Sunday, 29 January 2017

Data Backup/Restoration Very Slow in Symantec Backup Exec.

Or, Data Restoration Job Very Slow in Symantec Backup Exec Server. 
Or, Backup/Restoration Job Read/Write Speed Very Slow.

Descriptions: Its normal behavior of windows machines. Even if you have faster network, the read/write speed may be slower depending upon the Ethernet/LAN adapter level Speed and Duplex selections. If you have 1gbps connection, you should not have it set to 10mbps etc..
You should set this speed and duplex settings on both Backup Server and Backup Agent/Client.

Solution:
Correct the Speed & Duplex settings for LAN adapters on both servers (Backup Exec Server and Remote Agent Server).

Steps: To correct the settings:

Go to Run > Type ncpa.cpl > hit Enter > Right Click on LAN Adapter > Go to Properties > Select Internet Protocol Version 4 (TCP/IPv4) as below given reference screen shot:
















Now Click on Configure button > Then Click on Yes if prompted (Screen shot given below for reference):














Go to Advance tab > Under Property section, select Speed & Duplex > Under Value section, select 1.0 Gbps Full Duplex > Now Click OK

























Once you have configured “Speed & Duplex” on both the servers (Backup Server and Remote Agent Server), your data backup and restoration job will be speedup. 

More than 5GBof data rate (Read/Write) is archive in my case.

For example, you can see the below screen shot:





Cheers, please write me back if you have any query or feedback on this.

Understanding Active Directory, Domain Controller and Domain.

Or, Logical Difference between Active Directory and Domain?
Or, Logical Difference between Active Directory and Domain Controller?

Descriptions: Some time its little confusing to differentiate between domain, domain controller and active directory. It is because, all these terms are used knowingly or unknowingly to describe other related concepts.

To make it simple, I would say…. Domain is a logical boundary with some name like xyz.com, abc.net etc… managed by Active Directory services which contains all the objects and database information and these entries, database, objects and logical boundaries are installed or configured on a server, which is known as Domain Controller.

Let’s see the below examples:

Active Directory: Active Directory is a directory service that stores information of all AD objects like users, computers and OU etc…  NTDS and SYSVOL are some important database directories, which are used by active directory to store all information.

Domain: Domain is a logical boundary of your active directory environment, which gives a single/multiple name interface to access your active directory database information. It works under a common name, database and policy...

Example: My domain name:- xyz.com and xyz.abc.com have unique logical name but running from same AD database with domain and sub-domain logical boundary of domain concepts.

Domain Controller: The server, which hold the Active Directory service installed in it, known as Domain controller server.

Example: You have a server having nothing installed its just a server. Once you installed Active Directory services on this server, it becomes Domain Controller server.


Cheers, please write me back if you have any query or feedback on this.

Monday, 23 January 2017

How to check FSMO roles using CMD or GUI?

Or, How to check FSMO roles holders in a domain?

Descriptions: In this article we will see, how to check FSMO roles and role holders domain controllers in the domain. Using CMD, its job of cone command and it can be executed from your local machine without login in to any domain controller servers and another way is to check it using GUI where you should be having access to login your domain controllers.

Steps: Checking FSMO roles using CMD
Open CMD (run as administrator)




















Type the command given below and hit enter

netdom query fsmo










Steps: Checking FSMO roles using GUI (Domain Level Roles)

From the server manager’s Tool option select Active Directory Users and Computers















Right click on your Domain Name > Select Operations Master














Now you have all the domain level FSMO roles here. You can click on each tab to check who is having which FSMO role.

























Steps: Checking FSMO roles using GUI (Forest Level Roles)

From Server Manager’s tool option, select Active Directory Domain and Trust











Right Click on Active Directory Domain and Trust > Select Operations Master















Here you have the Domain Naming FSMO role

















Now to check the Schema Master Role, Run > MMC > Add/Remove Snap in > Select Active Directory Schema > Click OK to add the snap-in > Right Click on the Active Directory Schema > Select Operations Master













Here you have the Schema Master Role holder details






















That’s all guys, cheers!!
Please write me back if you have any query of feedback.

Sunday, 22 January 2017

Active Directory Schema console is not visible in Domain Controller

Or, Where is Active Directory Schema console in Domain Controller server?
Or, How to add Active Directory Schema console snap-in?
Or, How to register Active Directory Schema in domain controller server?

Descriptions: First things first, you may not be able to see the Active Directory Schema console on your domain controller server because its hidden by default and required to be registered first before you can access the schema console. After registration of Schema, you will have to add the snap in from MMC to access the console of Active Directory Schema.

Don’t worry, it’s not a big deal. Just a single command and few GUI steps and you are done. J

Steps: Schema Registration

Open CMD (run as administrator)




















Type the command given below and hit enter > Click OK
regsvr32 schmmgmt.dll














Steps: Adding Active Directory Schema Snap-in Console

Go to Run > Type mmc and hit enter > Click yes if prompted on pop-up window
















Go to File menu > Select Add/Remove Snap-in





















Select Active Directory Schema > Click on Add > Click OK


















That’s it, here you have the Active Directory Schema Console






Cheers, please write me back if you have any query of feedback.

Managing Global Catalog Servers best practices

Or, should we keep Global Catalog and Infrastructure Master server roles on one Domain Controller?
Or, is it good have Infrastructure master role and Global catalog server role in one Domain Controller server?

Descriptions: This is one of the most common and most ignored scenario where either people don’t take it seriously or don’t design the Active Directory domain in an efficient manner. When you are running too many DCs in your large domain environment, you must check for these common best practices as to where to keep your FSMO roles holders and how to design their architectural placements.

Guys, in a small domain environment you may not face challenges where you have one DC and one ADC, but if you have more than one ADC in your domain environment, you should never keep Global Catalog server and Infrastructure Master role on same DC/single server.

It’s because, there may be many issue while replicating new changes at Infrastructure level due to priority and communication conflicts between Infrastructure master and global catalog servers. Global Catalog server automatically receives all updates happened in the forest. Infrastructure master role then takes these updates from Global catalog server and replicate it to cross domain DCs.

If you have any query or feedback on this, please write me back.

System State Backup in Windows Server 2012

Or, How to take System State Backup of Windows Server 2012 DCs?
Or, How to run system state backup using wbadmin utility?

Descriptions: As NTBACKUP utility is no more available in Window Server 2012 Operating System, you still have WBADMIN to perform system state backup of your servers. WBADMIN utility is part of Windows Server Backup feature in windows server 2012.

Windows Server Backup Feature can be installed using Server Manager’s Roles and Features installation wizard.

Yes, please!! You must install this feature before you think of using WBADMIN for system state backup.











Steps: Using WBADMIN for system state backup

Open CMD (run as administrator)




















Type the command below and hit enter

wbadmin start systemstatebackup -backuptarget:E: -quiet

you can choose the backup target as per your scenario. In my case, I am using E:\ drive as a backup target.

The Backup will be initiate now, wait till it completed successfully.















Cheers, Please write be back if you have any query or feedback.

Saturday, 21 January 2017

Error ‘the value for option backuptarget is missing’ on Windows Server 2012

Or, WBADDMIN Error (Systemstatebackup): the value for option backuptarget is missing

Descriptions: Even when you are trying correct commands to perform systemstate backup on windows server 2008 or 2012 using wbadmin (e.g. the command ‘wbadmin start systemstatebackup -backuptarget:E: -quiet’ is correct but ends with error), it is being encountered with error ‘the value for option backuptarget is missing’.

Guys, if you don’t do, my suggestion is, always think of reboot after installing any role, feature or components on windows operating systems as per your convenience. No matter the type of installation is required reboot or not. Anyways, it’s your choice at all. J

Possible Reason: You have recently installed powershell along with windows backup feature and trying to perform systemstate backup without taking server reboot after the installation of this feature. Remember, I said always think of taking reboot after installing anything on windows operating systems.

Solution/Workaround:  Reboot your server > run CMD as administrator > try to re-execute the command... it should work… in my case it worked well…


Wait till the backup is completed successfully.














Cheers...please write me back if you have any query or feedback.

Creating date wise log file in Robocopy backup.

Or, How to take backup of shared or local folders using Robocopy?
Or, Robocopy command to take backup and exporting backup log files date wise.

Descriptions: Using Robocopy for shared folders or local folders backup is one of the good way to perform flat files/data backup in Windows. It’s an inbuilt utility in windows by Microsoft, no need to download or purchase it separately.

Normally, administrators do use robocopy with source, destination and export logs arguments in the robocopy command and rename the log files manually everyday... that’s waste of time frankly... J

Here in this article, we will see how we can set the robocopy command to take backup of data, export log in a txt file and keep the log file name with execution date included. We are going to get it done with batch script..

e.g. If the log file name is fileserverbackup.txt, it should be exported with name fileserverbackup-YYYYMMDD.txt

Please note, I have used some special switched to for best backup output. you should understand the behaviour of special switches before using them.

You can use Robocopy /? for more help on robocopy command and switches.

Commands and batch file:

General command with no special switches

robocopy C:\TestSourceFolder E:\DestFolder

Customized command as per suitable requirements with some special switches

robocopy C:\TestSourceFolder E:\DestFolder /E /ZB /SEC /R:3 /W:3 /TEE /UNILOG+:C:\FileServerBackup.txt

the above mentioned command will take backup well, but it will create a log file FileServerBackup.txt with no date inserted in the file name.

Recommended:

Batch script to take backup using robocopy command and then creating log files every day with date specified/added in the file name.

--------------------------------------------------------------------------------------------------------------------------
@echo off
echo wscript.echo year(date) ^& right(100 + month(date),2) ^& right(100+day(date),2)  > "%temp%\dateparts.vbs"
for /f "tokens=1 delims=" %%a in ('cscript //nologo "%temp%\dateparts.vbs"') do set yyyymmdd=%%a
echo Today is %yyyymmdd%
robocopy C:\TestSourceFolder E:\DestFolder /E /ZB /SEC /R:3 /W:3 /TEE /UNILOG+:C:\FileServerCopy-%yyyymmdd%.txt
--------------------------------------------------------------------------------------------------------------------------

Copy and paste the above given script in a text files > save as filename.bat > use this bat file in windows task scheduler.

That’s it, backup will be executed and file name will be created date wise automatically. Please make sure you tested the script carefully and deploy[ in production if it works 100% as per your requirement.

If you have any query or feedback, please write me back...

Understanding FSMO role in active directory and impact when unavailable

Or, FSMO Roles in AD (Active Directory) – Explained
Or, Active Directory FSMO Roles Explained
Or, FSMO roles functions and impact when unavailable

Descriptions: FSMO stands for Flexible Single Master Operation. FSMO roles are one of the critical component of Active Directory which helps a large Active Directory domain environment to be managed in an efficient way in terms of internal communication, availability, accessibility and replications.

FSMO have 5 roles and these roles are categorized logically in two categories, Domain Level roles and Forest Level roles.

FSMO Roles and Categories:











FSMO Roles functions and impact when unavailable:

Schema Master Role: The schema master role holder Domain Controller is responsible to control all updates and modifications to the schema (e.g. user name, company name, email address, department name etc..). Once the schema update is completed, it is replicated from Schema Master domain controller to all other domain controllers in the domain network or forest. To update the schema of a forest, you must have schema admin privileges.

Schema Master role is Forest Level role and there can be only one schema master in a forest.

Impact, if Schema Master Domain Controller is down? Modification to schema objects may not be replicated to other domain controllers in your network. Addition of any new application or server which requires schema modification like, Exchange server, Lync Server etc. will not take place.

Domain Naming Master Role: The domain naming master role holder domain controller is responsible for controlling the addition and removal of domains in the forest. This domain controller is the only one which can allow addition or removal of domain from in the forest.

Domain Naming Master role is Forest level role and there can be only one domain naming master in a forest.

Impact, if Domain Naming Master Domain Controller is down? You can not add new domain in the forest and also you will not be able to remove exiting domains from the forest. Unless you have domain addition and removal kind of activities, there is going to be no impact on your running production.

RID Master Role: The RID Master role holder domain controller is responsible for assigning unique identity number to all the objects created in Active Directory. Whenever any object created and joined in Domain, RID master domain controller is responsible to assign a unique identity number to that object whether it is a computer, printer, user or group etc...

The RID Master role is Domain Level role and there can be more than one RID Master in a forest.

Impact, if RID Master Domain Controller is down? When this domain controller is down, there is no quick impact going to take place because all the Domain controllers by are assigned with 500 RID pool. Even if the RID Master is down, you would be able to create or add new objects in AD till the time you have the RID pool of 500. Once this RID pool is completely occupied, you would no more be able to create or add any additional objects in AD.

To check how many RID pools are available on your domain controller, you can use below command (search for the value RIDManager term once the command is completed).

Dcdiag /test:ridmanager /v

Infrastructure Master Role: The Infrastructure Master role holder Domain Controller is responsible for cross-domain reference check.

Example: We have a security group ‘Finance’ and the user ‘Test-User-1’ is member of this security group. When the user Test-User-1 access the resources where Finance security have access, Infrastructure master role is responsible to validate this information with the help of Global Catalog server.

If any objects or user’s information changes take plane in the domain, Infrastructure master role is responsible for replicating this information to cross domain DCs.

Infrastructure Master role is Domain Level role and there can be more than one Infrastructure master role in a forest.

Impact, if Infrastructure Master Domain Controller is down? Objects changes and updates may not be replicated to cross-domain DCs. Means, if you have shared folder access on a folder where a security group from cross-domain DC is having access and you are just member of that security group, you may not be able to access the folder or it’s possible that new modification in access rights will not be replicated to other DCs.

PDC Emulator Role: PDC Emulator FSMO role holder Domain Controller is responsible for replication between NT4 DCs. This DC also hold the password update and replication authority. When any password changes or update occurs in the domain, PDC emulator is responsible for updating the password update information to all other DCs in the forest.

Authentication failures/success, logon attempts, accounts lockout status, group policy changes or modifications preferably updates on the PDC emulator domain controller first.  This DC also handles the primary Time Server (NTP Server) responsibility in the domain environment. Unless you have modified and dedicated time server in your network, PDC emulator domain controller is by default responsible for replicating time update to all domain joined machines or to the machine where it has been pointed specifically.

PDC Emulator role is Domain Level role and there can be more than one PDC emulator in a forest.

Impact, if PDC Emulator Domain Controller is down? This is the one Domain controller which is going to impact sooner than other. Time Sync across domain computers, new password changes update, group policy updates are not going to work till the time this Domain Controller is down. All existing things should work fine but any new changes and update is not going to take place.

Updated: 10-04-2018

Some reference useful KBs from Microsoft

https://support.microsoft.com/en-in/help/223346/fsmo-placement-and-optimization-on-active-directory-domain-controllers

https://support.microsoft.com/en-in/help/197132/active-directory-fsmo-roles-in-windows

Cheers, Please write me back if you have any query or feedback.

Friday, 20 January 2017

Increasing/reducing RAM and CPU capacity of a VM after taking snapshot.

Or, is it possible to increase RAM/CPU capacity of a VM after taking snapshot?
Or, is it possible to reduce RAM/CPU capacity of a VM after taking snapshot?

Descriptions: If wondering whether CPU/RAM capacity of a virtual machine can be increased/reduced or not, the answer is Yes. You can reduce or increase the Memory as well as CPU capacity of a VM even after taking snapshot of the VM.

Logically, when you take snapshot of the Virtual Machine, the CPU and Memory state of the Virtual Machine get preserved. Means, no matter whether you want to increase or decrease the CPU/RAM capacity of the VM, whenever you will revert the snapshot the earlier configurations and status will be restored.

Test Case: When I tested this concept in my lab environment, I found that I am able to change the CPU and RAM configurations (increase or decrease) after taking snapshot of the Virtual Machine. When reverting the snapshot, the original status of the Virtual Machine is enforced.

No, No, No, you can’t increase or decrease drive capacity of any Virtual Machine after taking snapshot. J


Cheers, Please write me back if you have any query or feedback.

Cisco Nexus 5672UP-IOS and Kickstart Version Upgrade Process.

Or, Cisco Nexus 5672UP-IOS and Kickstart Version upgrade without losing configurations.

Objective
To Upgrade the BIOS and Kickstart Version for Cisco Data Center switches through USB in HA Mode. (Primary and secondary Cisco Nexus 5000 DC Switches).

Stage-1
There is a need to upgrading the Cisco N5K switches OS and Kickstart version with the following parameters.

1)      Download the current Backup of the Core Switches and save to the central location (keep at least two copies of the Backup).
2)     Download the Nexus latest Version of N5K-OS from Cisco Support Portal.
3)     Cisco Nexus C5672UP Data Center Switches upgrade process activity performs in Three Stages
{Upgrade path is 7.0(1) N1 (1) -> 7.0(8) N1 (1) -> 7.2(1) N1 (1) -> 7.3(0) N1(1)}.

4)     Upload the Kickstart version 7.0(8) N1 (1) and System OS: 7.0(8)N1(1) and Installed. Therefore, we have checked switch is working or not if working, then start another stage process.

5)     Upload the Kickstart version 7.2(1)N1(1) and System OS: 7.2(1)N1(1) and Installed. Therefore, we have checked switch is working or not if working, then start another stage process.

6)     Upload the Kickstart version 7.3(0)N1(1) and System OS: 7.3(0)N1(1) and Installed. Therefore, we have checked switch is working or not if working, then start another stage process.

7)     Once the upgrade to the latest version of N5K-OS is completed, then we can verify all configurations are fine and all commands are working or not.
8)     If all configurations are done, then connected all cables to the switch.
9)     Follow all steps from (Top to Bottom) to upgrading the  another switch.


Example:-

Note: - All Files copying from USB drive :

1. Upgrade Path for N5K-OS and Kickstart Version 7.0(1) N1 (1) -> 7.0(8) N1 (1)

(Config) #copy usb1:n6000-uk9.7.0.8.N1.1.bin bootflash:n6000-uk9.7.0.8.N1.1.bin

(Config) #copy usb1:n6000-uk9-kickstart.7.0.8.N1.1.bin bootflash:n6000-uk9-kickstart.7.0.8.N1.1.bin

(Config) #install all kickstart bootflash:n6000-uk9-kickstart.7.0.8.N1.1.bin system bootflash:n6000-uk9.7.0.8.N1.1.bin

Note: Delete the Old N5K-OS and kickstart Version for creating the Space on Switches 

Commands/Proceedures:
(Config) #delete bootflash:n6000-uk9.7.0.1.N1.1.bin
(Config) #delete bootflash:n6000-uk9-kickstart.7.0.1.N1.1.bin

2. Upgrade Path for N5K-OS and Kickstart Version 7.0(8) N1 (1) -> 7.2(1) N1 (1)

(Config) #copy usb1:n6000-uk9.7.2.1.N1.1.bin bootflash:n6000-uk9.7.2.1.N1.1.bin
(Config) #copy usb1:n6000-uk9-kickstart.7.2.1.N1.1.bin bootflash:n6000-uk9-kickstart.7.2.1.N1.1.bin
(Config) #install all kickstart bootflash:n6000-uk9-kickstart.7.2.1.N1.1.bin system bootflash:n6000-uk9.7.2.1.N1.1.bin

Note: Delete the Old N5K-OS and kickstart Version for creating the Space on Switches

Commands:
(Config) #delete bootflash:n6000-uk9.7.0.8.N1.1.bin
(Config) #delete bootflash:n6000-uk9-kickstart.7.0.8.N1.1.bin

3. Upgrade Path for N5K-OS and Kickstart Version 7.2(1) N1 (1) -> 7.3(0) N1(1)

(Config) #copy usb1:n6000-uk9.7.3.0.N1.1.bin bootflash:n6000-uk9.7.3.0.N1.1.bin
(Config) #copy usb1:n6000-uk9-kickstart.7.3.0.N1.1.bin bootflash:n6000-uk9-kickstart.7.3.0.N1.1.bin
(Config) #install all kickstart bootflash:n6000-uk9-kickstart.7.3.0.N1.1.bin system bootflash:n6000-uk9.7.3.0.N1.1.bin

Note: Delete the Old N5K-OS and kickstart Version for creating the Space on Switches

Commands:
(Config) #delete bootflash:n6000-uk9.7.3.0.N1.1.bin
(Config) #delete bootflash:n6000-uk9-kickstart.7.3.0.N1.1.bin

Your feedback and suggestions are welcome..



Thursday, 19 January 2017

Step by step guide for installing ESXi 6.0

Or, How to install VMware ESXi 6.0
Or, Installing VMware ESXi 6.0

Descriptions: Its not a big deal for experienced VMware administrators to install or upgrade ESXi server with any of the installation/upgrade methods but for friends who have just begin learning VMware, they may need to have a look at steps and options available to perform ESXi installation.

Yes, there are many ways of doing it, you can choose to do it with ISO if you have KVM supported on your hardware host, you can do it using VMware Update Manager, you can do it using CD/DVD drive attached with the physical hots etc..

In my scenario, I am using my lab environment to show you what all are the steps are there to complete the ESXi installation.

Steps: (installing ESXi hypervisor).

Boot your server with VMware ESXi 6.0 OS Disk or ISO image (in my case, I have VMware ESXi 6.0 Custom CISCO Installer) > Select the OS and hit Enter > Wait for the progress bar to be completed.













Hit Enter to continue when asked














Press F11 to accept the license terms and continue















Select the Installation storage/local storage and Hit Enter to continue















Select the desired language and hit Enter to continue
















Press F11 to start the Installation













Wait for installation to be completed













Upon successful ESXi host installation, you may receive below message. Hit Enter to reboot the server.















After the reboot completion, you should be getting ESXi 6.0 DCUI like below. From this window onward, you can do the ESXi configuration you wish e.g. network, DNS etc configurations.













Cheers, Please write me back if you have any query of feedback on this..

Wednesday, 18 January 2017

VMware converter tool error “The File System On "Datastore1" Does Not Support File This Large. Please Check the File System Block Size.”

Or, P2V conversion error “the file system on datastore1 does not support file this large. please check the file system block size.”

Descriptions: This error was encountered while performing P2V conversion of a Physical server containing large storage capacity (more than 6-7 TB of drive capacity).

The error screenshot (how it looks like):









Possible reasons of this error:
1. One of the volume size on this server is more than 2TB (Here I am referring to whole Volume Size of one of the RAID volume configured in this server on hardware level).

Example:  It’s possible that one of the RAID volume on your physical server is having 4TB of total capacity. This 3TB RAID volume may have multiple logical disk partitions inside the OS e.g. D, E, F etc…).

2. The VMware Converter tool you are using is not the latest one as per your VMware vSphere Infra.

Solution/Workaround:
1. Use latest version of VMware Converter tool.
2. Instead of default option, use Advance Feature of Data Copy Type Selection
3. Use only occupied disk conversion method selection. To do this, you can edit data copy option (shown in error screenshot) and choose only occupied disk. Don’t be afraid, you can easily increase the partitions size once this physical machine is converted in Virtual Machine.

Cheers, if you have any query or feedback, please write me back...

VM shutdown when performing snapshot restore in VMware vSphere.

Or, VM shutdown automatically when restoring to previous snapshot restore point.

Descriptions: This not an error… Its normal behaviour of Virtual Machine snapshot restoration feature. Depending upon the state when the snapshot was taken, virtual machine will go to that state while performing the snapshot restore.

Example-1: If the Virtual Machine is Powered On and you have taken a snapshot in this state, this is not going to reboot or shutdown the VM when you perform the Revert Snapshot task from Snapshot manager.

Example-2: If you the Virtual Machine is Powered Off and you have taken a snapshot in this state, this is going to shutdown the Virtual Machine when you perform the Revert Snapshot task from snapshot manager.


Note: No worries, in both conditions you should be able to get your VM up and running. If the VM get powered off while performing the snapshot restore, you can just power it on soon after the snapshot restore operation is completed successfully.

Cheers, If you have any query of feedback on this, please write me back..