GRC Technology

Esxi 6.5 host auto deploy booting issue error below: "Cluster name" its not holding the auto deploy ISO image After moved the "prod cluster" its working fine

      VMware host maintenance using cmd using putty or console  Can you please try to connect directly to the Host with the vSphere Client and place the host in maintenance mode. If that will not work also, please try to use this command: vimsh -n -e /hostsvc/maintenance_mode_enter To exit maintenance mode use this command: vimsh -n -e /hostsvc/maintenance_mode_exit

                  Following PowerCLI cmd to export the OVA file  1. Get-vm vm name 2. Get-vm vm name : export-vapp -distination d:\donwnload location

Mount a snaphot C:\Windows\System32\ntdsutil.exe snapshot "mount {b2e4ddbe-c498-4311-84c3-d978d48eaf44} " quit quit NOTE:  {b2e4ddbe-c498-4311-84c3-d978d48eaf43} is just an example of the GUID

Unmount a snapshot C:\Windows\System32\ntdsutil.exe snapshot "mount {b2e4ddbe-c498-4311-84c3-d978d48eaf44} " quit quit NOTE:  {b2e4ddbe-c498-4311-84c3-d978d48eaf43} is just an example of the GUID

List mounted snapshot cmd  1. C:\Windows\System32\ntdsutil.exe snapshot "list mounted"  2. quit  3. quit

below command to PowerCLI command to identify the list of powered off server. Get-VM | Where-Object {$_.PowerState -eq 'PoweredOff'} | select Name,PowerState,VMHost,Folder,Guest | Export-Csv C:\Users\Miliyas\Downloads\vmlist.csv

To prevent conflicting updates in Active Directory performs updates to certain objects in a single-master fashion. In a single-master model, only one DC in the entire directory is allowed to process updates. Active Directory extends the single-master model to include multiple roles, and the ability to transfer roles to any domain controller (DC) in the enterprise. Because an Active Directory role is not bound to a single DC, it is referred to as a Flexible Single Master Operation (FSMO) role. Currently there are five FSMO roles: Schema master Domain naming master RID master PDC emulator Infrastructure daemon

The schema master FSMO role holder is the DC responsible for performing updates to the directory schema (that is, the schema naming context or LDAP://cn=schema,cn=configuration,dc=<domain>). This DC is the only one that can process updates to the directory schema. Once the Schema update is complete, it is replicated from the schema master to all other DCs in the directory. There is only one schema master per directory

The domain naming master FSMO role holder is the DC responsible for making changes to the forest-wide domain name space of the directory (that is, the Partitions\Configuration naming context or LDAP://CN=Partitions, CN=Configuration, DC=<domain>). This DC is the only one that can add or remove a domain from the directory. It can also add or remove cross references to domains in external directories

The RID master FSMO role holder is the single DC responsible for processing RID Pool requests from all DCs within a given domain. It is also responsible for removing an object from its domain and putting it in another domain during an object move. When a DC creates a security principal object such as a user or group, it attaches a unique Security ID (SID) to the object. This SID consists of a domain SID (the same for all SIDs created in a domain), and a relative ID (RID) that is unique for each security principal SID created in a domain. Each DC in a domain is allocated a pool of RIDs that it is allowed to assign to the security principals it creates. When a DC's allocated RID pool falls below a threshold, that DC issues a request for additional RIDs to the domain's RID master. The domain RID master responds to the request by retrieving RIDs from the domain's unallocated RID pool and assigns them to the pool of the requesting DC. There is one RID master per domain...

The PDC emulator is necessary to synchronize time in an enterprise. Windows Server includes the W32Time (Windows Time) time service that is required by the Kerberos authentication protocol. All Windows computers within an enterprise use a common time. The purpose of the time service is to ensure that the Windows Time service uses a hierarchical relationship that controls authority and does not permit loops to ensure appropriate common time usage. The PDC emulator of a domain is authoritative for the domain. The PDC emulator at the root of the forest becomes authoritative for the enterprise, and should be configured to gather the time from an external source. All PDC FSMO role holders follow the hierarchy of domains in the selection of their in-bound time partner. In a domain, the PDC emulator role holder retains the following functions: Password changes performed by other DCs in the domain are replicated preferentially to the PDC emulator. Authentication failures that occu...

When an object in one domain is referenced by another object in another domain, it represents the reference by the GUID, the SID (for references to security principals), and the DN of the object being referenced. The infrastructure FSMO role holder is the DC responsible for updating an object's SID and distinguished name in a cross-domain object reference. NOTE:  The Infrastructure Master (IM) role should be held by a domain controller that is not a Global Catalog server (GC). If the Infrastructure Master runs on a Global Catalog server it will stop updating object information because it does not contain any references to objects that it does not hold. This is because a Global Catalog server holds a partial replica of every object in the forest. As a result, cross-domain object references in that domain will not be updated and a warning to that effect will be logged on that DC's event log. If all the domain controllers in a domain also host the global catalog, all the...

Click  Start , click  Run , type  dsa.msc , and then click  OK . Right-click the selected Domain Object in the top left pane, and then click  Operations Masters . Click the  PDC  tab to view the server holding the PDC master role. Click the  Infrastructure  tab to view the server holding the Infrastructure master role. Click the  RID Pool  tab to view the server holding the RID master role

Register Schmmgmt.dll Click  Start , and then click  Run . Type  regsvr32 schmmgmt.dll  in the Open box, and then click  OK . Click  OK  when you receive the message that the operation succeeded. How to Determine the Schema FSMO Holder in a Forest via the GUI Click  Start , click  Run , type  mmc , and then click  OK . On the  Console  menu, click  Add/Remove Snap-in , click  Add , double-click  Active Directory Schema , click  Close , and then click  OK . Right-click  Active Directory Schema  in the top left pane, and then click  Operations Masters  to view the server holding the schema master role.

Change the vCenter 6.5 password CMD line:- ------------------------------------------------------- 1.login to the vCenter console or putty, 2. Enter the "Passwd" cmd 3. Enter new password 2 times , 4. Reboot the vCenter and login

Click  Start , click  Run , type  cmd  in the  Open  box, and then press ENTER. Type  ntdsutil , and then press ENTER. Type  domain management , and then press ENTER. Type  connections , and then press ENTER. Type  connect to server ServerName , where ServerName is the Name of the Domain Controller you would like to view, and then press ENTER. Type  quit , and then press ENTER. Type  select operation target , and then press ENTER. Type  list roles for connected server , and then press ENTER

Click  Start , click  Run , type  cmd  in the  Open  box, and then press ENTER. Type  DCdiag /test:Knowsofroleholders /v , and then press ENTER.

Click  Start , click  Run , type  cmd  in the  Open  box, and then press ENTER. Type  netdom query fsmo /Domain:<DomainDNSName>,  and then press ENTER

Schema Master Role Click  Start , click  Run , type  cmd  in the  Open  box, and then press ENTER. Type  dsquery server -hasfsmo schema,  and then press ENTER. Domain Naming Master Role Click  Start , click  Run , type  cmd  in the  Open  box, and then press ENTER. Type  dsquery server -hasfsmo name,  and then press ENTER. Infrastructure Master Role Click  Start , click  Run , type  cmd  in the  Open  box, and then press ENTER. Type  dsquery server -hasfsmo infr,  and then press ENTER. PDC Emulator Role Click  Start , click  Run , type  cmd  in the  Open  box, and then press ENTER. Type  dsquery server -hasfsmo pdc,  and then press ENTER. RID Master Role Click  Start , click  Run , type  cmd  in the  Open  box, and then press ENTER. Type  dsquery...

Use the Active Directory Schema Master snap-in to transfer the schema master role. Before you can use this snap-in, you must register the Schmmgmt.dll file. Register Schmmgmt.dll Click  Start , and then click  Run . Type  regsvr32 schmmgmt.dll  in the  Open  box, and then click  OK . Click  OK  when you receive the message that the operation succeeded. Transfer the Schema Master Role Click  Start , click  Run , type  mmc  in the  Open  box, and then click  OK . On the  File , menu click  Add/Remove Snap-in . Click  Add . Click  Active Directory Schema , click  Add , click  Close , and then click  OK . In the console tree, right-click  Active Directory Schema , and then click  Change Domain Controller . Click  Specify Name , type the name of the domain controller that will be the new role holder, and then click  OK . In the cons...

Click  Start , point to  Administrative Tools , and then click  Active Directory Domains and Trusts . Right-click  Active Directory Domains and Trusts , and then click  Connect to Domain Controller . NOTE:  You must perform this step if you are not on the domain controller to which you want to transfer the role. You do not have to perform this step if you are already connected to the domain controller whose role you want to transfer. Do one of the following: In the  Enter the name of another domain controller  box, type the name of the domain controller that will be the new role holder, and then click  OK . -or- In the Or , select an available domain controller list , click the domain controller that will be the new role holder, and then click  OK . In the console tree, right-click  Active Directory Domains and Trusts , and then click  Operations Master . Click  Change . Click  OK  to co...

1. Click Start, point to Administrative Tools, and then click Active Directory Users and Computers. 2. Right-click Active Directory Users and Computers, and then click Connect to Domain Controller. NOTE: You must perform this step if you are not on the domain controller to which you want to transfer the role. You do not have to perform this step if you are already connected to the domain controller whose role you want to transfer. 1. Do one of the following:        1. In the Enter the name of another domain controller box, type the name of the domain                           controller that will be the new role holder, and then click OK.        2. -or-        3. In the Or, select an available domain controller list, click the domain controller that will be the           new role holder, and then click OK. 2.  In...

                        1. Click Start, click Run, type ntdsutil in the Open box, and then click OK. 2. Type roles, and then press ENTER. 3.Type connections, and then press ENTER. 4. Type connect to server servername, and then press ENTER, where servername is the name of the 5. 5. domain controller you want to assign the FSMO role to. 6. At the server connections prompt, type q, and then press ENTER. 7. Type seize role, where role is the role that you want to transfer. List of the FSMO roles: Seize domain naming master Seize infrastructure master Seize PDC Seize RID master Seize schema master * At the fsmo maintenance prompt, type q, and then press ENTER to gain access to the ntdsutil prompt. Type q, and then press ENTER to quit the Ntdsutil utility

                                    1. Click Start, click Run, type ntdsutil in the Open box, and then click OK. 2. Type roles , and then press ENTER . 3. Type connections , and then press ENTER. 4. Type connect to server servername , and then press ENTER, where servername is the name of the domain controller you want to assign the FSMO role to. 5. At the server connections prompt, type q , and then press ENTER. 6. Type transfer role, where role is the role that you want to transfer. List of the FSMO roles: • Transfer domain naming master • Transfer infrastructure master • Transfer PDC • Transfer RID master • Transfer schema master * At the fsmo maintenance prompt, type q, and then press ENTER to gain access to the ntdsutil prompt. Type q, and then press ENTER to quit the Ntdsutil utility