We’re starting to see more and more of what I’m going to call the “cloud effect” in operating systems.

Annoying but ignorable errors that make it hard to figure out what’s really going on.

If I don’t reboot my SBS 2008 production server once a month – I will get this annoying error message in my backups

Speaking of errors that everywhere you turn are told to ignore this that the system is running fine is this one that pops up on my server if I haven’t rebooted in 30 days.

DATE / TIME   5/30/2011 11:00:22 PM
MESSAGE Volume Shadow Copy Service error: Unexpected error VSS_E_WRITER_STATUS_NOT_AVAILABLE. An older active writer session state is being overwritten by a newer session. The most common cause is that the number of parallel backups has exceeded the maximum supported limit. hr = 0x80042409.
PostSnapshot Event
Maximum supported sessions: 64
Completed sessions: 8
Active sessions: 64
Aborted sessions: 0
Writer failed sessions: 0
New snaphot set: {782dd431-d4b0-49b6-9d4f-a36834f86338}
Old snapshot set: {4147229b-b95d-49d6-b187-b11b3db586a7}
Old operation: 1014
Old state: 1
Old failure: 0
Execution Context: Writer
Writer Class Id: {cd3f2362-8bef-46c7-9181-d62844cdc0b2}
Writer Name: MSSearch Service Writer
Writer Instance ID: {45a13773-f9c5-491a-8bdb-8e0470fa3420}


Doesn’t occur on Server 2008 R2 mind you.  And if you dig around you are told to ignore:

Error message when you perform a Volume Shadow Copy Service restore operation: “0x80042409”:

That’s nice folks but it makes it hard to see if you are really having issues or not.  You kinda can’t ignore what you are told to ignore.

To all of those folks that think that other stuff we’re told to ignore in SBS 2011 is a little bit annoying to be told to ignore all of these in SBS 2011 – http://support.microsoft.com/kb/2483007 keep the faith.  We have an open bug and am hoping to come to a better resolution – so stay tuned.  You have to be careful not to adjust too much as one of the “workaround” to get the VSS error in SBS 2011 to shut up – by removing the SharePoint in the VSS registry section – turns out it has a nasty side effect – it removes the SharePoint from the application backup section so it’s not as easy to restore.

Be careful when you start mucking around in there that you make inadvertently cause a side effect you weren’t thinking of.

Why do I call this the ‘cloud effect’ btw?  It’s because once all of this stuff is in the cloud then someone else is ignoring this and it’s their problem to deal with. 


So you want to do folder redirection on your SBS -Essentials and you’ve heard of this Win7 plug in thingy but you don’t want to wait for it?

No problem, just use plain old group policy.

Go to start, then to group policy management console,

Do a new group policy object

Now this is where the group policy purests will argue for how they set up group policy, SBS did them at the root of the domain.

My main thing is label it what you want.

Now right mouse click and edit

Now drill under – \User Configuration\Policies\Windows Settings\Folder Redirection

Now see all of the settings you can redirect?  Now you are probably looking at me and going.. okay but how do you turn it on?

Right mouse click on the folder name of what you want to redirect and click on properties.

In the properties tab you have the option to do basic redirection or advanced

You then get the option of redirecting to a specific location

You then pick a folder on the server (or set one up)

On the settings tab, you can choose to let the admin have access to the folder and allow the folder to move back to the local machine should the policy be removed.

The last little bit tricky step is to set up a WMI filter so that Vista/Win7 machines get more granular redirects then XP by setting a WMI filter.

About now if you are thinking – man I need a safety net — you do.  In the form of an existing  SBS 2008 or SBS 2011.  You can export out the group policies from a demo box of SBS 2008 or SBS 2011 standard and import it into Essentials – http://msmvps.com/blogs/bradley/archive/2010/08/30/a-bit-of-group-policy-for-aurora.aspx

In fact I’ll bet that gives you more control than the Win7 folder redirect plug in since it’s reported to only work with Win7.  (I haven’t seen it yet but I’ll betcha it’s just the wmi filter controlling it to work on Win7).

In SBS 2011 standard in fact there is no wmi filter at all, the redirection just dumps into a folder.

Documents are redirected:

Desktop is redirected:

Pictures is set to follow the documents folder

Music is set to follow the documents folder (you may want to not have that follow)

Videos is set to follow the documents folder

Bottom line, sometimes it’s easier to look at a policy someone else has set up and steal ideas from it.


So as a fyi the test I’m doing on Multipoint isn’t really a good test, it’s just a proof of concept.  Why do I say that?  Because it’s in a hyperV server and not on real hardware.

To really see Multipoint shine you have to see it on real hardware.


But when you want to play/test/just get an idea of how software works, stick it in a HyperV or vmware.  In this case you ultimately want this on real iron, not in a HyperV to get the best results.

You could also have the Multipoint act as the HyperV host (but I’ll admit when I first went – oh how cool – I wasn’t thinking of how if you domain join the MultiPoint to the SBS you will have a tough time with it being the host of a sbs domain.)

So when you are learning – I’d strongly suggest looking to have some sort of virtualization platform to test and play.

So far the multipoint server looks easier to know where/how to enter the cals for the RDS/Multipoint sessions.  Remember you need multipoint cals and Windows server cals IF you are in a normal network, but in a SBS Standard one, the Windows cals are covered by the SBS standard cals.

Don’t forget to watch this video as well:  http://www.youtube.com/user/msmultipoint#p/u/4/tftu_AqcCgI


So when the multipoint finishes the wizard we’re now set to set up the multiple workstations.

We then get to log in

And now on a Win7-ish background the console loads up

This is where you start to see the MAJOR bling of the Multipoint server.. this is where it’s the Las Vegas glitz version of Remote Desktop Services

For those of you with SBS-Standard and Essentials that console showcases that MultiPoint is a cousin of the family.

It’s here in this console that you get to control all the workstations/Remote Desktop/Terminal Server sessions in an easy to control console.

(more later tonght – have to clean up the house and garden a bit)


Starting to install a test of Multipoint Server and realized that I didn’t really know the minimum specs for a play box.

So I downloaded this: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=501ba465-382f-41cb-bbea-b9bf580e2bb2 in order to figure out what the minimums were.  Another good document is here:  http://www.microsoft.com/downloads/en/details.aspx?FamilyID=7E762CE6-562D-449D-BE0D-52C0103EDF60

Remember multipoint is wizardized remote desktop services server.

You download the ISO and start the install and the Multipoint boots with the normal server 2008 r2 interface..

Click okay to the EULA

I just picked the default of OS size – you’ll probably want larger


You then do the dumb thing where you choose upgrade or custom… which given this is a brand new install you can only do custom…

And it begins to install

It reboots a couple of times and then you are prompted to change the password:

And intially you sit there at a Win7ish looking desktop thinking… uh…where’s the console

And then the Multipoint wizard setup starts up

You need to name the server

Set the updates and participation in feedback

And then it configs

And it’s finished


That’s it for tonight’s edition of “what’s multipoint…”  Tomorrow I’ll blogging more about what it does and how we’re going to join it to the SBS Essentials domain.

The key to installing the SQL is making sure you are logged in as the domain admin when you install it so it can see the SBS domain.

How to Add the Premium Add-On Server to a SBS 2011 Domain – SQL Role – TechNet Articles – Home – TechNet Wiki:

If you have an nasty SQL issues I’d advise you to check out Edwin at www.thirdtier.net

How to Add the Premium Add-On Server to a SBS 2011 Domain – TS/RDS role – TechNet Articles – Home – TechNet Wiki:

So what PowerShell do you use in your SBS network?

PowerShell Not your Father’s Command Line Part 19 of 31: Small Business Server, PowerShell, and Me – Matt Hester’s WebLog – Site Home – TechNet Blogs:

If your name is Sean – you do this:

Add-IPBlockListProvider -Name “Zen Spamhaus” -LookupDomain zen.spamhaus.org -AnyMatch $True -Enabled $True -RejectionResponse “{1} has blocked your IP address ({0}) using the list ‘{2}’. Please see www.spamhaus.org/…/bl{0} for further information.”

Add-IPBlockListProvider -Name “Passive Spam Blacklist” -LookupDomain psbl.surriel.com -AnyMatch $True -Enabled $True -RejectionResponse “{1} has blocked your IP address ({0}) using the list ‘{2}’. Please see psbl.surriel.com/listing{0} for further information.”

Enable-AntispamUpdates -SpamSignatureUpdatesEnabled $true -UpdateMode Automatic -IPReputationUpdatesEnabled $true

Set-SenderFilterConfig -Enabled $true

Set-SenderIDConfig -TempErrorAction Reject

set-OrganizationConfig -SCLJunkThreshold 5

set-ContentFilterConfig -SCLRejectThreshold 7 -SCLRejectEnabled:$true

set-ContentFilterConfig -RejectionResponse “Email Rejected due to Content Filter”