-source software, you can view Adobe Illustrator .ai files and .eps files on your Windows PC. It's pretty simple too. If you're looking to modify the files this isn't going to help, but as long as you need read-only access this is a great way to avoid paying for the expensive Adobe Creative Suites package.
1. You need to download three packages: Irfanview, the Irfanview plugins, and Ghostscript. You can get Irfanview and the plugins from http://www.irfanview.com/, and Ghostscript through http://sourceforge.net/projects/ghostscript/
2. Install the three programs in the order above. First Irfanview, then the plugins, then Ghostscript. The default settings are fine, but keep an eye out for checkboxes trying to install other software that you don't need, such as toolbars
3. Once the programs are installed you're ready to open your file. Right-click the .ai or .eps file and choose "Open With". From there select Irfanview from the list. If it's not there choose Browse (or "Choose default program..." first, then Browse if on Windows 7), then locate the i_view32.exe (Irfanview program executable) file. It should be located in C:\Program Files\Irfanview\i_view32.exe. Click Ok. If you have a 64-bit version of Windows, the Irfanview executable is likely in the C:\Program Files (x86)\Irfanview folder instead
4. If you want to set this as the default program for all .ai or .eps files (you'll have to do each separately), check the box labeled "Always used the selected program to open this kind of file", then click OK
You should now be able to view .ai and .eps files for free on your Windows PC. This may not work for every file as the postscript decoding isn't perfect, but I don't complain when it's free.
Thursday, October 21, 2010
How to change the Microsoft Word 2007 default format
If you want to change your Microsoft Word 2007 default format, it's pretty simple. In my situation, it was defaulting to extra line spacing that I didn't want. Instead I wanted all new documents to default to single spacing by default. In this example I'll show you how to setup single spacing, but this also shows you where to set any of the other default options too.
1. Open Microsoft Word 2007, then on the Home tab, look for Styles. Right-click on the Normal style, then choose Modify
2. At the bottom click the Format button, then select Paragraph
3. Change the Line Spacing dropdown to Single, and also change the After spacing to 0 pt. Then click OK
4. Change the selection at the bottom to "New documents based on this template", then click OK
Of course you can make any modifications you want to through this process, and as long as you select the "New documents based on this template" option before you click OK, your new documents will be based on those settings.
1. Open Microsoft Word 2007, then on the Home tab, look for Styles. Right-click on the Normal style, then choose Modify
2. At the bottom click the Format button, then select Paragraph
3. Change the Line Spacing dropdown to Single, and also change the After spacing to 0 pt. Then click OK
4. Change the selection at the bottom to "New documents based on this template", then click OK
Of course you can make any modifications you want to through this process, and as long as you select the "New documents based on this template" option before you click OK, your new documents will be based on those settings.
Wednesday, October 6, 2010
Deploy Firefox using an .msi file and group policy
If you're looking for a Firefox.msi file in order to deploy Firefox using group policy, you don't have to look any further. Ok, I lied a little bit. You're going to have to visit FrontMotion to download one, but then that will be it. You can get the .msi file from http://www.frontmotion.com/Firefox/download_firefox.htm. Currently they're up to date with version 3.6.13. If you're looking to deploy Google Chrome too, check out my other article.
One thing I found though is that the .msi that FrontMotion provides also forces Firefox to be your default browser without prompting you. Maybe that'll work for you if you want to for it to be the default browser, but I only wanted to publish Firefox as an optional browser for users to install from the network. If you're looking to do the same as me, luckily you can create a transform file pretty easily that will fix this for you if you have Orca installed. If not, you can download the Microsoft SDK from http://www.microsoft.com/downloads/en/details.aspx?FamilyID=c17ba869-9671-4330-a63e-1fd44e0e2505&displaylang=en and that includes Orca.
Once you have Orca installed, use it to open the firefox.msi file you downloaded from FrontMotion.com. Then go to Transform->New Transform
Now you can make the changes to the .msi settings. There are three things to change, that I originally found here:
1. In the "Feature" table, find "F_SetDefaultBrowser" and change the level to 6
2. In the "Property" table, find "INSTALLLEVEL" and change the value to 3
3. In the "Registry" table, find "RegKey045" and right-click and choose "Drop Row"
Once you've made those three changes you can create the transform. To do that, go to Transform->Generate Transform...
This will prompt you to name and save your .mst file somewhere. Now you have the .msi and the .mst transform file and you're all set to deploy.
Just like any other GPO software deployment, make sure that you use the network path to your .msi file rather than browsing out to the location. Also, make sure to select Advanced after selecting the .msi file so you can include the .mst file you created under the Modifications tab. I'm assuming that you're familiar with group policy software deployment if you're reading this so I'm not going into those details, but if for some reason you're not leave a comment and I'll try to help. If you're interested in setting policies for Firefox through group policy, download the firefox.adm file from here. Good luck!
One thing I found though is that the .msi that FrontMotion provides also forces Firefox to be your default browser without prompting you. Maybe that'll work for you if you want to for it to be the default browser, but I only wanted to publish Firefox as an optional browser for users to install from the network. If you're looking to do the same as me, luckily you can create a transform file pretty easily that will fix this for you if you have Orca installed. If not, you can download the Microsoft SDK from http://www.microsoft.com/downloads/en/details.aspx?FamilyID=c17ba869-9671-4330-a63e-1fd44e0e2505&displaylang=en and that includes Orca.
Once you have Orca installed, use it to open the firefox.msi file you downloaded from FrontMotion.com. Then go to Transform->New Transform
Now you can make the changes to the .msi settings. There are three things to change, that I originally found here:
1. In the "Feature" table, find "F_SetDefaultBrowser" and change the level to 6
2. In the "Property" table, find "INSTALLLEVEL" and change the value to 3
3. In the "Registry" table, find "RegKey045" and right-click and choose "Drop Row"
Once you've made those three changes you can create the transform. To do that, go to Transform->Generate Transform...
This will prompt you to name and save your .mst file somewhere. Now you have the .msi and the .mst transform file and you're all set to deploy.
Just like any other GPO software deployment, make sure that you use the network path to your .msi file rather than browsing out to the location. Also, make sure to select Advanced after selecting the .msi file so you can include the .mst file you created under the Modifications tab. I'm assuming that you're familiar with group policy software deployment if you're reading this so I'm not going into those details, but if for some reason you're not leave a comment and I'll try to help. If you're interested in setting policies for Firefox through group policy, download the firefox.adm file from here. Good luck!
Tuesday, October 5, 2010
Rotating iPhone or Droid video that always shows sideways (aka landscape) in Windows
We have a few iPhone 4s floating around in our environment, and I have one too. The video is nice, but whenever you try to view it on the computer it shows up in landscape, regardless of how you held the phone while taking the video. I did some research and this seems to be "normal", at least on Windows computers. If you're a Mac user, please leave a comment if this affects you as well. There are two ways to fix this, one that will allow you to open and another that actually converts the video, but neither of the methods are that great in my opinion. Regardless, at least there's a workaround. I just ran into this with someone who has one of the Droids too, and this worked for them as well.
If you only want to be able to view them on your computer
Open the video in Quicktime. I'm going to assume you have iTunes installed since you have an iPhone, and with that you also get Quicktime. I'll also assume that Quicktime is not your default video player or else you wouldn't have needed to look up this article.
You can right-click your video file, then go to Open With... This should give you some options, one of which may be Quicktime. If it is, select it and your video should open in the proper orientation.
If Quicktime isn't an option, select Browse or Choose Default Program (will depend on which version of Windows you're using). There you should be able to find Quicktime and select it to open your video file.
If you want to change Quicktime to always open your iPhone videos, go to Open With..., then click on "Choose default program" or "Select program". From there select Quicktime Player, then make sure the check box is checked that says "Always use the selected program to open this kind of file". That will make Quicktime your default program for .mov files.
If you want the video viewable correctly from any computer
For this you will need to rotate the video. Windows Live Movie Maker can do this for you, but it will also require you convert the video to a .wmv format in order to save the rotated video. You can get it for free direct from Microsoft (http://explore.live.com/windows-live-movie-maker?os=other), or it's part of the Windows Live Essential package that you can download through Microsoft Update.
To rotate the video, open Windows Live Movie Maker and click on "Add videos and photos"
Browse to your video file, select it, then click Open
Now you'll see buttons on the top for rotating 90 degrees in either direction. Use those buttons to rotate your video to the orientation of your liking.
Go to File->Save Movie->High Definition (1080p). Name the new video file and choose where to save it, then click Save.
Movie Maker will go through the conversion process to save your moving in the new format with the proper orientation
Once the conversion is complete, you'll get a message letting you know. Then you can play your new .wmv formatted movie and the orientation will be that which you set a few steps ago.
If you only want to be able to view them on your computer
Open the video in Quicktime. I'm going to assume you have iTunes installed since you have an iPhone, and with that you also get Quicktime. I'll also assume that Quicktime is not your default video player or else you wouldn't have needed to look up this article.
You can right-click your video file, then go to Open With... This should give you some options, one of which may be Quicktime. If it is, select it and your video should open in the proper orientation.
If Quicktime isn't an option, select Browse or Choose Default Program (will depend on which version of Windows you're using). There you should be able to find Quicktime and select it to open your video file.
If you want to change Quicktime to always open your iPhone videos, go to Open With..., then click on "Choose default program" or "Select program". From there select Quicktime Player, then make sure the check box is checked that says "Always use the selected program to open this kind of file". That will make Quicktime your default program for .mov files.
If you want the video viewable correctly from any computer
For this you will need to rotate the video. Windows Live Movie Maker can do this for you, but it will also require you convert the video to a .wmv format in order to save the rotated video. You can get it for free direct from Microsoft (http://explore.live.com/windows-live-movie-maker?os=other), or it's part of the Windows Live Essential package that you can download through Microsoft Update.
To rotate the video, open Windows Live Movie Maker and click on "Add videos and photos"
Browse to your video file, select it, then click Open
Now you'll see buttons on the top for rotating 90 degrees in either direction. Use those buttons to rotate your video to the orientation of your liking.
Go to File->Save Movie->High Definition (1080p). Name the new video file and choose where to save it, then click Save.
Movie Maker will go through the conversion process to save your moving in the new format with the proper orientation
Once the conversion is complete, you'll get a message letting you know. Then you can play your new .wmv formatted movie and the orientation will be that which you set a few steps ago.
Thursday, September 30, 2010
How to flush the DNS cache in Windows and OS X
If you're having problems with DNS, try flushing the local DNS cache. If you don't know what DNS is, this is the service that handles translating domain names, such as google.com, into IP addresses. This allows you to remember the domain name, but then allows the computer to use the IP address to communicate with it. Sometimes DNS settings get changed, but those changes can take a little while to propagate through to everyone system. To speed the propagation along, you can flush your DNS cache manually and force it to reload the most recent settings. To do that in Windows or Mac OS X:
Windows
Open a command prompt (Start->Run->cmd, then OK). Then type ipconfig /flushdns and press Enter
OS X
Open Terminal (Applications->Utilities->Terminal) and type dscacheutil -flushcache then pressing Enter
You should note that this only flushes the DNS cache on your local machine. DNS is a hierarchical system that relies on many different levels of connections, each of which have their own DNS cache. If you manage your own DNS server that would be the next step to diagnosing a problem if flushing the client machine's cache doesn't work. However, that's another topic entirely and this is only meant to give you the quick way to manually flush the DNS cache. If you want to learn more about how DNS works, check out the Wikipedia article, or search online because you'll find plenty of resources.
Windows
Open a command prompt (Start->Run->cmd, then OK). Then type ipconfig /flushdns and press Enter
OS X
Open Terminal (Applications->Utilities->Terminal) and type dscacheutil -flushcache then pressing Enter
You should note that this only flushes the DNS cache on your local machine. DNS is a hierarchical system that relies on many different levels of connections, each of which have their own DNS cache. If you manage your own DNS server that would be the next step to diagnosing a problem if flushing the client machine's cache doesn't work. However, that's another topic entirely and this is only meant to give you the quick way to manually flush the DNS cache. If you want to learn more about how DNS works, check out the Wikipedia article, or search online because you'll find plenty of resources.
Subscribe to:
Posts (Atom)