Joshua Lim's questions

我正在使用 ipmiutil.exe 重置运行 Windows 10 Enterprise IOT 的 64 位 Supermicro 服务器 (X11SBA-F) 上的 IPMI 看门狗，但它无法返回以下错误：

ipmiutil wdt -r
ipmiutil wdt ver 3.13
-- BMC version 1.53, IPMI version 2.0
wdt data: 00 00 00 00 00 00 00 00
Watchdog timer is stopped for use with reserved. Logging
               pretimeout is 0 seconds, pre-action is None
               timeout is 0 seconds, counter is 0 seconds
               action is No action
Resetting watchdog timer ...
reset_wdt: ret = 128
wdt data: 00 00 00 00 00 00 00 00
Watchdog timer is stopped for use with reserved. Logging
               pretimeout is 0 seconds, pre-action is None
               timeout is 0 seconds, counter is 0 seconds
               action is No action

ipmiutil wdt, Invalid Session Handle or Empty Buffer 

我安装了从此链接下载的英特尔 IMB 驱动程序，并尝试了 32 位和 64 位版本的 ipmiutil.exe，但无济于事。有没有人遇到过类似的错误？

更新 1：

我尝试禁用 Windows IPMI 驱动程序 ipmidrv.sys，但它没有帮助。在进一步的测试中，我注意到通过 BIOS 启用 IPMI 看门狗后，它仍然显示“看门狗计时器已停止使用保留。” 当我发出“ipmiutil wdt”时。ipmitutil 似乎无法在看门狗上获得正确的设置。

这里有一些更多信息：

ipmiutil health
ipmiutil health ver 3.13
BMC manufacturer  = 002a7c (SuperMicro), product = 0891
BMC version       = 1.53, IPMI v2.0
BIOS Version      = 1.1a
IPMI driver type  = 1        (imb)
Power State       = 00       (S0: working)
Selftest status   = 0055     (OK)
Chassis Status    = 21 00 40 00 (on, see below)
        chassis_power       = on
        pwr_restore_policy  = last_state
        chassis_intrusion   = inactive
        front_panel_lockout = inactive
        drive_fault         = false
        cooling_fan_fault   = false
Power On Hours    = 18 hours (0 days)
BMC LAN Channels  = 1
ipmiutil health, completed successfully

我已经安装了 Windows 2008 Server Standard R2 并安装了 AD/DNS 服务器。之后，我无法登录我创建的本地用户。

“您无法登录，因为此计算机上不允许您使用的登录方法”

我尝试删除并重新创建用户，但无济于事。在网络上有很多情况下报告了此错误，我一直在尝试所有建议的解决方案，我可以找到并且在过去 3 小时内一直在这样做。

我仍然可以使用域管理员的管理员帐户登录。使用组策略管理（默认域策略 -> 计算机配置 -> 策略 -> Windows 设置 -> 安全设置 -> 本地策略 -> 用户权限分配）。我启用了“允许本地登录”并添加了“域用户”。它不起作用 - 我什至尝试过“每个人”。

这是有关用户的一些信息。

User name                    joshua
Full Name                    joshua
Comment
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              Never

Password last set            3/12/2015 7:24:55 AM
Password expires             Never
Password changeable          3/13/2015 7:24:55 AM
Password required            Yes
User may change password     No

Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   3/12/2015 9:06:45 AM

Logon hours allowed          All

Local Group Memberships
Global Group memberships     *Domain Users
The command completed successfully.

这是 gpresult 输出：

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 3/12/2015 at 8:46:39 AM


RSOP data for mydomain\administrator on WIN2K8SERVER : Logging Mode
------------------------------------------------------------------------

OS Configuration:            Primary Domain Controller
OS Version:                  6.1.7601
Site Name:                   Default-First-Site-Name
Roaming Profile:             N/A
Local Profile:               C:\Users\Administrator
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=WIN2K8SERVER,OU=Domain Controllers,DC=mydomain,DC=local
    Last time Group Policy was applied: 3/12/2015 at 8:43:12 AM
    Group Policy was applied from:      win2k8server.mydomain.local
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        mydomain
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        Default Domain Controllers Policy
        Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups
    -------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        BUILTIN\Pre-Windows 2000 Compatible Access
        BUILTIN\Users
        Windows Authorization Access Group
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        This Organization
        WIN2K8SERVER$
        Domain Controllers
        NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
        Denied RODC Password Replication Group
        System Mandatory Level

    Resultant Set Of Policies for Computer
    ---------------------------------------

        Software Installations
        ----------------------
            N/A

        Startup Scripts
        ---------------
            N/A

        Shutdown Scripts
        ----------------
            N/A

        Account Policies
        ----------------
            GPO: Default Domain Policy
                Policy:            MaxRenewAge
                Computer Setting:  7

            GPO: Default Domain Policy
                Policy:            MaximumPasswordAge
                Computer Setting:  42

            GPO: Default Domain Policy
                Policy:            MinimumPasswordAge
                Computer Setting:  1

            GPO: Default Domain Policy
                Policy:            MaxServiceAge
                Computer Setting:  600

            GPO: Default Domain Policy
                Policy:            LockoutBadCount
                Computer Setting:  N/A

            GPO: Default Domain Policy
                Policy:            MaxClockSkew
                Computer Setting:  5

            GPO: Default Domain Policy
                Policy:            MaxTicketAge
                Computer Setting:  10

            GPO: Default Domain Policy
                Policy:            PasswordHistorySize
                Computer Setting:  24

            GPO: Default Domain Policy
                Policy:            MinimumPasswordLength
                Computer Setting:  7

        Audit Policy
        ------------
            N/A

        User Rights
        -----------
            GPO: Default Domain Controllers Policy
                Policy:            MachineAccountPrivilege
                Computer Setting:  Authenticated Users

            GPO: Default Domain Controllers Policy
                Policy:            ChangeNotifyPrivilege
                Computer Setting:  Everyone
                                   LOCAL SERVICE
                                   NETWORK SERVICE
                                   Administrators
                                   Authenticated Users
                                   Pre-Windows 2000 Compatible Access

            GPO: Default Domain Controllers Policy
                Policy:            IncreaseBasePriorityPrivilege
                Computer Setting:  Administrators

            GPO: Default Domain Controllers Policy
                Policy:            TakeOwnershipPrivilege
                Computer Setting:  Administrators

            GPO: Default Domain Controllers Policy
                Policy:            RestorePrivilege
                Computer Setting:  Administrators
                                   Backup Operators
                                   Server Operators

            GPO: Default Domain Controllers Policy
                Policy:            DebugPrivilege
                Computer Setting:  Administrators

            GPO: Default Domain Controllers Policy
                Policy:            SystemTimePrivilege
                Computer Setting:  LOCAL SERVICE
                                   Administrators
                                   Server Operators

            GPO: Default Domain Controllers Policy
                Policy:            SecurityPrivilege
                Computer Setting:  Administrators

            GPO: Default Domain Controllers Policy
                Policy:            ShutdownPrivilege
                Computer Setting:  Administrators
                                   Backup Operators
                                   Server Operators
                                   Print Operators

            GPO: Default Domain Controllers Policy
                Policy:            AuditPrivilege
                Computer Setting:  LOCAL SERVICE
                                   NETWORK SERVICE

            GPO: Default Domain Controllers Policy
                Policy:            InteractiveLogonRight
                Computer Setting:  Administrators
                                   Backup Operators
                                   Account Operators
                                   Server Operators
                                   Print Operators

            GPO: Default Domain Controllers Policy
                Policy:            CreatePagefilePrivilege
                Computer Setting:  Administrators

            GPO: Default Domain Controllers Policy
                Policy:            BatchLogonRight
                Computer Setting:  Administrators
                                   Backup Operators
                                   Performance Log Users

            GPO: Default Domain Controllers Policy
                Policy:            NetworkLogonRight
                Computer Setting:  Everyone
                                   Administrators
                                   Authenticated Users
                                   ENTERPRISE DOMAIN CONTROLLERS
                                   Pre-Windows 2000 Compatible Access

            GPO: Default Domain Controllers Policy
                Policy:            SystemProfilePrivilege
                Computer Setting:  Administrators
                                   NT SERVICE\WdiServiceHost

            GPO: Default Domain Controllers Policy
                Policy:            RemoteShutdownPrivilege
                Computer Setting:  Administrators
                                   Server Operators

            GPO: Default Domain Controllers Policy
                Policy:            BackupPrivilege
                Computer Setting:  Administrators
                                   Backup Operators
                                   Server Operators

            GPO: Default Domain Controllers Policy
                Policy:            EnableDelegationPrivilege
                Computer Setting:  Administrators

            GPO: Default Domain Controllers Policy
                Policy:            UndockPrivilege
                Computer Setting:  Administrators

            GPO: Default Domain Controllers Policy
                Policy:            SystemEnvironmentPrivilege
                Computer Setting:  Administrators

            GPO: Default Domain Controllers Policy
                Policy:            LoadDriverPrivilege
                Computer Setting:  Administrators
                                   Print Operators

            GPO: Default Domain Controllers Policy
                Policy:            IncreaseQuotaPrivilege
                Computer Setting:  LOCAL SERVICE
                                   NETWORK SERVICE
                                   Administrators

            GPO: Default Domain Controllers Policy
                Policy:            ProfileSingleProcessPrivilege
                Computer Setting:  Administrators

            GPO: Default Domain Controllers Policy
                Policy:            AssignPrimaryTokenPrivilege
                Computer Setting:  LOCAL SERVICE
                                   NETWORK SERVICE

        Security Options
        ----------------
            GPO: Default Domain Policy
                Policy:            PasswordComplexity
                Computer Setting:  Not Enabled

            GPO: Default Domain Policy
                Policy:            ClearTextPassword
                Computer Setting:  Not Enabled

            GPO: Default Domain Policy
                Policy:            ForceLogoffWhenHourExpire
                Computer Setting:  Not Enabled

            GPO: Default Domain Policy
                Policy:            RequireLogonToChangePassword
                Computer Setting:  Not Enabled

            GPO: Default Domain Policy
                Policy:            LSAAnonymousNameLookup
                Computer Setting:  Not Enabled

            GPO: Default Domain Policy
                Policy:            TicketValidateClient
                Computer Setting:  Enabled

            GPO: Default Domain Controllers Policy
                Policy:            @wsecedit.dll,-59013
                ValueName:         MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LDAPServerIntegrity
                Computer Setting:  1

            GPO: Default Domain Controllers Policy
                Policy:            @wsecedit.dll,-59043
                ValueName:         MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature
                Computer Setting:  1

            GPO: Default Domain Controllers Policy
                Policy:            @wsecedit.dll,-59044
                ValueName:         MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature
                Computer Setting:  1

            GPO: Default Domain Policy
                Policy:            @wsecedit.dll,-59058
                ValueName:         MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash
                Computer Setting:  1

            GPO: Default Domain Controllers Policy
                Policy:            @wsecedit.dll,-59018
                ValueName:         MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrSeal
                Computer Setting:  1

        Event Log Settings
        ------------------
            N/A

        Restricted Groups
        -----------------
            N/A

        System Services
        ---------------
            N/A

        Registry Settings
        -----------------
            N/A

        File System Settings
        --------------------
            N/A

        Public Key Policies
        -------------------
            N/A

        Administrative Templates
        ------------------------
            N/A


USER SETTINGS
--------------
    CN=Administrator,CN=Users,DC=mydomain,DC=local
    Last time Group Policy was applied: 3/12/2015 at 8:44:25 AM
    Group Policy was applied from:      win2k8server.mydomain.local
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        mydomain
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        N/A

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Default Domain Policy
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Administrators
        BUILTIN\Users
        BUILTIN\Pre-Windows 2000 Compatible Access
        NT AUTHORITY\INTERACTIVE
        CONSOLE LOGON
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Group Policy Creator Owners
        Domain Admins
        Enterprise Admins
        Schema Admins
        Denied RODC Password Replication Group
        High Mandatory Level

    The user has the following security privileges
    ----------------------------------------------

        Bypass traverse checking
        Manage auditing and security log
        Back up files and directories
        Restore files and directories
        Change the system time
        Shut down the system
        Force shutdown from a remote system
        Take ownership of files or other objects
        Debug programs
        Modify firmware environment values
        Profile system performance
        Profile single process
        Increase scheduling priority
        Load and unload device drivers
        Create a pagefile
        Adjust memory quotas for a process
        Remove computer from docking station
        Perform volume maintenance tasks
        Impersonate a client after authentication
        Create global objects
        Change the time zone
        Create symbolic links
        Enable computer and user accounts to be trusted for delegation
        Increase a process working set
        Add workstations to domain

    Resultant Set Of Policies for User
    -----------------------------------

        Software Installations
        ----------------------
            N/A

        Logon Scripts
        -------------
            N/A

        Logoff Scripts
        --------------
            N/A

        Public Key Policies
        -------------------
            N/A

        Administrative Templates
        ------------------------
            N/A

        Folder Redirection
        ------------------
            N/A

        Internet Explorer Browser User Interface
        ----------------------------------------
            N/A

        Internet Explorer Connection
        ----------------------------
            N/A

        Internet Explorer URLs
        ----------------------
            N/A

        Internet Explorer Security
        --------------------------
            N/A

        Internet Explorer Programs
        --------------------------
            N/A

我目前在租用的 Windows 2003 Server VM 上运行 Windows SMTP Server。有时我的托管公司网络出现故障，我的客户无法通过我提供给他们的 SMTP 服务器主机发送电子邮件，例如 smtp.mycompany.com。

我想提供一个故障转移解决方案，以便如果我的主要 Windows 2003 SMTP 服务器出现故障，所有 SMTP 流量将自动转移到位于另一个数据中心的另一个托管 VM (smtp2.mycompany.com)。这可以使用 Windows 完成吗？我知道有 HA 代理和 Nginx，但必须处理 Linux 超出了我的能力范围——这是显而易见的，否则我不会问这样的新手问题。:) 但是，我愿意租用处理以下服务的服务的可能性故障转移。谢谢。

我需要在我的服务器上重新安装 Windows 7 Embedded，但尽管反复尝试，我还是无法这样做。我尝试使用附加的 Windows Embedded 7 安装 ISO（使用 IPMI）启动服务器，我还尝试在 Windows 启动后运行 CDROM 中的 setup.exe。两种方法都失败了。

在第一种情况下，服务器在我选择“IBW”按钮后自行重启。在第二种情况下，安装程序会返回安装时丢失的一些文件。

我确定我的 Windows Embedded 7 安装 ISO 是正确的，因为早些时候，我在同一个 ISO 上使用 IBW 将 Windows Embedded 7 安装到服务器上。当然，我刚安装的时候C盘是空的。

我应该怎么办？我读到正常的 Windows 7（非嵌入式版本）安装程序允许您在重新安装之前重新格式化 C 盘。Windows embedded 似乎没有这样的选项。

感谢任何提示。谢谢。

我开发了一个监听特定端口的 TCP 服务器应用程序。我的一位用户问我我的应用程序是否可以在主动-主动 Windows 2008 Enterprise 集群上运行。由于几乎没有 Windows 集群方面的经验，我在谷歌上搜索并知道故障转移适用于 Microsoft 应用程序，例如 IIS 和 SQL Server，但我想知道是否同样适用于自定义 TCP 应用程序。

首先，我知道客户端将连接到虚拟 IP 地址而不是节点的物理 IP 地址，如果特定节点关闭，Windows 集群将自动将任何连接请求重定向到另一个节点。

但是如果只有我的 TCP 服务器应用程序挂起并停止响应（但 Windows 仍在运行），故障转移是否仍然有效？如果出现严重的应用程序故障，我可能还会有意拒绝客户端连接。

我将不胜感激任何指示，谢谢。

我有一个第三方现成的 Windows 应用程序需要连接到安装在另一台服务器上的 Web 服务（IP 地址或 URL）（实际上在 Windows 7 Professional 上运行）。

我的用户希望我实施故障转移解决方案，如果主 Web 服务器无法响应，第 3 方应用程序将自动连接到备用服务器。

有没有办法在不实施集群（硬件或 Windows NLB）的情况下实现这一点？

更新：请注意——我不希望在服务器端实现负载平衡器。

我有一个封闭的代码应用程序，需要连接到需要在 XP 或 Windows 7（桌面）上运行的 Web 服务。应用程序只能连接到一个 IP 地址。该应用程序的容量很小——每天少于 1000 个 HTTP GET。

系统流程为：客户端应用-->HTTP-->Web服务

我能做什么： 1. 在客户端机器上安装软件。2. 在Web 服务机器上安装软件。3.安装网络小工具。

为了提供某种形式的高可用性，我希望将负载分布在 2 台物理机上，以防其中 1 台发生故障。

我知道有软件/硬件负载均衡器和开源 Linux 解决方案，但整个解决方案的硬件预算只有 3000 美元，因此硬件负载均衡器的成本不得超过 1500 美元（为 2 台 PC 留下 1.5 美元）， Windows 服务器 (NLB) 和虚拟机可能已经过时了。我们不能使用 Linux，因为也没有用于 Linux 专业知识的预算。也有 DNS 解决方案，但我不喜欢使用它们，因为它们很复杂而且我怀疑不太可靠。

最近，我还探索了构建包过滤应用程序的可能性，例如 WinpkFilter ( http://www.ntkernel.com/w&p.php?id=7 ) 从客户端计算机捕获 IP 数据包并自动分发2台服务器。这可能是最后的手段，因为我不想重新发明轮子。

一段时间以来，我一直在寻找解决方案，但市场上似乎没有任何解决方案。将不胜感激任何指针。谢谢你。:)

更新：

Linux NLB 已过时，但除了 Windows NLB 之外，我还可以使用基于 Windows 的解决方案。