Microsoft Update List for Hyper-V

A lot of IT Professionals are moving to Hyper-V and they need to keep updated with all Hyper-V hotfixes, updates and Service Packs. The Below links are for Hyper-V on both Windows 2012 and Windows 2008R2. Some of these updates/fixes are intended to fix specific problem, so don’t apply them unless you have this specific issue. 

1.       Windows 2008R2 Hyper-V

 http://social.technet.microsoft.com/wiki/contents/articles/1349.hyper-v-update-list-for-windows-server-2008-r2.aspx

 

2.       Windows 2012 Hyper-V 

http://social.technet.microsoft.com/wiki/contents/articles/15576.hyper-v-update-list-for-windows-server-2012.aspx

 

Thanks to the above wiki creators.

Read More

UAG 2010 File Access application fails to open/start after UAG 2010 SP3 implementation

After the install of UAG 2010 SP3, all of the portal applications worked fine except for the File Access application. I tried several options with the application, removing it and adding it back but never worked till I asked my friend Ben Ari (UAG Senior Escalation engineer) as I thought it was depreciated. It turned out to be a glitch or bug after implementing the UAG 2010 SP3 and to fix you need to do the following:

 

1.       On the UAG server, Navigate to the following folder under UAG installation folder \Microsoft Forefront Unified Access Gateway\von\FileAccess

2.       Edit the file “default.asp” (I took a backup first before any change)

3.       Modify the word cint to parseInt on Line 20 (Or you can search the file as it appears once). Make sure that the “I” in “parseInt” is written in caps (Check below screenshot)

 

 

4.       Save and activate your Forefront UAG

 It should be noted that incase there are more than one UAG server in the array, this change should be applied on all servers manually by the same method and steps above.

Read More

UAG 2010 Portal error 403.14 after applying UAG 2010 SP3

The UAG 2010 SP3 was officially released on Feb 20, 2013 as promised by the UAG team to resolve several issues mainly to support Microsoft new systems and applications (Windows 8, Server 2012, Exchange 2013, SharePoint 2013...............etc). Thanks UAG team.

Download Link:  http://www.microsoft.com/en-us/download/details.aspx?id=36788

Release Notes: http://support.microsoft.com/kb/2744025


I will discuss my SP3 installation process and my comments for a successful implementation in another Post. One of the main issues that i faced after the installation of the UAG 2010 SP3 was that all my users were unable to access the UAG Portal page or any published site on the UAG (Mail OWA, SharePoint............etc) and the following error is Displayed:

Forbidden Directory, Listing Denied Error code 403.14

Microsoft has a good KB that deals with this error (http://support.microsoft.com/kb/961172) however in my case i needed to reboot the IIS later on. The Steps done to fix this issue is as follows:

1. Open Forefront UAG management on the UAG server.
2. Open/Explore the Trunks under the HTTP and/or HTTPS connections.
3. Right click each Trunk and select Disable.
4. Save and Activate the UAG configuration.
5. Right Click the trunks again and select enable.
6. Save and Activate the Configuration again.
7. Open the IIS Manager
8. Highlight your server name and from the actions hit restart to restart the IIS. This should do the trick.

Hopefully this should help anyone facing this problem after UAG SP3.

Read More

Microsoft UAG backup using DPM 2012

I have been working on this issue for some time and it was always failing with different kind of errors, i consulted Microsoft Team as well and finally it worked with me. I am using DPM 2012 but it shouldn't differ with any earlier DPM version as 2010. The main blocking issue here is the TMG component on the UAG server. Remember that its highly recommended not to touch the TMG configuration on the UAG however this is one of the rare cases that need the administrator to tweak some TMG settings. To enable the DPM to backup UAG and install the client you need to do the following (Make sure to take Full backup from your TMG settings and Rules):



1. Ensure the File and Printer sharing is checked/Enabled on the UAG internal Network card.

2. From the TMG console- Firewall Policy. On the right pane click show system Policy rule

3. You need to disable system Rule number 2 (Allow Remote Management from selected computers using MMC) by Right clicking the rule and edit system policy, I am assuming the default TMG rules are not touched before.

4. You need to disable System Rule number 22 (Allow RPC from Forefront TMG to Trusted servers)

5. From the Right Pane, in the toolbox section create a new Protocol under user defined. The Protocol parameters as follows:

Primary connection: Type: TCP, Direction: Outbound, Port range: 135-135

Secondary Connection: Type: TCP, Direction: Outbound, Port range: 1024 - 65535

6. Final Step, create a new Access Rule (Make sure to move it to the top). Allow - All outbound traffic except selected (Choose - RPC All interfaces) - From DPM server (Create computer object with DPM IP address)- To Local Host (UAG server) - All users................etc



Save the Settings and ensure they are Synced from the monitoring tab. Now try to install the Agent from the DPM on the UAG server and take a simple test backup.

Read More

Microsoft Hyper-V VMMS & System services stop after December 2012 Updates (KB2506143)

I had an issue recently with some Hyper-V servers where it was noticed that the Hyper-V system services (VMMS, VHDSVC & NVSPWMI) gets stopped all in a sudden and no one can access or manage the Hyper-V Virtual machines from the console as per attached image.

I noticed that these services stop on specific time on daily basis, after several investigations it was related to a specific rule/job based on WMI (CCMEVAL) that runs from the System Center Configuration Manager 2012 (SCCM) server

The only thing related to WMI that was updated on December is the Windows Management Framework 3.0 (KB2506143)

http://support.microsoft.com/kb/2506143

When this update get installed the SCCM client health check Read/Write WMI actions fail resulting in these services stopped.

To fix this issue Uninstall this KB and reboot the server, If this didn't work, please try the following:

1. Uninstall the Windows Management Framework 3.0 (KB2506143)
2. Run ccmclean.exe /all to uninstall the ConfigMgr 2012 client.
3. Run ccmdelcert.exe
4. Once the above steps are done, rename the WMI repository and restart the WMI service
5. Reboot the Server
6. Install the ConfigMgr 2012 client and check the services.

Microsoft released a bulletin confirming this KB compatibility problems with SCCM 2012

http://support.microsoft.com/kb/2796086

This issue will get fixed with SCCM2012 SP1 expected to be released Quarter 1 2013.

 

Read More

Increasing SCCM 2012 Add/Remove Programs Simple Query Value

We passed by this issue with one of our new System Center configuration Manager SCCM 2012 installations when trying to create a new device collection with the Add/Remove Programs used in the Query. The List of programs was limited till applications starting with the "M" Letter and other applications weren't displayed as shown below.

I recall we passed by this issue in SCCM 2007 and we had to add the Valuelimit registry key and looks like its not fixed in SCCM 2012 and you need to do the same, however due to the change in the OS/SCCM version, the key location is changed, to fix this issue you need to apply the following:

1. Open the Registry (using Regedit) on the SCCM server
2. Explore HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\ConfigMgr10\AdminUI\QueryProcessors
3. Add a new DWORD value named "Valuelimit" with Hexadecimal value of 10000 (The maximum value is 20000, its recommended to start up with 10000 and check if the problem is fixed instead of just entering the maximum number which can eat your memory). Check this article for more details http://support.microsoft.com/kb/269201
4. Stop the SMS_EXECUTIVE & SMS_SITE_COMPONENT_MANAGER services in this order
5. Start both services in the same order.

Note: If you managing the SCCM from a console on a terminal computer (most of the cases) and not directly from the SCCM server then you need to apply these settings on your console computer and reboot the computer after adding the registry key.

Read More

Microsoft UAG 2010 SP3 Under Work to Support Windows 8 & IE 10

Microsoft officially announced couple of days ago that UAG 2010 SP3 will be released the first quarter of 2013. This new Service pack will provide support for Windows 8 and IE 10 as well as other applications as Exchange 2013, Sharepoint 2013.........etc

The support of DirectAccess clients running Windows 8 as well as the normal Service pack fixes and improvements are expected.

http://blogs.technet.com/b/edgeaccessblog/archive/2012/11/26/uag-2010-service-pack-3-is-in-the-works.aspx

Looking forward to getting the new Service pack and testing it with Windows 8.




Update: Microsoft UAG SP3 is released on Feb 2013 and can be downloaded from http://www.microsoft.com/en-eg/download/details.aspx?id=36788

Also UAG SP3 Rollup 1 which is released to fix several issues with SP3 is released on April 2013 (Need SP3 to be already installed) and can be downloaded from http://support.microsoft.com/kb/2827350

Read More