<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:pingback="http://madskills.com/public/xml/rss/module/pingback/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>john kelly - Win|2003</title>
    <link>http://blog.johnkelly.co.uk/</link>
    <description>blackrock consultants</description>
    <language>en-us</language>
    <copyright>john kelly</copyright>
    <lastBuildDate>Tue, 20 Aug 2013 16:42:32 GMT</lastBuildDate>
    <generator>newtelligence dasBlog 2.2.8279.16125</generator>
    <managingEditor>mail@johnkelly.co.uk</managingEditor>
    <webMaster>mail@johnkelly.co.uk</webMaster>
    <item>
      <trackback:ping>http://blog.johnkelly.co.uk/Trackback.aspx?guid=3b2d7b83-24ab-4af8-8a87-d84efba18cc0</trackback:ping>
      <pingback:server>http://blog.johnkelly.co.uk/pingback.aspx</pingback:server>
      <pingback:target>http://blog.johnkelly.co.uk/PermaLink,guid,3b2d7b83-24ab-4af8-8a87-d84efba18cc0.aspx</pingback:target>
      <dc:creator>Your DisplayName here!</dc:creator>
      <wfw:comment>http://blog.johnkelly.co.uk/CommentView,guid,3b2d7b83-24ab-4af8-8a87-d84efba18cc0.aspx</wfw:comment>
      <wfw:commentRss>http://blog.johnkelly.co.uk/SyndicationService.asmx/GetEntryCommentsRss?guid=3b2d7b83-24ab-4af8-8a87-d84efba18cc0</wfw:commentRss>
      <body xmlns="http://www.w3.org/1999/xhtml">Try:<br /><br />
1. rsm view /tlibrary then use result for rsm /refresh /lf"library_name" (eg rsm refresh
/lf"IBM ULTRIUM HH-3 TAPE DRIVE")<br /><br />
2. restart rsm service<br /><br />
3. compmgmt.msc; removable storage; work queue; errors, delete jobs, etc<br /><br />
4. rebuild rsm database:<br /><br />
1) Go to <strong>Start</strong> &gt; <strong>Control</strong><strong>Panel</strong> &gt; <strong>Administrative</strong><strong>Tools</strong> &gt; <strong>Services</strong> and
find the <em><strong>Removable</strong><strong>Storage</strong></em><strong><em>service</em>.</strong><br />
2) Right click on the Removable Storage service, select Properties, change the ‘<strong>Startup</strong><strong>type</strong>:’
to <strong>Disabled</strong> and click ok.<br />
3) Restart the machine<br />
4) When the machine is running again open Windows Explorer and navigate to the <strong>C:\Windows\system32\ntmsdata\</strong> directory 
(or some other variation depending on the operating system, just pick the directory
where Windows is installed and go from there)<br />
5) In that directory rename all the files to <strong>*.OLD</strong> or move them to
another temp folder.<br />
6) Go back to the Removable Storage service (see step 1) go to properties and change
the ‘<strong>Startup type</strong>:’ back to <strong>Automatic</strong>.<br />
7) Restart the machine again<br /><br /><p></p><img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=3b2d7b83-24ab-4af8-8a87-d84efba18cc0" /></body>
      <title>ntbackup restore stuck at "Mounting Media"</title>
      <guid isPermaLink="false">http://blog.johnkelly.co.uk/PermaLink,guid,3b2d7b83-24ab-4af8-8a87-d84efba18cc0.aspx</guid>
      <link>http://blog.johnkelly.co.uk/2013/08/20/ntbackupRestoreStuckAtMountingMedia.aspx</link>
      <pubDate>Tue, 20 Aug 2013 16:42:32 GMT</pubDate>
      <description>Try:&lt;br&gt;
&lt;br&gt;
1. rsm view /tlibrary then use result for rsm /refresh /lf"library_name" (eg rsm refresh
/lf"IBM ULTRIUM HH-3 TAPE DRIVE")&lt;br&gt;
&lt;br&gt;
2. restart rsm service&lt;br&gt;
&lt;br&gt;
3. compmgmt.msc; removable storage; work queue; errors, delete jobs, etc&lt;br&gt;
&lt;br&gt;
4. rebuild rsm database:&lt;br&gt;
&lt;br&gt;
1) Go to &lt;strong&gt;Start&lt;/strong&gt; &amp;gt; &lt;strong&gt;Control&lt;/strong&gt; &lt;strong&gt;Panel&lt;/strong&gt; &amp;gt; &lt;strong&gt;Administrative&lt;/strong&gt; &lt;strong&gt;Tools&lt;/strong&gt; &amp;gt; &lt;strong&gt;Services&lt;/strong&gt; and
find the &lt;em&gt;&lt;strong&gt;Removable&lt;/strong&gt; &lt;strong&gt;Storage&lt;/strong&gt;&lt;/em&gt; &lt;strong&gt;&lt;em&gt;service&lt;/em&gt;.&lt;/strong&gt;
&lt;br&gt;
2) Right click on the Removable Storage service, select Properties, change the ‘&lt;strong&gt;Startup&lt;/strong&gt; &lt;strong&gt;type&lt;/strong&gt;:’
to &lt;strong&gt;Disabled&lt;/strong&gt; and click ok.&lt;br&gt;
3) Restart the machine&lt;br&gt;
4) When the machine is running again open Windows Explorer and navigate to the &lt;strong&gt;C:\Windows\system32\ntmsdata\&lt;/strong&gt; directory&amp;nbsp;
(or some other variation depending on the operating system, just pick the directory
where Windows is installed and go from there)&lt;br&gt;
5) In that directory rename all the files to &lt;strong&gt;*.OLD&lt;/strong&gt; or move them to
another temp folder.&lt;br&gt;
6) Go back to the Removable Storage service (see step 1) go to properties and change
the ‘&lt;strong&gt;Startup type&lt;/strong&gt;:’ back to &lt;strong&gt;Automatic&lt;/strong&gt;.&lt;br&gt;
7) Restart the machine again&lt;br&gt;
&lt;br&gt;
&lt;p&gt;
&lt;/p&gt;
&lt;img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=3b2d7b83-24ab-4af8-8a87-d84efba18cc0" /&gt;</description>
      <comments>http://blog.johnkelly.co.uk/CommentView,guid,3b2d7b83-24ab-4af8-8a87-d84efba18cc0.aspx</comments>
      <category>ntbackup</category>
      <category>Win/2003</category>
    </item>
    <item>
      <trackback:ping>http://blog.johnkelly.co.uk/Trackback.aspx?guid=5825ae5e-a874-46be-907c-0dc521147702</trackback:ping>
      <pingback:server>http://blog.johnkelly.co.uk/pingback.aspx</pingback:server>
      <pingback:target>http://blog.johnkelly.co.uk/PermaLink,guid,5825ae5e-a874-46be-907c-0dc521147702.aspx</pingback:target>
      <dc:creator>Your DisplayName here!</dc:creator>
      <wfw:comment>http://blog.johnkelly.co.uk/CommentView,guid,5825ae5e-a874-46be-907c-0dc521147702.aspx</wfw:comment>
      <wfw:commentRss>http://blog.johnkelly.co.uk/SyndicationService.asmx/GetEntryCommentsRss?guid=5825ae5e-a874-46be-907c-0dc521147702</wfw:commentRss>
      <slash:comments>2</slash:comments>
      <body xmlns="http://www.w3.org/1999/xhtml">Error message appears upon extending disk
volume in Disk Management and new size isn't reported in Explorer (although is in
Disk Management).<br /><br /><b>Solution</b><br /><br />
DISKPART<br /><br />
DISKPART&gt; List volume<br /><br />
DISKPART&gt; Select volume #<br /><br />
DISKPART&gt; extend filesystem<br /><br />
DISKPART&gt; exit<br /><br />
(Works on 2003 post SP1, Paragon allows for system partition expansion (in realtime)))<br /><p></p><img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=5825ae5e-a874-46be-907c-0dc521147702" /></body>
      <title>Extend Win 2008 Volume (Parameter is Incorrect)</title>
      <guid isPermaLink="false">http://blog.johnkelly.co.uk/PermaLink,guid,5825ae5e-a874-46be-907c-0dc521147702.aspx</guid>
      <link>http://blog.johnkelly.co.uk/2013/01/15/ExtendWin2008VolumeParameterIsIncorrect.aspx</link>
      <pubDate>Tue, 15 Jan 2013 12:07:13 GMT</pubDate>
      <description>Error message appears upon extending disk volume in Disk Management and new size isn't reported in Explorer (although is in Disk Management).&lt;br&gt;
&lt;br&gt;
&lt;b&gt;Solution&lt;/b&gt;
&lt;br&gt;
&lt;br&gt;
DISKPART&lt;br&gt;
&lt;br&gt;
DISKPART&amp;gt; List volume&lt;br&gt;
&lt;br&gt;
DISKPART&amp;gt; Select volume #&lt;br&gt;
&lt;br&gt;
DISKPART&amp;gt; extend filesystem&lt;br&gt;
&lt;br&gt;
DISKPART&amp;gt; exit&lt;br&gt;
&lt;br&gt;
(Works on 2003 post SP1, Paragon allows for system partition expansion (in realtime)))&lt;br&gt;
&lt;p&gt;
&lt;/p&gt;
&lt;img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=5825ae5e-a874-46be-907c-0dc521147702" /&gt;</description>
      <comments>http://blog.johnkelly.co.uk/CommentView,guid,5825ae5e-a874-46be-907c-0dc521147702.aspx</comments>
      <category>Win/2003</category>
      <category>win/2008</category>
    </item>
    <item>
      <trackback:ping>http://blog.johnkelly.co.uk/Trackback.aspx?guid=fb0b5903-dd62-4a82-8d27-b9a143f0e4a8</trackback:ping>
      <pingback:server>http://blog.johnkelly.co.uk/pingback.aspx</pingback:server>
      <pingback:target>http://blog.johnkelly.co.uk/PermaLink,guid,fb0b5903-dd62-4a82-8d27-b9a143f0e4a8.aspx</pingback:target>
      <dc:creator>Your DisplayName here!</dc:creator>
      <wfw:comment>http://blog.johnkelly.co.uk/CommentView,guid,fb0b5903-dd62-4a82-8d27-b9a143f0e4a8.aspx</wfw:comment>
      <wfw:commentRss>http://blog.johnkelly.co.uk/SyndicationService.asmx/GetEntryCommentsRss?guid=fb0b5903-dd62-4a82-8d27-b9a143f0e4a8</wfw:commentRss>
      <body xmlns="http://www.w3.org/1999/xhtml">
        <p>
%systemroot%\Inetpub\Adminscripts
</p>
        <p>
adsutil.vbs Set MSFTPSVC/DefaultLogonDomain "DOMAIN" [include quotes]
</p>
        <p>
Restart FTP service
</p>
        <p>
 
</p>
        <img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=fb0b5903-dd62-4a82-8d27-b9a143f0e4a8" />
      </body>
      <title>IIS6 FTP use domain accounts</title>
      <guid isPermaLink="false">http://blog.johnkelly.co.uk/PermaLink,guid,fb0b5903-dd62-4a82-8d27-b9a143f0e4a8.aspx</guid>
      <link>http://blog.johnkelly.co.uk/2009/01/31/IIS6FTPUseDomainAccounts.aspx</link>
      <pubDate>Sat, 31 Jan 2009 17:49:54 GMT</pubDate>
      <description>&lt;p&gt;
%systemroot%\Inetpub\Adminscripts
&lt;/p&gt;
&lt;p&gt;
adsutil.vbs Set MSFTPSVC/DefaultLogonDomain "DOMAIN" [include quotes]
&lt;/p&gt;
&lt;p&gt;
Restart FTP service
&lt;/p&gt;
&lt;p&gt;
&amp;nbsp;
&lt;/p&gt;
&lt;img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=fb0b5903-dd62-4a82-8d27-b9a143f0e4a8" /&gt;</description>
      <comments>http://blog.johnkelly.co.uk/CommentView,guid,fb0b5903-dd62-4a82-8d27-b9a143f0e4a8.aspx</comments>
      <category>Win/2003</category>
    </item>
    <item>
      <trackback:ping>http://blog.johnkelly.co.uk/Trackback.aspx?guid=dd1f4ecc-4aca-43e5-99f5-38694cba9d27</trackback:ping>
      <pingback:server>http://blog.johnkelly.co.uk/pingback.aspx</pingback:server>
      <pingback:target>http://blog.johnkelly.co.uk/PermaLink,guid,dd1f4ecc-4aca-43e5-99f5-38694cba9d27.aspx</pingback:target>
      <dc:creator>Your DisplayName here!</dc:creator>
      <wfw:comment>http://blog.johnkelly.co.uk/CommentView,guid,dd1f4ecc-4aca-43e5-99f5-38694cba9d27.aspx</wfw:comment>
      <wfw:commentRss>http://blog.johnkelly.co.uk/SyndicationService.asmx/GetEntryCommentsRss?guid=dd1f4ecc-4aca-43e5-99f5-38694cba9d27</wfw:commentRss>
      <body xmlns="http://www.w3.org/1999/xhtml">
        <p>
One or more of the following:
</p>
        <ol>
          <li>
In adapter's TCP/IP DNS properties untick "register in DNS" 
</li>
          <li>
Stop DNS server listening on IP of adapter 
</li>
          <li>
Add the following DWORD = 1</li>
        </ol>
        <p>
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\&lt;Interface
name&gt;\DisableDynamicUpdate
</p>
        <p>
 
</p>
        <img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=dd1f4ecc-4aca-43e5-99f5-38694cba9d27" />
      </body>
      <title>Stop Registration of Secondary NIC in DNS</title>
      <guid isPermaLink="false">http://blog.johnkelly.co.uk/PermaLink,guid,dd1f4ecc-4aca-43e5-99f5-38694cba9d27.aspx</guid>
      <link>http://blog.johnkelly.co.uk/2008/10/29/StopRegistrationOfSecondaryNICInDNS.aspx</link>
      <pubDate>Wed, 29 Oct 2008 15:29:19 GMT</pubDate>
      <description>&lt;p&gt;
One or more of the following:
&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;
In adapter's TCP/IP DNS properties untick "register in DNS" 
&lt;li&gt;
Stop DNS server listening on IP of adapter 
&lt;li&gt;
Add the following DWORD = 1&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\&amp;lt;Interface
name&amp;gt;\DisableDynamicUpdate
&lt;/p&gt;
&lt;p&gt;
&amp;nbsp;
&lt;/p&gt;
&lt;img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=dd1f4ecc-4aca-43e5-99f5-38694cba9d27" /&gt;</description>
      <comments>http://blog.johnkelly.co.uk/CommentView,guid,dd1f4ecc-4aca-43e5-99f5-38694cba9d27.aspx</comments>
      <category>Win/2003</category>
      <category>win/2008</category>
    </item>
    <item>
      <trackback:ping>http://blog.johnkelly.co.uk/Trackback.aspx?guid=b1f9b581-7550-46ed-903a-f93a54a8e340</trackback:ping>
      <pingback:server>http://blog.johnkelly.co.uk/pingback.aspx</pingback:server>
      <pingback:target>http://blog.johnkelly.co.uk/PermaLink,guid,b1f9b581-7550-46ed-903a-f93a54a8e340.aspx</pingback:target>
      <dc:creator>Your DisplayName here!</dc:creator>
      <wfw:comment>http://blog.johnkelly.co.uk/CommentView,guid,b1f9b581-7550-46ed-903a-f93a54a8e340.aspx</wfw:comment>
      <wfw:commentRss>http://blog.johnkelly.co.uk/SyndicationService.asmx/GetEntryCommentsRss?guid=b1f9b581-7550-46ed-903a-f93a54a8e340</wfw:commentRss>
      <body xmlns="http://www.w3.org/1999/xhtml">
        <p>
Disable the following Windows Server 2003 services:
</p>
        <ol>
          <li>
ERSvd - Error Reporting Service</li>
          <li>
HidServ - Human Interface Device Access (keyboard buttons, remotes, etc)</li>
          <li>
IsmServ - Intersite Messaging (except for AD replication across subnets, smtp intersite
replication, etc)</li>
          <li>
ScardSvr - Smart Card Access 
</li>
          <li>
LMHosts - TCP/IP NetBIOS Helper (no legacy hosts)</li>
        </ol>
        <p>
 
</p>
        <p>
 
</p>
        <p>
        </p>
        <img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=b1f9b581-7550-46ed-903a-f93a54a8e340" />
      </body>
      <title>Disable W2K3 Services</title>
      <guid isPermaLink="false">http://blog.johnkelly.co.uk/PermaLink,guid,b1f9b581-7550-46ed-903a-f93a54a8e340.aspx</guid>
      <link>http://blog.johnkelly.co.uk/2008/06/04/DisableW2K3Services.aspx</link>
      <pubDate>Wed, 04 Jun 2008 17:29:44 GMT</pubDate>
      <description>&lt;p&gt;
Disable the following Windows Server 2003 services:
&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;
ERSvd - Error Reporting Service&lt;/li&gt;
&lt;li&gt;
HidServ - Human Interface Device Access (keyboard buttons, remotes, etc)&lt;/li&gt;
&lt;li&gt;
IsmServ - Intersite Messaging (except for AD replication across subnets, smtp intersite
replication, etc)&lt;/li&gt;
&lt;li&gt;
ScardSvr - Smart Card Access 
&lt;/li&gt;
&lt;li&gt;
LMHosts - TCP/IP NetBIOS Helper (no legacy hosts)&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;
&amp;nbsp;
&lt;/p&gt;
&lt;p&gt;
&amp;nbsp;
&lt;/p&gt;
&lt;p&gt;
&lt;/p&gt;
&lt;img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=b1f9b581-7550-46ed-903a-f93a54a8e340" /&gt;</description>
      <comments>http://blog.johnkelly.co.uk/CommentView,guid,b1f9b581-7550-46ed-903a-f93a54a8e340.aspx</comments>
      <category>Win/2003</category>
    </item>
    <item>
      <trackback:ping>http://blog.johnkelly.co.uk/Trackback.aspx?guid=49f66b9d-107c-463d-927a-ca29f33f16a5</trackback:ping>
      <pingback:server>http://blog.johnkelly.co.uk/pingback.aspx</pingback:server>
      <pingback:target>http://blog.johnkelly.co.uk/PermaLink,guid,49f66b9d-107c-463d-927a-ca29f33f16a5.aspx</pingback:target>
      <dc:creator>Your DisplayName here!</dc:creator>
      <wfw:comment>http://blog.johnkelly.co.uk/CommentView,guid,49f66b9d-107c-463d-927a-ca29f33f16a5.aspx</wfw:comment>
      <wfw:commentRss>http://blog.johnkelly.co.uk/SyndicationService.asmx/GetEntryCommentsRss?guid=49f66b9d-107c-463d-927a-ca29f33f16a5</wfw:commentRss>
      <body xmlns="http://www.w3.org/1999/xhtml">
        <p>
Sharepoint Central Administration<br />
Virtual Server Configuration<br />
Configure virtual server settings<br />
Default Web Site<br />
Virtual Server Management<br />
Define managed paths<br />
Add New path -&gt; certsrv -&gt; Excluded path<br />
OK
</p>
        <p>
See: <a href="http://www.microsoft.com/technet/prodtechnol/biztalk/2006/library/a4swift/39916663-b80e-49d8-ba9b-49276eb564fc.mspx?mfr=true">http://www.microsoft.com/technet/prodtechnol/biztalk/2006/library/a4swift/39916663-b80e-49d8-ba9b-49276eb564fc.mspx?mfr=true</a></p>
        <img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=49f66b9d-107c-463d-927a-ca29f33f16a5" />
      </body>
      <title>certsrv on Sharepoint</title>
      <guid isPermaLink="false">http://blog.johnkelly.co.uk/PermaLink,guid,49f66b9d-107c-463d-927a-ca29f33f16a5.aspx</guid>
      <link>http://blog.johnkelly.co.uk/2008/02/24/certsrvOnSharepoint.aspx</link>
      <pubDate>Sun, 24 Feb 2008 16:00:32 GMT</pubDate>
      <description>&lt;p&gt;
Sharepoint Central Administration&lt;br&gt;
Virtual Server Configuration&lt;br&gt;
Configure virtual server settings&lt;br&gt;
Default Web Site&lt;br&gt;
Virtual Server Management&lt;br&gt;
Define managed paths&lt;br&gt;
Add New path -&amp;gt; certsrv -&amp;gt; Excluded path&lt;br&gt;
OK
&lt;/p&gt;
&lt;p&gt;
See: &lt;a href="http://www.microsoft.com/technet/prodtechnol/biztalk/2006/library/a4swift/39916663-b80e-49d8-ba9b-49276eb564fc.mspx?mfr=true"&gt;http://www.microsoft.com/technet/prodtechnol/biztalk/2006/library/a4swift/39916663-b80e-49d8-ba9b-49276eb564fc.mspx?mfr=true&lt;/a&gt;
&lt;/p&gt;
&lt;img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=49f66b9d-107c-463d-927a-ca29f33f16a5" /&gt;</description>
      <comments>http://blog.johnkelly.co.uk/CommentView,guid,49f66b9d-107c-463d-927a-ca29f33f16a5.aspx</comments>
      <category>vpn</category>
      <category>Win/2003</category>
    </item>
    <item>
      <trackback:ping>http://blog.johnkelly.co.uk/Trackback.aspx?guid=fb8b4420-f60e-423a-9102-abcb5c91a04a</trackback:ping>
      <pingback:server>http://blog.johnkelly.co.uk/pingback.aspx</pingback:server>
      <pingback:target>http://blog.johnkelly.co.uk/PermaLink,guid,fb8b4420-f60e-423a-9102-abcb5c91a04a.aspx</pingback:target>
      <dc:creator>Your DisplayName here!</dc:creator>
      <wfw:comment>http://blog.johnkelly.co.uk/CommentView,guid,fb8b4420-f60e-423a-9102-abcb5c91a04a.aspx</wfw:comment>
      <wfw:commentRss>http://blog.johnkelly.co.uk/SyndicationService.asmx/GetEntryCommentsRss?guid=fb8b4420-f60e-423a-9102-abcb5c91a04a</wfw:commentRss>
      <body xmlns="http://www.w3.org/1999/xhtml">
        <p>
Can't install Service Pack (or some/all other updates) directly, from Windows Update
or by WSUS.  See <a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;822798">http://support.microsoft.com/default.aspx?scid=kb;en-us;822798</a> for
solutions.
</p>
        <p>
This worked for me:
</p>
        <p>
create batch file (catroot2.cmd)
</p>
        <p>
net stop cryptsvc 
<br />
ren %systemroot%\System32\Catroot2 oldcatroot2 
<br />
net start cryptsvc 
<br />
cd %systemroot%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}<br />
del /Q tmp*.cat<br />
exit
</p>
        <p>
Then delete all tmp*.cat files from %systemroot%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
(or add to batch file, as above)
</p>
        <img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=fb8b4420-f60e-423a-9102-abcb5c91a04a" />
      </body>
      <title>Cannot Install Windows 2003 SP2</title>
      <guid isPermaLink="false">http://blog.johnkelly.co.uk/PermaLink,guid,fb8b4420-f60e-423a-9102-abcb5c91a04a.aspx</guid>
      <link>http://blog.johnkelly.co.uk/2007/05/17/CannotInstallWindows2003SP2.aspx</link>
      <pubDate>Thu, 17 May 2007 14:32:34 GMT</pubDate>
      <description>&lt;p&gt;
Can't install Service Pack (or some/all other updates) directly, from Windows Update
or by WSUS.&amp;nbsp; See &lt;a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;822798"&gt;http://support.microsoft.com/default.aspx?scid=kb;en-us;822798&lt;/a&gt;&amp;nbsp;for
solutions.
&lt;/p&gt;
&lt;p&gt;
This worked for me:
&lt;/p&gt;
&lt;p&gt;
create batch file (catroot2.cmd)
&lt;/p&gt;
&lt;p&gt;
net stop cryptsvc 
&lt;br&gt;
ren %systemroot%\System32\Catroot2 oldcatroot2 
&lt;br&gt;
net start cryptsvc 
&lt;br&gt;
cd %systemroot%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}&lt;br&gt;
del /Q tmp*.cat&lt;br&gt;
exit
&lt;/p&gt;
&lt;p&gt;
Then delete all tmp*.cat files from %systemroot%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
(or add to batch file, as above)
&lt;/p&gt;
&lt;img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=fb8b4420-f60e-423a-9102-abcb5c91a04a" /&gt;</description>
      <comments>http://blog.johnkelly.co.uk/CommentView,guid,fb8b4420-f60e-423a-9102-abcb5c91a04a.aspx</comments>
      <category>win</category>
      <category>Win/2003</category>
      <category>win/sbs</category>
      <category>win/xp</category>
      <category>wsus</category>
    </item>
    <item>
      <trackback:ping>http://blog.johnkelly.co.uk/Trackback.aspx?guid=9eb723cb-0bfd-4e6b-b326-6874553e5fec</trackback:ping>
      <pingback:server>http://blog.johnkelly.co.uk/pingback.aspx</pingback:server>
      <pingback:target>http://blog.johnkelly.co.uk/PermaLink,guid,9eb723cb-0bfd-4e6b-b326-6874553e5fec.aspx</pingback:target>
      <dc:creator>Your DisplayName here!</dc:creator>
      <wfw:comment>http://blog.johnkelly.co.uk/CommentView,guid,9eb723cb-0bfd-4e6b-b326-6874553e5fec.aspx</wfw:comment>
      <wfw:commentRss>http://blog.johnkelly.co.uk/SyndicationService.asmx/GetEntryCommentsRss?guid=9eb723cb-0bfd-4e6b-b326-6874553e5fec</wfw:commentRss>
      <body xmlns="http://www.w3.org/1999/xhtml">
        <p>
Just some notes:
</p>
        <p>
          <a href="http://support.microsoft.com/kb/926182">http://support.microsoft.com/kb/926182</a>
        </p>
        <p>
          <hr />
        </p>
        <p>
        </p>
        <p>
I order to run  an IPSEC/NAT-T type VPN you need to insert the following
registry keys on the client : 
<br /><br /><b>XP SP2:</b><br /><br />
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPsec] 
</p>
        <div>
        </div>
        <p>
          <font size="2"> "AssumeUDPEncapsulationContextOnSendRule"=dword:00000002” 
<br /><br /><b><span class="high">Vista</span>: 
<br /></b><br />
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent] 
<br />
"AssumeUDPEncapsulationContextOnSendRule"=dword:00000002” 
<br /><br />
Now... I'm not quite sure that these alone will help you get connected. 
<br />
Make sure that since you are connecting from a non-domain member that you certificate
is properly installed. 
<br /><br />
Import the Administrator-Cert to both 
<br />
Local Machine: "Personal" &amp; "Trusted Root Certification Authorities" 
<br /><br />
This in combination with the above registry-hack should do it. 
<br /><br />
BTW: The one for SP 2 is documented in: </font>
          <a href="http://support.microsoft.com/default.aspx?kbid=885407" target="_blank">
            <font size="2">http://support.microsoft.com/default.aspx?kbid=885407</font>
          </a>
          <br />
          <br />
          <font size="2">The one for <span class="high">Vista</span> is not... but it works  <img src="http://forums.isaserver.org/image/s4.gif" /></font>
        </p>
        <p>
          <font size="2">[TX Geir Johansen, isaserver.org]</font>
        </p>
        <p>
          <font size="2">
            <p>
              <hr />
            </p>
            <p>
OK, here is a way to do it (but it is not an easy 
<br />
solution). 
</p>
            <p>
1) You need to use certmgr.msc on the Vista Client 
<br />
2) You need to generate Custom Request in the console 
<br />
(see Create a Custom Certificate Request in the Help 
<br />
file). 
<br />
3) Best to add Custom subject information (be sure to 
<br />
include an Alternate Name that includes the User 
<br />
Principal Name 
<br />
4) Save the file to a PKCS#10 request 
</p>
            <p>
              <br />
Create a custom v2 certificate template that allows the 
<br />
Subject to be created in the Request. Base it on the 
<br />
template you want to use (for the love of G*D, do not 
<br />
use User &lt;G&gt;) Ensure that the template is available at 
<br />
the CA you are using. Assume it is named VistaUser 
</p>
            <p>
              <br />
You now use the Certsrv Web page to submit the request 
<br />
1) Connect to <a href="https://CAName/certsrv">https://CAName/certsrv</a><br />
2) Provide credentials from the domain 
<br />
3) Choose Request a Certificate 
<br />
4) CHoose Advanced Certificate Request 
<br />
5) Choose Submit a certificate request by using a base-   
<br />
64-encoded CMC or PKCS #10 file, or submit a renewal 
<br />
request by using a base-64-encoded PKCS #7 file. 
<br />
6) Paste the contents of the file created in the first 
<br />
procedure into the Saved Request box 
<br />
7) Choose the VistaUser template in the Certificate 
<br />
Template sectino 
<br />
8) Click Submit 
<br />
9) Save the issued certificate to a PKCS#7 file (all 
<br />
certs in the chain) 
</p>
            <p>
              <br />
Go back to the Vista box 
<br />
1) Import the PKCS#7 file 
<br />
2) Put all certs in the Personal store (for now) 
<br />
3) Once the import is complete, move the CA certificates 
<br />
into the appropriate stores (root in the root, all other 
<br />
CAs in the intermediate store 
<br />
4) Use the certificate 
</p>
            <p>
              <br />
Brian 
<br />
P.S. Please do not ask for more detailed steps &lt;G&gt; 
</p>
            <p>
              <br />
In article &lt;D85CB163-D832-4D40-B009-B5A28A685BF0 
<br />
@microsoft.com&gt;, <a href="mailto:S...@discussions.microsoft.com">S...@discussions.microsoft.com</a> says... 
</p>
            <p>
              <br />
 
</p>
            <p>
            </p>
          </font>
          <img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=9eb723cb-0bfd-4e6b-b326-6874553e5fec" />
        </p>
      </body>
      <title>L2TP IPSec Win2003 - Vista</title>
      <guid isPermaLink="false">http://blog.johnkelly.co.uk/PermaLink,guid,9eb723cb-0bfd-4e6b-b326-6874553e5fec.aspx</guid>
      <link>http://blog.johnkelly.co.uk/2007/02/14/L2TPIPSecWin2003Vista.aspx</link>
      <pubDate>Wed, 14 Feb 2007 20:26:40 GMT</pubDate>
      <description>&lt;p&gt;
Just some notes:
&lt;/p&gt;
&lt;p&gt;
&lt;a href="http://support.microsoft.com/kb/926182"&gt;http://support.microsoft.com/kb/926182&lt;/a&gt;
&lt;/p&gt;
&lt;p&gt;
&lt;hr&gt;
&lt;p&gt;
&lt;/p&gt;
&lt;p&gt;
I order to run&amp;nbsp; an IPSEC/NAT-T type VPN you&amp;nbsp;need to insert the following
registry keys on the client : 
&lt;br&gt;
&lt;br&gt;
&lt;b&gt;XP SP2:&lt;/b&gt; 
&lt;br&gt;
&lt;br&gt;
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPsec] 
&lt;/p&gt;
&lt;div&gt;
&lt;/div&gt;
&lt;p&gt;
&lt;font size=2&gt;&amp;nbsp;"AssumeUDPEncapsulationContextOnSendRule"=dword:00000002” 
&lt;br&gt;
&lt;br&gt;
&lt;b&gt;&lt;span class=high&gt;Vista&lt;/span&gt;: 
&lt;br&gt;
&lt;/b&gt;
&lt;br&gt;
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent] 
&lt;br&gt;
"AssumeUDPEncapsulationContextOnSendRule"=dword:00000002” 
&lt;br&gt;
&lt;br&gt;
Now... I'm not quite sure that these&amp;nbsp;alone will help you get connected. 
&lt;br&gt;
Make sure that since you are connecting from a non-domain member that you certificate
is properly installed. 
&lt;br&gt;
&lt;br&gt;
Import the Administrator-Cert to both 
&lt;br&gt;
Local Machine: "Personal"&amp;nbsp;&amp;amp; "Trusted Root Certification Authorities" 
&lt;br&gt;
&lt;br&gt;
This in combination with the above registry-hack should do it. 
&lt;br&gt;
&lt;br&gt;
BTW: The one for SP 2 is documented in: &lt;/font&gt;&lt;a href="http://support.microsoft.com/default.aspx?kbid=885407" target=_blank&gt;&lt;font size=2&gt;http://support.microsoft.com/default.aspx?kbid=885407&lt;/font&gt;&lt;/a&gt; 
&lt;br&gt;
&lt;br&gt;
&lt;font size=2&gt;The one for &lt;span class=high&gt;Vista&lt;/span&gt; is not... but it works&amp;nbsp;&amp;nbsp;&lt;img src="http://forums.isaserver.org/image/s4.gif"&gt; &lt;/font&gt;
&lt;/p&gt;
&lt;p&gt;
&lt;font size=2&gt;[TX Geir Johansen, isaserver.org]&lt;/font&gt;
&lt;/p&gt;
&lt;p&gt;
&lt;font size=2&gt; 
&lt;p&gt;
&lt;hr&gt;
&lt;/p&gt;
&lt;p&gt;
OK, here is a way to do it (but it is not an easy 
&lt;br&gt;
solution). 
&lt;/p&gt;
&lt;p&gt;
1) You need to use certmgr.msc on the Vista Client 
&lt;br&gt;
2) You need to generate Custom Request in the console 
&lt;br&gt;
(see Create a Custom Certificate Request in the Help 
&lt;br&gt;
file). 
&lt;br&gt;
3) Best to add Custom subject information (be sure to 
&lt;br&gt;
include an Alternate Name that includes the User 
&lt;br&gt;
Principal Name 
&lt;br&gt;
4) Save the file to a PKCS#10 request 
&lt;/p&gt;
&lt;p&gt;
&lt;br&gt;
Create a custom v2 certificate template that allows the 
&lt;br&gt;
Subject to be created in the Request. Base it on the 
&lt;br&gt;
template you want to use (for the love of G*D, do not 
&lt;br&gt;
use User &amp;lt;G&amp;gt;) Ensure that the template is available at 
&lt;br&gt;
the CA you are using. Assume it is named VistaUser 
&lt;/p&gt;
&lt;p&gt;
&lt;br&gt;
You now use the Certsrv Web page to submit the request 
&lt;br&gt;
1) Connect to &lt;a href="https://CAName/certsrv"&gt;https://CAName/certsrv&lt;/a&gt; 
&lt;br&gt;
2) Provide credentials from the domain 
&lt;br&gt;
3) Choose Request a Certificate 
&lt;br&gt;
4) CHoose Advanced Certificate Request 
&lt;br&gt;
5) Choose Submit a certificate request by using a base-&amp;nbsp;&amp;nbsp; 
&lt;br&gt;
64-encoded CMC or PKCS #10 file, or submit a renewal 
&lt;br&gt;
request by using a base-64-encoded PKCS #7 file. 
&lt;br&gt;
6) Paste the contents of the file created in the first 
&lt;br&gt;
procedure into the Saved Request box 
&lt;br&gt;
7) Choose the VistaUser template in the Certificate 
&lt;br&gt;
Template sectino 
&lt;br&gt;
8) Click Submit 
&lt;br&gt;
9) Save the issued certificate to a PKCS#7 file (all 
&lt;br&gt;
certs in the chain) 
&lt;/p&gt;
&lt;p&gt;
&lt;br&gt;
Go back to the Vista box 
&lt;br&gt;
1) Import the PKCS#7 file 
&lt;br&gt;
2) Put all certs in the Personal store (for now) 
&lt;br&gt;
3) Once the import is complete, move the CA certificates 
&lt;br&gt;
into the appropriate stores (root in the root, all other 
&lt;br&gt;
CAs in the intermediate store 
&lt;br&gt;
4) Use the certificate 
&lt;/p&gt;
&lt;p&gt;
&lt;br&gt;
Brian 
&lt;br&gt;
P.S. Please do not ask for more detailed steps &amp;lt;G&amp;gt; 
&lt;/p&gt;
&lt;p&gt;
&lt;br&gt;
In article &amp;lt;D85CB163-D832-4D40-B009-B5A28A685BF0 
&lt;br&gt;
@microsoft.com&amp;gt;, &lt;a href="mailto:S...@discussions.microsoft.com"&gt;S...@discussions.microsoft.com&lt;/a&gt; says... 
&lt;/p&gt;
&lt;p&gt;
&lt;br&gt;
&amp;nbsp;
&lt;/p&gt;
&lt;p&gt;
&lt;/p&gt;
&lt;/font&gt;&lt;img width="0" height="0" src="http://blog.johnkelly.co.uk/aggbug.ashx?id=9eb723cb-0bfd-4e6b-b326-6874553e5fec" /&gt;</description>
      <comments>http://blog.johnkelly.co.uk/CommentView,guid,9eb723cb-0bfd-4e6b-b326-6874553e5fec.aspx</comments>
      <category>vista</category>
      <category>vpn</category>
      <category>Win/2003</category>
    </item>
  </channel>
</rss>