I find many a times, from lack of knowledge, or lavishness, people don’t configure their domain’s correctly. I’m currently repairing a DC for issues that we’re easily avoidable.
One of the things you should configure is your Time Source on your Domain Controller holding the PDC emulator FSMO role.
Here’s how to do it.
Configuring the Windows Time service to use an external time source
To configure an internal time server to synchronize with an external time source, follow these steps:
- Change the server type to NTP. To do this, follow these steps:
- Click Start, click Run, type regedit, and then click OK.
- Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type
- In the right pane, right-click Type, and then click Modify.
- In Edit Value, type NTP in the Value data box, and then click OK.
- Set AnnounceFlags to 5. To do this, follow these steps:
- Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\AnnounceFlags
- In the right pane, right-click AnnounceFlags, and then click Modify.
- In Edit DWORD Value, type 5 in the Value data box, and then click OK.
- Locate and then click the following registry subkey:
- Enable NTPServer. To do this, follow these steps:
- Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpServer
- In the right pane, right-click Enabled, and then click Modify.
- In Edit DWORD Value, type 1 in the Value data box, and then click OK.
- Locate and then click the following registry subkey:
- Specify the time sources. To do this, follow these steps:
- Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters
- In the right pane, right-click NtpServer, and then click Modify.
- In Edit Value, type Peers in the Value data box, and then click OK.
Note Peers is a placeholder for a space-delimited list of peers from which your computer obtains time stamps. Each DNS name that is listed must be unique. You must append ,0×1 to the end of each DNS name. If you do not append ,0×1 to the end of each DNS name, the changes made in step 5 will not take effect.
- Locate and then click the following registry subkey:
- Select the poll interval. To do this, follow these steps:
- Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient\SpecialPollInterval
- In the right pane, right-click SpecialPollInterval, and then click Modify.
- In Edit DWORD Value, type TimeInSeconds in the Value data box, and then click OK.
Note TimeInSeconds is a placeholder for the number of seconds that you want between each poll. A recommended value is 900 Decimal. This value configures the Time Server to poll every 15 minutes.
- Locate and then click the following registry subkey:
- Configure the time correction settings. To do this, follow these steps:
- Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\MaxPosPhaseCorrection
- In the right pane, right-click MaxPosPhaseCorrection, and then click Modify.
- In Edit DWORD Value, click to select Decimal in the Base box.
- In Edit DWORD Value, type TimeInSeconds in the Value data box, and then click OK.
Note TimeInSeconds is a placeholder for a reasonable value, such as 1 hour (3600) or 30 minutes (1800). The value that you select will depend upon the poll interval, network condition, and external time source. - Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\MaxNegPhaseCorrection
- In the right pane, right-click MaxNegPhaseCorrection, and then click Modify.
- In Edit DWORD Value, click to select Decimal in the Base box.
- In Edit DWORD Value, type TimeInSeconds in the Value data box, and then click OK.
Note TimeInSeconds is a placeholder for a reasonable value, such as 1 hour (3600) or 30 minutes (1800). The value that you select will depend upon the poll interval, network condition, and external time source.
- Locate and then click the following registry subkey:
- Quit Registry Editor.
- At the command prompt, type the following command to restart the Windows Time service, and then press ENTER:
net stop w32time && net start w32time
After you finish restarting the w32time service, check your system event log for the following two Information Logs for the w32Time Service.
1.The time service is now synchronizing the system time with the time source VM IC Time Synchronization Provider.
2.The time provider NtpClient is currently receiving valid time data from time.windows.com (ntp.m|0×1|10.0.0.67:123->207.46.197.32:123).
A simple vb script to create 500 test users.
You must configure your domain info, and how many users you would like to create
dim strUser Dim objRootLDAP, objContainer, objNewUser, objGroup set objRootLDAP = GetObject("LDAP://rootDSE") set objContainer = GetObject("LDAP://cn=Users," & _ objRootLDAP.Get("defaultNamingContext")) set objGroup = GetObject(LDAP://CN=Users,DC=DOMAIN,DC=COM) ‘Modify number of users to create for i = 01 to 500 strUser = "USER NAME" & i set ObjNewUser = objContainer.Create("User", "cn=" & strUser) objNewUser.Put "sAMAccountName", strUser objNewUser.Put "cn", strUser objNewUser.Put "givenName", strUser objNewUser.Put "displayName", strUser objNewUser.Put "userPrincipalName", strUser & "@FQDN" objNewUser.SetInfo objNewUser.SetPassword("PASSWORD") objNewUser.AccountDisabled = FALSE objNewUser.SetInfo objNewUser = null Next
.csharpcode, .csharpcode pre
{
font-size: small;
color: black;
font-family: consolas, “Courier New”, courier, monospace;
background-color: #ffffff;
/*white-space: pre;*/
}
.csharpcode pre { margin: 0em; }
.csharpcode .rem { color: #008000; }
.csharpcode .kwrd { color: #0000ff; }
.csharpcode .str { color: #006080; }
.csharpcode .op { color: #0000c0; }
.csharpcode .preproc { color: #cc6633; }
.csharpcode .asp { background-color: #ffff00; }
.csharpcode .html { color: #800000; }
.csharpcode .attr { color: #ff0000; }
.csharpcode .alt
{
background-color: #f4f4f4;
width: 100%;
margin: 0em;
}
.csharpcode .lnum { color: #606060; }
There’s a lot to think about before installing Exchange 2010 with the typical installation (one server). I figured I would post while building one out myself in a virtualized environment.
Starting with a Windows Server 2008 R2 x64 base operating system install configured with the following: (all configured within Hyper-V)
- Quad Xeon Processor (additional cores added)
- 8GB Memory
- 600GB Hard Disk (IDE)
- 1 Network Adapter (configured in the OS with static IP address)
Pre-Requisites
Update your Active Directory Schema:
On the Exchange Server, in PowerShell (run as administrator), run the following command
ServerManagerCmd -i RSAT-ADDS
reboot after installation is complete.
Next lets RUN: services.msc, and the Net.TCP Port Sharing Service, open
Change to the following values (start up type to Automatic)
When you apply this setting, you will have the option to start the service, click start.
Install IIS:
Use the server manager to perform a default installation of IIS 7 or 7.5
Error:
Unable to read data from the Metabase. Ensure that Microsoft Internet Information Services is installed.
Recommended Action: http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.4&id=a4a4d339-4009-4fb7-b842-ca2ba79f13f0
Error:
The World Wide Web (W3SVC) service is either disabled or not installed on this computer. You must exit Setup, install the required component, then restart the Setup process.
Recommended Action: http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.4&id=9eeaa77f-4d46-4d9a-9c36-f262a075392b
Error:
Unable to read data from the Metabase. Ensure that Microsoft Internet Information Services is installed.
Recommended Action: http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.4&id=a4a4d339-4009-4fb7-b842-ca2ba79f13f0
Error:
The World Wide Web (W3SVC) service is either disabled or not installed on this computer. You must exit Setup, install the required component, then restart the Setup process.
Recommended Action: http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.4&id=9eeaa77f-4d46-4d9a-9c36-f262a075392b
Download and Install 2007 Office System Converter
Warning:
This computer requires the 2007 Office System Converter: Microsoft Filter Pack. Please install the software from http://go.microsoft.com/fwlink/?LinkId=123380.
Once you have all of this complete, lets move on to the installation!
Be-aware that the top exclamation mark is indicating that:
Warning:
Setup is going to prepare the organization for Exchange 2010 by using ‘Setup /PrepareAD’. No Exchange 2007 server roles have been detected in this topology. After this operation, you will not be able to install any Exchange 2007 server roles.
Your finished the basic installation for Exchange Server 2010
Introduction
To start off, I built a Hyper-V virtual image of Windows Server 2008 R2 Standard server with the following hardware configuration:
- 6GB Memory
- 4 cores
- 127GB VHD
- 1 Network Adapter
After installing and updating Windows, I installed the .NET 3.5 SP1 framework, and installed the Web Services roles required.
Preparation Tool
The SharePoint 2010 Preparation Tool checks for the following
• Application Server Role, Web Server (IIS) Role
• Microsoft SQL Server 2008 Native Client
• Microsoft "Geneva" Framework Runtime
• Microsoft Sync Framework Runtime v1.0 (x64)
• Microsoft Chart Controls for Microsoft .NET Framework 3.5
• Microsoft Filter Pack 2.0
• Microsoft SQL Server 2008 Analysis Services ADOMD.NET
Installing
Use your own product key, your not getting mine
For my example I will choose.. the standalone option
click yes
SharePoint is now creating and configuring the database, configuring features, adding sample data and so forth.
My Installation said that it had failed, however all features within SharePoint seem to be working correctly.
On Wednesday Microsoft released their new Anti Virus solution. It is free, and looks like a great product. I myself will be installing it this evening, and updating this post with some comments on performance, and real time scanning.
Here is the link!
http://www.microsoft.com/Security_essentials/
