Author: Andreas Stenhall

SBS 2008 migration, Exchange installed partially

The time has come for the first but definitely not the last post of 2010. I’ll kick off this year by writing a rather long and describing post about what seems to be a unique never the less strange problem when migrating a Small Business Server 2003 to 2008. Anyone that has done this migration know that when everything is done and the new SBS 2008 boots up to the actual desktop for the first time you want nothing but all green lights in the migration status report.

In this particular case it stated that Exchange Server 2007 did not install, which is not a good thing when it comes to SBS 2008. To my surprise I learnt that it was actually installed but only the hub transport role. The mailbox role and the client access role hadn’t been installed during the SBS 2008 installation/migration. Not good, indeed not good at all was my initial thought.

After trying to manually install the roles it instantly worked fine to install the mailbox role but the client access role kept on failing with the below error message.

Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:00:13

Client Access Role
Failed

Error:
Exchange server "SERVERNAME
DEL:e576abbf-e823-43f2-8c4a-53ec5e551dbd" was not found. Please make sure you have typed it correctly.

So after doing some research it seems that the offline address book of the Exchange Server 2003 is the crook which has lead to the migration process not installing Exchange Server 2007 correctly on the SBS 2008. Simply deleting the offline address book was the only way I could get the client access role to install in the Exchange Server 2007 on the SBS 208 machine.

After everything eventually was installed it didn’t take long before I realized that SBS 2008 keeps OWA and TS Gateway web services in its own web site in IIS called SBS Applications which Exchange is unaware of. This meaning we still have a corrupt and not so useable Exchange OWA, ActiveSync etc as Exchange per default install the web services in the web site called Default web site.

After doing a manual move of most parts it kept on failing on the virtual directories for EWS, OBA and AutoDiscover with an error message indicating that they were already in the SBS Applications web site. After a look in the applicationHost.config (located in the %SYSTEMROOT%\System32\inetserv\config folder) file it turned out that these virtual directories were listed under SBS Applications instead of the Default Web Site, should they be there at all.

All was well after first uninstalling the client access role in the Exchange, manually deleting the lines corresponding to EWS, OAB and AutoDiscover in the applicationHost.config file and after installing the client access role again and finally running the powershell script provided by Microsoft at step3 on http://technet.microsoft.com/en-us/library/dd767439(WS.10).aspx the problem was fixed.

Whatever the problem with the address book was I guess we will never know. At least I hope this little post can help someone in a similar situation when migrating to SBS 2008.

Windows 7 fix for standard users logging in into safe mode

If you for instance is using AppLocker in Windows 7 you know that it requires the service “Application identity” to be started for it to enforce the AppLocker rules. This could pose a problem if a user start a machine in safe mode and login there, even a standard user that is. What happens then is that the Application idendity service is not started and the user can then run anything on the machine.

Microsoft has releases a fix for this which allows us to block standard users from logging in into safe mode on our machines. You need both the patch and to add a registry value to make this change but once there your standard users will not be able to bypass AppLocker or any other security features that is not started when starting the machine in safe mode.

Download: A hotfix is available to block standard users from logging on to a Window 7-based or Windows Server 2008 R2-based computer in safe mode

Discussion on Windows 7 with Swedish MVPs and Stephen Rose

A few weeks ago at the Windows 7 and Windows Server 2008 launch called “Day of Evidence” me and some fellow MVPs had a very spontaneous panel discussion on Windows 7 with Stephen Rose from Microsoft Corp in Redmond. Watch the 20 minutes disucssion at http://edge.technet.com/Media/Stephen-Rose-samtalar-med-fem-svenska-MVPer/ and note that although the text on this page is in Swedish the discussion is in English. Enjoy!

Liselotte Isascsson wrote a few lines about this together with a few words written by Stephen Rose about his trip around Europe. Don’t miss!

Fix for the solid background delay problem in Windows 7

As discovered by a colleague some time ago there is a bug in Windows 7 where it takes 30 seconds+ to login when the background is set to a solid color. When having an image as a background the login is instant. The problem does not involve the first logon, but every logon after you have started the machine and logged in for the first time. Now, there is a fix for this interesting problem. Please see for http://support.microsoft.com/default.aspx?scid=kb;en-us;977346 more information and to download the hotfix.

New Windows 7 certifications live (70-685 and 70-686)

At last the Microsoft  Certified Professional page show that I have passed both Windows 7 beta exams, named 71-685 Windows 7 Enterprise Desktop Support Technician and 71-686 Windows 7 Desktop Administration. These exams went live November 20th with the numbers 70-685 and 70-686 and if you have already taken 70-680 i recommend you look into these two new exams.

Previous information telled us that to become a MCITP for Windows 7 one would need to pass not only 70-680 and 70-686 but also an external test from a third party source. Now it seems that this has changed and to become “Enterprise Desktop Administrator 7” all you need is passing 70-680 and 70-686. At least that’s what it says on my transcript and the notes about the third party demand has been pulled from the leaning site. More information about the 70-686 and 70-685 exams!

Office 2010 beta for everyone

Office 2010 beta was just about a couple of hours ago released to the public. Anyone can now download and try the newest Office system from Microsoft. I really like the new features in Outlook 2010 in particular, with the very much improved conversation view which is fantastic. Download and try it yourself today and note before downloading that there are two versions, one for x86 and one for x64.

Download Office Professional Plus 2010 beta

HOW TO: Solve blue screens of death and freeze problems with Windows 7

So participating in the TechNet forums as well as my own forum there seems to be a significant amount of people having problems with Windows 7 going blue screening and freezing on them. Here is a list of troubleshooting:

  • Faulty memory module. Blue screens if not caused by software are likely to be caused by bad memory. It is not unusual that a machine works perfect with Windows XP and then starts behaving badly when upgraded to Windows 7 due to changes in memory management. Use built in Windows Memory Diagnostics (on your Windows 7 machines press F8 before Windows starts to load and choose “Windows Memory Diagnostics”) to troubleshoot the memory modules.
  • Driver. Bad drivers are without doubt the most common cause for blue screens. Therefore update your drivers either by going to Windows Update or the hardware manufacturer’s web site. If no Windows 7 driver exists for the hardware go with the Windows Vista driver as good as all Vista drivers work with Windows 7.
  • BIOS. When having problems with hardware in any way and particularly blue screens I would strongly recommend a BIOS upgrade as that many times improve stability and compatibility. Also resetting the BIOS settings to the default is always a good idea.
  • Bad hard drive. Bad hard drives are sometimes causing blue screens. I recommend using Hitachi’s Drive Fitness Test, which can scan any brand of hard drives for errors. This tool can be found at http://www.hitachigst.com/hdd/support/download.htm

Remember that you can always find out the reason for the blue screen by analyzing the memory dump file which is generated when the system crashes. Read the guide for analyzing the dump files yourself.

GUIDE: Troubleshooting and analyzing blue screens of death

Mailbox moved to Exchange 2010

Been home from TechEd for a couple of days and getting back to speed on everything at home. This morning I moved my mailbox to Exchange 2010. The Outlook Web App (previously known as Outlook Web Access) is real slick and now I am just waiting for Office 2010 beta to be released to take full functionality with Exchange 2010 with the new Outlook 2010. Well, the Technical Preview has been out since this summer and although it is promising it contains quite a few bugs and therefore I have reverted to Office 2007 until the beta of 2010 is here. There are a lot of changes coming in the beta compared to the Tech Preview so I hope it will be here soon.

TechEd recap – so far so good!

Halfway through TechEd Europe and so far it has been great! Long days attending sessions and walking around talking to people and long nights with social activities. The sessions I have been to have had high standards and I have not (yet) been to a bad session so far. I finished off yesterday with watching fellow country man Marcus Murray do a session about hack proofing Windows 7, quite interesting and it is always fun to watch Marcus in action. I guess all sessions will be available online some time after the conference and I will get back on that later on. Now a new day with lots of sessions await. So long!