Solved – Windows Server 2008 R2 Update fails due to system-protected font – Tahomabd.ttf- KB4338818 or KB4343900

Hello,

this problem has been consume my time for almost 1 month.

i have been trying to install kb 4343900 for many times on my windows server 2008 r2, but it always failed.
The server was virtual machine on VMware.
What i already do is :
– running the sfc /scannow but it looks normal no integrity violation found
– try install the kb manually but still failed.
– running the SFCFix but still not working

– reset the windows update component.

windows update log :

2018-08-23 16:20:46:999 868 b4c Handler Post-reboot status for package Package_for_RollupFix~31bf3856ad364e35~amd64~~7601.24214.1.5: 0x80070020.
2018-08-23 16:20:46:999 868 b4c Handler WARNING: Got extended error: “POQ Operation HardLinkFile OperationData \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-tahoma_31bf3856ad364e35_6.1.7601.24145_none_8e5c4f96a47869ce\tahomabd.ttf, \??\C:\Windows\fonts\tahomabd.ttf”

after several troubleshoot workaround, i found that the tahomabd.ttf are lock the windows update process , and here are the workaround to solved it :

1) Use Process Explorer (Process Explorer – Windows Sysinternals | Microsoft Docs) to search for handles currently using “tahoma” or “staticcache.dat”. Please run this tools as administrator.
2) Temporarily disable or uninstall the above handles (programs/processes) that are using “tahoma” or “staticcache.dat” (for my case, manage engine service desk lock the tahoma font. Disable the manage engine services before install the KB).

3) Install KB4343900.

4) restart the server

5) Update Success, Re-enable manage engine services.

 

Source :

Source 1

Source 2 – my thread on www.sysnative.com

Advertisements

GUIDE – How to setup auto login on Windows 10

I found this article when i try to make one of computer on the meeting room to auto logon using special account.

Auto login for Windows 10 computers on a domain

In case of Windows 10 computer on an Active Directory domain, you need to edit the Registry to setup auto login. A domain administrator can manually add these registry keys or if you need to repeat this procedure on a lot of computers you can also create a Group Policy Object to automatically add the registry keys.

To add the registry keys for auto login. Type regedit in the search box and select the registry editor.

Navigate to  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Add/Modify the following key if they doesn’t already exit

Name Type Data
AutoAdminLogon REG_SZ 1
DefaultDomainName REG_SZ YourDomainName
DefaultUserName REG_SZ DomainUsername
DefaultPassword REG_SZ DomainUserPassword

Restart the computer for the changes to take effect.

Solved – Cisco VPN Client always minimize at taskbar

one of my user reporting weird problem today, every time he opened the Cisco VPN client it always minimize at taskbar.

so this is the work around that i do :

  1. Start vpn client (it will be always minimize itself)
  2. launch task manager
  3. In task manager, select cisco vpn client, right-click and choose maximize
  4. Now in cisco vpn client, go to Options → Preferences → check save settings
  5. now close and start cisco vpn client – Voila , it is fixed.

source :

Link#1

Alternative solusion :

Link#2

 

Solved – iscsi shared folder not shared after the server restart

I have a synology unit which I connected via iSCSI on windows server 2008r2,  the weird thing that every time I reboot, the shared folder would disappeared, and I would have to re-share again.

after read some article on the microsoft on this link , i solved the problem.

the things that i do is :

  1. Click Start, click Run, type cmd, and then press ENTER.
  2. Type sc config LanManServer depend= Samss/Srv/MSiSCSI, and then press ENTER.

    If you have administrative access to the server, you can perform this command from a network computer. To do this, type the following command, and then press ENTER:

    sc \\computer_name config LanManServer depend= Samss/Srv/MSiSCSI

Troubleshoot – Forcing Lync 2013 client to download address book

To forcing the Lync client to download the address book Please do the following

  • Log off of the Lync client and delete the profile from: %userprofile%\appdata\Local\Microsoft\Office\15.0\Lync
  • Execute the following command in the command prompt using administrative account to add the registry that forces the Lync client to immediately download the address book: reg add HKLM\Software\Policies\Microsoft\Office\15.0\Lync /v GalDownloadInitialDelay /t REG_DWORD /d 0 /fTroubleshoot-Forcing-Lync-2013-client-to-download-address-book
  • And then re open the lync software, now you will be able to search people in address book.

source :

This Link