Synchronize time with external NTP server on a Windows 2008 Server R2 DC

We have seen errors where users are not able to login to external SAAS applications on the Internet if the time sync is not correct. By default, the clients on a Windows network will get their time from a DC and DC gets its time from PDC. It is important that the PDC is syncronized from an external reliable source. Before you start this, make sure that if you have a firewall you open port 123 UDP both inbound and outbound.
1. Go to your PDC server, if you are not sure then open up a command prompt on a dc and type
c:\>netdom /query fsmo
You should see your PDC in the list
2. Login to the PDC and open up a command prompt and stop the W32time service
net stop w32time
3. Configure external time source, at the command prompt type:
C:\> w32tm /config /syncfromflags:manual /manualpeerlist:”0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org”
4. Make the PDC a reliable time source for the clients on the network type:
c:\>w32tm /config /reliable:yes
5. Start the w32time service: c:\>net start w32time
6. The windows time service should now begin to synchronize the time, external NTP servers can be checked in the time configuration by typing:
c:\>w32tm /query /configuration
7. check the Event Viewer for any errors.

HTTP 400 - Bad Request

When you attempt to connect to a web site using the BlackBerry® Browser on a BlackBerry smartphone, you receive the following error message:

HTTP 400 - Bad Request

When you click on details it shows

SocketException Connection Reset

We had this issue with all of our blackberry handheld devices when users were browsing websites that were blocked by company webfilter through policies. If you want to allow access to websites that you don't generally allow then you must put in exceptions for your BES server to bypass the webfilter or allow access to your BES server to the specific websites that you are receiving the above error message for.

Duplicate Records found on device - Cannot synchronize blackberry

Overview

The following error message appears on the BlackBerry Desktop Manager when you synchronize data on the BlackBerry smartphone:

Duplicate records found on the device.

---

Cause

The BlackBerry smartphone is unable to synchronize some or all of the entries in the database of the organizer application.

---

Resolution

Complete the following tasks in sequence until the problem is resolved.

Task 1 - Download and install the BlackBerry Device Software

Download and install the latest version of the BlackBerry® Device Software from your wireless service provider's web site. Contact your wireless service provider for instructions on how to install the BlackBerry® Desktop Software.

To determine which version of the BlackBerry Device Software is currently installed on your BlackBerry smartphone, complete the following steps:

1. From the Home screen of the BlackBerry smartphone, go to Options > About.

Task 2

Complete the following steps:

1. Identify which organizer application database is causing the error by completeing the following steps:
   1. Connect the BlackBerry smartphone to your computer.
   2. Open BlackBerry Desktop Manager.
   3. Double-click Intellisync or Synchronize.
   4. Click Configure PIM, or select the Configuration tab and click Configure Synch.
   5. Clear the check boxes beside all but one of the BlackBerry smartphone applications, and click OK.
   6. Select the Synchronize PIM check box, and then click Synchronize Now.
   7. Repeat steps 3 to 5 until the error message appears.
   8. Take note of which application is selected when the error appears.
2. Clear the database on the BlackBerry smartphone by completing the following steps:
   1. In BlackBerry Desktop Manager, double-click Backup and Restore.
   2. Click Advanced.
   3. In the Handheld Databases list box, select the database that is causing the error message.
   4. Click Clear.
   5. Click OK.
   6. Click Close.
   7. Click Close to return to the main BlackBerry Desktop Manager screen.
3. Synchronize the organizer data on the BlackBerry smartphone with your computer.

China requires PCs to come with anti-porn software - Kansas City Star

China requires PCs to come with anti-porn software - Kansas City Star

Shared via AddThis

Xen App server - MMC failed to create empty document

When trying to launch any application that uses MMC, an error appeared Microsoft Management Console - failed to create empty document.

Solution:

I checked the knowledgebase article on Microsoft website that talks about checking for the Temp folder location and disk space on the hard-drive. My setttings appeared to be fine, the Temp location was at c:\documents and settings\%username%\local settings\temp

It seemed that the profile for the user logging in was corrupt, I was able to resolve the issue by deleting the user's roaming profile.

Can not reach company website from internal network

Our internal and external domain are the same, for this discussion let's assume that domain is "somedomain.com". We switched webhost and we started to have issues with not being able to reach our company website "www.somedomain.com" from the internal network. If your internal and external domains are the same, then your internal computers will look for "www.somedomain.com" to be inside your network, even if your DNS forwarders are working fine. If you are having same issue then you have to know that there are couple of things you have to do in your internal DNS so that your internal computers can resolve your website, www.somedomain.com.

In your Internal Network on your DNS server create a new Forward Lookup Zone. Go through the new Zone creation wizard. When asked for name, name this Zone www
After the zone is created, created a Host (A) Record in this forward lookup zone that points to the IP address of the host that is hosting your website. You can leave the name blank, your host record would look something like this.

Eg.

same as parent folder Host (A) 67.45.45.45 (this is the IP address of the external host)



Please note, that if you know the FQDN (fully qualified domain name) of the host that is hosting your external website then you don't have to create the new zone, you can just create an Alias (Cname) record in the Forward lookup zone of your domain pointing to the FQDN of that host.

Eg.

www CNAME virtual.sitehost.com

SSL Certificate Expiration error on Web Interface Server after renewing

Yesterday I renewed our SSL Certificate on Citrix Web Interface Server. I went through the drill of creating the CSR and then sending it to Entrust. After renewing the certificate in IIS, the user's were still getting the error that the Certificate was expired.

We have Citrix Secure Gateway installed on the WI server, turns out after you renew the certificate in the IIS, you have to run the CSG configuration wizard to replace the current certificate. When you run the CSG wizard there will be a step where you will be shown your old certificate and your new one, you just pick the new one and complete the wizard and that should take care of the above issue.