Service stuck on 'Stopping' state

If you have a service that is stuck on the 'Stopping' state and can't be restarted, stopped etc, normally restarting the machine will resolve the issue but if it's a production machine then you obviously want to avoid this.

To restart a service stuck in the 'Stopping' state, open a command prompt > taskkill /PID XXX /F (replacing XX with the PID of the offending service. Locate the PID in taskmgr > Services > PID).

Missing or corrupt hal.dll file

If you are getting a boot error relating to a 'missing or corrupt \system32\hal.dll. Please re-isntall a copy of the above file.', then follow the steps below:

1. Boot from a Windows install CD/DVD > open Recovery Console

2. Select the Windows installation > enter Admin password

3. At the C:\Windows prompt > cd system32 > map (to get the drive letter of the CD/DVD drive)

4. 'expand <>:\i386\hal.dl_'

5. 'exit'

Setup SSL on IIS

http://learn.iis.net/page.aspx/144/how-to-set-up-ssl-on-iis-7/

Failed to initialise TPM error

If you get an error (0x80070005) when initialising TPM for Bitlocker and you have GP set to 'Save the recovery key to AD' then make sure the computer object has Write permissions to itself in AD.

Best practice for Windows Server

http://www.ssw.com.au/ssw/Standards/Rules/RulesToBetterNetworks.aspx

SMTP testing

Good Technet article if you need to test SMTP connectivity:

http://support.microsoft.com/kb/323350

Error when opening Server Manager MMC snap-in

If you are getting {18ea3f92-d6aa-41d9-a205-2023400c8fbb} when trying to open Server Manager on Windows Server 2008. Go to C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG folder > rename current machine.config file > make copy of current.machine.default file > rename it to machine.config

Enabling PIN at startup when Bitlocker is already enabled

If you have Bitlocker already installed on your drives but would now like to require a PIN at startup, follow these steps:

1. Check Group/Local policy (Computer Configuration > Administrative Templates > Windows Components > Bitlocker Drive Encryption > Operating System Drives)
2. Make sure that 'Configure TPM startup PIN' is set to 'Require Startup PIN with TPM' in 'Require additional authentication at startup'
3. Suspend Bitlocker
4. From CMD, run 'manage-bde -protectors -add c: -tpmandpin xxxxxx'
5. Reboot and it will prompt you for the PIN you specified.

Enabling disabled Local Admin account in Windows 7

Even if Bitlocker is enabled.

http://www.grouppolicy.biz/2010/10/how-to-enable-a-disabled-local-administrator-account-offline-in-windows-7-even-when-using-bitlocker/

Check OS version in VHD file

If you need to check the version Windows on a VHD file without turning it on, use the /Get-CurrentEdition switch of the Deployment Image Servicing and Management (DISM) tool.

Link

PerformancePoint 2010 config

http://technet.microsoft.com/en-us/library/ee748643.aspx

Remove email forwarding on server

If you need to remove email forwarding to a mailbox manually that is already configured NOT to forward (nothing set in AD Exchange, not set in Outlook, etc), you can use MFCMAPI for this:

1. Open Mailbox withMFCMapi on the Exchange server
2. Configure Outlook profile of the mailbox where forwarding needs to be removed
3. Double click the mailbox to open
4. Expand Root Container > Top of the information store >Inbox folder
5. Right-click Inbox folder > Display Rules Table
6. Delete the offending rule

Exporting VMs to a network share

When trying to export VMs to a network share and you keep getting a 'General access denied (0x80070005)' error, check the following:

1. Make sure the exporting host server has Full Control rights on the share, this includes Share permissions AND NTFS permissions. These need to be set explicity.
2. Check the network share does not already have a folder in it with the same name as the VM to be exported.

PerformancePoint Server 2007 install guide

http://www.devx.com/enterprise/Article/37939

Sharepoint 2010 Install guide

http://technet.microsoft.com/en-gb/sharepoint/ee518643.aspx