70-646 Windows Server 2008, Server Administrator - PASS!

Wow, this was hard. The 70-649 upgrade exam seemed pretty easy compared to this. But a pass is a pass.

And that is almost the end of the certification road for now. Passing this exam means I've earned the following certifications in the last 8 weeks-

1. MCSA Windows Server 2003
2. MCSA Security on Windows Server 2003
3. MCSE Windows Server 2003
4. MCITP Server Administrator on Windows Server 2008
5. MCSA Windows Server 2008

I'm not counting the MCTS credentials as they aren't 'proper' credentials in my opinion.

This still leaves MCSE Security on Windows Server 2003. Depending on workload 70-298 might be put on the schedule for next week. If not, I think the above list is a pretty good haul after a ton of study.

70-649 Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008 - PASS!

After the MCSE:2003, I had a choice to make - go for MCSE:2003 Security, or try for MCITP:SA 2008 before the credential retired. 70-649 won- after all, passing this exam would be the equivalent of passing 70-640, 70-642 and 70-643. 640 and 642 are core parts of the new MCSA Server 2008, so running out of time for the MCITP wouldn't be too disappointing.

The exam is pretty fair and a bit easier than I thought. The prep work from the Server 2003 exams helped a lot.

Incidentally, Microsoft are changing the retirement dates of various exams and certs. This exam was due to be retired on July 31, 2013. It is now listed as retiring on January 31, 2014. MCITP:SA (Server Administrator) still retires in July, but MCITP:EA (Enterprise Administrator) gets a reprieve until January 2014 too. Microsoft Learning are doing a pretty poor job of communicating this change though!

Microsoft cancelling TechNet Subscriptions

This is really bad news if you want to run a legal lab of Microsoft software for proof of concept ideas. Yes, you can run the evaluations (if they are available as ISOs), as long as you can get your testing done within 180 days.

More info from the TechNet page.

70-299 Implementing and Administering Security in a Windows Server 2003 Network - PASS!

This is the exam that time forgot. While the other Server 2003 exams appear to have been updated over the years, I'm guessing this one hasn't been touched since it was released.

It was also quite astonishingly easy, especially when compared to 70-291 and 70-293. If you've passed either of those exams you should be able to easily pass this one.

I'm off to TechEd Europe next week, so this is a good place to pause and re-evaluate the Certification plan. In the past 3 weeks I've taken (and passed)...

• 70-290 Managing and Maintaining a Microsoft Windows Server 2003 Environment
• 70-291 Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure
• 70-293 Planning and Maintaining a Windows Server 2003 Network Infrastructure
• 70-294 Planning, Implementing, and Maintaining a Windows Server 2003 Active Directory Infrastructure
• 70-299 Implementing and Administering Security in a Windows Server 2003 Network

...and this has resulted in the following certifications...

• MCSA Windows Server 2003
• MCSA Security on Windows Server 2003
• MCSE Windows Server 2003

Passing these exams has provided the following options...

1. Take 70-298 to get MCSE Security on Windows Server 2003
2. Take 70-648 to get
   • MCTS: Windows Server 2008 Active Directory, Configuring
   • MCTS: Windows Server 2008 Network Infrastructure, Configuring
3. Take 70-649 to get
   • MCTS: Windows Server 2008 Active Directory, Configuring
   • MCTS: Windows Server 2008 Network Infrastructure, Configuring
   • MCTS: Windows Server 2008 Applications Infrastructure, Configuration

Which one to choose?

MCSA: Security on Windows Server 2003 without passing any further exams

Another surprise certification this morning.

In 2004 I passed CompTIA's Security+ and linked it to my Microsoft transcript. This, combined with some other exams, completed MCSE: Security on Windows 2000. Later on in 2004 I passed the (isc)² CISSP, but I have never linked it to my transcript. Until yesterday

To link an external certification to your Microsoft transcript you need to use the Live Chat button available from within the MCP member site support page. I asked for them to apply my CISSP to my transcript, supplied my (isc)² member number and the transcript was updated a few minutes later.

Disappointingly, the transcript only showed the CISSP qualification and no further certifications were applied.

24 hours later, and a new certification was applied. Unfortunately there seems to be an issue with the transcript tool today, but the Certification Builder tool clearly shows I've been awarded the MCSA: Security on Windows Server 2003.

This also makes me only 1 exam away from MCSE:Security on Windows Server 2003 according to the Certification Builder.

Expanding the Security Group section you can see that the CISSP and Security+ are in separate sections, thus negating the need to sit an exam like 70-299 or 70-351.

So, if you have an MCSE or MCSA on Windows Server 2003 and some security certs, you might be able to get MCSA: Security just by spending a few minutes on Live Chat linking them to your transcript.

Annoyingly I'm already booked to sit 70-299 Implementing and Administering Security in a Windows Server 2003 Network this afternoon. It's too late to cancel!

MCSE Server 2003 (without a design exam?)

Checking my transcript today I saw a wonderful thing...





Yes, that's an MCSE in Server 2003. This is confusing. I thought the requirements for MCSE 2003 were ...

1. 4 core exams (290,291,293,294)
2. A client exam
3. A design exam (one of 297, 298 or 285)
4. An elective exam or qualifying credential

I haven't taken any of the listed design exams. And yet I'm now an MCSE in Server 2003. How did this happen?

The answer is buried deep on a page from the Indian Microsoft Learning page, where they mention the design exams in relation to upgrading your MCSA 2003 to MCSE 2003...

This requirement is waived if you have already passed a design exam on Microsoft Windows 2000 Server.

This is obviously excellent, but now confuses my plan. I have booked 70-299 to try and get MCSA:Security 2003. If I pass that exam, will that be enough to get MCSE:Security? If not, do I want to go through the pain of 70-298 just to get Security added to the 10-year old cert?

70-294 Planning, Implementing, and Maintaining a Windows Server 2003 Active Directory Infrastructure - PASS!

This is starting to get tiring! All 4 core exams are now done - just need 70-298 to become MCSE Server 2003. This leads to a dilemma - what exam to do next?

70-298 and 70-299 look like they cover very similar content, but from different angles. It appears that 70-298 uses a case study style format while 70-299 is a more traditional exam. Based on this I'm going to book 70-299 first and use the studying for that as a platform to do 70-298 shortly after. Some people have posted that they took both on the same day, but I think 3 exams in a week is enough for me!

70-293 Planning and Maintaining a Windows Server 2003 Network Infrastructure - PASS!

You would think having years of experience with the product would be helpful when sitting an exam. In general that is true, but it means that some questions you end up looking too deeply. Some questions appear to be too straightforward. Some questions are on areas you would barely use over the lifetime of the product.

This raises a question - does this make the Microsoft certification process a bit of a lottery?

I don't think so. In many ways these types of questions accurately reflect the day to day experience of someone who is (or aims to be) an MCSE. Some questions you get asked every day are really easy to answer. Some questions are so obscure you have to make an educated guess. The exam reflects real life.

Having said all that, I have yet to see anyone use RIP or OSPF on Windows Server. I'll be happy if I never have to answer another question on these protocols again!

MCSA Windows Server 2003

Well, it worked! My transcript now shows MCSA Windows Server 2003.

From what I can see, the exams that count towards this on my transcript (taken from the Microsoft India Learning site) are...

• 291 Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure June 05, 2013
• 290 Managing and Maintaining a Microsoft Windows Server 2003 Environment May 31, 2013
• 210 Installing, Configuring, and Administering Microsoft® Windows® 2000 Professional January 17, 2002

...and a fourth component which, on my transcript, could be any of the following...

• TS: Microsoft System Center Configuration Manager 2007, Configuring
• MCSE on Microsoft Windows 2000 Server
• MCSE on Microsoft Windows NT 4.0
• CompTIA Security+

What next?

The original plan was to move straight on to Windows Server 2008. Due to the amount of Server 2003 studying I've already done, I'm aiming for MCSE Server 2003 first. That'll allow an attempt at the 70-649 Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist exam.

Next up... 70-293 Planning and Maintaining a Windows Server 2003 Network Infrastructure.

70-291 Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure - PASS!

Well, that was horrible. I was pretty sure I'd failed and was dreading pressing the end exam button. But a pass is a pass!

This should be enough to gain the MCSA Windows Server 2003 and enable me to take the 70-648 Server 2008 upgrade exam. I'll not know for sure until the exam hits my transcript.

70-290 Managing and Maintaining a Microsoft Windows Server 2003 Environment - PASS!

1 down, lots to go.

When studying for these exams I assumed a number of fundamental things-

1. The exams will cover XP SP3 as clients and Server 2003 SP2 on the servers
2. The exams won't cover technologies that have been out of support for a long time (eg Windows NT4 was retired in December 2004, so surely they can't ask me a question on that in 2013?)
3. 10 years of experience with the product would be very helpful

One of my assumptions was wrong!

Obviously with the NDA I can't reveal what I was asked, but if you're thinking of doing these exams before they are retired you might want to read over some basic NT 4 networking.

MCSA in 9 days part 2 - Exam order

Since there is a hard time limit with the Server 2003 exams, the order in which the exams are taken is important. I need a back out plan in case real life takes over and I run out of time. So, to maximise the qualifications earned I've broken the exams into some groups

• MCSA 2003 (2 exams required)
  • 70-290 Managing and Maintaining a Windows Server 2003 Environment
  • 70-291 Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure
• MCSE 2003 (3 exams required + MCSA 2003)
  • 70-293 Planning and Maintaining a Windows Server 2003 Network Infrastructure
  • 70-294 Planning, Implementing, and Maintaining a Windows Server 2003 Active Directory Infrastructure
  • 70-298 Designing Security for a Windows Server 2003 Network
• MCSA/MCSE : Security 2003 (1 exam required + MCSA 2003 and/or MCSE 2003)
  • 70-299 Implementing and Administering Security in a Windows Server 2003 Network
• MCSA 2008 / MCITP:SA 2008 (2 exams required + MCSA 2003)
  • 70-648 (or 70-649) Upgrading from Windows Server 2003 MCSA to, Windows Server 2008, Technology Specializations
  • 70-646 Windows Server 2008, Server Administrator

These groups are going to be helpful to determine which path to go down. At the moment the plan is to go for things in this order-

1. MCSA 2003
2. MCSA 2008 and MCITP:SA 2008
3. MCSE 2003
4. MCSA and MCSE 2003 Security

This list could (and probably will) change dramatically if there are any resits involved!

MCSA in 9 days

Microsoft have a promotion at the moment called MCSA in 90 days. It is a great package of resources and training with the aim of getting you certified as an MCSA in Server 2012. Inspired by this, I've come up with my own plan to become certified in Server 2012.

I'm aiming for an MCSA in 9 days. Not the Server 2012 MCSA, the Server 2003 one. Yes, the 10 year old credential in an OS that will be retired in 2015. I'm going to use this as a platform to upgrade my existing ancient certifications - currently MCSE:Security on Windows 2000 and MCSE: NT4.0.

My actual challenge is to get-

• MCSA Windows Server 2003
• MCSA Security on Windows Server 2003
• MCSE Windows Server 2003
• MCSE Security on Windows Server 2003

• MCTS: Windows Server 2008 Active Directory, Configuring
• MCTS: Windows Server 2008 Network Infrastructure, Configuring
• MCITP: Server Administrator on Windows Server 2008
• MCSA: Windows Server 2008

and possibly

• MCTS: Windows Server 2008 Applications Infrastructure, Configuration

-in 60 days.

So, 9 Certifications in two months. Crazy? Possibly.

How?

As an MCSE in Windows 2000 and NT 4.0, I only need two exams to get MCSA 2003 (70-290 and 70-291). After that, two more exams to get MCSA 2008 (70-646 and 70-648). Then 70-417 to get MCSA 2012. Of course, it's not going to be that easy - these exams are going to be hard, and should get harder as the time pressure increases. Yes, this plan has a very definite time pressure - all of the Server 2003 and the Server 2008 upgrade exams are retiring on 31st July 2013.

So-

• 70-290 Managing and Maintaining a Microsoft Windows Server 2003 Environment
• 70-291 Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure
• 70-293 Planning and Maintaining a Windows Server 2003 Network Infrastructure
• 70-294 Planning, Implementing, and Maintaining a Windows Server 2003 Active Directory Infrastructure
• 70-298 Designing Security for a Windows Server 2003 Network
• 70-299 Implementing and Administering Security in a Windows Server 2003 Network
• 70-646 Windows Server 2008, Server Administrator
• 70-648 (or 70-649) Upgrading from Windows Server 2003 MCSA to, Windows Server 2008, Technology Specializations

-8 exams in 2 months. That is 1 exam per week.

The first exam - 70-290 - has been booked for Friday. I've been using Windows Server 2003 for 10 years - how difficult can it be?

Sophos detecting itself as a virus

Ouch. Last night Sophos released a definition update that categorised it's own updater as malware. Depending on the policy set by the administrator Sophos then quarantined or, in some cases, deleted it's own updating mechanism.

Sophos have a support article at http://www.sophos.com/en-us/support/knowledgebase/118311.aspx. The bad ide file causing the Shh/Updater-B False positives is agen-xuv.ide.

Assuming you had set your Sophos installation up to quarantine the files and not delete them, you can get Sophos working again by running the following commands on each affected machine -

net stop "Sophos Anti-Virus"
Alupdate.exe -manualupdate

(you may need to specify the full path to Alupdate.exe, which may change depending on your OS)

This is not a great solution because it disables your on-access protection while the fixed IDE file is deployed!.

Sophos have not specified this as a solution. The reason I post this is that some people cannot use any of their current solutions. If you are in this situation I would check with them before deploying this. However, from the limited testing I have done, this seems to work. Again, test test and test again before deploying any fix like this, and try all the Sophos recommended options before this one.

An alternative, non-ConfigMgr solution, is to use group policy to delete the bad IDE file.

It also appears that only Windows machines are affected. MacOS seems to be fine with the bad definition file.

New platform support in SCCM 2012 SP1

Microsoft announced this week that Service Pack 1 for SCCM 2012 would be released in Q3. In addition to the expected support for Windows 8, they've added support for Mac OS X and Linux. Yes, really.

The announcement was at TechEd America 2012, but I found out about it at the Best of MMS event in Edinburgh being run by Charteris. The Microsoft guy I spoke to confirmed that Endpoint Protection is part of this support. Yes, that's a Microsoft antimalware solution for your Mac and Linux machines!

Troubleshooting the TFTP Service

This is a companion post to the Troubleshooting PXE in SCCM OSD series.

Troubleshooting PXE in SCCM OSD Part 1
Troubleshooting PXE in SCCM OSD Part 2
Troubleshooting PXE in SCCM OSD Part 3

As seen in the previous blog posts, a key part of the PXE process is the TFTP download of boot files to the client machine. If things aren't working it's always worth checking the tftp service is behaving as you'd expect. Microsoft provide a basic TFTP client with Windows. It's installed by default on Windows XP, but you'll need to do a wee bit of work to get this program working on Windows 7.

Installing and configuring the TFTP client on Windows 7

Firstly, to install the tftp client

1. In Control Panel, choose Programs and Features.
2. On the left hand pane, click "Turn Windows features on and off"
3. Find the entry for TFTP Client and tick the box. This will probably require a restart.
   
   
   

Secondly, you need to allow the tftp client through the Windows Firewall

1. Go to the Windows Firewall Control Panel.
2. On the left hand pane, click Allow a program or feature through Windows Firewall.
3. Click Allow another program.
4. Click Browse. Browse to C:\Windows\system32, choose tftp.exe then click Open.
5. On the Add a Program dialog, ensure "Trivial File Transfer Protocol App" is selected. Click Add.
6. Check that on the "Allow programs to communicate through Windows Firewall" page "Trivial File Transfer Protocol App" is selected and allowed-
   
   
   

A quick test to see whether TFTP is working

Once you have a working tftp client, run up a command prompt. Run the following command-

C:\Users\Administrator>tftp -i servername get smsboot\x86\pxeboot.n12

-where servername is your PXE server. You should get an almost instantaneous response-

Transfer successful: 25772 bytes in 1 second(s), 25772 bytes/s

If this works, then your TFTP service looks healthy. If not, read on...

Some common TFTP errors

• Error on server : The specified file was not found.
  
  If you get the following response-

  Error on server : The specified file was not found. Connect request failed

  You are probably missing files in the RemoteInstall directory. Browse to this directory, or map a drive to the folder (it's shared out as \\servername\reminst) and check that you have the relevant file structure
  
  
  
  
  
  If the folders are missing, or the folders are empty, then something is wrong with the PXE service point. The most common solution to this is to remove the role and reinstate it.
• Error on server : Access violation.
  
  This suggests a permission problem in the RemoteInstall directory. Check the NTFS permissions.

If you are getting a response from the server, but are seeing a timeout error, this could be due to an overaggressive network filter. To check this create a small file in the SMSBoot folder. In the following example I created a text file called test.txt which contained the word "test".

C:\Users\Administrator>tftp -i servername get smsboot\test.txt

Transfer successful: 8 bytes in 1 second(s), 8 bytes/s

If this command is successful, but larger files can not be transferred, then check with your networking people. I have seen this happen when port 69 is opened but other ports are blocked. From our observations, the first 512 bytes can be transferred over port 69, but anything above 512 bytes will be transferred on a randomly assigned ephemeral port. If you've asked the networking people to allow tftp traffic, there is a chance they've only opened up port 69 and not factored in the ephemeral ports.

Create a Windows 8 bootable USB drive

For those that can't find a blank DVD, the Windows 8 Consumer Preview ISOs can be put on a USB drive and made bootable using the Windows 7 USB/DVD download tool. Instructions are on the Windows 8 ISO download page.

Windows 8 Consumer preview - http://windows.microsoft.com/en-US/windows-8/iso
Windows 7 USB/DVD Download tool - http://www.microsoftstore.com/store/msstore/html/pbPage.Help_Win7_usbdvd_dwnTool

You might need to enter the product key to install the preview - from the FAQ page it's DNJXJ-7XBW8-2378T-X22TX-BKG7J.

MMS 2013 - New Orleans in June

Another surprise at the second keynote was the announcement that MMS 2013 will not be in Las Vegas in Spring, but New Orleans in June. A good move in my opinion - it's difficult to get approval to go to a conference at the best of times, but when your boss sees that it's in Vegas he's probably imagining gambling and showgirls. New Orleans is probably easier to get approval for as it's not Mardi Gras time, and your boss is probably thinking of Jazz, Roger Moore in a 70s suit or Van Damme in Hard Target.

MMS 2012 - Deploying apps to iOS devices

Of all the stuff presented in the second MMS 2012 keynote, I was most impressed by something the camera didn't catch. If you watch the on demand version the bit near the end is pretty special. It was an app deployment to an iPhone using Microsoft management tools. The tech details were thin on the ground, but this could be massive for those of us who have to manage iDevices in the enterprise.

Windows Server 8 official name revealed at MMS 2012

Brad Anderson has just announced that Windows Server 8 will now be known as Windows Server 2012. Apart from the name change, the user interface has had a subtle Metro ribbon upgrade. If you want to watch some demos then have a look at the MMS 2012 keynote at http://www.microsoft.com/en-us/server-cloud/new.aspx.