Lorky

Blocked Windows Update on restart

January 10, 2022, 2:16 pm technology

Hi everyone

Today I wanted to share a small tip that can help if your server is stuck on reboot with a Windows patch that don't want to terminate.

Please use with precaution the tip to not loose data or break the OS.

In my case it was useful on a Windows Server 2019, as it was stuck for 3 hours and more, and the CBS log was growing indefinitely.

You can use ps exec, but we have tasklist that support a remote computer.

To use that way;

tasklist /s remote_computer with the username and password. /u domain\username /p password

tasklist /s remote_computer /u domain\username /p password

After the command we got a list with all PID.

To stop the Windows Update, in my case I had to close Windows Installer service.

The command is the same, except we give to it the PID, or we could use the /im parameter to target the executable image name. (/f force the closure)

taskkill /s remote_computer /u domain\username /p password /pid PID /f

Command reference

YK22 bug ! Exchange 2016, 2019

January 1, 2022, 10:12 am technology

Hi everyone

Happy new year 2022! And I wanted to share that if you have the latest patch installed in your Exchange you might have run into a YK22 bug !

The Microsoft Filtering Service got hit by a bug in it’s patch system.

To resolve in the short term please run;

Set-MalwareFilteringServer -BypassFiltering \$True -identity \<server name>

Or;

Disable-AntimalwareScanning.ps1 -forcerestart from the script folder.

The bug is explained there; https://old.reddit.com/r/sysadmin/comments/rt91z6/exchange_2019_antimalware_bad_update/ but it’s a variable error from the year 2021 to 2022 that make a long overflow vs an unsigned long that would had been ok.

Thanks everyone for reading, and good year !! :)

Update; it’s now fixed;

img_1499.png?w=576

MSI: The System Administrator has set policies to prevent this installation

December 22, 2021, 2:51 pm technology

Hi everyone

Today I wanted to talk a problem I seen on newer Windows Server 2019 in a RD setup.

Some user were having problem with a GPO for software installation (per user).

After some diagnostic I found on all my 2019 that the MSI system is restircted now by default.

If you stumble upon this bug;

Windows 10 Enterprise LTSC 2021 is out !

December 22, 2021, 2:38 pm technology

Hi everyone

I wanted to share a new, which is almost one month old.. but it's worth nothing, it's the new ISO for LTSC is now out :)

It inherit the feature of Windows 10 21H2 !

The servicing seem longer too, especially the IoT's version. As such I suspect it will be one of the last LTSC version as Windows 11 is now here.

image-2.png?w=880

What's new in Windows 10 Enterprise LTSC 2021

Windows 10 release information

Windows RDS | Publishing RADC shortcut on the DesktoP (part 2)

December 8, 2021, 11:21 am technology

Hi

Today I will talk a small tip to be transparent to the users, and thus to enhance a tip I already gave in the past, as seen there; Windows 2019 RDS | Publishing RADC shortcut on the Desktop

In my older blog post I was creating a shortcut to only the RADC's folder from the start menu, but on the desktop.

Today I wanted to be more granular and create shortcut for each applications on the user desktop. The user experience is greatly enhanced that way.

It's a 3 steps GPO to do, but first we need to generate our .ico and .rdp's files to use.

Go inside a computer that as the RADC's farm installed correctly, and navigate inside the folder; %AppData%\Microsoft\Windows\Start Menu\Programs\Work Ressources (RADC)

From there select the shortcut you want to deploy, like Word, and click property.

From the property windows, check the path of the argument, it's where our .rdp and .ico are. The shortcut created are just mstsc.exe "path/to/local profile/". It should be a path liks, %AppData%\Roaming\Microsoft\Workspaces\{....-....-....-....}\Ressources\Word.rdp"

Copy the .RDP you want and the associated .ICO, which are cached there too.

I usually copy them to a folder where all computer can read, like a sub folder in NETLOGON.

From there we start our GPO.

1. Create a GPO, in my example, "RADC - Desktop Word shortcut"

2. Create a file copy to copy the .rdp. Under user\Preference\Windows parameters\Files. The source is like \\dc\netlogon\source\Word.rdp, the destination is a administrative folder on the computer, like c:\it\word.rdp.

3. Create a file copy to copy the .ico. Same source and destination's folder as the previous one.

4. After that we create a shortcut, under preference too.

We use target as %DesktopDir%\Word, target; c:\it\Word.rdp, and we select the the target icon as c:\it\Word.ico.

I use to copy the files for a reason, if you DC become available for a short period of time, it's more efficient to simply copy the files locally and create a shortcut to those local's files.

5. After that we use the same security to apply this GPO's to as the group you make Word visible with in your RADC's console.

Voila, the shortcut should be visible easily after that. It's more work in the start, but after that it's less call to find the resource in my own opinion.

Thanks for the reading

Lorky`s Blog - Techno ressources and general informations for everyone !

Blocked Windows Update on restart

YK22 bug ! Exchange 2016, 2019

MSI: The System Administrator has set policies to prevent this installation

Windows 10 Enterprise LTSC 2021 is out !

Windows RDS | Publishing RADC shortcut on the DesktoP (part 2)

Popular Tags

Archives