Small Business Server (SBS) is a line of server operating systems targeted at small businesses by bundling the operating system with a number of other Microsoft products that would normally need to be purchased or licensed separately. The most notable inclusions are Exchange, SQL Server, SharePoint and ISA/TMG (Microsoft's firewall and proxy server).

Share tech news, updates, or what's on your mind.

Sign up to Post

Hi –

I have a client running SBS 2011 and has 16 workstations attached to the domain.  They are either Windows/7 or Windows/10 clients.  They use RWW for remote access to the domain workstations.  Any Windows/7 workstation is capable of RWW – no problem to any of the workstations (Windows/7 or Windows/10.)  The problem is when the user attempts to access the domain clients from Windows/10 – they get the message
“Your computer can’t connect to the remote computer because a security package error occurred in the transport layer.  Retry the connection or contact your network administrator for assistance.”
The strange thing is the first time a Windows/10 client tries to connect through RWW it works.  After that we get this message.  Can access any workstation using Windows/7 so I don’t think it is the server nor the domain computer.
Tried deleting the history, download, etc from Internet options, but nothing changes.  Today, using a Dell laptop (Windows/10) was able to get on – but the second time I got the error message.  
Any help would really be appreciated.
OWASP: Avoiding Hacker Tricks
LVL 13
OWASP: Avoiding Hacker Tricks

Learn to build secure applications from the mindset of the hacker and avoid being exploited.

Customer engaged us because their physical server was down completely (hardware failure).  Old server was 2012 R2 Hyper-V server, running three VMs, one of which was SBS 2011 acting as their DC, file and exchange server.  We recovered the VHD files from failed server's disk and copied to another server, this one running 2019.  FYI - There is NO backup of the guest operating systems, just the VHDs we pulled and file-level backups.
Created new VMs on the new box and attached the recovered VHDs.  Everything seemed fine.  One server (the SBS and most important) has issues thoguh.  It boots fine and SMB shares, Active Directory, DNS, and everything work OK.  Exchange 2010 is a totally different story.  It keeps throwing errors about being unable to connect to a DC.
Server occasionally boots to blank desktop backgound with cursor (temporary) access to task manager, and all-around sluggishness.  Also likes to hang on Applying Settings - almost like it's looking for something that's just not there.
The DNS on the VMs NIC points to itself, and nslookup returns the local DC.
Among the errors received:
Process MAD.EXE (PID=3736). Topology discovery failed, error 0x80040a02 (DSC_E_NO_SUITABLE_CDC). Look up the Lightweight Directory Access Protocol (LDAP) error code specified in the event description. To do this, use Microsoft Knowledge Base article 218185, "Microsoft LDAP Error Codes." Use the information in that article to learn more about the cause and resolution to …
Exchange 2010 is on an older SBS 2011 server we are in the process of decommissioning.  I have a new DC already in place that is the FSMO holder, and I had installed an Exchange 2016 server on another 2016 Windows standard server.  So it's part of the topology, has its fingers all through AD, but timing hasn't allowed us to do the actual mailbox migration yet, so all mailboxes are still on the old server.

This weekend someone hacked an account and got ransomware going in their environment.  Not that big of a deal, they have a Datto on site, so the file shares on the domain controllers we could restore easily.  The SQL, Exchange, and terminal servers were infected though.  Easily enough to recover, the hack happened after the backups on Saturday night.

The SQL and Exchange were hyper-v guests, the terminal an older physical server.  

SQL was easy, I exported the VHDX file, mounted it in place of the corrupted one, booted up and we're going just fine.  Terminal, since it's older, and is being replaced in about 8 months, I decided to P2V, and that's now running just fine as a virtual guest on their host server (Windows 2019 standard for the Hyper-V host).  

But even Datto is totally unable to get the Hyper-V exchange server to boot.  I've done a dozen different things at their direction, exporting as Gen2 (which it was originally), Gen1, BIOS, UEFI, creating a new temp gen2 Hyper-V guest and doing a bare metal restore to it, doing a new temp gen1 Hyper-V guest and …
HI -
I cannot connect to a domain on SBS 2011 using Windows/10.  I have a number of Windows/7 workstations as domain connected devices but when I try to connect a Windows/10 workstation it says it cannot reach the Domain.  I can ping the domain from the workstation, as a test, I dropped the firewalls, but nothing worked.

I have set the DNS to point to the server, have set entries in the Host file pointing the domain to the server but it still does not connect.  When we try to add the workstation through the wizard, When it asks for the domain name, the user id and password it accepts the information. On the second screen, when it asks for Domain name and user name, if either one is invalid, it stops me.  When both are correct it bring up the 3rd and final screen, it we enter the domain administrators' account, the correct password and the domain (sometime the domain and sometimes domain.loca) but neither worked.

Any help would be appreciated -

Trying to install Avast Business AntiVirus on a Windows Small Business Server 2008 until I move the server to a new machine.

Avast said that the product should install on SBS 2008

When trying to install I get the following error:  " The procedure entry point K32EnumProcesses could not be located in the dynamic link library KERNEL32.dll "

How can I deal with this error and install the software?

Need functional forest level on SBS 2003 box raised to 2008 so a 2019 DC can be added to a 2003 domain  
Does anyone know if/how this can be done?
I need malware protection for an older Windows Server:

The user has an older Windows Server:
Windows Server Standard FE, Service Pack 2  Copyright 2007

Is this a Small Business Server 2008?

What can I use for Virus, Malware, and Ransomware protection?

I have a license for Malwarebytes Endpoint Protection, but I can't locate a version of Malwarebytes that supports this system.

This server will be migrated soon.  I need to protect it for a while.
I am in the process of migrate one particular domain emails from On-Premises to Office 365 using a third party tool of Skykick. The cutover date is in 2 days.

The scenario is this:

The On-premises server is SBS 2011 which is Exchange 2010. It hosts 30+ emails with 7 Authoritative domains (see the attached). Users login on their Terminal Server (Windows Server 2012) to access all the company resources and exchange emails.

The moving away domain is not the primary domain. All Users (including the users with the moving away domain) are still login to the Terminal Server to access all their resources.

My query is:
What are the steps for the After Cutover Migration on the On-premises server to properly remove the Moving Away Domain email settings so that the internal mail flow will have no issue?
I have no issues with update DNS and MX records etc. for the moving away domains. Email flow outside the company domain environment should be all OK I believe.
Hello, so we have this (quite old) SBS 2011 Standard which has recently become abismally slow.

It's mainly a data server (we're not using Exchange) and sometimes when a client opens files on the server there are very heavy slowdowns, to the point where I had to reboot a client yesterday because it would hang on a small Access database.

I think I've found the culprit though. Disk activity is always very very high, and the processes behind this activity are related to SQL Server 99% of the time.

It looks like the main cause is the SBS Monitoring service, which relies on SQL Server to function.

So I think I nailed down the cause, but the question is: what to do about it? Is there a way to circumvent this? Thanks.
Not sure if I am a complete noob or just need tips on best practices <g>

I have the sync app installed and going through setting up my o365 account.  It wants to use a really long folder name


Is it OK to shorten that?  Do I want that onedrive folder to be under c:\users\me? directly?  or shouldn't my my docs be THE onedrive folder?  I realize my docs can be inside onedrive.
Also, concerning the ability to sync the files locally - is it reliable these days? Able to deal with someone working on the cloud version while you work offline? And then it warns of changes when you get back on line? Shows differences then or you have to manually look at it?

And setting up local file sync - is that something that can be managed in the office 365 admin panel by an admin, or you have to touch the desktop / how do you keep someone from syncing too much / filling up their local hard drive?

Trying to learn and keeping in mind people that have been using local storage will have to learn this/ I need to be able to explain it to them.
C++ 11 Fundamentals
LVL 13
C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

We have a Client, using SBS 2011 and Exchange 2010.

After migrating to office-365 and connecting the AD via Azure AD Connect to office365, we have the following Problem.

We migrated all Mailbox-Data using a Cutover Migration Batch.

These Users rely heavily on Outlook Calendar information and often schedule a outlook meeting and invite external and internal e-mail adresses to those appointments.

When we try to change an Appointment Info and update all Attendants, the user gets an error message:

Nachricht hat einige oder alle Empfänger nicht erreicht.
      Betreff:  MSH-Austausch 3
      Gesendet am:      03.06.2019 10:43
Folgende(r) Empfänger kann/können nicht erreicht werden:
      USERNAME am 03.06.2019 10:43
            Diese Nachricht konnte nicht gesendet werden. Sie besitzen nicht die Berechtigung, die Nachricht im Auftrag des angegebenen Benutzers zu senden.
Diagnoseinformationen für Administratoren:
Der Fehler lautet [0x80070005-0x000004dc-0x00000524].
        request-id: 940664f6-8f25-4bd1-8b29-5410387c81c7
        X-ServerApplication: Exchange/15.20.1922.000
        X-FEServer: VI1P194CA0034
        X-BEServer: AM0PR03MB5779
        X-RequestId: {359BBF72-08A1-4777-9B15-1EBD2565ED26}:2291
I am moving Folder Redirection policy to new location, and do not want to loose users data on policy removal.

I have client with SBS2011 and Folder redirection Policy pointing to:


I am in process of migrating them to Server 2016 Standard (and DFS) and will have new Folder Redirection Policy pointing to:


I am afraid that when I turn off current "Small Business Server Folder Redirection Policy" and implement new "FOLDER REDIRECTION" policy users will loose their data.

Current "Small Business Server Folder Redirection Policy" is set to "Redirect the folder back to the local userprofile location when policy is removed"

Should I switch it to "Leave the folder in the new location when policy is removed" ?

(Please note that users files are already copied to the new location)
Concerning options for getting rid of an SBS 2011 standard server for small business with 10 users.  500GB of data across all users.  They are currently using office 365 for hosted exchange.

They are being to told to not get an in house server.  Just move all the data to 'OneDrive or Sharepoint online'.

I know onedrive, but sharepoint - is that like access - you use it to build apps / ways to get to the data? or is it like one drive in being able to access files from most anywhere and share them inside the company, right out of the box?

And the idea of no server at all in the office.  (they ARE talking of more of a dispersed operation / people not coming into the office / doing away with the office.

Then they are just using any windows 10 machine and they'd use a windows email address login rather than a domain login to get into the computers? And their files would be on onedrive / sharepoint?

And administration would all be in the admin portal of office 365?  what I use now to create users / set up email accounts, etc?  A guy leaves / you change his password on office 365 and he can't get email / can't get to files in the cloud?  But he might have onedrive files stored locally?  unavoidable issue?  THis is a small family  business, so not really an issue.

So basically:

What do you think of no server in the office? What do you lose? How would things change?

and OneDrive vs. Sharepoint?   Pros / cons? What do you use?

got a server 2011 SBS.
i am looking for the attribute tab in active directory user properties.

i have enabled advanced features from view option- still its could not find attribute tab. is this anything you guys know ??
An SBS 2011 standard server was bought in March 2012. It's running SBS 2011 standard.  There's 13 users at 2 locations.  We've moved to Office 365 for email and I disabled the Exchange related services on the server.

of the 13 users, 8 are in the office / on the LAN with the server and 5 users are at a remote location and get to the files on the server with a Watchguard firebox at each location and a VPN connecting the 2 locations.

The server is now being used just as a file and print server.  Most all the files are word / excel / PDFs that aren't all that big.  Users could connect to the printers (big canon copiers) directly over the network.

Users always stay at their own desk / don't log into other computers.  Barely no one needs to access files remotely.  For a couple users that do, we have logmein installed on their computers.

We have ShadowProtect backing up the server and desktops.

With that info, what would you say are options to replace the server?  Oh another thing is not to go crazy on complexity and cost.

1) replace it with an SBS 2016 Essentials server?
2) replace with a 2019 server running essentials?
3) Put in a NAS?  without AD, what do you really lose? I guess i take AD for granted.
4) Is azure AD an option? Needed?
5) What about putting files 'in the cloud'?  I understand one drive. But to share files between users, does that need sharepoint?  Is that harder to admin / setup than onedrive?
 6) something else?

And if you are thinking…
On an domain with SBS 2011 standard, in the last couple days, users (there's only 5 of them) are not getting to server shares and printers.

In windows explorer, they can enter \\server and then they get prompted for their credentials.  They use the same credentials they have been for months / years.  They then see the shares.

It seems after their screen saver kicks in, then then have to repeat the process to get to the shares.  Same for reboots... they log into the domain at the login screen, then have to re-enter their credentials to get to the server shares.

The SBS box is the DNS and DHCP server. no other DHCP servers on the network. They have a watchguard firewall, but DHCP is turned off.

I try opening the certificate authority on the SBS box. It shows the window and tree structure on the left, but hangs at not responding when trying to expand the tree.

ShadowProtect jobs on the desktops are failing with

An untrusted certificate authority was detected While processing the smartcard certificate used for authentication

ShadowProtect writes to a drive on the server.
Just completed a server migration from Windows SBS 2011 to Server Standard 2019. Everything works but...

The NAS backup is a Drobo B800i connected via iSCSI. The IPs have remained the same from the previous server. The initiator found it on the old server but not picking it up on the new.

1. The Microsoft iSCSI service is running
2. I can ping the Drobo.
3. It is fully patched on latest firmware (2.0.6)/Dashboard.
4. When I put the Drobo IP into the iSCSI initiator I get a fail screen.

iSCSI not finding the IP
Any ideas how I get the iSCSI Initiator to see the Drobo?
SBS 2011 - Can I delete the contents of c:\windows\softwaredistibution\download to free up some space on the 'C' drive?

If this is possible without any negative consequences, what is the best way?

I've ran Disk Cleanup etc. but need to free up some more space.

I look forward to hearing from you
We are loosing Internet access when our Small Business Server 2011 Standard is down or rebooting for updates.  I have a backup domain controller, yet internet access still goes down. Whats the best option to configure my backup domain controller to maintain the connection?
Become a Microsoft Certified Solutions Expert
LVL 13
Become a Microsoft Certified Solutions Expert

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

DNS Zone ErrorHi,
 I have SBS2011 and when I run Fix My Network from SBS Console/Network/Connectivity, it shows that a few DNS related errors.
 Is there anything I can try? When I open DNS manager, all the computer names are there in forward & reverse lookup zones.
 What can I do?
Hi experts,

My problem du jour is that my SBS2011 STD server is no longer backing up successfully.  It has always been kind of flaky, with failures not being uncommon, but a restart or two has always remedied and it has 'worked' for us for many years.  I've now gone almost a month without a successful backup and am now getting very worried should I need to restore.  Murphy's Law being what it is, this would be the time we get hit with some kind of audit or ransomware, etc. and I'd be SOL.

I have two 2TB USB drives that I rotate, and backups fail regardless of which drive is active.

I'm seeing the following sequence of errors in the event viewer for each failed attempt.

Event 9782 MSExchangeIS twice, one for Mailbox database and one for Public Folder database.

Exchange VSS Writer (instance 93bfdbd7-3f2e-4b3a-ae98-b69ff0381a15:1) has completed the backup of database 'Mailbox Database' with errors. The backup did not complete successfully, and no log files were truncated for this database.

Exchange VSS Writer (instance 93bfdbd7-3f2e-4b3a-ae98-b69ff0381a15:1) has completed the backup of database 'Public Folder Database 0050806336' with errors. The backup did not complete successfully, and no log files were truncated for this database.

Event 2007 ESE

Information Store (16572) Shadow copy instance 1 aborted.

Followed by two info events

Event 9616  Exchange VSS Writer (instance 93bfdbd7-3f2e-4b3a-ae98-b69ff0381a15:1) has processed the backup completion…
We have an SBS2011 server (migrated from SBS2003) with a <domain>.local domain.  
We have purchased a new server with Windows 2016 and plan on creating a new domain controller with a new domain to fix the <domain>.local issue, cleanup many AD settings from [/list]SBS2003/2011 and revert to a "standard" AD configuration (non sbs). We don't want to migrate SBS AD to Windows 2016 AD.

New domain will be <domain>.com or internal.<domain>.com

We are also moving to Office365 and plan to sync our users accounts from the new domain

My question is how to migrate the users mail (from SBS2011) to Office365 using the users (same user names) from the newly created domain on Windows 2016?

That is I create and sync my Office365 users from new Windows 2016 server then need to migrate the mail from the old SBS2011 server to office365.

If I create users in Office 365 via the SBS2011 server then the Ids (sids?) in Office 365 won't match the ids from the new domain when I decommission SBS2011.
If I create the users in Office 365 via the new win2016 server how do we migrate the mail from SBS2011.

when a user gets married and requests a username change SBS2011 Exchange 2010
two questions here
1. where is the appropriate place to change the user from to
2. The user wants old email to forward to new email account
I am migrating a SBS 2011 Server to a 2019 Standard. Going well but hit a problem with the Group Policy Management Console on the 2019 Server. See attached screen shot. I can still user GPMC on the SBS 2011 Server. Just not on the 2019 Server.
Just to make sure I have it right I can join this 2019 Standard as a member and promote it to a DC. Then there is no time limit. I can take all the time I need. At the tail end take the FSMO roles and demote the SBS 2011. That pretty much it? Any pitfalls I need to know about?






Small Business Server (SBS) is a line of server operating systems targeted at small businesses by bundling the operating system with a number of other Microsoft products that would normally need to be purchased or licensed separately. The most notable inclusions are Exchange, SQL Server, SharePoint and ISA/TMG (Microsoft's firewall and proxy server).