SBS 2011 standard – reminder of why manually joining is okay

So you are joining a workstation to a SBS 2011 standard  and connect isn’t working?  Just like Essentials, check out the log files

But unlike Essentials they are in a different location:

They are located at C:\Program Files (x86)\Microsoft Windows Small Business Server\Clients

But also unlike Essentials , you can manually join the clients to the domain  The ONLY think you lose if you don’t use connect is the move profile wizard.  If that’s not a biggie or you have other ways to move the profile data, manually joining the domain is an acceptable alternative. 

Happy Spring

Sweet peas blooming this morning


Foxgloves also in bloom in the front flower beds

Listening to a bit of UK Gardening radio shows while in the office this afternoon.

While we may have rain (we need it!) tomorrow, today we’re hitting 83 degrees today!  Ack it’s too warm for spring!

Happy Spring and Happy Easter to all.


Pick one.

Issue with Automatic Updates Enabled & Office Web Apps Server 2013 Update – Doug Deitterick’s Blog – Site Home – TechNet Blogs:

Example of why we don’t want a SBS like thing ever built again.


Example of why Microsoft cannot build Server products that can automatically update.

Pick one.

The disclosure on patching

Windows 8 Calendar App and the Great Google Flip-Flop | Windows 8 content from Paul Thurrott’s SuperSite for Windows:

“That said, Microsoft could have done a better job of communicating this change. The official blog post announcing the updated communications apps doesn’t mention this issue at all.”

What he said.

I realize that these Win8 store apps are not normal “patches” but I’m not a fan of this new era of no details of Windows 8 updates.  And I’m really not a fan of promising one thing and ending up doing another.

Not good Microsoft, not good.

Server flagged as failing IIS BEAST vulnerability

Since the wiki site is barfing tonight… I’m trying to add this to the PCI DSS document on the wiki and it will also be in the SMB Kitchen doc on PCI DSS

Server flagged as failing IIS BEAST vulnerability

Solution courtesy of Bob Groger on the SBS2k listserve:
Client used Trustwave for their PCI DSS scans and they kept failing for BEAST vulnerability. I did all the registry edits, rearranged cipher orders, rescanned for hours. It either failed, or RWW didn’t work. Finally I found the tool at and followed the instructions at

Code 800B0001 Windows update ran into a problem

That error code should read “yo Susan, ya blogged about it enough, you’d think you’d remember to install it on your network”

Deploy Windows 2012 as a hyperV member server and join it to a domain where WSUS is deployed.  If you haven’t installed An update for Windows Server Update Services 3.0 Service Pack 2 is available (KB2734608):  you will hit an issue (not right away mind you) where you’ll see 

Windows could not search for new updates

Error(s) found:

Code 800B0001 Windows update ran into a problem

And because it can’t go to WU the help file tells you nothing. 

But googling or remember that you haven’t installed that WSUS update yet because you said to yourself “I don’t have Windows 8 machines, why do I need that update…”

Duh, I DO have Server 2012 though.

File this under dumb moves

Cloud Essentials/Accelerate Top Ten FAQs – Microsoft Partners Forum:

Hello Partners,


In an effort to clarify many Cloud program questions, I want to share with you the top ten frequently asked questions.


How do I resell Cloud Services to my client?

To learn more about becoming a Microsoft Cloud Services Partner, please see our enrollment information at


Where do I obtain my benefits for being a Cloud Partner?

Instructions and information about the benefits you are entitled to can be located by navigating to and selecting the appropriate product. Note: You must be a Global Administrator or higher within the Microsoft Partner Network and have the Microsoft Online Services Partner Agreement signed to access these benefits.


What are the requirements to join Cloud Essentials?

You are now automatically enrolled into Cloud Essentials when you sign the Microsoft Online Services Partner Agreement within the Partner Program portal.


How do I obtain charity pricing for my non-profit/charity clients?

Please contact your local Regional Service Center to open a request for charity pricing. Please be ready to provide the following information:

Non-profit Organization Name

Organization Address

If within the United States, provide EIN (Employer Identification Number): XX-XXXXXXX

If within the United Kingdom or Canada, provide Registered Charity number

If in any country other than those above, provide company website.

Office 365 plan requested (E2 or E3)

Number of seats


How do I purchase additional subscriptions on an Office 365 account?

Additional subscriptions can be purchased directly from the Microsoft Online Portal using a Company Administrator account.


Can I switch to a different subscription?

As long as you do not have a Small Business Plan 1 (or P1) account, you can mix and match different subscriptions within the same tenant. This is done by purchasing subscriptions through the Microsoft Online Portal and contacting your local Regional Service Center to cancel any unused subscriptions and re-assigning the appropriate license.


My client needs more time to trial the subscription; can I get a trial extension?

To request a trial extension, please contact your local Regional Service Center.


How much do charities or non-profits pay for an Office 365 subscription?

At this time we cannot provide the prices to these types of subscriptions. To obtain pricing, please contact your local Regional Service Center using the information found on question 4 above.


I’m having a problem with my subscription, the billing of a subscription, or I need to cancel my subscription.

If you, as the Partner, are encountering issues with your subscription or your client’s subscription, please contact your local Regional Service Center.


How do I add my Partner of Record to a client using an Enterprise Agreement?

Please fill out the latest form found at and submit it to your local Regional Service Center.


I hope the above information can be of great use to everyone.


Best regards,



Partner Support Community



We hope you get value from our new forums platform! Tell us what you think:


Direct Access and Essentials – go around the port

If you are following this direct access document.  Instead of this command:

Set-NetNatTransitionConfiguration –IPv4AddressPortPool @(“, 10000-46499″,”, 46499-47000” )

You want this command instead:

Set-NetNatTransitionConfiguration –IPv4AddressPortPool @(“, 6001-6601”, “, 6603-47000”)

(Of course change the IP range to be your network range as needed)

The issue is port 6602 is grabbed by the server for Windows Server solutions stuff and upon reboot DA can grab that port.

Documentation connect bug has been raised, so hopefully the next time you need this the command will ensure that 6602 is kept clear.

Wanting to migrate from Server 2003 and can’t?

So you have an Essentials 2012 and want to migrate from Windows Server 2003 and can’t?

You’ll want to check out this workaround….

Server migration tool problem:
I’m trying to migrate a Windows 2003 SP2 (R1) to Server 2012 Essentials. It won’t allow migration until the Server Migration Tool is run on the old server. However, it stops at the beginning of the process with an error that the DFS Replication service is not running. But as far as I know, the DFS Replication service did not exist until Server 2003 R2. How can I get around this?


1. Open SBSMigrationPrep.ps1 located in C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Baseline Configuration Analyzer

2\Models\SBSMigrationPrep in Notepad.
Find “DFSR”
3. We will get the function as shown bellow
function Check-DFSReplicationServiceStatus()
$service = Get-Service -Name ‘DFSR’
$status = $service.Status
< DFSReplicationServiceStatusSection>
< /DFSReplicationServiceStatusSection>

4. Change the contents of “$service = Get-Service -Name ‘DFSR'” to $service = Get-Service -Name ‘DFS’

Once we have done this re-run the Migration and Preparation Tool

John Harris – a SBSer that touched us all

John Harris, Longtime SBSer, Passes… – SMB Nation Blogs:

If you ever deployed SBS 2003 you probably got touched by John Harris.  As Microsoft wanted to get up close and personal with interaction with small businesses, he was located near the area where SBS 2003 was developed. So he was one of the fearless TAP partners who let Microsoft developers loose on their clients.

(from SBS Unleashed book)

All of us who ever used the Small Business platform benefitted from his generousity and volunteerism over the years.

My condolences to his family and friends and anyone else impacted by this loss.