Wednesday, October 17, 2012

Wednesday, October 10, 2012

Reporting server stops updating fileshare

Ran into a case where report creator had created a report (non-unique file names) that updated to a fileshare every 15 mins.  If the file was kept open by a user, job output would fail and be set to retry in 15 mins. 

By default, RS maxretries=3 which means RS will try again 3 times before giving up.  This was causing issue where these timed subscriptions were blocking each other from being successful.  Ie. job runs, tries to save to file, but fails and will retry in 15 mins, but 15 mins later a new iteration of the job runs, tries to save to file, but that one fails as well and will retry in 15 mins, etc...

Resolved by setting Maxretries=0 so that if output fails, RS will NOT retry and next iteration of the job will have a chance to update the file.

Reference:
http://technet.microsoft.com/en-us/library/ms157273.aspx

Monday, September 17, 2012

Kerberos skew may still allow login

"Kerberos tickets are issued even though the time difference between the client clock and the domain controller clock is greater than the "Maximum tolerance for computer clock synchronization" value" - KB956627...

Reference:
http://blog.joeware.net/2012/09/17/2599/
http://support.microsoft.com/kb/956627
http://blogs.technet.com/b/askds/archive/2012/08/24/friday-i-mean-saturday-mail-sack-very-wordy-edition.aspx

Tuesday, August 21, 2012

Windows Time Sync with Active Directory

Weird, but found Windows Time service missing from several servers.  Not sure how this could happen, but below is the article that helped me put the services back.

Basically, just unregister then re-register the service and start it again.

net stop w32time
w32tm /unregister
w32tm /register
net start w32time

Then, check registry HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Parameters for NT5DS "type" entry.

Reference:
http://tigermatt.wordpress.com/2009/08/01/windows-time-for-active-directory/