Windows Server Archives - Ceyhun KIRMIZITAS

07Mar 2013 by Ceyhun Kirmizitas 0 Comments

How to Install Data Protection Manager 2010 on Windows Server 2008 R2 SP1

Archive / Legacy Topics, System Center, Windows Server

Applies to: System Center Data Protection Manager 2010 | Windows Server 2008 R2 SP1 Historical: System Center Data Protection Manager (DPM) 2010 reached the end of extended support on October 14, 2020. This article is preserved as a reference for older environments. A DPM 2010 installation includes two main parts: installing the required prerequisite components and installing the DPM application itself. The DPM Setup Wizard performs most of this work as part of the integrated installation process. In This Article 1. Before You Start 2. Language Support 3. Install DPM 2010 4. After Installation 5. Key Takeaways 1. Before You Start Before starting the installation, confirm that the DPM server meets the hardware and software requirements for DPM 2010 and Windows Server 2008 R2 SP1. Verify the operating system and…

05Dec 2012 by Ceyhun Kirmizitas 0 Comments

How to Force DFSR SYSVOL Replication in Windows Server

Active Directory, Identity, Windows Server

Applies to: Windows Server 2025 / 2022 / 2019 / 2016 / 2012 R2 / 2012 / 2008 R2 / 2008 Sometimes SYSVOL changes need to replicate immediately between domain controllers instead of waiting for the normal DFS Replication schedule. The original version of this post used dfsrdiag SyncNow to trigger replication for the Domain System Volume replication group. The original method is worth preserving as an operational troubleshooting step, but it is important to separate a normal replication delay from a broken SYSVOL replication state. If SYSVOL or NETLOGON is missing, or DFSR is stopped by an error such as Event ID 2213 or 4012, forcing a connection is not the same as repairing SYSVOL. In This Article 1. Check SYSVOL Before Forcing Replication 2. Trigger DFSR SYSVOL Replication…

11Jun 2011 by Ceyhun Kirmizitas 0 Comments

How to Migrate SYSVOL Replication from FRS to DFSR

Active Directory, Identity, Windows Server

Applies to: Windows Server 2025 / 2022 / 2019 / 2016 / 2012 R2 / 2012 / 2008 R2 / 2008 Active Directory domain controllers use the SYSVOL share to replicate Group Policy files and logon scripts. Older domains can still use File Replication Service (FRS) for SYSVOL, while modern Windows Server environments use Distributed File System Replication (DFSR). If your domain still uses FRS, you should migrate SYSVOL replication to DFSR before introducing newer domain controllers. Windows Server 2019 and later cannot be promoted as replica domain controllers in a domain that still uses FRS for SYSVOL replication. In This Article 1. Before You Start 2. Check the Current Migration State 3. State 1 — Prepared 4. State 2 — Redirected 5. State 3 — Eliminated 6. Validate the…

07Apr 2011 by Ceyhun Kirmizitas 0 Comments

Fix WinRM Event ID 10154: Failed to Create WSMAN SPNs

Active Directory, Identity, Windows Server

Applies to: Windows Server 2025 / 2022 / 2019 / 2016 / 2012 R2 / 2012 / 2008 R2 / 2008 WinRM can log Event ID 10154 when it cannot register the WSMAN Service Principal Names (SPNs) required for Kerberos authentication. A typical event contains entries similar to: The WinRM service failed to create the following SPNs: WSMAN/server.contoso.com; WSMAN/server. In This Article 1. What Event ID 10154 Means 2. Check the Current SPNs 3. Check for Duplicate SPNs 4. Register Missing WSMAN SPNs 5. If the Error Is Access Denied 6. Why NETWORK SERVICE Is Not the AD Account 7. Verify WinRM 8. Key Takeaways 1. What Event ID 10154 Means WinRM uses SPNs for Kerberos authentication. In a normal domain configuration, the WSMAN SPNs are associated with the server's…

14Dec 2009 by Ceyhun Kirmizitas 0 Comments

How to Update Windows Server Failover Cluster Nodes Safely

Failover Clustering, Windows Server

Applies to: Windows Server 2025 / 2022 / 2019 / 2016 / 2012 R2 / 2012 / 2008 R2 / 2008 / 2003 Updating a Windows Server Failover Cluster should be done one node at a time so clustered workloads remain available while each node is patched and restarted. The basic method is simple: drain roles from a node, pause it, install updates, restart it, validate it, and then return it to the cluster. The original version of this article covered service packs on Windows Server 2003, 2008, and 2008 R2. Current Windows Server versions use the same rolling-maintenance idea, but modern Failover Clustering also provides Cluster-Aware Updating (CAU) to automate much of the process. In This Article 1. Before You Start 2. Manual Rolling Update Process 3. Cluster-Aware Updating…

16Feb 2009 by Ceyhun Kirmizitas 0 Comments

How to Uninstall Windows Internal Database (WID)

Windows Server

Applies to: Windows Server 2025 / 2022 / 2019 / 2016 / 2012 R2 / 2012 / 2008 R2 / 2008 Windows Internal Database (WID) is a Windows Server feature used by roles and applications that need a local database without a separate SQL Server deployment. Windows Server Update Services (WSUS) is one common example. WID should not be removed just because an application that used it has been uninstalled. Other roles or services may still depend on the same database instance. Microsoft also warns that removing WID is generally not recommended unless you have confirmed that it is no longer required. In This Article 1. Before You Remove WID 2. Remove WID on Current Windows Server 3. WSUS-Specific Warning 4. Legacy WSUS 3.0 Method 5. Validate the Removal 6.…

23Oct 2008 by Ceyhun Kirmizitas 0 Comments

How to Perform an Authoritative Restore of Active Directory Objects

Active Directory, Identity, Windows Server

Applies to: Windows Server 2025 / 2022 / 2019 / 2016 / 2012 R2 / 2012 / 2008 R2 / 2008 / 2003 R2 / 2003 An authoritative restore is used when you need to recover deleted or unwantedly changed Active Directory objects from backup and make the restored copy win replication against the copies held by other domain controllers. The original version of this article described this as an “authoritative DC restore.” More precisely, the domain controller is restored from backup and selected Active Directory objects or subtrees are then marked as authoritative with ntdsutil. In This Article 1. Check Active Directory Recycle Bin First 2. When Authoritative Restore Is Needed 3. Restore the Domain Controller from Backup 4. Mark the Object as Authoritative 5. Restart and Validate Replication…

08Sep 2008 by Ceyhun Kirmizitas 0 Comments

Configure Fine-Grained Password Policies in Active Directory

Active Directory, Identity, Windows Server

Applies to: Windows Server 2025 / 2022 / 2019 / 2016 / 2012 R2 / 2012 Fine-Grained Password Policies (FGPPs) let you apply different password and account lockout settings to different sets of users in the same Active Directory domain. This is useful when one domain-wide policy is not enough, for example when privileged or service accounts need different controls from standard user accounts. FGPPs were introduced with Windows Server 2008. For currently supported Windows Server versions, Microsoft documents them for Windows Server 2025, 2022, 2019, and 2016, with a domain functional level of Windows Server 2012 or higher. In This Article 1. What Is a Fine-Grained Password Policy? 2. Requirements and Scope 3. Understand Precedence 4. Configure an FGPP with ADAC 5. Configure an FGPP with PowerShell 6. Verify…

17Jun 2008 by Ceyhun Kirmizitas 0 Comments

How to Perform a Windows Server Bare-Metal Backup and Recovery

Windows Server

Applies to: Windows Server 2025 / 2022 / 2019 / 2016 / 2012 R2 / 2012 / 2008 R2 / 2008 Windows Server Backup can create full server, volume, system state, and bare-metal recovery backups. If the server cannot boot or a system disk fails, you can start Windows Recovery Environment (WinRE) and restore the server from a previously created backup. The original version of this article was written for Windows Server 2008. The same core backup and bare-metal recovery model is still available in current Windows Server releases. In This Article 1. Full Server vs. Bare-Metal Recovery 2. Install Windows Server Backup 3. Create a Bare-Metal or Full Server Backup 4. Create a Backup with WBAdmin 5. Perform a Bare-Metal Recovery 6. Key Takeaways 1. Full Server vs. Bare-Metal…

Category: Windows Server