Kanzen Solutions

Group Policy Printer Setup

February 9th, 2015

Setting up printers via group policy is a very easy way to get your staff on the right printers, with group policy you can change who has what printer and remove and add printers without the need to log onto every PC in your office.

This is a step by step guide as to have to work though this.


Step 1: Initializing the Group Policy Object

  1. Launch Group Policy management (read previous post if you are not sure how to access this)
  2. Navigate through the structure to locate the “Computers” OU
  3. Right click and select “Create a GPO in this domain, and Link it here…”
  4. In the new pop-up window give the GP a name 
  5. This step can be skipped if this is a new policy
  6. Right click on the GP and select Edit

Step 2: Initializing Printer Mapping

  1. In the Group Policy Management Editor, navigate to Computer Configuration > Policies > Windows Settings > Deployed Printers

  2. Right click and select Deploy New Printer
  3. In the new printer interface window you can either type the UNC path name to the shared printer on the server. Note: If the printer is not shared from the server first it will not be seen here.
  4. Click OK

Exchange 2013 ECP Password Reset

September 3rd, 2014

Have you ever wanted to reset user password via ECP ? For Exchange 2010 and below, it is not possible, you have to login to server and do it.  But with Exchange 2013, you can reset user password via the browser, also known as EAC

OK, let’s get started !

1:  Before you can add the “Reset Password” role, you need to install it. Let’s see if this role is installed by default :

Get-ManagementRole “reset password” The operation couldn’t be performed because object ‘reset password’ couldn’t be found on ‘VM-AD5.andrew.com’.     + CategoryInfo          : NotSpecified: (:) [Get-ManagementRole], ManagementObjectNotFoundException     + FullyQualifiedErrorId : F1EF706,Microsoft.Exchange.Management.RbacTasks.GetManagementRole

Notice by default, this role is not installed. Let’s install it now.


  • Launch Exchange Management shell.
  • Type Add-pssnapin microsoft* and hit enter.
  • Type Install-CannedRbacRoles and hit enter.
  • Type Install-CannedRbacRoleAssignments and hit enter.
  • Close and relaunch EMS.

3:  Let’s verify.

Get-ManagementRole “reset password”

Name                                                    RoleType
—-                                                        ——–
Reset Password                                ResetPassword

If you performed step 2 correctly, you should see the new role.

4:  Now, we would like to add resetpassword role to your chosen security group (in my case “Help Desk”).

“new-ManagementRoleAssignment -SecurityGroup “Help Desk” -Role “Reset Password”

(you can do this in ECP too)

5:  Next, open the EAC. For example https://yourcompany.com/ecp

6:  Click on permission, select a user and click edit.

7:  Thats it your done !



August 28th, 2014

Ok so my previous article explained how to set-up the User Profile Service, but this very rarely works first time, so thanks to a bit of googling i have put together this guide as to what to look for if your having issues

So first of all, lets tackle the issue of the “Starting” service.

Here is what I was getting…image

To resolve it do the following things:

  • Stop the User Profile Synchronization Service
  • Open IIS (inetmgr)
  • Click on the server name and select Authentication
  • Selected Anonymous Authentication then choose Edit
  • Click the specific user, then enter “IUSR”
  • Add the service account to Local Admin group on the server
  • Add the service account to all the FIM groups
  • add the service account to the WSS_WSP and WSS_Admin_WPG group
  • Perform an IISRESET
  • Create a new User Profile Synchronization Service Application
  • Started the User Profile Synchronization Service

Stop the User Profile Synchronization Service

First you have to start SharePoint PowerShell

  • Go to Start
  • Microsoft SharePoint 2010 Products
  • Right click on SharePoint 2010 Management Shell
  • Choose “Run as Administrator” from the context menu


Type in Get-SPServiceInstance then capture the GUID of the User Profile Synchronization Service as shown below


Now that you have the GUID, type in Stop-SPServiceInstance <GUID> as shown below…


Now your service is stopped…



August 28th, 2014

At the moment im playing with Sharepoint 2013, both on premise and on-line versions, from what i have seen its all good, with the on-line version very easy to set-up and configure.

The on premise version though a little more complex, this version has a facility to integrate with Active Directory to pull in the users details, to do this it users the User Profile Synchronization Service.

Now this can be a bit of a pain to get started and running, but i thought for reference i would put together a short how to guide.

In Central Administration, open Service management (“Manage Services on server”)


Check if “User Profile Synchronization Service” is running (yes, the one which we know and love). If it isn’t, please start it.


And chose the credentials the service should run under


August 28th, 2014

The application eventlog of your SBS 2008 server is flooding with the following error more than once a minute.

Event ID: 8
Source: SQLBrowser
Description: “The SQLBrowser service was unable to process a client request.”

I have seen this on multiple servers and it looks like the issue occurs when you install an additional SQL instance and enables the SQL Browser service. This does not occur on a standard SBS 2008 server, because the SQL browser service is disabled by default.

Solution: After some research and found all kind of possible solutions, in my cases the problem was solved by enabling Named Pipes on the protocols for SBSMONITORING within SQL Server Configuration manager. If you have more SQL instance enable Named Pipes for all instances.

To change this go to, Start, All Programs, Microsoft SQL Server 2005, Configuration Tools, SQL Server Configuration Manager. Browse to SQL Server 2005 Network Configuration (32bit) select Protocols for SBSMONITORING and rightclick Named Pipes and select Enable. Repeat this for every Instance you have additional created.

Also checked this only occurs to SBS 2008 servers with SBS 2011 never seen this problem.


August 28th, 2014

Just come across a bit of a strange one, was working on my laptop messing around with SSID and WiFi networks, and come to a point were I wanted to delete my wireless connection,  “How do you manage wireless network profiles in Windows 8.1?”

That got me thinking…  seems the GUI tools that allowed us to manage wireless networks in Windows 7 are no longer there.  So after a little bit of a search around the internet I come across a solution.

Now in Windows 7, there was a Control Panel applet that allowed you to control/manage the wireless network profiles on a PC.


It allowed you to add, remove, change the order, change the profile of each wireless profiles.


In windows 8.1 that control panel applet does not exist. so how do you take care of those settings?  well that always was another way to get to those settings in Windows 7.  It’s called NETSH and it’s still there in Windows 8.1.

enter NetSH in a command prompt and you’ll start a tool you can use to configure and monitor Windows-based computers at a command prompt. With the Netsh.exe tool, you can direct the context commands you enter to the appropriate helper, and the helper then carries out the command. A helper is a Dynamic Link Library (.dll) file that extends the functionality of the Netsh.exe tool by providing configuration, monitoring, and support for one or more services, utilities, or protocols. The helper may also be used to extend other helpers.


August 28th, 2014

I recently decided to build a Sharepoint 2013 server to take a look at some of the new features and layout, i thought to myself maybe kill two birds with one stone and install Server 2012 R2, i set this all up and proceeded to download and install Sharepoint, first issue i come across was this.


After doing a little research on the subject, i came across this article on the Microsoft website, which basically stated that Sharepoint 2013 is not compatible with Windows Server 2012 R2.  These are both Microsoft products so as you can imagine i was a little shocked, anyway after some more reading i have discovered a work around, follow these steps to get the pre-requisites installed.

1. Login to your R2 server as Administrator, start Power Shell as Administrator and execute following statements:

1. Import-Module ServerManager
2Add-WindowsFeatureNET-WCF-HTTP-Activation45,NET-WCF-TCP-Activation45,NET-WCF-Pipe-Activation45 D:\Sources\sxs
3Add-WindowsFeature Net-Framework-Features,Web-Server,Web-WebServer,Web-Common-Http,Web-Static-Content,Web-Default-Doc,Web-Dir-Browsing,Web-Http-Errors,Web-App-Dev,Web-Asp-Net,Web-Net-Ext,Web-ISAPI-Ext,Web-ISAPI-Filter,Web-Health,Web-Http-Logging,Web-Log-Libraries,Web-Request-Monitor,Web-Http-Tracing,Web-Security,Web-Basic-Auth,Web-Windows-Auth,Web-Filtering,Web-Digest-Auth,Web-Performance,Web-Stat-Compression,Web-Dyn-Compression,Web-Mgmt-Tools,Web-Mgmt-Console,Web-Mgmt-Compat,Web-Metabase,Application-Server,AS-Web-Support,AS-TCP-Port-Sharing,AS-WAS-Support, AS-HTTP-Activation,AS-TCP-Activation,AS-Named-Pipes,AS-Net-Framework,WAS,WAS-Process-Model,WAS-NET-Environment,WAS-Config-APIs,Web-Lgcy-Scripting,Windows-Identity-Foundation,Server-Media-Foundation,Xps-Viewer -Source D:\Sources\sxs

2. Download all prerequisites from the Internet and save it on local disk of the server, e.g. C:\SP2013Prereq:

SQL Server 2008 R2 SP1 Native Client
Microsoft WCF Data Services 5.0
Microsoft Information Protection and Control Client (MSIPC)
Microsoft Sync Framework Runtime v1.0 SP1 (x64)
Windows Identity Extensions
Windows Identity Foundation (KB974405)
Windows Server AppFabric
CU 1 for AppFabric 1.1 (KB2671763)

3. Install all prerequisites directly from the prerequisites folder in the download sequence,EXCEPT the last two (AppFabric and CU 1 for AppFabric).

4. AppFabric requires special configuration, therefore installing it usual way is not be enough for SharePoint. Install it using following statement from command line:

WindowsServerAppFabricSetup_x64.exe /i CacheClient","CachingService","CacheAdmin /gac

Note: The syntax with quotas is correct, it separates commas, not the components.

5. Install AppFabric1.1-RTM-KB2671763-x64-ENU

6. Restart your server

Once you have installed the pre-requisites you should then be able to install Sharepoint 2013 without any issues, i have since read that apparently their is a Sharepoint 2013 service pack due out soon which will sort this problem

Adding An Existing AD User To The SBS 2011 Console

August 28th, 2014

After migrating from a Server 2008 Active Directory, to a Windows Small Business Server 2011 installation, I found that the migration did not import the existing AD users and computers into the SBS 2011 console.

A quick google search found this simple fix:

  1. Optional. Using the Active Directory Users and Computers console, move your users to theMyBusiness/Users/SBSUsers Orginization Unit.
  2. Open ADSI Edit from administrative tools
  3. Right click ADSI Edit and Connect to… and click Ok keeping the default values
  4. Browse to the user you want to import to the SBS 2011 Console
  5. Richt click the user, and select Properties
  6. Find the setting msSBSCreationState and set the value to Created
  7. Save the changes, and repeat for other users.