Exchange 2013 Performance Health Checker Script

Awesome Script Smile
This script checks various configuration items on the server to make sure they match the recommendations published in the “Exchange 2013 Sizing and Configuration Recommendations” guidance on TechNet.  It also reports on OS, system, and hardware information.  It can be ran remotely, against a single server or a group of servers.  It takes some of the most common configuration causes of Exchange 2013 performance cases that we encounter in support and allows you to rule them out quickly without having to check each server or read through the entire TechNet guidance. 

This script needs to be executed from the Exchange 2013 Management Shell.

Here is a current list of items the script reports on:

Operation System version
Exchange Build
Physical/Virtual Machine
Server Manufacturer and Model (physical hardware only)
VM host processor/memory configuration recommendations
Exchange server roles
Pagefile Size
Power Settings
.NET Framework version
Network card name and speed
Network card driver date and version (Windows 2012 and Windows 2012 R2 only)
RSS enabled (Windows 2012 and Windows 2012 R2 only)
Physical Memory amount
Processor Model
Number of processors, cores, and core speed
Hyper-threading enabled/disabled
Processor speed being throttled
Current list of active/passive databases and mailboxes (optional)

HealthChecker

Download: https://gallery.technet.microsoft.com/Exchange-2013-Performance-23bcca58

MDT Packages & WSUS a very nice feature.

I long time ago I wrote a acticle mdt-automatisch-updates-via-wsus-laten-installeren-tijdens-het-deployen-van-het-os (Dutch) about using wsus with MDT.

After you deploy a Windows 7 SP1 machine updating takes a lot of time.

You can slipstream windows security updates when you deploy a machine… Windows 7 / Windows 8 / Windows 2008 R2 / Windows 2012.

How you do this: It’s quit simpley. Import de WSUS Content in to Packages.

 1

2

3

4

5

The error is normal because not everything is imported.

Important:

Delete every time you do this. Update & Hotfix packages. If you don’t you will end in a error state when you deploy a machine.

Add Extra Windows 2012 server to DirectAccess NLB Cluster

First you install Server 2012 and you add the Remote Access Server Role.

And Install

KB2788525: You cannot enable external load balancing on a Windows Server 2012-based DirectAccess server.

 

Add or Remove Server

image

image

image

image

image

image

image

Migrate a certificate authority from Windows 2008 R2 to Windows 2012

Today I was moving my testlab enterprise root CA from a Windows 2008 r2 server to a new Windows 2012 with a different server name. To accomplish this, I used this excellent Technet Post . I encountered no problems!

Windows 2012 DirectAccess Quick & Dirty

Install Server 2012. Join Server to your Domain.

image

Select Behind an Edge Device
Public name voor mij is dat is: thuis.wardvissers.nl

image

Remote Access Review & Next
image
View Remote Access Review

image

Finish

image

Overview

image

image

Policy’s

image

Windows 8 Client

image

I have a Firewall/NAT router. So you need open some ports
image

 

DirectAccess works great. Every where I work I have access to my docs & email.

Windows 8 – Customizing the Default Lock Screen

The update “Windows 8 and Windows Server 2012 cumulative update: November 2012” adds functionality to the Control Panel group polices that allow an administrator to designate a lock screen image on their Windows 8 and Windows 2012 computers. This setting lets you specify the default lock screen image shown when no user is signed in, and also sets the specified images as the default for all users (it replaces the inbox default image) Some restriction apply. See the Restrictions section below.
The new group policy is named “Force a specific default lock screen image” and can be found in this path in the group policy editor: “Computer Configuration\Policies\Administrative Templates\Control Panel\Personalization”

Requirements
:
To deploy the new “Force a specific default lock screen image”  GP the following requirements must be met:

  1. The update “Windows 8 and Windows Server 2012 cumulative update: November 2012” must be applied to all Windows 8 and Windows Server 2012 computers that you want to deploy customer lock screen images to. This is required as the Control Panel group policy client side extension must be updated to enforce the group policy
  2. The group policy used to deploy the custom lock screen image must be edited on a machine that has been patched with “Windows 8 and Windows Server 2012 cumulative update: November 2012”

Restrictons

  • Windows 8 Enterprise or Windows Server 2012 can use the new GP “Force a specific default lock screen image” via Domain GP or via local GP
  • Windows 8 Pro can also be a target of the GP if the machine is joined to a domain

Implementation Steps for Domain Based Group Policy

  1. Patch all system with update “Windows 8 and Windows Server 2012 cumulative update: November 2012” KB 2770917
  2. Create a GPO and link it to the OU where the computer accounts are located that you want to deploy the custom lock screen image to. Alternatively you can use an existing GPO.
    a. Open the Group Policy Management Console (GPMC)
    b. Create and link a GPO to an OU or Locate an existing GPO that you want to use
  3. Create and link a GPO to an OU or Locate an existing GPO that you want to use
    a. In GPMC right click the GPO from step 2b and select edit
    b. Go this path “Computer Configuration\Policies\Administrative Templates\Control Panel\Personalization”
    c. Enable the GP “Force a specific default lock screen image”
    d. Specify the path to the image file. It is recommended to use a DFS network path to provide redundancy.
  4. After Sysvol replication has occurred and clients have refreshed their group policy settings the new lock screen will be used.

Implementation Steps for Local Group Policy

1.      Patch the system with update “Windows 8 and Windows Server 2012 cumulative update: November 2012” KB 2770917
2.      Edit Local Policy
a.       Run GPEDIT.MSC
b.      Go this path “Computer Configuration\Policies\Administrative Templates\Control Panel\Personalization”
c.       Enable the GP “Force a specific default lock screen image”
d.      Specify the path to the image file.
e.       Click OK
3.      Policy will be enforced as the next GP background refresh.

Windows 8 en Server 2012 KMS Service Activation

For Licensing Server 2012 and Windows 8 on a Windows 2008 R2 server you need to update the KMS Service.

Install the following update: An update is available for Windows 7 and Windows Server 2008 R2 KMS hosts to support Windows 8 and Windows Server 2012 as described in KB2691586.
If you don’t install this hotfix registering a Windows Server 2012 KMS will throw an Error: 0xC004F050 The Software Licensing Service reported that the product key is invalid

So request the hotfix and install it. Just follow the instructions and you’ll be fine clip_image001

We can start putting our brand new KMS key into action.

Uninstall the current KMS key using slmgr.vbs /upk clip_image002

clip_image003

Now you can install the new KMS key. The key listed here is obviously a demo one clip_image002[1]If you run in to any issues here, restarting the KMS Service can help. Try that first.

slmgr.vbs /ipk NOPEI-AMNOT-GIVIN-GITTO-YOU!

clip_image004

Now activate your brandnew KMS key running slmgr.vbs /ato
clip_image005

We run slmgr.vbs /dlv again and as you can see now we can activate all our Windows 2012 servers and Windows 8 computers

clip_image006

Windows Assessment and Deployment Kit (ADK) and vSphere 4 does not work together

When you using vSphere 4 and and using MDT 2012 update1 with Windows Assessment and Deployment Kit you run in de following error. Same thing wil also with Workstation 8.clip_image001

Solution 1: Do not install Windows Assessment and Deployment Kit on your MDT Server. You can still using MDT 2012 Update 1 with waik 3.5 if not deploying Windows 8 or Windows 2012 right now.

Solution 2: Upgrading you vSphere server to the latest version (5.1) or Upgrade Workstation to latest version (Version 9).