Archive for July, 2010

Exchange CCR error – Event ID: 2059

Friday, July 23rd, 2010

Recently, we had a customer who had an attached storage drive fail on them. An Exchange 2007 CCR cluster was hosted on this drive quite the disruption. Long story short, we got the data back and started to resume the CCR. Unfortunately, the status would keep going from “Healthy” to “Failed”. Checking the results, this is the error we would keep getting:

Source: MSExchangeRepl

Event ID: 2059

Description:

The log file 612083 for Server\Storage Group is missing on the production copy. Continuous replication for this storage group is blocked. If you removed the log file, please replace it. If the log is lost, the passive copy will need to be reseeded using the Update-StorageGroupCopy cmdlet in the EMS.

Now of course, those transaction log files that it was asking for no longer existed (Due to the corruption – again, long story). But here is were we figured out the problem to be. If we took down the exchange db, and did: “eseutil /mh .\database.edb”, we got the following bit of information:

Extensible Storage Engine Utilities for Microsoft(R) Exchange Server
Version 08.02
Copyright (C) Microsoft Corporation. All Rights Reserved.

Initiating FILE DUMP mode…

<truncated>

Previous Full Backup:
Log Gen: 612070-612083 (0x956e6-0x956f3) – OSSnapshot
Mark: (0x956F4,8,16)
Mark: 07/10/2010 12:34:52

<truncated>

Notice that it was trying to get the log generation files from the previous backup. Two options… back up the 250Gb Database (Takes about 18 Hours), or trick it, get the CCR going again (And then do the backup). We choose to trick it. How? Here is how:

On the mail store, we went to the powershell (Command prompt is fine also) and did this:

Diskshadow
set context persistent
writer verify {76fe1ac4-15f7-4bcd-987e-8e1acb462fb7}
begin backup
add volume f: alias shadow_f (F: is where the datastore is…)
create (Takes 2-5 minutes)
However, before I could finish, I got an error:
ERROR: The writer “{76fe1ac4-15f7-4bcd-987e-8e1acb462fb7}” was not included. Aborting …
Check the syntax of the writer name and writer ID.
The reason was because my transaction logs were somewhere else (Another Drive), and my system Drive was C:, so added those as well:
add volume c: alias shadow_c
add volume f:\exchange-logs\ alias shadow_logs
create (Again! This time it took 2-5 minutes and it WORKED!)
expose %shadow_f% y:
end backup
delete shadows exposed y:
exit
The whole process took about 7 minutes, and the new result when I ran: “eseutil /mh ./database.edb”:
Previous Full Backup:
Log Gen: 641830-641842 (0x9cb26-0x9cb32) – OSSnapshot
Mark: (0x9CB33,8,16)
Mark: 07/21/2010 01:24:36
It WORKED! Those were the current generation of logs that we wanted… so what exactly did we just do? Well Server 2008 RTM and R2 have the ability to make shadow copies of live databases, and access them using the tool: Diskshadow. Now, when we do this, Exchange detects this as a successful backup, and marks the database as such. No extra Hard Drive was used during this time (Perhaps a few MB), and it was very quick. Trick complete. Restart CCR (Had to reseed unfortunately – this was so the old database that had the old information could be replaced with the new database with the “correct” backup time), and then did a successful backup. Hope this helps someone!

 

Where does spam come from? Everywhere…

Tuesday, July 13th, 2010

Ever wonder where the nonsense that inundates your inbox each morning comes from?  Could it be mythical spam elves come every night and make more work for you the next day?  Nothing so dramatic as that.  The following spam source data is courtesy of TrendMicro:

 

Source of spam by country

Where spam came from this year

 

 

Data source:  http://us.trendmicro.com/imperia/md/images/us/trendwatch/currentthreatactivity/spamming_countries.gif

 

Microsoft keyboard shortcuts

Tuesday, July 13th, 2010

Microsoft Windows keyboard shortcuts – you’ll use them more than you think

Windows system key combinations

  • F1: Help
  • CTRL+ESC: Open Start menu
  • ALT+TAB: Switch between open programs
  • ALT+F4: Quit program
  • SHIFT+DELETE: Delete item permanently
  • Windows Logo+L: Lock the computer (without using CTRL+ALT+DELETE)

Windows program key combinations

  • CTRL+C: Copy
  • CTRL+X: Cut
  • CTRL+V: Paste
  • CTRL+Z: Undo
  • CTRL+B: Bold
  • CTRL+U: Underline
  • CTRL+I: Italic

Mouse click/keyboard modifier combinations for shell objects

  • SHIFT+right click: Displays a shortcut menu containing alternative commands
  • SHIFT+double click: Runs the alternate default command (the second item on the menu)
  • ALT+double click: Displays properties
  • SHIFT+DELETE: Deletes an item immediately without placing it in the Recycle Bin

General keyboard-only commands

  • F1: Starts Windows Help
  • F10: Activates menu bar options
  • SHIFT+F10 Opens a shortcut menu for the selected item (this is the same as right-clicking an object
  • CTRL+ESC: Opens the Start menu (use the ARROW keys to select an item)
  • CTRL+ESC or ESC: Selects the Start button (press TAB to select the taskbar, or press SHIFT+F10 for a context menu)
  • CTRL+SHIFT+ESC: Opens Windows Task Manager
  • ALT+DOWN ARROW: Opens a drop-down list box
  • ALT+TAB: Switch to another running program (hold down the ALT key and then press the TAB key to view the task-switching window)
  • SHIFT: Press and hold down the SHIFT key while you insert a CD-ROM to bypass the automatic-run feature
  • ALT+SPACE: Displays the main window’s System menu (from the System menu, you can restore, move, resize, minimize, maximize, or close the window)
  • ALT+- (ALT+hyphen): Displays the Multiple Document Interface (MDI) child window’s System menu (from the MDI child window’s System menu, you can restore, move, resize, minimize, maximize, or close the child window)
  • CTRL+TAB: Switch to the next child window of a Multiple Document Interface (MDI) program
  • ALT+underlined letter in menu: Opens the menu
  • ALT+F4: Closes the current window
  • CTRL+F4: Closes the current Multiple Document Interface (MDI) window
  • ALT+F6: Switch between multiple windows in the same program (for example, when the Notepad Find dialog box is displayed, ALT+F6 switches between the Find dialog box and the main Notepad window)

Shell objects and general folder/Windows Explorer shortcuts

For a selected object:

  • F2: Rename object
  • F3: Find all files
  • CTRL+X: Cut
  • CTRL+C: Copy
  • CTRL+V: Paste
  • SHIFT+DELETE: Delete selection immediately, without moving the item to the Recycle Bin
  • ALT+ENTER: Open the properties for the selected object

General folder/shortcut control

  • F4: Selects the Go To A Different Folder box and moves down the entries in the box (if the toolbar is active in Windows Explorer)
  • F5: Refreshes the current window.
  • F6: Moves among panes in Windows Explorer
  • CTRL+G: Opens the Go To Folder tool (in Windows 95 Windows Explorer only)
  • CTRL+Z: Undo the last command
  • CTRL+A: Select all the items in the current window
  • BACKSPACE: Switch to the parent folder
  • SHIFT+click+Close button: For folders, close the current folder plus all parent folders

Windows Explorer tree control

  • Numeric Keypad *: Expands everything under the current selection
  • Numeric Keypad +: Expands the current selection
  • Numeric Keypad -: Collapses the current selection.
  • RIGHT ARROW: Expands the current selection if it is not expanded, otherwise goes to the first child
  • LEFT ARROW: Collapses the current selection if it is expanded, otherwise goes to the parent

Properties control

  • CTRL+TAB/CTRL+SHIFT+TAB: Move through the property tabs

Accessibility shortcuts

  • Press SHIFT five times: Toggles StickyKeys on and off
  • Press down and hold the right SHIFT key for eight seconds: Toggles FilterKeys on and off
  • Press down and hold the NUM LOCK key for five seconds: Toggles ToggleKeys on and off
  • Left ALT+left SHIFT+NUM LOCK: Toggles MouseKeys on and off
  • Left ALT+left SHIFT+PRINT SCREEN: Toggles high contrast on and off

Microsoft Natural Keyboard keys

  • Windows Logo: Start menu
  • Windows Logo+R: Run dialog box
  • Windows Logo+M: Minimize all
  • SHIFT+Windows Logo+M: Undo minimize all
  • Windows Logo+F1: Help
  • Windows Logo+E: Windows Explorer
  • Windows Logo+F: Find files or folders
  • Windows Logo+D: Minimizes all open windows and displays the desktop
  • CTRL+Windows Logo+F: Find computer
  • CTRL+Windows Logo+TAB: Moves focus from Start, to the Quick Launch toolbar, to the system tray (use RIGHT ARROW or LEFT ARROW to move focus to items on the Quick Launch toolbar and the system tray)
  • Windows Logo+TAB: Cycle through taskbar buttons
  • Windows Logo+Break: System Properties dialog box
  • Application key: Displays a shortcut menu for the selected item

Dialog box keyboard commands

  • TAB: Move to the next control in the dialog box
  • SHIFT+TAB: Move to the previous control in the dialog box
  • SPACEBAR: If the current control is a button, this clicks the button. If the current control is a check box, this toggles the check box. If the current control is an option, this selects the option.
  • ENTER: Equivalent to clicking the selected button (the button with the outline)
  • ESC: Equivalent to clicking the Cancel button
  • ALT+underlined letter in dialog box item: Move to the corresponding item

 

Source:  http://support.microsoft.com/kb/126449

 

Alphabetical command line list (Microsoft)

Tuesday, July 13th, 2010

The following list of Microsoft commands may come in handy for the post DOS generation (definitions sold separately…):

Arp
Assoc
At
Atmadm
Attrib
Batch files
Bootcfg
Break
Cacls
Call
Change
Chcp
Chdir
Chkdsk
Chkntfs
Cipher
Cls
Cmd
Cmstp
Color
Command shell overview
Comp
Compact
Convert
Copy
Cprofile
CScript overview
Date
Defrag
Del
Dir
Diskcomp
Diskcopy
DiskPart
Doskey
Driverquery
Echo
Endlocal
Eventcreate
Eventquery
Eventtriggers
Evntcmd
Exit
Expand
Fc
Filter commands
Find
Findstr
Finger
Flattemp
For
Format
Fsutil
Ftp
Ftp subcommands
Ftype
Getmac
Goto
Gpresult
Gpupdate
Graftabl
Help
Helpctr
Hostname
If
Ipconfig
Ipseccmd
Ipxroute
Irftp
Label
Lodctr
Logman
Lpq
Lpr
Macfile
Mkdir (md)
Mmc
Mode
More
Mountvol
Move
MS-DOS subsystem configuration commands
Msiexec
Msinfo32
Nbtstat
Net services overview
Net services commands
Netsh command overview
Netsh commands for AAAA
Netsh commands for DHCP
Netsh diagnostic (diag) commands
Netsh commands for Interface IP
Netsh commands for RAS
Netsh commands for Routing
Netsh commands for WINS
Netstat
Nslookup
Nslookup subcommands
Ntbackup
Ntcmdprompt
Ntsd
Openfiles
Pagefileconfig
Path
Pathping
Pause
Pbadmin
Pentnt
Perfmon
Ping
Popd
Print
Prncnfg
Prndrvr
Prnjobs
Prnmngr
Prnport
Prnqctl
Prompt
Pushd
Query
Rasdial
Rcp
Recover
Redirection operators
Reg
Regsvr32
Relog
Rem
Rename
Replace
Reset session
Rexec
Rmdir
Route
Rsh
Rsm
Runas
Sc
Schtasks
Secedit
Set
Setlocal
Shift
Shutdown
Sort
Start
Subst
Systeminfo
System File Checker (sfc)
Taskkill
Tasklist
Tcmsetup
TCP/IP utilities and services
Telnet commands
Terminal Services commands
Tftp
Time
Title
Tracerpt
Tracert
Tree
Type
Typeperf
Unlodctr
Ver
Verify
Vol
Vssadmin
W32tm
Winnt
Winnt32
WMIC overview
Xcopy