Archive for category SBS
SBS 2008 Installing Exchange 2007 SP1 Update Rollup 9
Posted by Mark Raborn in SBS on 2010/01/11
SBS 2008 Outlook Pop Ups and Continuous Logon Prompts
Recently, many of WIGITAL’s Small Business Server 2008 based clients have experienced issues with Microsoft Outlook pop ups that ask network users repeatedly to authenticate / login to Microsoft Exchange. Apparently (on these particular SBS08 Servers ) Exchange seems to have forgotten how to agree with Active Directory and recognize the users and computers are already logged on.
After a review of Event Logs on a few SBS08 servers, nothing definitive (or even vaguely suggestive) has appeared to help us discern the exact cause. We are however able to coalesce that in all cases, Microsoft Windows Server 2008 Updates from 2009-12 and 2009-11 have recently been installed onto these servers.
CAUSE RELATED UPDATE ( 2010-02-16 ): Security Updates from December 2009 cause an IIS 7.0 issue where a mix of User Mode and Kernel Mode authentication “do not” work together. See the Official SBS Blog for details as of 2010-02-16
SYMPTOM: for client workstations, when Outlook is launched, all users are continuously prompted for logon credentials in order to authenticate with Exchange even though they are properly authenticated on the domain. Authentication is in the Intranet Zone. Active Directory is fully functional and integrated with Exchange.
Exchange 2007 SP 1 Update Rollup 9
The resolution to restoring Exchange authentication communication with SBS 2008 Active Directory has been, in all cases, to download and install Exchange 2007 SP1 Update Rollup 9
Here are issues we’re aware of when installing the Update Rollup 9 for Exchange.
- When installing Exchange 2007 Sp1 Update Rollup 9 on Small Business Server 2008 it is advisable to open the command prompt and install the update using RunAs and Administrator credentials. Update Rollup 9 has failed on SBS Installations WIGITAL has attempted unless initially launched in this manner. Navigating to the path where the update package is, and launching the installer using RunAs from the command line seems to solve some UAC (User Account Control) issues.
- You may see the following Event IDs when installing this Update Rollup: Event ID 1024, Event ID 1603, Event ID 11321. Details follow….
as well as Event ID 11321
Log Name: Application
Source: MsiInstaller
Date: 1/11/2010 1:22:21 PM
Event ID: 1024
Task Category: None
Level: Error
Keywords: Classic
User: DOMAIN\administrator
Computer: SBS2008-SERVER.DOMAIN.local
Description:
Product: Microsoft Exchange Server - Update 'Update Rollup 9 for Exchange Server 2007 Service Pack 1 (KB970162) 8.1.393.1' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127
Log Name: Application
Source: MsiInstaller
Date: 1/11/2010 1:13:04 PM
Event ID: 11321
Task Category: None
Level: Error
Keywords: Classic
User: DOMAIN\Administrator
Computer: SBS2008-SERVER.DOMAIN.local
Description:
Product: Microsoft Exchange Server -- Error 1321. The Installer has insufficient privileges to modify this file: C:\Program Files\Microsoft\Exchange Server\RelNotes.htm.
NOTE: For more information about errors, Exchange Server 2007 SP1 Update Rollup 9 creates a log file here:
C:\Users\Administrator.DOMAIN\AppData\Local\Temp\3\MSIec215.LOG
Review the LOG to determine a course of action if you experience errors during your install.
Resolving the RelNotes.htm Error in Exchange 2007 Update Rollup 9
To remedy the 11321 error ( which we’ve seen every time we’ve installed Update Rollup 9 ):
- Open Explorer
- Go to C:\Program Files\Microsoft\Exchange Server\RelNotes.htm
- Change the permissions on this file to allow the current Administrator FULL CONTROL
- Apply the changes
- Restart Update Rollup 9 using RunAs from the Command Line
Oddly enough, the installers permissible access to RelNotes.htm has ended more than one installation prematurely.
Further Reading on Exchange 2007 SP1 Update Rollup 9
Update Rollup 9 for Exchange Server 2007 Service Pack 1 has been released
Description of Update Rollup 9 for Exchange Server 2007 Service Pack 1
Forum Posts on SBS 2008, Outlook pop ups, and Installing Exchange 2007 SP1 Update Rollup 9
SBS2008, Outlook keeps popping up network login and will not accept in Small Business Server
Exchange Update Rollup Installation. It is not Nightmare!!!
SBS 2008: Update Rollup 9 for Exchange Server 2007 SP1 doesn’t update version number in Help
Exchange Server 2007 Rollup Update 9 installed question
Update: Regarding Exchange Service Pack 2 on SBS 2008
UPDATE TO THIS POST
Exchange Service Pack 2 will also resolve the Outlook continuous pop-up issue but please be advised, that Exchange SP 2 ” cannot” be installed on SBS 2008 without the Microsoft Exchange Server 2007 SP2 Installation Tool for Windows SBS 2008. Use this tool (along with SP2 for Exchange) to achieve a successful upgrade to SP2 functionality.
Microsoft Exchange Server 2007 SP2 Installation Tool for Windows SBS 2008
Exchange Server 2007 Service Pack 2
Update Rollup 1 for Exchange Server 2007 Service Pack 2 (KB971534)
Thank you.
Mark Raborn
WIGITAL
Dynamic Deletion of DNS Records Fails when Demoting Domain Controller
Posted by Mark Raborn in SBS on 2009/10/10
Event ID: 5775 The dynamic deletion of the DNS record failed on DNS server
Today we were finishing up the migration of SBS 2003 to SBS 2008 and had reached the final stage where the SOURCE Small Business Server 2003 Domain Controller was ready to be demoted using dcpromo.
Problems occurred relating to Event ID: 5775
Ultimately the solution related to auditing DNS Records and cleaning up the DNS entries as we had also reconfigured the Subnet of our SOURCE SBS 2003 Server right before migrating to SBS 2008. Although the migration went well, demoting the SBS 2003 Domain Controller did not. A careful audit of all DNS entries with deletions of all inaccurate records relating to the SBS 2003 Server was ultimately the cure.
In reading about this Error, possible other solutions for similar scenarios include running DCDiag.exe , checking the Server LAN and WAN NICs for any multi-homing ( possible in single server scenarios like SBS ), and entering the “new” DESTINATION SBS 2008 IP Address as the DNS Server entry on the SOURCE SBS 2003 Servers LAN NIC.
Reference material here:
SBS Fax setup faxing to Email Mobile SharePoint Folders and Printers
Posted by Mark Raborn in SBS on 2009/08/14
Small Business Server Fax features cost savings for Business
Small Business Server includes many useful features as an all in one Server solution ( for 75 employees or less ). An often unheralded SBS capability is the Fax Service. This built in full featured fax platform can be a genuine cost saver for small businesses. SBS Fax is commonly more capable and cost effective than a dedicated fax server device (Canon, Minolta, etc…), SBS routes faxes to numerous endpoints, and it is simple to use. To get up and running with the Fax Service, Small Business Server requires setup of one (or more) server class fax modem(s). The wonderful world of SBS built in functionality takes care of the rest.
SBS Fax Service can save money in a variety of circumstances. One typical scenario is when a business uses a subscription based Online Fax Service and pays monthly. While limited usage on these services makes sense, many businesses continue sending faxes above the free usage and ultimately are being billed for their sent faxes at 10+ cents/page. As the faxing increases, so does the bill from the fax provider.
So what are some of the details of going the SBS route? With Small Business Server, it is possible have 1, 2, 3 or up to 4 separate fax lines by installing as many as 4 fax modems (server class multi-modem cards are also made with 2 lines or 4 lines on a single PCI card). A business with SBS pays only for the phone services per line, the modem cards and initial installation. When there is a large volume of faxes, over the long term the savings can really add up.
Estimating Fax Cost Savings Using Small Business Server Fax Service
To consider possible cost savings, remember these factors when comparing fax services vs. Small Business Server:
LOCAL: For incoming faxes, inbound calls are unlimited (this is local or long distance of course), so the cost of receiving faxes will never go up. Outbound local fax calls ( faxes locally or within the zone 1, 2, 3) become more affordable because the cost is generally a few penies per minute when using a dedicated phone line. Compare that with the “per page” price of a fax service! Since a modern fax machine can receive at least 2-3 pages/minute, using a phone line to SEND means your receiving 2 to 3x the value rate.
As an example, lets compare the “per minute” cost of faxing locally to a “per page” cost like the fax services charge. Taking a ZONE 3 call rate of 6 cents per minute, divide that by 2 pages per minute average, and you have a cost of 3 cents per page. This example yields 3 times the savings compared to a fax service ( based on typical billing 10 cents/page ).
LONG DISTANCE: If a company is regularly faxing long distance or nationally and hitting close to $100 in fax fees, I personally suggest considering an unlimited national calling package. Unlimited long distance is quite affordable these days for one or two lines. Whatever long distance (or unlimited) plan you settle on, compare your current fax service bill directly to the phone plans cost. Any company that is moving a lot of pages via fax (think Escrow Services, Real Estate, etc….) should be able to save a bundle. At the time of this writing ( 2009-08-16 ) even a rate based long distance plan with AT&T is only 5.0 cents per minute. Still more affordable than a fax service when you remember that a fax services charges are ”per page” at about 10cents.
The Flexibility of the SBS Fax Platform
One of the reasons some companies choose a fax service is because of the flexibility (receive via email, etc…). Let’s look at the flexibility of the SBS Fax Service platform for SENDING ( Incoming ) and RECEIVING ( Outgoing ):
“ Incoming faxes ” can to be routed to 1) email 2) any printer on the network 3) a SharePoint document library 4) a network shared folder …and sent to 5) mobile devices using the Email features of Small Business Server. You can also send ” Outgoing Faxes ” from any computer on the network by using built in Windows functionality. The ability to ” Send Fax from a Computer ” is much more flexible than manual faxing. Faxing from computer means workers do not have to print pages, walk around the room, hand write fax covers, etc… All this saves time ( and-money !! ). Finally, sending large complex faxes ( multiple scans of multiple document sources combined with documents, pdfs, spreadsheets residing in computers ) is made easier, faster, and more versatile because of a computers ability to combine file sources. Add today’s Multi-function Copier – Printer – Scanner integrated into the network ( WIGITAL does this btw ) and you’ve got a powerful end to end solution.
In review, SBS 2003 or SBS 2008, with a little setup, a company scanner and a some education gets any business moving with the SBS Fax Service. You can SEND from any computer on the network and RECEIVE faxes for storage in Email (ex. Outlook), Exchange Public Folders, Web based Fax Libraries (ex. SBS Remote Web Workplace using SharePoint), network folders, and more. You can automatically send faxes to Mobile devices. You can build a more efficient and cost effective fax system.
To learn more or to ask questions, say hello at http://www.wigital.net/contact-us.
For technical info, please read on….
Fax Server for Small Business Technical Overview
There are a variety of ways to approach the Fax features in Small Business Server. We suggest contacting an IT Pro for setup. To become more familiar with the platform, consider reading the following guides from Microsoft and Packt Publishing:
SBS Fax Guide Downloads
These guides are freely available:
Step-by-Step Guide for Configuring and Using Fax on Windows Small Business Server 2003
Chapter 4 – Exchange Server 2003 and Fax Server – from Packt’s SBS 2003 book
For professional inquiries about the SBS Fax Service , please call WIGITAL
Viewing Faxes on the Desktop
Windows Picture and Fax Viewer articles describe how to use built in Windows features to view, save, print, and manage received faxes.
For Windows XP
- Windows XP – Windows Picture and Fax Viewer overview
- Windows XP – Windows Hidden Image Viewer ( PC World March 21 2005 )
For Windows Vista
- Windows Vista – Pictures and Video Help and How To
- Windows Vista – Explore the Features of Windows Photo Gallery
NOTE: there is a known issue viewing some faxes on Windows Vista using the built in Windows Picture and Fax Viewer. This appears to be an issue with fax machines sending faxes in standard resolution of 200×100 dpi. Commonly reported problems include
- Printing a fax flips the image 90%
- When unchecking “Fit to Window” some TIF faxes are still rendered and print in Landscape (despite the fact that the printer is set to use portrait page)
- Manually resizing the fax corrects the issue for printing but then alters the physical dimensions of the fax
Popular solutions to the Vista fax rendering issue include:
- This TechNet article submitted by Sabir Chandwale ( which uses MDI, the Microsoft Document Imaging program ) : receiving Fax on SBS 2003 using Windows Vista Clients .
- download IrfanView or any other quality image viewer and use instead of Vista’s Windows Picture and Fax Viewer.
Please note this is a ” Vista only ” issue.
Viewing Faxes on Mobile Devices
Both Small Business Server and Essential Business Server are designed to work with mobile devices using Microsoft Exchange which is included with these solutions. For SBS faxing, this enables any fax directed to a User or Group to be received on a mobile devices via email. Once received, the next step on mobile is opening the fax to view it. Not all mobile devices natively support viewing TIFs. Fortunately there are freely available TIF ( the native FAX format ) Viewers for download:
Apple iPhone TIF Viewer
- iPhone App Store examples are QuickOffice and iFile( requires iTunes on PC )
- non App Store example DocViewer
- non App Store example FileAid
Windows Mobile 5, Mobile 6, Mobile 6.1 TIF Viewer
- XN View Pocket (info)
- Download : Windows Mobile TIF Viewer – XN View xScale Download Page ( latest versions )
- Download : Windows Mobile TIF Viewer – WinMo 5 and WinMo 6 – XnSmartPhone.cab
-
Download : Windows SmartPhone 2003 TIF Viwer – XnSmartphone2003.cab
Sending a Fax from the Desktop
Windows Desktops also have built in faxing (i.e. SEND )capabilities. Fax sending is included in Windows XP, Vista Business, and Windows 7 Pro. You can learn more:
Windows faxing capabilities are expanded by Small Business Server. Learn about the SBS Fax Interface on TechNet :
Managing Fax in Windows Small Business Server
Lastly, managing the SBS Server is usually the IT Pro’s job, but some people just gotta know more. Start here >>
…and for legacy info SBS 4, 4.5, etc.. read these
SBS: How to configure the Shared Fax service to route incoming fax jobs to a common inbox
SBS: How to route incoming faxes to a mailbox other than the administrator without Microsoft Outlook on the SBS server
- – - – -
Thanks for reading. Please comment for the community. If this information has helped you, please link back here. It helps us as well as others who may need the information.
Thank you.
Mark Raborn
WIGITAL
The new 70-653 exam prep book from Microsoft Press
Posted by Mark Raborn in SBS on 2009/02/16
The new book “Configuring Windows Small Business Server 2008″ is due to be released by Summer 2009. Bea Mulzer, who is co-authoring the book with Walter Glenn, dropped me a reminder this week.
As a help to other IT pro’s in our area, I thought I’d link back to Bea’s site as well as some of the URL’s that may help in prep for what may essentially be one of only two “SBSC Exams” in 2009. Keep these handy as you prepare and please share your own resources (by commenting) as well. Thanks.
BEA MULZER – SBS 2008 – Exam 70-653 Configuring Windows Small Business Server 2008
MICROSOFT LEARNING – Exam 70-653: TS: Windows Small Business Server 2008, Configuring
will post more when time allows ![]()
Mark Raborn
WIGITAL
Small Business Server 2008 Installation Guide and Links
Posted by Mark Raborn in SBS on 2009/02/09
I’ve had quite a few technicians asking me lately about installing Windows Small Business Server 2008. To lend a hand (to everyone), I’m going to post some SBS 2008 install links here, a quick walkthrough on the sbsanswerfile and some info about certificates and backup I feel is good to be familiar with prior to installing Small Business Server 2008.
Let’s take a look
= = = = =
here is the official before you begin info >
Small Business Server 2008 Before You Begin
Windows Small Business Server 2008 Installation Worksheet
a quick note: minimum official memory suggestion is 4GB’s (SBS08 won’t even complete installation without at least 4GBs of memory present) HOWEVER !!! I suggest 8GB of memory (and at least 6GBs at a minimum). Why? – on the existing installations of SBS 2008 we have in the field, once users are added and the components and services are actually providing the Users with functionality, every SBS 2008 installation we’ve seen idles at 4GBs of “in use” memory (meaning the system is already running at max with the official minimum). The memory requirements for this server “when in action” ARE MUCH LARGER THAN 4GBs!
now, with formalities out of the way, my suggestion is the real place to begin is here >
SEAN DANIELS – Introducing the Windows SBS 2008 Answer File
and this is why >
WIGITAL – OEM install OOBE gotchas and the SBS 2008 Answer File
which is addressed by this walkthrough >
How to customize a standard installation (non-migration) of Small Business Server 2008 (with additional consideration to OEM pre-installed Small Business Servers)
One aspect of SBS 2008 installation (for stand alone installs and also OEM boxes) that can definitely “get you – as in ‘gotcha’ ” is not being aware of the “simplified” installation process on the new SBS. This simplified process defines preset “assumptions” about the environment for the Admin and negates truly customizing SBS 2008 on install. This is a big change from SBS 2003!
The SBS Team has chosen to simplify the new SBS 2008 install process to target a particular market segment. This simplification removes many of the previously available setup parameters (as in SBS 2003) and they are longer available during setup at all except through use of an answerfile. Whether you a agree or disagree, let them know. The point is that it is potentially very critical to have access to the full array of settings when completing an install of an OEM pre-installed SBS 2008 server or when installing bare metal to a “stand-alone” box.
An OEM built SBS 2008 Server (or bare metal install with the first stage completed) will boot into OOBE on startup with SBS 2008 already partly installed. At this point, the Admin will be greeted with a setup continuation window offering only two suggested choices (IMO: the SBS TEAM has chosen a “highly understated way” of explaining what’s actually happening at this point) :
- Proceed – click “Next”
- Do NOT Proceed – click “Cancel” with Microsoft offering the suggestion of reading the migration document on TechNet ( GO FWLINK provided as “only reason why to cancel” ). This suggestion in OOBE is over simplified by placing a Cancel choice solely under the context of migrating from SBS 2003 (meaning the suggestion causes one to think that only reason to cancel is THAT you are migrating from SBS 2003 :: please know THIS IS NOT THE ONLY REASON TO CANCEL!!!)
What is left “unsaid” is what options and choices are “removed from selection” if you proceed with an SBS 2008 OS installation from this first OOBE welcome screen with (whether stand alone install or migration) without first building an sbsanswerfile using the install CD SBSAfg.exe (Small Business Server Answer FIle Generator).
Read this article (mentioned above) to understand what can happen if you proceed (by clicking “Next”)
Here’s the solution (our method, Microsoft’s design) to providing a set of detailed parameters to SBS 2008 when completing setup on an OEM pre-installed SBS 2008 Operating System:
- turn on Server and enter into BIOS
- in BIOS, disable servers ability to boot from USB or to search USB for bootable partitions
- save BIOS changtes and exit BIOS, restart
- allow system to come up into SBS 2008 OOBE welcome screen (we do this ”only to confirm the SBS 2008 OS is indeed properly pre-installed“) DO NOT PROCEED OR CLICK NEXT!!!
- click Cancel at first viewing of OOBE – the machine will shut down
- NOTE: clicking Next and/or entering any data what-so-ever into the parameter fields for Server Name, Domain Name, etc… will completely eliminate any chance of providing detailed parameters (such as top level domain name, Server IP address, etc…) DO NOT CLICK NEXT – CLICK CANCEL
- acquire a network switch from somewhere, power it up, confirm no other systems are connected to it and connect your SBS NIC to the Switch
- NOTE: if you choose a router already on a subnet to connect to, please: (choose a Router that has no DHCP Server enabled on the subnet, possibly a test network)
- NOTE: the reason – “an existing DHCP service connected during SBS08 setup will disable DHCP services on the new SBS 2008 installation. This is by design as a precaution to potential DHCP conflicts”
- verify connection of the Network Interface to the router (NOTE: single NIC only in the new SBS 2008)
- locate your SBS 2008 installation DVD and one USB removable drive
- Create an sbsanswerfile using the SBSAfg.exe tool on the SBS 2008 installation DVD
- Save the sbsanswerfile.xml to the USB removable media at the root of the drive
- Insert USB removable media into SBS 2008 Server and turn power on (remember, you must have disabled USB boot in BIOS or system will try to boot from the USB drive and possibly hang)
- with the sbsanswerfile.xml present (SBS 2008 setup is designed to find the sbsanswerfile at the root of any drive in the system) SBS 2008 will continue setup using the SBS Answer File definitions allowing the full range of parameters to be implemented per specific Admin’s intentions
- the system will continue installation, reboot as needed, and complete install with full set of “your own defined parameters” which are the sbsanswerfile.xml customizations you create for the environment…
…what if I don’t need to use the sbsanswerfile >
Basic Small Business Server 2008 Installation from DVD (using simplified parameters and no sbsanswerfile)
TECHNET – installing Windows Small Business Server 2008 from DVD
… what about migration ? >
Migrating an existing SBS 2003 environment to SBS 2008
** please note: this is a lengthy process and you should allocate substantial time to completing a migration. Do your homework, prepare your environment, allocate extra hours.
REAL WORLD: Hopefully your ride is smooth. I should definitely note the SBS Team put quite a lot of thought into migration and the wizards accomplish ALOT. The process (when successful) is quite impressive.
What if something goes awry? : Real World would not be “real” if I did not mention that I have already seen one particularly messy migration when DNS (for some reason) failed on the destination SBS 2008 Server during the “automated” portion of the migration process. All sorts of stuff happened as a result. We did follow the migration document, we did definitely run the SBS2003 BPA and still..
boo hoo. In this particular type of case, there is nothing an Admin can do but wait for the migration wizard to complete (as it is completely automated once triggered) and then clean up afterward.
TOOLS - DOWNLOAD: Microsoft Windows Small Business Server 2003 Best Practices Analyzer
TECHNET – Migrate to Windows Small Business Server 2008 from Windows Small Business Server 2003
TECHNET – Install Windows Small Business Server 2008 in Migration Mode
… what else should I know about the new SBS 2008? >
Windows Small Business Server 2008 Certificates and Client Access (what you should know out of the box)
As an admin, be sure you acquire a copy of the SelfSigned SSL Certificate before leaving the premisis otherwise you will not be able to remotely administer your SBS 2008 Server.
SBS SelfSSL Certificate PATHS to memorize:
Local Disk: c:\users\Public\Public Downloads
UNC: \\servername\Public\Public Downloads
UNC: \\sites\Public\Public Downloads
OFFICIAL SBS BLOG – How Do I Distribute the SBS 2008 Self-Signed SSL Certificate to My Users?
WIGITAL – SBS 2008 Certificates – RWW Terminal Services and TS Gateway
and… SEAN DANIELS – Introducing the Add Trusted Certificate Wizard
Backup in Windows Small Business Server 2008 (it’s very very new)
One additional component I think is vitally important to know about Day 1 is Backup (because it’s so different then the ”ntbackup” of Windows 2003/XP) >
SBS TEAM BLOG – Introducing SBS 2008 Backup
SBS TEAM BLOG – System State Backups and SBS 2008
SEAN DANIELS – Small Business Server 2008 Backup Q&A
EDGE.TECHNET – SBS 2008 PM Interview and Backup Demo
EMEA SBS TEAM – Backup Methods for WSS 3.0 in SBS2008
= = = = =
Hope this helps you get started. Thanks for reading and please link back or comment for others in the community.
will post more when time allows ![]()
Mark Raborn
WIGITAL
SBS 2008 Certificates – RWW Terminal Services and TS Gateway
Posted by Mark Raborn in SBS on 2008/12/18
Small Business Server 2008 brings a new approach to Remote Web Workplace Connect to Computer connections. This new architecture mandates a default installation of Certificate Services which affects non-domain clients in their ability to connect using the 6.1 version of Terminal Services Client (required for TS Gateway connections).
The following articles explain the new architecture and teach how to distribute certificates to non-domain clients as well as connect those non-domain clients to your domain computer remotely through the new SBS 2008 Remote Web Workplace.
How Do I Distribute the SBS 2008 Self-Signed SSL Certificate to My Users?
… these two additional links should help answer questions for Users
>
Windows Small Business Server 2008 Client Computer Help
Windows Small Business Server 2008 Technical FAQ
Happy Remote Computing on SBS 2008!
(the Chihuahua) comments on SBSanswerfile.xml and OOBE in SBS 2008
Posted by Mark Raborn in SBS on 2008/11/13
A LESSON LEARNED FROM SEAN DANIELS - SBS PM
The sbsanswerfile.xml can be used, when setting up Small Business Server 2008, to define setup parameters via text string entries. These same parameters may also be defined using a different tool, the OOBE wizard. To reach the OOBE wizard, the sbsanswerfile.xml is bypassed (never placed into the machine) and Small Business Server 2008 setup reaches OOBE (Out of Box Experience wizard) because it doesn’t see the sbsanswerfile.xml during boot/setup.
In the OOBE wizard, the level of specificity is not as detailed as using the sbsanswerfile.xml. A more important difference is that the OOBE wizard “hard codes” certain defaults and predefines certain assumptions about the installation. One of the most important of these entries is the DOMAIN-NAME for the SBS2008 environment.
The “domain name” parameter has brought us to write this article today.
DEFINING PARAMETERS BEFORE BEGINNING SETUP
The SBS Team developed Small Business Server 2008 so that “IF and WHEN” the admin wants to change the default parameters, then an answer file (a text file called sbsanswerfile.xml) must be defined prior to beginning setup. The xml file is then written to a USB drive (or other media) and placed in the machine before placing the SBS setup disk into the server. The OOBE wizard is not used in this case.
In the real world: VAR’s, IT Consultants, MS Partners, etc… often receive OEM boxes with Small Business Server 2008 already partially installed. This creates a quandry because the opportunity to define the answer file and then point SBS setup to sbsanswerfile.xml has already passed.
this circumstance raises the following question?:
How do we still define these settings once setup has already begun and the binaries have already been installed on the drive?
In our scenario (and In the case of most OEM boxes), the first stages of the SBS2008 installation are accomplished by the manufacturer. Therefore, the system launches straight into OOBE and and ultimately the wizard that defines the core SBS settings (text strings).
Since an sbsanswerfile cannot possibly be defined “with our answers” at the manufacturer, and pressing Power ON boots us straight into OOBE, how do we offer the machine the more “flexible and definitive parameter set using sbsanswerfile.xml”?
Sean Daniels emailed the response today:
As long as you
- DO NOT go past the first screen in OOBE
- DO NOT enter any data whatsoever in OOBE (i.e. the SERVER NAME /DOMAIN NAME / etc…)
- SHUT DOWN THE MACHINE immediately
You can still define the sbsanswerfile.xml and still have the machine call it when booting from a powered off state.
This gives you the ability to define specific settings (i.e. SERVERNAME / FULL DOMAIN NAME / etc… ) even though a partial install has already been accomplished at the factory.
How?
- Just grab the SBS Setup disk
- define and save your sbsanswerfile.xml to USB or other media
- place the media in the machine (prior to booting from powered off state)
- boot and wait for SBS setup to locate the sbsanswerfile.xml , enumerate the text strings, and commit your settings automatically
REPEATING “THE VERY IMPORTANT POINT”: do not launch an OEM box into OOBE without first defining the answer file.
What happens if you do start OOBE on an OEM SBS2008 box?
If you continue a SBS2008 install on an OEM Small Business Server 2008 box from OOBE you will irrevocably turn off the only method to explicitly define the setup parameters. Even if you partially begin OOBE and then bail out without writing or saving any data …a complete re-install will be required to change the SBS settings using an sbsanswerfile.xml. Why, because the method that calls to the sbsanswerfile.xml is irrevocably “turned off” (by design) If OOBE is entered or defined on any level.
So what happened in our case?
So there we were, installing a machine on-site that had a partially completed Small Business Server 2008 installation. We didn’t know (yet) the information contained in this article (duh!). Upon receipt of the machine we started the unit and were taken directly into OOBE. Upon arrival at the setup screens for SERVER NAME, DOMAIN NAME, etc… we realized we did not want to accept the defaults and thought “Hey, what about the sbsanswerfile.xml?” So we bailed out and in doing so, turned off the method available to call sbsanswefile.xml. We could no longer make certain changes to the OOBE based install using the sbsanswerfile.xml
You might be wondering: Why did we not move forward with the default OOBE install in the first place?
In our case, we bailed out because…. the FULL INTERNAL DOMAIN can not be defined in OOBE and we did not want to use the SBS Development Team’s “default OOBE choice of .local as the top level domain”. Why… because we had a network full of Macs.
If you are not aware: Small Business Server defines .local as the top level domain (by default) when using the OOBE wizard and their is “NO WAY” to alter a top-level domain in SBS setup except by using the sbsanswerfile.xml
To sum up our story, we irrevocably entered OOBE and clicked next before abandoning the OOBE wizard.
Because we had a “time constraint” on delivery to this client, we needed to finish this install quickly, so we went ahead with the .local top level domain. Alas for our own choice for the full domain name (sigh). We then had to deal with the .local top-level domain issue on Mac.
By the way, about Mac on SBS:
- iPhone and Microsoft Exchange
- Using Apple Macintosh File Systems with Windows Services for Mac
- Networking Windows .local and Apple Macintosh
- screenshots: How Mac Entourage 2008 RPC HTTP uses WebDav to Exchange
- more about: Entourage Account Settings for Microsoft Exchange
Remember, exit OOBE immediately when setting up an SBS 2008 machine from an OEM and you can still define the environment using the sbsanswerfile.xml. Restart clean with the sbsanswerfile.xml on USB . In doing so, you can still have it “your way”.
Thanks seanda
Moving user and data stores in Small Business Server
Posted by Mark Raborn in SBS on 2008/03/16
Small Business Server packs a lot of functionality into a single container. As such, keeping track of the settings and parameters associated with SBS functionality can be tricky.
When moving day for files, folders, data stores, MSDE etc… comes around, it is important to know both the configuration (to setup the destination) and how to move the files (to keep settings, parameters, etc… intact).
Microsoft provides a thorough article on the most commonly moved items: databases , User Shared Folders, and Exchange Store. Read more at:
Moving Data Folders for Windows Small Business Server 2003
TechNet article: Moving Data, User Shares and Exchange Store in SBS 2003
also… check out the Windows Small Server 2003 Technical Library for additional information as well as Documentation by Task for Windows Small Business Server 2003.
Essential Business Solutions (notes from Launch)
Posted by Mark Raborn in SBS on 2008/02/28
SBS 2008 and Essential Business Server 2008
Presenters
- Eric Watson – eric.watson[at]microsoft(dot)com
- Dean Paron – dean.paron[at]microsoft(dot)com
NOTES:
- SBS 2008 up to 75 CALS
- EBS 2008 up to 250 CALS
SBS 2008 will have a list of Registrars with which SBS 2008 will automate the process of domain registration while setting up SBS 2008. This domain registrar list will be available publicly soon.
SBS 2008 will come packaged with a One Year subscription to One Care for Server ( a server only Anti-Virus solution to protect SBS 2008). Renewal of the subscription at a cost.
SBS 2008 will integrate with Office Live. Details to follow.
SBS 2008 will NOT offer dual authentication for Remote Web Workplace in SBS 2008. Auth Anvil may be a 3rd party solution at that time.
Trust Relationships still CANNOT be formed with other domains (in either product)
EBS 2008 comes with System Center Essentials. Support for Virtual Machines will exist but not be integrated. System Center Virtual Machine Manger does not run on System Center Essentials.
Will install on either 32bit or 64bit machines.
SBS 2008
- SBS 2008 Standard (one box)
- SBS 2008 Premium (2 boxes)
EBS 2008
- EBS 2008 Standard (3 boxes)
- EBS 2008 Premium (4+ boxes)
- EBS 2008 will have an extensible administration console (3rd party vendors can integrate with the administration tools)
Questions for the Microsoft EBS team regarding future security:
- RWW Cert generated by CEICW on SBS 2003 (publishes FQDN). How is this addressed in SBS 2008 ?
- RWW and Terminal Services in SBS 2003 (cannot use TLS/FIPS in combination with RWW Connect to Server). How is this addressed in SBS 2008 ?
Disable Links in Remote Web Workplace using Registry
Posted by Mark Raborn in SBS on 2008/02/12
Remote Web Workplace offers a number of helpful links in the Remote Web Workplace portal. Links like Client Help and Ask the Community offer users the ability to seek out their own answers to questions and even (ask for help).
However, the walkthrough explaining How to Connect Outlook via the Internet exposes some unnecessary information. To be specific, it spells out the SBS computer name and the Internal domain name.
The better practice might not be to have this information exposed to the Internet.
Google Groups provides some very helpful posts on this subject. It turns out the the registry can be used to disable certain links from the view of Knowledge Workers when visiting the Remote Web Workplace portal.
check out:
- http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_thread/thread/c043f0ef3df6e66e/7f993539cbea81b1?hl=en&lnk=st&q=Remote+Web+Workplace+disable+KWLinks+Registry#7f993539cbea81b1
- http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_thread/thread/718c07b7f899caad/bc4725275ca8bd82?hl=en&lnk=st&q=Remote+Web+Workplace+disable+KWLinks+Registry#bc4725275ca8bd82
Thanks Jerry zhao
The specific Registry Keys are:
HKLM\Software\Microsoft\SmallBusinessServer\RemoteUserPortal\KWLinks
HKLM\Software\Microsoft\SmallBusinessServer\RemoteUserPortal\AdminLinks
and this break down by Jerry zhao is super helpful
ServerTS
DWORD
0×00000001 (1)
Access Server Desktops
ClientTS
DWORD
0×00000001 (1)
Access Client Desktops
HelpDesk
DWORD
0×00000000 (0)
Monitor Help Desk. 1 = WSS is published. 0 = Not published
STS
DWORD
0×00000000 (0)
Administer internal company web site. 1 = WSS is published. 0 = Not published
PerfReport
DWORD
0×00000000 (0)
View performance report for SBS. 1 = Monitoring is published. 0 = Not published
UsageReport
DWORD
0×00000000 (0)
View usage report for SBS. 1 = Monitoring is published. 0 = Not published
OWA
DWORD
0×00000000 (0)
Use Outlook Web Access. 1 = OWA is published. 0 = Not published
CM
DWORD
0×00000000 (0)
Download Connection Manager
Help
DWORD
0×00000001 (1)
View Client Help
We can also modify the registry keys under
HKLM\Software\Microsoft\SmallBusinessServer\RemoteUserPortal\KWLinks
They are used to enable and disable links on Remote Web Workplace Knowledge
Worker Page. 0 = Hide the link. 1 = Show the link.
TS
DWORD
0×00000001 (1)
Access my computer at work
AppTS
DWORD
0×00000001 (1)
Access my company??s application-sharing server
STS
DWORD
0×00000000 (0)
View my company??s internal web site
UsageReport
DWORD
0×00000000 (0)
View usage report for SBS
OWA
DWORD
0×00000000 (0)
Read my company e-mail
CM
DWORD
0×00000000 (0)
Join my remote computer to the network
Help
DWORD
0×00000001 (1)
View Remote Web Workplace help