VMware / Windows Server 2012 R2 - Access is denied

Windows Server 2012 R2 çalışan sistemde Access is denied hatası ile karşılaşıldığında.

Çözüm için linkte belirtilen düzenleme uygulanabilir.  https://kb.vmware.com/s/article/1012225

1. Power off the virtual machine.
2. Right-click the virtual machine and select Edit Settings.
3. Click the VM Options tab.
4. Click Advanced > Edit Configuration > Add Row.
5. Insert a new row with the name devices.hotplug and a value of false.
6. Power on the virtual machine.

Upgrade Windows 2012 R2 evaluation to full version

C:\Windows\system32>DISM /online /Get-CurrentEdition

Deployment Image Servicing and Management tool
Version: 6.3.9600.17031

Image Version: 6.3.9600.17031

Current edition is:

Current Edition : ServerStandardEval

The operation completed successfully.

C:\Windows\system32>DISM /online /Get-TargetEditions

Deployment Image Servicing and Management tool
Version: 6.3.9600.17031

Image Version: 6.3.9600.17031

Editions that can be upgraded to:

Target Edition : ServerStandard
Target Edition : ServerDatacenter

The operation completed successfully.

C:\Windows\system32>DISM /online /Set-Edition:ServerStandard /ProductKey:XXXXX /AcceptEula

Deployment Image Servicing and Management tool
Version: 6.3.9600.17031

Image Version: 6.3.9600.17031

Starting to update components...
Starting to install product key...
Finished installing product key.

Removing package Microsoft-Windows-ServerStandardEvalEdition~31bf3856ad364e35~amd64~~6.3.9600.16384
[==========================100.0%==========================]
Finished updating components.

Starting to apply edition-specific settings...
Finished applying edition-specific settings.

The operation completed successfully.
Restart Windows to complete this operation.

Do you want to restart the computer now? (Y/N)

Install Loopback Adapter

In the Device Manager window, 

Right-click the server name and select Add legacy hardware

Select Install the hardware that I manually select from a list (Advanced) and click Next.

Under Common hardware types, select Network adapters and click Next.

On the Select Network Adapter screen, select Microsoft select Microsoft KM-TEST Loopback Adapter

How to export Active Directory group members to csv file

Get-ADGroupMember -identity “Group Adı” | select name | Export-csv -path C:\FileName.csv -NoTypeInformation

Reset IBM / Lenovo IMM password

Download the IBM ASU Utilityhttps://support.lenovo.com/tr/en/solutions/lnvo-asu 

asu64.exe show IMM.LoginID.1
OR
asu.exe show IMM.LoginID.1

It should detect the IMM by IP address and return IMM.LoginID.1=USERID

Note: If it returns a different username you can check each login ID and reset them one by one.

Download the IBM ASU Utility 

asu64.exe set IMM.password.1 Password123
OR
asu.exe set IMM.password.1 Password123

https://support.lenovo.com/tr/en/solutions/lnvo-asu

How to view disk blocksize with powershell

PS C:\> $wql = "SELECT Label, Blocksize, Name FROM Win32_Volume WHERE FileSystem='NTFS'"

PS C:\> Get-WmiObject -Query $wql -ComputerName '.' | Select-Object Label, Blocksize, Name

How to view user sid

wmic useraccount where name='username' get sid

Get-InitiatorPort / HBA information

Windows PowerShell  - Get all initiator ports 

Get-InitiatorPort

Gets all available initiator ports. selects only the NodeAddress and ConnectionType properties, and then displays this information.

Get-InitiatorPort | Select-Object -Property NodeAddress,ConnectionType | Format-Table -AutoSize

https://technet.microsoft.com/en-us/%5Clibrary/hh848671(v=wps.630).aspx

Install .NET Framework 3.5 with Windows installation media

Install .NET Framework 3.5 with Windows installation media

You can use the Windows installation media as the file source when you enable the .NET Framework 3.5 feature.

To do this, follow these steps:

• 1.Insert the Windows installation media. 
• 2.At an elevated command prompt, run the following command: 

Dism /online /enable-feature /featurename:NetFx3 /All /Source:<drive>:\sources\sxs /LimitAccess

Note In this command, <drive> is a placeholder for the drive letter for the DVD drive or for the Windows 8 installation media.

For example, you run the following command:

Dism /online /enable-feature /featurename:NetFx3 /All /Source:D:\sources\sxs /LimitAccess

https://support.microsoft.com/en-us/kb/2734782


C:\Windows\system32>Dism /online /enable-feature /featurename:NetFx3 /All /Sourc
e:d:\sources\sxs /LimitAccess

Deployment Image Servicing and Management tool
Version: 6.3.9600.17031

Image Version: 6.3.9600.17031

Enabling feature(s)
[==========================100.0%==========================]
The operation completed successfully.

C:\Windows\system32>

Schannel - 36888

A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 40. The Windows SChannel error state is 252.


Interent Explorer ile https:// adresine erişmeye çalıştığımızda aşağıdaki hata mesajını alabiliriz.

Bu durumda System loglarına da yukarıdaki Schannel 36888 hatası düşer.


There is a problem with this website’s security certificate.

The security certificate presented by this website was not issued by a trusted certificate authority.
The security certificate presented by this website has expired or is not yet valid.
The security certificate presented by this website was issued for a different website's address.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.

How to Shadow a Terminal Server Session Without Prompt for Approval

How to Shadow a Terminal Server Session Without Prompt for Approval

Shadow Error "The oprerator or administrator has refused the request"

If you would like to shadow the Terminal Server sessionand you do not want to be prompted for permission, set the local Group Policy on the server that is running Terminal Services.

To remote control the console with no prompt for approval:

1. Open Group Policy Editor (Gpedit.msc) on the server that is running Terminal services.
2. Under Computer Configuration, expand Administrative templates, expand Windows Components, and then click Remote Desktop Services, and then click Remote Desktop Session Host, Connections.
3. Right-click Sets rules for remote control of Remore Desktop Service user sessions, and then clickProperties.
4. Select the Enabled option.
5. Under Options, click Full Control without user's permission.

How to install SDDDSM package on Windows Server 2012 R2

2.1 How to install SDDDSM package
    =============================
1. Select the package depending on your requirement i.e 32/64 bit package. 
2. Unzip the SDDDSM package. 
3. Open a command prompt (with Administrative privileges)
4. Run setup.exe (requires Administrative privileges)
5. Follow the instructions and say "Yes" accordingly. 
6. Restart the machine. 
7. Verify SDDDSM is installed successfully by running "datapath query version". 


2.2 How to uninstall SDDDSM package
    ===============================
1. Open a command prompt (with Administrative privileges)
2. Run "setup -u"
3. Restart the machine. 

User Account Control (UAC) is enabled on this host. - Windows Server 2012

Windows Server 2012 sunucu üzerinde UAC özelliğini kapatmak için registry içerisinde aşağıdaki değişikliği yapmak gerekiyor.


HKEY_LOCAL_MACHINE

SOFTWARE Microsoft > Windows > CurrentVersion > Policies > system içerisindeki

EnableLUA değerini 0 yapmak gerekiyor.