Re-install (repair) Server 2012 Roles & Features

windows-server-2012

Is there a way to re-install all Server Roles & Features in Server 2012?

As far as I can see from Server Manager all that can be done is to manually remove each and then re-install but I am hoping that MS have provided some way of just repairing / re-installing all installed roles & features. Anyone know if there is a way of doing that?

The reason for wanting to do this is that I have a Domain Server which after some recent MS updates has started causing numerous event log warnings & errors and has started behaving erratically.

I know that System File Checker will check installed files but that will not fix any registry permissions problems, which is where I think problems have arisen. Guess what I am looking for is some way to recreate the whole registry and it's permissions but without doing a complete re-install.

Thanks,
Nick

Best Answer

You could use PowerShell and do something like -

import-module ServerManager

Get-WindowsFeature | 
  Where-Object {$_.installed} | 
  Tee-Object -Variable CurrentRoles | 
  Remove-WindowsFeature
$CurrentRoles | 
  Export-CliXML c:\CurrentRoles.xml
Restart-Computer

After the computer reboots -

Import-CliXML c:\CurrentRoles.xml | 
  Add-WindowsFeature
Restart-Computer

I haven't run this exact sequence, so test before running in production, but I have used this pattern for server provisioning.

Related Solutions

Windows – Cannot install RDS-Web-Access

Some things to check:

Make sure there are no entries in HKLM\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations. If there are, reboot to get them processed. Or do the renames manually and delete them.
Run DISM /Online /Cleanup-Image /RestoreHealth to clean up the component store.
Don't install on a Domain Controller.

Ssl – How to fix RDP on windows server 2012

You may encounter this error when connecting after importing an SSL certificate (and associated private key) into Windows Server 2012:

This computer can't connect to the remote computer. Try connecting again. If the problem continues, contact the owner of the remote computer or your network administrator.

In addition, in the Windows event logs, you see:

"A fatal error occurred when attempting to access the SSL server credential 
private key. The error code returned from the cryptographic module is 0x8009030D. 
The internal error state is 10001."

Solution:

Quote from Microsoft KB2001849:

"The Remote Desktop Host Services service runs under the NETWORK SERVICE account. Therefore, it is necessary to set the ACL of the key file used by RDS (referenced by the certificate named in the SSLCertificateSHA1Hash registry value) to include NETWORK SERVICE with "Read" permissions. To modify the permissions follow the steps below:

Open the Certificates snap-in for the local computer:

Click Start, click Run, type mmc, and click OK.
On the File menu, click Add/Remove Snap-in.
In the Add or Remove Snap-ins dialog box, in the Available snap-ins list, click Certificates, and click Add.
In the Certificates snap-in dialog box, click Computer account, and click Next.
In the Select Computer dialog box, click Local computer: (the computer this console is running on), and click Finish.
In the Add or Remove Snap-ins dialog box, click OK.
In the Certificates snap-in, in the console tree, expand Certificates (Local Computer), expand Personal, and navigate to the SSL certificate that you would like to use.
Right-click the certificate, select All Tasks, and select Manage Private Keys.
In the Permissions dialog box, click Add, type NETWORK SERVICE, click OK, select Read under the Allow checkbox, then click OK."

Source: https://support.microsoft.com/en-us/kb/2001849

Best Answer

Related Solutions

Windows – Cannot install RDS-Web-Access

Ssl – How to fix RDP on windows server 2012

Related Topic