WSUS 3.0 Now Available for Download
Microsoft Windows Server Update Services 3.0 is now available for download.
I updated 4 of my servers from WSUS 2.0 to 3.0 today with no apparent problems - the install was very smooth. The biggest difference so far is the move from WSUS Administration being web-based to being an MMC 3.0 snap-in.
If you'd like to administer your WSUS 3.0 install from a workstation, just double click WSUS3Setupx86.exe and select Administration Console Only when prompted. Once installed, the snap-in can be found under Administrative Tools -> Microsoft Windows Server Update Services 3.0. I thought of just yanking the wsus.msc module itself but it seems the Console_install switch installs not only that file but also 230+ of its friends. According to the Microsoft employee who left a comment below, you must install the entire package for the msc to work.
TechNet also added a section for Server-Side management on Windows Update Server. The current scripts include:
- Delete Empty Target Groups
- Re-index the WSUS 3.0 Database
- Server Status for Approved Updates
- Server Status Summary for All Computers and Updates
- Start Server Synchronization
WSUS 3.0 also allows administration from the command line using both wsutil and Powershell via the WSUS 3.0 API.
5 Ways To Stop Windows Vista/XP/2003 From Beeping
This came up twice in the past week at work so I decided to post it. Here's a few ways to disable the annoying beep in Windows. Works especially well to hush Terminal Services Beeping. I ran this on the clients but it may work for the server as well.
| 1. | local machine: sc stop beep && sc config beep start= disabled |
| 2. | remote machine: sc \remoteMachine stop beep && sc \remoteMachine config beep start= disabled |
| 3. | requires reboot: Device Manager -> View -> Show Hidden Devices -> Non Plug and Play -> Beep -> Disable |
| 4. | requires reboot: net stop beep |
| 5. | use TweakUI: General > Settings -> Uncheck the Beep on Errors |
Sources: tech-recipes, sonhaysytem.com and JSI FAQ.
Installing Longhorn x64 on VMWare ESX Server 3.0.x
I recently attended a Longhorn Roadshow in Santa Clara and learned quite a bit about Microsoft's emphasis on virtualization in Longhorn. A lot of companies are going towards virutalizing servers, even those still running NT or Exchange 5.5. The main reasons seem to be saving rackspace and saving electricity (fewer machines, less A/C) which both translate to saving money. Fortunately, my employer now has the infrastructure setup and virtualization on a mass scale seems like a possiblity. After a quick evaluation, I don't have much faith in Microsoft's current Virtual Server product but an evaluation of ESX Server 3.0 has proven impressive. VMWare has it together and it is likely the solution I'll be recommending in '08 when we're ready to move forward.
That said, it's been tough installing Longhorn x64 on VMWare ESX server. It should be expected, though; the support for Longhorn x64 isn't even experimental yet -- it's non-existent. I had to select Vista 64-bit Experimental as my base VM and hope for the best. What I've experienced is almost as painful as installing Windows 2003 R2 on a Macbook
Most of the frustration revolves around the CD-ROM drivers. The initial install of Longhorn on ESX is so promising but then a message pops up that says: "A required CD/DVD drive device driver is missing." At first, I thought this was because I was using an external USB DVD-R drive but that turned out not to be the case. I figured that gem out only after going through all these steps:
- I installed some dumb .flp that never loaded the CD-ROM drivers as promised
- I asked a friend to bring me an internal CDROM only to find out it's EIDE and my server doesn't support it
- I took my work workstation's IDE CD-ROM and hooked it half-up to my server (the IDE cable) and half-up to a workstation (the power cable because my server didn't have any free power cables left).
- Enabled IDE in the BIOS and finally had ESX recognize the drive
- Still had the same problem
So then I got creative and decided to create the Longhorn image on another workstation. Doh! The workstation's CPU was not 64-bit enabled. So then I tried it on my laptop.. doh! It's 64-bit enabled but doesn't have some special VT chip that's often times not found in laptops. This is why I hate hardware.
So I gave in and ..
- Wiped ESX and reinstalled Longhorn 64-bit.
- Installed the free VMware server, created a Longhorn Virtual Machine and installed Longhorn
- Once the install was complete, I backed up the vmdk to another machine
- I then wiped Longhorn on the server, resinstalled ESX and copied the vmdk to /vmfs/volumes/storage1/longhorn
- Next, I ran vmkfstools -i longhorn-64ws.vmdk longhorn-64esx.vmdk
- Once that was done, I created a new Virtual Machine within ESX and selected Custom then used the new image longhorn-64esx.vmdk
Ahhh, that worked! But now VMWare tools was giving me trouble. The CD-ROM still didn't work (the CD-ROM, listed as NECVMWar VMWare IDE CDR00 ATA Device, gives the status of "The Device Cannot Start" (Code 10)) so I had to figure out another way around the problem. I copied the windows.iso from /vmimages/tools-isoimages to my workstation using Veeam FastSCP, mounted the ISO, saved the files as a zip under my web root then used IE on the Longhorn server to fetch the zip. Installed and voila, it works!
Windows Server Longhorn Standard Beta 3 Escrow Now Available
After reading at bink.nu that the Longhorn April CTP was available, I logged in to my sweet MSDN account and searched for it. Strangely, I could only find "Longhorn Beta 3 Escrow" which became available on April 9th. I'm guessing that this version is newer than the April CTP but I'm not sure. Anyone know what escrow means in this sense?
Finally, I'l be able to put my awesome x64 servers to use, sorta Since Longhorn won't be final for awhile, I figure I will use these machines to beta test Longhorn and Exchange 2k7 until Longhorn is RTM'd.
The above photo was taken late one night as I installed the February CTP onto one of the servers. I used my 32 inch flat screen LCD HDTV as the monitor.. cuz I could. It was cool but ultimately, the install was worthless. The February CTP of Longhorn isn't compatible with Powershell and thus can't run Exchange 2007. Ahh well, now I've got Beta 3 Escrow. So now to decide which I'll do Friday night: go to NASA's World Space Party near Mountain View or install Longhorn & Exchange and play.
Vista Users Still Won't Trust Sleep
Last night, my computer fell asleep and I decided not to wake it. Experience taught me that Hibernate was much more reliable but I decided, eh, it's already Sleeping and I should be too.
This morning, after a public transit meltdown in San Francisco, I made it into work a mere 3 minutes before the managing partner was scheduled to call me for an important meeting. Still in a sweat from running, I arrived at my desk and attempted to wake my laptop from its sleep. I'm in IT after all, and I'll need it for this meeting. Well, my laptop didn't want to wake up. It sat there for a bit doing something.. not sure what, but it was powered on and the screen was blank. So I started poking around; I tried to eject the CD.. that's helped in the past to kick it into gear but it wasn't working this time. After about 30 seconds of waiting, I decided to it was time for a cold boot.
So now, I'm spending my last two minutes before 9:00 AM hoping that the managing partner won't decide to call a few minutes early. Microsoft, I'm sorry but resuming from sleep still doesn't work. And when it does, it tends to sit there for awhile, making me wonder what it will decide to do.
A few days before installing Vista, I came upon a PowerPoint created by one of the Microsoft Program Managers for the WinHEC (hardware) conference. In the presentation titled "Power Management in Windows Vista", Pat Stemen wrote the following::
Reliable Sleep Transitions
- Windows Vista promotes the use of sleep as the default off state
- Requires reliable, fast and deterministic sleep transitions
- Failed transitions were the primary sleep adoption blocker in previous versions of Windows
- Lead to great user frustration and distrust of power management
- Investigations inlicate component vetoes are the primary cause
- Appcication, service or driver willingly prevents the sleep transition
- Sleep transitions will succeed
- Vista will not query user mode components when entering sleep
- Drivers may not veto sleep transitions
- User-mode notification (PBT_APMSUSPEND) will continue to be sent
- Timeout to process event has been reduced from 20 seconds to 2 seconds
- Applications, services, and drivers must be prepared for this change
- Proper design and test is imperative
I don't know where the development in Vista's Sleep went wrong but, it's still not reliable for me. Same goes for my friend Zach..he's the one that actually clued me into using Hibernate instead of Sleep. Even with writing up to 2gb of data to the hard drive, going into Hibernation is just as fast as sleep and coming back is much more dependable. Now there's a 9 in 10 chance that resuming will work instead of a 5 in 10 chance (if that.) 99.999% reliability would be best of course but I'll take what I can get for now. I really hope Sleep's issues are finally resolved in Vista SP1.
Update: They finally released this patch publicly (without you having to call/email). It's helped me a great deal. Note that VPN is also considered "PPP" so this patch isn't only for dial-up users. Also, visitor "wchp" said that this patch helped him with sleep issues. So far, about 250 people have found my blog while searching for a fix. Ya'll holler and let me know if you have an nVidia card too.
TrueCrypt Now Supports Vista!
Just as I was heading off to bed, I decided to check the TrueCrypt website to see if they added Vista support. I've checked it a few times since March 19th, so I don't know why I didn't notice but version 4.3 now supports Vista. For a moment there, I thought Vista support was going to be vaporwear - they've been promising it since February, 2006.
I donated to the TrueCrypt Foundation back in January because it's some of the greatest software I've used in a long time. The software provides a sense of security -- knowing that my documents/pictures/music are protected in the event that my laptop were to be stolen. To me, knowing someone could be looking at my documents or pictures is an even scarier thought than even having my laptop stolen. So after installing Vista, I was really bummed when I read that the current version would not work.
If you are looking to encrypt an entire disk or portions of a disk, you just may love TrueCrypt too. It works on both Windows and Linux, it's free and it has a ton of functions. ScriptingLife.com has some great suggestions on running a drive with Pstart and mobile versions of applications. DailyCupOfTech.com has good info and quick tutorials on getting started.
Fix Slow External DNS Resolution in Microsoft/Active Directory DNS Server
Aw yaille! I just wrote up a whole explanatory blog post then lost it so this one will likely be brief... or not.
Recently, we found that one of our DNS servers was resolving external hostnames unacceptably slow -- about 5 seconds, give or take. The resolution was so slow, in fact, that all of the clients hopped on to the secondary DNS server thinking that the primary had gone down. After logging on to the server to troubleshoot, I could see that:
1. Pinging external hostnames worked well after the hostname resolved. So did traceroute.
2. Caching wasn't working at all
2. Other AD DNS servers on the network were resolving external hostnames quickly
3. The root servers were all there but I deleted and reloaded them anyway
- Note: you can actually load root servers from a root server which is cool
4. Internal hostname resolution was extremely fast
5. A reboot didn't help (you may laugh but this has solved severe AD problems for me)
Because the other AD Servers were picking up the slack, I decided to come back to it later. I went out and had dinner with a friend then returned after a few hours. Upon logging back on to the Internets, an old network admin friend messaged me. I told him what I was seeing and he said he had the exact same issue a few months back. After a few minutes of trying to recall the solution, he asked "Have you checked your forwarders?" I'd glanced at them but went back to check again. And there it was.. an entry to a machine we'd recently taken down (long story..). I knew the moment I saw the IP that it was the problem. I removed the entry and noticed the forwarded query timeout was equal to *drumroll* 5 seconds.
Finding that solution was impossible on the Internet because of the super general terms: Slow DNS Resolution External Active Directory. Nothing really worked for me so hopefully this post will help others in the future.
Update: A colleague of mine mentioned spyware interfering with proper DNS functionality resulting in intermittent resolution problems. So that's something you may want to check with a netstat -bn which shows you what programs are using which ports. DNS uses UDP port 53.
My Dell XPS M1210's Windows Experience Base Score in Vista
I've loved my laptop since the day we met. If you are in the market for a fast, lightweight, decent looking computer, you too may be happy with a Dell XPS M1210. As I mentioned in some previous posts, my machine has the following specs: Core 2 Duo 2Ghz with 4MB onboard cache, 2GB RAM, 7200 RPM 80GB HDD, 256MB nVdia card and no webcam (It was too unattractive). The mailing scale at work tells me that this all comes in at 4.5 pounds, give or take some quarter ounces.

I'm currently using Vista Enterprise and the Windows Experience Base Score is a 3.3. The average score, however, is 4.2.
| Windows User Experience Base Index | |
| Processor Calcs per sec. | 4.9 |
| RAM Memory Operations Per Sec | 4.5 |
| Graphics | 3.6 |
| Gaming Graphics | 3.3 |
| Primary Hard Disk | 4.8 |
The performance is incredible (SuperPI calculates 1 million digits in 26s) and it's quiet, sturdy and the cooling system is awesome. My employer called a few weeks after I bought it to tell me I could pick up a Dell 420 but I passed with no regrets. I haven't been this happy about a laptop since I got a SuperSlim PCG-N505VX back in 1999.

Anyone have these results from a Macbook Pro or Regular? I'd be interested to see what they report.
UPDATE: danboe.net released his scores. The regular seems to be about the same speed as mine. The Macbook Pro's score kicked ass all around though.
Vista: Infinintely Extend Activation Grace Period using Task Scheduler
TweakVista.com is one of my favorite Vista sites. Yesterday, they posted something that I had in mind for posting on this blog but now they've saved me the trouble
"Extend Activation Period past 180 days" has step-by-step instructions for using Task Scheduler to legally and permanently delay the Activation requirement. This should work for awhile.. at least until Microsoft decides to release a patch to stop the workaround.
Kickin My Macbook to the Curb
I believe I have a pretty high tolerance for inconveniences but I just couldn't take it: running Windows Server 2003 as a primary OS on Macbook blows.
As a fan of Unix, Windows and beautiful UIs, I promised myself I would put down any amount of money for a small Macbook the day it came out and I did just that. Then I ran back to work and attempted a Windows Server 2003 install. I never liked Windows XP and all the free crap it had to offer; I wanted a bare bones, unrestricted workstation and Win2k3 gave me that. It took about a week of hacking but I finally got the drivers installed. From there, my Macbook looked sexy and was super fast but ultimately became an utter inconvenience. As you can see from the sidebar, one of my most popular posts is about running Windows 2003 on a Macbook. I feel for those poor souls and can only hope they don't plan to use Win2k3 as their primary OS. As a friend said, "The Macbook is great. It's just not great for you."
So I've bought a new beauty and I love it, but before I get there, let me outline what sucks about running Win2k3 on a Macbook.
- This applies to all Macbooks: inconsistent yet persistent fan issues. I don't care what you or you or you say, fans aren't supposed to sound that way. And it's not cool. Speaking of not cool, the Macbook gets way hot at times.
- Remapping the keyboard to a Windows layout makes for a nasty delay after coming back from standby. The InputRemapper software from that guy works very well, I just don't like the wait.
- If you want Bluetooth in Win2k3 to work, you have to run hid2hci every time it comes back from being on standby.
- Built-in microphone jack + loud fans = impossible to make CBTs.
- Power management sucks.
- Will installing Leopard mess up my hacked 2k3 install? Will Parallels replace Bootcamp at some point, leaving me with no real option to boot Windows natively? I don't know but wondering causes stress.
- No right click. I mapped the right Apple key to it but still.
So here I sit at Tommy's Joynt in San Francisco drinking coriander spiced beer and playing on my new Dell XPS M1210. I spent the past two weeks deciding between buying the super sexy but slower Sony Vaio, the equally sexy & slow new Fujitsu LED backlit Lifebook or this pretty-damn-affordable-and-unattractive-yet-lightweight-powerhouse from Dell. Dells just aren't pretty. I often wonder if Ford Motor outsources their car designers to Dell. Sure, you can make a laptop that looks like this..but why?
My new Dell lacks visual appeal (in my opinion) but makes up for it with its incredible amount of power. I've got a Core 2 Duo with 4MB of on-board cache (stylin' like a Xeon), 2 GB of RAM, 80GB 7200 RPM HDD and a 256MB nVidia card.. And to top it off, it's about 4.5lbs and retailed for about $2300 after tax, warranty, shipping and all that. Now I'm finally running Vista Enterprise with nothing but drivers, something I never really expected to do. But I really like it (also unexpected). "WOW" not so much but it's definitely a long overdue improvement. Here's my top favorite features so far
- I don't need third party drivers to output my laptop display solely to my monitor. Finally!
- The System Tray is cleaner and more informative
- Vista Enteprise doesn't come with extra crap I don't need or want
- Aero is really nice. I like how the taskbar now has popups to show you whats going on.
- The search actually works. Searching in Windows, especially when searching inside files for text, was broken by Microsoft in XP and 2003. Even NT returns more accurate matches. How was this not noticed by engineers at Microsoft? I'm thinking it was a way to make people frustrated enough to install that Live Search bar.
- Task scheduler and Event Viewer are super improved
- The Windows Orb (formerly the Start button) is a big improvement over XP.
- Dynamic disk resizing -- even on the windows partition
This page has a great outline of some of the new features and it also includes screenshots. Actually, the more tweaks and tricks I find, the more I realize that my initial list is going to change a ton over time. Something cool I just found is called "Additional Clocks" which allows you to add additional time information to the system tray clock hover. You can add up to 2 additional clocks.. I just added Louisiana and GMT.
A few things suck about Vista, including some networking issues but overall, I'm really digging both Vista and the Dell XPS M1210 I've named CRACKLIN. As for the Macbook, I've sold it to a Mac fan who can put it to better use.



