Adding network locations to Windows7 Libraries on a SBS Domain

With the plethora of Windows 7 laptops and PCs connecting to the SBS networks,one of the new features –Libraries –is causing some problems. The issue is the inability to add a network location to the libraries unless the network location is cached using offline files. This caused some problems for me and for some of my clients. Perfectly normal 80GB-160GB hard drives were running out of space,due to the large amount of network information being cached. This also caused some slow network connection issues as the offline files were cached and maintained.
 
For SBS2003,the solution is solved by installing Windows Search 4.0 on the server. It is an automatic update,or can be manually downloaded here –http://download.microsoft.com/download/2/5/0/250db18d-30b9-4129-b2ce-282bc2f65c1f/WindowsSearch-KB940157-Srv2K3-x86-enu.exe
 
The Microsoft Search 4.0 product page can be found here –http://www.microsoft.com/windows/products/winfamily/desktopsearch/default.mspx
 
For SBS2008,there was no option to install this,as it was not supported. There is another similar product from Microsoft called Microsoft Search Server Express,which works for Windows 2008 servers. DO NOT USE THIS on SBS2008,as it will cause issues,particularly with Sharepoint.
 
The solution for SBS2008 was provided in a recent blog by the SBS team –http://blogs.technet.com/sbs/archive/2010/04/05/find-items-faster-with-windows-search-and-libraries.aspx
Turns out that it was right under our noses all the time,but not switched on.

SBS2008 Repair Guides

There is an excellent technical guide on fixing up problems that might be encountered while running SBS2008. I recently used the information on one of these guides to fix up an Exchange issue.
 
 
Contents from the guide are:
  • Manage Windows Small Business Server 2008 applications
  • Repair access of administrator account to Windows SharePoint Services
  • Repair client deployment issues
  • Repair e-mail anti-spam software
  • Repair e-mail programs and Microsoft Exchange Server services
  • Repair folder redirection and shares
  • Repair Forefront Security for Exchange Server
  • Repair Microsoft Exchange Server roles in Windows Small Business Server 2008
  • Repair monitoring and reporting features in Windows Small Business Server 2008
  • Repair Office Live for Windows Small Business Server 2008
  • Repair Remote Web Workplace
  • Repair the Move Exchange Server Data task
  • Repair the POP3 Connector
  • Repair the Windows SBS 2008 Console
  • Repair Users and Groups features
  • Repair Windows Live OneCare
  • Repair Windows Server Backup
  • Repair Windows Server Update Services
  • Repair Windows SharePoint Services
  • Repair Windows SharePoint Services after moving the databases
  • Synchronize the DSRM Password with the Windows SBS 2008 Network Administrator Password
  • How to reinstall the Certification Authority role

Setting Message Size Limits in Exchange 2007

I received an email from a client a few days ago.
 
“Does the server have a limit on the size of emails it will accept? I seem to recall a 5mb limit.
Can I ask that we review this in the light of modern ways of doing things whereby we send large files,audio and video,via email?”

 
For many organizations,a limit is imposed on attachments in emails to “save bandwidth”since data is counted for broadband in Australia. I found an excellent blog which listed the various places to look at when making changes to enable attachments beyond the default 10MB limit which is set in SBS2008.
 
All these options are located in the Exchange Management Console.
 
1. Setting Organizational Limits. This affects the global settings. In an organization with multiple servers,this will affect all servers. Open up properties for Transport settings as shown. Change the settings as required.
 
2. Setting Receive Connector limit. This affects incoming messages received by the server. Change the desired Receive Connector properties.
     a. Default SBS –For internal client connections
     b. Windows SBS Internet Receive SBS –For incoming emails outside the network
 
3. Send Connector limit. This setting affects outgoing emails. Edit the settings for the Windows SBS Internet Send SBS connector.
 
4. Mailbox limit. Finally,if you really want to,you can set a user to have additional settings,different to the organizational limits. Note that this only affects internal messages. not external incoming or outgoing messages. Change the properties for the Message Size Restrictions (which is not set by default).

Auto Login to PC after restart

Sometimes,there are background processes and application that need the user to be logged on to the PC before they will run. On a domain PC,this is normally not possible. However,you can modify the registry to enable this. NOTE:the password will be clearly seen.
 
 
In regedit,navigate to HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
 
Add or modify the key,AutoAdminLogon (String) to 0
Enter in the user credentials in the three keys –DefaultDomainName,DefaultUserName,DefaultPassword.
 

Slow network logon

I came across two excellent troubleshooting articles to investigate why you might be experiencing slow network logons.
 
 

Daylight Savings for Western Australia 2009

…is not happening.
 
Therefore,a hotfix has been released to deal with this issue. This is an out of band update,and should be applied to all systems used by WA users.
 
The Daylight Savings Planning Guide (September 2009) can be found here –http://technet.microsoft.com/en-au/bb821275.aspx
 
The hotfix (KB974176) can be obtained here –http://support.microsoft.com/kb/974176
 

Using Dual Monitors in Terminal Services with Remote Desktop

How to obtain dual monitor mode within Terminal Services when connecting with Remote Desktop.
 
The prerequisites are Remote Desktop Connection client version 6.0 or higher. Windows XP and 2003 users can obtain the client here –http://www.microsoft.com/Downloads/details.aspx?familyid=6E1EC93D-BDBD-4983-92F7-479E088570AD&displaylang=en
Windows Vista and 2008 user already have this version.
 
Obviously,you would already have two or more monitors. Some rules are:
  • The monitors must be the same resolution
  • The total resolution must not exceed 4096 x 2048
  • The top left monitor must be primary
  • The monitors must be horizontally oriented

From the start menu,open a Run dialog. Type in mstsc /span /v:servername

Optionally,you can also use the /w:HorizontalResInPixels /h:VerticalResInPixels switches.

 

Accessing Folder Shares in OWA

Here’s a cool little gem I just found in Exchange 2007 in SBS2008.
 
You can access the server (or other servers) shared folders from OWA by enabling Remote File Servers in Exchange 2007.
 
1. Open up Exchange Management Console,Client Access,and Properties for Outlook Web Access.
 
2. In the Remote File Servers tab,Click on Allow,and add the file server name.
 
That’s it!
 
In Outlook Web Access,click on the Documents tab. Click on Open Location,then type in the file share location in the form of \\servername\sharename.
*** UPDATE August 2010. Unfortunately,Microsoft disables this feature in Exchange 2007 SP3,and also in Exchange 2010.
 

How to Make Terminal Servers in Application Sharing Mode Appear in Remote Web Workplace

Here is a bit of a gem. Now we can turn off port 3389 and get users to use RWW from port 443 in SBS2008 instead.
 
Thanks to the Technet guys!
 

Administrators will see all servers and workstations that are shown in the SBS Console’s Computer tab. However,standard users will only see workstations that they have been granted access to. This means that Terminal Servers in the domain will NOT be shown to standard users. To allow non-administrators to see Terminal Servers present in the network,follow these steps:

  1. Log on to SBS 2008 as an Administrator
  2. Open Registry Editor by typing “regedit”in the Start menu. In the Registry Editor,navigate to “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SmallBusinessServer
  3. Create a sub-key “RemoteUserPortal”under the key “SmallBusinessServer“,if it does not already exist
  4. Under the “RemoteUserPortal”key,create a new a Multi-String Value with the name”TsServerNames”(without the quotes;note the capitalization)
  5. Edit the “TsServerNames”value,add your TS servers name into the value data (one server per line),and then click OK to save them
  6. After completing the steps above,the servers you added into the registry will show to all RWW users in their computer selection list.

clip_image002

clip_image004

Note:Once this change is completed,ALL users will be able to view the TS Server from RWW.

Root Certificates and Windows Mobile

Had a wierd week just past. My HTC Touch Dual 850 phone suddely stopped working. The symptom began with Active Sync not working. I discovered that everytime I hit sync on the phone,Active Sync would terminate. Rebooting didn’t fix the problem. I cleared the phone settings and started again. Still no luck. I found further symptoms. When I opened IE on the phone,I could browse to various web pages. When I tried to open a https page,IE would also terminate. Further testing revealed that this worked fine when working with Vodafone,or when plugged into the PC. However,I could not do this on the Telstra network. After getting to level 3 support,I was asked to try removing the proxy setting. This worked.
 
BUT…..
I now got a new error message stating that my nice new thrid party certificate was not valid. OWA and outlook Anywhere worked fine,just not Active Sync on Windows Mobile 6. Finally…. after 5 days of messing about,which included a reimage of the phone ROM image,I solved the problem.
 
Earlier,I recommended that we can use RapidSSL from www.ssldirect.com as a trusted certificate on SS2008. When contacting SSL Direct with this problem,they said that their RapidSSL certificate was not certified to work with mobiles. This was very unusual,since it had been working fine up to this point. The RapidSSL certificate uses a certificate issued by Equifax Secure Global eBusiness CA-1. Whenever I installed the certificate on WM,the certificate would be installed as an intermediate certificate. There is no utility to install this as a root certificate. However,I found a Equifax Secure Global eBusiness CA-1 root certificate on SSL Direct,which installed itself as a root certificate,and apparently,this passes the intermediate requests on like a proxy. Installing this certificate fixed the problem,although I do not recall having to do this when it was working earlier. Something to note down for the future. In the meantime,be careful.
***Comment from Previous Blog site.
Tony Fahlstedt –16 Dec.,2008 –Delete
Hi Boon,

I experienced pretty much the same thing with a Sony Ericsson p1i cell phone,that phone does have the same equitrac cert built in as HTC phones have,however not the correct version of it,so I downloaded this root cert and installed it,after that activesync worked no hassles.

http://langhofer.at/fileadmin/images/exchange/Equifax_Secure_Global_eBusiness_CA-1_DER.cer

Have not tried it with a HTC though,but I think it will work.

/Tony