Sophos Enterprise Console version 4.5.1
Installed on Windows 2003 (but this is not important)
Trying to deploy Sophos 9.5 to a Windows 2008 r2 Server.

When trying to deploy Sophos 9.5 to a Windows 2008 r2 server from the Enterprise console, we received the following error.

80070520 “Could not start installation program on the computer: A specified logon session does not exist. It may already have been terminated”

Answer (well sort of)

After speaking to Sophos for the first time they told me to follow these instructions.

http://www.sophos.com/support/knowledgebase/article/62730.html

At the time of writing the video in the link above has inacurate information. I followed the instructions but it still did not work. I contacted Sophos again and they suggested I make a change to Group Policy.

Computer Configuration | Windows Settings | Security Settings | Local Polices | Security Options
you will then see one of the following two items.

Network Access: Do not allow storage of credentials or .NET passports for network authentication
Network Access: Do not allow storage of passwords and credentials for network authentication

Sophos suggest that you disable this.

Caution

Disabling the above does allow remote installation of Sophos from the Enterprise Console; however; this weakens your network from a security point of view and goes against the cis recommendations.

So beware, this solution works but has Security implications, if I find a better way of doing this I will update this article.

To fix this issue I have followed this precedure.

Stop the KDC service and set the service to manual
Restart your server
Start the KDC Service and set the service back to automatic

Open a command prompt and run the following commands ( You should use a Domain Admins Account)

netdom resetpwd /server: (replication partner) /userd:\ /
passwordd:”enter password”

Once this has run you should see the following message.

The machine account password for the local machine has been successfully reset.

The command completed successfully.

Reboot your Server.

Finally use repadmin to check the issue has been resolved.

Repadmin /replsum to make sure the secure channel has been fixed

I hope this has helped, and thanks to Sean.

Ivy’s biggest fan was Peter Andre who she met a couple of times and also spoke on the phone.

We all knew that Ivy has not been well for the past couple of weeks, and Pat from the Nursing home has been keeping all Ivy’s fans update. I was very saddened to read the updates from Pat this morning which read :-

Rest in Peace ivy we will miss you.

When running a DCDIAG report on Windows 2003 Domain Controller which is in a child domain the following error is seen.

Resolution

The error is because DCDIAG is trying to connect to the PDC Emulator in the Parent Domain on port 389UDP. Ensure that any firewall between the root domain controllers and the child domain controllers allows traffic on this port

Symptoms
If the following registry entries are set to NTP and the PDC Emulator hostname or IP Address respectively then Time synchronizes
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\NtpServer

If the following registry entry is set to NT5DS then there are errors in the event logs
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type

It does not matter what this registry entry is set to because NT5DS means the server should sync time with the PDC Emulator
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type

Errors in the event logs are along the lines of
Warning
The time provider NtpClient was unable to find a domain controller to use as a time source. NtpClient will try again in 15 minutes.

Error
The time provider NtpClient is configured to acquire time from one or more time sources; however; none of the sources are currently accessible.  No attempt to contact a source will be made for 15 minutes. NtpClient has no source of accurate time.

Resolution
This is usually caused When you move the FSMO Role : PDC Emulator to a new Domain Controller you will see this error on the previous PDC Emulator.

• Log on to the previous PDC Emulator with admin privileges
• Open a Command Prompt
• Type : w32tm /config /syncfromflags:domhier /reliable:no /update
• Type : net stop time
• Type : net start time

This will set the time service to look to the domain hierarchy rather than itself for a reliable time providerA

It would be very easy for me to give up, but I have decided to have a breather for a couple of days and start a fresh from Thursday. Now dont get me wrong, when I say I am having a breather it does not mean I am hitting the biscuit barrel and stuffing my face, I am just taking it easy.

Rachel and I polished off 5 bottles of wine on Sunday night (Rachel probably only had about a bottle) and one glass ended up all over the carpet (it had to be red didn’t it?)

Tonight I am going to have a curry with the lads, and start the diet properly tomorrow. I am hoping that a little of what you fancy does you good.

17/06/2009 136kg

22/06/2009 135kg

10/07/2009 131kg

24/07/2009 126.5kg

03/08/2009 125.4kg

18/08/2009 124.8kg

03/09/2009 121.8kg

16/11/2009 121.0kg

When I was trying this I had the following configuration

• Wordpress 2.8.4
• IIS7
• Windows 2008 Web Edition
• PHP 5.3

When trying to upload a file I was getting the following error :- Incompatible archive: PCLZIP_ERR_READ_OPEN_FAIL (-2) : Unable to read archive ‘C:\Windows\TEMP\/wordpress-2.8.5.zip’

to fix this I added the following permissions.

• c:\windows temp – add IUSR and give modify permissions
• c:\windows temp – add IIS_IUSRS and give modify permissions

I was then getting an error saying it could download the upgrade but did not have permissions to delete the plugin.

• \wp-content\plugins – grant modify permission for the IUSR account.

After doing this the upgrades of plugins worked fine.

I was in town today and went in to BHS and saw they were selling advent calendars.

I think we need a campaign to ask all shop keepers to keep christmas in december and not to start the christmas frenzy earlier and earlier each year.

There is an old joke. How can you tell its getting close to christmas? The shops are starting to sell easter eggs.

How true this is.

Personally I like to buy all presents on december 24th. This way you don’t (can’t) spend hours trying to decide what to get everyone.

It’s not bah humbug. I just don’t want the kids to get excited too soon.

I have to say I was dreading it, becuase I was convinced I had not lost any weight. When she told me I had lost 3kg you could have knocked me down with a feather.  So my total is now 14.2kg in 2 and a half months

Rachel keeps telling me that you can really tell, but I feel exactly the same. I have had to stop eating baked potatoes and beans cos I am bored bored bored bored bored of them. I am now eating Uncle Bens microwave rice, tin of tomatoes and tin of tuna all together in a bowl with lots of tabasco.

I am going to have to start making meals and freezing them so I can take them to work. If anyone has some different recipies please let me know.

17/06/2009 136kg

22/06/2009 135kg

10/07/2009 131kg

24/07/2009 126.5kg

03/08/2009 125.4kg

18/08/2009 124.8kg

03/09/2009 121.8kg