Radius
https://blog.ubnt.com/2016/11/04/managing-radius-authentication-unifi/
http://www.petenetlive.com/KB/Article/0000685
http://thesolving.com/server-room/configure-radius-server-windows-authenticate-cisco-vpn-users/

For LDAPS see below:
http://www.petenetlive.com/KB/Article/0000962
https://www.petri.com/enable-secure-ldap-windows-server-2008-2012-dc

@Mike-Davis said in IIS / RDS 2012 R2 User's Can't Log On:

What does the IIS log say?

IIS Shows no errors. I see the POST where the login attempt is made, and then it 302 Redirects to Default.aspx and then it 302 redirects back to the login page.

2017-05-12 12:34:53 x.y.z.a GET / - 443 - a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) - 304 0 0 218 2017-05-12 12:34:56 x.y.z.a GET /RDWeb/Pages/ - 443 - a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) - 302 0 0 15 2017-05-12 12:34:56 x.y.z.a GET /RDWeb/Pages/en-US/Default.aspx - 443 - a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) - 302 0 0 0 2017-05-12 12:34:56 x.y.z.a GET /RDWeb/Pages/en-US/login.aspx ReturnUrl=/RDWeb/Pages/en-US/Default.aspx 443 - a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) - 200 0 0 203 2017-05-12 12:35:10 x.y.z.a POST /RDWeb/Pages/en-US/login.aspx ReturnUrl=%2fRDWeb%2fPages%2fen-US%2fDefault.aspx 443 [email protected] a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) https://sk_dev.gcsu.edu/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx 302 0 0 156 2017-05-12 12:35:10 x.y.z.a GET /RDWeb/Pages/en-US/Default.aspx - 443 - a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) https://sk_dev.gcsu.edu/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx 302 0 0 15 2017-05-12 12:35:10 x.y.z.a GET /RDWeb/Pages/en-US/login.aspx ReturnUrl=/RDWeb/Pages/en-US/Default.aspx 443 - a.b.c.z Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C;+.NET+CLR+3.5.30729;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.30729;+InfoPath.3) https://sk_dev.gcsu.edu/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx 200 0 0 0

Use the clear-dnsservecache cmdlet

https://technet.microsoft.com/en-us/itpro/powershell/windows/dns-server/clear-dnsservercache

@Dashrender said in Windows Server 2012 R2 Licensing:

@JaredBusch said in Windows Server 2012 R2 Licensing:

@Dashrender said in Windows Server 2012 R2 Licensing:

@JaredBusch said in Windows Server 2012 R2 Licensing:

Server 2016 have a install method called Core.

Actually it doesn't. The install options are

standard standard with desktop experience datacenter datacenter with desktop experience

The ones without desktop experience are what used to be called Core installs. I think MS does have the term Core still sprinkled around inside the OS and documentation though.. just adding more to the confusion.

They changed again? I have not installed 2016 yet.

Yep. And this time I actually agree. The whole idea, I think, being that MS is moving toward a non GUI on the servers being the standard way of installing/using Windows Server going forward.

They made that very public as their goal when PowerShell was released long ago.

@Tim_G thanks

@Dashrender said in Server will not shut down:

@scottalanmiller said in Server will not shut down:

@Dashrender said in Server will not shut down:

I understand Scott comment about trusting hyper-v vs. VMware but the reality of that situation bro I was down at the hyper-v is so young in comparison to VMware

I'm not recommending it here, only stating that it is a weird emotional thing for the manager to dis VMware for Microsoft in a place where it is a pretty obvious technical problem but not do it where it would make sense.

LOl is it really weird? or is it normal even though it probably shouldn't be?

This makes me very sad.

@Dashrender said in Downgrade Windows 2016 Licence:

I maintain SA on my servers, CALs and until next year Office. I'll be dumping Office for O365 next year ( I hope) Staying current is what I consider worthwhile.

Sure we stay current.. but for example office was release every three years (2007-> 2010 ->2013 - >2016) It was cheaper to buy new outright than to use SA.

There you go, that's how VSS is supposed to work. Get one taken right before patching and another right after. Then you have lots of options.

@Romo said in Installing a Starwind SAN on Windows Server 2012 R2:

@FATeknollogee said in Installing a Starwind SAN on Windows Server 2012 R2:

Paging @KOOLER Will the performance of the appliances be as good or better than the native windows install?

It must be at least as good, why release an inferior product.

Nissan has GT-R cracking 0-100 in sub 3 seconds but it doesn't mean Nissan Altima doing same 0-100 in low 10s suck 😉 Every product has own target niche.

Wow crazy problem, never seen that before.

@BBigford said in Hyper-V homework question:

@Kelly said in Hyper-V homework question:

I posted this on that other site, but it appears that you do the teaming inside of Hyper-V, and not in the host OS: http://www.serverwatch.com/server-tutorials/configuring-nic-teaming-for-virtual-machines-with-hyper-v-3.0.html.

As soon as the team is added, connectivity is lost. Can't even get as far as adding the adapter before connectivity is lost.

So... once you create the virtual switch in Hyper-V Manager Virtual Switch Manager, using the NIC Team you created on the Host OS, all connectivity is lost?

At that point, what do the event logs say? Is there some kind of weird MAC conflict? When you look at the connection status of the virtual switch in Control Panel -> Network Connections, what does it look like? Are you getting a 169 address? Is it all 0's? What's actually going on and what does Event Viewer say?

Only the other night for me and it was all on one project so I'm not sure what it was, yet.

The XX concurent users only comes into play if the licensed application offers such a thing. In the case of something like Office 2013, you'd definitely need 300 license...

But for Something like... Raiser's Edge, or a Student Information System... You'd only need to license for the expected number of concurrent users.

IE: Raiser's Edge can be installed on every computer on my campus... But only 15 of us can log in at one time.

@IRJ said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

@thwr said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

@coliver said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

@thwr said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

@IRJ said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

Good article. There is ZERO reason to have a GUI on a Domain Controller. Everything can be done through Server Manager on Windows 10/8

You mean RSAT 😉

Both? You can do a lot of directory management through Server Manager as well.

Ok, agree. Just don't like the Server Manager this much, ugly interface. I want to be sure WHICH drive on WHICH host I'm going to format for example. But that is just my personal opinion and I'm more or less a console fetishist 😉

But when it comes to ADSIedit or AD sites, you really want to have RSAT.

huh?

0_1469044083616_2016-07-20_15-47-37.png

Those options are generally only there is RSAT is installed.

Sweet. Thanks for getting this for us @adam-ierymenko

@scottalanmiller said in Updating Windows from the Command Line:

Keeping a system up to date is very important and doing so from the command line can be one of the easiest ways to do this on Windows.

Updating a Windows system, server or desktop, can be as simple as running this command as an administrator:

wuauclt.exe /detectnow /updatenow

If you only want to look for the latest updates without applying them, you can just run:

wuauclt.exe /detectnow

Also:
wuauclt.exe /a /detectnow

(/ResetAuthorization)

http://ss64.com/nt/wuauclt.html

Lots of VMs creates a licensing nightmare. Sure with a Datacenter license that would be no big deal, but I don't have that.