Microsoft Small Business Server (SBS) 2011 Expired Certificate Renewal

We have a lot of SBS servers at our clients and naturally the self signed certificates (our clients don't like parting needlessly with money, so we never end up having third part signed certs) expire after 2 years of creation.

In the past, I used to run the "Set up your Internet Address" wizard to re-create the certificate as suggested on many forum posts, however I discovered a much neater (and probably correct way) of doing this earlier in the year.

1: Open up the Windows Small Business Server 2011 Standard Console
2: Go to the Network Tab
3: Connectivity Tab
4: On the right hand menu select "Fix my network"
5: The wizard will search for potential problems and should identify that the certificate has expired
6: Renew the certificate

And that should be all

If the certificate isn't showing as expired in the fix my network then the setup your internet address wizard has never been ran - which could cause problems!

Dealing with exchange and small zips containing viruses using transport rules

I have a number of client who often fall for the "Please pay this invoice. Open attached file" type of email. They get it, open it and are then infected with a virus.

A lot of these type of mails seem to slip through spam and AV services, therefore following a suggestion elsewhere I've created the below guide to filter out small attachments. The logic is that generally only larger files get zipped, so if its really small chances are it's a virus.

I understand that this is not always the case - some people zip to password protect and you could add a section to the rule to allow emails from certain addresses always through or certain file names etc. The below is a basic set of guides to follow to setup a filtering system that will move small zips/rars/whatever you want to a different location.

1: Start by making an email address for all the crud to go to - occasionally it may be legitimate and you may need to take a look at it.
2: I made a mail enabled public folder and gave access rights to certain people just in-case something sensitive ended up in there
3: Once made, it's time to head over to the exchange management console
4: Go to Organisation Configuration, Hub Transport and then Transport Rules
5: Create a new Transport Rule, I called mine as below (for when I forget what it was for!)
Name: Small Attachment Spam
Comment: Catches spam by looking for small attachments (ie zips) and moves them to an alternative email

6: Leave the Rule enabled and click next
7: From the list of conditions select "When any attachment file name matches text patterns" and tick it
8: From the same list, also select "When the size of any attachment is greater than or equal to limit"

Double check what you have ticked! If it doesn't work later its because you've most likely selected the wrong option here as there are a few named very similar things

9: Click on the first rule in the second section down (Where is says Apply rule to message when any attachment file matches"
10: In the list, enter your file extensions. I included the dot, so my list contains:
.zip
.exe
.scr
.rar

11: You should see the "and when the size of an attachment is greater than or equal to 0B" in the list below too - leave this set to 0.
12: Click next
13: Scroll down to near the bottom of the list and this time select "Redirect the message to addresses"
14: In the section underneath, click redirect message to addresses 
15: Add the address we created earlier. If you don't want to redirect it you can select a different option such as "Delete the message without notifying anyone".
16: Click next again
17: From the list select "Except with the size of any attachment is greater than or equal to limit"
18: From the lower half, click on except when the size of any attachment is greater than or equal to 0B
19:  Depending on the client this amount changes - if its someone who may send small zips I make it quite small. If its a client who never sends or receives zips then I'll set it as high as 100kb.
20: Click OK
21: Click Next and then Click New

That's it - your rule is now live on the system. This is just a basic example, you can add more to the rule and get it to do a number of other things but this should certainly be a good start.

Cheers

Network Card Drivers for a HP DL360e Rack Server

Just a quick one; had a new server to setup for a client and had real troubles finding the correct network drivers.

After much investigation, turns out that the driver you need for a DL360e rack server is:
http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdHome?sp4ts.oid=5317160&ac.admitted=1405944960782.876444892.492883150

Its the HP Ethernet 1Gb 4-port 366i Adapter - the card is a quad port on-board

Why HP didn't add it to the downloads section on the 360e download page I don't know but hopefully this will save someone 30mins of messing around.

Cheers

-- Update --
It has come to my attention since writing this that I may have gone slightly awry when looking for the drivers. Apparently (and I haven't yet had a chance to check this) the drivers are embedded on the motherboard in some kind of flash memory which you can get to appear much like a USB drive by looking in the BIOS

I'd love to hear if this was true - anyone out there shed any light on this?

Hypervisor not running (3112) - AMD FX series CPUs "Virtual machine could not start because the hypervisor is not running"

Having recently decided to build a new test machine for virtual activities, I decided on a budget FX-6300 (piledriver) with a Gigabyte board and 32GB of corsair memory.

After installing Server 2008 R2 and adding the hyper-v role, my first problem started with hyper-v not being able to mount the VHD files.

No worries there, that's a known problem and needs 2008 R2 SP1 installing.

After installing SP1, I ran into a new problem where I got the following error message:

"Hypervisor not running" error 3112

Lots of digging later and i'd managed to get myself into a panic; I was thoroughly convinced i'd wasted my money on a system that wasn't going to run Hyper-V. I'd checked all the basics, AMD Virtualisation support etc and was looking at other peoples suggestions such as hardware DEP.

After much searching, I stumbled on an Microsoft KB support article (2568088) which cured issues with hyper-v and the bulldozer CPUs. In desperation, I tried installing it on the off chance that it would solve my problem even though I have a piledriver.

And guess what? It did.

Thank you Microsoft for the hot-fix, perhaps its about time you updated the details to include other architectures?

I hope that certainly hopes somewhere out there as much as it helped me - KB article is below:

http://support.microsoft.com/kb/2568088

Edit: 10/04/2015
Looks like the hotfix details have been updated now to reflect that it started with the bulldozer series.

Update: 16/07/2015
This problem occurred today on a server following a RAID failure - the secondary plex kicked it and the virtual machines wouldn't start. Long story short, the hypervisor wasn't starting automatically. to fix, I can this from an elevated command prompt:

BCDEDIT /set hypervisorlaunchtype auto   

On a side note, it's also come to my attention that work-arounds have been added to the hotfix notes to get around the AMD issues:

To work around Issue 1, follow these steps:

1. Start Hyper-V Manager.
2. Right-click the virtual machine in question, and then click Settings.
3. Under the Processor configuration for the virtual machine, click to select the Migrate to a physical computer with a different processor version check box, and then click OK.
4. Start the virtual machine.

Windows Backup and Hyper-V - My experiences (0x80042336 and failed to mount virtual hard disk)

I recently installed a virtual platform for a client and ran into a few problems when it came to backing up the virtual machines. Much reading into the subject left me rather confused as there were no real answers the problem, however I do now seem to have it working as it should be.

Setup

Server 2008 R2 running Hyper-V

1 x SBS 2011 Virtual Server

12 x Windows XP Virtual Machines

The Problem

Windows Backup was set to take a full system backup to a removable USB HDD. When the backup starts, it takes all XP machines offline into a saved state as the integration services aren't fully compatible and then tries to backup the SBS machine. After about an hour, the backup fails with error code 0x80042336 . 

If I look in the hyper-v event logs I see an error: failed to mount virtual hard disk for one of the of the VHDs.

I tried changing the job so that only the drives with the VHDs stored on them were included - no good. Started checking hot-fixes, also no good. 

The Solution

Further investigation showed that the SBS machine was waiting on the Sharepoint SP1 upgrade that I posted about previously (http://mindofdes.blogspot.co.uk/2013/10/sbs-2010-backup-issues-operation-to.html). Apparently, even though this is located inside a guest it can effect the backup. Therefore I ran this and upgraded it.

Afterwards, I checked the VSS writers on the host and saw that the hyper-v write was in an error state waiting for a previous operation to complete. I tried restarting the VSS services but this didn't help at all.

At this point, I decided to give the server a full reboot and then run the backups again - low and behold the backup burst into life and seems to be quite happy now.

Did I get lucky? Was it the SharePoint issue causing the problem? Did the first backup break the vss writer when it failed? or perhaps a combination?

Who knows - but for me the issue seems to be resolved. 

CryptoLocker Virus - Ransomware - Part 2

A larger company has now contracted the virus called Cryptolocker and trying to track the PC down has been a bit of a nightmare as no-one has owned up to opening it.

Eventually, it was found on a PC in a remote corner of the office. To track it down, I used the Share and Storage Manager present in Windows Server 2008.

By using the Share and Storage Management console and looking at the Open Files information, I could see a particular user opening and closing 6-8 files at once thereby tracking down the culprit PC.

A few things to note about this virus is that it has to encrypt every single file - which on a server with lots of data can take a LOT of time. So 12 hours later it had only completed half of the available shares.

Removed, restored and done. Finding the user in the Share and Storage manager (open files) saved me a lot of time though.

Pirate Gold - A Minecraft treasure hunting map

I've been an avid Minecraft player since it was released in beta. I recently decided to create a map and release it, and the fruit of my labour can now be downloaded.

See the Minecraft Forum post here: http://www.minecraftforum.net/forum/53-maps/

Alternatively, download the map here: http://adf.ly/XbHXd

Objective of Map:

You start with a Red cross and dig up a chest. From there, follow the clues to find the treasure!

Each clue has a key character on it, which when written down all together gives you a secret URL to part 2 which is currently avaiable to download in Alpha

Happy hunting!