How long to quick format a lun in Windows

 I always get that question for the SQL or file cluster RDM disks.  Windows admin and DBA thought the format hung but it indeed took long time to quick format a lun.  Last week, Windows admin complaint it took approx an hour to quick format a 7TB lun in EMC PMAX for a Windows 2016 / 2019 VM.  

I just completed a test this morning.  For a physical Windows 2016 server, it took about 10-15 min approx to quick format a Windows 1 TB lun in PMAX.  Do some research in the internet.  The result provided by partitionwizard.com suggests it indeed takes long time to format a big lun (see below also).  

• How Long Does It Take to Format a 1TB Hard Drive: Performing a Quick Format on a 1TB hard drive takes about 20 minutes. If you select the Full Format, it could take you up to 1 hour.
• How Long Does It Take to Format a 2TB Hard Drive: Again, we perform a Quick Format on a 2TB hard drive, it can be done in about 30 minutes. However, a Full Format can take up to 3 hours. If this hard drive stores a chunk of data, it could take you a half day.
• How Long Does It Take to Format a 4TB Hard Drive: To a certain degree, 4TB is a large hard disk that will take quite a long time to format. So, you’d better select a Quick Format if you want to save time. This is because fully formatting a 4TB hard drive can take you a whole day and even more

This give you an idea even quick format in Windows will still take some time.  

Our Wintel team will test the format time following EMC article 000062689 on the PMAX.

The cause is "trim and unmap" feature is on.  So, just temp turn it off before formatting new lun and enable it back once done.  

On the windows host, disable the SCSI TRIM and Unmap feature for the duration of the format. Use fsutil command from the command line

1) To verify the current setting, using a Windows CMD window on the Host, run:   

fsutil behavior query DisableDeleteNotify

DisableDeleteNotify=0 -indicates the 'Trim and Unmap' feature is on (enabled)

DisableDeleteNotify=1 -indicates the 'Trim and Unmap' feature is off (disabled)

2) To disable, issue the command:   

fsutil behavior set DisableDeleteNotify 1

3) Once formatting is complete, re-enable the feature using command:   

fsutil behavior set DisableDeleteNotify 0

It may impact Linux as well.  See thread mkfs is extremely slow. 

To run mkfs without trim, use the -K option on XFS and -E nodiscard on ext4

XFS

mkfs.xfs -K /dev/sdx 

EXT4

mkfs.ext4 -E nodiscard 

Warning: Only use -K or -E on new volumes with no existing data.

Using the -K or -E options on drives with existing data, will cause the space to be wasted until the data is overwritten.

  

CertUtil to verify MD5 and SHA256 checksum

When we download files from vendor, we use 3rd party tool to verify the checksum. With Windows 10, you can use CertUtil. 

1) Open Command Prompt in Windows Desktop 

2) Then, enter command CertUtil -hashfile "path to the file" hash-function-type 

Below show the example of MD5 and SHA256. No need to download 3rd party tool to verify the checksum.

Need to run flash program in 2021

Flash is no longer supported in 2021.  However, if you don't want to upgrade yet, here is the workaround.  

On the client machine running flash, create a mms.cfg with notepad with content below. 

EOLUninstallDisable=1

AutoUpdateDisable=1

EnableAllowList=1

AllowListURLPattern=https://10.224.0.20:8443/

AllowListURLPattern=https://10.218.0.23/

where you enter the website that you want to allow flash to run after "AllowListURLPattern=".  If you have multiple sites to use flash, you can add entry.  

If you use IE and Firefox, copy mms.cfg to the folder below.  

mms.cfg added to path below for Windows Flash

   (Windows 32bit) C:\Windows\System32\Macromed\Flash 

   (Windows 64bit) C:\Windows\SysWOW64\Macromed\Flash 

 

I don't use Chrome and Edge.  However, you can try to move mms.cfg to the location below.  

For Chrome

%localappdata%\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\System\mms.cfg

For Edge

%localappdata%\Microsoft\Edge\User Data\Default\Pepper Data\Shockwave Flash\System\mms.cfg

Besides, make sure you don't have apply Microsoft patch KB4577586.  Once it is applied, it will uninstall Flash and prevent Flash from installed again.  

Update for the removal of Adobe Flash Player: October 27, 2020 (microsoft.com)

Below are the instructions to install and uninstall flash in Windows server 2016.

Uninstall Flash in Windows 2016

DISM /Online /Remove-Package /PackagePath:"C:\Windows\servicing\Packages\Adobe-Flash-For-Windows-Package~31bf3856ad364e35~amd64~~10.0.14393.0.mum"

Install Flash in Windows 2016

dism /online /add-package /packagepath:"C:\Windows\servicing\Packages\Adobe-Flash-For-Windows-Package~31bf3856ad364e35~amd64~~10.0.14393.0.mum"

====================================================================

Finally, got approval to upgrade AppSync to 4.1, and it was upgraded successfully.  I don't need to worry about Flash any more.  

Install IE and flash in Windows server 2016

Find the link below on how to reinstall IE in Windows 2012 server.

https://www.codeproject.com/Articles/1158545/Re-install-Internet-Explorer-in-Windows-Server-R

To install only IE in Windows Server 2016, just run the command below and reboot.  

dism /online /enable-feature:"Internet-Explorer-Optional-amd64"

If you need to enable flash for IE, you can run the command below.  

dism /online /add-package /packagepath:"C:\Windows\servicing\Packages\Adobe-Flash-For-Windows-Package~31bf3856ad364e35~amd64~~10.0.14393.0.mum"

Moving quorum to another node for Windows 2008 and 2012

Work on a SAN migration and need to move the quorum to the other node.  For Windows 2008, I find the post Windows Cluster: Moving Quorum Disk to Another Node 

To move it other node we have run below command.

cluster group "Cluster Group" /move 

In you have more nodes in your cluster and to move the 'cluster group' to a specific group use the below command.

cluster group "Cluster Group" /moveto:node5

For Windows 2012, actually, for some reason, the above command does not work.  Instead, I open to Failover Cluster Manager.  Right click on the initial cluster that was created when creating the cluster.  Select More Actions, Move core Cluster Resources and Select Node.  Now, you can failover the quorum to the other node.  

Error Codes list for Microsoft technologies

When we troubleshoot backup issue, especially system state backup, backup program normally return a Microsoft error code.  For example, in NetWorker, you may get an error like

"ASR System Files - AsrCreateStateFile failed - 0x80080005"

(By the way, if you get this error for system state backup, most likely a reboot will fix it)

To find out what it means, there is a Symantec kb "Error Codes list for Microsoft technologies" listing the MS error codes.

Over the weekend, I got an alert about System State backup on Windows 2000. Error is 0x00000070.  It complains there is not enough space.  Confirm by rdp to the box and only 3 MB available on the system drive.  An old Windows 2000 box waiting to be retired.

Expanding boot partition of Windows 2008 server

Originally, I have two partition on only one disk.  Finally, I get my new disk.  So, I use Ghost to copy the second partition D drive to the new disk.  To free up space, I remove the old partition D drive on the 1st disk in Disk Management.  Then right click on C drive and choose Extend Volume.  Follow the wizard and now C drive is expanded to occupy all the space on the first disk without reboot.

There is a Shrink Volume option.  Not sure how reliable it is though.

No option to format USB memory stick as NTFS

I just reformat my memory stick for Data Domain memory upgrade.  Now, I need to re-format it back as NTFS.  When I try to do that, NTFS is not an option under filesystem.  After searching in Google, I find the solution in http://www.ntfs.com/quest22.htm.

Basically, you need to open Device Manager and locate the USB memory stick.  Open up the properties of memory stick and select "Optimize for performance" under policies.  Now, I can format my memory stick with NTFS partition. 

Turn off TCP chimney in Windows 2008

TCP chimney has caused more problem in Windows 2008.  ifgroup and failover do not work on Datadomain.  Windows 2008 client loses connectivity intermittently with backup server.  Once turned off TCP chimney, failover works fine on the media server.   There are new patches available from Microsoft for TCP chimney.  I have not tired it yet but don't plan to enable TCP chimney in the near feature since it causes more headache for me.

To turn off TCP chimney, run the following command
netsh int tcp set global chimney=disabled

To confirm it is turned off, run the following command
netsh int tcp show global

Random bluescreen on Windows server

Some of the bluescreen are very tough to troubleshoot. It may point to different driver. After ruling out hardware issue, you can't tell which one cause it. If you rule out poorly written driver / programs, check the kernel stack usage. On Windows x86, there is only 12K kernel stack space. I believe it is 8K for old version of Linux and 24K for x64 Windows. Some admin wonder if increasing the memory can fix it. The answer is no. Kernel stack space has nothing to do with the RAM size. Check winmsd and see which spy driver can be removed. This is the only way to save kernal stack usage.

If Norton Antivirus is used, admin can follow suggestion from Norton to reduce the stack space usage by Norton Antivirus.

http://service1.symantec.com/support/ent-security.nsf/docid/2002071208532048?open&src=w

Add domain user to local admin group through Group Policy

Using Security group
1. In Active Directory, created a Global Group with Security group type called LocalAdmin.
2. Included the users as members of the LocalAdmin.
3. Created a GPO.
4. Edited the GPO by clicking Computer Configuration -> Windows Settings -> Security Settings -> Restricted Groups. Add GroupName "Administrators".
5. Then Add domain admins and DOMAIN\LocalAdmin as member of this group
6. It will take some time for the group policy to take effect. One draw back of this method: If a Restricted Groups policy is defined and Group Policy is refreshed, any current member not on the Restricted Groups policy members list is removed. This can include default members, such as administrators. For example, if you had added DOMAIN\user1 to local admin in the past, DOMAIN\user1 will be removed from the local admin group of the machine.

If you do not prefer central management, then create a group policy. (from http://www.tutorials-win.com can't find the posting any more)
1. Create a startup script in the policy with this command. NET localgroup Administrators /add "Domain\Domain Group" (if you just want to add specific user, change "Domain\Domain Group" to Domain\user)
2. make sure the workstations placed in the correct OU
3. Domain Group has to be less than 30 chars. You cannot add more than one domain group to the same local group. This is a limitation.

Activesync Attempt with Exchange gives 0x80072EE2 error

This issue was resolved few months ago actually. What happens was one of the directors always had trouble sync with the Exchange Server. However, he didn't want to use Blackberry. He had 5 different WM phone at home. He tried all of them and still had the same issue. Everytime, he had to power cycle (turn off the phone and take the battery out) the phone, then it will sync again. After a while, it will not work again.

Eventually, we found out he plugged the phone to laptop to sync the notes through USB. Our internal Exchange Server ip is 10.x.x.x. The webmail address he used to sync wirelessly is a public address of course. Based on the research found in internet, it has to do with Windows Mobile DNS cache not being cleared properly when USB cable is unplugged. When plugged into the desktop to sync inside the office, it will use the internal address for Exchange server. After unplugged from USB, it will cause issue of course because the DNS will point to internal address of Exchange server instead of the webmail address. Workaround....powercycle after unplug from a machine in the internal network.

Version of OS on Windows Mobile Phone

Have some time today to re-arrange all the notes and printout. One of them is about the version of Windows Mobile Phone on your pocket PC. I believe it is from Pocket PC Central.

Version Number and OS Version

3.0.9348 Pocket PC 2000
3.0.11171 Pocket PC 2002
4.20.xxxx Windows Mobile 2003
4.21.xxxx Windows Mobile 2003 SE
5.1.xxxx Windows Mobile 5
5.2.xxxx Windows Mobile 6

Security Configuration Wizard for Windows 2003 SP1

Security Configuration Wizard for Windows 2003 SP1 is a very handy tool to config security on Windows 2003 server with at least SP1 installed. I find out a lot of ppl don't know about this tool. Search the internet and find an introductory article about SCW.

The tool helps you config firewall, audting and services......

http://www.windowsecurity.com/articles/Security-Configuration-Wizard-Windows-Server-2003-SP1.html

Registry fix for Windows 2000 server

It happened more than a month ago. We had a Windows 2000 server which would be retired. It crashed in the weekend. Most of the important roles were migrated. However, our diesel backup power generator connected to this domain controller. So, I have to get it back up and running because my manager cannot locate the monitoring software for the backup power generator.

I tried all the startup mode such as safe mode and it refused to boot with a bluescreen. Checked the backup logs over the weekend. Seems like the disk was bad. Eventually, I try the registry fix for Windows 2000. There is a warning some of the data may be lost when using the tool. However, we don't have any critical info. So we goto the following site to download the tool.

http://support.microsoft.com/kb/830570

We get it back up in 30 min.

Iphone with Exchange

We got 3 iphone from States for testing. Currently, it is not available in Canada yet. So, have them unlocked and try to have it talk to the Exchange. One of the users install itune 7.4......result is iphone being locked. So, we are warned by the cellphone tech to use itune 7.3 or below. Setup Exchange side following Wilson's blog

http://blog.monkeykit.com/2007/08/31/how-to-setup-imap4-exchange-2003-email-to-sync-with-your-iphone/

I have to contact ISP to open up only the secure IMAP port. I got the receiving part working. However, sending is still an issue. Eventually, I am using my phone carrier smtp server. One thing I found out: iphone sucks a lot more bandwidth than Blackberry. Hopefully, it will support OMA soon. I still have trouble sending if I use webmail.mycompany.com as the outgoing smtp. The other thing I don't like is power consumption. I will go back to my blackberry for sure. Will play with the new toy for one more week then return it to my manager. I always drop cellphone on the ground by accident. So, iphone is definitely not my device.

Sharepoint

Port Server becomes more and more popular. Well, it is easy to setup and save a lot of work. Our company uses the free Microsoft SharePoint Service. Suppose it should save a lot of time. However, be very cautious with update. Everytime we install major service pack on our SharePoint Server, some of the function fail. The reason is the third party addon. It resets some of the permission and causes some of the pages won't display.

I check permission of each portals and they are set correctly. Eventually, we have to uninstall and reinstall the addon back. Everything is back to normal. Test first before install Service Pack for SharePoint. This is second time already. Future plan....put an identical virtual machine in VM to test ServicePack first.

Cannot run exe file in 2003 server

Try to run driver update on the SQL servers connected to the SAN this weekend. However, I keep receiving error message "Windows cannot access the specified device, path, or file. You may not have the appropriate permission to access the item."

It is caused by one of the Windows security update. You need to unblock it. Basically goto Properties of the exe file. Then click Unblock. You will have no trouble after that. Same thing applies to file such as chm file download from internet and email. Check MS article KB902225.