Category: Windows OS-Level Issues

NIC Performance Settings
article #1007, updated 216 days ago

Here are settings useful to maximize performance of a hardware network interface. Virtual guests benefit by these being applied to their virtual host, only. Not all of these exist on every NIC. There are also many settings which should not be touched, or should be touched only when the toucher knows what they are doing! The below have always helped when this writer has found them available to try. Do be warned, the NIC will go offline for 2-10 seconds after you Apply most of these.

  1. Install the most current drivers for NICs and also motherboard chipset. In at least one case, the server vendor had only an outdated and unreliable driver available for download, the one which worked well for years came from Intel’s web site.
  2. “DMA Coalescing” on.
  3. “Enable PME” off.
  4. “Energy Efficient Ethernet” off.
  5. “Green Ethernet” off.
  6. “Gigabit Lite” off.
  7. “Adaptive Inter-Frame Spacing” on.
  8. All offloading on.
  9. “Interrupt Moderation” on.
  10. “Interrupt Moderation Rate” should be “Adaptive”.
  11. “Scaling”, should be “on” or “Enabled”.
  12. “Receive Side Scaling” on.
  13. “Receive Side Scaling Queues” to maximum.
  14. There are cache settings on all server-class NICs, separate for send and receive. They are usually called “Receive Buffers” and “Transmit Buffers”, or “Receive Descriptors” and “Transmit Descriptors”. Set them to the maximum. For current Intel server NICs the defaults are usually 256 or 512, and the maximums are 2048; for a few other kinds, one or the other is 5000 or more; for others it is much less. Each descriptor takes 2K of RAM, which in today’s multigigabyte world is well worthwhile. Some older Broadcom gigabit NICs will yellow-flag if they are set to 2048; for these, set receive to 750, transmit to 1500.
  15. In the NIC’s “Power Management” tab, turn everything off. This may have to be abridged if Wake-On-LAN is used. Some NICs, notably some Realtek, will automatically turn power management back on at boot; this needs to be fixed through group policy.
  16. In SBS 2008, only one NIC (or one NIC team) is permitted to represent the server on the network. If there are two active NICs, you will have to turn one off, or crashes and unpredictable behavior will result sooner or later.

Categories:   Network Hardware & Drivers   Windows OS-Level Issues

==============

The Davidic User Profile Lesson
article #997, updated 250 days ago

The amazing David Lewis recently discovered something very close to unbelievable. A user profile on a PC — not a user, not a PC — had full administrative rights to a folder on a server on the domain, where the user was explicitly denied such rights. Deletion and replacement of the user profile, eliminated the problem.

Categories:   Windows OS-Level Issues   Security

==============

Download Internet Explorer 11
article #996, updated 252 days ago

Today I found it ridiculously difficult to download IE11 on a Windows 7 box which had not seen updates in a while. If you suffer so, browse here:

https://support.microsoft.com/en-us/help/18520/download-internet-explorer-11-offline-installer

Offline installers in many languages.

Categories:   Web Sites   Windows OS-Level Issues

==============

Enable, Disable, and Delete Windows Explorer Shell Extensions
article #995, updated 253 days ago

Rather a neat tool:

http://www.nirsoft.net/utils/shexview.html

Can eliminate a lot of issues in Explorer.

Categories:   Windows OS-Level Issues   

==============

Troubleshooting and Fixing Windows VSS
article #274, updated 271 days ago

Some very interesting info:

https://social.technet.microsoft.com/Forums/windowsserver/en-US/1b926c85-b866-464b-9590-70506ba9d8ce/vss-issue-event-id-22-12289-12293-error-0×8004230f-failed-to-retrieve-volumes-that-are-eligible?forum=windowsbackup

https://msdn.microsoft.com/en-us/library/windows/desktop/bb891959#mindiffareafilesize

Here are some steps and info:

http://www.storagecraft.com/support/kb/article/32

Here is a Fix-It from Microsoft for Server 2003, which runs quite a few steps automatically, and does not (this is new) necessarily require a reboot:

http://support.microsoft.com/kb/940184

And lastly, here is a patch from Microsoft which can help a lot in Server 2003, even on fully-updated machines:

http://support.microsoft.com/default.aspx?scid=kb;en-us;891957

Categories:   VSS   Windows OS-Level Issues

==============

"Complete Internet Repair" tool
article #982, updated 301 days ago

This can do a lot of good:

https://www.rizonesoft.com/download/complete-internet-repair/

Categories:   Windows OS-Level Issues   

==============

Login to blank screen, from Vista/2008 through 8.1/2012R2
article #981, updated 302 days ago

If you find that login occurs, but no desktop just blackscreen, add the local users “Interactive” and “Authenticated Users” to the local group “Users”, i.e.:

net localgroup Users Interactive /add
net localgroup Users "Authenticated Users" /add

Categories:   Windows OS-Level Issues   

==============

The New Hunsinger Windows Update Clog Destructifier
article #979, updated 326 days ago

Mike Hunsinger, who has been addressing Windows Update issues with considerable success over time, recently provided for the following writeup. It is useful when:

  • Windows is running slowly or generally unreliably, needs rebooted frequently.
  • The Windows Update service spikes CPU usage over 70% when it runs.
  • When you check for new updates, it just hangs endlessly on “checking for updates”.
  • The last successful update was years ago.

Steps:

  1. Clean up the system drive.
    • Before Server 2012, use Disk Cleanup (cleanmgr.exe). Be sure to check “service pack backup files” and “windows update”, if the version of Windows you are running gives these as options.
    • Server 2012 and after, use DISM (dism.exe). Run this in administrative CMD:
      dism.exe /online /Cleanup-Image /StartComponentCleanup /ResetBase
      If it reports “The operation could not be completed due to pending operations.”, you have just been told that a server reboot is necessary and you’ll need to do this again afterwards. After it succeeds, do this:
      dism.exe /online /Cleanup-Image /SPSuperseded
  2. Run the following as a .bat file to reset Windows Updates caches and working spaces, rereg some dll’s, It works on all versions of windows, may skip some dll’s depending on the OS version:
@ECHO OFF
echo Simple Script to Reset / Clear Windows Update
echo.
PAUSE
echo.
attrib -h -r -s %windir%\system32\catroot2
attrib -h -r -s %windir%\system32\catroot2\*.*
net stop wuauserv
net stop CryptSvc
net stop BITS
ren %windir%\system32\catroot2 catroot2.old
ren %windir%\SoftwareDistribution sold.old
ren "%ALLUSERSPROFILE%\application data\Microsoft\Network\downloader" downloader.old
regsvr32 /s wuaueng.dll 
regsvr32 /s wuaueng1.dll 
regsvr32 /s atl.dll 
regsvr32 /s wups.dll 
regsvr32 /s wups2.dll 
regsvr32 /s wuweb.dll 
regsvr32 /s wucltui.dll 
net Start BITS
net start CryptSvc
net start wuauserv
echo.
echo Task completed successfully...
echo.
PAUSE
  1. Install .net 4.5.1 from here: https://www.microsoft.com/en-us/download/details.aspx?id=40779
  2. If it says that an =/> version is already installed, run the .net repair tool from here: https://support.microsoft.com/en-us/kb/2698555
  3. Download the latest version of Windows Update from here: https://support.microsoft.com/en-us/kb/949104
  4. Next update IE or Edge to the latest version using a redist, here’s the one for EI11, https://support.microsoft.com/en-us/help/18520/download-internet-explorer-11-offline-installer
  5. Open IE11 or Edge, add update.microsoft.com to trusted sites, popup blocker exceptions, privacy exceptions.
  6. Finally, try re-running Windows Update. The “Checking for Updates” may run quickly, or it may take 4-6 hours to populate results.

We have had the best results by updating in batches after this, first any critical SP’s or major Platform Updates. Then security, Office and the others as deemed necessary. Once you’ve completed a couple rounds of updates, the difference should start exhibiting itself with regards to the symptoms named.

Categories:   Windows OS-Level Issues   Windows Installer and Updates

==============

Disable 8.3 Filename Generation
article #978, updated 330 days ago

If your software is all new, let’s say 2013 and after, it probably makes sense to disable 8.3 filename generation, for a nice kick of speed.

To do it once for all drives, just do this:

fsutil behavior set Disable8dot3 1

If you want to do it for one select drive, say E:, first do a registry edit in

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem

you’ll want to change NtfsDisable8dot3NameCreation to 2. Then you will need to reboot, and in an administrative command prompt:

fsutil behavior set E: 1

and reboot again, and it’s done.

Categories:   Performance   Windows OS-Level Issues

==============

FRS is deprecated in Server 2008R2
article #970, updated 350 days ago

Some articles:

https://msdn.microsoft.com/en-us/library/windows/desktop/ff384840(v=vs.85).aspx).aspx

https://blogs.technet.microsoft.com/filecab/2014/06/25/the-end-is-nigh-for-frs/

Categories:   Windows OS-Level Issues   Active Directory