Quantcast
Channel: File Services and Storage forum
Viewing all 13565 articles
Browse latest View live

MPIO path id to Iscsi session mapping

$
0
0
Hi,

I am playing around with ISCSI and MPIO. I can get the iscsi connection information from the 'Get-IscsiConnection' cmdlet. It gives the target portals the initiator is connected to. Then I have the mpclaim -v command which gives me the current state of paths. In my case I have one active/optimised path and the other standby paths. This information about the mpio path states is shown with respect to Path Ids. I want a way to know which connection/target portal does this path Id  correspond to. In GUI, the mpio tab of iscsi initiator window has this information. Do we have a way to obtain this info through power shell ? 

Reference for output of mpclaim -v :

MPIO Storage Snapshot on Tuesday, 05 May 2009, at 14:51:45.023 Registered DSMs: 1 ================+--------------------------------|-------------------|----|----|----|---|-----+ |DSM Name | Version |PRP | RC | RI |PVP| PVE | |--------------------------------|-------------------|----|----|----|---|-----| |Microsoft DSM |006.0001.07100.0000|0020|0003|0001|030|False|+--------------------------------|-------------------|----|----|----|---|-----+ Microsoft DSM ============= MPIO Disk1: 02 Paths, Round Robin, ALUA Not Supported SN: 600D310010B00000000011 Supported Load-Balancing Policy Settings: FOO RR RRWS LQD WP LB Path ID State SCSI Address Weight --------------------------------------------------------------------------- 0000000077030002 Active/Optimized 003|000|002|000 0 Adapter: Microsoft iSCSI Initiator... (B|D|F: 000|000|000) Controller: 46616B65436F6E74726F6C6C6572 (State: Active) 0000000077030001 Active/Optimized 003|000|001|000 0 Adapter: Microsoft iSCSI Initiator... (B|D|F: 000|000|000) Controller: 46616B65436F6E74726F6C6C6572 (State: Active) MPIO Disk0: 01 Paths, Round Robin, ALUA Not Supported SN: 600EB37614EBCE8000000044 Supported Load-Balancing Policy Settings: FOO RR RRWS LQD WP LB Path ID State SCSI Address Weight --------------------------------------------------------------------------- 0000000077030000 Active/Optimized 003|000|000|000 0 Adapter: Microsoft iSCSI Initiator... (B|D|F: 000|000|000) Controller: 46616B65436F6E74726F6C6C6572 (State: Active) Microsoft DSM-wide default load-balancing policy settings: Round Robin No target-level default load-balancing policy settings have been set.

The reference for iscsi connection and session info:


PS C:\> Get-IscsiConnection


ConnectionIdentifier : ffffe001e67f4020-29f
InitiatorAddress     : 0.0.0.0
InitiatorPortNumber  : 44996
TargetAddress        : 10.120.34.12
TargetPortNumber     : 3260
PSComputerName       :

ConnectionIdentifier : ffffe001e67f4020-2a0
InitiatorAddress     : 0.0.0.0
InitiatorPortNumber  : 46020
TargetAddress        : 10.120.34.13


TargetPortNumber     : 3260
PSComputerName       :

ConnectionIdentifier : ffffe001e67f4020-2a1
InitiatorAddress     : 0.0.0.0
InitiatorPortNumber  : 47044
TargetAddress        : 10.120.34.14
TargetPortNumber     : 3260
PSComputerName       :

ConnectionIdentifier : ffffe001e67f4020-2a2
InitiatorAddress     : 0.0.0.0
InitiatorPortNumber  : 46788
TargetAddress        : 10.120.34.15
TargetPortNumber     : 3260
PSComputerName       :



PS C:\>

I basically want to know which target portal does this pathid "0000000077030002" correspond to ?



View Password hash in Active Directory

$
0
0
Hi all
I am the administrator and i want to view the password hashes of the users  in Active Directory. Please tell me how i can view the password hashes of the users. Where are the password hashes of the users  stored in Active Directory.





Need help understanding auditing events

$
0
0

Hi all.

On a Windows Server 2008 R2 machine I've turned on auditing on a few shares and am receiving the proper events (IDs 4663, 4656, and 4658) but unfortunately, it seems that I'm getting those alerts for files that haven't been deleted but have been edited. The one case that stands out is an Excel file (.xls). I've setup software to monitor those alerts and send an email but it's not helpful if I can't be certain if the file has been deleted or not. Anyone understand this problem and can offer some way to either change settings so the auditing doesn't report deletions for edited files or perhaps some way to distinguish between the two log entries for filtering? 4656 entries also appear to be the same I can post if anyone would like to see them.

The contents of the two are below for 4663. Private information has been changed or edited out. All other information is exactly the same for both.

This is what I get for the file that was not deleted but edited.

An attempt was made to access an object.

Subject:
    Security ID:        Domain\Username
    Account Name:        Username
    Account Domain:        Domain
    Logon ID:        0x3c94791

Object:
    Object Server:    Security
    Object Type:    File
    Object Name:    C:\Some folder\TJ 2016.xls
    Handle ID:    0x20d0

Process Information:
    Process ID:    0x4
    Process Name:    

Access Request Information:
    Accesses:    DELETE
                
    Access Mask:    0x10000

This is what I get when a file is actually deleted

An attempt was made to access an object.

Subject:
    Security ID:        Domain\Username
    Account Name:        Username
    Account Domain:        Domain
    Logon ID:        0x3c94791

Object:
    Object Server:    Security
    Object Type:    File
    Object Name:    C:\Some path\1B3AA490.tmp
    Handle ID:    0x1cc8

Process Information:
    Process ID:    0x4
    Process Name:    

Access Request Information:
    Accesses:    DELETE
                
    Access Mask:    0x10000

Dyn Disk Volumes, File systems, Storage Spaces in Server 2012

$
0
0

Hi there

I am learning and practicing for MCSA 2012 70-410 While going deeper in 'Local Storage' lessons. I got a confusion here:

Q.1 Dynamic Disk: Volumes: simple, spanned, striped, mirror, raid-5

during creation of spanned, striped, mirror and raid-5 volumes choices available for File Format is either NTFS or ReFS

After these volumes have been created. I used Disk Management console and tried to re-format File Systems. I have the choices of all available like FAT, FAT32, NTFS, ReFS and it was possible to use any of these file formats on mentioned Volumes

Why? while during creation of volume, choices are only NTFS/ReFS. If later any older formats on these volumes other than NTFS or ReFS, what would it matter.

Q.2

In Storage spaces, when I add a physical disk to storage pool, it disappears from Disk Management console as it should be because now it is being managed by storage subsystem. Now when I create a virtual disk in storage space, it also does not appear in disk management. since it has no volume and file system yet.

But when I create a virtual volume on that Virtual disk it is initialized with a drive letter and appears as Basic disk with Primary partition type and volume as I configured in storage space

I have full access to re-format this virtual volume in Disk management. Amazingly disk management is allowing me to format this partition as FAT, FAT32, NTFS and ReFS and I configured I can use them to format same virtual disk. Why is that?? 

I mean for volumes being managed by storage subsystem, they must be restricted to be altered inside Disk Management in case if accidentally altered it can damage existing storage space setup.

Another thing possible in this way using Disk Management is I can Extend this virtual volume to other disks. it will do but at the cost of making this virtual volume as Dynamic and hence volume will go out of storage space if done.

and yet more I can select Add Mirror to this Virtual Volume right inside disk management console.

Since in Disk Management it is not possible to get more details of Virtual Volume it just appears as Normal Basic Disk with primary partition, so chances of mistakenly altering it in Disk Management is high enough

I am experimenting it for learning only. it is not a production system and we need to click refresh several times in Storage spaces and in Disk Management console to get most updated results.

To summarize:

1-Dynamic volumes spanned, striped, mirror and raid-5 at the time of creation in Disk Management, NTFS or ReFS. But after they have been created, I can re-format them as FAT, FAT32, NTFS and ReFS as I like. not supposed to be

2-Virtual Volume in a storage space is not only visible in Disk Management but I can also re-Format them as FAT, FAT32, NTFS and ReFS not supposed to be because formatting inside server manager allows only NTFS or ReFS for a virtual volume

3-Virtual Volume in a storage space has full access to operations in Disk Management. If I accidentally Extend this volume in Disk Management it allows to do so but it converts that Virtual Disk as Dynamic and then it goes out of Storage Pool

4-Virtual Volume in storage space has also possibility to add mirror to it. in that case too it will convert this virtual disk to dynamic which will throw it out of storage space.

your opinion awaited

regards

Trouble with Third Party Encryption and DFSR

$
0
0

Recently attempted to encrypt a DFS Directory. The replication was set to full mesh, with three different servers.

I took one server out of rotation.

Emptied the directory.

Encrypted the directory with a third party agent.

Pre-Seeded the data.

Checked the encryption status. Looked Good.

Started Replication.

Any file replicated to the encrypted directory was unreadable. 

The files were jibberish, usually indicative of double encryption.

Does DFSR use some sort of encryption during replication? Any one else have any suggestions as to what caused this behavior?

DedupJob Garbage Collection mode

$
0
0
Hi,

Is there any way to check mode of DedupJob? 
(Windows Server 2012 R2)

It says that after disabling FG with regedit, dedup-job will never do full garbage collection.
If you don't disable it, dedup-job will work in FG mode once every 4 times.
https://support.microsoft.com/en-us/kb/3066175

How do I know if FG(with dedup) is disabled? 
Did dedupjob run with what mode of garbage collection?
I checked EventLog and History of TaskScheduller and found nothing.

I'm afraid that VSS would be deleted because of FG.

And  one more question.
Setting of registry below can be refrected without rebooting the OS?
reg add HKLM\System\CurrentControlSet\Services\ddpsvc\Settings /v DeepGCInterval /t REG_DWORD /d 0xffffffff

Thank you in advance,

Kazuo Ieiri


Backup log location

$
0
0

Can anyone tell me where to find the equivalent of "backup.log" in server 2008. I cannot find anything obvious on disk. I want to find the information that you see in the GUI regarding success / failure. We have an application for Server 2003 that looks through date time stamps and 'signatures' / sizes of these backup logs to work out if backups have completed correctly. I would like to duplicate this in 2008.

 

Also, another backup question, if you have Exchange 2007 server on Server 2008, when a full block level backup runs I have read (not on MS site) that Exchange will be backed up and its logs trimmed "correctly" by the VSS writer. So if you were to do a full server restore of that server following a hardware failure the Exchange installation would be correctly restored and the database / logs correctly in sync. Can anyone confirm this.

 

Thanks

Nigel

Missing DFSR data

$
0
0

Hi

i am trying to troubleshoot missing DFSR data on server 2008 R2 SP1 using this article: https://blogs.technet.microsoft.com/askds/2007/09/04/wheres-my-file-root-cause-analysis-of-frs-and-dfsr-data-deletion/

I am using the section DFSR Deletion Forensics – The Where and When

However, on server 2008 R2 SP1 when we run

C:\>wmic /namespace:\\root\microsoftdfs path DfsrIdRecordInfo WHERE (filename=‘critical.doc’ and replicatedfolderguid=’8722EF11-6466-4472-888F-11B8A57B68A4′) get filename,flags,updatetime,GVsn > file.txt

we get No Instance(s) Available

Is there an alternative way of making these queries for server 2008 R2?

many thanks


How long should previous versions of files be available?

$
0
0

We are creating shadow copies 12 times a day so after 5 days they drop off due to the limitation of 64 total. However, if I look at previous versions of files I see available ones with modified dates much older than 5 days. Some go back months.

Can anyone explain how the system determines how far back in time files can be modified and still be available in previous versions? I thought it was only as far back as the shadow copies but obviously that was incorrect.


Kenny

Disable (Ctrl + A) & Delete Files

$
0
0

Hi,

we have file server and We want to disable users to select all files using (Ctrl + A) and delete them. is this possible?

Thanks,


Files in folder have been replaced

$
0
0

Hello,

The strangest thing has happened on my server, running Windows Server 2012.

I have a shared drive containing multiple folders/files.

We noticed today that some files we need are missing - the entire folder has been replaced with other files - all CSS files, JS files, a few gifs. Looks like web page files.

This has happened in many folders - the exact same group of files are now there- and all my existing files have disappeared.This seems to have happened at the end of June, and my backups don't save copies back that far, so I'm unable to restore my lost files.

It seemed like a virus, but scans of the file system keep coming up clean.

Any help would be much appreciated!

Thanks,

Amber

Problems with redirected folders

$
0
0

I’m assisting a new technical customer. They have one server (Microsoft Windows Server 2012 Standard x64) that is their DC, DNS, DHCP, print, and file server. More than I like to see on one server. They have a Group Policy (GP) that redirects there Desktop, Favorites, Documents, Pictures, Videos, and Music to network shares on the server. We have noticed that when logging into a different computer the folders are not redirected. This is the first that the customer has really tried to take advantage of using different computers so not sure if this a new or old issue.

For the point of contact when I look at her Documents library on her main computer I see the network path as one of the locations. But if we log into another workstation we do not see the same thing. I have tried to manually add the network location to the Library, but it says it cannot without the network drive being indexed.

I haven’t used redirected folders in the capacity before so not sure if I’m even on the right troubleshooting path here.

A: If your documents are redirected do a network drive should that location automatically be added to the Documents Library? If not, then how would the user normally get to their files?

B: Presuming Yes on question A. Are the only two ways to get a network path added to a Library either by setting up Indexing on the server or by enabling the Offline Files on all the workstations and have the redirected folders be made available offline?

GP is linked to the proper OU which contains both users and computers (in sub OU’s).

GP is Enforced.

GP settings for the documents redirect:

Path: \\SERVER1\username\%USERNAME%\documents

Grant User exclusive rights to Documents: Enabled

Move the contents of Documents to the new location: Enabled

Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systems: Enabled (enabled this as part of troubleshooting per KB2493506)

RSOP shows the GP is applying to the computer and user. In fact on the Windows 7 computer that we have been using for testing and troubleshooting of this issue we are seeing the following message in the Application Event log.

Event ID 502.

Failed to apply policy and redirect folder "Documents" to "\\SERVER1\Userhome\USER1\Documents".

 Redirection options=0x80001211.

 The following error occurred: "Can not create folder "\\SERVER1\Userhome\USER1\Documents"".

 Error details: "This security ID may not be assigned as the owner of this object.

The user is the owner of \\SERVER1\Userhome\USER1 and all folders inside are inheriting permissions.

Server name and username have been changed for privacy.

Thank you in advance.

CG

File lock lost

$
0
0
Hey,
we currently have the Problem that after we upgraded to windows 10, files can be opened and by two persons at the same time (with write permission).
This leads to the problem that the chnages from person 1 are overwriten if person 2 saves after person 1 saved the changes.
Person 2 doesn't get a notification that the document is write protected

We did not have these problems in Windows 7.
The network share is hosted on a Windows Server 2012.
Maybe there are some chnages between SMB 2.1 and SMB 3.0. As far as i know there is no way to disable only SMB 3.0 (if we disable SMB 3.0, SMB 2.1 gets disabled too) so we can't test it with Windows 10 and SMB 2.1

We guess its comming from a short network loss and because of that the document loses its lock. We tried to reproduce this behaviour if the stop the network of the client (person 1) which has opend the document first. After a short period (only a few seconds) person 2 can access the document with write permission.
Is there a timeout wre can configure to chnage this behavior?

Do you have other tips?

Understanding Storage Spaces and Columns

$
0
0

Hi

Would someone please be able to help me understand why my storage space says it’s full yet I have plenty of space on the newly created space and the underlying pool? I am experimenting creating storage spaces using PowerShell, although this is on the Windows 10 client, I don’t think that should make a difference to how this works.

So, my storage pool is 7.16TB in capacity, with 6.11TB used (there are a couple of other spaces on here). It is made from 6 disks as follows:

1 x 3TB

2 x 2TB

1 x 400GB

1 x 320GB

1 x 160GB

Total = 7.16TB accounting for Hardware Vs Software capacities

I deleted a 500GB space which previously had 450GB of data on it which has resulted in me having 1TB of free pool capacity, the 450GB data is a single VHDX file so I know the pool isn’t limited on space because the pool being recreated is exactly the same but using different number of columns.

The space I am creating is identical to the original space with the only difference being the number of columns, if I select 1 column like the GUI wizard makes for me everything is fine, but I believe more columns would give me more performance. The space is a 2-way mirror and thin provisioned, I have 6 physical disks, I so far understand I should be able to create a 3 column space in this configuration. However, if I create the space using 2 or 3 columns I get an error saying there isn’t enough space when copying the file, yet it’s the same file I’m copying which works on the space created with 1 column. The space creates correctly, it correctly says I need to expand the pool by adding 6 drives which I expect if there’s a 3 column space like this. Yes I am a little short on pool space, but I have 1TB free and the file when duplicated should add up to 900GB, I should have 100GB free pool capacity left.

I could delete the other space on there but this means a time consuming process of copying it back and I don’t even know if this will work anyway given the errors I have, so before I delete more data I was looking for an answer to check if I’m doing this right.

The PowerShell code I am using is below

$SpaceName = "TestSpace"
$StoragePool = "Main Storage Pool"
$InterLeave = 262144
$disknumber = $null
$DriveLetter = 'N'


New-VirtualDisk -FriendlyName $SpaceName  -StoragePoolFriendlyName $StoragePool -NumberOfColumns 1 -ProvisioningType Thin -ResiliencySettingName Mirror -Interleave $InterLeave -Size 500GB


$disknumber = Get-VirtualDisk -FriendlyName $SpaceName | Get-Disk | Select -ExpandProperty Number

Initialize-Disk –Number $disknumber –PartitionStyle GPT

New-Partition -DiskNumber $disknumber -UseMaximumSize -DriveLetter $DriveLetter

Format-Volume -DriveLetter $DriveLetter -FileSystem ReFS -NewFileSystemLabel $SpaceName -Confirm:$false

The above code works perfectly fine, but as soon as i change just the number of columns then suddenly it doesnt work.

Appreciate any help,

thanks

Steve

iSCSI service logging into persistent targets which are deleted from registry before it starts.

$
0
0

Scenario on Windows Server 2012 VM:

I have a service X and i am making msiscsi service dependent on X. Some persistent iSCSI targets are added to the VM after it is started. On reboot i want to clean up all persistent targets so service X deletes the persistent targets from registry location:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E97B-E325-11CE-BFC1-08002BE10318}\XXXX\PersistentTargets' before iSCSI service start. I see that no persistent target is listed by iSCSI after startup but it logins to all the persistent targets. I am not able to figure out from where iSCSI is getting the target information if it is deleted from registry. 


Datastore.edb file

$
0
0

Hi,

In the server I am using (WS 2008 R2 64bit) there is a file called DataStore.edb in C:\Windows\SoftwareDistribution\DataStore.

Thin this is related to windows update log file. It is currently 1G. I think it should be ok to delete it but if someone has deleted it and is ok

DFS Replication not working - The service has automatically initiated the journal loss recovery process

$
0
0

Hello,

We have 2 Servers with Windows 2012 R2 which are replicating files using DFS-R.
It happened now twice that the replication didn’t work and had to be rebuild. The problem started after event ID 2204:

The DFS Replication service has detected an NTFS change journal loss on volume D:. The service has automatically initiated the journal loss recovery process.

After that, we had to reboot the server and DFS-R started to recover from a dirty database shutdown.
Once the database was repaired, DFS-R had to work off on more than 1 million backlogs. It took about 3-4 days until both DFS-R Servers were in sync again.

I didn't find much information about ID 2204 but this seems to be our root cause.

I hope someone can help.

Regards,

Philipp

What is MPIO and how does it relate to iSCSI SERVER?

$
0
0
What is MPIO and how does it relate to iSCSI SERVER?

Storage Spaces and 2 Samsung 840 SSDs

$
0
0

Hello Everyone,

I have an issue that i need assistance on.  In Server 2012 R2 using Storage Spaces it seems to be unable to differentiate between 2 SSDs of the same model.  It sees them both but if i set one to "Offline" it thinks the other is offline as well but still lists it as online.  It also only shows one in the pool and not both.  If i place a different SSD in (830 series) it can differentiate and create a pool.  I have tried everything i can online about this but still no solution. Currently i have changed and am using then in a hardware RAID 1 off the LSI 2308 controller (performance is not as good).

Thanks

measure-dedupfilemetadata SLOW!

$
0
0

I am trying to use the command "Measure-DedupFileMetadata -path PATH" however this thing is slow! I am several hours into one folder and have hundreds that i would like this information on. Why does this command take this long to run? In this example the folder is 50-100GB and should beable to be read through in way less then 10 minutes, then add on whatever dedupe store lookups would be needed. Something is not adding up here.



Viewing all 13565 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>