To issue a certificate for the Windows 2008 Terminal Services gateway using your own intalled Enterprise Certificate Authority, out of the box you need to create a certificate request file, request the certificate from the Enterprise CA, install the issued certificate and map the certificate to the TS Gateway.
This can help you if you get errors such as -2146875377 or "the dns name is unavailable and cannot be added to the subject alternative name" or "denied by policy" errors.
In detail these steps are:
Create MMC Console for all steps- On the TS Gateway Windows 2008 server, with the remote administration tools installed, click Start > Run and enter mmc.exe.
- Confirm the UAC prompt and add the following snap-ins: Certificate Authority (choose computer on which this role is installed), Certificates (for local machine), TS Gateway Manager.
Create a Certificate Request
- Expand Certificates (Local Computer)/Personal/Certificates and right-click Certificates>All Tasks>Advanced Options>Create Custom Request.
- Click Next on the Before You Begin page.
- Choose Web Server as the template. The template type that you chose is the 2nd most important choice you make in this process. Click Next.
- Click the Details down arrow and then click Properties.
- On the Subject tab, under Subject Name, select Common Name under Type and enter the URL that you will use across the internet to reach this TS Gateway. Click OK when the names you are using have been added to the list on the right of the dialog. The correct value for common name is the 1st most important choice you make here.
- Click Next.
- Enter a file name and click Finish.
Upload Certificate Request to Enterprise Certificate Authority
- Expand the Certification Authority node in the MMC you created above.
- Right-click the CA name and choose All Tasks>Submit New Request.
- Browse and select the request file created in step 7 in the previous section.
- Save the issued certificate with a .cer file extension.
Install the Certificate on the TS Gateway Server
- Expand Certificates (Local Computer)/Personal/Certificates and right-click Certificates>All Tasks>Import and click Next.
- Browse to the file created in step 4 in the previous section.
- Click Next twice.
- Click Finish. You will be told the import was successful.
Map Certificate to TS Gateway
- Expand TS Gateway Manager in the MMC.
- Right-click your TS Gateway server and choose Properties
- Select the SSL Certificate tab and ensure the "Select an existing certificate..." option is set.
- Click Browse Certificates and select the new certificate that you have just created
- Click Install and OK.
Then to finish, open Remote Desktop Connection tool (mstsc.exe) and connect to a Terminal Server using the Gateway option via the Options>Advanced>Settings dialog. To complete these steps you must also have created the policies for connection the the gateway.
permalink posted by Brian Reid : 8:49 AM
0 comments 
Enabling Previous Versions for file shares on Windows 2008 when you have the full graphic's interface is easy to do - but what about if all you have is the command line as you get in Server Core.
To turn on Previous Versions (shadow copies) via the command line follow these steps:
- From the command line on the server type:
vssadmin add shadowstorage /for=c: /on=c: /MaxSize=5GB - This will enable shadow copies on the volume, and this might be enabled already (esp. if you have already run a backup on the server). This particular command will do copies for the shares on the C: drive, with the storage for the copies also on the C: drive, and limiting that storage to 5Gb. Any of these options can be changed.
- Enable remote management on the Server Core firewall (again this might have already been done):
Netsh firewall set service RemoteAdmin
Netsh advfirewall set currentprofile settings remotemanagement enable
Netsh advfirewall firewall set rule group="File and Printer Sharing" new enable=yes
Netsh advfirewall firewall set rule group="Windows Firewall Remote Management" new enable=yes - Then from a remote machine with the Task Scheduler MMC snap-in enabled, connect to the Server Core machine as an administrator level account and add the following scheduled task - 1 for each disk on the server:
General>Name: Shadow Volume Copy
General>User Account: Administrator level account (run whether logged in or not)
Triggers>New: Weekly, 7am, Mon-Fri and Weekly, 12pm, Mon-Fri
Actions>Start a program: %systemroot%\system32\vssadmin.exe
Actions>Start a program>Arguments: Create Shadow /AutoRetry=15 /For=c: (changing C: if you have a different drive) - Click OK and right-click the task and choose Run.
- Open a file share that is held on the Server Core machine and see if the Previous Versions tab shows a previous version having just been created.
permalink posted by Brian Reid : 2:47 PM
0 comments
Archive
March 2005
July 2005
February 2006
May 2006
November 2006
March 2007
May 2007
June 2007
August 2007
April 2008
May 2008
June 2008
September 2008
October 2008
November 2008
January 2009
February 2009
March 2009