Tuesday, 29 September 2009

ESX 4.0.0 build-164009 and HP ProLiant DL380 G6

Hello people,

Here is a quick one. Yesterday I installed VSphere ESX 4.0 build-164009 on the HP ProLiant DL380 G6 server. After installing ESX I tried to install Windows 2008 Standard R2 x64 as a guest machine, but the installation could not see the hard drives. As usual I tried to download RAID controller drivers and point the installation to those drivers, but still no luck. I tried different drivers, no luck. Then I tried different OS (W2003R2STD x64) with different drivers, nothing has happened the installation could not see the hard drives. I spent few hours trying different systems and drivers, I even updated ROM on the server with some updates specific for ESX 4.0, but nothing helped.

Eventually, after several hours of the useless efforts, ESX 4.0 was updated to build-175625 using vCenter Update Manager, and guess what, everything started working!!! After that I tried to install ESX 4.0 build-171294, just to check how it will work on the same server, and it worked perfectly, the Windows 2008 STD R2 x64 installation saw the hard drives and ran with no problems.

So, I can only assume that ESX 4.0 build-164009 has some hardware incompatibility with HP ProLiant DL380 G6 server. I did not test this build on the other servers and cannot say if it is happening with other hardware, but if you are having problems using ESX 4.0.0 build-164009 and HP ProLiant DL380 G6, just update your ESX 4.0 to a higher build.

Thanks,

Kudrat

Monday, 28 September 2009

Filtering Group Policy from Applying (Windows Server 2003)

Hi,

Here is a small post about filtering a Group Policy from applying to some users. I have recently met several engineers confused by the Group Policies applied to the Terminal Services.

Here is the scenario:

- You create an OU for your Terminal Server

- You put your Terminal Server into that OU

- You create and apply a Group Policy with enabled Loopback processing which applies some restrictions, for example disables RUN or disables access to the local hard drives, etc.

- You try to logon to the Terminal Server as an Administrator and cannot perform your administrative task, because you do not have the RUN and do not have an access to the local hard drives.

Some engineers are trying to create a separate OU with a GPO which has no restrictions and they set Block Policy Inheritance on that OU, thus they are hoping that the Administrator will not have any restrictions on the Terminal Server. But they are forgetting the golden rule of the Loopback Processing, as we remember Group Policy Loopback Processing is replacing all User Configuration settings, which means that the Administrator will still be getting all User Settings from the GPO applied to the OU with your Terminal Server.

If you do not want a GPO from the Terminal Server to be applied to the Administrator’s account here is a simple and easy solution.

1) Open the Properties page of your Terminal Server OU and go to the Group Policy tab.




















2) In the Group Policy tab click on the Properties button and in the new windows go to Security tab. In the Security tab pick (add if not shown) required Group or User, for example Administrator and tick Deny in front of Apply Group Policy.




















By doing this we have filtered the Group Policy from applying to the Administrator’s account.
You see, it was easy :-)

Take care,

Kudrat

3