TECH

Had a problem with an old citrix environment today where they were running metaframe 1.8 on a Windows 2000 server that was also the domain controller.

They had rebooted the box and ICA clients were unable to log in. RDP sessions were fine.

There were no errors getting logged at all in the event log. After some playing about and trying different things I re-activated the Terminal Server licensing service and then restarted it and got a message about the database was corrupt. Entered all the CALS back in but this still didnt resolve the issue although now we were getting

The terminal service client %1 has provided an invalid license

in the event log

With some further digging I found an article that talked about deleting the following registry keys on the server that is running the licensing service.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TermService\Parameters

Certificate
X 509 Certificate
X 509 Certificate ID

This then requires a reboot to kick in. After rebooting the box this resolved the issue and the clients were able to connect again

Posted by Jon Warburton at 12:36 PM | Permalink | Comments (0) | TrackBacks (0)

Customers Exchange 2007 server was reporting errors with internal SMTP certificates that had expired.

On the hubcas server they were seeing Event ID 12019
The remote internal transport certificate expired

On Edge it was showing they were seeing Event ID 12014
Microsoft Exchange couldn't find a certificate that contains the domain name xxxxxxxxxxxxxx

To resolve this issue the existing certificate was looked at on the edge server to confirm that it had indeed expired
get-exchangecertificate | fl

A new certificate was then requested on the edge server using
new-exchangecertificate

get-exchangecertificate
was then run again to confirm that the new certificate was in palce and the SMTP service had been assinged to it.

The edge transport server then had to be re-subscribed back to the organisation.

New-EdgeSubscription -FileName "C:\EdgeSubscriptionInfo.xml"

copy the .xml file to the hubcas server

On the hubcas server do the following
1.Open the Exchange Management Console. Expand Organization Configuration, select Hub Transport, and then in the result pane, click the Edge Subscriptions tab.
2.In the action pane, click New Edge Subscription. The New Edge Subscription Wizard starts.
3.On the New Edge Subscription page, in the Active Directory Site: drop-down list, select an Active Directory site.
4.On the New Edge Subscription page, click Browse. Locate the Edge Subscription file to import. Select the file, and then click Open.
5.On the New Edge Subscription page, click New.
6.On the Completion page, click Finish.

to force a sync do
Start-EdgeSynchronization

Posted by Jon Warburton at 03:23 PM | Permalink | Comments (0) | TrackBacks (0)