Basic Windows/Server VM for dev/sandbox purposes

Can someone please tell me the cheapest yet reliable way get my own development/sandbox windows server?

It doesn't need to be crazy powerful or have 100% uptime but good enough to setup an instance of Microsoft Identity Manager (which would require AD, IIS and Sharepoint). 2019 preferably but 2016 would be fine.

Its hard to get a straight up answer on this especially from Windows Azure online chat - wish you could blame on the fact that you are talking to a robot but nope. 20 min convo and nothing...

thanks!

Reply:

Very easy to set up on a well configured laptop. You would get a laptop with Windows 10 Pro which allows for the installation of Hyper-V. Then you could create multiple VMs using Microsoft's evaluation media for the server operaating systems. I don't know if there is an evaluation copy of SharePoint (could ask in the SharePoint forum), s you might have either purchase a copy or obtain a Visual Studio or MSDN subscription. Your laptop should have enough memory to configure each of the VMs to at least 4 GB of memory if you want some reasonable performance. You should be able to get by with 2 GB of memory for AD.

tim

------------------------------------

Deleted

Reply:

Please stop posting random scripts. This is not a script sharing forum. If you do not have a question then post your scripts in a scripts sharing forum.

Most of the scripts you are posting are wrong and do not work as you claim.

\_(ツ)_/

------------------------------------

Deleted

Reply:

You posted this as a discussion instead of a question. I suppose that is appropriate, because I don't see any question in the post. If you do have questions, you should contact Ansible, as they are responsible for their product and how it interacts on Windows Server.

Since it does not appear to be a question, and since it does not appear to be trying to stimulate a discussion about anything related to Windows Server, I am questioning why you made this post.

tim

------------------------------------

how to pass SSIS parameter to fetch the every month end date?

Hi All,

right now i am using for loop container to load everyday data , below is the parameter i am using.

@[User::SelectDate4]<=dateadd("DAY",-1,getdate())

now ,actually my requirement got changed and we want run this every month last date , it has to loop every month last date for the particular year.

can you please advise me to do this.

Thanks ,

Reply:

See:

https://docs.microsoft.com/en-us/sql/t-sql/functions/eomonth-transact-sql?view=sql-server-ver15

@[User::SelectDate4]<=EOMONTH(getdate())

------------------------------------
Reply:

Hi ,

does this function available in SSIS??

------------------------------------
Reply:

If you want to get the last day of the current month, you add 1 month and deduct the current day number. Optional you can remove the time part:

DATEADD("d", -DAY(GETDATE()), DATEADD("m", 1, GETDATE()))
(DT_DBTIMESTAMP)(DT_DBDATE)DATEADD("d", -DAY(GETDATE()), DATEADD("m", 1, GETDATE()))

Best Regards,Uri Dimant SQL Server MVP, http://sqlblog.com/blogs/uri_dimant/

MS SQL optimization: MS SQL Development and Optimization
MS SQL Consulting: Large scale of database and data cleansing
Remote DBA Services: Improves MS SQL Database Performance
SQL Server Integration Services: Business Intelligence

------------------------------------
Reply:

thanks for your reply ,

i need to load data from 2007 to till date , suppose if we put the above formula in for loop , it will go year by year or it will work only for one year data.

can you please help me here.

Best regards,

------------------------------------

Booting a virtual machine using a wim file generated in workbench

I am trying to boot a virtual machine using a windows 10 wim file that I enhanced using Microsoft Deployment tool's Workbench. I created the task sequence and updated the image but when I boot the virtual machine and put in my domain credentials and the box comes up tell my to pick a task sequence, there is nothing there to pick. The task sequence just doesn't seem to come along with the image into the virtual machine.

Everything is on the same machine, Workbench, the image too but the task sequence doesn't make it through.

I'm sure I'm missing something, but what?

Eager to learn what I missed.

Thank you

How to find using Powershell command or script to find AD Users disabled in last 3 months on Windows Server 2008/2012?

Reply:

Hello

Check here https://gallery.technet.microsoft.com/scriptcenter

Most likely someone already created an script like that

Best regards

Joaquin Camarero Muñoz

------------------------------------

SearchOCR.ADMX error after installing Win10-1803 ADMX templates

I've already submitted this to MSFT via Feedback and resolved my issue for now, so this is basically informational for anybody coming across the same thing and searching for a resolution.

After installing the Win10-1803 GPO Templates, I'm presented with the below error:

Resource '$(string.Win7Only)' referenced in attribute displayName could not be found. File \\SysVol\...\Policies\PolicyDefinitions\SearchOCR.admx, line 12, column 69

I searched the folder on my PC where the files were installed. There's no SearchOCR.admx file in the new download, but there is an ADML file. After reinstalling the old and new ADML files, I found that the old file has a line for Win7Only, where the new one doesn't.

After reverting to the Win10-1511 SearchOCR template files, it's working normally again.

Reply:

I am having this issue as well. I still have the SearchOCR.admx from 11/14/2015 in my PolicyDefinitions folder. The .adml file in en-us was updated in 5/3/2018 version though. I reverted to 1511 and error fixed for now. Thanks.

Brian Hoyt

------------------------------------
Reply:

In German Version too:

Die in der Eigenschaft "$(string.Win7Only)" aufgeführte Ressource displayName konnte nicht gefunden werden. Datei \\........\SearchOCR.admx, Zeile 12, Spalte 69

I removed "SearchOCR.admx" from \PolicyDefinitions for now

Edited by tidoo Tuesday, May 8, 2018 7:25 AM

------------------------------------
Reply:

I have this too. Previous 1709 has no such file name as SearchOCR.admx.

MCSE Mobility 2018. Expert on SCCM, Windows 10 and MBAM.

Edited by Pavel yannara Mirochnitchenko Tuesday, May 8, 2018 10:05 AM

------------------------------------
Reply:

Experiencing the same issue here too. As OP mentioned, reverting to 1511 version of SearchOCR files gets rid of the error.

------------------------------------
Reply:

Same here,

reverted to previous version of the template.

------------------------------------
Reply:

I manually edited the "...\en-US\searchocr.amdl" file and added the value from the previous version. Search for these lines about line 25 (if you are not wrapping lines):

 <string id="OCR">OCR</string>   <string id="OCREveryPage">Force TIFF IFilter to perform OCR for every page in a TIFF document</string>

then add the line given below between them:

 <string id="OCR">OCR</string>   <string id="Win7Only">Microsoft Windows 7 or later</string>   <string id="OCREveryPage">Force TIFF IFilter to perform OCR for every page in a TIFF document</string>

...and no more errors! I am no expert so I don't know if this could cause any issue , but I don't think so as it is just to localize the variables into the language of choice.

Find this post helpful? Does this post answer your question? Be sure to mark it appropriately to help others find answers to their searches.

------------------------------------
Reply:

I manually edited the "...\en-US\searchocr.amdl" file and added the value from the previous version. Search for these lines about line 25 (if you are not wrapping lines):
 <string id="OCR">OCR</string>   <string id="OCREveryPage">Force TIFF IFilter to perform OCR for every page in a TIFF document</string>
then add the line given below between them:
 <string id="OCR">OCR</string>   <string id="Win7Only">Microsoft Windows 7 or later</string>   <string id="OCREveryPage">Force TIFF IFilter to perform OCR for every page in a TIFF document</string>
...and no more errors! I am no expert so I don't know if this could cause any issue , but I don't think so as it is just to localize the variables into the language of choice.

Find this post helpful? Does this post answer your question? Be sure to mark it appropriately to help others find answers to their searches.

Good find.

Fixed the issue for me as well. :)

------------------------------------
Reply:

Good one, it fixed my issue. In addition, I'm getting <g class="gr_ gr_190 gr-alert gr_gramm gr_inline_cards gr_run_anim Grammar only-ins replaceWithoutSep" data-gr-id="190" id="190" style="background-animation:gr__appear_critical 0.4s forwards;color:#000000;text-transform:none;text-indent:0px;letter-spacing:normal;font-family:Verdana, Geneva, sans-serif;font-size:12px;font-style:normal;font-weight:400;word-spacing:0px;border-bottom-color:transparent;border-bottom-width:2px;border-bottom-style:solid;display:inline;white-space:normal;orphans:2;widows:2;background-image:url("data;base64,phn2zyb4bwxucz0nahr0cdovl3d3dy53my5vcmcvmjawmc9zdmcnihdpzhropscxmdaljybozwlnahq9jzewmcunpgogidxsaw5lig9wywnpdhk9jzaunzunihgxpsc0jyb5mt0nmtawjscgedi9jzewmcunihkypscxmdaljyb0cmfuc2zvcm09j3ryyw5zbgf0zsgtms41lcatmi41kscgc3ryb2tllxdpzhropsczjybzdhjva2utbgluzwnhcd0ncm91bmqnihn0cm9rzt0ni2zjntq1nccvpgo8l3n2zz4k"):;background-repeat:no-repeat;background-size:calc(100% + 1px) 100%;background-color:#ffffff;font-variant-ligatures:normal;font-variant-caps:normal;-webkit-text-stroke-width:0px;text-decoration-style:initial;text-decoration-color:initial;">couple</g> of other errors too, still trying to figure it out, any help much appreciated

1. Policy element 'AutoUpdateSchEveryWeek', referenced in presentation 'AutoUpdateCfg' could not be Found

2. Policy element 'Lbl_GhostPreference_Enum', referenced in presentation 'Pol_EnableWorkFolder' could not be found

------------------------------------
Reply:

Thanks!

------------------------------------
Reply:

Glad it is helping you guys. Please don't forget to mark helpful and/or as answer if applicable. ;-)

@Karths16, sorry I don't have any idea how to help with that one. May need to start another thread to get attention.

Find this post helpful? Does this post answer your question? Be sure to mark it appropriately to help others find answers to their searches.

------------------------------------
Reply:

Good find.

Thanks!

------------------------------------
Reply:

Fixed for me also! Thanks!

------------------------------------
Reply:

I thought my Win10 RS4 would have the file, but neither SearchOCR.admx nor SearchOCR.adml is there for some reason.

However, Win10 RS5 (17666) does have them. So I looked at the hash for RS5's SearchOCR.adml and compared it to the same file provided in the template download. They're the same. Therefore, RS5's SearchOCR.admx should be its match, and it's working for me in testing on a Server 2016 domain.

For anyone who wants it, or just wants to look in it, here it is.

------------------------------------
Reply:

Delete all the PolicyDefinitions folder and add the new templates from version 1803, no bug has been detected this way, which is the correct way to upgrade the GPO.

------------------------------------
Reply:

Delete all the PolicyDefinitions folder and add the new templates from version 1803, no bug has been detected this way, which is the correct way to upgrade the GPO.

I disagree. How about office templates? Or any other....

MCSE Mobility 2018. Expert on SCCM, Windows 10 and MBAM.

------------------------------------
Reply:

> I disagree. How about office templates? Or any other....

Organize your templates in "source folders". One for each template source you have (Operating System, Office, possibly Adobe or Firefox...). Then update the source folders, delete existing templates in PolicyDefinitions and re-populate from your source folders.

------------------------------------
Reply:

The SearchOCR.admx are not packed in the new PolicyDefinitions and so i deleted this file and the SearchOCR.adml.
If Microsoft doesen't published it, i think it's not longer needed.
For me that works.

------------------------------------
Reply:

So i have done a little digging on this... the SearchOCR.ADMX file is only installed in the PolicyDefinitions folder if you have the "Windows TIFF Ifilter" option installed. If you have ever dont this on an old version of windows and then copied it accross to the Policy Definitions folder then this will be an old version of the file as it wont be updated using the ADMX/ADML bundel that Microsoft publishes.

While editing the ADML file will fix the problem, you are only fixing it for one language. My recommended fixes is to either 1. Delete the SearchOCR.ADMX file if you dont use any of the policy settings or 2. Install Windows TIFF Ifilter on a computer running Windows build 1603 (server or workstation) and copy that SerchOCR.ADMX file into the central store.

Hope it helps...

Alan Burchill (MVP)
http://www.grouppolicy.biz

@alanburchill

------------------------------------
Reply:

https://www.grouppolicy.biz/2018/05/how-to-fix-searchocs-admx-error-after-upgrade-to-windows-1803-admx-files/

MCSE Mobility 2018. Expert on SCCM, Windows 10 and MBAM.

------------------------------------
Reply:

Made into a KB article now, too.

------------------------------------
Reply:

Hello,

I was facing exactly the same issue. Your solution fixed the issue for me as well! Thanks!

Adamo

------------------------------------
Reply:

Adding that line of code to the SearchOCR.adml file worked perfect.

Thank you!

------------------------------------
Reply:

Worked for me as well. Thanks a lot!

bernd

------------------------------------
Reply:

Worked for me too.

Thanks for posting the workaround

------------------------------------
Reply:

No longer an issue as of v1809 admx.

------------------------------------
Reply:

No longer an issue as of v1809 admx.

Agree, I took the second version published in December.

MCSE Mobility 2018. Expert on SCCM, Windows 10 and MBAM.

------------------------------------
Reply:

Seems the issue is back with the 1903 templates. I did the above workaround by restoring the older versions since it is unlikely to be used.

------------------------------------
Reply:

I manually edited the "...\en-US\searchocr.amdl" file and added the value from the previous version. Search for these lines about line 25 (if you are not wrapping lines):
 <string id="OCR">OCR</string>   <string id="OCREveryPage">Force TIFF IFilter to perform OCR for every page in a TIFF document</string>
then add the line given below between them:
 <string id="OCR">OCR</string>   <string id="Win7Only">Microsoft Windows 7 or later</string>   <string id="OCREveryPage">Force TIFF IFilter to perform OCR for every page in a TIFF document</string>
...and no more errors! I am no expert so I don't know if this could cause any issue , but I don't think so as it is just to localize the variables into the language of choice.

Find this post helpful? Does this post answer your question? Be sure to mark it appropriately to help others find answers to their searches.

like a rebel bull in a china shop i just copied over existing installation and applied you fix and voilla - had worked

------------------------------------
Reply:

me too

thanks

------------------------------------
Reply:

This is still an issue with the administrative temples for Windows10 v1909.

I'm just recieving more errors when editing the SearchOCR.adml file. Therefore followed Alan Burchills advise to delete all SearchOCR.adml and SerachOCR.admx files. Our GPOs are finally displayed again. Thank you so much!

Edited by Tristan Fuchs Wednesday, January 15, 2020 2:43 PM

------------------------------------
Reply:

I manually edited the "...\en-US\searchocr.amdl" file and added the value from the previous version. Search for these lines about line 25 (if you are not wrapping lines):
 <string id="OCR">OCR</string>   <string id="OCREveryPage">Force TIFF IFilter to perform OCR for every page in a TIFF document</string>
then add the line given below between them:
 <string id="OCR">OCR</string>   <string id="Win7Only">Microsoft Windows 7 or later</string>   <string id="OCREveryPage">Force TIFF IFilter to perform OCR for every page in a TIFF document</string>
...and no more errors! I am no expert so I don't know if this could cause any issue , but I don't think so as it is just to localize the variables into the language of choice.

Find this post helpful? Does this post answer your question? Be sure to mark it appropriately to help others find answers to their searches.

Two years later and I have the same issue with the 1909 policies. Still a good fix though, thanks!

------------------------------------
Reply:

Still a problem on 2004 and the workaround is still applicable. Thanks!

VR// Brian Mc

------------------------------------

RD Web - How to change icon for already published RemoteApp

Is it possible to change icon for already published RemoteApp? I didn't find any simple solution, e.g. a button in RemoteApp Properties Dialog Box.

Reply:

Does anybode have a Change Icon button in RemoteApp Properties Dialog Box? It seems that such a button exists in Windows Server 2008 R2 - at least few posts in this forum mentions it.

But how I can manage it in Windows Server 2012?

------------------------------------
Reply:

Hi,

I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
Thank you for your understanding and support.

Regards,

Clarence

TechNet Subscriber Support

If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.

Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

------------------------------------
Reply:

Hello Clarence,

I tried to find any relevant info regarding a change of RemoteApp icon published via RD Web in Windows Server 2012, but found nothing.

You gave me at least some hope that I will find a solution, so looking forward to seeing some hints here.

Kasparek

------------------------------------
Reply:

Hi,

Based on my internal test, I am afraid that it seems we couldn't directly change the RemoteApp icon in RDWeb, but there is a workaround as below:

---On one Windwos 7 or Windows 8 client, open Control Panel and open RemoteApp and Desktop Connections.

---Type the right URL, such as https://RDWeb FQDN name/rdweb/feed/webfeed.aspx.

---When the connection finishes, the published RemoteApp icon will locate at c:\users%username%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RemoteApp and Desktop Connections\Work Resources\

---Right click the specific RemoteApp you want change icon and click Properties.

---Under Shortcut table, please click Change Icon and select the icon you want.

Regards,

------------------------------------
Reply:

Hello,

I tried the workaround, but if I am not mistaken, it changes an icon just on Windows 7 (8) client, on which I setup RemoteApp via RD Web feed.

But I would need to change an icon on RD Web page, i.e. an icon that is seen by all users when they log on to RD Web via a web browser.

Regards,

Kasparek

------------------------------------
Reply:

Hi,

Based on my test, I think below steps can achieve your goal:

---Please prepare a .ico file you want, such as a (bing.ico file). You can search *.ico on the C drive and find the icon file you want.

---I suspect you have published a Wordpad on the Windows Server 2012 Connection Broker server, then locate to C:\Windows\RemotePackages\CPubFarms\RemoteApp_applic\CPubRemoteApps.

---Under this folder, we can see that the published WordPad ico file(such as wordpad.ico), then copy the specific ico(bing.ico) file you want to this folder, and rename the bing.ico file to Wordpad.ico.

---Restart the Windows Server 2012 Connection Broker server and try to reproduce the issue, this should works.

Regards,

------------------------------------
Reply:

Replacing a corresponding icon in C:\Windows\RemotePackages\CPubFarms\RemoteApp_applic\CPubRemoteApps changes an icon for RemoteApp on RD Web Work Resources page. Great, it solved my situation, thanks for your help.

I have got one more problem connected to RD Web Work Resources page. In the past I did a few configuration changes in RD Web Server and RemoteApps (renamed a server, removed all published RemoteApps from QuickSessionCollection, then I re-added Remote Desktop Services - option Quick Start - role) and as a result I have a redundant Remote Desktop RemoteApp on my RD Web Work Resources page. This Remote Desktop RemoteApp is not present on QuickSessionCollection list and in addition it opens Remote Desktop to a server with a wrong hostname - i. e. to a hostname before I renamed the server. I would call this RemoteApp as a 'left-over'.

Wouldn't you know, how to remove it?

------------------------------------
Reply:

Hi, Have you restarted the Connection Broker server to have a try? Besides, do you mean there is only one server which has installed RDS/RDWeb/RD Connection Broker roles? Regards,

------------------------------------
Reply:

The Connection Broker server was restarted several times, but it didn't resulted in redundant RemoteApp disappearing. Yes, all Remote Desktop services reside on one server/host.

------------------------------------
Reply:

Hi,

In Windows Server 2012, there is a new feature for the RDWeb, that is we can enable RDWeb logging which is very helpful for troubleshooting problems with RD Web page.

To enable RD Web logging, do the following:
1. Logon to the RD Web server as an administrator and open an administrative Windows Powershell prompt or command prompt.
2. Change to the %SYSTEMROOT%\Web\RDweb folder.
3. Open the web.config file and find the section labeled <system.diagnostics>.
4. Modify the TraceTSWA value to 4:
<add name="TraceTSWA" value="4" />
5. Comments are denoted by  characters. To remove the comments and enable RD Web logging, modify the following line to remove the comments:
                
For example:
      <add name="FileLog"
       type="Microsoft.VisualBasic.Logging.FileLogTraceListener,
       Microsoft.VisualBasic, Version=8.0.0.0,
       Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a,
       processorArchitecture=MSIL"
       initializeData="FileLogWriter" BaseFileName="RDWeb"
       Location="Custom"
   LogFileCreationSchedule="Daily"
   MaxFileSize="50000000"
       CustomLocation="\Windows\Web\RDWeb\App_Data" />
6. Reload the web page and reproduce the problem.
7. The log file will be created in the %SYSTEMROOT%\Web\RDWeb\App_Data folder and will contain the time and date stamp of when the log file was written.
8. Please share these logs to us.

Regards,

------------------------------------
Reply:

I enabled the logging, but didn't find any useful info in a log file, just that 'Remote Desktop' application (and others) was added.

My RD Web Work Resources page incorporates the following RemoteApps:

But RemoteApps Programs in Server Manager doesn't incorporate 'Remote Desktop' application (Windows Explorer is under My Programs folder):

In addition, when I launch 'Remote Desktop' application it opens Remote Desktop to non-existing host - RD Web server was renamed.

'Remote Desktop Connection' application (vs 'Remote Desktop' application) was added among published applications manually by me and works fine.

Where does 'Remote Desktop' application come from? How I can remove it from Work Resources page. It is quite confusing for users, particularly when it tries to open RD session to non-existing host.

------------------------------------
Reply:

Hi,

OK, now I understand your main concern is the redundant 'Remote Desktop' icon. Since there is not any suspected log in RDWeb logging, let's try to enable the RDMS UI Tracing on the RD Connection Broker Server.

When troubleshooting any problem with Remote Desktop Services installation or Collection Creation, or RD Connection Broker issues, the RDMS UI Logs should be enabled. RDMS UI logs must be enabled by using Event Viewer and adding a SYSTEM environment variable to the Connection Broker (RDMS) server.

To enable RDMS UI log and Event Logs, do the following:

a. Open an administrative CMD prompt and create a system environment variable named RDMSUI_TRACING and set the value to 1

b. Launch Server Manager from the same CMD window by entering servermanager and then pressing Enter.

c. Open Event Viewer, click View in the Menu Bar, and then click Show Analytic and Debug Logs.

d. In Event Viewer, navigate to the following path: Applications and Services Logs\Microsoft\Windows\RDMS-UI\Debug. Right click on Debug log and select Enable Log.

e. Reproduce the issue and check whether there are any related event logs.

Regards,

------------------------------------
Reply:

So I switched on Debug Log for RDMS, but the only error I was able to find is:

Component RdmsUI: Error in script execution on rdweb.domainname.tld :

Component RdmsUI: Failed to fetch local DB connection string from server: rdweb.domainname.tld : System.Management.Automation.RemoteException: Property DBConnString does not exist at path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tssdis\Parameters.
at Microsoft.RemoteDesktopServices.Common.DeploymentModel.ExecutePowerShellScript(String serverName, String script, Object argumentList, Boolean isLocalhost)
at Microsoft.RemoteDesktopServices.Common.DeploymentModel.IsHighAvailabilityConfigured(String managementServer)

I do not have any idea if this is connected to my problem, because it appears in the log in times when I didn't log to RD Web. In addition, it doesn't give me any clue what I should do to narrow my situation.

Doesn't anybody have an advice of type - open a file/a registry key, check/delete a value?

------------------------------------
Reply:

Hi,

It seems the RDMS error log didn't related with the duplicate "Remote Desktop" icon.

From the previous screenshot, I noticed that the Windows Explorer RemoteApp didn't show in RDWeb, please try to hide all the RemoteApp and check whether the duplicate Remote Desktop icon still persists.

Regards,

------------------------------------
Reply:

I also have this exact same issue.

Old Published ICONS showing up and I cant get rid of them

------------------------------------
Reply:

The only thing i've found so far is a workaround (bodge) Script the launch using vbscript and use VBsedit to create an executable with your favourite icon embedded....

Regards

Glenn Rose-Ward

------------------------------------
Reply:

Get-RDRemoteApp -Alias "[The alias of your app]" | Set-RDRemoteApp -IconPath "[C:\your_icon_file.ico]" -CollectionName "QuickSessionCollection"

Example:

Get-RDRemoteApp -Alias "iexplore" | Set-RDRemoteApp -IconPath "C:\icon_file.ico" -CollectionName "QuickSessionCollection"

Works like a charm

------------------------------------
Reply:

Thank you. Such great example and worked for me :)

------------------------------------

[Known Issue] LSASS crashes with status code c0000008 causing device reboot following user logon on Win10

Symptom:
LSASS crashes with status code c0000008 immediately following user logon after installing the following Window Updates released on May 12, 2020 on Windows 10 Windows Server 2019, version 1809, 1903, 1906 and 2004 computers.

Updates known to cause this issue include:
May 12, 2020—KB4551853 (OS Build 17763.1217):
https://support.microsoft.com/en-us/help/4551853

May 12, 2020—KB4556799 (OS Builds 18362.836 and 18363.836):
https://support.microsoft.com/en-us/help/4556799

May 12, 2020-KB4552930 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1809 and Windows Server 2019:
https://support.microsoft.com/en-us/help/4552930/kb4552930-cumulative-update-for-net-framework

Workaround:
1. Microsoft is working on a resolution and will provide an update in an upcoming release.

2. Disabling Fast Startup via GPO -> disable Require use of fast startup:
Computer Configuration\Policies\Administrative Templates\System\Shutdown

Note: it is a tryable method, but it is not guaranteed to work on all systems.

Update:
This issue has been fixed by July's Update. Detail information as below:
1. Windows 10 version 2004 -> July 14, 2020—KB4565503 (OS Build 19041.388):
https://support.microsoft.com/en-us/help/4565503/windows-10-update-kb4565503

2. Windows 10 version 1903&1909 -> July 14, 2020—KB4565483 (OS Builds 18362.959 and 18363.959):
https://support.microsoft.com/en-us/help/4565483

3. Windows 10 version 1809 & Windows Server 2019 -> July 14, 2020—KB4558998 (OS Build 17763.1339):
https://support.microsoft.com/en-us/help/4558998

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

Changed type Carl FanMicrosoft contingent staff Monday, June 29, 2020 9:39 AM
Edited by Eve WangMicrosoft contingent staff Friday, July 17, 2020 9:23 AM

20007 - SSL Version 2 and 3 Protocol Detection vulnerability issue

we have disabled SSL2 & SSL3 and TLS 1.0 also in my server but still showing 20007 - SSL Version 2 and 3 Protocol Detection vulnerability issue.

can you help me anyone ?

Server SSL existing setting screenshot for your reference

Reply:

Audit result for your reference still showing SSL issue

------------------------------------

Define - 654625

Friday, 14 January 2022