Tuesday, 13 April 2010

SMB error: Not Enough Server Storage Is Available to Process This Command

This appears to happen after installing the newer Acronis Home products.
 
Set the IRPStackSize parameter to the max value of 50 (32H)
 
Restart PCs - should be working.

Thursday, 4 February 2010

CA-Cert SSL Certificate Renewal Process - IIS7

When you logon to CACert to renew the server certificate - it will renew the certificate and will expire in 6 months time. If you try to renew the existing certificate with this one on IIS7 it fails with the following error:
 
CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x08009310b (ASN: 267)
 
You can then use the IIS7 wizard to generate a renewal CSR to submit to the CA. However CACert does not support this type of CSR.
 
Your only option is to first generate a new CSR for the existing domain from IIS7 then submit it to CACert. This will return a valid certificate that can be imported into IIS using the Complete CSR wizard. You will will now have two seemingly identical certificates. The old one can be removed - you will have to update the bindings for the affected websites to use the new certificate. You will also have two identical certificates in CACert - the older one can be revoked.

Wednesday, 20 January 2010

Permissions required to edit Office documents

The problem lies with the way Office handles ediiting. When a document is opened in editing mode - it creates a temporary file - when you save your changes it overwrites the existing file with the temp file - then when you exit Office it removes the temp file. Office is designed like this for fault tolerance as the temp edit file is updated every minute or so that way you can recover your work after a system crash. This is why the user needs Modify permissions on the Folder the files reside in when edits are made. Otherwise you will get "Access Denied: errors.

Friday, 8 January 2010

Exchange 2007 services not starting

If you find that after restarting a server running Exchange 2007 - some critical services are not starting automatically and you have to manually start the Information Store and others - it could be a service startup dependency issue.
 
This is the dependency list for Exchange 2007 that starts up without any problem:
 
AD Topology
Depends on:
    NTDS (AD Domain Services)
 
The following need to start after AD Topology:
Anti-Spam
Edge Sync
File Distribution
IMAP 4
Mail Submission
Mailbox Assistants
POP3
Replication Service
Search Indexer
Service Host
System Attendant
Transport
Transport Log Service
 
Information Store
Depends on:
    System Attendant
    RPC
    Server
    Workstation
    Windows Event Log
 
System Attendant
Depends on:
    RPC
    Server
    Workstation
    Windows Event Log
 
Monitoring
Does not depend on anything
 
If this is setup as above the Exchange should startup normally. If problems still persist you could have a GPO that calls a script that starts the troublesome services manually.

Change Service Dependencies - Windows

Use the Services MSC to view dependencies. If any need changing - fire up regedit
 
Go to : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<Service name>
 
To create a new dependency, select the subkey representing the service you want to delay, click Edit, and then click Add Value. Create a new value name "DependOnService" (without the quotation marks) with a data type of REG_MULTI_SZ, and then click OK. When the Data dialog box appears, type the name or names of the services that you prefer to start before this service with one entry for each line, and then click OK.