solidworks功能表中文亂碼 中文名稱的STEP檔無法開啟

 win11安裝solidworks 後，出現一些功能表中文是亂碼、有中文名稱的STEP檔無法開啟

要進到"選用功能"，把"台灣地區"這個選項解除安裝。

重灌電腦 出現 "選取的磁片具有mbr磁碟分區表格....." 錯誤，沒有顯示電腦內的硬碟

  環境:

DEll筆電，要重灌WIN11

異常狀況:

用WIN11 USB重灌電腦時， 出現 "選取的磁片具有mbr磁碟分區表格....." 錯誤，裡面只有顯示USB磁碟，但電腦內的硬碟卻沒抓到。

解決過程:

進入到bios設定中，去storage裡面，原本是選擇raid on，改成ahci/nvme，在重開機，就可以正常重灌系統了。

Environment 

Device: Dell laptop

Goal: Reinstalling Windows 11

Problem/Error Description 

When attempting to reinstall Windows 11 using a Windows 11 USB installation drive, the following error message appeared: "The selected disk has an MBR partition table..."

The system only displayed the USB drive as an available disk, but the internal hard drive (or SSD) was not detected by the installation program.

Solution 

Enter the BIOS/UEFI Setup menu.

Navigate to the Storage or SATA Operation settings.

The original setting was RAID On (or Intel VMD/RST).

Change the setting from RAID On to AHCI/NVMe.

Save the changes and restart the computer.

The system installation (reinstallation) can now proceed normally, as the internal drive is detected.

ASUS ESC700 G3 開機一直進BIOS

  環境:

ASUS ESC700 G3

WIN7

異常狀況:

當機之後，開機就會一直直接進到BIOS，從BIOS裡的資訊看的出來有抓到硬碟。

但把線重新拔插，重開機後，還是一樣狀況

解決過程:

把該硬碟接到別台主機，可正常開機。

拿其他台電腦的硬碟來接上有問題的主機，也可正常開機。

所以判斷硬碟跟主機板都沒問題，應該就是BIOS設定問題。

BIOS設定裡面的"啟動"->"作業系統類型"，本來是選擇"windows uefi模式"，將它改成"其他作業系統"，然後重開機後就正常了。

WIN2025DC 開啟其他DC的共用資料夾存取被拒 KDC不支援所要求的加密類型

  環境:

DC主機作業系統: win2022 & win2025

網域&樹系功能等級: 2016

異常狀況:

win2025dc剛登入系統後，連線任何dc的共用資料夾都是正常的，但大概半小時後，就無法連線，會跳出存取被拒的視窗，要求重新輸入帳號密碼。而且畫面右下角還會跳出"windows需要您目前的認證"

所有的win2025dc都有這個問題，但win2022dc都沒這個問題。

後來有做一個測試:

1.在dc上執行klist purge，清除所有票證

2.接著執行klist get krbtgt。

沒問題的dc就可以抓到票證，但有問題的dc就會出現KDC不支援所要求的加密類型。

經調查，是administrator密碼很久沒變更，使用的是rc4的加密協定，但win2025dc預設會不支援。

所以就是把domain administrator帳號裡，勾選支援aes 128跟256位元加密類型，然後再重設administrator的密碼，就可以排除這個問題。

DC作業系統 網域功能等級 樹系功能等級 升級-win2025 dc無法登入

 環境:

DC主機作業系統: win2012r2

網域&樹系功能等級: 2003

升級流程:

1. 新增win2022 DC主機，設定5大角色

2. 移除win2012r2 DC主機

3. 網域&樹系功能等級升級到2016

4. 新增win2025 DC主機，出現異常

異常狀況:

不管新增幾台win2025 DC主機，升級成DC角色重開機後，win2025 DC主機遠端桌面或本機無法登入，都會出現帳號密碼有錯，安裝最新的windows更新，使用不同的domain admin帳號登入都一樣無法登入

解決過程:

上網查詢相關解法，可以先在win2022DC主機上，用ps session連到win2025DC主機，把KDC服務關閉，就可以登入win2025DC，但登入後，就算把KDC服務開啟，也是無法正常與其他DC主機同步。

試過ChatGPT提供的很多方法，都無法解決，但在一些文件上有看到重設krbtgt這個系統帳號的密碼，就可以解決問題了，很多人建議去下載一個重設krbtgt密碼的powershell，做重設密碼。

先請微軟連線確認問題，收集完相關log，也是判斷KDC服務的一些加密協定不支援，造成登入失敗，DC同步失敗等問題，因此建議重設krbtgt這個系統帳號的密碼，用ADUC去重設，沒有提供powershell來做重設。

在第一次重設krbtgt密碼後，新建的win2025主機升成DC後，就可正常登入運作了，不用等第二次重設。

但微軟有建議，要在10小時後重設第二次，所有隔天有再重設一次。

Environment

• Existing DC Operating System: Windows Server 2012 R2

• Domain & Forest Functional Level: Windows Server 2003

---

Upgrade Procedure

1. Added a new Windows Server 2022 domain controller and transferred all five FSMO roles to it.

2. Removed the Windows Server 2012 R2 domain controller.

3. Upgraded the domain and forest functional levels to Windows Server 2016.

4. Added a new Windows Server 2025 domain controller — issue occurred.

---

Issue Description

After promoting any Windows Server 2025 machine to a domain controller and rebooting, it becomes impossible to log in either locally or via Remote Desktop.
The system reports that the username or password is incorrect.
Installing the latest Windows updates or using different domain administrator accounts does not resolve the problem — all attempts to log in fail.

---

Troubleshooting Process

Based on online findings, a temporary workaround was discovered:
From the Windows Server 2022 DC, use PowerShell remoting (PSSession) to connect to the affected Windows Server 2025 DC and stop the KDC service.
After stopping the KDC service, login becomes possible.
However, once logged in, re-enabling the KDC service does not restore normal replication or synchronization with other domain controllers.

Multiple potential solutions provided by ChatGPT and other sources were tested but did not resolve the issue.
Several documents mentioned that resetting the “krbtgt” system account password could resolve similar problems. Many users recommended using a PowerShell script to perform the reset.

Microsoft was then engaged for remote troubleshooting. After reviewing the collected logs, Microsoft determined that the issue was caused by unsupported encryption protocols within the KDC service, which led to authentication and replication failures.
Microsoft advised resetting the krbtgt account password using Active Directory Users and Computers (ADUC), rather than via PowerShell.

After performing the first krbtgt password reset, newly promoted Windows Server 2025 DCs were able to log in and operate normally.
A second reset was not immediately required for functionality.

However, Microsoft still recommended performing a second krbtgt password reset after 10 hours, which was carried out the following day as advised.

redhat 備份虛擬機還原開機後出現錯誤 fsck.ext3: memory allocation failed while retrying to read bitmaps for /p1

 一台redhat 備份虛擬機，在還原到其他硬體，開機後出現錯誤

fsck.ext3: memory allocation failed while retrying to read bitmaps for /p1 

an error occurred during the file system check dropping you to a shell the system will reboot when you leave the shell

這時就先去查/p1是掛在哪個硬碟後，用root密碼登入，執行下列指令

fsck -y /dev/sda1

完成後在執行 reboot，就可以正常進入到系統了。

WINDOWS11連線WINDOWS2003共用資料夾錯誤碼:0x80004005

 原本WINDOWS11連線WINDOWS2003共用資料夾都正常，但突然有一天卻無法連線，錯誤碼:0x80004005 。

利用WINDOWS7, 10, 2008, 2025都可以，非常奇怪。

最後解決方法是把WINDOWS11裡的SMB1.0 用戶端移除後重新安裝一次，就好了。

Originally, Windows 11 could connect to the Windows 2003 shared folder without any issues, but suddenly one day it stopped working, showing error code: 0x80004005.

Strangely, Windows 7, 10, 2008, and 2025 could all connect normally.

The final solution was to remove the SMB 1.0 client feature on Windows 11 and reinstall it, which fixed the problem.

DNS 有不同主機對應相同IP

網域的DNS主機中，發現有一些電腦已取到其他IP，但DNS上還會保留舊記錄，不會自動清除，其他電腦後來取得該IP時，DNS上就有兩台電腦對應同一個IP。

這就會造成連線電腦時，會連錯電腦。

檢查過DHCP，已經設定成動態更新DNS了，還是不會更新DNS記錄，後來查發現，DNS的設定中，也要把啟用動清除過時的記錄打勾，DNS裡的舊記錄才會被清除。

On the domain DNS server, it was found that some computers had already obtained new IP addresses, but the DNS still kept their old records without automatically clearing them. When another computer later obtained that same IP, the DNS ended up showing two computers mapped to the same IP address.

This caused connection issues, as attempts to connect to one computer could actually connect to the wrong one.

After checking the DHCP settings, it was confirmed that dynamic DNS update was already enabled, but the DNS records were still not being updated. Further investigation revealed that in the DNS settings, the option “Enable scavenging of stale records” must also be checked; only then will outdated DNS records be cleared.

synology active backup for business 還原虛擬機 需保持原設定

 synology active backup for business 備份虛擬機後，還原時如果需保持原設定，就需要在還原後，虛擬機第一次開機時，選擇"我已將其移動"。

通常會選這個，是因為裡面有裝一些軟體是會綁定硬體資訊，所以還原時，必須保持所有相關的設定資訊。

outlook傳送接收失敗 出現"未提供"

 outlook突然無法收發信，按下傳送接收時，都會跳出一個"未提供"的錯誤訊息。

重設outlook profile也沒用。

進到控制台，對outlook執行修復就正常了。

Outlook suddenly couldn’t send or receive emails. When clicking Send/Receive, it would always show an error message saying “Not Specified.”

Resetting the Outlook profile didn’t help.

Going into Control Panel and running a repair on Outlook fixed the issue.

WINDOWS2019 執行windows update離線安裝檔無反應

 在WINDOWS2019下載windows 的更新檔要進行安裝，但執行後都沒任何反應，或是要等很久才會跳出smart screnn的警告視窗。

這是因為系統設定中，有做安全性控管，設成警告。

只要先把它調成關閉，重新登入一次系統，這時後在點選安裝，視窗就會正常跳出，讓我們點進下一步進行安裝。

When attempting to install Windows updates on Windows Server 2019, nothing happens after execution, or it takes a long time before the SmartScreen warning window appears.

This is due to a security control setting in the system, which is currently set to "Warn."

Simply change the setting to "Off" and log in to the system again. After that, when you click the installer, the window will appear normally, allowing you to proceed with the installation.

excel 沒有任何頁籤

 有一份excel編輯到一半時當掉了，重開啟啟後，裡面完全沒任何東西，沒任何頁籤。

所以就用修復的方式再開啟一次，但還是沒效，想說沒救了。

結果就查了一下excel沒有任何頁籤，沒想到還真的有這個設定，去檢視裡面，取消隱藏頁籤，檔案裡的資料就全部出現，恢復正常了。

ad帳號鎖定查修

 偶爾都會遇到ad帳號一直被鎖的問題，就要去查明原因，下面就列出清查的方式。

事情準備 : dc主機上相關log功能一定要開。

1. 在gpo->domain controllers policy裡，要啟用下列三個稽核功能，這樣在事件檢視器裡的安全性事件裡，才能找到登入失敗的相關訊息。

2. 在gpo->domain controllers policy裡，NTLM的稽核也要開啟，這樣在事件檢視器裡的NTLM裡面，才能找到更準確的登入失敗訊息。

3. 要設定帳號鎖定的log產生時，發信通知相關人員，這樣才會知道是否有某帳號一直被鎖定的異狀發生。

清查流程 : 當發現某帳號一直被鎖定時

1. 先查安全性事件，找4625，4771，4776，如果能在這裡面找到來源的ip，那就趕快找到該電腦做處理。

2. 如果在安全性事件裡的log，找不到來源電腦，就要去NTLM的log裡，那邊也會顯示來源電腦。

最近遇到比較特別的狀況是a網域的帳號被鎖定，但從NTLM的log查到的安全通道名稱，是另一個信任網域b的dc主機，但上面顯示的工作站名稱，在b網域裡都查不到，而且會變來變去。

這時後就再去b網域的dc主機上，查詢NTLM log。結果log裡安全通道名稱，是顯示一台網域內的電腦。

後來發現是這台電腦有開放對外服務，有一些來自外部的異常連線，關閉服務後，帳號被鎖定的問題就解除了。

We occasionally encounter issues where an AD account keeps getting locked, and we need to investigate the cause. Below are the steps for troubleshooting.

Preparation:
Make sure the relevant logging features are enabled on the domain controller (DC).

1. In GPO -> Domain Controllers Policy, enable the following three audit policies. This will allow you to find failed login information under the Security events in Event Viewer.

2. Also in GPO -> Domain Controllers Policy, enable NTLM auditing. This helps you locate more accurate failed login details under the NTLM section in Event Viewer.

3. Configure alerts to notify relevant personnel via email when an account lockout log is generated. This ensures you're aware when an account is repeatedly getting locked.

---

Troubleshooting Process:
When you discover that a certain account keeps getting locked:

1. First, check the Security event logs for event IDs 4625, 4771, and 4776. If you can find the source IP there, locate the corresponding computer and take action.

2. If the source computer cannot be identified in the Security logs, check the NTLM logs. These also show the source machine involved in the failed login.

---

A recent unusual case:
An account from domain A was being locked, but the NTLM log showed that the secure channel name was a domain controller from trusted domain B. However, the workstation name shown could not be found in domain B and kept changing.

In this case, we checked the NTLM logs on the domain controller in domain B. The secure channel name in the logs pointed to a computer within the domain.

We later found that this computer was running a public-facing service, and there were some abnormal external connection attempts. After shutting down the service, the account lockout issue was resolved.

Next Terminal 遠端電腦鍵盤問題

 利用Next Terminal， 遠端連線到其他台windows電腦時，按某些鍵時，並不會出現正確的字，會變成其他快捷鍵功能。譬如說按下t，會跳出檔案總管之類的。

這時後就是把那台windows重開機，就會正常了。

COMMVAULT備份工作失敗-錯誤碼： [32:399]

主機在意外當機後，有一個備份工作一直無法正常運作，會出現下列錯誤

錯誤碼： [32:399] 描述： Deduplication Database (DDB) access path [D:\xxx_dedup]

 on MediaAgent [commvault] is offline for Storage Policy Copy [VMBackup_Policy / xxx ]. 

Offline Reason: The active DDB of current storage policy copy is not available to use. 請啟動重複數據刪除DB重建作業。

查了一下原廠網站說明，我們就是因為ddb程序意外中斷的關係造成這個問題。

對照下面的解決方法，我們必預要手動執行復原 Deduplication Database的工作 。

方法就是從"儲存資源"->"DeDup引擎"，找到執行失敗的策略，去"所有工作"，裡面有個"復原存放區"，執行這個工作。

Synology手動更新韌體失敗 更新檔毀損

 下載了synology的韌體更新檔後，要手動更新，結果都會跳出更新擋毀損的錯誤。

其原因是NAS主機上的韌體版本跟要更新的版本差太多，(要從6.3升到7.2)。

解決方法就是先去下載7.0.1版來手動升級，升級成功後，再手動升級最新版，就可以了。

After downloading the Synology firmware update file and attempting a manual update, an error message stating that the update file is corrupted always appears.

The reason for this is that the firmware version on the NAS is too far behind the version you're trying to update to (upgrading from 6.3 to 7.2).

The solution is to first download version 7.0.1 and manually upgrade to it. Once the upgrade is successful, you can then manually update to the latest version without issues.

主機板上的內建顯卡 抓不到螢幕

 有幾台同型號的桌機，主機板上有內hdmi/dvi 接孔，也都有加裝外接顯卡，螢幕接上外接顯卡都正常運作。

但把外接顯卡拔掉，螢幕接上內建的hdmi/dvi ，就都抓不到螢幕，到bios裡也找不到可以調整了。

去查了一下該主機的手冊才發現，原因主機板上有內建的顯示接孔，不一定有用，還要看cpu有沒有支援。

怎麼查cpu有沒有支援，可以查看這篇說明

https://www.asus.com/tw/support/faq/1045576/

There are several desktop computers of the same model. The motherboards have built-in HDMI/DVI ports, and they all have external graphics cards installed. When the monitor is connected to the external graphics card, everything works fine.

However, when the external graphics card is removed and the monitor is connected to the built-in HDMI/DVI ports, the screen is not detected, and there's no option in the BIOS to adjust it.

After checking the manual for the motherboard, I found out that even though the motherboard has built-in display ports, they may not be functional depending on whether the CPU supports it.

To find out if the CPU supports it, you can refer to this guide:

https://www.asus.com/tw/support/faq/1045576/

win10安裝framework3.5

最近win10下載framework3.5安裝時，一直失敗，都是在下載必要原件的地方失敗，改機碼也沒用。

後來看到一招，就是找一個win server2012以上的安裝iso，把裡面的sxs資料夾複製到win10的c槽，然後用powershell執行下列指令，就成功了。

dism.exe /online /enable-feature /featurename:netfx3 /Source:c:\sxs

Recently, I kept failing to install Framework 3.5 on Windows 10. The failure always occurred at the stage of downloading the necessary components, and modifying the registry didn't help.

Later, I found a method that worked. You need to find an installation ISO for Windows Server 2012 or later, copy the "sxs" folder from the ISO to the C drive of your Windows 10 machine, and then execute the following powershell command. This solved the problem:

dism.exe /online /enable-feature /featurename:netfx3 /Source:c:\sxs

新買的asus 筆電安裝win10找不到硬碟

 新買的asus 筆電是win11，要重灌在win10。

但在安裝的過程，卻找不到任何硬碟(裡面有1個m.2跟1個sata硬碟)。

這時就要進到bios裡，在"進階"設定中，找到"儲存介面"，裡通換sata操作設定值，把raid改成ahci，重新再試一次，就可以找到裡面所有的硬碟了。

The newly purchased ASUS laptop came with Windows 11, but I need to reinstall it with Windows 10.

However, during the installation process, I couldn't find any hard drives (there is one M.2 and one SATA hard drive inside).

To solve this, I had to enter the BIOS, navigate to the "Advanced" settings, find "Storage Interface," and change the SATA operation setting from RAID to AHCI. After doing this and trying again, all the hard drives were detected.

新買的asus 筆電找不到secure boot選項

 新買的asus win11筆電需要降級裝win10，插入安裝win10的usb，就會出現"secure boot violation invalid signature detected. check secure boot policy in setup"的錯誤。

看到這個就是去bios把secure boot的功能關掉就對了，但進到bios裡，卻一直找不到。

後來才查到，要先把fast boot的功能關閉，secure boot的選項才會出現。

The newly purchased ASUS Win11 laptop needs to be downgraded to install Win10. When inserting the Win10 installation USB, an error message "secure boot violation invalid signature detected. Check secure boot policy in setup" appears.

To resolve this, you need to disable the secure boot feature in the BIOS. However, upon entering the BIOS, the option was not found.

Later it was discovered that the fast boot feature needs to be disabled first for the secure boot option to appear.