SBS 2011 migration preparation tool must be member Domain Admins, Enterprise Admins, or Schema Admins

When running the Windows Small Business Server 2011 Standard Migration Preparation Tool, keeps coming with the following error.

To prepare the source server for migration, you must be a member of all of the following security groups: Enterprise Admins, Schema Admins, and Domain Admins. For additional information, see the article at http://go.microsoft.com/fwlink/?LinkId=190413
I double checked the admin account is a member of these groups and it was, the solution turned out to be because the account was configured to use one of these groups as its primary group, I changed this in AD to domain users and the wizard ran without any problems at all.

How to stop the SBCore service from shutting down your server

Tools you’ll need – Process Explorer http://technet.microsoft.com/en-us/sysinternals/default.aspx

As you probably know, you have a service called “SBCore Service”, which executes the following process: C:\WINDOWS\system32\sbscrexe.exe

If you kill it, it just restarts – and if you try and stop it you are told Access Denied.

If you fire up Process Explorer, you can select the process and Suspend it, now we can start to disable the thing.

Run regedt32.exe and find:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SBCore

Right click this, choose Permissions and give the “Administrators” group on the local machine full access (don’t forget to replace permissions on child nodes).

Press F5 in regedt32 to refresh, and you’ll see all of the values and data under this key.

Select the “Start” DWORD and change it from 2 to 4 – this sets the service to the “Disabled” state as far as the MMC is concerned.

Next, adjust the permissions on the file C:\WINDOWS\system32\sbscrexe.exe so that EVERYONE account is
denied any sort of access to this file.

Then go back to process explorer, and kill the sbscrexe.exe process, if it doesn’t restart – congratulations!

Load up the services MMC snap-in and you should find that “SBS Core Services” is stopped and marked as Disabled.

This info was taken from Here

Disable SIP ALG of a Draytek 2860

First you need to telnet onto your router so start a command prompt and type telnet (router ip address) and login using the admin username and password.

To find out if sip_alg is already disabled or not type
sys sip_alg ?

To disable sip_alg simply type
sys sip_alg 0 (zero) to disable or 1 to enable.

 

Print Management

This is a tool i don’t use very often but when i come to use it i can never find it and it happened again to me the other day so this time i made a note.

Normally it is located in Administrative Tools but if it not there it probably needs installing to do so go to programs and features in control panel, and click turn windows features on or off.

In the server manager box click on Roles and Add Role tick the Print and Document services Role and click next, the only role you need is the Print Server role click next and finish etc.

You should now see Print Management in the admin tools

Windows Backup – Volume Shadow Copy Error 0x8004230f – unexpected provider error

I received this error whilst using Backup Assist which in uses Windows Backup to backup the server there appears to be several things that can cause this error see this article

My particular problem was caused by trying to backup to a large usb hard drive (3tb) on a Windows Server 2008 machine see this article for more info the problem basically stems from the fact that only Windows 8 and 2012 natively support the 4k sector size installing sp1 will improve compatabilty with these drives but you still can’t do certain things with them and it looks like using them as a backup medium is one of them.

The way i overcame this problem was to format the drive using the tool that comes with the drive in my case it was a Buffalo drive using Advance Format 512e this creates a “Bytes Per Sector” value of 512 but the “Bytes per Physical Sector” value is 4096 originally the drive said it was 4096 for both.

To find what your drive is formatted as type the following at an elevated command prompt ‘Fsutil fsinfo ntfsinfo x:’ (x: is whatever your drive letter is you are checking) and check the values for Bytes Per Sector and Bytes Per Physical Sector values to find out what type of drive you have.

Another thing to note is not all manufacturers seem to have a format tool to allow you to format the drives as 512e so if using drives bigger than 2tb on anything less than Server 2012 its a minefield as to what drives will work.

I have found a drive that will allow you to format it using 512e sector sizes a 3TB Western Digital Elements drive

RWA 404 Error on SBS 2011

When trying to access RWA users were getting a 404 page not found error this appears to be happening on IE11  browsers to solve the problem i added the url for the site to the trusted sites zone and also in the compatibility view settings list.

Port forwarding stops working on Draytek router after an upgrade

After upgrading the firmware on a Draytek Vigor 2830 port forwarding on port 443 stopped working, after a bit of digging around in the router setting i noticed a new ‘SSL VPN’ section had been added, under General Settings i changed the port to 8443 as we don’t use this feature, port 443 is now forwarding correctly again.

See http://www.draytek.co.uk/support/kb/kb_sslvpn_troubleshooting.html for more info

Link state suppression is not enabled

When running the Exchange Server Pre-Deployment Analyser in preparation for an exchange migration it found a problem on the existing Exchange 2003 server.

Link state suppression in not enabled

Before introducing Exchange Server 2010 into this topology, the ‘SuppressStateChanges’ configuration parameter should be set to ‘1’ on server server.domain.local. This parameter is essential if you plan to create multiple connectors to the dedicated Exchange 2010 routing group.

It is a relatively simple fix to correct this error

Open Regedit
Go to  HKLM\System\CurrentControlSet\Services\RESvc\ParametersRight click in the right hand windows select New, DWORD value and name it SuppressStateChanges
Double click on the new entry and change the value to 1
Close regedit and restart the following services

SMTP Service,
Microsoft Exchange Routing Engine,
and Microsoft Exchange MTA Stacks

Exchange Active Sync issue after migration

I encountered an issue after migrating SBS 2003 to SBS 2011 with a few users iphones not able to sync email any more, this was down to inheritable permissions not being ticked to fix this issue go to

 

  • Active Directory Users and Computer
  • Expand you domain and find the container with your users in it
  • Right click the problem users go to properties and click the security tab
  • (If the security tab isn’t their click view and tick Advanced Features)
  • Click the advanced button
  • Tick ‘Allow inheritable permissions from the parent to propagate to this object an all child object. Include these with entries explocoty defined here.
  • Click ok, wait a few minutes then try the phone again

 

 

Increase number of mailboxes transfering Exchange 2010

I was migrating a SBS 2003 server over too SBS 2011 over the weekend and when it came to migrating the Exchange information store over to Exchange 2010 it was only doing 2 mailboxes at a time, at that rate it would take the rest of the week just to move emails.
 
However this can be changed on your CAS server ours was SBS so its all on one box, navigate to the following location.c:\Program Files\Microsoft\Exchange Server\V14\Bin\MSExchangeMailboxReplication.exe.config
 
and edit in notepad

The default values are as follows

MaxActiveMovesPerSourceMDB = “5″   
MaxActiveMovesPerTargetMDB = “2″    
MaxActiveMovesPerSourceServer = “50″    
MaxActiveMovesPerTargetServer = “5″    
MaxTotalMovesPerMRS = “100″

I changed my values to

MaxActiveMovesPerSourceMDB = “10″   
MaxActiveMovesPerTargetMDB = “10″   
MaxActiveMovesPerSourceServer = “50″   
MaxActiveMovesPerTargetServer = “40″   
MaxTotalMovesPerMRS = “250″

After you have made these changes restart the Microsoft Exchange Mailbox Replication Service after you refresh you move request window you should see 10 mailboxes moving at the same time.