Small Business Susan

SBS 2011 bpa updated!

http://support.microsoft.com/kb/2600333
http://blogs.technet.com/b/sbs/archive/2011/09/29/windows-server-solutions-bpa-updated-september-2011.aspx

Okay gang kick the tires, see if it now finds stuff.

New best practices

After you install this update, the Windows Server Solutions BPA performs the following checks:
  1. Checks whether the application pool for Remote Web Access uses the default account
  2. Checks whether the application pool for Remote Web Access uses the default version of the .NET Framework
  3. Checks whether the application pool for Remote Web Access uses the default Managed Pipeline Mode
  4. Checks whether the application pool for Remote Web Access uses the default bit version
  5. Checks whether the built-in Administrators group has the "Log on as a batch job" user right
  6. Checks whether the Windows Firewall is enabled
  7. Checks whether the DNS host (A) resource record points to the correct IP address
  8. Checks whether the internal network adapter is configured to register the IP address of the network adapter in DNS
  9. Checks whether the values of the DNS ForwardingTimeout registry key and the RecursionTimeout registry key are identical
  10. Checks whether the extension mechanisms for DNS (EDNS) is enabled
  11. Checks whether the forward DNS zone of your Active Directory domain allows for secure updates
  12. Checks whether the forward DNS zone allows for secure updates
  13. Checks whether Internet Explorer Enhanced Security Configuration is enabled for the Administrators group
  14. Checks whether Internet Explorer Enhanced Security Configuration is enabled for the Users group
  15. Checks whether the source server is in the Active Directory Sites and Services snap-in
  16. Checks whether the source server is in the SBSComputer organizational unit (OU)
  17. Checks whether the MaxCacheTTL DNS parameter is not set
  18. Checks whether a Windows Small Business Server (SBS) Group Policy is missing 
  19. Checks whether there are DNS name server resource records in the forward lookup zone
  20. Checks whether there are DNS name server records in the _msdcs zone
  21. Checks whether there are DNS name server records for the delegated _msdcs forward lookup zone.
  22. Checks whether Windows SBS is the Domain Naming Master (if Windows SBS is the Domain Naming Master, you will receive a confirmation message)
  23. Checks whether Windows SBS is the Infrastructure Master (if Windows SBS is the Infrastructure Master, you will receive a confirmation message)
  24. Checks whether Windows SBS is the Primary Domain Controller Master (if Windows SBS is the Primary Domain Controller Master, you will receive a confirmation message)
  25. Checks whether the Authenticated Users group is a member of the Pre-Windows 2000 Compatible Access group
  26. Checks whether Windows SBS is the Relative ID (RID) Master (if Windows SBS is the RID Master, you will receive a confirmation message)
  27. Checks whether the DNS client is configured correctly
  28. Checks whether Windows SBS is the Schema Master (if Windows SBS is the Schema Master, you will receive a confirmation message)
  29. Checks whether the value of the RootVeer registry entry for the .NET Framework is correct 
  30. Checks whether the server cannot ping
  31. Checks whether the value of the Remote Desktop Protocol (RDP) port is the default value
  32. Checks whether the value of the SysvolReady registry key is correct
  33. Checks whether the Sysvol folder is shared
  34. Checks whether the free disk space is very low
  35. Checks whether the value of the default Application Pool is changed
  36. Checks whether the Certification Authority name may cause errors
  37. Checks whether the value of the OriginalMachineName(90) registry key is correct
  38. Checks whether the value of the OriginalMachineName(100) registry key is correct
  39. Checks whether the version of Exchange Server 2010 is the release version
  40. Checks whether Windows SBS is in a journal wrap condition
  41. Checks whether the external remote procedure call (RPC) authentication is not set to the default method
  42. Checks whether the internal RPC authentication is not set to the default method
  43. Checks whether the version of Windows Server 2008 R2 is the release version
  44. Checks whether Simple Mail Transfer Protocol (SMTP) is installed
  45. Checks whether there are empty Servers containers
  46. Checks whether the accepted domain for Exchange is not the default domain
  47. Checks whether the application pool for SharePoint uses the default account
  48. Checks whether the application pool for SharePoint uses the default version of the .NET Framework
  49. Checks whether the application pool for SharePoint uses the default Managed Pipeline Mode
  50. Checks whether the application pool for SharePoint uses the default bit version
  51. Checks whether the application pool for PowerShell uses the default account
  52. Checks whether the application pool for PowerShell uses the default version of the .NET Framework
  53. Checks whether the application pool for PowerShell uses the default Managed Pipeline Mode
  54. Checks whether the application pool for PowerShell uses the default bit version


8 comments ↓

  • #   Geoff Brown (UK) on 09.30.11 at 5:28 am     

    > Okay gang kick the tires, see if it now finds stuff.

    No matter how hard I try I can’t get the BPA to show in the SBS Console on SBS 2011 Standard, nor does it show an update icon in the systray when run, so I can’t get it to update or integrate. Hence it still does nothing…


  • #   Pete P on 09.30.11 at 9:02 am     

    Oops…looks like I missed removing an empty Exchange container and source server from AD Sites and Services from a migration several months back.


  • #   Josiah Rocke on 09.30.11 at 5:02 pm     

    ditto on the not showing up in SBS console or updating. It won’t work! Any help?


  • #   Barry Kemp on 10.01.11 at 8:56 am     

    Uninstall the BPA and reinstall it. Make sure you allow it to integrate into the SBS Console and Allow it to update.


  • #   Lyle Epstein on 10.02.11 at 1:36 am     

    If it is not showing up, make a change to the registry key. I posted details/step by step on my blog, http://blog.korteksolutions.com/windows-server-solutions-bpa-updated-september-2011-but-is-not-prompting-for-update/

    Lyle


  • #   Geoff Brown (UK) on 10.04.11 at 2:46 am     

    I checked this reg key and it is already set to 1. I have also reinstalled the BPA and allowed it to integrate and to update. It does neither. Not the most impressive bit of software I’ve seen.

    Geoff


  • #   Rob on 10.06.11 at 12:15 am     

    Same problem here, manually running bpaupdate.exe does nothing either! I have also tried uninstall/reinstall and the regedit trick…


  • #   bradley on 10.06.11 at 12:18 am     

    Rob can you ping me at susan-at-msmvps.com?