SRE, VMware Virtualization, vSphere, vCD, ESX, Configuration Management, Microsoft AD, Security, Networking, and about anything else..
Monday, August 24, 2009
EMC Clariion unmanageable
Wednesday, August 12, 2009
I want to know what users to harass because their mailbox is too large
Get-MailboxStatistics -Server csmailstore1 | Where {$_.TotalItemSize -gt 1GB} | Sort-Object -Property TotalItemSize -Descending | Format-Table DisplayName,TotalItemSize > c:\mailboxsizes.txt
Exchange Send-As problem
Add-ADPermission "brian smith" -user newADDom\bsmith -ExtendedRights Send-As
However, every 15 minutes or so I noticed that this right would vanish, i'd do a
Get-ADPermission "Brian Smith" ft -wrap > c:\Brian.txt
and notice there was no permissions to newADDOM\bsmith.
I found out one of the security restrictions is that Domain Admins and Enterprise Admins can't have "send-as" rights to another mailbox. Therefore I have to remove myself from those groups in order to work in a Send-As Scenario. Nice Job Microsoft, way to use a 'best practice' guide as an excuse not to fix a huge bug. There are work arounds, but they look to difficult to bother with for the short time before we migrate.
NOTE: you really gotta make sure its removed from all of the groups that are members of any of the other builtin groups.
Tuesday, August 4, 2009
DC's out of Time Sync
Doing my w32tm /monitor command showed me that my DC's were out of sync. Seeing this I wondered why. I noticed in the registry that many of my DC's were syncing with time.windows.com. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters
Since my PDC emulator has the appropriate settings to be an NTP server and is pointing to an external time source my company likes, it's ready to be sync'd with, so I wanted to point all my DC's to it, and not time.windows.com
I modified the "NtpServer" REG_SZ parameter to be the IP of my PDC Emulator, restarted the Windows Time Service, and blamo in less than 3600 seconds, it all works again
Thursday, July 30, 2009
Exchange Not delivering emails(SCR Replication), Active Mailbox Delivery Queue Length growing, Information store wont start Exchange 2007
We use the new SCR replication to our Remote Backup location. For some reason emails started to queue up. I rebooted the Mailstore in hopes the hub would then be able to deliver the messages, this didn’t help, when Exchange mailstore came back up, the IS and SA wouldn’t start, here are some of the event log errors:
==========================================
Event Type: Error
Event Source: MSExchange ADAccess
Event Category: Topology
Event ID: 2142
Process MSEXCHANGEADTOPOLOGYSERVICE.EXE (PID=1528). Topology discovery failed, error 0x8007077f.
==========================================
Event Type: Error
Event Source: MSExchangeIS
Event Category: General
Event ID: 5000
Unable to initialize the Microsoft Exchange Information Store service. - Error 0xfaf.
==========================================
Event Type: Error
Event Source: MSExchangeTransportLogSearch
Event Category: General
Event ID: 7005
Microsoft Exchange couldn't read the configuration from the Active Directory directory service because of error: Failed to load config due to exception: Microsoft.Exchange.Data.Directory.NoSuitableServerFoundException: The Exchange Topology service on server localhost did not return a suitable domain controller………
==========================================
All of this told me that exchange was unable to locate a GC in it’s site. That’s pretty odd, there is a DC/GC racked right above it on the same lan. However, after quite a bit of trial and error I noticed that in AD Sites there was no “Subnet” for this range of IP addresses, someone had deleted it. Once this was fixed and I forced a full AD Sync, everything came back online.
NOTE: another thing I did was to change the DNS settings for the Exchange Mailstore. I read that sometimes you have problems locating a GC if you point to a DNS/DC server that is far away and not in your site. I doubt this did much, but its working now so I thought i’d throw it in there.
Tuesday, July 28, 2009
I couldn't seem to find replmon on 2008 server
so commands like repadmin /replsummary , things like that should show you what you need.
Monday, July 20, 2009
When you install ESX
800 MB for Service Console (for HP ESX mgmnt, for Backups)
1600 MB for Page File (should always be 2x SC above)
1500mhz reserved for Service Console (for backups, misc)