Announcing Windows Server Insider Preview Build 16237 - Also allow Windows Insider to download

Login your Windows Insider account and go to https://www.microsoft.com/en-us/software-download/windowsinsiderpreviewserver

You will able to download the Windows Server Inside Preview Build 16237.

(It is not mandatory to be Windows Insider for business)

Announcing Windows Server Insider Preview Build 16237 - Also allow Windows Insider to download

Server Configuration Change Reporter - Automated server auditing

 

http://4sysops.com/archives/free-server-configuration-change-reporter-automated-server-auditing/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+4sysops+%284sysops%29

Server Configuration Change Reporter - Automated server auditing

bginfo for server (update the content each time login)

1. Create a folder C:\BGinfo
2. Copy two files "Bginfo.exe" and "test.bgi".
3. Copy a bat, "bginfo.bat" to "C:\Documents and Settings\All Users\Start Menu\Programs\Startup"

The content of the bat is the following:
C:\BGInfo\Bginfo.exe /ic:\bginfo\test.bgi /timer:0

bginfo for server (update the content each time login)

Linux/Unix join Windows Domain

There are several ways to make Linux/Unix to join Windows Domain:

• Kerberos only

• LDAP only

• Kerberos plus LDAP - This is a lower-level option where you set up Linux to use Active Directory's underlying protocols yourself. Described in Kerberos (for authentication) and LDAP (for authorization).

• Samba (Winbind/Kerberos) - Samba is the tool for joining a Linux machine to a Windows domain.

• Likewise - Likewise is basically Samba-in-a-box; easier to set up than a full-fledged Samba installation (the GUI should do it for you in under an hour, including time to read its docs), but correspondingly less control. Likewise Open is free of charge; Likewise Enterprise adds features like managing Linux machines via Group Policy.

• Microsoft Windows Services for Unix includes options for serving usernames to Linux / UNIX via NIS and for synchronizing passwords to Linux / UNIX machines. You'd use this if you wanted to do everything possible from Windows or if you had an existing Linux / UNIX infrastructure you wanted to tie to Windows; for most environments, though, one of the other solutions would be better.

Reference:

http://www.infosecwriters.com/text_resources/pdf/AD_and_Linux_TMunn.pdf

http://serverfault.com/questions/76803/how-can-i-have-a-linux-machine-join-a-windows-domain

http://networking.devel.ws/join-linux-to-an-active-directory-domain

http://www.cyberciti.biz/tips/how-do-i-join-a-windows-2003-active-directory-domain-from-linux-system.html

http://blog.scottlowe.org/2007/07/09/linux-ad-integration-with-windows-server-2008/

http://hi.baidu.com/tl1008/blog/item/078c111a7be891128718bf01.html

http://acd.ucar.edu/~fredrick/linux/samba3/

http://onlamp.com/pub/a/onlamp/2008/04/01/step-by-step-using-samba-to-join-a-windows-domain.html

http://wiki.samba.org/index.php/Samba_&_Active_Directory

http://faculty.ksu.edu.sa/albahlal/Documents/CAP333%20Slides/Unix%20part2.ppt

http://www.interopsystems.com/downloads/Using_Server_for_NIS_IdMU_Kerberos.pdf

 

Authenticate Linux Clients with Active Directory

http://technet.microsoft.com/en-us/magazine/2008.12.linux.aspx

 

Linux-Windows Single Sign-On

http://redmondmag.com/articles/2005/01/01/linuxwindows-single-signon.aspx

 

Integrate Linux with Windows AD Domain Controller

http://blog.palalinha.com/2009/04/integrate-linux-box-with-windows-ad.html

 

OpenSSH on Linux using Windows/Kerberos for Authentication

http://port25.technet.com/Videos/research/OpenSSH%20on%20Linux%20using%20Windows.pdf

 

使用 Winbind將Linux加入 Windows 域環境(伺服務架設實作1)

http://tw.myblog.yahoo.com/chen_10220214/article?mid=6637&prev=6645&l=f&fid=24

 

實作windows xp 加入samba網域二(伺服器架設實作2)

http://tw.myblog.yahoo.com/chen_10220214/article?mid=-2&prev=6637&l=f&fid=24

 

http://tw.myblog.yahoo.com/chen_10220214/archive?l=f&id=24

 

 

Windows Server 2008 - Unix Interoperability

http://edge.technet.com/Media/649/

 

Active Directory 網域服務概觀

ht
tp://technet.microsoft.com/zh-tw/library/cc731053%28WS.10%29.aspx

Linux/Unix join Windows Domain

Windows Server 2003/2008 NLB

Windows Server 2003 NLB實作

http://neo_lin_42.blog.ithome.com.tw/post/620/9356

http://www.alliedtelesis.com/media/datasheets/howto/conf_win2k3_lb_sd_b.pdf

 

Windows Server 2008 NLB

http://telnetport25.wordpress.com/2008/03/24/quick-tip-configuring-network-load-balancing-nlb-on-windows-2008-for-exchange-cas-servers/

Windows Server 2003/2008 NLB

pGina - LDAP Client Login Authentication

http://www.pgina.org/

More reference:

Using pGINA to Authenticate Users in Microsoft Windows Environments

http://www.sun.com/blueprints/0604/817-7043.pdf

pGina - LDAP Client Login Authentication

Windows Server 2003 to Windows Server 2008 R2 Upgrade Paths

Upgrading your Active Directory to Windows Server 2008

http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2008/04/08/upgrading-your-active-directory-to-windows-server-2008.aspx 

Transitioning your Active Directory to Windows Server 2008

http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2008/03/02/transitioning-your-active-directory-to-windows-server-2008.aspx

Windows Server 2003 to Windows Server 2008 R2 Upgrade Paths

DHCP Reservation Manager – Easily migrate DHCP reservations

http://blogs.technet.com/teamdhcp/archive/2006/09/19/457383.aspx

DHCP Reservation Manager – Easily migrate DHCP reservations

hmailserver installation and configuration information

~hmailserver~懶人網路工程師郵件伺服器

http://www.ivorytower.com.tw/?p=223

~hmailserver~懶人網路工程師郵件伺服器(郵件域名設定)

http://www.ivorytower.com.tw/?p=282

~hmailserver~懶人網路工程師郵件伺服器(防毒反垃圾)

http://www.ivorytower.com.tw/?p=297

~hmailserver~懶人網路工程師郵件伺服器(輔助工具)

http://www.ivorytower.com.tw/?p=347

How To Configure SpamAssassin for HMailserver in Windows Server 2003

1. Download SAWin32 3.2.3.3, which is the latest windows build of SpamAssassin (As of September 8, 2009).


2. Download the latest SpamAssassin for Win32 command-line tools 3.2.3.5


3. Unzip both files into your computer with HMailServer installed under the path "c:\sa\"


4. Next we will have to create a new Windows Service called "SpamAssassin". This will allow HMailServer to use SpamAssassin.
   
   
   
   1. Install the Windows Server 2003 Resource Kit Tools. This will give you the necessary INSTSRV.EXE and SRVANY.EXE files to run SA as a service
   
   
   2. Go to Start Menu -> Run -> cmd
   
   
   3. Under the command line, enter in the following line (with quotes):
   
   
   
   

"C:\Program Files\Windows Resource Kits\Tools\INSTSRV.EXE" SpamAssassin "C:\Program Files\Windows Resource Kits\Tools\SRVANY.EXE"

 

1.  
   
   
   
   1. Once installed, open up Regedit
   
   
   2. Go to HKLM -> SYSTEM -> CurrentControlSet -> Services -> SpamAssassin
   
   
   3. Add a new key called "Parameters"
   
   
   4. Under Parameters, add a new String Value of Application, and set the value data to (without quotes):
   
   
   
   

"c:\sa\spamd.exe -l -s c:\sa\spamd.log --round-robin"

 

1.  
   
   
   
   1. Then go to the services control panel and start up the spam assassin service.
   
   
   2. If there are any issues, check the c:\sa\spamd.log file for more info
   
   
   
   


2. Then you might have to allow dccproc and spamassassin in your firewall


3. Adjust your hMailServer settings to allow the incoming e-mail check against SpamAssassin


4. And finally you might have to restart your hMailServer service for the new service to take effect.

http://alterprocedure.net/articles/alterprocedure/how-to-configure-spamassassin-for-hmailserver-in-windows-server-2003.aspx

完整的免費Email 伺服器方案--hMailServer 4.4中文 + 防毒 + WebMail 完整 Windows 應用方案

http://twg.idv.tw/dv_rss_xhtml_229_91179_8.html

 

SquirrelMail

http://www.squirrelmail.org/download.php

WampServer 2

http://www.wampserver.com/en/

ClamWin Free Antivirus is a free software project

http://www.clamwin.com/content/view/18/46/

hmailserver installation and configuration information

(File Server Migration) Using robocopy for file copy and synchronize

Robocopy.exe C:\folder1 D:\folder2 /e /copyall /w:1 /r:1

 

The “/e” specifies to copy everything, including subfolders.  The “/copyall” switch specifies to copy security and file attributes.  The “/w:1” switch specifies to wait 1 second before retrying a file if access denied.  The “/r:1” switch specifies to retry a failed file 1 time before moving on. 

(File Server Migration) Using robocopy for file copy and synchronize

You cannot make more than one client connection over a NAT device to Windows File Server

When two client computers try to use the server message block (SMB) protocol to connect to the same server across a network address translation (NAT) device, the more recent client connection may reset the earlier client connection. If a client and a server that use the SMB protocol over a NAT device are copying files, that session may be reset when another client uses the SMB protocol over the same NAT device to the same server.

When a new connection is established to a server, the server checks for previous connections from the same client IP address and deletes any previous connections. Because NAT acts as a proxy for the SMB protocol by using the same IP address from the two client connection requests, the earlier connection is terminated.

This fix applies only to the SMB protocol traffic over TCP NetBIOS port 139. The connectivity problem that is mentioned in this article still occurs on client computers that are running Windows 2000 or later if you make the connection with direct hosting on port 445. By default, Windows 2000 uses this port.

You can establish no more than one direct hosting client connection across a NAT device. If you must have more than one simultaneous SMB protocol, disable either direct hosting on the Windows 2000 file server or on all clients behind the NAT device.

To disable direct hosting on the server:

1. Start Registry Editor.


2. Locate and then click the following registry key:
   
   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters


3. Add the following registry value:
   
   Value Name: SmbDeviceEnabled
   Type: REG_DWORD
   Value Data: 0
   
   The default setting is 1 (enabled)

When you complete these steps, clients must use port 139 NetBIOS over TCP/IP to make a connection.

http://support.microsoft.com/?scid=kb%3Ben-us%3B301673&x=8&y=7

You cannot make more than one client connection over a NAT device to Windows File Server

(Freeware) ADModify.NET - modify multiple user accounts in Active Directory

ADModify.NET is a tool primarily utilized by Exchange and Active Directory administrators to facilitate bulk user attribute modifications

http://admodify.codeplex.com/

(Freeware) ADModify.NET - modify multiple user accounts in Active Directory

Eventcreate - Enables an administrator to create a custom event in a specified event log.

Eventcreate

Enables an administrator to create a custom event in a specified event log.

Syntax

eventcreate [/s Computer [/u Domain\User [/p Password]] {[/l {APPLICATION|SYSTEM}]|[/so SrcName]} /t {ERROR|WARNING|INFORMATION|SUCCESSAUDIT|FAILUREAUDIT} /id EventID /d Description

Parameters

/s Computer : Specifies the name or IP address of a remote computer (do not use backslashes). The default is the local computer.

/u Domain \ User : Runs the command with the account permissions of the user specified by User or Domain\User. The default is the permissions of the current logged on user on the computer issuing the command.

/p Password : Specifies the password of the user account that is specified in the /u parameter.

/l { APPLICATION | SYSTEM } : Specifies the name of the event log where the event will be created. The valid log names are APPLICATION and SYSTEM.

/so SrcName : Specifies the source to use for the event. A valid source can be any string and should represent the application or component that is generating the event.

/t { ERROR | WARNING | INFORMATION | SUCCESSAUDIT | FAILUREAUDIT } : Specifies the type of event to create. The valid types are ERROR, WARNING, INFORMATION, SUCCESSAUDIT, and FAILUREAUDIT.

/id EventID : Specifies the event ID for the event. A valid ID is any number from 1 to 65535.

/d Description : Specifies the description to use for the newly created event.

/? : Displays help at the command prompt.

Remarks

• Custom events cannot be written to the security log.
  

Examples

The following examples show how you can use the eventcreate command:

eventcreate /t error /id 100 /l application /d "Create event in application log"
eventcreate /t information /id 1000 /so winmgmt /d "Create event in WinMgmt source"
eventcreate /t error /id 2001 /so winword /l application /d "new src Winword in application log"
eventcreate /s server /t error /id 100 /l application /d "Remote machine without user credentials"
eventcreate /s server /u user /p password /id 100 /t error /l application /d "Remote machine with user credentials"
eventcreate /s server1 /s server2 /u user /p password /id 100 /t error /so winmgmt /d "Creating events on Multiple remote machines"
eventcreate /s server /u user /id 100 /t warning /so winmgmt /d "Remote machine with partial user credentials"

Formatting legend

Format	Meaning
Italic	Information that the user must supply
Bold	Elements that the user must type exactly as shown
Ellipsis (...)	Parameter that can be repeated several times in a command line
Between brackets ([])	Optional items
Between braces ({}); choices separated by pipe (|). Example: {even|odd}	Set of choices from which the user must choose only one
Courier font	Code or program output

http://technet.microsoft.com/en-us/library/bb490899.aspx

http://support.microsoft.com/kb/324145

Eventcreate - Enables an administrator to create a custom event in a specified event log.

Administration and operation reference

Best Practice Guide for Securing Active Directory Installations

http://www.microsoft.com/downloads/details.aspx?FamilyID=2eaa45c7-d936-413e-9586-a8bb6ff739d9&DisplayLang=en

Administering Group Policy with Group Policy Management Console

http://www.microsoft.com/downloads/details.aspx?familyid=D8291B79-922A-439C-88E9-54041A2953DD&displaylang=en

Active Directory Domain Services Operations Guide

http://www.microsoft.com/downloads/details.aspx?familyid=291BDDB7-EDC6-4E6D-9852-A9A14991D67C&displaylang=en

Domain Name System (DNS) Service Product Operations Guide

http://www.microsoft.com/downloads/details.aspx?familyid=4ED7B8C2-4D8C-49B0-936D-F74775E69C52&displaylang=en

Print Service Product Operations Guide

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=95e38686-4764-438e-8ab6-3d3c4a071774  

WINS Service Product Operations Guide

http://www.microsoft.com/downloads/details.aspx?familyid=0E738084-D8E1-4ECA-9C3F-E3F6A61F69E1&displaylang=en

File Service Product Operations Guide

http://www.microsoft.com/downloads/details.aspx?familyid=4D38F848-4828-4D6D-A012-EE66CEE9B71F&displaylang=en

DHCP Service Product Operations Guide

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=8fd563e1-af1e-49b2-a926-967147ab153d

 

Administration and operation reference

File Server Capacity Tool

File server capacity planning and performance troubleshooting are critical aspects of high-level network administration. Central file servers and distributed client workstations are now the norm in most corporate networks. This structure reduces storage capacity requirements, centralizes backup, increases the availability of files, and simplifies the document revision and review process. However, because data storage and access are centralized, performance limitations impact the entire network population. Accurately projecting the number of users that hardware can support under a specific workload, and understanding when and where bottlenecks occur, are critical to making efficient improvements to the server configuration. File server capacity planning tools can be valuable in choosing new hardware for purchase, identifying the capacity of existing hardware, locating existing bottlenecks, and planning for resource expansion in advance of resource exhaustion. The throughput capacity of a file server can be expressed either as the maximum number of operations per second or a maximum number of users supported by the configuration. These values are influenced by several factors, some of which include processor speed, available memory, disk speed, network throughput and latency, and the speed with which SMB requests are processed.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=0b212272-1884-4af1-972d-42ef1db9f977

File Server Capacity Tool

Remote Desktop Services troubleshooting

http://ts.veranoest.net/

Remote Desktop Services troubleshooting