깡민쓰~IT Story

[Windows] Event Log를 필터링하기(XML을 통한 Custom View생성)

1. 보안 이벤트에서 이벤트 ID 5061과 로그인 사용자가 gmkim 혹은 mani4u 값으로 조회, 24시간 이내 값만

<QueryList>
  <Query Id="0" Path="Security">
    <Select Path="Security">
*[System[(EventID=5061) and TimeCreated[timediff(@SystemTime) &lt;= 86400000]]]
and
*[EventData[Data[@Name='SubjectUserName'] and (Data='gmkim'  or Data='test9')]] 
</Select>
  </Query>
</QueryList>

2. 모든 스키마에서 검색 데이터 값이 있으면 모두 쿼리

<QueryList>
  <Query Id="0" Path="Security">
    <Select Path="Security">
*[EventData[Data and (Data="gmkim" or Data="mani4u")]]
</Select>
  </Query>
</QueryList>

Advanced XML filtering in the Windows Event Viewer | Microsoft Learn

WMI Reset 배치 파일

스크립트를 bat 파일로 만들어서 실행시키면 초기화된다. 

조건에 따른 쿼리문 종류는 다음과 같습니다.
Collection으로 지정은 PC 혹은 사용자를 대상으로 다양한 조건으로 생성이 가능합니다.
그 중에서 PC이름, IP주소, 사용자ID, OU(Organization Unit) 단위로 생성하는 쿼리는 알아보겠습니다.


PC이름

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where name in ("PC이름")

IP주소

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where IPSubnets in ("10.177.210.0")

사용자ID

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where lastlogonusername in ("userid")

OU(Organization Unit)

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.SystemOUName = "OU Path"

상기 Query 외에 전체 Collection 중에서 SC agent가 미설치된 PC만을 선별할 수 있다.

 미설치된 PC 수집

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.Client is null

SCCM와 WSUS 관련 로그 설명

Client Log Files

• CAS - Content Access Service. Maintains the local package cache.

• Ccmexec.log - Records activities of the client and the SMS Agent Host service.

• CertificateMaintenance.log - Maintains certificates for Active Directory directory service and management points.

• ClientIDManagerStartup.log - Creates and maintains the client GUID.

• ClientLocation.log - Site assignment tasks.

• ContentTransferManager.log - Schedules the Background Intelligent Transfer Service (BITS) or the Server Message Block (SMB) to download or to access SMS packages.

• DataTransferService.log - Records all BITS communication for policy or package access.

• Execmgr.log - Records advertisements that run.

• FileBITS.log - Records all SMB package access tasks.

• Fsinvprovider.log (renamed to FileSystemFile.log in all SMS 2003 Service Packs) - Windows Management Instrumentation (WMI) provider for software inventory and file collection.

• InventoryAgent.log - Creates discovery data records (DDRs) and hardware and software inventory records.

• LocationServices.log - Finds management points and distribution points.

• Mifprovider.log - The WMI provider for .MIF files.

• Mtrmgr.log - Monitors all software metering processes.

• PolicyAgent.log - Requests policies by using the Data Transfer service.

• PolicyAgentProvider.log - Records policy changes.

• PolicyEvaluator.log - Records new policy settings.

• Remctrl.log - Logs when the remote control component (WUSER32) starts.

• Scheduler.log - Records schedule tasks for all client operations.

• Smscliui.log - Records usage of the Systems Management tool in Control Panel.

• StatusAgent.log - Logs status messages that are created by the client components.

• SWMTRReportGen.log - Generates a usage data report that is collected by the metering agent. (This data is logged in Mtrmgr.log.)

Server Log Files

• Ccm.log - Client Configuration Manager tasks.

• Cidm.log - Records changes to the client settings by the Client Install Data Manager (CIDM).

• Colleval.log - Logs when collections are created, changed, and deleted by the Collection Evaluator.

• Compsumm.log - Records Component Status Summarizer tasks.

• Cscnfsvc.log - Records Courier Sender confirmation service tasks.

• Dataldr.log - Processes Management Information Format (MIF) files and hardware inventory in the Configuration Manager 2007 database.

• Ddm.log - Saves DDR information to the Configuration Manager 2007 database by the Discovery Data Manager.

• Despool.log - Records incoming site-to-site communication transfers.

• Distmgr.log - Records package creation, compression, delta replication, and information updates.

• Hman.log - Records site configuration changes, and publishes site information in Active Directory Domain Services.

• Inboxast.log - Records files that are moved from the management point to the corresponding SMS\INBOXES folder.

• Inboxmgr.log - Records file maintenance.

• Invproc.log - Records the processing of delta MIF files for the Dataloader component from client inventory files.

• Mpcontrol.log - Records the registration of the management point with WINS. Records the availability of the management point every 10 minutes.

• Mpfdm.log - Management point component that moves client files to the corresponding SMS\INBOXES folder.

• MPMSI.log - Management point .msi installation log.

• MPSetup.log - Records the management point installation wrapper process.

• Ntsvrdis.log - Configuration Manager 2007 server discovery.

• Offermgr.log - Records advertisement updates.

• Offersum.log - Records summarization of advertisement status messages.

• Policypv.log - Records updates to the client policies to reflect changes to client settings or advertisements.

• Replmgr.log - Records the replication of files between the site server components and the Scheduler component.

• Rsetup.log - Reporting point setup log.

• Sched.log - Records site-to-site job and package replication.

• Sender.log - Records files that are sent to other child and parent sites.

• Sinvproc.log - Records client software inventory data processing to the site database in Microsoft SQL Server.

• Sitecomp.log - Records maintenance of the installed site components.

• Sitectrl.log - Records site setting changes to the Sitectrl.ct0 file.

• Sitestat.log - Records the monitoring process of all site systems.

• Smsdbmon.log - Records database changes.

• Smsexec.log - Records processing of all site server component threads.

• Smsprov.log - Records WMI provider access to the site database.

• SMSReportingInstall.log - Records the Reporting Point installation. This component starts the installation tasks and processes configuration changes.

• SMSSHVSetup.log - Records the success or failure (with failure reason) of installing the System Health Validator point.

• Srvacct.log - Records the maintenance of accounts when the site uses standard security.

• Statmgr.log - Writes all status messages to the database.

• Swmproc.log - Processes metering files and maintains settings.

Admin Console Log Files

• RepairWizard.log - Records errors, warnings, and information about the process of running the Repair Wizard.

• ResourceExplorer.log - Records errors, warnings, and information about running the Resource Explorer.

• SMSAdminUI.log - Records the local Configuration Manager 2007 console tasks when you connect to Configuration Manager 2007 sites.

Management Point Log Files

• MP_Ddr.log - Records the conversion of XML.ddr records from clients, and copies them to the site server.

• MP_GetAuth.log - Records the status of the site management points.

• MP_GetPolicy.log - Records policy information.

• MP_Hinv.log - Converts XML hardware inventory records from clients and copies the files to the site server.

• MP_Location.log - Records location manager tasks.

• MP_Policy.log - Records policy communication.

• MP_Relay.log - Copies files that are collected from the client.

• MP_Retry.log - Records the hardware inventory retry processes.

• MP_Sinv.log - Converts XML hardware inventory records from clients and copies them to the site server.

• MP_Status.log - Converts XML.svf status message files from clients and copies them to the site server.

Mobile Device Management Log Files

• DmClientHealth.log - Records the GUIDs of all the mobile device clients that are communicating with the Device Management Point.

• DmClientRegistration.log - Records registration requests from and responses to the mobile device client in Native mode.

• DmpDatastore.log - Records all the site database connections and queries made by the Device Management Point.

• DmpDiscovery.log - Records all the discovery data from the mobile device clients on the Device Management Point.

• DmpFileCollection.log - Records mobile device file collection data from mobile device clients on the Device Management Point.

• DmpHardware.log - Records hardware inventory data from mobile device clients on the Device Management Point.

• DmpIsapi.log - Records mobile device communication data from device clients on the Device Management Point.

• dmpMSI.log - Records the MSI data for Device Management Point setup.

• DMPSetup.log - Records the mobile device management setup process.

• DmpSoftware.log - Records mobile device software distribution data from mobile device clients on the Device Management Point.

• DmpStatus.log - Records mobile device status messages data from mobile device clients on the Device Management Point.

• FspIsapi.log - Records Fallback Status Point communication data from mobile device clients and client computers on the Fallback Status Point.

Mobile Device Client Log Files

• DmCertEnroll.log - Records certificate enrollment data on mobile device clients.

• DMCertResp.htm (in \temp) - Records HTML response from the certificate server when the mobile device Enroller program requests a client authentication certificate on mobile device clients.

• DmClientSetup.log - Records client setup data on mobile device clients.

• DmClientXfer.log - Records client transfer data for Windows Mobile Device Center and ActiveSync deployments.

• DmCommonInstaller.log - Records client transfer file installation for setting up mobile device client transfer files on client computers.

• DmInstaller.log - Records whether DMInstaller correctly calls DmClientSetup and whether DmClientSetup exits with success or failure on mobile device clients.

• DmInvExtension.log - Records Inventory Extension file installation for setting up Inventory Extension files on client computers.

• DmSvc.log - Records mobile device management service data on mobile device clients.

Operating System Deployment Log Files

• CCMSetup.log - Provides information about client-based operating system actions.

• CreateTSMedia.log - Provides information about task sequence media when it is created. This log is generated on the computer running the Configuration Manager 2007 administrator console.

• DriverCatalog.log - Provides information about device drivers that have been imported into the driver catalog.

• MP_ClientIDManager.log - Provides information about the Configuration Manager 2007 management point when it responds to Configuration Manager 2007 client ID requests from boot media or PXE. This log is generated on the Configuration Manager 2007 management point.

• MP_DriverManager.log - Provides information about the Configuration Manager 2007 management point when it responds to a request from the Auto Apply Driver task sequence action. This log is generated on the Configuration Manager 2007 management point.

• MP_Location.log - Provides information about the Configuration Manager 2007 management point when it responds to request state store or release state store requests from the state migration point. This log is generated on the Configuration Manager 2007 management point.

• Pxecontrol.log - Provides information about the PXE Control Manager.

• PXEMsi.log - Provides information about the PXE service point and is generated when the PXE service point site server has been created.

• PXESetup.log - Provides information about the PXE service point and is generated when the PXE service point site server has been created.

• Setupact.log Setupapi.log Setuperr.log Provide information about Windows Sysprep and setup logs.

• SmpIsapi.log - Provides information about the state migration point Configuration Manager 2007 client request responses.

• Smpmgr.log - Provides information about the results of state migration point health checks and configuration changes.

• SmpMSI.log - Provides information about the state migration point and is generated when the state migration point site server has been created.

• Smsprov.log - Provides information about the SMS provider.

• Smspxe.log - Provides information about the Configuration Manager 2007 PXE service point.

• SMSSMPSetup.log - Provides information about the state migration point and is generated when the state migration point site server has been created.

• Smsts.log - General location for all operating system deployment and task sequence log events.

• TaskSequenceProvider.log - Provides information about task sequences when they are imported, exported, or edited.

• USMT Log loadstate.log - Provides information about the User State Migration Tool (USMT) regarding the restore of user state data.

• USMT Log scanstate.log - Provides information about the USMT regarding the capture of user state data.

Network Access Protection Log Files

• Ccmcca.log - Logs the processing of compliance evaluation based on Configuration Manager NAP policy processing and contains the processing of remediation for each software update required for compliance.

• CIAgent.log - Tracks the process of remediation and compliance. However, the software updates log file, *Updateshandler.log - provides more informative details on installing the software updates required for compliance.

• locationservices.log - Used by other Configuration Manager features (for example, information about the client’s assigned site) but also contains information specific to Network Access Protection when the client is in remediation. It records the names of the required remediation servers (management point, software update point, and distribution points that host content required for compliance), which are also sent in the client statement of health.

• SDMAgent.log - Shared with the Configuration Manager feature desired configuration management and contains the tracking process of remediation and compliance. However, the software updates log file, Updateshandler.log, provides more informative details about installing the software updates required for compliance.

• SMSSha.log - The main log file for the Configuration Manager Network Access Protection client and contains a merged statement of health information from the two Configuration Manager components: location services (LS) and the configuration compliance agent (CCA). This log file also contains information about the interactions between the Configuration Manager System Health Agent and the operating system NAP agent, and also between the Configuration Manager System Health Agent and both the configuration compliance agent and the location services. It provides information about whether the NAP agent successfully initialized, the statement of health data, and the statement of health response.

System Health Validator Point Log Files

• Ccmperf.log -Contains information about the initialization of the System Health Validator point performance counters.

• SmsSHV.log - The main log file for the System Health Validator point; logs the basic operations of the System Health Validator service, such as the initialization progress.

• SmsSHVADCacheClient.log - Contains information about retrieving Configuration Manager health state references from Active Directory Domain Services.

• SmsSHVCacheStore.log - Contains information about the cache store used to hold the Configuration Manager NAP health state references retrieved from Active Directory Domain Services, such as reading from the store and purging entries from the local cache store file. The cache store is not configurable.

• SmsSHVRegistrySettings.log - Records any dynamic changes to the System Health Validator component configuration while the service is running.

• SmsSHVQuarValidator.log - Records client statement of health information and processing operations. To obtain full information, change the registry key LogLevel from 1 to 0 in the following location:HKLM\SOFTWARE\Microsoft\SMSSHV\Logging\@GLOBAL

Desired Configuration Management Log Files

• ciagent.log - Provides information about downloading, storing, and accessing assigned configuration baselines.

• dcmagent.log - Provides high-level information about the evaluation of assigned configuration baselines and desired configuration management processes.

• discovery.log - Provides detailed information about the Service Modeling Language (SML) processes.

• sdmagent.log - Provides information about downloading, storing, and accessing configuration item content.

• sdmdiscagent.log - Provides high-level information about the evaluation process for the objects and settings configured in the referenced configuration items.

Wake On LAN Log Files

• Wolmgr.log - Contains information about wake-up procedures such as when to wake up advertisements or deployments that are configured for Wake On LAN.

• WolCmgr.log - Contains information about which clients need to be sent wake-up packets, the number of wake-up packets sent, and the number of wake-up packets retried.

Software Updates Site Server Log Files

• ciamgr.log - Provides information about the addition, deletion, and modification of software update configuration items.

• distmgr.log - Provides information about the replication of software update deployment packages.

• objreplmgr.log - Provides information about the replication of software updates notification files from a parent to child sites.

• PatchDownloader.log - Provides information about the process for downloading software updates from the update source specified in the software updates metadata to the download destination on the site server.

• replmgr.log - Provides information about the process for replicating files between sites.

• smsdbmon.log - Provides information about when software update configuration items are inserted, updated, or deleted from the site server database and creates notification files for software updates components.

• SUPSetup - Provides information about the software update point installation. When the software update point installation completes, Installation was successful is written to this log file.

• WCM.log - Provides information about the software update point configuration and connecting to the Windows Server Update Services (WSUS) server for subscribed update categories, classifications, and languages.

• WSUSCtrl.log - Provides information about the configuration, database connectivity, and health of the WSUS server for the site.

• wsyncmgr.log -Provides information about the software updates synchronization process.

WSUS Server Log Files

• Change.log - Provides information about the WSUS server database information that has changed.

• SoftwareDistribution.log - Provides information about the software updates that are synchronized from the configured update source to the WSUS server database.

Software Updates Client Computer Log Files

• CAS.log - Provides information about the process of downloading software updates to the local cache and cache management.

• CIAgent.log - Provides information about processing configuration items, including software updates.

• LocationServices.log - Provides information about the location of the WSUS server when a scan is initiated on the client.

• PatchDownloader.log - Provides information about the process for downloading software updates from the update source to the download destination on the site server. This log is only on the client computer configured as the synchronization host for the Inventory Tool for Microsoft Updates.

• PolicyAgent.log - Provides information about the process for downloading, compiling, and deleting policies on client computers.

• PolicyEvaluator - Provides information about the process for evaluating policies on client computers, including policies from software updates.

• RebootCoordinator.log - Provides information about the process for coordinating system restarts on client computers after software update installations.

• ScanAgent.log - Provides information about the scan requests for software updates, what tool is requested for the scan, the WSUS location, and so on.

• ScanWrapper - Provides information about the prerequisite checks and the scan process initialization for the Inventory Tool for Microsoft Updates on Systems Management Server (SMS) 2003 clients.

• SdmAgent.log - Provides information about the process for verifying and decompressing packages that contain configuration item information for software updates.

• ServiceWindowManager.log - Provides information about the process for evaluating configured maintenance windows.

• smscliUI.log - Provides information about the Configuration Manager Control Panel user interactions, such as initiating a Software Updates Scan Cycle from the Configuration Manager Properties dialog box, opening the Program Download Monitor, and so on.

• SmsWusHandler - Provides information about the scan process for the Inventory Tool for Microsoft Updates on SMS 2003 client computers.

• StateMessage.log - Provides information about when software updates state messages are created and sent to the management point.

• UpdatesDeployment.log - Provides information about the deployment on the client, including software update activation, evaluation, and enforcement. Verbose logging shows additional information about the interaction with the client user interface.

• UpdatesHandler.log - Provides information about software update compliance scanning and about the download and installation of software updates on the client.

• UpdatesStore.log - Provides information about the compliance status for the software updates that were assessed during the compliance scan cycle.

• WUAHandler.log - Provides information about when the Windows Update Agent on the client searches for software updates.

• WUSSyncXML.log - Provides information about the Inventory Tool for the Microsoft Updates synchronization process. This log is only on the client computer configured as the synchronization host for the Inventory Tool for Microsoft Updates.

Windows Update Agent Log File

• WindowsUpdate.log - Provides information about when the Windows Update Agent connects to the WSUS server and retrieves the software updates for compliance assessment and whether there are updates to the agent components

1. Exchange 관리 센터 UI 또는 Exchange Powershell로 데이터베이스가 탑재되지 않는 증상 확인
2. Eseutil을 이용하여 데이터베이스 상태 확인

Eseutil.exe /mh <데이터베이스 파일>

예:) eseutil.exe /mh “E:\maildb\database04.edb”

1. 데이터 베이스 상태 확인 시 ‘Dirty Shutdown’으로 확인됨.
2. ‘Dirty Shutdown’ 상태 ‘Clean Shutdown’ 상태로 변경하기 위한 Eseutil 하드 복구 진행

Eseutil.exe /p <데이터베이스 파일>

Eseutil.exe /p “e:\maildb\database04.edb”

1. 복구 진행 완료 후 2변 명령으로 ‘Clean Shutdown’ 상태로 변경되는지 확인.

사서함 데이터베이스 관련 로그는 다른 위치 또는 삭제 후 탑재(Mount) 진행

1. Exchange 서버 Queue 증가 및 시스템 성능 저하로 인한 Queue 파일 초기화 작업 방법

1. Microsoft Exchange Transport Service 중지
2. Queue 파일 및 Queue 로그파일 삭제

C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Queue 폴더 내의 모든 파일 삭제

1. Microsoft Exchange Transport Service 시작
2. Queue 파일 새로 생성되는 것 확인

C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Queue 폴더에 mail.que 파일 및 로그파일 새로 생성되는지 확인

끝.

특정 사용자 계정잠금 예외처리는 Active Directory 관리 센터를 이용하여 가능 합니다.

[특정 사용자 계정 잠금 예외 처리 방법]

1. AD 서버 접속

2. 시작> Windows 관리 도구> Active Directory 관리 센터         

3. 도메인명(로컬)>system>Password Settings Container 선택       

4. 새로 만들기 > 암호 설정 선택         

5. 암호 설정 만들기 속성 값 설정

   5-1. 이름, 우선 순위 필수 값 입력

   5-2. 계정 잠금 정책 적용 체크 박스 해제

   5-3. 암호 정책 설정 값은 기존 회사 기준 값으로 설정 된 GPO를 참고 하시거나 임의로 넣으시면 됩니다.      

6. 적용 대상 추가

7. 계정 잠금 예외 처리 할 계정 입력 및 확인    

 8. 확인      

 9. 정책 적용

대상 컴퓨터에서 적용은 최대 90분이 소요 될 수 있습니다.

빠르게 하기 위해서는 대상 컴퓨터에서도 gpupdate 명령을 실행 해주시면 됩니다.

끝.

download : https://learn.microsoft.com/en-us/windows-server/opbuildpdf/administration/windows-commands/toc.pdf?branch=live

A

• active
• add
• add alias
• add volume
• append
• arp
• assign
• assoc
• at
• atmadm
• attach-vdisk
• attrib
• attributes
  • attributes disk
  • attributes volume
• auditpol
  • auditpol backup
  • auditpol clear
  • auditpol get
  • auditpol list
  • auditpol remove
  • auditpol resourcesacl
  • auditpol restore
  • auditpol set
• autochk
• autoconv
• autofmt
• automount

B

• bcdboot
• bcdedit
• bdehdcfg
  • bdehdcfg driveinfo
  • bdehdcfg newdriveletter
  • bdehdcfg quiet
  • bdehdcfg restart
  • bdehdcfg size
  • bdehdcfg target
• begin backup
• begin restore
• bitsadmin
  • bitsadmin addfile
  • bitsadmin addfileset
  • bitsadmin addfilewithranges
  • bitsadmin cache
    • bitsadmin cache and delete
    • bitsadmin cache and deleteurl
    • bitsadmin cache and getexpirationtime
    • bitsadmin cache and getlimit
    • bitsadmin cache and help
    • bitsadmin cache and info
    • bitsadmin cache and list
    • bitsadmin cache and setexpirationtime
    • bitsadmin cache and setlimit
    • bitsadmin cache and clear
  • bitsadmin cancel
  • bitsadmin complete
  • bitsadmin create
  • bitsadmin examples
  • bitsadmin getaclflags
  • bitsadmin getbytestotal
  • bitsadmin getbytestransferred
  • bitsadmin getclientcertificate
  • bitsadmin getcompletiontime
  • bitsadmin getcreationtime
  • bitsadmin getcustomheaders
  • bitsadmin getdescription
  • bitsadmin getdisplayname
  • bitsadmin geterror
  • bitsadmin geterrorcount
  • bitsadmin getfilestotal
  • bitsadmin getfilestransferred
  • bitsadmin gethelpertokenflags
  • bitsadmin gethelpertokensid
  • bitsadmin gethttpmethod
  • bitsadmin getmaxdownloadtime
  • bitsadmin getminretrydelay
  • bitsadmin getmodificationtime
  • bitsadmin getnoprogresstimeout
  • bitsadmin getnotifycmdline
  • bitsadmin getnotifyflags
  • bitsadmin getnotifyinterface
  • bitsadmin getowner
  • bitsadmin getpeercachingflags
  • bitsadmin getpriority
  • bitsadmin getproxybypasslist
  • bitsadmin getproxylist
  • bitsadmin getproxyusage
  • bitsadmin getreplydata
  • bitsadmin getreplyfilename
  • bitsadmin getreplyprogress
  • bitsadmin getsecurityflags
  • bitsadmin getstate
  • bitsadmin gettemporaryname
  • bitsadmin gettype
  • bitsadmin getvalidationstate
  • bitsadmin help
  • bitsadmin info
  • bitsadmin list
  • bitsadmin listfiles
  • bitsadmin makecustomheaderswriteonly
  • bitsadmin monitor
  • bitsadmin nowrap
  • bitsadmin peercaching
    • bitsadmin peercaching and getconfigurationflags
    • bitsadmin peercaching and help
    • bitsadmin peercaching and setconfigurationflags
  • bitsadmin peers
    • bitsadmin peers and clear
    • bitsadmin peers and discover
    • bitsadmin peers and help
    • bitsadmin peers and list
  • bitsadmin rawreturn
  • bitsadmin removeclientcertificate
  • bitsadmin removecredentials
  • bitsadmin replaceremoteprefix
  • bitsadmin reset
  • bitsadmin resume
  • bitsadmin setaclflag
  • bitsadmin setclientcertificatebyid
  • bitsadmin setclientcertificatebyname
  • bitsadmin setcredentials
  • bitsadmin setcustomheaders
  • bitsadmin setdescription
  • bitsadmin setdisplayname
  • bitsadmin sethelpertoken
  • bitsadmin sethelpertokenflags
  • bitsadmin sethttpmethod
  • bitsadmin setmaxdownloadtime
  • bitsadmin setminretrydelay
  • bitsadmin setnoprogresstimeout
  • bitsadmin setnotifycmdline
  • bitsadmin setnotifyflags
  • bitsadmin setpeercachingflags
  • bitsadmin setpriority
  • bitsadmin setproxysettings
  • bitsadmin setreplyfilename
  • bitsadmin setsecurityflags
  • bitsadmin setvalidationstate
  • bitsadmin suspend
  • bitsadmin takeownership
  • bitsadmin transfer
  • bitsadmin util
    • bitsadmin util and enableanalyticchannel
    • bitsadmin util and getieproxy
    • bitsadmin util and help
    • bitsadmin util and repairservice
    • bitsadmin util and setieproxy
    • bitsadmin util and version
  • bitsadmin wrap
• bootcfg
  • bootcfg addsw
  • bootcfg copy
  • bootcfg dbg1394
  • bootcfg debug
  • bootcfg default
  • bootcfg delete
  • bootcfg ems
  • bootcfg query
  • bootcfg raw
  • bootcfg rmsw
  • bootcfg timeout
• break

C

• cacls
• call
• cd
• certreq
• certutil
• change
  • change logon
  • change port
  • change user
• chcp
• chdir
• chglogon
• chgport
• chgusr
• chkdsk
• chkntfs
• choice
• cipher
• clean
• cleanmgr
• clip
• cls
• cmd
• cmdkey
• cmstp
• color
• comp
• compact
• compact vdisk
• convert
  • convert basic
  • convert dynamic
  • convert gpt
  • convert mbr
• copy
• cprofile
• create
  • create partition efi
  • create partition extended
  • create partition logical
  • create partition msr
  • create partition primary
  • create volume mirror
  • create volume raid
  • create volume simple
  • create volume stripe
• cscript

D

• date
• dcgpofix
• defrag
• del
• delete
  • delete disk
  • delete partition
  • delete shadows
  • delete volume
• detach vdisk
• detail
  • detail disk
  • detail partition
  • detail vdisk
  • detail volume
• dfsdiag
  • dfsdiag testdcs
  • dfsdiag testdfsconfig
  • dfsdiag testdfsintegrity
  • dfsdiag testreferral
  • dfsdiag testsites
• dfsrmig
• diantz
• dir
• diskcomp
• diskcopy
• diskpart
• diskperf
• diskraid
• diskshadow
• dispdiag
• dnscmd
• doskey
• driverquery

E

• echo
• edit
• endlocal
• end restore
• erase
• eventcreate
• eventquery
• eventtriggers
• Evntcmd
• exec
• exit
• expand
• expand vdisk
• expose
• extend
• extract

F

• fc
• filesystems
• find
• findstr
• finger
• flattemp
• fondue
• for
• forfiles
• format
• freedisk
• fsutil
  • fsutil 8dot3name
  • fsutil behavior
  • fsutil dirty
  • fsutil file
  • fsutil fsinfo
  • fsutil hardlink
  • fsutil objectid
  • fsutil quota
  • fsutil repair
  • fsutil reparsepoint
  • fsutil resource
  • fsutil sparse
  • fsutil tiering
  • fsutil transaction
  • fsutil usn
  • fsutil volume
  • fsutil wim
• ftp
  • ftp append
  • ftp ascii
  • ftp bell
  • ftp binary
  • ftp bye
  • ftp cd
  • ftp close
  • ftp debug
  • ftp delete
  • ftp dir
  • ftp disconnect
  • ftp get
  • ftp glob
  • ftp hash
  • ftp lcd
  • ftp literal
  • ftp ls
  • ftp mget
  • ftp mkdir
  • ftp mls
  • ftp mput
  • ftp open
  • ftp prompt
  • ftp put
  • ftp pwd
  • ftp quit
  • ftp quote
  • ftp recv
  • ftp remotehelp
  • ftp rename
  • ftp rmdir
  • ftp send
  • ftp status
  • ftp trace
  • ftp type
  • ftp user
  • ftp verbose
  • ftp mdelete
  • ftp mdir
• ftype
• fveupdate

G

• getmac
• gettype
• goto
• gpfixup
• gpresult
• gpt
• gpupdate
• graftabl

H

• help
• helpctr
• hostname

I

• icacls
• if
• import (shadowdisk)
• import (diskpart)
• inactive
• inuse
• ipconfig
• ipxroute
• irftp

J

• jetpack

K

• klist
• ksetup
  • ksetup addenctypeattr
  • ksetup addhosttorealmmap
  • ksetup addkdc
  • ksetup addkpasswd
  • ksetup addrealmflags
  • ksetup changepassword
  • ksetup delenctypeattr
  • ksetup delhosttorealmmap
  • ksetup delkdc
  • ksetup delkpasswd
  • ksetup delrealmflags
  • ksetup domain
  • ksetup dumpstate
  • ksetup getenctypeattr
  • ksetup listrealmflags
  • ksetup mapuser
  • ksetup removerealm
  • ksetup server
  • ksetup setcomputerpassword
  • ksetup setenctypeattr
  • ksetup setrealm
  • ksetup setrealmflags
• ktmutil
• ktpass

L

• label
• list
  • list providers
  • list shadows
  • list writers
• load metadata
• lodctr
• logman
  • logman create
  • logman create alert
  • logman create api
  • logman create cfg
  • logman create counter
  • logman create trace
  • logman delete
  • logman import and logman export
  • logman query
  • logman start and logman stop
  • logman update
  • logman update alert
  • logman update api
  • logman update cfg
  • logman update counter
  • logman update trace
• logoff
• lpq
• lpr

M

• macfile
• makecab
• manage bde
  • manage bde status
  • manage bde on
  • manage bde off
  • manage bde pause
  • manage bde resume
  • manage bde lock
  • manage bde unlock
  • manage bde autounlock
  • manage bde protectors
  • manage bde tpm
  • manage bde setidentifier
  • manage bde forcerecovery
  • manage bde changepassword
  • manage bde changepin
  • manage bde changekey
  • manage bde keypackage
  • manage bde upgrade
  • manage bde wipefreespace
• mapadmin
• md
• merge vdisk
• mkdir
• mklink
• mmc
• mode
• more
• mount
• mountvol
• move
• mqbkup
• mqsvc
• mqtgsvc
• msdt
• msg
• msiexec
• msinfo32
• mstsc

N

• nbtstat
• netcfg
• netdom
• net print
• netsh
• netstat
• nfsadmin
• nfsshare
• nfsstat
• nlbmgr
• nltest
• nslookup
  • nslookup exit Command
  • nslookup finger Command
  • nslookup help
  • nslookup ls
  • nslookup lserver
  • nslookup root
  • nslookup server
  • nslookup set
  • nslookup set all
  • nslookup set class
  • nslookup set d2
  • nslookup set debug
  • nslookup set domain
  • nslookup set port
  • nslookup set querytype
  • nslookup set recurse
  • nslookup set retry
  • nslookup set root
  • nslookup set search
  • nslookup set srchlist
  • nslookup set timeout
  • nslookup set type
  • nslookup set vc
  • nslookup view
• ntbackup
• ntcmdprompt
• ntfrsutl

O

• offline
  • offline disk
  • offline volume
• online
  • online disk
  • online volume
• openfiles

P

• pagefileconfig
• path
• pathping
• pause
• pbadmin
• pentnt
• perfmon
• ping
• pktmon
• pnpunattend
• pnputil
• popd
• powershell
• powershell ise
• print
• prncnfg
• prndrvr
• prnjobs
• prnmngr
• prnport
• prnqctl
• prompt
• pubprn
• pushd
• pushprinterconnections
• pwlauncher
• pwsh

Q

• qappsrv
• qprocess
• query
  • query process
  • query session
  • query termserver
  • query user
• quser
• qwinsta

R

• rcp
• rd
• rdpsign
• recover
• recover disk group
• refsutil
• reg
  • reg add
  • reg compare
  • reg copy
  • reg delete
  • reg export
  • reg import
  • reg load
  • reg query
  • reg restore
  • reg save
  • reg unload
• regini
• regsvr32
• relog
• rem
• remove
• ren
• rename
• repadmin
• repair
  • repair bde
• replace
• rescan
• reset
  • reset session
• retain
• revert
• rexec
• risetup
• rmdir
• robocopy
• route ws2008
• rpcinfo
• rpcping
• rsh
• rundll32
• rundll32 printui
• rwinsta

S

• san
• sc config
• sc create
• sc delete
• sc query
• schtasks
• scwcmd
  • scwcmd analyze
  • scwcmd configure
  • scwcmd register
  • scwcmd rollback
  • scwcmd transform
  • scwcmd view
• secedit
  • secedit analyze
  • secedit configure
  • secedit export
  • secedit generaterollback
  • secedit import
  • secedit validate
• select
  • select disk
  • select partition
  • select vdisk
  • select volume
• serverceipoptin
• servermanagercmd
• serverweroptin
• set environmental variables
• set shadow copy
  • set context
  • set id
  • setlocal
  • set metadata
  • set option
  • set verbose
• setx
• sfc
• shadow
• shift
• showmount
• shrink
• shutdown
• simulate restore
• sort
• start
• subcommand set device
• subcommand set drivergroup
• subcommand set drivergroupfilter
• subcommand set driverpackage
• subcommand set image
• subcommand set imagegroup
• subcommand set server
• subcommand set transportserver
• subcommand set multicasttransmission
• subcommand start namespace
• subcommand start server
• subcommand start transportserver
• subcommand stop server
• subcommand stop transportserver
• subst
• sxstrace
• sysocmgr
• systeminfo

T

• takeown
• tapicfg
• taskkill
• tasklist
• tcmsetup
• telnet
  • telnet close
  • telnet display
  • telnet open
  • telnet quit
  • telnet send
  • telnet set
  • telnet status
  • telnet unset
• tftp
• time
• timeout
• title
• tlntadmn
• tpmtool
• tpmvscmgr
• tracerpt
• tracert
• tree
• tscon
• tsdiscon
• tsecimp
• tskill
• tsprof
• type
• typeperf
• tzutil

U

• unexpose
• uniqueid
• unlodctr

V

• ver
• verifier
• verify
• vol
• vssadmin
  • vssadmin delete shadows
  • vssadmin list shadows
  • vssadmin list writers
  • vssadmin resize shadowstorage

W

• waitfor
• wbadmin
  • wbadmin delete catalog
  • wbadmin delete systemstatebackup
  • wbadmin disable backup
  • wbadmin enable backup
  • wbadmin get disks
  • wbadmin get items
  • wbadmin get status
  • wbadmin get versions
  • wbadmin restore catalog
  • wbadmin start backup
  • wbadmin start recovery
  • wbadmin start sysrecovery
  • wbadmin start systemstatebackup
  • wbadmin start systemstaterecovery
  • wbadmin stop job
• wdsutil
• wecutil
• wevtutil
• where
• whoami
• winnt
• winnt32
• winpop
• winrs
• winsat mem
• winsat mfmedia
• wmic
• writer
• wscript

X

• xcopy

Default group policy GUIDs are as follows:

Default Domain Policy

31B2F340-016D-11D2-945F-00C04FB984F9

Default DC Policy

6AC1786C-016F-11D2-945F-00C04FB984F9

Recreates the default Group Policy Objects (GPOs) for a domain. To get to the Group Policy Management Console (GPMC), you must install Group Policy Management as a feature through Server Manager.

Syntax

dcgpofix [/ignoreschema] [/target: {domain | dc | both}] [/?]

Parameters

Examples

To manage the default Account Policies settings, Password Policy, Account Lockout Policy, and Kerberos Policy, while ignoring the Active Directory schema version, type:

dcgpofix /ignoreschema /target:domain

To configure the Default Domain Controllers Policy GPO only to set user rights and audit policies, while ignoring the Active Directory schema version, type:

dcgpofix /ignoreschema /target:dc

오류 (12711)오류 때문에 VMM 서버(HPVCluster)
에서 WMI 작업을 완료할 수 없습니다: [MSCluster_Resource.Name=&] 클러스터 리소스를 찾을 수 없습니다.
클러스터 리소스를 찾을 수 없습니다(0x138F)

권장 작업
문제를 해결한 다음 작업을 다시 시도하십시오.

클러스터 리소스를 찾을 수 없습니다.

이 문제를
해결하려면 Hyper-V 노드에 로그인합니다. 그리고 달려라.

이 후 복구 -> SCVMM에서 무시 및 새로 고침을 클릭 할 수 있습니다.

조짐

만료가 다가오고 있는지 어떻게 알 수 있습니까? Hyper-V-VMMS 이벤트 로그에 다음 경고가 표시됩니다.

로그 이름: 마이크로소프트-윈도우-하이퍼-V-VMMS-관리
원본: 마이크로소프트-윈도우-하이퍼-V-VMMS
이벤트 ID: 12510
작업 범주: 없음
수준: 경고
사용자: 시스템
설명: 서버 인증에 사용되는 인증서는 30일 이내에 만료됩니다. 인증서가 만료된 후에는 가상 컴퓨터에 대한 원격 액세스를 사용할 수 없습니다. 인증서를 갱신하거나 다시 만드십시오.

조치

1. 각 VMM 및 Host 서버에서 인증서 삭제

2. 아래 파워셀로 인증서 다시 등록

$Credential = Get-Credential
Get-SCVMMManagedComputer -ComputerName "vmm.contoso.com" | Register-SCVMMManagedComputer  -Credential $credential

3. 인증서 생성 확인

4. 연결 확인
Get-SCVMMManagedComputer | ft Name, StateString, RoleString,State,VersionStateString,AgentVersion,UpdatedDate,IsFullyCached,MostRecentTaskIfLocal

5. SCVMM 작업창에서 연결 확인