Knowledge Base
Microsoft
Citrix policy gone after editing
Problem:
Citrix policies are gone after editing.
Solution:
Restore \\Domain\SYSVOL\domain\Policies\{UniqueID}\User\Citrix\GroupPolicy\Policies.gpf
Links:
Fatal error occurred while trying to sysprep the machine
Problem:
Fatal error occurred while trying to sysprep the machine
Solution:
This error shows that sysprep was run multiple times on the machine, please open a command prompt, type:slmgr /dlv to view how many times of remaining Windows Activation count. Generally speaking, to sysprep the image on a single computer for multiple times, you need to configure the
Microsoft-Windows-Security-SPP |SkipRearm to 1 in the unattend.xml file. I am assuming whether you configure the Microsoft-Windows-Security-Licensing-SLC |SkipRearm to 1 instead of SPP, the SLC setting is deprecated and should not be used.
As a work around of this problem, please type: regedit in the Start Search box to open Registry Editor, set the value ofGeneralizationState under HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\SysprepStatus to7, then run sysprep again. If the same issue still persists, please unistall the MSDTC and Reinstall it, then try the sysprep.
To uninstall MSDTC :- msdtc -uninstall
To reinstall MSDTC :- msdtc -install
Links:
http://social.technet.microsoft.com/Forums/en/w7itproinstall/thread/425bd101-8a87-488c-b2e2-9f2f8113a0d9 http://support.microsoft.com/kb/929828
Defrag Exchange Database Exchange 2010
Problem:
Perform an offline Defrag for the Exchange Databases so the Free Space inside the Database gets availible on the Hard Disk
Solution:
Dismount-Database MailboxDatabase-K-O
eseutil /d MailboxDatabase-K-O.edb /t\\mgt001\e$\temp.edb (where \\MGT001 has to be a location with enough freespace).
mount-Database MailboxDatabase-K-O
Links:
http://exchangeserverpro.com/defrag-exchange-2010-mailbox-database
Delete Softdeleted mailboxes
Problem:
When moving a mailbox from a Database to another Database the original Mailbox isn’t deleted but is softdeleted. Which means the space isn’t availible for new mail.
Solution:
Delete the Softdeleted mailboxes. Use te following command to delete all softdeleted mailboxes. Get-MailboxStatistics –Database “Mailbox Database 1675289436” | Where-Object {$_.DisconnectReason –eq “Softdeleted”} | ForEach {Remove-StoreMailbox –Database $_.database –identity $_.mailboxguid –MailboxState Softdeleted}
Use this one when you recieve the following error: Pipeline not executed because a pipeline is already executing. Pipelines cannot be executed concurrently.
$Mailboxes = Get-MailboxStatistics -Database “MailboxDatabase-A-F” $Mailboxes | where {$_.DisconnectReason -eq “SoftDeleted”} | foreach {Remove-StoreMailbox -Database $_.database -Identity $_.mailboxguid -MailboxState SoftDeleted}
Links:
http://www.howexchangeworks.com/2010/09/purge-disconnected-or-soft-deleted.html http://technet.microsoft.com/en-us/library/dd351136.aspx
Clean WINSXS folder
Problem:
Windows 2008 R2 and Windows 7 are using a lot of space, most of this space is used by the WINSXS folder. WINSXS folder actualy doesn’t use this space but it hardlinked to DLL files of the system.
Solution:
After installing a Servicepack you can cleanup the folder using the following command: DISM.exe /online /Cleanup-Image /spsuperseded
Links:
VDA Redirector melding Citrix IE
Problem:
I noticed in some environments that after installing XA650W2K8R2X64025 and HDXFlash200WX64001 for XenApp 6.5 The users are getting an popup in Internet Explorer about the VDAredirector.exe opening outside IE protected mode:
This program will open outside of Protected mode. Internet Explorer’s Protected mode helps protect your computer. If you do not trust this website, do not open this program.
Name: Citrix FTA, URL VDA Redirector Publisher: Citrix Systems, INC
Solution:
After selecting “Do not show me the warning for this program again” and clicking on “Allow” i searched the registry and found the following key :
[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BFFC40A2-FFE2-4E6F-B179-3641561D4FCD}] “AppName”=”VDARedirector.exe” “AppPath”=”C:\\Program Files (x86)\\Citrix\\system32″ “Policy”=dword:00000003
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C1359F1-E04E-4231-9E7E-955DE92A17E1}] “AppName”=”redirector.exe” “AppPath”=”C:\\Program Files (x86)\\Citrix\\ICA Client” “Policy”=dword:00000003
Import these settings using Group Policy or using a Workspace management solution like RES or AppSense.
Links:
http://jamesscanlonitkb.wordpress.com/tag/url-vda-redirector/
Set mailbox language (localizedfolders)
Problem:
When creating a mailbox in Exchange 2007/2010 and you import a PST file the folders are named after the defined location, because Dutch is no standard option the localizedfolders are named after the en-US standard which means the are named inbox instead of postvak in.
Solution:
User:
Set-MailboxRegionalConfiguration -Identity “mailboxname” -Language nl-NL -LocalizeDefaultFolderName:$true.
Database:
get-mailbox -database “databasename” | set-mailboxregionalconfiguration -Language nl-NL -DateFormat “dd-MM-yyyy” -LocalizeDefaultFolderName:$true
Links:
http://technet.microsoft.com/en-us/library/dd351103(EXCHG.140).aspx
Import PST into Mailbox Exchange
Problem:
After an export of the PST files from a Exchange environment or single users Outlook, you need to import the PST file into the new mailbox within Exchange.
Solution:
New-MailboxImportRequest -Mailbox “mailboxname” -FilePath “\\Servername\Share\pstname.PST“
Enable WinRM for Windows Remote Shell
Problem:
When you need to perform a remote CDF trace or would like to use the HDX monitor for remote monitoring you need to enable the Windows Remote Shell.
Solution:
- Logon into the Windows console.
- Optional (For Windows Vista serve as remote server): Start the service “Windows Remote Management ” and set it for auto start after reboot.
- Write the command prompt : “WinRM quickconfig” and press on the “Enter” button.
- The following output should appear:
“WinRM is not set up to allow remote access to this machine for management. The following changes must be made:
Set the WinRM service type to delayed auto start. Start the WinRM service. Create a WinRM listener on HTTP://* to accept WS-Man requests to any IP on this machine.
Make these changes [y/n]? y“
- After pressing the “y” button, the following output should appear:
“WinRM has been updated for remote management.
WinRM service type changed successfully. WinRM service started. Created a WinRM listener on HTTP://* to accept WS-Man requests to any IP on this machine.“
Links:
http://support.microsoft.com/kb/555966
Https://taas.citrix.com
http://hdx.citrix.com/hdx-monitor
Change the computer icon name Windows
Problem:
Some people like to see the computer name on the Computer icon on there desktop or in the start menu.
Solution:
- Open the Registry using Regedit.
- Go to HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
- Make the user you use Owner and give it Full Control
- Edit the LocalizedString with the following: %username% on %computername%.
- Close the registry and logoff
When you logon the Computername will be changed.
Link:
VAMT 3.0 keeps crashing at startup
Problem:
When starting VAMT 3.0 you receive an MMC error: “MMC has detected an error in a snap-in and will unload it”
Solution:
Despite Microsoft doesn’t mention .Net framework 3.5 requirements you need to install .Net Framework 3.5, this will fix the problem.
Links:
Delete Specific Printer Connection
Problem:
When migrating a print driver or moving to another print server you would like to delete existing connections to the printer.
Solution:
Create a Log-on or Logoff script to remove the printer connections based on print server or based on Print driver:
Based on driver:
strComputer = “.”
Set objWMIService = GetObject(“winmgmts:” _
& “{impersonationLevel=impersonate}!\\” & strComputer & “\root\cimv2”)
Set colInstalledPrinters = objWMIService.ExecQuery _
(“Select * from Win32_Printer Where DriverName = ‘Printdriver'”)
For Each objPrinter in colInstalledPrinters
objPrinter.Delete_
Next
Where ‘Printdriver’ is the name of the print driver when looking at the Print server properties.
Based on print server:
strComputer = “.”
Set objWMIService = GetObject(“winm
& “{impersonation
Set colInstalledPri
(“Select * from Win32_Printer Where ServerName like ‘Printserver'”)
For Each objPrinter in colInstalledPri
objPrinter.Dele
Next
Where ‘Printserver’ is the name of the old print server.
Links:
Removing System Reserved Partition
Problem:
You like to delete the System Reserved partition in Windows.
Follow the below steps:
- Open a elevated command prompt and execute the following command:
bcdboot C:\Windows /s C: - Mark the C: Partition as Active within the Disk Management
- Reboot the machine
- Delete the System Reserved partition
- Reboot
Now the System Reserved partition is gone and you can Extend the C drive using a Third-party tool.
Links:
MDT 2012 Error: 0x800f081e
Problem:
You receive the following error when applying updates to the WINPE boot image with MDT 2012:
Deployment Image Servicing and Management tool
Version: 6.2.9200.16384
Image Version: 6.2.9200.16384
Processing 1 of 1 – Adding package Package_for_KB2782419~31bf3856ad364e35~amd64~~6.2.1.0
Error: 0x800f081e
The specified package is not applicable to this image.
The DISM log file can be found at C:\Windows\Logs\DISM\dism.log
Exit code = -2146498530
DISM /Add-Package failed, rc = -2146498530.
Solution:
Edit the Settings.XML file in the Deployment share’s “Control” folder, and change the following values:
<Boot.x86.UseBootWim>True</Boot.x86.UseBootWim>
<Boot.x64.UseBootWim>True</Boot.x64.UseBootWim>
New values:
<Boot.x86.UseBootWim>False</Boot.x86.UseBootWim>
<Boot.x64.UseBootWim>False</Boot.x64.UseBootWim>
Now MDT will no longer use the boot.wim file, instead it will use the winpe.wim file.
Links:
Google embedded streetview shows Grey screen
Problem:
When connecting to a Windows 2008 server using ICA and watching a site which using embedded streetview, the streetview section is grey and only lets you show the controls for streetview.
When connecting using RDP the problem doesn’t occur.
Solution:
After searching I found that disabling speedscreen will do the trick.
Configure SpeedScreen Browser Acceleration for a farm
- Depending on the version of XenApp you have installed, from the Start menu, select All Programs > Citrix > Management Consoles and choose Access Management Console or Delivery Services Console.
- In the left pane, select the farm.
- From the Action menu, select Modify farm properties > Modify all properties.
- From the Properties list, select Server Default > SpeedScreen > Browser Acceleration.
- Deselect the SpeedScreen Browser Acceleration check box to disable speedscreen browser acceleration.
Now the streetview images are displayed and everything is working.
Links:
Install Citrix Receiver on Windows Embedded
Problem:
Installing the Citrix Receiver on a Windows Embedded isn’t possible when using the default receiver.exe.
Solution:
Extract the receiver using the following command: CitrixReceiverEnterprise.exe /extract [Destination_name]
Then install the individual MSI in the following order:
- RIInstaller.msi
- ICAWebWrapper.msi
- SSONWrapper.msi
- GenericUSB.msi
- DesktopViewer.msi
- CitrixHDXMediaStreamForFlash-ClientInstall.msi
- PNAWrapper.msi
- Vd3d.msi
When you need to remove the installer then uninstall in the following order:
- Vd3d.msi
- PNAWrapper.msi
- CitrixHDXMediaStreamForFlash-ClientInstall.msi
- DesktopViewer.msi
- GenericUSB.msi
- SSONWrapper.msi
- ICAWebWrapper.msi
- RIInstaller.msi
Links:
Update is not applicable to your computer
Problem:
When having you receive the following message: “Update is not applicable to your computer” when installing a hotfix which you downloaded from the Microsoft site and you defenitly know your system is supported
Solution:
First we need to extract the MSU file and then use the pkgmgr to install the hotfix:
- Extract the Windows6.1-KB2740374-v2-x64.msu:
expand -f:* “C:\Windows6.1-KB2740374-v2-x64.msu” %TEMP% - Use pkgmgr to install:
pkgmgr /n:%TEMP%\Windows6.1-KB2740374-v2-x64.xml
Link: http://technet.microsoft.com/en-us/library/cc749465(v=ws.10).aspx
Internet Explorer settings Security tab are greyed out
Problem:
When logging in as a new user my Internet Explorer Security Settings are greyed out, when I perform a reset everything is working perfect. I don’t use any GPO’s the change settings.
Solution:
1) Login as user with the problem.
2) Reset the internet Explorer setting in the Advanced tab.
3) Export the registry settings of the following key:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\
4) Load the ntuser.dat from the default user as “Default” using Load Hive in Regedit.
C:\Users\Default\NTUser.dat
5) Edit the Exported .reg file and use find and replace
Find: HKEY_CURRENT_USER
Replace: HKEY_Users\Default
6) Import the changed settings.
7) Unload the hive for Default.
Now when a new user logs in the Internet Eplorer settings are correct.
Links:
http://discussions.citrix.com/topic/346840-internet-explorer-11-security-tab-grayed-out/
Windows 8.1 right click start button doesn’t work
Problem:
When you right click the start button it doesn’t let you see the menu.
Solution:
Copy the following folders from a user where the menu works:
The application was unable to start correctly (0xc01500002). ConfigWizard.exe
Problem:
After installing Provisioning Server 7.1 and you want to start the Configuration Wizard you receive the following error: “The application was unable to start correctly (0xc01500002)”
Solution:
When looking at the Event Log you will see the following error message:
Activation context generation failed for “C:\Program Files\Citrix\Provisioning Services\LicHelp.dll”. Dependent Assembly Microsoft.VC90.CRT,processorArchitecture=”amd64″,publicKeyToken=”1fc8b3b9a1e18e3b”,type=”win32″,version=”9.0.21022.8″ could not be found. Please use sxstrace.exe for detailed diagnosis.
This means the program needs the Visual C++ 2008 Redistributable Package. Download and install it and you will be able to open the Configuration Wizard.
Download link for Visual C++ 2008 SP1 Redistributable Package: http://www.microsoft.com/en-us/download/details.aspx?id=2092
Links:
Office UserInfo all the same
Problem:
All users are having the same UserInfo within Office.
Solution:
To resolve this issue for new users in a current Terminal Services deployment, the Administrator should do the following:
- Close all Office programs.
- Click Start, click Run, type regedit, and then click OK or type regedit in the Start Search box and then select regedit.exe
- Locate the following key and then right-click and delete the Username and UserInitials values:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Office\Common\UserInfo
To resolve the issue for all users in a new Terminal Services deployment, the Adminstrator should do the following:
- Select Customize during installation and clear the Username and Initials values
- Edit the <Office_Edition>.WW\Config.xml file in Notepad with Username set to empty value (“”): <USERNAME Value=”” />
- Remove the Username and UserInitials values after installation, as described above, from the registry key:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Office\Common\UserInfo
To resolve the issue for all users in a Existing Terminal Services deployment, the Adminstrator should do the following:
- Create a Registry preference were you delete the following key’s:4
- HKCU\Software\Microsoft\Office\Common\UserInfo –> UserInitials and
- HKCU\Software\Microsoft\Office\Common\UserInfo –> UserName
Links:
Failed to connect to data source
Problem:
I was receiving the following error: Failed to connect to data source ‘The broker service reported an error. See the event log for more information.’ in the event viewer ( Event ID 5) when using Desktop Director, and the latency wasn’t displayed.
Solution:
It looks like the performance counters are corrupted, I repaired them using the following command lodctr /r.
Links:
http://technet.microsoft.com/en-us/library/cc727160.aspx
Error: Unable to rebuild performance counter setting from system backup store, error code is 2
Problem:
When running the command you receive the error:
Error: Unable to rebuild performance counter setting from system backup store, error code is 2
Solution:
Open the command prompt and run the following command:
cd ..
cd syswow64
lodctr /r
Noow you receive the following message:
Info: Successfully rebuilt performance counter setting from system backup store
Links:
Update ADMX files for Windows 8.1 and Windows 2012 R2 on Windows 2008 R2 domain
Problem:
You would like to manage Windows 8.1 and Windows 2012 R2 through GPO from Windows 2008 R2 domain without updating your domain.
Solution:
Download and install the Administrative Templates (.admx) for Windows 8.1 Update and Windows Server 2012 R2 Update and copy the definitions to your central store.
\\Domain\SYSVOL\Domain\Policies\PolicyDefinitions
To see what’s new: Group Policy Settings Reference for Windows and Windows Server
Links:
http://www.microsoft.com/en-us/download/details.aspx?id=43413&WT.mc_id=rss_alldownloads_all
SQL setup won’t start
Problem:
The SQL setup won’t start when you double click setup.exe, when executing setup.exe from command prompt you will receive the following error:
ERROR: Runtime error: This method explicitly uses CAS policy, which has been obsoleted by the .NET Framework. In order to enable CAS policy for compatibility reasons, please use the NetFx40_LegacySecurityPolicy configuration switch. Please see http://go.microsoft.com/fwlink/?LinkID=155570 for more information.
Solution:
The solution is to remove .Net Framework 4.5
After removing you can install SQL.
Enable the Archive mailbox based on group membership Exchange
Problem:
You would like to enable the Archive mailbox based on group membership.
Solution:
Use the following script to set the Archive mailbox:
$g = (get-group SG-Archive).members
foreach ($m in $g) {
enable-mailbox $m.distinguishedname -Archive -ArchiveDatabase “Archive”
}
Save the script as .PS1 file and execute it using the Exchange Management Shell, when you want it as scheduled task use the following command to execute the script:
Exchange 2007: PowerShell.exe -PSConsoleFile “C:\Program Files\Microsoft\Exchange Server\Bin\ExShell.psc1” -Command “. ‘<path to script>\<YourScript>.ps1′”
Exchange 2010: PowerShell.exe -PSConsoleFile “C:\Program Files\Microsoft\Exchange Server\V14\Bin\ExShell.psc1” -Command “. ‘<path to script>\<YourScript>.ps1′”
Exchange 2013: PowerShell.exe -PSConsoleFile “C:\Program Files\Microsoft\Exchange Server\V15\Bin\ExShell.psc1” -Command “. ‘<path to script>\<YourScript>.ps1′”
set the mailbox size quotas based on group membership in Exchange
Problem:
You would to set the mailbox size quotas based on group membership.
Solution:
Use the following script to set the Mailbox quota’s:
$g = (get-group BM-MBX-Unlimited).members
foreach ($m in $g) {
set-mailbox $m.distinguishedname -UseDatabaseQuotaDefaults $false -IssueWarningQuota “UNLIMITED” -ProhibitSendReceiveQuota “UNLIMITED” -ProhibitSendQuota “UNLIMITED”
}
Save the script as .PS1 file and execute it using the Exchange Management Shell, when you want it as scheduled task use the following command to execute the script:
Exchange 2007: PowerShell.exe -PSConsoleFile “C:\Program Files\Microsoft\Exchange Server\Bin\ExShell.psc1” -Command “. ‘<path to script>\<YourScript>.ps1′”
Exchange 2010: PowerShell.exe -PSConsoleFile “C:\Program Files\Microsoft\Exchange Server\V14\Bin\ExShell.psc1” -Command “. ‘<path to script>\<YourScript>.ps1′”
Exchange 2013: PowerShell.exe -PSConsoleFile “C:\Program Files\Microsoft\Exchange Server\V15\Bin\ExShell.psc1” -Command “. ‘<path to script>\<YourScript>.ps1′”
Outlook crashes with McAfee e-mailscan addin
Problem: Outlook crashes with McAfee e-mailscan addin (MfeOtlkAddin.dll)
Solution:
Add a registry value to the HKCU\Software\Microsoft\Office\14.0\Outlook\Resiliency\DisabledItems:
Type: REG_Binary
Name: FE576
Value: 01,00,00,00,4a,00,00,00,46,00,00,00,63,00,3a,00,5c,00,77,00,69,00,\
6e,00,64,00,6f,00,77,00,73,00,5c,00,73,00,79,00,73,00,77,00,6f,00,77,00,36,\
00,34,00,5c,00,6d,00,66,00,65,00,6f,00,74,00,6c,00,6b,00,61,00,64,00,64,00,\
69,00,6e,00,2e,00,64,00,6c,00,6c,00,00,00,69,00,6e,00,76,00,6f,00,65,00,67,\
00,74,00,6f,00,65,00,70,00,61,00,73,00,73,00,69,00,6e,00,67,00,20,00,6d,00,\
63,00,61,00,66,00,65,00,65,00,2d,00,65,00,2d,00,6d,00,61,00,69,00,6c,00,73,\
00,63,00,61,00,6e,00,00,00
Save the following as .reg file to import the settings:
“FE576″=hex:01,00,00,00,4a,00,00,00,46,00,00,00,63,00,3a,00,5c,00,77,00,69,00,\
6e,00,64,00,6f,00,77,00,73,00,5c,00,73,00,79,00,73,00,77,00,6f,00,77,00,36,\
00,34,00,5c,00,6d,00,66,00,65,00,6f,00,74,00,6c,00,6b,00,61,00,64,00,64,00,\
69,00,6e,00,2e,00,64,00,6c,00,6c,00,00,00,69,00,6e,00,76,00,6f,00,65,00,67,\
00,74,00,6f,00,65,00,70,00,61,00,73,00,73,00,69,00,6e,00,67,00,20,00,6d,00,\
63,00,61,00,66,00,65,00,65,00,2d,00,65,00,2d,00,6d,00,61,00,69,00,6c,00,73,\
00,63,00,61,00,6e,00,00,00