<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>SteelBytes.NeT</title>
	<atom:link href="http://www.steelbytes.net/feed" rel="self" type="application/rss+xml" />
	<link>http://www.steelbytes.net</link>
	<description>Converting bytes to knowledge</description>
	<lastBuildDate>Wed, 08 May 2013 16:00:04 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Change management console language System Center 2012 products (ConfigMgr, VMM etc.)</title>
		<link>http://www.steelbytes.net/change-management-console-language-system-center-2012-products-configmgr-vmm-etc</link>
		<comments>http://www.steelbytes.net/change-management-console-language-system-center-2012-products-configmgr-vmm-etc#comments</comments>
		<pubDate>Wed, 08 May 2013 15:55:36 +0000</pubDate>
		<dc:creator>Paolo</dc:creator>
				<category><![CDATA[SCCM]]></category>
		<category><![CDATA[System Center 2012]]></category>
		<category><![CDATA[System Center Configuration Manager 2012]]></category>
		<category><![CDATA[System Center Virtual Machine Manager 2012]]></category>
		<category><![CDATA[VMM]]></category>
		<category><![CDATA[configmgr language]]></category>
		<category><![CDATA[system center 2012 management console language]]></category>
		<category><![CDATA[system center management console language]]></category>
		<category><![CDATA[vmm management console language]]></category>

		<guid isPermaLink="false">http://www.steelbytes.net/change-management-console-language-system-center-2012-products-configmgr-vmm-etc</guid>
		<description><![CDATA[This is an easy one. When starting the management console the language of the local OS will be detected. Then it will search if a language pack is present. When found, the corresponding language will be shown and troubleshooting will instantly become a lot harder (or you can just try to search for non-English errors, [...]]]></description>
			<content:encoded><![CDATA[<p>This is an easy one. When starting the management console the language of the local OS will be detected. Then it will search if a language pack is present. When found, the corresponding language will be shown and troubleshooting will instantly become a lot harder (or you can just try to search for non-English errors, good luck).</p>
<p>Two solutions are possible to show the interface in English:</p>
<p>1. Change your OS&#160; language from your control panel (Regional settings). Yes, that’s a solution, but of course you already thought about that and don’t want to. So, solution 2:</p>
<p>2. Rename the language pack folder within the install directory of your management console. Default language pack locations of SCCM and SCVMM 2012 management console:</p>
<ul>
<li>System Center Configuration Manager 2012: C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\bin\[language_code]     </li>
<li>System Center Virtual Machine Manager 2012: C:\Program Files\Microsoft System Center 2012\Virtual Machine Manager\bin\[language_code]</li>
</ul>
<p>Close the management console, rename the language pack folder corresponding to your current OS language, restart the console and the default language (English) will be shown.</p>
<div id="crp_related"><h5>Related Posts:</h5><ul><li><a href="http://www.steelbytes.net/excel-macro-problems-when-file-is-on-a-network-location" rel="bookmark" class="crp_title">Excel macro problems when file is on a network location</a></li><li><a href="http://www.steelbytes.net/no-task-sequence-in-sccm-boot-or-no-advertisements-in-sccm-client" rel="bookmark" class="crp_title">No task sequence in SCCM OSD or no advertisements in SCCM client</a></li><li><a href="http://www.steelbytes.net/id-804-template-already-exists-vmm-2012" rel="bookmark" class="crp_title">ID 804: Template already exists &#8211; VMM 2012</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://www.steelbytes.net/change-management-console-language-system-center-2012-products-configmgr-vmm-etc/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ID 804: Template already exists &#8211; VMM 2012</title>
		<link>http://www.steelbytes.net/id-804-template-already-exists-vmm-2012</link>
		<comments>http://www.steelbytes.net/id-804-template-already-exists-vmm-2012#comments</comments>
		<pubDate>Thu, 25 Apr 2013 10:29:03 +0000</pubDate>
		<dc:creator>Paolo</dc:creator>
				<category><![CDATA[Hyper-V]]></category>
		<category><![CDATA[System Center Virtual Machine Manager 2012]]></category>
		<category><![CDATA[VMM]]></category>
		<category><![CDATA[template already exists]]></category>
		<category><![CDATA[virtual machine template name exists]]></category>
		<category><![CDATA[vmm 2012 template exists]]></category>

		<guid isPermaLink="false">http://www.steelbytes.net/id-804-template-already-exists-vmm-2012</guid>
		<description><![CDATA[Virtual Machine Manager crashed while creating a template. When I retried to create the template, the message ‘template {name} already exists. specify a unique name’ with ID 804 appears. I found this article, which was very helpful: http://www.altaro.com/hyper-v/error-804-hung-template-creation-in-scvmm-2008-r2/. These instructions are also working for SCVMM 2012 SP1. Basically, you will adjust one value in your [...]]]></description>
			<content:encoded><![CDATA[<p>Virtual Machine Manager crashed while creating a template. When I retried to create the template, the message ‘<em>template {name} already exists. specify a unique name</em>’ with <em>ID 804</em> appears.</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/04/image.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/04/image_thumb.png" width="519" height="212" /></a></p>
<p>I found this article, which was very helpful: <a title="http://www.altaro.com/hyper-v/error-804-hung-template-creation-in-scvmm-2008-r2/" href="http://www.altaro.com/hyper-v/error-804-hung-template-creation-in-scvmm-2008-r2/">http://www.altaro.com/hyper-v/error-804-hung-template-creation-in-scvmm-2008-r2/</a>.</p>
<p>These instructions are also working for SCVMM 2012 SP1. Basically, you will adjust one value in your database:</p>
<ol>
<li>Connect to your VMM database with SQL Management Studio</li>
<li>Locate the tablet <em>dbo.tbl_WLC_VObject</em></li>
<li>Edit the Top 200 Rows</li>
<li>Find the corresponding template name in the column ‘Name’ and adjust the value in ‘ObjectState’ from ‘3’ to ‘0’</li>
<li>Restart the Virtual Machine Manager service and you will be able to create the template again     </li>
</ol>
<div id="crp_related"><h5>Related Posts:</h5><ul><li><a href="http://www.steelbytes.net/beware-of-creating-security-templates-on-another-os" rel="bookmark" class="crp_title">Beware of creating security templates for use in another OS</a></li><li><a href="http://www.steelbytes.net/change-management-console-language-system-center-2012-products-configmgr-vmm-etc" rel="bookmark" class="crp_title">Change management console language System Center 2012 products (ConfigMgr, VMM etc.)</a></li><li><a href="http://www.steelbytes.net/cluster-shared-volume-not-accessible-from-other-nodes-error-status_bad_network_pathc00000be" rel="bookmark" class="crp_title">Cluster Shared Volume not accessible from other nodes &#8211; error &lsquo;STATUS_BAD_NETWORK_PATH(c00000be)&#8217;.</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://www.steelbytes.net/id-804-template-already-exists-vmm-2012/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Enable or disable Outlook add-ins on a per user basis (as for Citrix)</title>
		<link>http://www.steelbytes.net/enable-or-disable-outlook-add-ins-on-a-per-user-basis-as-for-citrix</link>
		<comments>http://www.steelbytes.net/enable-or-disable-outlook-add-ins-on-a-per-user-basis-as-for-citrix#comments</comments>
		<pubDate>Tue, 19 Mar 2013 11:40:17 +0000</pubDate>
		<dc:creator>Paolo</dc:creator>
				<category><![CDATA[Citrix]]></category>
		<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[Windows Server 2008]]></category>
		<category><![CDATA[Windows Server 2008 R2]]></category>
		<category><![CDATA[add-in per user]]></category>
		<category><![CDATA[citrix outlook add-in]]></category>
		<category><![CDATA[disable outlook add-in]]></category>
		<category><![CDATA[outlook add-in registry]]></category>
		<category><![CDATA[per user outlook add-in]]></category>

		<guid isPermaLink="false">http://www.steelbytes.net/enable-or-disable-outlook-add-ins-on-a-per-user-basis-as-for-citrix</guid>
		<description><![CDATA[There are certain scenario’s where you want to enable Outlook add-ins only for specific users. This guide explains how to accomplish this by using the group policy. 1. Open the registry and navigate to: HKCU\Software\Microsoft\Office\Outlook\Addins 2. Find the corresponding key which matches the Outlook add-in you have installed (for example: HKCU\Software\Microsoft\Office\Outlook\Addins\OcOffice.OcForms) 3. Right-click on the [...]]]></description>
			<content:encoded><![CDATA[<p>There are certain scenario’s where you want to enable Outlook add-ins only for specific users. This guide explains how to accomplish this by using the group policy.</p>
<p>1. Open the registry and navigate to: <em>HKCU\Software\Microsoft\Office\Outlook\Addins      <br /></em>2. Find the corresponding key which matches the Outlook add-in you have installed (for example: <em>HKCU\Software\Microsoft\Office\Outlook\Addins\OcOffice.OcForms</em>)     <br />3. Right-click on the key and choose “<em>Copy Key Name”</em></p>
<p>In every subkey you will find a registry value “<em>LoadBehavior</em>”. By default it has the value “<em>3</em>”. Every value is explained here: <a title="http://msdn.microsoft.com/en-us/library/vstudio/bb386106.aspx#LoadBehavior" href="http://msdn.microsoft.com/en-us/library/vstudio/bb386106.aspx#LoadBehavior">http://msdn.microsoft.com/en-us/library/vstudio/bb386106.aspx#LoadBehavior</a></p>
<p align="left">4. Now edit or create a Group Policy Object and configure the following settings    <br />5. Navigate to<em> User Configuration &gt; Preferences &gt; Windows Settings &gt; Registry      <br /></em>6. Right-click and select <em>New &gt; Registry Item      <br /></em>7. Paste the key you copied earlier in <em>Key Path</em></p>
<ul>
<ul>
<li>
<div align="left">At Value name, type &quot;<em>LoadBehavior</em>”.</div>
</li>
<li>
<div align="left">At Value type, choose “<em>REG_DWORD</em>”</div>
</li>
<li>
<div align="left">At Value data, type “<em>00000002</em>”, this will unload the add-in</div>
</li>
</ul>
</ul>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/03/image9.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/03/image_thumb9.png" width="319" height="376" /></a></p>
<p>8. Open the <em>Common </em>tab     <br />9. Select “<em>Run in logged-on user&#8217;s security context (user policy option)” </em>and “<em>Item-level targeting</em>”</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/03/image10.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/03/image_thumb10.png" width="319" height="366" /></a>     </p>
<p>10. Create a security group in your domain     <br />11. Click <em>Targeting…</em> and add the group you just created     <br />12. At Item Options, select “<em>Is Not</em>”</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/03/image11.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/03/image_thumb11.png" width="413" height="290" /></a></p>
<p>13. Now make a copy of the just created registry setting you made in the policy. In the copied setting, change the registry value to “<em>00000003</em>”, and change the Targeting from <em>“Is Not&quot; to </em>“<em>Is</em>”. This will load the add-in for any user who is a member of the group.</p>
<p>Now you have two settings configured:</p>
<ul>
<li>When an user is not member of the group, the add-in will not be loaded. </li>
<li>When an user is member of the group, the add-in will be loaded. </li>
</ul>
<div id="crp_related"><h5>Related Posts:</h5><ul><li><a href="http://www.steelbytes.net/deleted-items-folder-outlook-renamed" rel="bookmark" class="crp_title">Deleted items folder Outlook renamed</a></li><li><a href="http://www.steelbytes.net/security-warning-do-you-want-to-view-only-only-the-webpage-content-that-was-delivered-securely" rel="bookmark" class="crp_title">Security warning &ldquo;Do you want to view only the webpage content that was delivered securely?&rdquo;</a></li><li><a href="http://www.steelbytes.net/how-to-reset-the-administrator-password-on-your-windows-7-2008-machine-without-logging-on" rel="bookmark" class="crp_title">How to reset / bypass the administrator password on your Windows 7 / 2008 machine without logging on</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://www.steelbytes.net/enable-or-disable-outlook-add-ins-on-a-per-user-basis-as-for-citrix/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to renew the SCCM Site Server Signing Certificate</title>
		<link>http://www.steelbytes.net/how-to-renew-the-sccm-site-server-signing-certificate</link>
		<comments>http://www.steelbytes.net/how-to-renew-the-sccm-site-server-signing-certificate#comments</comments>
		<pubDate>Tue, 19 Mar 2013 07:53:45 +0000</pubDate>
		<dc:creator>Paolo</dc:creator>
				<category><![CDATA[SCCM]]></category>
		<category><![CDATA[sccm certificate]]></category>
		<category><![CDATA[sccm certificate request]]></category>
		<category><![CDATA[sccm policy provider]]></category>
		<category><![CDATA[site server signing certificate]]></category>
		<category><![CDATA[sms_policy_provider]]></category>

		<guid isPermaLink="false">http://www.steelbytes.net/sccm-component-status-error-sms-policy-provider-has-failed-to-sign-one-or-more-policy-assignments-2</guid>
		<description><![CDATA[When your SCCM Site Server Signing Certificate has expired you will experience problems with packages, virtual applications and OS deployment with your SCCM clients. The SCCM server reports “SMS Policy Provider has failed to sign one or more policy assignments. It will retry this operation automatically.” in the Component Status SMS_POLICY_PROVIDER. This article consists of [...]]]></description>
			<content:encoded><![CDATA[<p>When your SCCM Site Server Signing Certificate has expired you will experience problems with packages, virtual applications and OS deployment with your SCCM clients. The SCCM server reports <em>“SMS Policy Provider has failed to sign one or more policy assignments. It will retry this operation automatically.”</em> in the Component Status SMS_POLICY_PROVIDER.</p>
<p>This article consists of two parts how to check expiration and renew the certificate:</p>
<p><a href="#A">A. How to check if the SCCM Site Server Signing Certificate is expired</a></p>
<p><a href="#B">B. How to create a request file to renew the certificate (only working method to renew!)</a></p>
<p>&nbsp;</p>
<p><strong><a name="A"></a>A. How to check if the SCCM Site Server Signing Certificate is expired</strong></p>
<p>1. In the Configuration Manager Console, navigate to <em>Site Management<br />
</em>2. Open the Properties of your Site<br />
3. Open <em>Site Mode</em> and note the name of the Certificate</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/03/image.png"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="image" src="http://www.steelbytes.net/wp-content/uploads/2013/03/image_thumb.png" alt="image" width="384" height="463" border="0" /></a></p>
<p>4. Click on <em>Browse…</em></p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/03/image1.png"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="image" src="http://www.steelbytes.net/wp-content/uploads/2013/03/image_thumb1.png" alt="image" width="357" height="480" border="0" /></a></p>
<p>5. Check the corresponding certificate name and check the <em>Valid From</em> date</p>
<p>If the certificate is expired, you have to renew the certificate by following the steps below.</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p><strong><a name="B"></a>B. How to create a request file to renew the certificate</strong></p>
<p>Be sure to do this outside work hours, because it impacts the SCCM clients.</p>
<p>1. Create a new file ‘<em>sitesigning.inf</em>’ with the following content:</p>
<pre class="csharpcode" style="width: 606px; height: 117px;">[NewRequest]
FriendlyName = "SCCM Site Signing Server Certificate [your site code]"
Subject = "CN=The site code of this site server is [your site code]"
MachineKeySet = True
[RequestAttributes]
CertificateTemplate = ConfigMgrSiteServerSigningCertificate</pre>
<p>2. Save the file and open an elevated command prompt.</p>
<p>3.Type the following commands in the folder where you saved the file:</p>
<pre class="csharpcode">certreq –new sitesigning.inf sitesigning.req</pre>
<pre class="csharpcode">certreq –submit sitesigning.req sitesigning.cer</pre>
<p>4. Select the correct CA:</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/03/image2.png"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="image" src="http://www.steelbytes.net/wp-content/uploads/2013/03/image_thumb2.png" alt="image" width="324" height="208" border="0" /></a></p>
<p>Output of certreq commands:</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/03/image3.png"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="image" src="http://www.steelbytes.net/wp-content/uploads/2013/03/image_thumb3.png" alt="image" width="581" height="302" border="0" /></a></p>
<p>The certificate is now requested at your Certificate Authority.</p>
<p>5. Issue the certificate in your CA in <em>Pending Requests </em>and remember the <em>Request ID</em></p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/03/image4.png"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="image" src="http://www.steelbytes.net/wp-content/uploads/2013/03/image_thumb4.png" alt="image" width="608" height="420" border="0" /></a></p>
<p>6. In an elevated cmd on the SCCM server again, type the following command:</p>
<pre class="csharpcode">certreq –retrieve [requestidnumber] sitesigning.cer</pre>
<p>7. Select the correct CA again:</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/03/image5.png"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="image" src="http://www.steelbytes.net/wp-content/uploads/2013/03/image_thumb5.png" alt="image" width="324" height="206" border="0" /></a></p>
<p>8. Open the local Certificate store by opening an new mmc and add <em>Certificates (Local Computer)</em></p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/03/image6.png"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="image" src="http://www.steelbytes.net/wp-content/uploads/2013/03/image_thumb6.png" alt="image" width="542" height="392" border="0" /></a></p>
<p>9. Check if the certificate is present in <em>Personal / Certificates</em> (a little key must appear with the certificate! if not, the certificate does not contain the private key)</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/03/image7.png"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="image" src="http://www.steelbytes.net/wp-content/uploads/2013/03/image_thumb7.png" alt="image" width="609" height="408" border="0" /></a></p>
<p>11. In the Configuration Manager Console, navigate to <em>Site Management</em></p>
<p>11. Open the Properties of your Site</p>
<p>12. Open <em>Site Mode, </em>click on Browse and select the new certificate</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/03/image8.png"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="image" src="http://www.steelbytes.net/wp-content/uploads/2013/03/image_thumb8.png" alt="image" width="308" height="566" border="0" /></a></p>
<p>The certificate is now renewed.</p>
<p>You can check the <em>SMS_POLICY_PROVIDER</em> status again under: <em>System Status &gt; Site Status &gt; [Site code] &gt; Component Status</em></p>
<p>If the certificate is correctly renewed, the message <em>‘SMS Policy Provider successfully signed all policy assignments with the new Site Server Signing Certificate.’</em> will appear. Your SCCM clients will then be functional again.</p>
<div id="crp_related"><h5>Related Posts:</h5><ul><li><a href="http://www.steelbytes.net/sccm-component-status-error-sms-policy-provider-has-failed-to-sign-one-or-more-policy-assignments" rel="bookmark" class="crp_title">SCCM Component Status error: &ldquo;SMS Policy Provider has failed to sign one or more policy assignments&rdquo;</a></li><li><a href="http://www.steelbytes.net/sccm-osd-error-0x80004005" rel="bookmark" class="crp_title">SCCM OSD error: 0&#215;80004005</a></li><li><a href="http://www.steelbytes.net/no-task-sequence-in-sccm-boot-or-no-advertisements-in-sccm-client" rel="bookmark" class="crp_title">No task sequence in SCCM OSD or no advertisements in SCCM client</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://www.steelbytes.net/how-to-renew-the-sccm-site-server-signing-certificate/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to reset / bypass the administrator password on your Windows 7 / 2008 machine without logging on</title>
		<link>http://www.steelbytes.net/how-to-reset-the-administrator-password-on-your-windows-7-2008-machine-without-logging-on</link>
		<comments>http://www.steelbytes.net/how-to-reset-the-administrator-password-on-your-windows-7-2008-machine-without-logging-on#comments</comments>
		<pubDate>Mon, 18 Mar 2013 13:15:33 +0000</pubDate>
		<dc:creator>Paolo</dc:creator>
				<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[Windows Server 2008]]></category>
		<category><![CDATA[Windows Server 2008 R2]]></category>
		<category><![CDATA[administrator password]]></category>
		<category><![CDATA[local password reset]]></category>
		<category><![CDATA[password reset]]></category>
		<category><![CDATA[windows password bypass]]></category>
		<category><![CDATA[windows password reset]]></category>

		<guid isPermaLink="false">http://www.steelbytes.net/how-to-reset-the-administrator-password-on-your-windows-7-2008-machine-without-logging-on</guid>
		<description><![CDATA[Last time I had to rejoin a machine to the domain and apparently some nutjob administrator didn’t use the documented password for the local administrator account. So with no option to log on to the machine locally, I had to follow the steps below. Basically, you replace the executable used for Accessibility options showed in [...]]]></description>
			<content:encoded><![CDATA[<p>Last time I had to rejoin a machine to the domain and apparently some nutjob administrator didn’t use the documented password for the local administrator account. So with no option to log on to the machine locally, I had to follow the steps below. Basically, you replace the executable used for Accessibility options showed in the logon screen. You can, of course, use this method for other local accounts.</p>
<p>1. Insert the original Windows 7 / Server 2008 installation DVD    <br />2. Reset the computer, boot from DVD     <br />3. Choose option &quot;Repair your computer&quot;     <br />4. Start command prompt</p>
<p>Type in the following commands:</p>
<blockquote><p><font size="3" face="Courier New">C:\&#160; <br />CD C:\Windows\System32&#160; <br />MOVE Utilman.exe Utilman.exe.bak         <br />COPY Cmd.exe Utilman.exe</font></p>
</blockquote>
<p>5. It may be necessary&#160; to enable the administrator account by using the following command:</p>
<blockquote><p><font size="3" face="Courier New">NET USER administrator /active:yes</font></p>
</blockquote>
<p>6. Restart windows. At the login screen, type Windows-U, this will now open cmd.exe.</p>
<p>Type in the following command:</p>
<blockquote><p><font size="3" face="Courier New">NET USER administrator &lt;NEWPASSWORD&gt;</font></p>
</blockquote>
<p>Login as administrator    <br />Delete Utilman.exe and rename Utilman.exe.bak back to Utilman.exe in C:\Windows\System32.</p>
<div id="crp_related"><h5>Related Posts:</h5><ul><li><a href="http://www.steelbytes.net/windows-server-2008-you-are-logged-on-with-a-temporary-user-profile" rel="bookmark" class="crp_title">Windows Server 2008 &lsquo;You are logged on with a temporary user profile&rsquo;</a></li><li><a href="http://www.steelbytes.net/logon-error-the-user-profile-service-service-failed-the-logon" rel="bookmark" class="crp_title">Logon error: &ldquo;The User Profile Service service failed the logon&rdquo;</a></li><li><a href="http://www.steelbytes.net/id-804-template-already-exists-vmm-2012" rel="bookmark" class="crp_title">ID 804: Template already exists &#8211; VMM 2012</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://www.steelbytes.net/how-to-reset-the-administrator-password-on-your-windows-7-2008-machine-without-logging-on/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SCCM Component Status error: &#8220;SMS Policy Provider has failed to sign one or more policy assignments&#8221;</title>
		<link>http://www.steelbytes.net/sccm-component-status-error-sms-policy-provider-has-failed-to-sign-one-or-more-policy-assignments</link>
		<comments>http://www.steelbytes.net/sccm-component-status-error-sms-policy-provider-has-failed-to-sign-one-or-more-policy-assignments#comments</comments>
		<pubDate>Wed, 09 Jan 2013 13:26:31 +0000</pubDate>
		<dc:creator>Paolo</dc:creator>
				<category><![CDATA[SCCM]]></category>
		<category><![CDATA[sccm certificate]]></category>
		<category><![CDATA[sccm certificate request]]></category>
		<category><![CDATA[sccm policy provider]]></category>
		<category><![CDATA[site server signing certificate]]></category>
		<category><![CDATA[sms_policy_provider]]></category>

		<guid isPermaLink="false">http://www.steelbytes.net/sccm-component-status-error-sms-policy-provider-has-failed-to-sign-one-or-more-policy-assignments</guid>
		<description><![CDATA[You experience problems with packages, virtual applications and OS deployment with your SCCM clients. The SCCM server reports “SMS Policy Provider has failed to sign one or more policy assignments. It will retry this operation automatically.” in the Component Status SMS_POLICY_PROVIDER. This may indicate your SCCM Site Server Signing Certificate has expired. This article consists [...]]]></description>
			<content:encoded><![CDATA[<p>You experience problems with packages, virtual applications and OS deployment with your SCCM clients. The SCCM server reports <em>“SMS Policy Provider has failed to sign one or more policy assignments. It will retry this operation automatically.”</em> in the Component Status SMS_POLICY_PROVIDER. This may indicate your SCCM Site Server Signing Certificate has expired.</p>
<p>This article consists of two parts how to indicate and resolve the problem:</p>
<p><a href="#A">A. How to check if the SCCM Site Server Signing Certificate is expired</a>     </p>
<p><a href="#B">B. How to create a request file to renew the certificate (only working method to renew!)</a></p>
<p>&#160;</p>
<p><strong><a name="A">A. How to check if the SCCM Site Server Signing Certificate is expired</a></strong></p>
<p>1. In the Configuration Manager Console, navigate to <em>Site Management      <br /></em>2. Open the Properties of your Site     <br />3. Open <em>Site Mode</em> and note the name of the Certificate </p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/01/image.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/01/image_thumb.png" width="384" height="463" /></a></p>
<p>4. Click on <em>Browse…</em> </p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/01/image1.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/01/image_thumb1.png" width="357" height="480" /></a></p>
<p>5. Check the corresponding certificate name and check the <em>Valid From</em> date&#160; </p>
<p>If the certificate is expired, you have to renew the certificate by following the steps below.</p>
<p><strong></strong></p>
<p><strong></strong></p>
<p><strong></strong></p>
<p><strong><a name="B">B. How to create a request file to renew the certificate</a></strong></p>
<p>Be sure to do this outside work hours, because it impacts the SCCM clients.</p>
<p>1. Create a new file ‘<em>sitesigning.inf</em>’ with the following content:</p>
<pre style="width: 606px; height: 117px" class="csharpcode">[NewRequest]
FriendlyName = &quot;SCCM Site Signing Server Certificate [your site code]&quot;
Subject = &quot;CN=The site code of this site server is [your site code]&quot;
MachineKeySet = True
[RequestAttributes]
CertificateTemplate = ConfigMgrSiteServerSigningCertificate</pre>
<p>2. Save the file and open an elevated command prompt.<br />
  <br />3.Type the following commands in the folder where you saved the file:</p>
<pre class="csharpcode">certreq –new sitesigning.inf sitesigning.req</pre>
<pre class="csharpcode">certreq –submit sitesigning.req sitesigning.cer</pre>
<p>4. Select the correct CA:</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/01/image2.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/01/image_thumb2.png" width="324" height="208" /></a></p>
<p>Output of certreq commands:</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/01/image3.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/01/image_thumb3.png" width="581" height="302" /></a></p>
<p>The certificate is now requested at your Certificate Authority. </p>
<p>5. Issue the certificate in your CA in <em>Pending Requests </em>and remember the <em>Request ID</em></p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/01/image4.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/01/image_thumb4.png" width="608" height="420" /></a></p>
<p>6. In an elevated cmd on the SCCM server again, type the following command:</p>
<pre class="csharpcode">certreq –retrieve [requestidnumber] sitesigning.cer</pre>
<style type="text/css">
<p>.csharpcode, .csharpcode pre
{
	font-size: small;
	color: black;
	font-family: consolas, "Courier New", courier, monospace;
	background-color: #ffffff;
	/*white-space: pre;*/
}
.csharpcode pre { margin: 0em; }
.csharpcode .rem { color: #008000; }
.csharpcode .kwrd { color: #0000ff; }
.csharpcode .str { color: #006080; }
.csharpcode .op { color: #0000c0; }
.csharpcode .preproc { color: #cc6633; }
.csharpcode .asp { background-color: #ffff00; }
.csharpcode .html { color: #800000; }
.csharpcode .attr { color: #ff0000; }
.csharpcode .alt 
{
	background-color: #f4f4f4;
	width: 100%;
	margin: 0em;
}
.csharpcode .lnum { color: #606060; }</style>
<p>7. Select the correct CA again:<a></a></p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/01/image5.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/01/image_thumb5.png" width="324" height="206" /></a></p>
<p>8. Open the local Certificate store by opening an new mmc and add <em>Certificates (Local Computer)</em></p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/01/image6.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/01/image_thumb6.png" width="542" height="392" /></a></p>
<p>9. Check if the certificate is present in <em>Personal / Certificates</em> (a little key must appear with the certificate! if not, the certificate does not contain the private key)</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/01/image7.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/01/image_thumb7.png" width="609" height="408" /></a></p>
<p>11. In the Configuration Manager Console, navigate to <em>Site Management</em> </p>
<p>11. Open the Properties of your Site </p>
<p>12. Open <em>Site Mode, </em>click on Browse and select the new certificate</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2013/01/image8.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2013/01/image_thumb8.png" width="308" height="566" /></a></p>
<p>The certificate is now renewed.</p>
<p>You can check the <i>SMS_POLICY_PROVIDER</i> status again under: <i>System Status &gt; Site Status &gt; [Site code] &gt; Component Status</i></p>
<p>If the certificate is correctly renewed, the message <i>‘SMS Policy Provider successfully signed all policy assignments with the new Site Server Signing Certificate.’</i> will appear. Your SCCM clients will then be functional again.</p>
<div id="crp_related"><h5>Related Posts:</h5><ul><li><a href="http://www.steelbytes.net/how-to-renew-the-sccm-site-server-signing-certificate" rel="bookmark" class="crp_title">How to renew the SCCM Site Server Signing Certificate</a></li><li><a href="http://www.steelbytes.net/sccm-osd-error-0x80004005" rel="bookmark" class="crp_title">SCCM OSD error: 0&#215;80004005</a></li><li><a href="http://www.steelbytes.net/logon-error-the-user-profile-service-service-failed-the-logon" rel="bookmark" class="crp_title">Logon error: &ldquo;The User Profile Service service failed the logon&rdquo;</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://www.steelbytes.net/sccm-component-status-error-sms-policy-provider-has-failed-to-sign-one-or-more-policy-assignments/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Configure TCP port for SQL Server named instance</title>
		<link>http://www.steelbytes.net/configure-tcp-port-for-sql-server-named-instance</link>
		<comments>http://www.steelbytes.net/configure-tcp-port-for-sql-server-named-instance#comments</comments>
		<pubDate>Wed, 10 Oct 2012 10:24:26 +0000</pubDate>
		<dc:creator>Paolo</dc:creator>
				<category><![CDATA[SQL Server 2008]]></category>
		<category><![CDATA[SQL Server 2008 R2]]></category>
		<category><![CDATA[dynamic port sql]]></category>
		<category><![CDATA[named instance]]></category>
		<category><![CDATA[named instances]]></category>
		<category><![CDATA[sql port]]></category>
		<category><![CDATA[static port sql]]></category>
		<category><![CDATA[tcp port instance]]></category>

		<guid isPermaLink="false">http://www.steelbytes.net/configure-tcp-port-for-multiple-sql-server-named-instances</guid>
		<description><![CDATA[When you are using named instances for SQL Server, the TCP port for communication with the Database Engine will be different then the default SQL instance port: 1433. SQL Server will choose dynamic ports for each named instance. This is not very useful in firewall configurations. Therefore you can choose a static port for each [...]]]></description>
			<content:encoded><![CDATA[<p>When you are using named instances for SQL Server, the TCP port for communication with the Database Engine will be different then the default SQL instance port: 1433. SQL Server will choose dynamic ports for each named instance. This is not very useful in firewall configurations. Therefore you can choose a static port for each SQL instance.&#160; If you want to use a static port, use the following procedure:</p>
<p>1. Open the <strong>SQL Server Configuration Manager</strong> (Start / Microsoft SQL Server 2008 R2 / Configuration Tools / SQL Server Configuration Manager)    <br />2. Navigate to <strong>SQL Server Network Configuration</strong> / <strong>Protocols for [instance name]</strong>&#160; and open <strong>TCP/IP</strong></p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2012/10/image2.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2012/10/image_thumb2.png" width="556" height="368" /></a></p>
<p>3. Open the tab <strong>IP Addresses</strong> and navigate down to <strong>IPAll</strong>    <br />4. Fill in the desired port at the <strong>TCP Port </strong>field</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2012/10/image3.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2012/10/image_thumb3.png" width="345" height="393" /></a></p>
<p>5. In order to take effect, the <strong>SQL Server (instance name)</strong> service will have to be restarted</p>
<p>The SQL Server Database Engine will now listen on the configured port.</p>
<div id="crp_related"><h5>Related Posts:</h5><ul><li><a href="http://www.steelbytes.net/sharepoint-2010-as-default-website" rel="bookmark" class="crp_title">SharePoint 2010 as default website</a></li><li><a href="http://www.steelbytes.net/windows-7-proxy-server-and-network-awareness-no-internet-access" rel="bookmark" class="crp_title">Windows 7 proxy server and Network Awareness (&lsquo;No Internet access&rsquo;)</a></li><li><a href="http://www.steelbytes.net/sharepoint-2010-proxy-authentication-required-rss-feed" rel="bookmark" class="crp_title">SharePoint 2010 RSS feed and TMG: &ldquo;Proxy Authentication required&rdquo; error</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://www.steelbytes.net/configure-tcp-port-for-sql-server-named-instance/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cluster Shared Volume not accessible from other nodes &#8211; error &#8216;STATUS_BAD_NETWORK_PATH(c00000be)&#8217;.</title>
		<link>http://www.steelbytes.net/cluster-shared-volume-not-accessible-from-other-nodes-error-status_bad_network_pathc00000be</link>
		<comments>http://www.steelbytes.net/cluster-shared-volume-not-accessible-from-other-nodes-error-status_bad_network_pathc00000be#comments</comments>
		<pubDate>Tue, 09 Oct 2012 15:16:13 +0000</pubDate>
		<dc:creator>Paolo</dc:creator>
				<category><![CDATA[Windows Server 2008]]></category>
		<category><![CDATA[Windows Server 2008 R2]]></category>
		<category><![CDATA[bad network path]]></category>
		<category><![CDATA[c00000be]]></category>
		<category><![CDATA[cluster shared volumes]]></category>
		<category><![CDATA[cluster volume]]></category>
		<category><![CDATA[heartbeat]]></category>

		<guid isPermaLink="false">http://www.steelbytes.net/cluster-shared-volume-not-accessible-from-other-nodes-error-status_bad_network_pathc00000be</guid>
		<description><![CDATA[When you try to access the Cluster Shared Volume from a cluster node which is not the current owner, the Windows Explorer may hang on opening the ClusterStorage folder. You cannot access the shared volume. You receive the following error in the event log: ‘Cluster Shared Volume…’ is no longer available on this node because [...]]]></description>
			<content:encoded><![CDATA[<p>When you try to access the Cluster Shared Volume from a cluster node which is not the current owner, the Windows Explorer may hang on opening the ClusterStorage folder. You cannot access the shared volume. You receive the following error in the event log:</p>
<p><strong>‘Cluster Shared Volume…’ is no longer available on this node because of ‘STATUS_BAD_NETWORK_PATH(c00000be)’.’</strong></p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2012/10/image.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2012/10/image_thumb.png" width="455" height="327" /></a></p>
<p>Open the Properties of the network adapter used for your cluster HeartBeat network and enable <em>File and Printer Sharing for Microsoft Networks. </em>The Cluster Shared Volume should now be available from the other nodes.</p>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2012/10/image1.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2012/10/image_thumb1.png" width="326" height="423" /></a></p>
<div id="crp_related"><h5>Related Posts:</h5><ul><li><a href="http://www.steelbytes.net/hyper-v-guest-virtual-machines-failover-clustering-with-cluster-shared-volumes" rel="bookmark" class="crp_title">Hyper-V guest / virtual machines failover clustering with cluster shared volumes</a></li><li><a href="http://www.steelbytes.net/google-update-installation-failed-with-error-0x800b010e-when-installing-google-earth-plugin" rel="bookmark" class="crp_title">&lsquo;Google Update installation failed with error 0x800b010e&rsquo; when installing Google Earth plugin</a></li><li><a href="http://www.steelbytes.net/out-of-memory-java-heap-space-error-oracle-discoverer" rel="bookmark" class="crp_title">&lsquo;Out of memory&rsquo; Java heap space error Oracle Discoverer</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://www.steelbytes.net/cluster-shared-volume-not-accessible-from-other-nodes-error-status_bad_network_pathc00000be/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Install print driver .inf file from command line</title>
		<link>http://www.steelbytes.net/install-print-driver-inf-file-command-line</link>
		<comments>http://www.steelbytes.net/install-print-driver-inf-file-command-line#comments</comments>
		<pubDate>Thu, 04 Oct 2012 15:02:04 +0000</pubDate>
		<dc:creator>Paolo</dc:creator>
				<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[Windows Vista]]></category>

		<guid isPermaLink="false">http://www.steelbytes.net/?p=375</guid>
		<description><![CDATA[Sometimes you just want to add a printer driver to your Windows client. For example for USB connected printers so you don’t have to manually select the print driver every time connecting the printer to a new client. The following command line can be used in a batch file to automate the driver installation: rundll32 [...]]]></description>
			<content:encoded><![CDATA[<p>Sometimes you just want to add a printer driver to your Windows client. For example for USB connected printers so you don’t have to manually select the print driver every time connecting the printer to a new client.</p>
<p>The following command line can be used in a batch file to automate the driver installation:</p>
<div id="codeSnippetWrapper">
<div id="codeSnippet">
<pre>rundll32 printui.dll PrintUIEntry /ia /b "Printer Name" /f "filename.inf" /m "Printer model from inf file"</pre>
<p>&nbsp;</p>
</div>
</div>
<p>Type in the correct printer model after the /m switch which is defined in the .inf file.  You can determine the model names by opening the .inf file or using the Add printer wizard while manually selecting the .inf file.</p>
<p>Make sure all installation source files reside in the same folder as the .inf file. Using this command line there will be no confirmation box. You can use additional switches to show a confirmation message. All command line switches can be found in this article:</p>
<p><a title="http://technet.microsoft.com/en-us/library/ee624057(WS.10).aspx" href="http://technet.microsoft.com/en-us/library/ee624057(WS.10).aspx">http://technet.microsoft.com/en-us/library/ee624057(WS.10).aspx</a></p>
<div id="crp_related"><h5>Related Posts:</h5><ul><li><a href="http://www.steelbytes.net/print-spooler-crashes-faulting-module-eqpce-dll-equitrac" rel="bookmark" class="crp_title">Print spooler crashes &#8211; faulting module EQPCE.dll (Equitrac)</a></li><li><a href="http://www.steelbytes.net/sccm-failed-to-run-task-sequence-error-0x80070032" rel="bookmark" class="crp_title">SCCM failed to run task sequence (error 0&#215;80070032)</a></li><li><a href="http://www.steelbytes.net/empty-prints-print-preview-internet-explorer" rel="bookmark" class="crp_title">Empty prints and blank page print preview Internet Explorer</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://www.steelbytes.net/install-print-driver-inf-file-command-line/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Hyper-V guest / virtual machines failover clustering with cluster shared volumes</title>
		<link>http://www.steelbytes.net/hyper-v-guest-virtual-machines-failover-clustering-with-cluster-shared-volumes</link>
		<comments>http://www.steelbytes.net/hyper-v-guest-virtual-machines-failover-clustering-with-cluster-shared-volumes#comments</comments>
		<pubDate>Thu, 06 Sep 2012 10:17:24 +0000</pubDate>
		<dc:creator>Paolo</dc:creator>
				<category><![CDATA[Failover clustering]]></category>
		<category><![CDATA[Hyper-V]]></category>
		<category><![CDATA[Windows Server 2008]]></category>
		<category><![CDATA[Windows Server 2008 R2]]></category>
		<category><![CDATA[cluster shared volume]]></category>
		<category><![CDATA[cluster shared volumes]]></category>
		<category><![CDATA[csv]]></category>
		<category><![CDATA[failover clustering]]></category>
		<category><![CDATA[guest clustering]]></category>
		<category><![CDATA[hyper-v]]></category>
		<category><![CDATA[iscsi]]></category>
		<category><![CDATA[iscsi target]]></category>
		<category><![CDATA[vitual machine clustering]]></category>

		<guid isPermaLink="false">http://www.steelbytes.net/hyper-v-guest-virtual-machines-failover-clustering-with-cluster-shared-volumes</guid>
		<description><![CDATA[Failover clustering for your virtual machines can be a real challenge when it comes to Cluster Shared Volumes (CSV’s). After a few days of research, the following conclusions can be made: Cluster Shared Volumes on Hyper-V R2 (Windows 2008 R2) can only be used by using iSCSI (you can use pass-through disks in your VM’s, [...]]]></description>
			<content:encoded><![CDATA[<p>Failover clustering for your virtual machines can be a real challenge when it comes to Cluster Shared Volumes (CSV’s). After a few days of research, the following conclusions can be made:</p>
<ul>
<li>Cluster Shared Volumes on Hyper-V R2 (Windows 2008 R2) can only be used by using iSCSI (you can use pass-through disks in your VM’s, but these are not suitable for CSV’s). </li>
<li>Virtual Fibre Channel adapters are supported in Hyper-V R3 (Windows Server 2012) and will require much less configuration. </li>
<li>So, Cluster Shared Volumes within virtual machines on Windows 2008 R2 can only be realized in two ways:
<p> 
<ul>
<li>Over your TCP/IP network, using iSCSI, where your network storage has to be configured as an iSCSI target. </li>
<li>Over your Fibre Channel connected storage, but only by using a third party tool which will function as an iSCSI target to provision the disks. For these purposes, Microsoft provides the free Microsoft iSCSI Software Target software: <a title="http://www.microsoft.com/en-us/download/details.aspx?id=19867" href="http://www.microsoft.com/en-us/download/details.aspx?id=19867">http://www.microsoft.com/en-us/download/details.aspx?id=19867</a>
</li>
</ul>
</li>
<li>Each solution has it’s advantages and disadvantages:
<p> 
<ul>
<li><em>iSCSI advantages:</em> With iSCSI, you only need the iSCSI Initiator tool which is natively included in Windows 2008 R2 to connect a network storage disk. No additional software is required. </li>
<li><em>iSCSI disadvantages:</em> For iSCSI you need to use your Ethernet network. Therefore you need to create a Ethernet connection between your Hyper-V hosts and storage. Best practice is to use dedicated redundant cabling (teaming / trunking) only for your iSCSI communication. Or you could use your existing cabling, but make sure your iSCSI traffic is separated by using&#160; a VLAN and make use of QoS to provide the proper bandwidth.&#160; VLAN’s must&#160; be configured on all of the switches between your Hyper-V hosts and storage. So, with iSCSI you need to (re)configure your existing network and at the same time, considering if your network meets the proper requirements.
<p></li>
<li><em>iSCSI target software advantages</em>: the Microsoft iSCSI Software Target makes sure you will stay within your storage Fibre Channel network, because traffic does not leave the Hyper-V hosts. </li>
<li><em><em>iSCSI target software </em>disadvantages</em>: You need software. Software has to be installed on a Windows machine. This Windows machine has to be a virtual machine. Of course, you can use an existing virtual machine, but this creates another problem. With a piece of software installed on a single virtual machine, you will create a single-point-of-failure. Also, you are creating another layer between your Windows hosts and network storage, which increases complexity and has it’s influence on performance. </li>
</ul>
</li>
</ul>
<h5>Configure direct iSCSI connection</h5>
<p>My recommendation is to use an direct iSCSI connection to your network storage for performance and failover capabilities at network level (trunking / teaming). Of course, your network storage has to support iSCSI, but most will do.</p>
<p>Follow these steps to create your iSCSI network:</p>
<ol>
<li>(Additional: connect your Hyper-V hosts to your network storage by using the proper cabling; CAT6 for Gigabit connections). Or use the existing LAN. </li>
<li>Choose a network range and a VLAN ID. </li>
<li>Create the iSCSI target on your network storage, assign an IP address in the chosen network range and the VLAN ID. Create the LUN’s and&#160; IP assignments for your virtual hosts. </li>
<li>Create the VLAN ID on the switches connected between your Hyper-V hosts and your network storage. Additionally, configure QoS on the switch ports. </li>
<li>If you used dedicated cabling in step 1, create a vSwitch on your Hyper-V hosts, assign it to the physical network card, define the network range and assign the VLAN ID. </li>
<li>Assign an extra virtual network card to your virtual machine, only for iSCSI communication. Assign the VLAN ID. </li>
<li>Make sure in the Failover Cluster Manager, the network card is not used for cluster communication. </li>
<li>Assign the virtual network card an IP address in the chosen range and define the subnet mask. Do not fill in the default gateway or DNS servers. Turn off DNS registration, LMHOSTS lookup and NetBIOS in Advanced TCP/IP settings. Disable services and protocols which are not needed: </li>
</ol>
<p><a href="http://www.steelbytes.net/wp-content/uploads/2012/09/image1.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.steelbytes.net/wp-content/uploads/2012/09/image_thumb1.png" width="371" height="465" /></a></p>
<p>9. Open the iSCSI Initiator and fill in the IP address of the iSCSI target. This is the IP address configured in step 3. The disks configured in step 3 will be presented.    <br />10. Add the discovered volumes in the Failover Cluster Manager \ Nodes \ Cluster Shared Volumes. </p>
<ol><!--EndFragment--></ol>
<h5>Configure an iSCSI software target</h5>
<p>For a complete guide how to configure CSV’s with Microsoft iSCSI Software Target, I recommend this post: <a title="http://blogs.technet.com/b/mghazai/archive/2009/12/12/hyper-v-guest-clustering-step-by-step-guide.aspx" href="http://blogs.technet.com/b/mghazai/archive/2009/12/12/hyper-v-guest-clustering-step-by-step-guide.aspx">http://blogs.technet.com/b/mghazai/archive/2009/12/12/hyper-v-guest-clustering-step-by-step-guide.aspx</a></p>
<div id="crp_related"><h5>Related Posts:</h5><ul><li><a href="http://www.steelbytes.net/cluster-shared-volume-not-accessible-from-other-nodes-error-status_bad_network_pathc00000be" rel="bookmark" class="crp_title">Cluster Shared Volume not accessible from other nodes &#8211; error &lsquo;STATUS_BAD_NETWORK_PATH(c00000be)&#8217;.</a></li><li><a href="http://www.steelbytes.net/id-804-template-already-exists-vmm-2012" rel="bookmark" class="crp_title">ID 804: Template already exists &#8211; VMM 2012</a></li><li><a href="http://www.steelbytes.net/change-management-console-language-system-center-2012-products-configmgr-vmm-etc" rel="bookmark" class="crp_title">Change management console language System Center 2012 products (ConfigMgr, VMM etc.)</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://www.steelbytes.net/hyper-v-guest-virtual-machines-failover-clustering-with-cluster-shared-volumes/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
