• NTLDR is missing Press Crtl+Alt+Del to restart

Oeps my boot record was missing or something went wrong during the import. Therefore I mounted the Windows Server 2008 DVD and boot from it.

Click “Repair your computer”

Make sure “System Recovery Options” finds a Operating System and click Next.

Systems recovery tool is started and click “Command Prompt”

Since Windows 2008 or even with Windows Vista (not sure ) the Windows Setup includes some new tools. We are going use the bootrec.exe.

Execute the following commands:

• bootrec.exe /FixMbr
• bootrec.exe /FixBoot
• bootrec.exe /RebuildBcd

Close “Command Prompt” and click Restart

Windows Server 2008 boot now and I was able to login. Changed the network settings and reboot with success.

Related links:

• How to use the Bootrec.exe tool in the Windows Recovery Environment

What is freeSSHD?

freeSSHd, like it’s name says, is a free implementation of an SSH server. It provides strong encryption and authentication over insecure networks like Internet. Users can open remote console or even access their remote files thanks to buit-in SFTP server.

Current version: 1.2.1

Go to http://www.freesshd.com/index.php?ctt=download and download the latest version of freeSshD deamon.

Run and allow the setup file.

Click Next, Next, Next, Next and Install. Click Yes to generate the private keys.

Click Yes to run the freeSshD as system service.

Click Finish to close the installation wizard.

Open FreeSSHd shortcut on the desktop. FreeSSHd will start and new icon will appear on the right side of the taskbar. Right-click and choose settings.

Click here to start it for SSH server.

Start putty or add mRemote SSH connection to your Windows Server:

PS: don’t expect too much on the performance as you would connect to a linux based SSH server; for example you can’t scroll uo;-( At least there is a remote shell and you can securely transfer files from Internet to it.

My work log:

• Logon on the old Windows Server 2003 hosting the OWA front-end role
• Start MMC and add the Certificate Snap-In; choose the Computer Account.
• Go to Personal/Certificates and locate the SSL certificate assigned to IIS for SSL encryption. Right click ; All Tasks and choose export. Choose the appropriate options like the certificate path; assign password and save the PFX file to "My Documents"
• Copy the PFX file to your Windows Server 2008 Client Access Server
• Logon on the Windows Server 2008 and add the Certificate Snap-In to a new MMC console for the Computer Account
• Go to Personal/Certificates; right click; All Tasks and choose Import.

• Locate the PFX file; enter the password and make sure you check "Mark this key as exportable" to enable future migrations of the SSL certificate.
• Place the certificate in the Personal Store

• Open the certificate and go to Details tab. Locate the Thumprint field and select Value with mouse; press CRTL-C to copy the data.

• Paste the value in Notepad and replace the "SPACE’ with CRTL-H. In the Find what field press space on the keyboard and click Replace All

• Copy the Thumbprint
• Start the Exchange Management Shell and run the Enable-ExchangeCertificate cmdlet
• Type IIS as Services and paste the copied data from Notepad to Thumbprint

• Start Exchange Management Console and go to Server Configuration /  Client Access / Select the server and open owa from Outlook Web Access tab
• Type External URL of the SSL certificate and DNS. E.g. https://webmail.domain.tlk

• Click OK and you are finished to test the configuration.
• Start IE and test your OWA role. Review your NAT and Firewall rules also.

Related links:

• Enable-ExchangeCertificate
• Exporting Existing SSL OWA Certificates from Exchange 2003 FES to Exchange 2007 SP1 CAS on Windows 2008…

What is ServerManagerCMD.exe?

Server Manager in Windows Server 2008 provides a single source for managing a server’s identity and system information, displaying server status, identifying problems with server role configuration, and managing all roles installed on the server.

ServerManagerCMD is powerful tool and within one command line you can install the Hyper-V role. Make sure you installed the Windows 2008 RTM version and updated your system with KB950050.

With ServerManagerCMD.exe you will be able to install all those roles:

Active Directory Certificate Services
Active Directory Domain Services
Active Directory Federation Services
Active Directory Lightweight Directory Services
Active Directory Rights Management Services
Application Server
Availability and Scalability
DHCP Server
DNS Server
Fax Server
File Services
Hyper-V
Network Policy and Access Services
Print Services
Streaming Media Services
Terminal Services
Troubleshooting
UDDI Services
Web Server
Windows Deployment Services

Finally we get a single command line tool for this administrative task. I hate having different text files and run the cmd batch scripts.

Related links:

• Technet – Server Manager

C:\>ServerManagerCmd.exe -query

Error: Configuration was started by another administrator.That administrator must log in to complete that action before other administrators can install or remove additional features.

This tool opens a new horizon for me and other IT administrators but it didn’t work when I tried to use it for the first time. Google and Microsoft forums didn’t help  so tried to troubleshoot myself. I read through the “Server Manager Scenarios Step-by-Step Guide” but this didn’t help me either. I decided to install the PoweShell feature manually and now I got a popup box that another process was in progress but I didn’t see it. I clicked yes and didn’t create a screenshot of this message, but this is how I resolved this issue.

Register your account on their website and download the pdf file.

Chapter 1: Introduction to Windows Server 2008
Chapter 2: Server Manager
Chapter 3: Active Directory Design & Domain Controller Management
Chapter 4: File Servers & Storage Management
Chapter 5: Server Core
Chapter 6: Managing & Customizing Group Policy
Chapter 7: Introduction to Terminal Services
Chapter 8: Advanced Topics in Terminal Services
Chapter 9: Securing Servers & the Domain
Chapter 10: Windows Failover Clustering

Couple minutes ago I finished my first domain controller installation for AD DS (Active Directory Domain Services) for Windows Server 2008 RTM. The dcpromo wizard has couple new steps; check out my screencast of the AD DS installation.

Windows 2008 AD DS has the following improvements :

Read-only domain controller (RODC)
Staged installation of an RODC
RODC filtered attribute set
Administrator role separation
Improved installation wizard
Generate secure installation media
Restartable AD DS
Auditing AD Ds changes
Fine-grained password policy
Dynamic MAPI ID Support
Data mining tool

For more details check out my screencast.

• Thanks to you, our dedicated beta participants, this is the most tested version of Windows Server ever released!!
  Windows Server 2008 has an array of new features and technologies that are too numerous to list completely, but some of the highlights are:
  • Internet Information Services (IIS) 7.0 – next gen web and app platform
  • Server Core – key roles, low footprint, no GUI
  • Terminal Services Gateway – access your apps without a RAS client
  • Network Access Protection – keep your network safe from un-healthy clients
  • PowerShell – powerful scripting tools for admins
  • Failover Clustering – improved cluster management, security, and stability
  • Next Generation Net Stack – fast and reliable
  • Server Manager – setup & manage server roles and features in one place
  • Read-Only Domain Controller – safe branch office DCs
  • Hyper-V Beta – server virtualization. Hyper-V RTM in 180 days

Starting new work week I have received new email from msftconn@microsoft.com on the Windows Server 2008 RC1. I download the 4.3 GB iso images and will install both of them into VMWare Workstation 6 guests. I got a weird idea to try to get the WVS hypervisor installed on VMWare Workstation and will try it out .

We are pleased to announce the release of Windows Server 2008 Release Candidate 1! This milestone release represents significant progress incorporating the feedback we received from you. We ask that you please install this build as soon as possible and provide feedback. As we approach RTM, now is the time more than ever to find and report issues and give us the best chance to incorporate your feedback into the product. This release is available as a download only. The images posted are DVD images and the recommended approach is to download and burn a DVD appropriate for your hardware.

Go to https://connect.microsoft.com and download the bits.

 My screenshots I took when installed role. There is a bug in the import of the pictures and they are not sorted.

netdom.exe join NET-IIS-01 /domain:Networknet.nl /userD:administrator /passwordD:*

Enter the Administrator password and after the netdom has finished reboot the server with shutdown.exe /r /t5.

netsh interface ipv4 show interfaces

Configure the fixed IP address, netmask and the default gateway

netsh interface ipv4 set address name=”nr” source=static address=192.168.1.1 mask=255.255.255.0 gateway=192.168.1.254

Configure the DNS server

netsh interface ipv4 add dnsserver name=”nr” address=192.168.1.1 index=1

@echo off

REM Created: Ivan1980@networknet.nl
REM Windows Server 2008 Core License Script

cscript C:\Windows\System32\slmgr.vbs -ipk xxxxx-xxxxx-xxxxx-xxxxx-xxxxx

 cscript C:\Windows\System32\slmgr.vbs -ato

 cscript C:\Windows\System32\slmgr.vbs -xpf

</p>
<p style="font-size: 11pt; margin: 0in; font-family: Calibri" lang="en-US">c:\Users\Administartor&gt;hostname</p>
<p style="font-size: 11pt; margin: 0in; font-family: Calibri" lang="en-US">win2k8-vm</p>
<p style="font-size: 11pt; margin: 0in; font-family: Calibri" lang="en-US"> 

Now we are going to rename the server and prepare it for dcpromo process.

</p>
<p style="font-size: 11pt; margin: 0in; font-family: Calibri" lang="en-US">c:\Users\Administartor&gt; netdom renamecomputer win2k8-vm /newname:NET-DC-01</p>
<p style="font-size: 11pt; margin: 0in; font-family: Calibri" lang="en-US">Click Y to reboot or enter shutdown /r /t 5</p>
<p style="font-size: 11pt; margin: 0in; font-family: Calibri" lang="en-US">

• Copy the \Sources\adrep from the Windows Server 2008 dvd and logon on to your schema dc role server.
• Open CMD.exe box
• Locate the directory and run adprep.exe /forestprep
• Run adprep.exe /domainprep /gpprep after the forest prep has finished. Make sure your domain functional level  is configured in Windows 2003 native mode.

[DCInstall]
; Replica DC promotion
ReplicaOrNewDomain=Replica
ReplicaDomainDNSName=Networknet.nl
SiteName=Site-Test
InstallDNS=yes
ConfirmGc=Yes
DNSDelegation=No
UserDomain=networknet.nl
UserName=Administrator
Password=
DatabasePath=C:\Windows\NTDS
LogPath=C:\Windows\NTDS
SYSVOLPath=C:\Windows\SYSVOL
; Set SafeModeAdminPassword to the correct value prior to using the unattend file
SafeModeAdminPassword=
; Run-time flags (optional)
; CriticalReplicationOnly=Yes
; RebootOnCompletion=Yes
TransferIMRoleIfNecessary=No

ntds_dcpromo_newdc.txt

• Install DNS Server by running ocsetup DNS-Server-Core-Role
• dcpromo /unattend:ntds_dcpromo_newdc.txt