T O P
System Administrator

ERROR: The Windows Filtering Platform has blocked a packet

One of my servers has been getting numerous events logged saying “The Windows Filtering Platform has blocked a packet” with internal IP addresses usually listed.

 

I found that running these two commands quieted the logging:

auditpol /set /subcategory:”Filtering Platform Packet Drop” /success:disable /failure:disable

auditpol /set /subcategory:”Filtering Platform Connection” /success:disable /failure:disable

If you need any other commands, you can check out the full Microsoft article here: https://msdn.microsoft.com/en-us/library/windows/desktop/bb736284(v=vs.85).aspx

System Administrator

Error Backing Up 0x807800C5

After a round of Windows Updates, I encountered the same error on two different servers at different clients. Both used BackupAssist that relied on Windows Server Backup. They both backed up to NAS’s but one NAS was connected as an iSCSI device and the other was mapped as a network share. The versions of BackupAssist were different, as well. One server was bare-metal, one was an ESXI VM. One was 2012 R1, one was 2012R2.

Among the things I tried were:

  • Changing the time of the backup
  • Resetting shadow copies
  • Changing maximum size for shadow copies
  • Changing the VSS mode
  • Checking the status of VSS writers
  • Restarting the servers
  • Restarting backup devices

Eventually I found the backup code, 0x807800C5, on both servers. Googling yielded nothing but a number of other people with the same error running everything from Windows 7 to Windows 2012. After a lot of troubleshooting, I ended up renaming the backup destination that Windows Server Backup used, which gave the backup a clean slate of sorts. Both backups have succeeded since then.

 

The full error I received was:

(There was a failure in preparing the backup image of one of the volumes in the backup set.). Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Microsoft ExchangeOffice365PowershellSystem Administrator

How to Find Last Logon Time for Exchange Mailbox Users

The last logon time of an Exchange 2010/2013/2016 mailbox user can easily be found by running the Get-MailboxStatistics cmdlet in the Exchange Management Shell.

 

You can further sort the info by including and running the following command:

Get-MailboxStatistics -Server EXCH | Sort LastLogonTime -Descending

And export it to a CSV by adding an Export-CSV option like below:

Get-MailboxStatistics -Server EXCH | Sort LastLogonTime -Descending | Export-CSV c:\lastlogon.csv

System Administrator

Solving “Access is Denied, Unable to Remove Device”

I recently got stuck trying to remove a printer from a computer with the error “Access is Denied, Unable to Remove Device”. Here is how I fixed it:

First, stop the print spooler by opening an elevated command prompt and entering “net stop spooler” and press enter. Leave the window open.

Then head into the registry to: HKEY_CURRENT_USER\Printers\Connections and delete the offending printer

Next, go back to the command prompt and enter “net start spooler” and press enter.

That should do it!