Administrator MAS

Solving Multiple Reboots in Kaspersky Administration Kit

2010-11-20T12:14:00.001+04:00

I was surprised today with more than 20 Pc needing reboot to apply updates from Kaspersky Administration Kit.

I solved the problem by creating custom tool to restart remote computer from the Administration kit itself.

I used the shutdown command with the proper switches as shown below. The only thing is I have to click it on each PC separately.

Support lifecycle for XP SP2 and Vista !

2010-03-13T20:31:00.001+04:00

Just noticed that Windows XP the best OS (Operating System) in my opinion from Microsoft before 7 now, is reaching it's ending life cycle for support from Microsoft as mentioned here.

If you still using SP2 upgrade to SP3 as soon as you can, because next 13 July 2010 will be the last date for supporting Windows XP SP2 or maybe some of us may still using XP without any Service Packs, upgrade to SP3 for free now.
Download Link for SP3.

Vista support will end by 13 April, 2010, upgrading to SP2 is your way out.
Download Link for Vista SP2.

Or upgrade your OS to Windows 7 the latest OS from microsoft which has noticed improvements. If your hardware can meet the system requirements or your pocket budget.

Second Shot is back!

2010-02-19T09:44:00.000+04:00

Good news for IT professional Microsoft has announced second shot offer again, It's world wild offer just register, get your voucher, schedule, show your voucher at Prometric centers, pay, take your 1st exam, show your voucher if necessary to retake your exam (Second shot).

Read the details here.

Good luck.

User names template

2010-02-05T11:39:00.006+04:00

Users move frequently from branches, countries or even departments in most large enterprises like hypermarkets form example, or even they layoff or resigned as 2009 was the worst in losing jobs. As a Systems Administrator one of our many tasks is to insure access to resources for our users.

But creating a user name for every new joiner or transferred user and assign his NTFS permission on each file and folder isn't practical for most lazy admins :), Creating a user name template is the perfect solution for those common job roles in sites like IT manager and Finance manager.

Creating User name template is not easy as it sounds, there are many factors to create it (e.g job role, Location, department …etc) and its all related to network planning and designing phase, but it's still easier than creating a user name from scratch in two sites in case of users transfers, concerning folders permissions. Instead just modify your user full name, telephone number and email address.

I am sure this is not the only way sys admins make there day easier, write a comment to hear your voice don't be hidden in server room.

Arab Community

2010-02-04T07:49:00.002+04:00

I have been searching since a while for arab admins spicialized in Windows servers and technologies, but Linux community was much bigger in the arab world, which is interesting.

If you are a system Administrator specialized in microsoft technologies, Kindly drop me a line.

MCTS: Active Directory & Network Infrastructure

2010-01-10T18:39:00.004+04:00

Since April 2006, I was neglectful about my technical information and certification; after holding MCSA 2003, and on December 30, 2009 I went through the 70-648 exam, to catch the new demands.

The exam was easy enough to pass, It focused on all the new technologies presented by microsoft in windows server 2008 such as Active directory federation services, Certificate services, RODC (Read Only Domain Controller), Core server.

Still planning to get the MCITP Server Administrator soon insha'allah.

How is your learning plan going? Do you having difficulties? Drop a line sharing your experience.

Increasing your value in the technical industry

2009-11-24T20:59:00.004+04:00

After reading Dr. Masha Petrova article about Increasing your value as a professional in the technical industry, I thought it's worth to share it as it's the same in here in the middle east zone.

It's all about who you know not what you know, I just would highlight associations or groups in the middle east may be will help you out.

-Linkedin, as mentioned in her article is full of groups in technical field and other field as well.
-Facebook, also have it's own world of associations, groups and organizations.
-Techwadi, yet another site for associations related to Arab professionals.
-the Information Technology Association of Jordan.
-The Arab Science and Technology Foundation.

This was gathered from a small research, You are most welcomed to add more if have some.

Windows 7 is out !

2009-10-23T16:54:00.003+04:00

Today Microsoft has announced the global lunch of Windows 7, W7 is the latest operating system from Microsoft which came after Vista, after trying W7 it's much better than Vista.

Do you think W7 will replace XP or vista and be the primary OS in Microsoft environments ?

Questions to Systems Administrator

2009-07-21T12:57:00.001+04:00

Every Sys admin performing an interview should be asked well known questions to show up his technical skills, No doubt hand on experience is much harder but there is a few concepts must be understood well.

Here is a few examples on this questions, which from my view we should review it before going to any interview.

http://www.freshershome.com/interview-questions/windows/windows-system-admin-questions/

http://www.petri.co.il/mcse_system_administrator_networking_interview_questions.htm

If you have more examples, don’t be shy to share it J

Disk Quota management

2009-07-19T13:07:00.006+04:00

Almost in every organization users need storage to save data, share data and the company need to protect its resources as well, I did a small search on the subject plus my experiment.

In windows OS we can use disk quota option from the disk properties > Quota tab.

But it has some limitation, First you have to use NTFS file systems, second windows quota is done on volume level which has it's own limitation as well.

Another solution was found and applied SpaceGuard SRM from my view it was what we need, some features like file type-filter, Folder quota although Microsoft has it's own developed storage management solution, SpaceGuard was the choice.

I know there are many other solution available and open source projects as well, as for linux environment StandAlone Admin has mentioned small hint on the subject, you also can share your experiment with us, I am sure you have a unique one.

Gmail the online Email MASTER

2009-06-28T18:43:00.005+04:00

If you are a user of Gmail (Google Mail) then you know what I am talking about already, The most powerful email system online.

Here is some of the features you can do with Gmail that you can’t find it in other providers.

More than 7 G.B. and increasing mailbox size.
Free POP3 & IMAP forwarding ( Features to forward your emails to email clients such as Outlook, Thunderbird)
Daily new features developed by other users.

And there is more, For help.

So if you are not using it yet, You are far behind.

Give it a try you won’t regret it.

svchost.exe Application Error

2009-06-24T23:44:00.006+04:00

Lately one of my critical servers (acting like), keep showing this error:

Symptoms:

The instruction at "0x6f8916e2"referenced memory at "0x02c3005c". The memory could not be "written".

Click on OK to terminate the program
Click on CANCEL to debug the program

OK will hang the server till force the restart.
CANCEL will shutdown major services like computer browser, server, ..etc

After googling and digging the internet i find nothing related to this error particularly i got some tips regarding the memory slot, do some update to windows install hotfixs ... etc.

Nothing worked for me, I did small search in the computer and i reached to malfunctioned svchost it was the one responsible about BITS, Browser,WUAUserv and the mentioned earlier.

The solution:

Stop windows Update service from service console (services.msc).
register the windows update service dll files with the following command:

regsrv32 WUAPI.DLL\WUAUENG.DLL\WUAUENG1.DLL\ATL.DLL\WUCLTUI.DLL\WUPS.DLL\WUPS2.DLL\WUWEB.DLL

wait until you get the "DllRegisterServer in xxxx.DLL succeeded" after each file.

Rename the software distribution folder located under "%windir%\SoftwareDistribution"
Start your windows update service as step 1.
Reboot your windows.

Since that i didn't face it again.

How i figured out it was the update service who is causing this error, during the investigating i found that server never got any update from my WSUS it was always failing.

I belive this error may accure with diffirent numbers but it could be the same cause.

Three years gone !

2009-05-08T15:13:00.003+04:00

Today is my third year as an employer at Carrefour, Which is good in general but bad to my career plan.

When you have a passion to do a job and find your self doing something eals, You definitely feels bad, i figured some mistakes that i want to share with others.

1. Don't wast your time on what you hate to do because it will never be useful for you any way..
2. The key to success to know what you need and plan for it. (that's how you will measure your achievements).
3. Updating .. is very important concept in IT in general that you should be consider to yourself first (Self before machine).

I noticed I've worked as Assistant now for three years, without updating myself or even do what i really like to do.
The main issue was the job market in the GCC is a little weird those people work for other reasons than business and your self ego.

They will hire you if you are from specific nationality or will give you a higher salary and will do partnership the same way based on your nationality.

That feeling is so bad to live with, I belive it was a mistake to waste three years from my bright life on such people.

I am planning to correct this mistake as soon as possible.

Password Setting Object (PSO)

2009-04-22T23:05:00.003+04:00

It's a new feature in windows server 2008 that allow you to set password policy and lockout policy separately to individual users or security group.

The down side it takes long time than usual to configure it. But it's depending on your organization requirement to do it or not.

Give it a try by following this steps:

1. Open ADSI edit from Administrative tools folder ( in the DC server ).
2. Right-Click ADSI edit and choose connect to.
3. In the name Box type (your domain name or any preferred name). then OK.
4. Expand your Domain tree and select your domain name DC= Domain, DC= com.
5. Expand DC=Domain, DC=com and select CN=System.
6. Expand CN=System and select CN=Password setting container.
All PSOs are created from here and stored here too.
7. Right click, choose new and then select Object.
There is only one Object will appears in the create object box (msDS-PasswordSetting).
8. Then Next
You will be prompt to enter the values of your settings
-Common Name.
-Precedence.
-ReversibleEncryptionEnabled.
-etc..
These are mandatory attributes, Later you will be able to choose optional at the end.
9. In the edit attributes box, type the FQDN of your desired object (Group or user) to apply PSO.

There is a GUI tool also which can be downloaded from
http://www.specopssoft.com/products/specopspasswordpolicy/

It's long as it seems but as security setting it's worth it.

Last Poll Result !

2009-04-02T20:23:00.002+04:00

Well, last poll result was equal two persons voted; one, Yes he liked the blog, and number two, No, But want me to keep it up.

Thank you both I'll try to improve the content.

Introduction to Windows Server 2008

2009-03-26T20:15:00.004+04:00

Windows server 2008 is the latest server OS (Operating system) from Microsoft, If you worked with earlier versions such Windows server NT, 2003; you should be familiar with the concept and operation delivered by Microsoft Corp.

They are some new major new features in WS2008, To serve the new business demands, Most important new technology service from my view is the Hyper-v role.

As most of us may know now, virtualization is the technology that takes the scene nowadays, Because of the great benefits from using it which are concluded in two main points:

Save resources (Power usage, Space, Money, Time)
Ease of administration, redundancy and failover practices.

Hyper-V is the virtualization technology delivered by Microsoft to achieve these points.

Windows server 2008 is holding other new roles than AD (Active Directory) which is the most important service in Microsoft infrastructure I can mention some of them:

Solid foundation:

introduce windows PowerShell ( optional Command-Line scripting language).
Powerful Windows reliability and performance monitor
Componentized Server Core installation option allows minimal installations where only the server roles and features you need are installed.
Failover clustering wizards make it easy for even IT generalists to implement high-availability solutions.
Network Load Balancing (NLB) now supports IPv6.

Virtualization:

Support for the latest hardware-assisted virtualization technologies.
New storage features, such as pass-through disk access and dynamic storage addition.
Clustering of Windows Server virtualization (WSv) hosts or VMs running on WSv hosts and backup of VMs while they are running keep your virtualized servers highly available.
Terminal Services (TS) RemoteApp and TS Web Access allow programs that are accessed remotely to be opened with just one click and appear as if they are running seamlessly on the end user's local computer.
TS Gateway helps provide secure remote access to Windows-based programs through firewalls – without the need for a virtual private network (VPN).

Web:

IIS Manager, a new task-based management interface, plus a new appcmd.exe command-line tool make administration easier.
Cross-site deployment allows you to easily copy Web site settings across multiple Web servers without additional configuration.
Delegated administration of applications and sites.

Security:

Network Access Protection helps ensure your network and systems aren't compromised by unhealthy computers, isolating and/or remediating those computers that don't comply with the security policies you set.
User Account Control provides.
Read Only Domain Controller (RODC) allows a more secure method for local authentication of users in remote and branch office locations using a read-only replica of your primary AD database.
Active Directory Federation Services (AD FS) enables trust relationships to be more easily established between partners with different identity and access directories running on different networks, enabling secure single sign ons (SSOs) to each other's networks.
Active Directory Certificate Services (AD CS) delivers several enhancements to the Windows Server 2008 Public Key Infrastructure (PKI), including PKIView for monitoring the health of Certification Authorities (CAs) and a new, more secure COM control for certificate Web enrollment in place of ActiveX.
Active Directory Rights Management Services (AD RMS) together with RMS-enabled applications helps you safeguard your company's digital information from unauthorized users more easily.
BitLocker Drive Encryption provides enhanced protection against data theft and exposure of server hardware if lost or stolen, and it provides more secure data deletion when your servers are eventually decommissioned.

As I have seen it's very common to have windows servers in every organization today, I am not ignoring Linux OS but windows still the market leader so far for some services in network infrastructure.

As Microsoft used to, Server 2008 have some editions for each business requirement, which are

Windows server 2008 standard edition. (with or without Hyper-v)
Windows server 2008 Enterprise edition. (with or without Hyper-v)
Windows server 2008 Data Center edition. (with or without Hyper-v)
Windows server 2008 Web edition.
Windows server 2008 HPC edition.
Windows server 2008 Itanium edition.

Later I will demonstrate my experience from testing server 2008 in each and every point I get through.

For more information please refer to references below.

References:

http://www.microsoft.com/windowsserver2008/en/us/default.aspx

http://www.microsoft.com/windowsserver2008/en/us/editions-overview.aspx

Sorry !

2009-03-19T14:32:00.001+04:00

Sorry everyone for being away last couple weeks, Due to my work, which is so bad these days.

Anyways, back from the graveyard :D

In the coming days I will talk a lot about Windows server 2008 the latest server OS from Microsoft, Because I am working on the new MCITP Enterprise Administrator certificate.
Wish me luck :)

Multiple File search

2009-03-04T01:28:00.002+04:00

Some times you have more than one file you need to search for, have you tried multi- files search in windows search ?

It's a great feature to search for all the files at once instead of searching for each file separately by that you will save 75% of your time.

Simply type your files name in the search box separated by comma (,) then space e.g. TXT, DOC, XLS

Try it!

Free Unemployment Services at Bayt.com

2009-02-23T20:32:00.004+04:00

The middle east #1 job site Bayt.com, Announced a free unemployment service at bayt HQ from 16 Feb to 26 Feb from 12 PM to 2:00 PM, sorry to post this late, This come to the "HIGH UNEMPLOYMENT RATES IN THE REGION", Sound scary but it's true.

Bring your CV and head to Bayt HQ at Dubai Internet City, For free 15 min Consultantion, a free lunch for the attendees will be provided by Biryani Express.

Don't forget to write a comment about your visit.

How to creat your Virtual Machine in 2 minutes

2009-02-15T14:21:00.003+04:00

Virtualization It's our new way to manage Operating Systems (OS) in a running environment or testing environment.

benefits of using virtualization are many like, Low cost of hardware e.g. instead of purchasing 4 separated hardware for servers we can purchace only ONE and make it run these 4.

One more major advantage is the disaster recovery you can restore your OS in minutes full OS and the running services or application in few minutes.

Plus more other advantages like green IT (Using low power resources), Less maintenance headache ..etc.

As a tester or Systems Administrator you will need from time to time to test OS, applications and so on by using this technology you are saving alot of your time and money.

I'll demonstrate how to create a virtual machine using VirtualBox v2.0.6 it's Open Source you can download it from here It can run on any OS (Linux, MAC, Windows).

See the Video ....

Windows 7 beta download stopped !

2009-02-12T21:14:00.002+04:00

Yesterday Microsoft has stopped the download for the latest operating system Windows 7 beta release to public, It will be officially available next June, Microsoft said Windows 7 has improved security, performance, reliability without any major GUI (Vista like) change.

Windows 7 will be available in two primary editions Windows 7 Home Premium, Windows 7 Professional.

Data backup drives

2009-02-11T14:28:00.005+04:00

Data backup is very a famous term in systems administration and nearly any business or home users are consider it.

For SMB or enterprises environment Lukas and I had a small conversation about this issue along time ago after three years experience and new business demands I can share my experience which I'v gained during that.

there is a variety of tape drives like 4mm, VXA, LTO and more but these are popular.

Every type has it's own features for certain period of time e.g 4mm can backup 45GB within more than 3 hours that period(2005) as I remeber 45GB was a huge amount of data.

LTO2 can backup up to more than 400GB within much less time compared to 4mm, LTO features are more needed these days as I said before business demands.

I'll mention some of the LTO2 HH tape drive features:
-Capacity: 200/400 GB (native/compressed)
-Transfer rates of up to 172.8 GB/Hr (assumes 2:1 data compression)

If you look to todays needs this is the right solution for you for SMB which holding up to 100 users with all the data needed to run your business and employee documents.

I am sure there's alot more type or opinions from other people who used different types, Please share it.

Picture used from http://www.smallbusinesscomputing.com

iphone 3G officialy in UAE

2009-02-10T21:53:00.005+04:00

Finally Etisalat the leading telecommunication provider in UAE announced the availability of iphone 3G officially in the market, after failure in negotiation for taking the iphone sponsorship since early iphone release.

The iphone was leaked in the UAE market unblocked to work under any provider for the last year and it was very popular and available in most phone shops.

Regarding the princing no mentions for it yet, I hope it remain in the 199$ range for 8G edition and 299$ 16G edition.

Cisco certifications logo has changed

2009-02-09T17:40:00.003+04:00

The learning organization at Cisco changed the certifications logo, It was designed with input from the Cisco certified community, Starting January 12/2009 all certificates and plaques will feature the newly designed logos.

Gratez people :)

Good news for Facebook developers !

2009-02-08T13:34:00.005+04:00

Facebook has announced some changes in it's platform which allow developers to get users status, links, Notes and videos information to there developed application.

These changes will give your application access to over 15 million users who changes status and posted items (videos, notes, links) daily.

Innovative !