Issues with Storevirtual volumes, when using them without Network-RAID10?

Just a little mind-boggling thing I’ve been troubled with over the last months and finally I realised what the issue was. I’ve been troubleshooting an issue on one of my ESXi clusters which uses HPE StoreVirtual VSA and Synology as datastores.

During this troubleshooting (trouble was the Synology – looong sad story) I’ve had to reboot the hosts numerous times and every time I’ve been forced to shut down the network ports on the switch, that holds the iSCSI kernels’ network ports, otherwise the hosts wouldn’t boot it would just stay up and look as if it was waiting for a timeout. It might be that this timeout would’ve occurred if I had waited long enough, but I found myself patiently waiting for 10-20 minutes it seemed at the time… Suddenly I read and understood the message it was giving me: My set up is I’m running 3 Storevirtual datastores with Network-RAID10, 1 without Network RAID and 3 Synology datastores. When I wanted to reboot, I shut down the VSA appliance on the host and all my VMs were moved to the other host – but the issue was that since I had 1 datastore without Network RAID, this goes offline whenever I shut down any 1 of my VSA appliances.

This creates the issue, that the ESXi host cannot tell that volume that it is going down for a reboot and for some reason this is bad for the host – even though there is nothing using that datastore on the host. The VMs that have a VMDK on that datastore just shouldn’t use data to or from that VMDK while it’s offline and then there is no issue. The problem is that I cannot turn on the network ports again, until the host is completely booted because it also MUST for some reason connect to this offline volume under start-up, it just stays saying starting up ISCSI in the ESXi boot screen. If I keep the ports offline, the host boots quickly and then I can turn on the VSA appliance and the network ports and do a rescan of the iSCSI adapter and it’ll connect to the datastores – but it sometimes has the error message “All shared datastores has failed” on the Summary page.

To me this seems like a design problem and it would seem to me that a lot of people could have this potential issue/bad experience if using volumes without Network-RAID10?

Check KMS server licensing status

I recently had a KMS server go into unlicensed mode for its Office products for some unknown reason, but suddently I had quite a few clients that got activation errors and therefore had to solve it fairly fast.

So for later reference, as it took some minutes to find these specific activation IDs, I’ll list them here to find them more easily next time KMS makes trouble 🙂

Check licensing status: cscript slmgr.vbs /dlv “activation id”
Re-activate KMS licensing: cscript slmgr.vbs /ato “activation id”

Re-activate Office on clients:
C:\program files(x86)\Microsoft Office\Office15\cscript ospp.vbs /act

Activation IDs:
Windows2012R2_Win10 activation id: 20e938bb-df44-45ee-bde1-4e4fe7477f37
Office 2010 activation id:bfe7a195-4f8f-4f0b-a622-cf13c7d16864
Office 2013(OFFICE15) activation id: 2E28138A-847F-42BC-9752-61B03FFF33CD

Update Huawei Honor 7 to Android Marshmallow (6.0)

After a few month of waiting on the OTA update for marshmallow from Huawei, I finally discovered through an answer on twitter to another Scandinavian guy from @honoreu – that in Scandinavia they don’t provide the update OTA, but you have to manually update via a file from their german support site:

http://www.hihonor.com/de/support/details/?DOC_ID=77508

When you unzip this, there’s a “dload/update.app” folder/file that needs to be placed at the root of an SD-card and then through the EMUI updater application, you choose Local update, then it will find the file and update to Android Marshmallow in about 10-20 minutes, first parts of the update ended with a “post-process failed” error and then booted in to the upgrade optimizing part and then the update was done.

After a few updates and a little getting settled time, the phone seemed OK, I did a reboot just to clean up and everything seems to run fine.

Lesson learned – some audit policies cannot just be enabled simultaneusly

Today I learned that the some audit policies cannot be enabled at the same time.

To be able to audit logon events throughout our organization we have enabled the usual audit policies in the Domain Controller group policy:
auditpolicies
At some point someone decided to audit if there were happening changes to our audit policies, through the “Advanced Audit Policy Configuration”. This additional audit policy was made through the Group Policy Management Console on a Windows 2012R2 server. Here it’s possible, without issues or hints that it’s a bad idea, to make this policy. When this got enforced on domain controllers, they stopped logging the above events in their security event-logs. This made it impossible to help users that got locked out without knowing where from and why, because the typical “bad password” events did not get logged. This is where you get the client ip of the session that is giving the bad password, mostly because it’s been hanging around since before the user last changed their password.

If you look on technet, sure Microsoft mentions that if you enable both the audit policies and the advanced audit policies, it can cause odd behaviour – https://technet.microsoft.com/en-us/library/dd692792(WS.10).aspx

If the admin had looked and wondered about the explanation Microsoft put in the policy configuration, he would/should have made the change that is required to have both Audit Policy and the Advanced Audit Policy Configuration:

advancedauditpolicesHere it tells you to enable the “Audit: Force audit policy subcategory settings (Windows Vista or later)” under Windows Settings/Security Settings/Local Policies/Security Options. 

 

RSAT tools on Windows 8.1/10 and Trend Micro Officescan

About a month ago I had to quickly provision and prepare a new domain controller for a remote site, this went smooth and quite fast they had a new DC for logon/DNS and also acting as DHCP. One thing we had noticed before the upgrade was that if we tried to use Active Directory Users and Computers from the Remote Server Administration Tools package against the domain controller, then we were getting a “RPC Server is unavailable”. Since we have multiple sites and this was the only site we’ve noticed this issue, then when we started having other issues regarding replication and so on, we were quite quick to determine that the server needed to be replaced.

After the new server was brought up and was prepared, I tried again to use the remote tools to administer the server, but to my “horror” I was still getting this error… Now with the upgrade, I went for a 2012R2 version where the old was 2008R2, so I started thinking if there could be an issue with this for the new server. At the time I didn’t have other remote 2012R2 domain controllers, so for a while I settled with this and decided to come back and try to resolve it when I got some spare time – the DC was running perfectly on all other measures.

Today, a little over a month later, I got this extra time on my hands and decided to give it another look. Now, since last month, I’ve got a brand new site that holds a 2012R2 DC and of course this works fine with the remote tools – so something had to be messed up on the other site. I tried a quick search for RPC and RSAT tools and got some old Windows Vista KB that didn’t help me much, but then the second result took me in the direction, that some antivirus clients(or rather the Realtime-scan part) had a tendency to block RPC calls – so I tried to unload the Officescan client and voila -> The connection in ADUC switched over to the server that it couldn’t connect to previously…

Now this is all fine and dandy, but what I cannot get around is – how can it work against the other site’s DC without any issues???

The only thing I see different between the 2 sites is that the brand new site is VPN connected through Cisco ASA, and the other site that needs me to turn of Officescan is connected through our company MPLS…

If anyone can explain this to me – please do so in the comments below!

/
Dan

Small “bug” after applying Exchange 2010 SP3 UR11

It seems that if a user set an Out of office from their Outlook client, before the update was applied, it cannot be turned off using their Outlook client. They are simply asked again and again, without success.

This can be handled through the Exchange Control Panel website, where an admin can turn it off for the specific users.

 

Windows 10 “display driver for Windows 8 crashed” issues

Having used Windows 10 for what seems a long time, and having upgraded whatever I could get my fingers on, issues sometimes appear. One of these have been going on through almost the entire lifespan of Windows 10, from the earliest builds. Depending on how/what I am doing on the PC, then a few times a day I’ve seen a 5-10 second stop in everything and then an error message, saying something like “Intel HD display driver for Windows 8 has crashed” – I’ve been blaming it on me running the insider build, but still I was annoyed that Intel/Microsoft did not fix at least the error message to show Windows 10.

But now mom has been upgraded, and she really only uses Microsoft Solitaire collection, 1 game-site online with Java-games and occasionally browse the net. She found that when playing the Spider solitaire game, she could force the crash message and her game needed to be restarted, but she could never get a game done.

Having this to search from, I quickly found that a lot of other people are playing these games 🙂 and they have seen many issues with these since Windows 10 came along. But in November, Intel finally stepped up at least on the beta channel – and provided what seems to be a fixed display driver, still though on the release notes, there are quite a few games that have issues, so be careful to read this.

Find the Intel beta download here: https://downloadcenter.intel.com/download/25541/Intel-Beta-Graphics-Driver-for-Windows-7-8-1-10-15-40-

This driver seems to work for most Intel current display adapters, but check the list below:

Intel® Iris™ Pro Graphics 5200 for 4th Generation Intel® Core™ Processors
Intel® Iris™ Graphics 5100 for 4th Generation Intel® Core™ Processors
Intel® HD Graphics 5000 for 4th Generation Intel® Core™ Processors
Intel® HD Graphics 4600 for 4th Generation Intel® Core™ Processors
Intel® HD Graphics 4400 for 4th Generation Intel® Core™ Processors
Intel® HD Graphics 4200 for 4th Generation Intel® Core™ Processors
Intel® HD Graphics 5300 for Intel® Core™ M Processors
Intel® Iris™ Graphics 6100 for 5th Generation Intel® Core™ Processors
Intel® HD Graphics 5500 for 5th Generation Intel® Core™ Processors
Intel® HD Graphics 6000 for 5th Generation Intel® Core™ Processors
Intel® HD Graphics 530 for 6th Generation Intel® Core™ Processors
Intel® HD Graphics 515 for 6th Generation Intel® Core™ M Processors
Intel® HD Graphics 520 for 6th Generation Intel® Core™ Processors
Intel® Iris™ Pro Graphics 580 for 6th Generation Intel® Core™ Processors
Intel® Iris™ Graphics 540 for 6th Generation Intel® Core™ Processors
Intel® Iris™ Graphics 550 for 6th Generation Intel® Core™ Processors
Intel® Iris™ Pro Graphics 6200 for 5th Generation Intel® Core™ Processors

Get BGinfo working on high resolution screens (Surface Pro 3 maybe?)

I’ve had BGinfo running on my work PCs forever, but since I got the Surface Pro 3 it hasn’t really looked great. Different scenarios, single or multiple monitors, the background picture always seems to get warped into something not pretty. Today I finally did a search to see if anyone got the same issue, and of course there were J

On the Spiceworks forums this showed up:

And with that little tweak in compatibility settings, now everything looks great again.

Changing time/date formatting on Welcome Screen in Windows 10 (and 7/8)

Do you also wonder how to change the format of the time and date on the Welcome screen of Windows 10 to your local format? I’ve installed the English Windows 10 as this is what I’ve worked with the last 10 years or so, but this time I have been mocking around in the settings to find out how to change the format of the time and date on my Welcome Screen. Finally today I figured out what I hadn’t tried J

I’ve looked in the Region “app” of the Control Panel lots of times but today I found the not so obvious, to me at least, place where I change the Welcome screen formatting.

  1. Go to the Start and search for Region (easiest way to find it)

 

  1. Go to Administrative tab and open Copy settings

 

  1. Here it shows the current setup and if you mark the bottom option to copy the settings from the current user to the Welcome Screen(which does not belong to a user and therefore is created with the default for the Windows Setup language) the formatting is changed on next logon.