Friday, December 21, 2018

VSSAdmin Command

Applies To: Windows Server 2003, Windows Server 2008, Windows Server 2003 R2, Windows Server 2008 R2, Windows Server 2012, Windows 8
Displays current volume shadow copy backups and all installed shadow copy writers and providers. To view the command syntax for any of the commands in the following table, click the command name.

Command Description
Vssadmin add shadowstorage Adds a volume shadow copy storage association.
Vssadmin create shadow Creates a new volume shadow copy.
Vssadmin delete shadows Deletes volume shadow copies.
Vssadmin delete shadowstorage Deletes volume shadow copy storage associations.
Vssadmin list providers Lists registered volume shadow copy providers.
Vssadmin list shadows
Lists existing volume shadow copies.
Vssadmin list shadowstorage Lists all shadow copy storage associations on the system.
Vssadmin list volumes Lists volumes that are eligible for shadow copies.
Vssadmin list writers Lists all subscribed volume shadow copy writers on the system.
Vssadmin resize shadowstorage Resizes the maximum size for a shadow copy storage association.

Thursday, December 20, 2018

Force a Windows Server Failover Clustering (WSFC) Cluster to Start Without a Quorum

  This topic describes how to force a Windows Server Failover Clustering (WSFC) cluster node to start without a quorum. This may be required in disaster recovery and multi-subnet scenarios to recover data and fully re-establish high-availability for Always On availability groups and SQL Server Failover Cluster Instances.

Before You Start

Recommendations

Except where explicitly directed, the procedures in this topic should work if you execute them from any node in the WSFC cluster. However, you may obtain better results, and avoid networking issues, by executing these steps from the node that you intend to force to start without a quorum.

Security

The user must be a domain account that is member of the local Administrators group on each node of the WSFC cluster.

Using Failover Cluster Manager

To force a cluster to start without a quorum
  1. Open a Failover Cluster Manager and connect to the desired cluster node to force online.
  2. In the Actions pane, click Force Cluster Start, and then click Yes - Force my cluster to start.
  3. In the left pane, in the Failover Cluster Manager tree, click the cluster name.
  4. In the summary pane, confirm that the current Quorum Configuration value is: Warning: Cluster is running in ForceQuorum state.

Using Powershell

To force a cluster to start without a quorum
  1. Start an elevated Windows PowerShell via Run as Administrator.
  2. Import the FailoverClusters module to enable cluster commandlets.
  3. Use Stop-ClusterNode to make sure that the cluster service is stopped.
  4. Use Start-ClusterNode with -FixQuorum to force the cluster service to start.
  5. Use Get-ClusterNode with -Propery NodeWieght = 1 to set the value the guarantees that the node is a voting member of the quorum.
  6. Output the cluster node properties in a readable format.

Example (Powershell)

The following example forces the Always OnSrv02 node cluster service to start without a quorum, sets the NodeWeight = 1, and then enumerates cluster node status from the newly forced node.
PowerShell
Import-Module FailoverClusters  

$node = "Always OnSrv02"  
Stop-ClusterNode -Name $node  
Start-ClusterNode -Name $node -FixQuorum  

(Get-ClusterNode $node).NodeWeight = 1  

$nodes = Get-ClusterNode -Cluster $node  
$nodes | Format-Table -property NodeName, State, NodeWeight  

Using Net.exe

To force a cluster to start without a quorum
  1. Use Remote Desktop to connect to the desired cluster node to force online.
  2. Start an elevated Command Prompt via Run as Administrator.
  3. Use net.exe to make sure that the local cluster service is stopped.
  4. Use net.exe with /forcequorum to force the local cluster service to start.

Example (Net.exe)

The following example forces a node cluster service to start without a quorum, sets the NodeWeight = 1, and then enumerates cluster node status from the newly forced node.
ms-dos
net.exe stop clussvc  
net.exe start clussvc /forcequorum  

Follow Up: After Forcing Cluster to Start without a Quorum


Tuesday, December 18, 2018

How to permanently disable Windows Defender on Windows 10 / Windows Server 2016

How to disable Windows Defender using Local Group Policy

If you're running Windows 10 Pro, Enterprise, or Education, you can use the Local Group Policy Editor to disable Windows Defender Antivirus on your computer permanently using these steps:
  1. Use the Windows key + R keyboard shortcut to open the Run command.
  2. Type gpedit.msc and click OK to open the Local Group Policy Editor.
  3. Browse the following path:
    Computer Configuration > Administrative Templates > Windows Components > Windows Defender Antivirus
  4. On the right, double-click the Turn off Windows Defender Antivirus policy.

  5. Select the Enabled option to disable Windows Defender.

  6. Click Apply.
  7. Click OK.
Once you've completed the steps, restart your computer to apply the changes.
You'll notice that the shield icon will remain in the taskbar notification area, but that's because the icon is part of the Windows Defender Security Center and not part of the antivirus.
At any time, you can enable the Windows Defender Antivirus again using the steps, but on step No. 5, make sure to select the Not Configured option. Then reboot your device to apply the changes.

How to disable Windows Defender using the Registry

Alternatively, if you're running Windows 10 Home, you won't have access to the Local Group Policy Editor. However, you can modify the registry to permanently disable the default antivirus using these steps:
Warning: This is a friendly reminder that editing the Registry is risky, and it can cause irreversible damage to your installation if you don't do it correctly. It's recommended to make a full backup of your PC before proceeding.
  1. Use the Windows key + R keyboard shortcut to open the Run command.
  2. Type regedit, and click OK to open the Registry.
  3. Browse the following path:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
    Quick Tip: You can now copy and paste the path in the new Registry's address bar to quickly jump to the key destination.
  4. If you don't see the DisableAntiSpyware DWORD, right-click the Windows Defender (folder) key, select New, and click on DWORD (32-bit) Value.

  5. Name the key DisableAntiSpyware and press Enter.
  6. Double-click the newly created DWORD and set the value from 0 to 1.

  7. Click OK.
After completing the steps, restart your device to apply the settings, and then the Windows Defender Antivirus should now be disabled.
If you no longer want to keep the security feature disabled, you can enable it again using the same steps, but on step No. 6, make sure to right-click the DisableAntiSpyware DWORD and select the Delete option.


How to disable Windows Defender using the Security Center app

In the case that you're simply looking to disable the Windows Defender Antivirus temporarily, then you can use these steps instead:
  1. Open Windows Defender Security Center.
  2. Click on Virus & threat protection.
  3. Click the Virus & threat protection settings option.

  4. Turn off the Real-time protection toggle switch.

Once you've completed the steps, the Windows 10 antivirus will disable its real-time protection temporarily, which is more than enough time to install applications or performing a task that was getting blocked by the feature.

However, because this is a temporary solution, the next time you restart your computer Windows Defender Antivirus will re-enable automatically on your machine.

Tuesday, December 11, 2018

MAPI 1.0 [000004c2] Error in Microsoft Outlook

Outlook on my computer it displays the error as follows: “The limit for logging reached while waiting for system resources. Try again. MAPI 1.0 [000004C2]”. I tried to set up Outlook by going through Control Panel’s Mail option. I tried many times but I am getting the same error every time.

I have set up Outlook 2013 (but not perfectly) on my new PC. The problem is that, when I open Outlook and immediately start working on it then there is no problem and no error is displayed. However, when I open Outlook and wait for some time to start working on it then the client displays the following message:

and it works only after exiting & restarting Outlook.


Elements That Cause This Error in Outlook

  • When compatibility mode is turned on.
  • If in case the PST file turns corrupted.
  • When incorrect Registry key is configured.

Manual Process to Remove Outlook MAPI Error

Check if the Compatibility Mode Is turned on

  • Compatibility mode is a mechanism in which any software application is run using an old processor and Operating system. To check whether the compatibility mode is enabled or disabled, follow steps as shown as below.
          Use the following path to locate Outlook.exe:

  • For Outlook 2016: Local disk (C:) >> Program Files >> Microsoft Office >> Office16 >> Outlook.exe
  • For Outlook 2013: Local disk (C:) >> Program Files >> Microsoft Office >> Office15 >> Outlook.exe
  • For Outlook 2010: Local disk (C:) >> Program Files >> Microsoft Office >> Office14 >> Outlook.exe
  • Right click on Outlook.exe and click to select Properties.
  • Go to Compatibility tab >> uncheck the box to disable the option Run this program in compatibility mode for:.
  • Click the parameter Change settings for all users. From here, uncheck all the checkboxes to disable the compatibility for all users and click on Apply/OK.

    Create a New Profile and Set Them as Default Profiles

    To create a new Outlook Profile…

    • Click on Start button and in the search box, type Control Panel and Enter.
    • On the Control Panel, click on Mail >> In the Mail Setup window, click on Show Profiles.
    • Click on Add >> provide a name for new Outlook profile and click on OK to save the changes.
    To make Outlook Profile as default...

    • Select the newly created profile >> check the box to select the option Always use this profile and click on OK.
    Modify the Registry Key of Outlook Profile and Create a Fresh One

    • First, open Registry Editor. To open it click on Start button from your Windows screen and then in the search box, type Run and Enter. In the search box, type regedit and hit Enter key to open the Registry Editor.
    • Under the Registry Editor, navigate to the following key according to the version of Outlook
    • Key for Outlook 2013: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles.
    • Key for Outlook 2010: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystems.
    • Now right click on variable of key according to your Outlook version and then click on Rename.
    • To arrange the word, type OLD at the end of the name.
    • After you did this now try to open the Mail applet and create a new profile.

    Other Workarounds That You May Try If the Problem Persist

    Repair MS Office

    • Open your Control Panel >> click on Programs >> now click on Programs and Features.
    • Right click to select the Office Programs that you want to repair >> click Change.
    • In the How would you like repair your office program section, select online repair >> click on Repair.
    Despite following the steps given above if you are still seeing the discussed error in Outlook then try to do the follow the given steps:

    Try installing and uninstalling MS Office

    Delete MAPI32.dll File

    • To delete msmapi32.dll navigate to this path in your Windows Explorer: C:\Program Files\Common Files\System\Msmapi\1033
    • Now right click on MSMapi32.dll and click on Rename.
    • In the Rename box, change the filename to MSMapi32.old and start your Outlook.

    Thursday, December 6, 2018

    Use PowerShell and DSAMAIN.exe to Mount a Backup of NTDS.dit

    First, take stock of your existing disk setup:
    Get-Partition

    Now, mount the VHDX disk contained in the remote backup:
    Mount-DiskImage –ImagePath "\\NINJALDS01\TEMP\Backup\1502021020\WindowsImageBackup\NINJADC02\Backup 2015-02-02 102022\dcafa9ee-79ef-426b-ba58-806e81f09963.vhdx"

    Time to check your disk configuration again:
    Get-Partition

    Note the disk number (2) and partition (2) where the backup of NTDS.dit resides. Use this information to assign a drive letter in the operating system:
    Set-Partition –DiskNumber 2 -PartitionNumber 2 -NewDriveLetter Z

    Finally, use DSAMAIN.exe to mount the backup of Active Directory:
    Dsamain –dbpath "Z:\Windows\NTDS\NTDS.dit" -ldapport 5000

    Sweet! Now we can point our existing admin tools at this mounted copy by using the : notation. For example:
    Get-ADUser -Identity IanFarr -Properties * -Server NINJADC02:5000
    Or...


    The deleted information (or the absence of corruption) can now be easily and safely corroborated.

    Wednesday, November 21, 2018

    Step-By-Step: Enabling Active Directory Recycle Bin in Windows Server 2012 R2

    Active Directory Recycle Bin was created to adhere to that very problem and this Step-By-Step will showcase how easy it is to enable.  This procedure does not negate the need to have a proper system state backup which is always recommended and one must be aware that enabling this feature is one time and cannot be reversed under any circumstances.

    Enabling Active Directory Recycle Bin
    1. In the management console, go to ToolsActive Directory Administrative Center
    2. Select Local Domain and in the Tasks Pane
    3. Select Enable Recycle Bin.
    4. Click OK
      NOTE: Be aware this feature cannot be disabled.
    5. Click OK.  Once enabled, wait for AD replication to complete as this is a change made on the configuration partition. This process may take a while should your organization have a large active directory infrastructure.
    A very simple enablement of a process that could save you hours of restore time.  Again this process cannot be reversed once invoked.

    Be sure to test Active Directory Recycle Bin in your lab by downloading Windows Server 2012 R2. Also, be sure to take advantage of Microsoft Virtual Academy to learn about additional features made available in Windows Server 2012 R2 to further your IT career.

    Tuesday, November 6, 2018

    If you can't update or restore your iPhone, iPad, or iPod touch

    You can put your iOS device in recovery mode, then restore it with iTunes.
    In these situations, you might need to use recovery mode to restore your device:
    • iTunes doesn't recognize your device or says it's in recovery mode.
    • If your screen is stuck on the Apple logo for several minutes with no progress bar.
    • You see the connect to iTunes screen.
    Learn what to do if you see the progress bar on your screen for several minutes.

    Put your device in recovery mode and set it up again

    1. Make sure that you're using the latest version of iTunes
    2. If iTunes is already open, close it. Connect your device to your computer and open iTunes. If you don't have a computer, borrow one from a friend or go to an Apple Retail Store or Apple Authorized Service Provider for help.
    3. While your device is connected, force restart it with these steps, but don't release the buttons when you see the Apple logo, wait until the connect to iTunes screen appears: 
      • On iPhone 8 and later: Press and quickly release the Volume Up button. Press and quickly release the Volume Down button. Then, press and hold the Side button until you see the connect to iTunes screen.
      • On an iPhone 7 or iPhone 7 Plus: Press and hold the Side and Volume Down buttons at the same time. Keep holding them until you see connect to iTunes screen.
      • On an iPhone 6s and earlier, iPad, or iPod touch: Press and hold both the Home and the Top (or Side) buttons at the same time. Keep holding them until you see the connect to iTunes screen.
        connect to iTunes screen
    4. When you see the option to Restore or Update, choose Update. iTunes will try to reinstall iOS without erasing your data. Wait while iTunes downloads the software for your device. If the download takes more than 15 minutes and your device exits the connect to iTunes screen, let the download finish, then repeat step 3.
      there is a problem with the iPhone screen
    5. After the Update or Restore completes, set up your device.

    Note: Use the original cable