On Cisco Pix
hostname host
domain-name domain.se
ssh <ip> <mask> outside
ssh <ip> <mask> inside
ssh timeout 30
ca generate rsa key 1024
show ca mypubkey rsa
ca save all
On Cisco ASA
hostname host
domain-name domain.se
ssh <ip> <mask> outside
ssh <ip> <mask> inside
ssh timeout 30
crypto key generate rsa modulus 1024
Two good reasons for investigating FSMO
a) Curiosity to know how this Single master operation works
b) To know what to do if you lose one of the 5 vital roles.
For most Active Directory operations, Windows 2003 uses the multiple master model. The benefit is you can add a computer, or change a user’s password on any domain controller. For example, if you have three domain controllers, you can physically create a new computer in the NTDS.dit database on any of the three. Five minutes later, the new computer object will be replicated to the other two domain controllers.
Technically, the multiple master model uses a change notification mechanism. Occasionally problems arise with duplicate operations, and as a result orphaned objects appear in the ‘LostAndFound’ folder. The point of FSMO is that a few operations are deemed so critical that only one domain controller can carry out that process. Emulating a PDC is the most famous example of such a Single Master Operation; creating a new child domain would be another example.
In FSMO, the Flexible word simply means that you can move the role to a more suitable domain controller.
Three of the FSMO roles (1-3) are held in each domain, whilst two (4-5) are unique to the entire forest.
You can plan a switch of Operation Master by using the Change button in the diagram right, taken from Active Directory Users and Computers, Right Click Domain, Properties, Operations Masters.
To see the Domain Naming Master (4), check out Active Directory Domains and Trusts, Operations Master..
The Schema Master (5) is the most difficult FSMO to find.
1) Register the Schema Snap with this command: RUN regsvr32 schmmgmt.dll;
2) Run MMC, Add Remove Snap-in, Add Active Directory Schema
3) Select Active Directory Schema, Right Click, Operations Master.
If you ever run DCPROMO to demote a domain controller, watch out for a check box that says ‘This is the last domain controller in the domain’. If that box is UNchecked the wizard will automatically move any FSMO roles to another domain controller.
If you find problems with domain controller connections timing out then:
a) Check DNS settings on the TCP/IP properties.
b) Check that all the FSMO servers are up and running.
c) Try this need command using NetDom:
netdom query fsmo.
d) If you need a copy of netdom, check here.
Blog Applications
w.Bloggar – Blogging Tool
BlogJet – Blogging Tool
Attensa for Outlook – Free Blog Reader for Outlook
Stuff
Blogging to a Different Tune: Using Windows XP and the Windows Media Player 9 Blogging Plug-In
| Article ID | : | 829112 |
| Last Review | : | May 4, 2005 |
| Revision | : | 5.0 |
For these steps to work, you must meet the following criteria:
| • | You must restore the database to the same server where you performed the backup operation. | ||||||||
| • | The following Windows SharePoint Services database and log files must be on the server:
|
| 1. | To back up the Windows SharePoint Services http://companyweb database by using Windows NT Backup, follow these steps:
|
||||||||||||||||||
| 2. | To restore a Windows SharePoint Services http://companyweb database by using Windows NT Backup, follow these steps:
Note This action overwrites the existing Windows SharePoint Services databases. Microsoft recommends that you back up the current Program FilesMicrosoft SQL ServerMSSQL$SharePointData folder before you restore files.
|
| 1. | To back up a Windows SharePoint Services http://companyweb database by using Stsadm.exe, follow these steps:
|
||||||||||
| 2. | To restore a Windows SharePoint Services http://companyweb database by using Stsadm.exe, follow these steps:
|
Microsoft provides programming examples for illustration only, without warranty either expressed or implied, including, but not limited to, the implied warranties of merchantability or fitness for a particular purpose. This article assumes that you are familiar with the programming language that is being demonstrated and the tools that are used to create and debug procedures. Microsoft support professionals can help explain the functionality of a particular procedure, but they will not modify these examples to provide added functionality or construct procedures to meet your specific requirements. If you have limited programming experience, you may want to contact a Microsoft Certified Partner or the Microsoft fee-based consulting line at (800) 936-5200. For more information about Microsoft Certified Partners, visit the following Microsoft Web site:
For additional information about the support options available from Microsoft, visit the following Microsoft Web site:
The following example script uses a numbered value for the day of the week. The script then appends this number to the name of the backup file that the script creates in the X:Backups location. To use this script, copy the following code to a Notepad file, and then customize the text string that specifies the backup file (x:backupscompanyweb). Next, save the Notepad file by using the file name Wssback.vbs, and then create a scheduled task to run this script daily.
dim dayweekdim strBackupdayweek = datepart("w",(date))strBackup = """C:Program FilesCommon FilesMicrosoft Sharedweb server extensions60BINstsadm""" + _"-o backup -url http://companyweb -filename x:backupscompanyweb" + cstr(dayweek) + ".dat -overwrite"wscript.echo "Backing up Companyweb"Set WshShell = WScript.CreateObject("WScript.Shell")Return = WshShell.Run(strBackup, 0, true)Set WshShell = Nothing
To add this script as a scheduled task, follow these steps:
| 1. | Open Control Panel. |
| 2. | Double-click Scheduled Tasks. |
| 3. | On the File menu in Scheduled Tasks, point to New, and then click Scheduled Task. |
| 4. | Type a name for the scheduled task, such as Companyweb Backup. |
| 5. | Double-click the new task to open the task properties. |
| 6. | In the Run box, type cscript Drive:Wssback.vbs.
Note In this step, Drive is the location of the Wssback.vbs file. |
| 7. | Click Set password, type the password for the user account that the task will use in the Password box and in the Confirm password box, and then click OK. |
| 8. | Click the Schedule tab, configure the appropriate schedule, and then click OK. |
| 9. | To test the scheduled task, right-click the task, and then click Run. After the task runs, visit the location that you specified for the backup file to verify that the script created the file. |
For more information about the Windows SharePoint Services Administrator’s Guide, visit the following Microsoft Web site:
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
| • | Microsoft Windows Small Business Server 2003 Premium Edition |
| • | Microsoft Windows Small Business Server 2003 Standard Edition |
| • | Microsoft Windows SharePoint Services |
Keywords: |
kbhowtomaster kbbug KB829112 |
Question: How can I force Group Policy to refresh on a Windows Server 2003 or Windows XP machine?
Answer:
To manually force Group Policy to refresh under Windows 2000, you use the command
secedit /refreshpolicy machine_policy/user_policy
Microsoft has replaced this command in Windows 2003 and XP with the command
gpupdate
You can run this command without any switches to update both machine and user policies. When you run Gpupdate on Windows 2003, the machine will display the following text:
Refreshing Policy...User Policy Refresh has completed.Computer Policy Refresh has completed.To check for errors in policy processing, review the event log.
The last line doesn’t appear on XP machines. To update only the user command components, type
gpupdate /target:user
To load only the computer command components, type
gpupdate /target:computer
The optional switches that you can use with the Gpupdate command are
Lite roliga länkar som jag springit på…
Products
MIIS 2003 Product Overview
Microsoft Identity Integration Server 2003 Frequently Asked Questions
Microsoft Windows Services for NetWare
Microsoft Windows Services for NetWare 5.03 Overview – Can be used for migration and Coexistence
Microsoft Windows Services for NetWare Component Summary
Services for NetWare 5.03 White Paper
Novell NetWare integration overview
Synchronizing Windows 2000 Active Directory with Novell Directories
Download – Available Free from Microsoft
Question: Why do I have this problem installing SmallBusiness Server 2003
Answer: There is a known error on the first rease of the CDs of Smallbusiness Server 2003. Here is the KB
and here is the patch: SBS2003-KB832880-X86-ENU.EXE (522,77 KB)
