How to Resolve Installation Event Errors in SBS 2008?

SBS 2008 has been released to manufacturing (RTM), and if you haven't installed yet, you most likely will soon. As with previous versions of SBS, the complex interactions with partner products and configurations in use can lead to some noise in the event logs. We know of a few issues that you will see and we want to share information on how to resolve them or take action to prevent them. We are focusing on errors that will appear in a frequent enough ratio that they will be noticed right away, we are not going to be discussing one time events that can happen on shutdown, startup or right after the setup has been completed that will not affect any functionality and should not repeat themselves during normal operations.

• DCOM Event 10016

Problem: You install Microsoft Windows SharePoint Services 3.0. When you view the System log after Windows SharePoint Services 3.0 is successfully installed, you see the event ID 10016 error message logged one or more times.

Type: Error
Source: DCOM
Category: None
Event ID: 10016
Description:
The application-specific permissions settings do not grant Local Activation permission for the COM Server application with CLSID {CLSID} to the user DomainName\UserName SID {SID}. This security permission can be modified using the Component Services administration tool

Resolution: The solution in this article will work for Windows Small Business Server 2008: http://support.microsoft.com/kb/920783

• MSExchange Search Event 4625

Problem: Failed Security audits in the Security log- there is a problem in Microsoft.Exchange.Search.ExSearch.exe where an event id 4625 will be reported every few minutes.
Resolution: This should be fixed in the Exchange RU4 release which is currently targeted to be released in September of 2008. It can be ignored otherwise.

• DCOM Event 10009

Problem: The DCOM event id 10009 will occur when a client workstation has a miss-configured firewall or other issues affecting its network communications within the domain, for example if the workstation is not managed by an SBS GPO. In this scenario, the DCOM event 10009 will happen repeatedly, potentially hundreds per day.

Resolution: To attempt to resolve configuration issues with the firewall try the following:

· Make sure to allow remote management exception. Depending on your firewall solution this might be implemented or might require opening several ports. Unfortunately, this means opening common ports like TCP/135, TCP/139 but also a range of dynamic ports that cannot easily be defined and start at 1025, check with your firewall manufacturer for proper ways of allowing dynamic RPC traffic.

· If using OneCare on the SBS client machines, make sure you are using the Small Business version of Windows Live OneCare. The Small Business version has a default set of firewall port exceptions as required by SBS to monitor the client workstations.

· If the workstation is on a different subnet than the SBS server and it is running Windows XP SP2 or higher, the firewall exceptions provided by the SBS group policies will not properly allow the required connectivity. You should edit the Client XP GPO and change the scope of the rules to allow subnet + the internal IP of the server. Follow the extra steps below to properly monitor XP SP2 (or higher) machines running in the SBS domain on different subnets than the SBS server, and prevent the DCOM 10009 errors if that is the case.

1. Open GPMC.MSC from Start-Run
2. Accept the UAC prompt
3. Expand Forest: Domain.local, Domains, Domain.local and select Group Policy Objects. (Replace Domain.local with your domain)
4. Select the Windows SBS Client – Windows XP Policy and then use right click on your mouse and select edit
5. Expand Computer Configuration, Policies, Administrative Templates, Network, Network Connections, Windows Firewall, Domain Profile
6. Find the IP Address of the server: Open a command prompt window (cmd.exe) from the Start menu. In the command prompt window type IPConfig and press return. Make note of the IPv4 address listed.
7. Double click on: Windows Firewall: “Allow inbound file and printer sharing exception”
a. in the text box labeled “Allow unsolicited incoming messages from these IP addresses”, add the IP (IPv4) of the server, so if the IP of the server is 192.168.1.2, it would end up reading: localsubnet,192.168.1.2
b. Click Ok
8. Repeat Steps 6.a and 6.b for the following rules:
Windows Firewall: Allow inbound remote administration exception
Windows Firewall: Allow inbound remote desktop exceptions

Source & inspiration: http://blogs.technet.com/sbs/archive/2008/08/26/known-post-installation-event-errors-in-sbs-2008-and-how-to-resolve-them.aspx

Safeguard Windows 2008 Server

Businesses cannot afford to have downtime, and with so much depending on the function of the Microsoft Relevant Products/Services Windows platform, they also have a need for tools that will help to maximize and preserve their investment in the Windows environment, even as they transition to the Windows Server 2008.

Fortunately, a number of proven tools and services are available to help organizations preserve and protect their Windows 2008 server Relevant Products/Services. By providing new availability to virtualization Relevant Products/Services, security and management capabilities, Windows Server 2008 helps IT staff maximize control over their infrastructure. Windows PowerShell, for example, a new command-line shell with more than 130 tools and an integrated scripting language, makes control and automation of repetitive system administration tasks easier. The new Server Manager is an additional help by offering the convenience of a single control panel from which administrators can install, configure and manage the server roles and features of Windows Server 2008.

One component of keeping critical IT environments up and running is having the capability to not only back up mission-critical data Relevant Products/Services but also to have fast and reliable recovery of that data. Without proper protection, an infrastructure failure, natural disaster or even simple human error could send a profitable, productive company into a tailspin from which it might never recover.

To ensure a complete data-system protection strategy, organizations are now replacing their silo-based backup-and-recovery strategies with a single, more comprehensive approach that maximizes Windows Server 2008 and legacy Window systems by supporting VSS writer integration, system state, Active Directory, BitLocker technology and cluster failover. In addition, these comprehensive data-protection solutions are powered by disk-based technology that minimizes IT downtime and helps businesses meet strict recovery-time objectives.

Intelligent archiving tools are also being integrated into data- and system-protection solutions to extend protection and availability to critical archives. In order to keep in compliance with data retention and recovery standards, more organizations are requiring an integrated archive solution that will help to manage and reduce storage Relevant Products/Services volumes and improve overall data discovery.

Advanced disk-to-disk-to-tape backup-and-recovery solutions can leverage other technologies to streamline protection. For example, these types of solutions provide IT administrators with the ability to recover granular data like e-mails, folders, mailboxes, and individual documents and attributes from critical Microsoft applications -- including Microsoft Exchange, Active Directory, SharePoint Server and SharePoint Services. Having the ability to restore granular items versus restoring an entire database Relevant Products/Services eliminates the additional management and storage resource required when running Exchange mailbox backups.

Traditionally, Windows system recovery has been a manual, intensive and lengthy process that can take days or weeks. In contrast, bare metal restore technology can whittle that down to just minutes. With these solutions, IT administrators can quickly restore systems, even to dissimilar hardware Relevant Products/Services, virtual environments, or from remote, unattended locations. The entire Windows system can be captured and protected, including the operating system, applications, databases, files, device drivers, profiles, settings and registry.

Source: http://www.newsfactor.com/news/Safeguard-Windows-2008-Server/story.xhtml?story_id=131008JS64A7

Microsoft Rolls Out New Small Business Server Options

Microsoft has announced new server software that it said provides small and medium businesses with enterprise-quality capabilities while helping them to save money, increase productivity and grow their businesses.

While designed specifically for small and midsized companies, Windows Small Business Server 2008 (SBS 2008) and Windows Essential Business Server 2008 (EBS 2008) include Microsoft's high-end server technologies delivered in a way that smaller companies can make the most of them.

“Around the world, small and midsize businesses are the engine that drives economic growth and opportunity,” Steve Ballmer, CEO of Microsoft, said in a company statement. “To help these businesses succeed, Microsoft has focused on creating integrated, affordable server solutions that are optimized to meet the needs of companies with limited IT resources. Small Business Server and Essential Business Server deliver a comprehensive set of capabilities that will help small and midsize business thrive and grow.”

Designed for small companies with up to 75 people/computers, SBS 2008 server software integrates a variety of Windows functions to help small businesses better secure data and increase employee productivity regardless of location.

Based on Windows Server 2008 Standard technology, SBS 2008 incorporates

• Exchange Server 2007 Standard Edition for messaging and collaboration
• SharePoint Services 3.0 for online collaboration workspace and productivity tools
• Forefront Security for Exchange Server to handle e-mail security
• Windows Server Update Services 3.0 for network updates and protection
• Windows Live OneCare for Server to manage viruses, hackers and other digital threats
• Microsoft Office Live Small Business to help take your business online
• Microsoft SQL Server 2008 Standard for Small Business, a database available in the Premium edition

The server software offers a range of features including anytime/anywhere access to your PC and its data, including e-mail, files, business applications, and more. It's also designed to let your employees share Internet access, printers, fax machines and other network resources. Click here for SBS 2008 pricing information.

Microsoft designed EBS 2008 for midsized companies with up to 300 people or computers. It's meant to simplify and automate common IT tasks, and a unified administration console gives IT managers more control over an integrated network infrastructure.

Windows Essential Business Server 2008 also incorporates the applications found in SBS 2008, and Microsoft said it provides the following features:

• Significant costs savings compared to buying stand-alone products.
• Remote access, anti-spam, antivirus protection and improved messaging technologies improve productivity both in and away from the office
• An integrated setup saves time and reduces installation steps from days to hours Simplified licensing with a single server license and Client Access for all included products.

Steven VanRoekel, senior director of the Windows Server product group, noted that both server products help small and mid-sized companies compete in tough economic times.

"Small companies have the same needs and face the same challenges as big business, but they lack the staff, resources and time to manage IT environments," VanRoekel said. "The new EBS 2008 and SBS 2008 products are an integrated, affordable, enterprise-quality solution that can help small and midsized companies become more productive, cut costs and be more competitive." Click here for EBS 2008 pricing information

The company said that Dell, HP and IBM will offer hardware configurations that have been optimized for running SBS 2008. HP, IBM and Intel will offer blade servers designed and priced for midsized companies. The more common rack-and-tower server configurations will also be available in a range of sizes from companies such as IBM, Dell, HP and Sun Microsystems.

On the software side, Microsoft's ISVs (independent software vendors) will support both SBS 2008 and EBS 2008 with a variety of applications ranging from backup and recovery, security, business management, systems management and more.

Via: http://www.smallbusinesscomputing.com/biztools/article.php/3784851