Posts

Showing posts from September, 2017

How to check who killed process in windows

Image
In this article, I am going to show you, how to identify the reason behind windows process termination. The procedure is valid on all windows platforms whether its windows 7, 8 10 or Server 2008 R2, 2012 R2 or Windows 2016.However, you need to download the compatible Windows debugging tools kit for Windows 32 bit and 64 bit. Windows debugging tools are part of Windows SDK toolkit. Once you installed Windows debugging tools, you need to open Global Flags. Below is an example of global flag tool. Click Start – All Programs – Windows kit – Global flags. Global Flags (X86) corresponds to 32 bit process monitoring. Global Flags (X64) corresponds to 64 bit process monitoring. In this example, I am going to monitor MS Word 32 bit application. Click Silent Process Exit – Image: (TAB to refresh): winword.exe – hit TAB key to enable other option – Check “ Enable Silent process Exit monitoring. Click Apply and Ok. ...

Windows 10 start button is unresponsive

Image
Some users face a weird issue in Windows 10, when they press Windows key on the keyboard or Click on Windows Icon, they do not get application list. The Windows button is stuck or unresponsive. To solve this problem we can try many fixes, however, this issue is normally related to the user profile. If we login to the same windows machine using another user, we will be able to access Start menu. This happens on domain machines, however, it may happen on local windows 10 system.To resolve this issue, we can force windows to create a new profile. First, take a copy of affected user profile and keep it to secure location. Follow below steps. 1)       Log in to the same computer using Administrator user à Open C Drive à Users à Copy the user folder who have a problem and paste it to another location. 2)       Click Start à Run à Control and press Enter to open Control panel. 3)       Click o...

Unable to print on USB connected printer

If you are unable to print on printer which is connected to Laptop/Desktop using USB cable. To troubleshoot and isolate the issue, follow below steps. 1) Hardware test: First, try to print a test page from the printer itself or if the printer is All in One device then try to make a copy. If you are able to print the test page from the printer that means printer, the hardware is fine. 2) restart the printer spooler service: Click on Start – Run – Services.msc and press Enter to open Services console. Right click on Print Spooler – Click Restart. Try printing. If you are still unable to print then follow below steps to check whether printer is using correct USB port. 3) Click Start – Run – Control and press enter to open Control panel. You can press Windows + R key to open Run command and Windows 7, Windows 8 and Windows 10. Click on Devices and Printers. Right Click on printer – Click on properties – Click on Ports tab. Check whether the DOT4 port is...

Unable to bring CSV volume online on Windows cluster

Sometimes you face weird issue with CSV volume on windows servers; you are unable to bring it online. This can happen on Windows 2008 R2, 2012, 2012 R2 or 2016 cluster servers. You can follow below steps to isolate the issue.    1)       Open Disk Management on Server and check whether you are able to see the provisioned storage volume. If you are unable to see it then please check the zoning on SAN storage or ISCSI configuration and make sure the configuration is correct. If you are not the storage admin then contact the storage admin to check the problem. If you still experience the same problem then follow below steps.    2)       Restart the cluster server one by one; it will help the cluster to properly initialize. It should come online now.    3)       Check and make sure that proper AV exclusion is configured on all servers, you can follow below article from Micr...

The System could not log you on. The revocation status of the smart card certificate used for authentication could not be determined

Image
OS: Windows 7, Windows 10 Server OS: Windows 2003, 2008, 2008 R2, 2012, 2012 R2 and Windows Server 2016 Condition: Error message when we use smart to log in on a domain computer. Cause:  This happens when Certificate Authority (CA) service stopped and CA is unable to publish the CRL (certificate revocation list) and revocation list is expired. Solution : Log in to CA server using CA admin user. Click Start à Run à Services.msc and press Enter to open services console. Check “Active Directory Certificate services”, if the service is stopped, then Right Click à Click on Start. Wait for some time, CA should publish the new CRL. If you want to force the CRL publication then follow below steps. Click Start à Run à Control and Press Enter to open Control Panel. Double Click Administrative tools à Double Click on Certificate Authority. Right Click on Revoked Certificates à All Tasks à Publish Now ask the user to restart their cl...

How to get Hyper-v machines replication status when hyper v replica is enabled

Image
When we enable the Hyper V replica on Windows 2012, 2012 R or 2016 Hyper V servers, to get the details about the hyper-v machine replication is easy from PowerShell as compared to Hyper V console. You can use below command from PowerShell to get the details. Run PowerShell as admin. Run below command Get-VMReplication It will show the details the following details by default. Name, State, Health, Mode, Frequency, Primary Server, ReplicaServer, Replication port, Auth Type and relationship. We can use the same command with pipe fl * to get the complete details. Get-VMReplication | fl * The Same command can run from a remote machine using –Computername parameter. Get-VMReplication –Computername “Severname or IP” .

How to find logon user name on domain computer using power shell command

To find out which user is logged on to a domain computer, we can use one line power shell command. Open PowerShell on Domain Controller or Management PC. Click Start – Search – Windows PowerShell. Right Click on PowerShell and Click on run as administrator. Type below command to get the logged on username. Get-WmiObject –ComputerName “Computername” –Class Win32_ComputerSystem | Select-Object UserName Example: Get-WmiObject –ComputerName testmachine –Class Win32_ComputerSystem | Select-Object UserName You will get the below output. UserName TEST/John.Smith

Unable to print on network connected printer

If you are unable to print on network printer there might be a problem with print device or communication between PC and print device. To troubleshoot the issue follow below steps. 1)    Test print device: To test the print hardware functionality, try to print test page from printer itself, if you are able to print correctly that means, print device is fine. 2)     Now test the communication from PC to print device. Find the IP from the printer panel using below steps. Press Settings button – Scroll down and Select Network Configuration / Preferences – IP Settings – Ipv4 Note down the IP address, now from PC open Command Prompt and Ping to printer IP using below steps. Click Start – Run – cmd and press enter to open the command prompt. Ping IP address of printer and press enter If you get the reply that means communication between PC and print device is fine. Check the print port using below steps. Click Start – Run – Control press enter to open control panel. Note: ...

Unable to print on USB connected printer

If you are unable to print on the printer which is connected to Laptop/Desktop using USB cable. To troubleshoot and isolate the issue, follow below steps. 1) Hardware test: First, try to print a test page from the printer itself or if the printer is All in One device then try to make a copy. If you are able to print the test page from the printer that means printer, the hardware is fine. 2) restart the printer spooler service: Click on Start – Run – Services.msc and press Enter to open Services console. Right click on Print Spooler – Click Restart. Try printing. If you are still unable to print then follow below steps to check whether printer is using correct USB port. 3) Click Start – Run – Control and press enter to open Control panel. You can press Windows + R key to open Run command and Windows 7, Windows 8 and Windows 10. Click on Devices and Printers. Right Click on printer – Click on properties – Click on Ports tab. Check whether the DOT4 or USB port is selected. If not, then se...

How to find logon user name on domain computer using power shell command

To find out which user is logged on to a domain computer, we can use one line power shell command. Open PowerShell on Domain Controller or Management PC. Click Start – Search – Windows PowerShell. Right Click on PowerShell and Click on run as administrator. Type below command to get the logged on username. Get-WmiObject –ComputerName “Computername” –Class Win32_ComputerSystem | Select-Object UserName Example: Get-WmiObject –ComputerName testmachine –Class Win32_ComputerSystem | Select-Object UserName You will get the output like. UserName TEST/John.Smith

How to get Hyper v machines replication status when hyper v replica is enabled

Image
When we enable the Hyper V replica on Windows 2012, 2012 R or 2016 Hyper V servers, to get the details about the hyper v replication is easy from PowerShell as compared to Hyper V console. You can use below command from PowerShell to get the details. Run PowerShell as admin. Run below command. Get-VMReplication It will show the details the following details by default. Name, State, Health, Mode, Frequency, Primary Server, ReplicaServer, Replication port, Auth Type and relationship. We can use the same command with pipe fl * to get the complete details. Get-VMReplication | fl * The Same command can run from a remote machine using –Computername parameter.  Get-VMReplication –Computername “Severname or IP” Below is sample screenshot.

Unable to bring CSV volume online on Windows cluster

Sometimes you face weird issue with CSV volume on windows servers; you are unable to bring it online. This can happen on Windows 2008 R2, 2012, 2012 R2 or 2016 cluster servers. You can follow below steps to isolate the issue.       1)    Open Disk Management on Server and check whether you are able to see the provisioned storage volume. If you are unable to see it then please check the zoning on SAN storage or ISCSI configuration and make sure the configuration is correct. If you are not the storage admin then contact the storage admin to check the problem. If you still experience the same problem then follow below steps.       2)     Restart the cluster server one by one; it will help the cluster to properly initialize. It should come online now.      3)    Check and make sure that proper AV exclusions  are configured on all servers, you can follow below article from Microsoft to configure the Antivir...

Recovery AD User (Active Directory objects) using Active Directory Power Shell in Windows 2012 R2 or Windows 2016

Image
If you delete the active directory user by mistake and AD recycle bin is enabled then you can use AD active directory administrative center to recover it easily. Below is an example of the recovery process of a test user account. Open Active Directory users and computer - Delete test user. Open Power shell module for Active Directory from Admin tools. Click – Run – Control and Press Enter to open Control Panel. Double Click on Administrative tools – Double Click on Power Shell Module for Active Directory. Type below command to get the deleted user Get-ADObject -Filter 'samaccountname -eq "test123"' –IncludeDeletedObjects You can use below command to get the deleted ad user with all properties and then restore it. Get-ADObject -Filter 'samaccountname -eq "test123"' -IncludeDeletedObjects -Properties * Run the below command and it will restore the user. Get-ADObject -Filter 'samaccountname -eq "test123"' -IncludeDeletedObjects -Proper...

Recovery AD User (Active Directory objects) using Active Directory Administrative center in Windows 2012 R2 or Windows 2016

Image
If you delete the active directory user by mistake and AD recycle bin is enabled then you can use AD active directory administrative center to recover it easily. Below is an example of the recovery process of a test user account. Open Active Directory users and computer - Delete test user. Open AD Admin Center from Tools. If you are unable to see the deleted user then refresh ADAC and then check. Right Click test user - Restore It will restore the deleted user. Check in AD and make sure deleted user has restored.

How to check who killed process in windows

Image
In this article, I am going to show you, how to identify the reason behind windows process termination. The procedure in valid on all windows platforms whether its windows 7, 8 10 or Server 2008 R2, 2012 R2 or Windows 2016.However, you need to download the compatible Windows debugging tools kit for Windows 32 bit and 64 bit. Windows debugging tools are part of Windows SDK tool kit. Once you installed Windows debugging tools, you need to open Global Flags. Below is an example of global flag tool. Click Start – All Programs – Windows kit – Global flags. Global Flags (X86) corresponds to 32 bit process monitoring. Global Flags (X64) corresponds to 64 bit process monitoring. In this example, I am going to monitor MS Word 32 bit application. Click Silent Process Exit – Image: (TAB to refresh) : winword.exe – hit TAB key to enable other option – Check “ Enable Silent process Exit monitoring. Click Apply and Ok. Now Open MS Word and Close it normally. You will get event 3000 under Event view...

Easiest way to enable Active Directory (AD) recycle bin on Windows 2012 R2 or Windows 2016 using Active Directory Administrative Center

Image
 By Default AD recycle bin is disabled on fresh AD 2012 R2 or AD 2016. To enable AD recycle bin using AD Admin Center, please follow below steps.   1)       Click on Start icon à Run à Control and press Enter to open Control Panel.   2)Double click on Administrator tools à Double Click on Active Directory Administrative Center. 1       3)       Click on Domain Name (Local) à Under Task à Click on Enable Recycle Bin.           4) It will prompt you to confirm that it feature cannot be disabled. Click Ok.           5)    You will get a message to fresh AD Admin Center. Click Ok.      6)   Refresh AD Admin Center and check after few minutes, you should get a new container named “Deleted Objects”.  Once you see the Deleted Container, it means AD recycle bin is enabled.

How to check whether AD recycle bin is enabled on AD 2008R, 2012, 2012R2 or AD 2016

Image
Use below power shell command to check whether AD recycle bin is enabled or not. Open Active Directory power shell module from Admin tools or Server manager.  Get-ADOptionalFeature -Filter 'name -like "Recycle bin feature"'  If “Enabled Scope” is empty then AD recycle bin is not enabled. Run below power shell command to enable it. Enable-ADOptionalFeature –identity ‘CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,dc=test,dc=com’ –scope ForestConfigurationSet –Target test.com Replace test.com with your corresponding domain name

Unblock gemalto .net smart cards using Gemalto response calculator

Image
Gemalto has provided a utility to calculate the response using Gemalto response calculator so that blocked .net smart cards can be unblocked. First, download and install Gemalto Mini Drive from Gemalto website. Now, push below group policy on all domain client machines so that users can get challenge when their smart cards are blocked. Open Group Policy Management Console à Computer Configuration à Administrative Templates à Windows Components à Smart Card à Enabled “Allow Integrated Unblock screen to be displayed at the time of Logon”. After applying the Group policy, whenever user smart card gets blocked, they will receive a screen which will show them a challenge. Open Gemalto Response Calculator using below steps. Click on Start Menu à All Programs à Gemalto à Response Calculator; you will get below application opened. Enter the Challenge and Click on Calculate Response. Below is an example image. It will generate a response. Ask the user to enter the response in response ...

The System could not log you on. The revocation status of the smart card certificate used for authentication could not be determined

Image
OS: Windows 7, Windows 10 Server OS: Windows 2003, 2008, 2008 R2, 2012, 2012 R2 and Windows Server 2016 Condition: Error message when we use smart to log in on a domain computer. Cause:  This happens when Certificate Authority (CA) service stopped and CA is unable to publish the CRL (certificate revocation list) and revocation list is expired. Solution : Log in to CA server using CA admin user. Click Start à Run à Services.msc and press Enter to open services console. Check “Active Directory Certificate services”, if the service is stopped, then Right Click à Click on Start. Wait for some time, CA should publish the new CRL. If you want to force the CRL publication then follow below steps. Click Start à Run à Control and Press Enter to open Control Panel. Double Click Administrative tools à Double Click on Certificate Authority. Right Click on Revoked Certificates à All Tasks à Publish Now ask user to restart their client machines so that client machines can recei...