Windows Server 2016

Windows Server 2016 is the successor to Windows Server 2012 R2. Built upon the same core code as Windows 10, Windows Server 2016 brings enhancements in security, servicing, and connectivity. A particular focus on this release was hybrid-cloud scenarios, and has close ties to Azure and other Microsoft cloud initiatives. This does not detract from the many improvements that are available for on-premises-only deployments

Windows Server 2016 comes in Datacenter, Standard, and Essentials editions, and for servicing, has adopted windows 10's cumulative model. The new nano-server install is designed to be remotely managed and is designed to be kept current through continuous feature updates. The full GUI install operates similarly to windows 10's "Long Term Servicing Branch" (LTSB) model with cumulative security updates.

Windows Server 2016 has also shifted from a per-processor-and-CAL licensing model to a per-core-and CAL licensing model. This brings Windows Server's licensing more in line with Microsoft's other products and makes hybrid-cloud license planning easier as well.

Share tech news, updates, or what's on your mind.

Sign up to Post

I am running Windows Server 2016 and I'd like to disable Internet Explorer on a server that a handful of "non technical" folks use.

The purpose of this is to attempt to get them to use Firefox instead.

Is it possible to Uninstall or Remove Internet Explorer altogether?

Thanks!
0
Is it worth upgrading from SQL Server 2012 sp4 to a newer version of SQL Server?  I have a fairly simple application that uses SQL server and Coldfusion.  I'm in the process of setting up a new server to update the OS to Windows Server 2016.  I would like to keep using SQL Server 2012, though I know it is 8 years old.  

SQL 2012 standard does everything that I need it to do at this point, though I loathe the idea of having to upgrade it in a few years.  Also, is there any way to upgrade the license or are you starting from scratch cost wise?

Thanks!
0
I found some errors running health checks on my domain controllers.  I did not have any problem with users, computers, DNS or DHCP that I notice.
I create a test GPO in DC1 and immediately was in DC2.
I got these errors:
1-      There are warning or error events within the last 24 hours after the SYSVOL has been shared.  Failing SYSVOL replication problems may cause Group Policy problems.
2-     [1] Problem: Missing Expected Value
Base Object: CN=CON-DC1,OU=Domain Controllers,DC=Contosocs,DC=local
Base Object Description: "DC Account Object"
Value Object Attribute Name: msDFSR-ComputerReferenceBL
 Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
 [2] Problem: Missing Expected Value
 Base Object: CN=CON-DC2,OU=Domain Controllers,DC=Contosocs,DC=local
Base Object Description: "DC Account Object"
Value Object Attribute Name: msDFSR-ComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
3-      LDAP Error 0x20 (32) - No Such Object. ......................... CON-DC1 failed test
4      DCOM was unable to communicate with the computer XX.XXX.XXX.111 using any of the configured protocols; requested by PID      390 (C:\Windows\system32\dcdiag.exe).
5-     DCOM was unable to communicate with the computer XX.XXX.XXX.95 using any of the configured protocols; requested by PID     11e8 (C:\Windows\system32\dcdiag.exe).
These IPs related…
0
This might seem like a really silly question but our Group Policy still is using Windows XP images and design UI so it got me thinking is there a way to check if we are using the latest version of Group Policy?

Our Server is: Windows Server 2016 Standard Version 1607

groupolicy.PNG
0
I have a new win 2019 server and I am trying to configure group policies to redirect folders.

When I use %username% in the "basic" path name it does Not allow me to apply it.  I have changed the path to a literal username (e.g. user1) it works.

I have tried uppercase for %username% and it still won't apply.

any ideas of how to have this accept the %username% value?
0
I am unable to activate a Windows 2016 Standard license .    I am at the Window Activation screen and the error is showing "We can't activate Windows on this device as we can't connect to your organization's activation server.  Make sure you're connected to your organization's network and try again.   If you continue having problems with activation, contact your organization's support person.    Error code: 0xC004F074

I click on the Change Product key and nothing happens.

I click on troubshoot and nothing happens.  

What am I doing wrong?
0
Hi Experts,

I have to make some user and computer migrations from one domain to another domain.

One user makes always a problem with ADMT User migration.

See the log:

[Object Migration Section]
2019-11-21 15:36:23 Starting Account Replicator.
2019-11-21 15:36:26 CN=Dom\, Joey        - Created
2019-11-21 15:36:26 ERR2:7430 SID History for User cannot be updated because auditing is not enabled on domain.com.   rc=8536.\n  This operation requires that auditing be enabled for Success and Failure auditing of account management operations.
2019-11-21 15:36:26 WRN1:7392 SIDHistory could not be updated due to a configuration or permissions problem.  The Active Directory Migration Tool will not attempt to migrate the remaining objects.
2019-11-21 15:36:26 Operation Aborted.
2019-11-21 15:36:27 Operation completed.

Open in new window


Auditing is configured on both domains.

Do you have any ideas ?
0
Hi Experts,

to install windows server 2016 core version on VMWARE 5.5 , is this supported ?

Do you have a link from Microsoft or VMWARE ?
0
Hi Experts,

I have one question.
When I install WIN 2019 with GUI, is it possible to uninstall the GUI and just use the CORE mode ?
And the same question for WIN2016.
0
Hyper-V is running an Exchange Server on Windows Server 2016 Standard. The configuration was changed and now the mail is not received anymore. Also, the server can't ping exchange and vice versa. Who can solve this ASAP?
0
Hi Experts,

after the upgrade from EXCH 2013 to EXCH 2016 I have unistalled the old EXCH.

Now when I check the cmd ->
get-exchangeserver

Open in new window


I get this output:

[PS] C:\Windows\system32>Get-ExchangeServer

Name                Site                 ServerRole  Edition     AdminDisplayVersion
----                ----                 ----------  -------     -------------------
EXCHANGE          dom.co.de/Configu... Mailbox     Coexistence Version 15.1 (Bu...


[PS] C:\Windows\system32>

Open in new window


Why it is still Edition -> Coexsistence ?
0
Hi, I am working migrating my FSMO roles from old Server 2008 R2 to my new Server 2016.

While in preparation, I was wondering about the AD Sites & Services Bridgehead role (IP & SMTP) for said servers.

From this forum discussion, it is automatically assigned?  And there is really no need to manually switch it?
https://social.technet.microsoft.com/Forums/WINDOWS/en-US/100af9ac-3602-4da6-b705-880ced094b6e/do-i-remove-ip-or-ip-and-smtp-in-my-bridgehead-under-sites-and-services?forum=winserverDS

However, my plan is obvious, that I am migrating everything off of my old Server 2008 R2 to my new Server 2016 in order to decommission my old Server 2008 R2 domain controller.

So, if I migrate the FSMO roles from my old Server 2008 R2 domain controller to my new Server 2016 domain controller will AD Sites and Services reflect the changes in the Bridgehead role too?  Or do I need to manually move those from my old Server 2008 R2 domain controller to my new Server 2016 domain controller?

Or do I even need to consider this part?

I do have physical domain controllers (Server 2008 R2) still at 3 branch sites.  I plan to replace them with virtual machine Server 2016 domain controllers that will reside at my main branch site, but will service the branch sites via VLAN's, etc.


If I do need to move these Bridgehead roles, should I add the roles to the new Server 2016 domain controller first then remove it from my old Server 2008 R2 domain controller or vice versa?


0
I would like to ask what is better for DHCP , to provided by router or by server?

I know that there are these 2 options but i don't know what is better to use.
0
WE ARE GETTING 611 ERROR - DIRECTORY SYNCHRONIZATION , password hash synchronization failed for domain

WE NEED TO KNOW what is the version of Azure AD Connect and whether it is compatible with Windows Server 2016 Domain Controller
as we just promoted new DC yesterday
0
When requiring a password change AD domain only tells user if what they choose doesn't meet the requirements but doesn't indicate what the requirements are.  Is there a way to define an AD group policy that will notify the user of what the requirements are?
0
I’ve a group policy being applied from a demoted server, how can I remove it?
0
I am running windows erver 2016, and enabled Hyper V on it.   I have 3 VMs, a windows 10 VM, Ubuntu and a Unitrends VM.
They all are having the same problem, when I'm on my computer or any computer on my network, if I try to copy a folder to a shared folder on any of the VMs,
it connects, but doesn't transfer, keep getting errors not able to access the folder.   It connects because it shows a ... calculating.... the speed, and then sometimes it even starts to copy files, but it's like at 23kb/s or something, when I have a full gig connection on my computer.   Then after a few minutes, all transfers just time out.

So I'm thinking the issue is with HyperV somewhere?  I have turned off the windows firewalls on both the server and the VMs as well.

Any suggestions how to get this to work?
0
Hi experts,

we have bought a new company, lets say we call it GS.
The network part is done.

We have to do the following:

  1. Setup an AD trust with the new company GS -> 2-way selective.
  2. The users of GS should use our Exchange server, but until now they have their own Exchange server and mailbox.
  3. The users of GS should get our new email addresses.
  4. The users of GS should be edited with new group membership.

What is the best practice way to do this migration ?
What to do first ?
Do you have some helpful links and examples ?
0
Faulting application name: ServerManager.exe, version: 10.0.14393.1737, time stamp: 0x59bafc80
Faulting module name: KERNELBASE.dll, version: 10.0.14393.1770, time stamp: 0x59bf2ba6
Exception code: 0xe0434352
Fault offset: 0x0000000000033c58
Faulting process id: 0x6d84
Faulting application start time: 0x01d3615904b9ea7d
Faulting application path: C:\WINDOWS\system32\ServerManager.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: 75df48a2-559e-40ac-af90-d586582aeed3
Faulting package full name:
Faulting package-relative application ID:

I've done the obvious:
dism /online /cleanup-image /restorehealth
sfc /scannow
reboot
.net framework repair tool
clear cache file under “%userprofile%\AppData\Roaming\Microsoft\MMC
deleted C:\Users\david\AppData\Local\Microsoft_Corporation\ServerManager.exe_StrongName_m3xk0k0ucj0oj3ai2hibnhnv4xobnimj
restarted computer

still crashes. See video https://www.screencast.com/t/arBmz977RSe

2 events
Faulting application name: ServerManager.exe, version: 10.0.17763.168, time stamp: 0xc452e206
Faulting module name: KERNELBASE.dll, version: 10.0.17763.802, time stamp: 0x86aa4cf5
Exception code: 0xe0434352
Fault offset: 0x0000000000039129
Faulting process id: 0x524
Faulting application start time: 0x01d5987aca34256d
Faulting application path: C:\Windows\system32\ServerManager.exe
Faulting module path: C:\Windows\System32\KERNELBASE.dll
Report Id: 6db9a785-353d-4b0c-ba3f-57be62372435
Faulting …
0
I just found a computer that only had "local" users.  I guess that's what they're called because they are associated with the computer and not the domain to which it's joined.
Now, I had never really thought about what that list of usernames is *called* so I can't talk about it readily.

If one runs:
net users
Then they get a list of the usernames that are associated with the computer and not the domain to which it's joined.

If one runs:
net users /domain
Then they get a list of ll the domain users quite independent of the computer that this command is run on.

If one opens Control Panel  \ Users and then Manage User Accounts, THEN the DOMAIN (or COMPUTERNAME) association is listed.
And, here, one can ADD a domain user.
Yet, if one selects the Advanced tab, and hits the Advanced button, the lusrmgr dialog opens and the domain users aren't shown there.
Are we confused yet????

Well, I understand that lusrmgr means "local user manager" and so that's all it shows.
This makes me wonder what the list is called that Manage User Accounts shows us?
It also makes me wonder what is the difference between a domain user that isn't listed ... just a "domain user" and one that's listed here?
Is this what a "local domain user" is?
0
Is there any issues migrating from a 2008 R2 print server to a 2016 print server?  I read on another board that it can be done because to migrate from 2008 R2 to a 2012 is the same process as jumping from 2012 to 2016.  Just looking to see if I'm going to run into any problems or surprises.
0
Hi Experts,

we have two old DCs -> Win2008R2 + DNS
and we have two new DCs -> Win2016STD + DNS

We have to remove the old DCs from the network.
Can you provide a tool, to check the source for incoming connections ?
I need to know where these old DCs are configured and entered.

We have over 1000 VMs and some physical hosts and many locations.
0
Hi Experts,

I have an urgent question.
Here the ldapquery doesnt work anymore, because of more than 1500 attributes.

Can I change the value to max 5000 ?
I have checked the value with NTDSUTIL and ldap policy: Show Value

We use Windows Server 2008R2 and 2016.
0
If somebody copied a file from a windows file server to elsewhere, e.g. desktop, USB drive, would there be any form of footprint/evidence on the server itself of such an activity taking place. I know windows OS leave many forensics artefacts of file opening, such as jump lists, but I have never heard of forensics artefacts regarding file copies on the source location itself, so without a suspect and then their device its tricky to identify,
Also if file level auditing was enabled on the server, where specifically in the event logs would those actions be captured, and does windows capture copies, or only file creations/deletions/access type events? I presume by default file type auditing is off?
0
Hi, trying to decide on or figure out what version of AD CS (Active Directory Certificate Services) to migrate / upgrade to in my current environment.

Current Environment:

- FFL: 2008 R2  (Will elevate to 2016 after 2008 R2 DC's are removed)
- DFL: 2008 R2  (Will elevate to 2016 after 2008 R2 DC's are removed)

- Windows Server 2016 domain controllers
- Windows Server 2008 R2 domain controllers  (Soon to be decommissioned)

- Windows Server 2008 R2 AD CS

- Exchange Server 2010 (latest patches)  (Soon to be replaced by Exchange 2019)



So, my question is do I stick to Server 2016 AD CS to match my new DC's?  Or do I go to Server 2019 AD CS?

What's MS best practice?

Originally, years ago when I was deploying my Server 2008 R2 DC's, I went with Server 2008 R2 AD CS...mainly because there wasn't another option (it was pre-Server 2012/2012 R2).


Now that I have options, just wondering which route to go.


Thanks in advance.
0

Windows Server 2016

Windows Server 2016 is the successor to Windows Server 2012 R2. Built upon the same core code as Windows 10, Windows Server 2016 brings enhancements in security, servicing, and connectivity. A particular focus on this release was hybrid-cloud scenarios, and has close ties to Azure and other Microsoft cloud initiatives. This does not detract from the many improvements that are available for on-premises-only deployments

Windows Server 2016 comes in Datacenter, Standard, and Essentials editions, and for servicing, has adopted windows 10's cumulative model. The new nano-server install is designed to be remotely managed and is designed to be kept current through continuous feature updates. The full GUI install operates similarly to windows 10's "Long Term Servicing Branch" (LTSB) model with cumulative security updates.

Windows Server 2016 has also shifted from a per-processor-and-CAL licensing model to a per-core-and CAL licensing model. This brings Windows Server's licensing more in line with Microsoft's other products and makes hybrid-cloud license planning easier as well.