RSS

Tag Archives: ICT

Sample ICT troubleshooting process flowchart

Troubleshooting can be very difficult and there are many different approaches and personal preferences. Also the chosen approach can even differ based on the situation.

Even though there is no troubleshooting process that is  best in all situations, it is considered a good practice to troubleshoot in a structured manner.

This is why I’ve created a sample ICT troubleshooting flowchart in Visio for companies that:

  • Have separate dedicated management teams for various IT disciplines like Windows, Linux/Unix, Database, Backup, Storage, Virtualization and Applications.
    • Have both offshore and onshore IT personnel where all tickets are initially routed to the offshore team.
  • Uses a ticketing system:
    • To log events, incidents, changes, problems, etc.
    • To route tickets to various disciplines.
  • Use a CMDB.
  • Use a change calendar.

Keep in mind that this is a sample troubleshooting flowchart that was only created to provide some structure or inspiration for troubleshooting.

I hope it is useful. If you have any ideas or suggestions, please leave a message.

PS: If you don’t have Visio, you can download Microsoft Visio Viewer 2013 from Microsoft.

 
2 Comments

Posted by on August 14, 2013 in ICT, Microsoft

 

Tags: , , , , , , , ,

Home LAB Setup guide – 07 Make your lab available over the internet

In the first part of this LAB setup guide, I described the hardware selection process.
In the second part, I described the hypervisor selection and installation.
In the third part, I described VM guest considerations and preparations.
In the fourth part, I described Configuring Server 2012 VM as DC with DNS and DHCP using PowerShell
In the fifth part, I described easily creating (many) proper AD users with PowerShell
In the sixth part, I described creating a local PowerShell v3 Help Repository with PowerShell

In this post I will describe how you can make your lab available over the internet.

When you’ve created your home LAB, you want to be able to use it anywhere. Depending on your situation, one of these options probably best meets your needs.

Examples include the use of:

  1. Remote desktop connection to your server
    + Easy to configure (enable on server and configure NAT forwarding if appropriate)
    – On many enterprise or public networks TCP3389 is blocked by the firewall.
    – Connects only to specific server. Even though you access the rest of the network from there.
  2. VPN connection to your network
    • Using your hardware router
      + Connection to network, not just a server.
      – No dependency on Windows Server
    • Using Windows Server 2008 / 2012
      + SSTP VPN (TCP443), is generally not blocked on enterprise/public networks.
      + Connection to network, not just a server.
      – Dependency on Windows server.
      – Requires more configuration.
      – The root CA certificate for the certification authority (CA) that issued the server authentication certificate needs to be into the store Local Computer\Trusted Root Certification Authorities. For a self-signed certificate, this means that you need to have local admin permissions to add it.Note: DirectAccess is a great feature, but it requires the client to be a member of the domain. And in my case this would limit where I can connect from, therefore I don’t plan to use it. For other situations it might be a better solution though.
  3. Using 3rd party tools like logmein, teamviewer or VNC
    + Connects only to specific computer.

Since I want to be able to connect from within enterprise environments as well, I chose to use SSTP VPN in Windows Server 2012. The basic steps you have to perform, include:

  1. On the server, you have to install and configure the VPN service.
  2. On the server or your own PKI, you would want create and install a machine certificate. You can create a Certificate Signing Request and request a 3rd party public certificate. Alternatively you can create a certificate using your own Certificate Authority, or you could create a self-signed certificate, For creating the self-signed certificate you can use the great PluralSight SelCert tool.
  3. On the client, you have to make sure the created certificate will be trusted. This means you have to add the certificate to local system\trusted root certificate authority if you’re using a self-signed certificate, which requires local administrator permissions on the client.
  4. On the client, you have to set-up the VPN connection to the server. Preferably you want to connect by DNS name. For your home lab you can also utilize dynamic DNS services like by example no-ip.com or alternative solutions.

For some more information, you can also take a look at this:

 

Tags: , , , , , , , , , , , , , , , , , , ,

Personal Development – self improvement books

Like many other people I’m continuously looking to improve. For me this includes, but is not limited to:

  • My technical skills as an ICT professional.
  • The balance between work and personal life.
  • Health and happiness.
  • Soft skills.

The last three categories are purposely very broad. Because of this, there are many books available that can help you improve. The books I’ve read or plan to read can be found on my website http://bjornhouben-web.sharepoint.com/Lists/Books. I hope it might inspire you to read some of them.

PS: Besides the books, there are also great online resources you might want to look into. I personally really like Seth Godin’s blog.

Should you know of any other great resources, please leave a comment.

 
 

Tags: , , , , , , , , , , , , , , ,

TechNet subscriptions will be retired without a proper alternative. Sign the petition !

As you might have already read by now, TechNet subscriptions are going to disappear. For more info take a look at this blog post and the Subscriptions retirement FAQ.

The most important stuff:

  • TechNet Subscription are sold through the TechNet Subscriptions website until August 31, 2013.
  • Subscribers may activate purchased subscriptions through September 30, 2013.
  • The TechNet benefits portal and the subscriber downloads page will remain available for non-Volume Licensing subscribers through September 30, 2014.
  • Alternatives mentioned by Microsoft are:
    • MSDN subscriptions
    • Windows Azure.
    • Technet Evaluations (time limited).
    • Technet Virtual Labs.

I personally think this is not a good way to go because the TechNet software is used by many people to increase their skills (often even for a large part in their own time). Because of this, Microsoft products can add even more valuable for companies. Making it harder to get the required software and to keep it running for a longer time will probably scare people away or it will steer them towards hacked/cracked versions.

Basically if you want to have access to non time limited versions of enterprise products of Exchange, Lync, Sharepoint, System Center, etc. you need to take a $6000+ MSDN subscription. Currently I’m paying for TechNet Pro myself which costs 375 euro and I will take a Technet Subscription for this last year. I hope that Microsoft will have come to its senses by then and has provided a proper alternative. For now I would like to ask everyone that feels the same to sign the petition to get a decent TechNet alternative.

 
3 Comments

Posted by on July 5, 2013 in Uncategorized

 

Tags: , , , , , ,

Windows 8.1 – Use windows store apps when behind an authenticated proxy

With Windows 8 one of the major issues especially when used in an enterprise was that the Windows Store and Windows Store apps wouldn’t work when you were behind an authenticated proxy unless you specifically allowed URLs to pass through the proxy unauthenticated.

I even created a blog post about this before and since it gets many views I believe it is an issue a lot of people are having.

As such I’m happy to inform you that with Windows 8.1 Preview you can configure your authenticated proxy to be used for Windows Store apps. Press Windows key + W and type “Change proxy settings”.

Win8.1_proxy

The settings from Internet Explorer are also automatically used, so existing configurations set using a GPO work as well.

 
7 Comments

Posted by on July 4, 2013 in ICT, Microsoft, Windows, Windows 8

 

Tags: , , , , , , , , , , , , , , , , , , , ,

PowerShell – Getting Started with PowerShell 3.0 JumpStart July 18

I’m a big fan of the Microsoft Virtual Academy JumpStarts. Recently a PowerShell JumpStart has been announced as well that will be hosted by Jeffrey Snover and Jason Helmick. For more information and to register for July 18, take a look at : http://www.microsoftvirtualacademy.com/liveevents/PowerShell-JumpStart. Apparently it’s even a 2 part series.

Also if you won’t be able to join the JumpStart live, the sessions will be recorded so you can view them whenever it suits you.

For those who missed it, this month there will also be JumpStart sessions for For Windows Server 2012 R2 and System Center 2012 R2. For more information and registration take a look at this blog post.

Hope to see you there.

 

Tags: , , , , , , , , , , , , , , , ,

Windows 8 – My view on the re-added start button in Win 8.1 and 2012 R2

As you may have read already, with Windows 8.1 Preview (and Windows Server 2012 R2 Preview) the start button has been re-added:

win8.1_start

Basically by left clicking you will switch between the modern/metro interface and the desktop (similar to pressing the windows key). By right clicking you will get the menu shown in the image above (similar to pressing windows key + X). For more information and tweaks take a look at:
http://www.thewindowsclub.com/shutdown-restart-sleep-hibernate-windows-8-1

Another often requested feature was to be able to bypass the metro/modern interface start screen. This boot to desktop is now also possible: http://www.thewindowsclub.com/boot-to-desktop-windows-8-1

A lot of people have been complaining and discussing the absence of the start button and the start menu and that the shutdown/restart options where too hard to access.

Personally I simply press CTRL+ ALT + DELETE, click the power icon and choose the action to perform. Or I press the physical power button on my laptop, pc or tablet.

I also don’t really need the start button/start menu. I added my most used apps on the modern/metro start screen and/or added them to my desktop and taskbar. Other apps  I simply search for by starting to type on the modern/metro start screen.

The lack of a start button does irritate a lot when you’re accessing Windows 8/2012 through RDP or any other remote method. Trying to access the hot corners to switch between the metro/modern start screen and the desktop can sometimes be hard, especially on laggy connections (ILO/RSA/DRAC). The same is true for accessing the charms bar (which you use to restart/shutdown).

The re-added start button does solve the switching between the metro/metro start screen and the desktop I described above,but the charms bar is still an issue. You can use the start button for restart/shutdown though.

What I hate most though, is that the start button is simply a button. It doesn’t include the start menu people want to access their programs and settings in a way to are accustomed to. To make it even worse the re-added official start button makes it harder to use some 3rd party start button/menu replacements that were working well (but this will probably be sorted out soon since 8.1 has only been released a couple of days). Classic shell still works well though: http://www.classicshell.net/

Even though I think Microsoft has been doing a lot of great things lately, the way they’re handling the start button/start menu isn’t one of them in my opinion. People want the start button and the start menu they’ve grown used to and that has been available for many Windows versions. This start button without the start menu will probably lead to more disappointed users because they expect the start menu to be included with the start button. I think this will also hurt adoption in the enterprise. All in all I think it’s a missed oportunity

The preview version with this start button is not the final version. While I don’t expect Microsoft to re-add the start menu before the finl release, I sure hope they prove me wrong. If you want to have the start menu back, be sure to voice your opinion. This did work for the Xbox one, where Microsoft changed course with regards to Digital Rights Management (DRM).

Even though the start button isn’t what many people have hoped for, there are a lot of other great improvements to Windows 8.1 and Server 2012 R2 though. I’ll try to post more about it in the next couple of weeks.

 
1 Comment

Posted by on July 1, 2013 in ICT, Microsoft, Windows, Windows 2012, Windows 8

 

Tags: , , , , , , , , , , ,

Windows 8 – performance issues possibly caused by KB2821895 or SuperFetch

Last week I visited my dad. He is not very familiar with computers and mainly uses it for mail, internet and viewing and editing photos. Despite my expectations, it really surprised me how fast he got used to Windows 8 (with a custom start menu).

This time though, he had some questions with regards to mail. While I was showing him how to do it, I noticed that his pc was relatively slow. Even though he doesn’t have a super fast laptop, it wasn’t this slow before.

When I took a closer look I saw that the issue was caused by high disk usage / load (I/O). At first it seemed like this was caused by TiWorker.exe which is part of Windows Modules Installer Worker and is used for installing updates. Since there were updates pending I decided to install these first just in case a fix might have been released. While these were downloading and installing I googled and found that more people were having similar sounding issues but with also high cpu usage/load. One of the the advises was to install KB2771431. This update was already installed, so it didn’t solve my issues either. I then turned off other programs that were disk I/O intensive like the backup tool Crashplan that was performing a scan and the virus scanner. Unfortunately the issue remained.

I gave the system some time just in case this was some sort of maintenance job. As the issue remainedI tried checking the system files with SFC /scannow and some files were fixed, but the disk usage was still very high.

Eventually the workaround was stopping and disabling the SuperFetch service. This is very strange since SuperFetch should make Windows faster, not slower. Since it was already late I decided not to look into it  any more at that time.

I see however that there are also issues being reported with KB2821895 that was released this month and replaces the previously mentioned KB2771431. In the known issues for KB2821895 there is mention of errors stating corruption and that you should use SFC /scannow and use the DISM tools to check and repair Windows. These symptoms do not completely match my issue, but if this doesn’t work there are also options to tune SuperFetch and Prefetch instead of turning it off completely, which is worth a shot.

So if you haven’t installed KB2771431 yet, you might want to consider postponing deployment or at least testing it very thoroughly.

To be continued …..

 
1 Comment

Posted by on June 26, 2013 in ICT, Microsoft, Windows, Windows 8

 

Tags: , , , , , , , , , , , , ,

Apple – OS X Mavericks 10.9 , iOS 7 … and more

About two weeks ago, Apple hosted the yearly World Wide Developer Conference (WWDC) where it presented new products and services. More information and a video of the keynote can be found here. My main focus will be on OS X and iOS 7 though.

OS X Mavericks 10.9 Preview

I’m relatively new to OS X and have only been using Mountain Lion since last November, but I was planning to try the new 10.9 Preview. After reading the below articles though, I think I’ll just wait for the final version.

As you have probably noticed, I’m not particularly excited about any of the changes, though I must say that better performance and better battery life is always a very welcome addition. In my opinion Apple has very good hardware, but its operating system is increasingly getting behind on the competition with regards to innovation. So they’d better come up with something very good with its next release. Personally I think they can’t escape adding touch capabilities with the next release, but time will tell. I hope for a complete overhaul though that will spark the competition.

iOS 7 Beta

The new iOS 7 for iPhone, iPad and iPod doesn’t seem to be revolutionary either and opinions differ greatly. Users are getting more demanding (especially on tablets) and I believe the redesigned user interface, new features and improvements just doesn’t cut it. Apple does have a huge loyal user base though and they have a big library of apps that are generally speaking also of relatively high quality. Also because of the limited number of hardware and software models, it is easier to manage and develop for. Speaking about managing, this new version is also providing more enterprise management options.

Closing thoughts

I do believe Apple is on the right track by providing more options and flexibility, but in my opinion they’re trying to catch up instead of leading. I am very curious to see how this will unfold and how they will innovate while maintaining the performance, stability, battery life, simplicity and design that Apple users love.

On a side note, according to the article Apple CEO Adjusts Bonus in Shift to Performance Rewards the Apple board is linking more of Chief Executive Officer Tim Cook’s compensation to the company’s stock performance. Seeking to reassure investors who have seen the shares drop 41 percent from a record in September. As already mentioned by HPO center, one of the characteristics of a High Performance Organization is long-term orientation so I don’t think this is a good development.

 
Leave a comment

Posted by on June 25, 2013 in Apple, ICT, iOS, OS X, OS X Server

 

Tags: , , , , , , , , , , ,

Microsoft – Important changes to the update mechanism in Windows 8 and Windows Server 2012

For a very long time, the update mechanism for both Windows clients and Windows servers have been the same. With Windows 8 and Windows Server 2012 this has changed.

Even though I’d already found out that something had changed with the Windows 8/Windows Server 2012 update mechanism by using it, I didn’t really know what changed and why.

  1. Windows 8 Modern (Metro) Apps security patching does not work the same as regular security patching. For more information, read “Microsoft’s new security patching routine raises concerns“.
  2. Default behavior after you install an important update in Windows 8 or in Windows Server 2012 is that you receive a notice that you have to restart the computer in three days. If the restart does not occur in three days, the computer displays a 15-minute countdown and then automatically restarts. By default, this automatic restart is delayed if the computer is locked, and the countdown will begin the next time that you sign in to the computer. Update KB2835627 has been released that introduces a new registry key called AlwaysAutoRebootAtScheduledTime which enables you to configure a forced restart after installation if desired.
  3. This great blog post provides more insight: “Managing Updates with Deadlines in an era of Automatic Maintenance“. The reactions are also very interesting.Some of the key takeaways from this post:
    • A new feature called Automatic Maintenance, runs nightly and performs various tasks such as lightly defragmenting hard drives (or TRIMming SSDs if necessary), checking, repairing, and optimizing the system component store, running anti-virus scans, installing updates, and more.
      • The setting for when to download and install updates doesn’t work in the same way as it did. While you can still set Windows Update to download updates and install them automatically or not, the day-of-the-week setting is not effective. It is included in the automatic maintenance and there isn’t a way to individually specify which maintenance tasks run on which day.
      • The Windows Update Agent doesn’t have to be active in the background all the time because of this. This consolidation reduces system resource usage and battery usage.
    • If you want to be in control of when updates will be installed you have to use WSUS and set deadlines for updates.

Even though I understand the reasoning behind the change, I would have preferred that Microsoft gave customers options to choose their preferred method. In my opinion this method makes sense for clients, but not so much for servers.

Also for some (smaller) companies the specific day and time patching method (including downloading from Microsoft Update) worked fine and now they might have to install, configure and maintain a WSUS server (including patch approvals) to achieve the same result.

What do you think about this ? Leave a comment on either my blog or on the original blog post : Managing Updates with Deadlines in an era of Automatic Maintenance

 

Tags: , , , , , , , , , , , , , , , , , ,