tag:blogger.com,1999:blog-74255172024-03-05T21:53:27.682-05:00IT That Should Just WorkHelping you with things I've found that should just work but don't. I hold several certifications from Cisco, VMware, and Microsoft.Unknownnoreply@blogger.comBlogger105125tag:blogger.com,1999:blog-7425517.post-24144092819347718672023-07-06T10:24:00.004-04:002023-07-06T10:24:58.434-04:00Is Port 80 Needed for On-Premise Exchange?<p><span style="font-size: large;"> Simply put...NO! </span></p><p><span style="font-size: medium;">Now if you go digging you will see the official Microsoft documentation stating that it is needed for failback for some HTTPS services. From a security standpoint if the HTTPS services aren't working then I will refuse to go back to an unencrypted service just to keep it working.</span></p><p><span style="font-size: medium;">Some will say if you're keeping Exchange patched and updated then having port 80 open to Exchange is no big deal. While that may be true why risk it?</span></p><p><span style="font-size: medium;">I had a customer recently that was asking why their Exchange server was showing C&C callbacks being blocked from the outside, why are there other items being blocked from the outside. Each thing in the endpoint protection logs showed this server was being attacked on port 80.</span></p><p><span style="font-size: medium;">I connected to their Cisco ASA and disabled the rule allowing port 80 to the Exchange server. Guess what, a week went by with no further attacks being blocked. Even though the endpoint protection was stopping them, it would only be a matter of time before an exploit is found via port 80 and then there goes the server's security posture.</span></p><p><span style="font-size: medium;">I don't see a need to expose this port in 2023 on the modern Internet with all of the risks we already face daily.</span></p><p><span style="font-size: medium;">Just be smart and disable port 80. If your application won't work without it then it's time to update the application or get one that is more focused on security. Don't compromise your network security to accommodate old software.</span></p><p><span style="font-size: medium;">My $.02. <br /><br />Good luck!</span></p>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-66663327625947461262023-04-20T13:24:00.000-04:002023-04-20T13:24:00.206-04:00Start All Exchange Services Automatically<p><b><span style="font-size: medium;">One Command to Rule Them All!</span></b></p><p>Little joke there....this command will start all Exchange services on a server in the event they do not start automatically as they should after a restart.</p><p><b>Get-Service -DisplayName "Microsoft Exchange*" | Where-Object {$_.Starttype -eq "Automatic" -and $_.Status -ne "Running"} | Start-Service</b></p><p>The process waits for each service to start before moving to the next one. Really handy when you've got a lot going on and don't want to start them all by hand.</p><p>Good luck!</p>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-78060282853149035272023-01-20T23:09:00.016-05:002023-01-20T23:12:46.338-05:00How to Configure a Startup Script to Map a Network Printer<p style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; font-family: Söhne, ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, Ubuntu, Cantarell, "Noto Sans", sans-serif, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 16px; margin: 0px 0px 1.25em; white-space: pre-wrap;"><span style="background-color: white;">A Windows startup script can be used to map a network printer at logon. Here is an example of a simple script that maps a network printer using the "net use" command:</span></p><pre style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; background-color: #444654; border-radius: 0.375rem; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; color: #d1d5db; font-family: "Söhne Mono", Monaco, "Andale Mono", "Ubuntu Mono", monospace !important; font-size: 0.875em; line-height: 1.71429; margin-bottom: 0px; margin-top: 0px; overflow-x: auto; padding: 0px;"><div class="bg-black mb-4 rounded-md" style="--tw-bg-opacity: 1; --tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; background-color: rgba(0,0,0,var(--tw-bg-opacity)); border-radius: 0.375rem; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; margin-bottom: 1rem;"><div class="flex items-center relative text-gray-200 bg-gray-800 px-4 py-2 text-xs font-sans" style="--tw-bg-opacity: 1; --tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-text-opacity: 1; --tw-translate-x: 0; --tw-translate-y: 0; align-items: center; background-color: rgba(52,53,65,var(--tw-bg-opacity)); border: 0px solid rgb(217, 217, 227); box-sizing: border-box; color: rgba(217,217,227,var(--tw-text-opacity)); display: flex; font-family: Söhne, ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, Ubuntu, Cantarell, "Noto Sans", sans-serif, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 0.75rem; line-height: 1rem; padding: 0.5rem 1rem; position: relative;"><button class="flex ml-auto gap-2" style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; appearance: button; background-image: none; border-color: rgb(217, 217, 227); border-style: solid; border-width: 0px; cursor: pointer; display: flex; font-family: inherit; font-size: 12px; font-weight: inherit; gap: 0.5rem; line-height: inherit; margin: 0px 0px 0px auto; padding: 0px;"><br /></button></div><div class="p-4 overflow-y-auto" style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; overflow-y: auto; padding: 1rem;"><code class="!whitespace-pre-wrap hljs language-bash" style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; background: none; border-radius: 0.3em; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; color: white; font-family: inherit; font-size: inherit; font-weight: inherit; hyphens: none; line-height: 1.5; overflow-wrap: normal; padding: 0.1em; tab-size: 4; white-space: normal; word-break: normal; word-spacing: normal;">net use LPT1: \\printserver\printer /persistent:<span class="hljs-built_in" style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; color: #e9950c;">yes</span>
</code></div></div></pre><p style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; font-family: Söhne, ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, Ubuntu, Cantarell, "Noto Sans", sans-serif, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 16px; margin: 1.25em 0px; white-space: pre-wrap;"><span style="background-color: white;">This script maps the network printer located at "\printserver\printer" to the local LPT1 port, and the "/persistent:yes" flag ensures that the mapping will remain after a reboot.</span></p><p style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; font-family: Söhne, ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, Ubuntu, Cantarell, "Noto Sans", sans-serif, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 16px; margin: 1.25em 0px; white-space: pre-wrap;"><span style="background-color: white;">You can also use the <code style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; font-family: "Söhne Mono", Monaco, "Andale Mono", "Ubuntu Mono", monospace !important; font-size: 0.875em; font-weight: 600;">rundll32 printui.dll,PrintUIEntry</code> command to map network printers at logon.
Here is an example of the command to map a network printer with IP address <code style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; font-family: "Söhne Mono", Monaco, "Andale Mono", "Ubuntu Mono", monospace !important; font-size: 0.875em; font-weight: 600;">192.168.1.100</code> and share name <code style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; font-family: "Söhne Mono", Monaco, "Andale Mono", "Ubuntu Mono", monospace !important; font-size: 0.875em; font-weight: 600;">printer</code>:</span></p><pre style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; background-color: #444654; border-radius: 0.375rem; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; color: #d1d5db; font-family: "Söhne Mono", Monaco, "Andale Mono", "Ubuntu Mono", monospace !important; font-size: 0.875em; line-height: 1.71429; margin-bottom: 0px; margin-top: 0px; overflow-x: auto; padding: 0px;"><div class="bg-black mb-4 rounded-md" style="--tw-bg-opacity: 1; --tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; background-color: rgba(0,0,0,var(--tw-bg-opacity)); border-radius: 0.375rem; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; margin-bottom: 1rem;"><div class="flex items-center relative text-gray-200 bg-gray-800 px-4 py-2 text-xs font-sans" style="--tw-bg-opacity: 1; --tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-text-opacity: 1; --tw-translate-x: 0; --tw-translate-y: 0; align-items: center; background-color: rgba(52,53,65,var(--tw-bg-opacity)); border: 0px solid rgb(217, 217, 227); box-sizing: border-box; color: rgba(217,217,227,var(--tw-text-opacity)); display: flex; font-family: Söhne, ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, Ubuntu, Cantarell, "Noto Sans", sans-serif, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 0.75rem; line-height: 1rem; padding: 0.5rem 1rem; position: relative;"><button class="flex ml-auto gap-2" style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; appearance: button; background-image: none; border-color: rgb(217, 217, 227); border-style: solid; border-width: 0px; cursor: pointer; display: flex; font-family: inherit; font-size: 12px; font-weight: inherit; gap: 0.5rem; line-height: inherit; margin: 0px 0px 0px auto; padding: 0px;"><br /></button></div><div class="p-4 overflow-y-auto" style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; overflow-y: auto; padding: 1rem;"><code class="!whitespace-pre-wrap hljs language-bash" style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; background: none; border-radius: 0.3em; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; color: white; font-family: inherit; font-size: inherit; font-weight: inherit; hyphens: none; line-height: 1.5; overflow-wrap: normal; padding: 0.1em; tab-size: 4; white-space: normal; word-break: normal; word-spacing: normal;">rundll32 printui.dll,PrintUIEntry /in /n\\192.168.1.100\printer
</code></div></div></pre><p style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; font-family: Söhne, ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, Ubuntu, Cantarell, "Noto Sans", sans-serif, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 16px; margin: 1.25em 0px; white-space: pre-wrap;"><span style="background-color: white;">You can also use a batch file that contains the above commands, and then schedule it to run at startup using the Task Scheduler.</span></p><p style="--tw-border-spacing-x: 0; --tw-border-spacing-y: 0; --tw-ring-color: rgba(59,130,246,0.5); --tw-ring-offset-color: #fff; --tw-ring-offset-shadow: 0 0 transparent; --tw-ring-offset-width: 0px; --tw-ring-shadow: 0 0 transparent; --tw-rotate: 0; --tw-scale-x: 1; --tw-scale-y: 1; --tw-scroll-snap-strictness: proximity; --tw-shadow-colored: 0 0 transparent; --tw-shadow: 0 0 transparent; --tw-skew-x: 0; --tw-skew-y: 0; --tw-translate-x: 0; --tw-translate-y: 0; border: 0px solid rgb(217, 217, 227); box-sizing: border-box; font-family: Söhne, ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, Ubuntu, Cantarell, "Noto Sans", sans-serif, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 16px; margin: 1.25em 0px 0px; white-space: pre-wrap;"><span style="background-color: white;">It is important to note that you need to have the necessary permissions to map the network printer and that the printer should be shared and available on the network.</span></p>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-69413499884998211292022-08-25T12:45:00.000-04:002022-08-25T12:45:01.583-04:00ADFS Web Proxy Service Won't Start<p> I've seen lots of articles across the web on this. Here's a fast way to get this fixed so you can move on to other things. Sadly, I hit this too often when renewing certificates on ADFS servers.</p><p>NOTE: This does not require a server restart.</p><p style="background-color: white; color: #4a4a4a; font-family: Roboto, sans-serif; font-size: 14px; margin: 0px 0px 12px; padding: 0px; word-break: break-word;">Source: <a href="https://blogs.technet.microsoft.com/rmilne/2015/04/20/adfs-2012-r2-web-application-proxy-re-establish-proxy-trust/" rel="nofollow noopener" style="border-bottom: none; color: #007fa2; padding: 0px; text-decoration-line: none;" target="_blank">https://blogs.technet.microsoft.com/rmilne/2015/04/20/adfs-2012-r2-web-application-proxy-re-establis...</a>. </p><p style="background-color: white; color: #4a4a4a; font-family: Roboto, sans-serif; font-size: 14px; margin: 0px 0px 12px; padding: 0px; word-break: break-word;"></p><p style="background-color: white; color: #4a4a4a; font-family: Roboto, sans-serif; font-size: 14px; margin: 0px 0px 12px; padding: 0px; word-break: break-word;">1) Launch <b>regedit</b>.</p><p style="background-color: white; color: #4a4a4a; font-family: Roboto, sans-serif; font-size: 14px; margin: 0px 0px 12px; padding: 0px; word-break: break-word;">2) Navigate to <b>HKLM\Software\Microsoft\ADFS\ProxyConfigurationStatus</b>.</p><p style="background-color: white; color: #4a4a4a; font-family: Roboto, sans-serif; font-size: 14px; margin: 0px 0px 12px; padding: 0px; word-break: break-word;">3) Change <b>ProxyConfigurationStatus</b> from “<b>2</b>” (configured) to “<b>1</b>” (not configured).</p><p style="background-color: white; color: #4a4a4a; font-family: Roboto, sans-serif; font-size: 14px; margin: 0px 0px 12px; padding: 0px; word-break: break-word;">4) Launch the <b>Remote Access Manager</b> snap-in.</p><p style="background-color: white; color: #4a4a4a; font-family: Roboto, sans-serif; font-size: 14px; margin: 0px 0px 12px; padding: 0px; word-break: break-word;">5) Select <b>Web Application Proxy</b>.</p><p style="background-color: white; color: #4a4a4a; font-family: Roboto, sans-serif; font-size: 14px; margin: 0px 0px 12px; padding: 0px; word-break: break-word;">6) Select <b>Run the Web Application Proxy Configuration Wizard</b>.</p><p style="background-color: white; color: #4a4a4a; font-family: Roboto, sans-serif; font-size: 14px; margin: 0px 0px 12px; padding: 0px; word-break: break-word;">7) During the wizard it will prompt you to select a certificate. Select the certificate you were using before. Enter in some Domain Admin credentials (I don't think they're saved? Just used to authenticate?). Finish the config wizard.</p><p style="background-color: white; color: #4a4a4a; font-family: Roboto, sans-serif; font-size: 14px; margin: 0px 0px 12px; padding: 0px; word-break: break-word;">9) Web Application Proxy now works again.</p><p style="background-color: white; color: #4a4a4a; font-family: Roboto, sans-serif; font-size: 14px; margin: 0px 0px 12px; padding: 0px; word-break: break-word;"><br /></p><p style="background-color: white; color: #4a4a4a; font-family: Roboto, sans-serif; font-size: 14px; margin: 0px 0px 12px; padding: 0px; word-break: break-word;">Works for me every time. Good luck!</p><p><br /></p>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-4034392596658166732022-07-23T22:48:00.000-04:002022-07-23T22:48:10.652-04:00Upgrade to ESXi 7.x: Missing dependencies VIBs Error<p><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;">I have been getting this error frequently lately while doing upgrades from ESXi 6.5 and 6.7 to 7.x regardless of the hardware vendor. </span></p><p style="background-color: white; border: 0px; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px; line-height: 1.71429; margin: 0px 0px 1.71429rem; padding: 0px; vertical-align: baseline;">If you add an upgrade baseline to the cluster or host, and you try to remediate the host, the task fails with a dependency error. When taking a closer look into the tasks details, you were getting told that the task has failed because of a failed dependency, but not which VIB it caused.</p><div class="separator" style="clear: both; text-align: left;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihOwIIPLDqnVBxBRyvEv6RpXVUKM_0xJLb4QRaumjXv4DimlnVMlKfZNoJFPY5mParHIPy4o-zr7X0ImReHaCNoU2PXY7OioDRmVchAZoUMCmduvyZfzp7TfwhWq35CNcauJ3479PyVnDZqwDjFzLvz92FqedP3TnjqDnXpZ2NrcTkluBvmiY/s1004/update_task_details_1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="368" data-original-width="1004" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihOwIIPLDqnVBxBRyvEv6RpXVUKM_0xJLb4QRaumjXv4DimlnVMlKfZNoJFPY5mParHIPy4o-zr7X0ImReHaCNoU2PXY7OioDRmVchAZoUMCmduvyZfzp7TfwhWq35CNcauJ3479PyVnDZqwDjFzLvz92FqedP3TnjqDnXpZ2NrcTkluBvmiY/w517-h244/update_task_details_1.png" width="517" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;"><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;">You can find the name if the causing VIB on the update manager tab of the host that you tried to update. The status of the baseline is “incompatible”, and not “non-compliant”.</span></div><div class="separator" style="clear: both; text-align: left;"><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;"><br /></span></div><div class="separator" style="clear: both; text-align: left;"><div class="separator" style="clear: both; text-align: left;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLs1I_OZ9r4XIvsv6k2nYzY8XU_io_MVkMSHd-MrwAdIZaklOw899DpZUqxs3_NuZVAGvMFhXQ7JsAEyG6XQgPIKThvQtHrUcnyiqqBMfJ-RUfqHsi_pFuYCKl50c2mJ41NDGHu--zWbRnHPNGbzWJFT8rnENi3gKF8E9Su1cMxKDDfXI0u1I/s971/update_task_details_2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="243" data-original-width="971" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLs1I_OZ9r4XIvsv6k2nYzY8XU_io_MVkMSHd-MrwAdIZaklOw899DpZUqxs3_NuZVAGvMFhXQ7JsAEyG6XQgPIKThvQtHrUcnyiqqBMfJ-RUfqHsi_pFuYCKl50c2mJ41NDGHu--zWbRnHPNGbzWJFT8rnENi3gKF8E9Su1cMxKDDfXI0u1I/w542-h244/update_task_details_2.png" width="542" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;"><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;">To resolve this issue you have to remove the causing VIB. This is no big deal and can be done with </span><em style="background-color: white; border: 0px; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px; margin: 0px; padding: 0px; vertical-align: baseline;">esxcli</em><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;">. Enable SSH and open an SSH connection to the host. Then remove the VIB.</span></div><div class="separator" style="clear: both; text-align: left;"><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;"><br /></span></div><div class="separator" style="clear: both; text-align: left;"><div class="separator" style="clear: both; text-align: left;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3ZW4s21mi3F6A10ciEOY4czzQWahynIlXYOscOV9lXLcqW5l5UXsFFL-cUqDkVxx4n8Wz23vYB4lvJDEjI6TmRo6oemjsQEBn1eAxWukBakgJTvfeoGVABOW2sF7qIX8mYXdPlXkVaDNb8Xw0OnPh5skXk8yKN3N_9vKC2-V0vHJLBUnB6s8/s941/update_task_details_3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="442" data-original-width="941" height="252" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3ZW4s21mi3F6A10ciEOY4czzQWahynIlXYOscOV9lXLcqW5l5UXsFFL-cUqDkVxx4n8Wz23vYB4lvJDEjI6TmRo6oemjsQEBn1eAxWukBakgJTvfeoGVABOW2sF7qIX8mYXdPlXkVaDNb8Xw0OnPh5skXk8yKN3N_9vKC2-V0vHJLBUnB6s8/w543-h252/update_task_details_3.png" width="543" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;"><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;">You need to reboot the host after the removal of the VIB. Then you can proceed with the update. The status of the upgrade baseline should be now “not-compliant”. Just start the upgrade again and it will complete properly provided there are no other issues.</span></div><div class="separator" style="clear: both; text-align: left;"><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;"><br />Good luck!</span></div><br /><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;"><br /></span></div><div class="separator" style="clear: both; text-align: left;"><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;"><br /></span></div><div class="separator" style="clear: both; text-align: left;"><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;"><br /></span></div><br /><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;"><br /></span></div><div class="separator" style="clear: both; text-align: left;"><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;"><br /></span></div><div class="separator" style="clear: both; text-align: left;"><span style="background-color: white; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px;"><br /></span></div><br /><p style="background-color: white; border: 0px; color: #444444; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 14px; line-height: 1.71429; margin: 0px 0px 1.71429rem; padding: 0px; vertical-align: baseline;"><br /></p>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-36611905022584639072022-02-04T10:28:00.004-05:002022-02-04T10:28:53.858-05:00Fixing Windows Updates Failed with Error 0x80244022<p> If you have a workstation failed to Windows Update with the error 0x80244022 from a WSUS, the fix is pretty simple and straightforward.</p><p>The reason why the error occurs is because the Application Pool that runs the WSUS service stopped.</p><p>Go to the WSUS server and open IIS Manager. Click Application Pools, select WsusPool and click Start to restart the Application Pool.</p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/a/AVvXsEhw5BZdceOIhhuyRXptDYUpAr9UdABp3VAgs7_cj_kfz6oROUAi6Xo9TtrB8e2uxGMYo_z4CeR45Yg67r8YyxF65wC7BIDC4_2myuwrC7FBhxItyZfon4mDxwQO-qdgPunq8WQNEAUrSN12yPM15bznUFV8yuuZV1ExgYXBsJdFODyb4HiaCrg=s768" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="409" data-original-width="768" height="244" src="https://blogger.googleusercontent.com/img/a/AVvXsEhw5BZdceOIhhuyRXptDYUpAr9UdABp3VAgs7_cj_kfz6oROUAi6Xo9TtrB8e2uxGMYo_z4CeR45Yg67r8YyxF65wC7BIDC4_2myuwrC7FBhxItyZfon4mDxwQO-qdgPunq8WQNEAUrSN12yPM15bznUFV8yuuZV1ExgYXBsJdFODyb4HiaCrg=w459-h244" width="459" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">This takes care of it the bulk of the time.</div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">Good luck!</div><br /><p><br /></p><p><br /></p>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-50814079893139881962022-01-10T12:02:00.000-05:002022-01-10T12:02:22.057-05:00Mount ISO in Windows Server<p> I ran into an interesting issue today. Windows Server 2012 R2 had no options to mount an ISO file. I tried a couple of 3rd party programs to do it but they would not work either. I found a command that can be used with PowerShell to mount an ISO and it worked perfectly. Here's the text of the command.</p><p>Good luck!</p><p><span style="background-color: white; color: #525960; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", "Liberation Sans", sans-serif; font-size: 15px;">Mount-DiskImage -ImagePath 'D:\Path\To\Image.iso' -StorageType ISO -PassThru | Get-Volume</span></p><p><br /></p>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-1295351336081715332021-06-10T14:57:00.004-04:002021-06-10T14:57:54.852-04:00How to Enable or Disable the News and Interests Taskbar Windows 10The latest updates to Windows 10 has now enabled the News and Interests taskbar by the clock on Windows 10. Right away this started generating questions from staff on what it is or why it was turned on. Again Microsoft pushes something out that you may not want running.<div><br /></div><div>Since the GPO ADMX for it doesn't seem to be working on Windows 10 Professional, here is a quick command you can run that will make an immediate registry change and turn it off.</div><div><br /></div><div><i>reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Feeds" /v ShellFeedsTaskbarViewMode /t REG_DWORD /d 2 /f</i></div><div><i><br /></i></div><div>This fully hides it. If however you want it back on change the DWORD value. Enter <b>0 </b>(show icon and text) or <b>1</b> (show icon only).</div><div><br /></div><div><br /></div>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-90640234695424506372020-11-09T13:35:00.002-05:002020-11-09T13:35:32.785-05:00Disk Management and Explorer Show Different Drive Size<p> I ran into this issue today when trying to extend out the drive size on a data drive on our primary file server. After expanding the virtual disk in VMware, I brought up computer management (compmgmt.exe if you want to go command line quicker).</p><p>I expanded out the disk and immediately noticed that explorer didn't reflect that change after a refresh. Also, disk management could no longer access the disk to make any edits. I restarted the virtual disk service with no success. A restart also proved futile.</p><p>MAKE A BACKUP BEFORE RUNNING THESE COMMANDS!</p><p>After some quick research, here is the fix. Use DISKPART from an elevated command prompt. Just follow the commands below and choose the proper disk on your VM. After running the command, a quick refresh of explorer now shows the correct size.</p><p>Good luck!</p><p><br /><br /></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQlkvzKLxBWyS4z51XUjz_cj1s5kKCGPka2Ei0KwQEqwvdmCAOPkVRovMA1cuLzaTH250otM8_ozg-d2R7PPbFD5yjeDSHZNsoTQRJ12WcK61gq0xol6ae6SCdx92sLOZvsaipjw/" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img data-original-height="339" data-original-width="719" height="189" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQlkvzKLxBWyS4z51XUjz_cj1s5kKCGPka2Ei0KwQEqwvdmCAOPkVRovMA1cuLzaTH250otM8_ozg-d2R7PPbFD5yjeDSHZNsoTQRJ12WcK61gq0xol6ae6SCdx92sLOZvsaipjw/w400-h189/image.png" width="400" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><p></p>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-86277487638652649322020-10-13T11:11:00.002-04:002020-10-13T11:11:16.672-04:00vCenter 6.7 Resizing Disk Fails Invalid Operation for Device 0<p> This one has been around for some time but now due to the data drive on my Exchange server getting closer and closer to full, I had to find a fix and here it is. So simple and yet so hard to find on the web.</p><p>Checking the D: drive on the Exchange server showed the disk had a size of 150.254450347GB. This disk had been restored from Datto at some point in the past and since that date this was the size showing.</p><p>Whenever attempting to expand the drive vCenter thew this error: Invalid operation for device '0'.</p><p>I tried different sizes from adding just a few gigs to going all the way up to 200GB but getting the same error.</p><p>Ready for the fix? You won't believe how easy it was.</p><p>1. Log into vCenter using the flex (Flash) client instead of the HTML 5 client.</p><p>2. Resize your disk successfully.</p><p><br /></p><p>THAT'S IT!! Can you believe it? After all of these articles I read about changing the parameters on the VMX file, cloning the server, etc. etc. it turned out to be the behavior of the HTML 5 client. Let's hope VMware fixes this in the next versions of vCenter before they fully remove the Flash functionality.</p><p>Good luck!</p>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-44922732536726508042020-09-08T11:10:00.000-04:002020-09-08T11:10:11.483-04:00Fix Cisco ASDM Windows 10 Error "This app can't run on your PC"<p> Seems that Microsoft has done some switching of how the Windows Scripting Host path is found.</p><p>This is a simple fix.</p><p>1. Install ASDM as you normally would</p><p>2. Right click on the shortcut.</p><p>3. In the "Target" line you will see a very long path to wscript.exe. Simply change this path to C:\Windows\System32\wscript.exe (leave the invisible.vbs run.bat on the end as these scripts are used to open ASDM).</p><p>4. Apply the change.</p><p>After doing this I was able to open ASDM normally and use it to update ASDM and AnyConnect files on my ASA.</p><p>Good luck!</p>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-2914508999995695652020-06-09T09:22:00.000-04:002020-06-09T09:22:07.869-04:00Exchange Logging: Clear out the log filesHere is a simple PowerShell script that you can run against Exchange either manually as part of your maintenance routine or with Task Scheduler to clear out files when you need to.<div><br /></div><div>I must admit the first time I ran this on my Exchange 2013 server it took almost 5 minutes to complete and freed up over 30G of drive space from the multiple years of log files hidden all over.</div><div><br /></div><div>At the top of the script make sure you change the drive letter if needed to match where your Exchange log files are stored. Sadly I have seen many Exchange servers over the years with everything installed on C: so this script just assumes that.</div><div><br /></div><div>NOTE: Please make sure you have good backups in place and/or a snapshot of your virtual machine before running this. While I have tested the script with no negative effects, please do not assume this will always be the case. There is no substitution for good backups and a quick recovery plan if needed.</div><div><br /></div><div>If you want to run the file manually, just open PowerShell as administrator, navigate to where you have your script file saved (Example Name: ClearFiles.ps1). From there just type in ./ClearFiles.ps1 and wait on the script to complete the cleanup.</div><div><br />Good luck.<br /><div><br /></div><div><pre class="prettyprint prettyprinted" style="background-color: rgb(39, 40, 34) !important; border-radius: 8px; border: 1px solid rgb(136, 136, 136); box-sizing: inherit; color: #464646; font-size: 9pt; margin: 1em auto; outline: 0px !important; padding: 2px; white-space: pre-wrap; width: 734.344px;"><span class="typ" style="box-sizing: inherit; color: #a6e22e; outline: 0px !important;">Set</span><span class="pun" style="box-sizing: inherit; color: #f8f8f2; outline: 0px !important;">-</span><span class="typ" style="box-sizing: inherit; color: #a6e22e; outline: 0px !important;">Executionpolicy</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;"> </span><span class="typ" style="box-sizing: inherit; color: #a6e22e; outline: 0px !important;">RemoteSigned</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">
$days</span><span class="pun" style="box-sizing: inherit; color: #f8f8f2; outline: 0px !important;">=</span><span class="lit" style="box-sizing: inherit; color: #ae81ff; outline: 0px !important;">2</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">
$IISLogPath</span><span class="pun" style="box-sizing: inherit; color: #f8f8f2; outline: 0px !important;">=</span><span class="str" style="box-sizing: inherit; color: #e6db74; outline: 0px !important;">"C:\inetpub\logs\LogFiles\"
$ExchangeLoggingPath="</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">C</span><span class="pun" style="box-sizing: inherit; color: #f8f8f2; outline: 0px !important;">:</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">\Program </span><span class="typ" style="box-sizing: inherit; color: #a6e22e; outline: 0px !important;">Files</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">\Microsoft\Exchange </span><span class="typ" style="box-sizing: inherit; color: #a6e22e; outline: 0px !important;">Server</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">\V</span><span class="lit" style="box-sizing: inherit; color: #ae81ff; outline: 0px !important;">15</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">\Logging\"
$ETLLoggingPath</span><span class="pun" style="box-sizing: inherit; color: #f8f8f2; outline: 0px !important;">=</span><span class="str" style="box-sizing: inherit; color: #e6db74; outline: 0px !important;">"C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\ETLTraces\"
$ETLLoggingPath2="</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">C</span><span class="pun" style="box-sizing: inherit; color: #f8f8f2; outline: 0px !important;">:</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">\Program </span><span class="typ" style="box-sizing: inherit; color: #a6e22e; outline: 0px !important;">Files</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">\Microsoft\Exchange </span><span class="typ" style="box-sizing: inherit; color: #a6e22e; outline: 0px !important;">Server</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">\V</span><span class="lit" style="box-sizing: inherit; color: #ae81ff; outline: 0px !important;">15</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">\B</span><span class="kwd" style="box-sizing: inherit; color: #f92659; outline: 0px !important;">in</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">\Search\Ceres\Diagnostics\Logs</span><span class="str" style="box-sizing: inherit; color: #e6db74; outline: 0px !important;">"
Function CleanLogfiles($TargetFolder)
{
if (Test-Path $TargetFolder) {
$Now = Get-Date
$LastWrite = $Now.AddDays(-$days)
$Files = Get-ChildItem $TargetFolder -Include *.log,*.blg, *.etl, *.txt -Recurse | Where {$_.LastWriteTime -le "</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">$LastWrite</span><span class="str" style="box-sizing: inherit; color: #e6db74; outline: 0px !important;">"}
foreach ($File in $Files)
{Write-Host "</span><span class="typ" style="box-sizing: inherit; color: #a6e22e; outline: 0px !important;">Deleting</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;"> file $File</span><span class="str" style="box-sizing: inherit; color: #e6db74; outline: 0px !important;">" -ForegroundColor "</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;">white</span><span class="str" style="box-sizing: inherit; color: #e6db74; outline: 0px !important;">"; Remove-Item $File -ErrorAction SilentlyContinue | out-null}
}
Else {
Write-Host "</span><span class="typ" style="box-sizing: inherit; color: #a6e22e; outline: 0px !important;">The</span><span class="pln" style="box-sizing: inherit; color: #66d9ef; outline: 0px !important;"> folder $TargetFolder doesn</span><span class="str" style="box-sizing: inherit; color: #e6db74; outline: 0px !important;">'t exist! Check the folder path!" -ForegroundColor "white"
}
}
CleanLogfiles($IISLogPath)
CleanLogfiles($ExchangeLoggingPath)
CleanLogfiles($ETLLoggingPath)
CleanLogfiles($ETLLoggingPath2)</span></pre></div></div>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-25735359143955134292020-01-17T10:17:00.001-05:002020-01-17T10:17:28.466-05:00Disable User Editing Connections HP ThinPro 7.x (T530)So I ran into this one yesterday. After pushing out a configuration to our new HP T530 thin clients I was shocked to discover that one of the users had the ability with the OS locked down to delete their RDP connection icon.<br />
<br />
I quickly recreated it on the thin client so they could log back in. Today I set out to change the configuration and push it to all of our thin clients to prevent this from happening again. Here's how:<br />
<br />
1. Go into Administrator mode on ThinPro<br />
2. Right click on the respective connection on the desktop. Ex: RDP<br />
3. Select Edit and then go to Advanced.<br />
4. Remove the check box beside "Allow the user to edit this connection".<br />
<br />
This process is the same for all connection types on the thin client. I read through the Administrator guide and wasn't able to find a global setting so you'll need to do this for each connection type you are using.<br />
<br />
I hope this helps prevent you running into the same issue.<br /><br />Good luck!Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-71575180157313350092020-01-17T10:12:00.003-05:002020-01-17T10:12:21.399-05:00I'm Back!It's been quite a while since my last post as I had transitioned into a job where I was doing more sales and quoting than field work so I didn't really have anything to post.<br />
<br />
Now, I have changed jobs and on a daily basis I'm back into engineering and field work again.<br />
<br />
To that end, I'm sure I will run into new issues and processes that I'll put up here for everyone to see and use. I just hope the bits I add helps someone in IT like me get through a tough problem or issue and look like a champ doing it.<br />
<br />
Thanks to everyone that has messaged me with questions and support these past few years. This blog just serves as my small way of helping all of the people that have posted articles and on forums over the years that helped me out of a tight spot.<br />
<br />
I hope 2020 and beyond are great for all.<br />
<br />Thanks!Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-72365597612690467452017-10-30T11:27:00.000-04:002017-10-30T11:27:18.554-04:00Change 2040/2042 HPE SAN Ports from FC to iSCSIAs I work with these SANs a lot, one of the first things I have to do is change the ports over from the default FC mode to iSCSI mode so they can be connected to the SAN via 10G fiber connections.<br />
<br />
Believe it or not this is very tough to find out the exact syntax in the HPE documentation.<br />
<br />
Since it is a simple process, I have outlined it below:<br />
<br />
1. Connect to the SAN controller via Putty<br />
2. Run this command: set host-port-mode [FC | iSCSI | FC-and-iSCSI]<br />
<br />
Parameters:<br />
<br />
<ul>
<li>FC: Sets all ports to FC</li>
<li>iSCSI: Sets all ports to iSCSI</li>
<li>FC-and-iSCSI: Sets the first two ports to FC and the second two ports to iSCSI</li>
</ul>
<div>
<br /></div>
<div>
That's all there is to it. </div>
<div>
<br /></div>
<div>
Good luck!</div>
<br />
<pre class="KCSpara" style="background-color: white; color: #333333; font-family: "Courier new", "Andale mono", Monaco, monospace; font-size: small; margin-bottom: 10px; margin-top: 10px; padding: 0px; white-space: pre-line; width: 892.766px; word-break: normal; word-wrap: break-word;" xml:space="preserve">
</pre>
<pre class="KCSpara" style="background-color: white; color: #333333; font-family: "Courier new", "Andale mono", Monaco, monospace; font-size: small; margin-bottom: 10px; margin-top: 10px; padding: 0px; white-space: pre-line; width: 892.766px; word-break: normal; word-wrap: break-word;" xml:space="preserve">
</pre>
Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-21902827512938623372017-04-11T18:55:00.000-04:002018-05-14T22:50:43.447-04:00[SOLVED] Cisco VPN Client on Windows 10 (Including the new build April 2018 Update) - This works!<span style="color: #990000;">***Updated 05/14/18 **</span><br />
<span style="color: #990000;">***Please see my edits below for notes on builds 1803, 1709, and back.**</span><br />
<br />
Here's how to get it working in 2 easy steps:<br />
<br />
1. Download and install the Sonicwall 64-bit VPN client from <a href="https://www.dropbox.com/s/8yqw74n4mrgpff0/GVCSetup64_4.9.4.0306_EN.exe?dl=0" target="_blank">HERE</a> (as of this writing).<br />
<br />
2. Install the Cisco VPN client. <i><b> Edit:</b></i> If you get an error that it cannot run on this operating system then just extract the .exe file using WinRar or a similar program and run the .msi file. Problem solved.<br />
<ul>
<li><a href="https://www.dropbox.com/s/8xkijxtnu2lbdev/vpnclient-winx64-msi-5.0.07.0440-k9.exe?dl=0" target="_blank">64-bit file download</a> (vpnclient-winx64-msi-5.0.07.0440-k9.exe)</li>
<li><a href="https://www.dropbox.com/s/asn6q1nzrlx6su6/vpnclient-win-msi-5.0.07.0410-k9.exe?dl=0" target="_blank">32-bit file download</a> (vpnclient-win-msi-5.0.07.0410-k9.exe)</li>
</ul>
<div>
3. Perform a quick registry edit: (This step is almost always not optional any longer)</div>
<div>
<ul>
<li>Open Regedit</li>
<li>Browse to the registry key HKLM\SYSTEM\CurrentControlSet\Services\CVirtA</li>
<li>Select the display name to modify:</li>
<ul>
<li>x86 - "@oem8.ifn,%CVirtA_Desc%;Cisco Systems VPN Adapter" to "Cisco Systems VPN Adapter"</li>
<li>x64 - "@oem8.ifn,%CVirtA_Desc%;Cisco Systems VPN Adapter for 64-bit Windows" to "Cisco Systems VPN Adapter for 64-bit Windows"</li>
</ul>
<li>Reboot</li>
</ul>
</div>
<br />
The first two steps worked for me without the need for registry edit. I checked and the settings were already spelled correctly on my machine. Full disclosure my systems are clean Windows 10 installs without being upgrades.<br />
<br />
Without installing the Sonicwall client first you will get Error 433 after trying to connect. Checking the logs shows that it cannot download the key to complete the secure connection.<br />
<br />
What happens is that the Sonicwall client adds the DNE Lightweight filter network client on the machine. I tried getting it directly from Citrix and installing it that way but was unsuccessful.<br />
<br />
Using this method you can now get some more use out of the Cisco VPN client. If you prefer you can uninstall the Sonicwall client afterward. I've been told by several people that the DNE software remains even after the Sonicwall client is removed.<br />
<br />
<b style="background-color: yellow;">Build 1803</b><br />
<br />
<span style="color: red;">WARNING: You should uninstall the Cisco VPN client prior to running this upgrade so repairing it afterward will make it much easier.</span> All of the steps above still work on this latest build 1803 (OS Build 17134.1). No other edits required to keep it running.<br />
<br />
<b style="background-color: yellow;">Build 1709 Fall Creator's Update</b><br />
<br />
<span style="color: red;">WARNING: You should uninstall the Cisco VPN client prior to running this upgrade so repairing it afterward will make it much easier.</span> All of the steps above still work on this latest "Fall Creator's Update" upgrade of Windows 10.<br />
<br />
<b style="background-color: yellow;">Build 1703 Creator's Update EDIT: Updated 04/11/2017</b><br />
<br />
<span style="color: red;">WARNING: You should uninstall the Cisco VPN client prior to running this upgrade so repairing it afterward will make it much easier.</span> All of the steps above still work on this latest "Creator's Build" upgrade of Windows 10.<br />
<br />
Now for the not-so-fun-details. I didn't uninstall prior to the upgrade and proceeded to spend the next 30 minutes clearing out registry entries until I finally found the right one to let me reinstall the product using the .MSI file. After doing that, and making the registry edit, my VPN client is again working properly.<br />
<br />
<b style="background-color: yellow;">Version 1607 Build 14393.10 EDIT: Updated 08/03/2016</b><br />
<br />
All of the steps above still work on this latest "Anniversary" build of Windows 10. As with the 1511 build mentioned below, you will have to run a repair on the program or just do a clean install to get it working because Microsoft yet again determined that they would control which program we use.<br />
<br />
You can go <a href="https://www.microsoft.com/en-us/software-download/windows10">HERE</a> to download the latest version of the media downloader and get version 1607.<br />
<br />
And not to be left out <a href="https://blogs.technet.microsoft.com/windowsitpro/2016/08/02/whats-new-for-it-pros-in-the-windows-10-anniversary-update/">HERE</a> is a link to all of the new features in 1607 for IT pros.<br />
<br />
As I update my Windows 10 machines I'll post updates if there are any issues or errors I run across with this build. As I always say.... good luck.<br />
<br />
<b style="background-color: yellow;">BUILD 1511 EDIT: Updated 1/20/2016</b><br />
<br />
I'm getting a lot of feedback about networking being broken after 1511. I would highly advise you remove the Cisco VPN client and Sonic Global client software prior to installing build 1511.<br />
<br />
I have now upgraded three different systems to 1511. By removing both the Sonicwall and Cisco VPN software first, I had zero issues with it working properly afterward.<br />
<br />
However, if the upgrade went through already, here's what you can do to help mitigate these issues. There's no guarantee this is going to work but I have had two instances where the Cisco VPN software was removed by the 1511 upgrade and I was able to get it working by following the next steps below:<br />
<br />
First just reinstall the VPN client using the .MSI file and not the .EXE file. This will bypass Windows 10 checking the compatibility as I listed at the top. Next just make the registry edits again and you'll be good to go. After the registry edits, I have not had to restart but you can if you feel the need just to be sure.<br />
<br />
If this does not work as an extra effort you will need to reset all networking on Windows 10. Luckily this is pretty easy to do.<br />
<br />
- Open an administrator command prompt<br />
- Run <i>"netcfg -d"</i><br />
- Reboot and reconfigure your networking as needed.<br />
<br />
Here's a sample of the output you will see:<br />
<br />
<i>Microsoft Windows [Version 10.0.10586]</i><br />
<i>(c) 2016 Microsoft Corporation. All rights reserved.</i><br />
<i><br /></i> <i>C:\WINDOWS\system32\netcfg -d</i><br />
<i>SetupDiCallClassInstaller Erorr: 0x6</i><br />
<i>SetupDiCallClassInstaller Erorr: 0x6</i><br />
<i>SetupDiCallClassInstaller Erorr: 0x6</i><br />
<i>SetupDiCallClassInstaller Erorr: 0x6</i><br />
<i>SetupDiCallClassInstaller Erorr: 0x6</i><br />
<i>SetupDiCallClassInstaller Erorr: 0x6</i><br />
<i>SetupDiCallClassInstaller Erorr: 0x6</i><br />
<i>SetupDiCallClassInstaller Erorr: 0x6</i><br />
<i>NetSetup object deleted successfully on MUX</i><br />
<i>Successfully commited changes to the registry</i><br />
<i>Successfully commited changes to the registry</i><br />
<i>We are going to reboot now to complete the clean up. Save all of your work.</i><br />
<i></i><br />
<i>Press any key to continue…</i><br />
<br />
I hope this helps out with the additional headaches caused by 1511. As always if I find any more useful information with future updates to Windows 10 that affect this software, I'll be sure to update the post.<br />
<br />
Good luck!<br />
<br />
<br />
<br />
<br />
<br />Unknownnoreply@blogger.com312tag:blogger.com,1999:blog-7425517.post-86295843638058715112017-03-10T15:39:00.000-05:002017-03-10T15:39:33.629-05:00[SOLVED] How to Resolve Error 8614I ran into this issue with two Domain Controllers that would not replicate. DC2 was getting this error: <b style="background-color: white; color: #990000; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><i>"The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime"</i></b><br />
<br />
Below are the steps I went through in order to remedy this situation and worked like a charm.<br />
<br />
<b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><span style="font-size: medium;"><span style="color: #134f5c;">1. Verify which Domain Controller raised the </span><span style="color: #990000;">8614</span><span style="color: #134f5c;"> error by using:</span></span></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><i><span style="color: #990000;">> repadmin /showrepl</span></i></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">or</span><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><i><span style="color: #990000;">> repadmin /showreps</span></i></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">* Run this command line in any DC not DC-A.</span><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">* In addition, open </span><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">Event Viewer</b><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">, in </span><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">Applications and Services Logs</b><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">, </span><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">Directory Service</b><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">, you will see an error with </span><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">event ID <span style="color: #990000;">2042</span></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><span style="color: #990000;"><br /></span></b><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"></span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYsQoPCruIqTGiEa2iRwkRZxJLCU6rRmhZ0v39UuJCvjOqZ-3n4EpLKRbIE8gRf80kYSrXDQrf-Z0T6b5n6bbiNzJV0aXMiHPZyniZmuf3KgbQUh11SQb70PUXSqPaD8iqCdMm/s1600/Screenshot+from+2013-07-10+08:23:56.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="483" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYsQoPCruIqTGiEa2iRwkRZxJLCU6rRmhZ0v39UuJCvjOqZ-3n4EpLKRbIE8gRf80kYSrXDQrf-Z0T6b5n6bbiNzJV0aXMiHPZyniZmuf3KgbQUh11SQb70PUXSqPaD8iqCdMm/s640/Screenshot+from+2013-07-10+08:23:56.png" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; padding: 5px; position: relative;" width="640" /></a></div>
<br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">According to Mirosoft knowledge base, it's maybe because the domain controller contains what so called lingering objects: </span><a href="http://support.microsoft.com/kb/2020053" style="background-color: white; color: #888888; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px; text-decoration: none;">http://support.microsoft.com/kb/2020053</a><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">. This is the most possible reason for the error, because everything else are OK (time, default tombstone lifetime).</span><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><span style="color: #134f5c; font-size: medium;">2. So, I have to remove those lingering objects from all DCs:</span></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><i><span style="color: #990000;">> repadmin /removelingeringobjects DC-A.MYDOMAIN.COM 5b0b944e-de7b-4f96-942b-1e040169db36 "CN=Configuration,DC=MYDOMAIN,DC=COM"</span></i></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">+ DC-A.MYDOMAIN.COM : FQDN of DC-A</span><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">+ 5b0b944e-de7b-4f96-942b-1e040169db36 : the GUID of DC-A. You can get it from the command repadmin /showrepl DC-A.</span><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">+ "CN=Configuration,DC=MYDOMAIN,DC=COM": NC in which DC-A raise the error (from the output of the command repadmin /showrepl)</span><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><span style="color: #990000;"><br /></span></b><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"></span><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><span style="color: #990000;">* Repeat in all other DCs in forest.</span></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #134f5c; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: medium;"><b>3. Evaluate setting strict replication on all DCs in forest:</b></span><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><i><span style="color: #990000;">> repadmin /regkey * +strict</span></i></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><span style="color: #134f5c; font-size: medium;">4. Set "Allow replication with divergent and corrupt partner = 1" on all DCs:</span></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><span style="color: #990000;">> repadmin /regkey * +allowDivergent</span></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><span style="color: #134f5c; font-size: medium;">5. Flush DNS Cache and restart netlogon service in DC-A:</span></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">+ </span><i style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><b><span style="color: #990000;">> ipconfig /flushdns</span></b></i><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">+ </span><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><i><span style="color: #990000;">> net stop netlogon</span></i></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">+ rename netlogon.dns and netlogon.dnb file which locate in C:\Windows\System32\</span><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">+ </span><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><i><span style="color: #990000;">> ipconfig /flushdns</span></i></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">+</span><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><i><span style="color: #990000;"> > net start netlogon </span></i></b><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">(this command will re-create netlogon.dns and netlogon.dnb files)</span><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;">+ </span><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><i><span style="color: #990000;">> ipconfig /registerdns</span></i></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="background-color: white; color: #134f5c; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: medium;"><b>6. Check the replication of all DCs again using repadmin and Event Viewer</b></span><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><i><span style="color: #990000;">> repadmin /showrepl</span></i></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><span style="color: #134f5c; font-size: medium;">7. Delete "Allow replication with divergent and corrupt partner" or set "Allow replication with divergent and corrupt partner = 0" in the registry of all DCs.</span></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><i><span style="color: #990000;">> repadmin /regkey * -allowDivergent</span></i></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><b style="background-color: white; color: #134f5c; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;"><span style="font-size: medium;">8. Check the replication of all DCs again using repadmin and Event Viewer</span></b><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><br style="background-color: white; color: #666666; font-family: "Trebuchet MS", Trebuchet, Verdana, sans-serif; font-size: 13.2px;" /><span style="color: #666666; font-family: Trebuchet MS, Trebuchet, Verdana, sans-serif;"><span style="background-color: white; font-size: 13.2px;">If you performed everything correctly, the Domain Controllers will now replicate successfully.</span></span>Unknownnoreply@blogger.com1tag:blogger.com,1999:blog-7425517.post-91317183246998760302017-03-07T09:51:00.001-05:002017-03-07T10:21:02.228-05:00How to install a HPE CPxxxxxx.scexe firmware update on your ESXi Host<div style="background-color: white; border: none; color: #333333; font-family: "PT Sans", Arial, Helvetica, sans-serif; font-size: 14px; margin-bottom: 15px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Follow the steps below to make it happen:</div>
<div style="background-color: white; border: none; color: #333333; font-family: "PT Sans", Arial, Helvetica, sans-serif; font-size: 14px; margin-bottom: 15px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
(The most common reason for failure is caused by the missing executable permission)</div>
<ul style="background-color: white; border: none; color: #333333; font-family: "PT Sans", Arial, Helvetica, sans-serif; font-size: 14px; margin: 0px 0px 15px 16px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
<li style="border: none; margin: 0px; padding: 0px; text-align: left; vertical-align: baseline; word-wrap: break-word;">Enable SSH on your ESXi host (configuration tab, Security Profile, Properties)</li>
<li style="border: none; margin: 0px; padding: 0px; text-align: left; vertical-align: baseline; word-wrap: break-word;">Copy the CPxxxxxx.scexe file to /tmp on your ESXi Host using eg. WinSCP</li>
<li style="border: none; margin: 0px; padding: 0px; text-align: left; vertical-align: baseline; word-wrap: break-word;">Logon as root at your ESXi host and change to /tmp</li>
<li style="border: none; margin: 0px; padding: 0px; text-align: left; vertical-align: baseline; word-wrap: break-word;">Check with “ls” if your CP file is there</li>
<li style="border: none; margin: 0px; padding: 0px; text-align: left; vertical-align: baseline; word-wrap: break-word;">Change file permission to executable: “chmod +x CPxxxxxx.scexe”</li>
<li style="border: none; margin: 0px; padding: 0px; text-align: left; vertical-align: baseline; word-wrap: break-word;">Run the file: “./CPxxxxxx.scexe”</li>
</ul>
<div>
<span style="color: #333333; font-family: "pt sans" , "arial" , "helvetica" , sans-serif;"><span style="font-size: 14px;">After you have completed these steps, reboot the host and you are done.</span></span><br />
<span style="color: #333333; font-family: "pt sans" , "arial" , "helvetica" , sans-serif;"><span style="font-size: 14px;"><br /></span></span></div>
<div>
<span style="color: #333333; font-family: "pt sans" , "arial" , "helvetica" , sans-serif;"><span style="font-size: 14px;"><br /></span></span></div>
<div>
<span style="color: #333333; font-family: "pt sans" , "arial" , "helvetica" , sans-serif;"><span style="font-size: 14px;">Good luck!</span></span></div>
Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-88354567093017797552016-10-06T08:44:00.000-04:002016-10-28T11:04:31.192-04:00Windows Server 2016 Licensing ExplainedMicrosoft Windows Server 2016 became officially available recently on 9/26/2016 and as I'm sure you have heard the licensing changed from a per processor model to a per core model.<br />
<br />
Before you read any futher here's a simple thing to keep in mind when purchasing this new licensing model:<br />
<br />
<b>Once you have enough cores purchased (16 core minimum) to cover the metal, every 8 packs (16 cores) of licensing cover 2 more virtual machines.</b><br />
<br />
The first thing that people have had a hard time understanding is the new "Per Core" licensing and even with Microsoft's own explanation it seemed impossibly hard to understand so I'm going to try to break it down simply so everyone can get a quick grasp on how it works.<br />
<br />
<b>FACT #1</b><br />
Server 2016 licensing is sold in 2 core packs. <i><b>The very minimum no matter how small your server is a 16 core purchase.</b></i> Microsoft says this would be the same cost as Server 2012 R2 Standard licensing.<br />
<br />
<b>EXAMPLE</b>: <br />
You purchased a small server for a business that has only 4 cores and 8G RAM. The correct licensing for Server 2016 would be 16 cores purchased.<br />
<br />
<b>FACT #2</b><br />
You MUST cover all cores on the server prior to taking into consideration the number of virtual machines if it is a VM host.<br />
<br />
<b>EXAMPLE: </b><br />
Your server has 2 processors that are 12 cores each. Total of 24 cores. You plan on only running 2 virtual machines on this server. You must purchase 12 x 2 packs of Server 2016 core licensing. If you move up to 4 virtual machines guess what? You're going to need to purchase another 4 packs of licensing to cover the next two. This is a total of 16 packs and every 8 packs = 2 VMs.<br />
<br />
<b>FACT #3</b><br />
After you have covered the number of cores on the physical server, every 8 packs (16 cores of licensing) after that will give you two more virtual machines of no more than 8 cores each.<br />
<br />
<b>EXAMPLE:</b><br />
Your plan is to run 5 virtual machines on a server with 2 x 8 core processors. You must purchase the initial 8 packs (16 cores) to cover the server's physical processors. Then from there you must purchase another 8 packs for the next 2 virtual machines and then another 8 packs for the 5th virtual machine leaving you 1 more virtual machines you can build without needing more licensing.<br />
<br />
So far this news isn't extremely terrible but there are two more things on top of all of this you need to know.<br />
<br />
1. Once you approach the 8th virtual machine, it becomes more cost effective with the new licensing model to purchase the Datacenter edition. The cost is going to be very high for customers so virtual server sprawl is going to start being a real issue.<br />
<br />
2. Microsoft says you MUST license a virtual host to carry all of your virtual machines in the event of a failure of one host. This is a massive cost purchase in the event of a multi-host virtual environment.<br />
<br />
Let me explain that one a bit better. You have a decent sized business with three VMware hosts. Each host has 2 x 10 core processors and you're running 24 virtual machines evenly spaced out over all three hosts so you have a 3 x 8 scenario with your virtual machines.<br />
<br />
Microsoft now says you must purchase not just a total of 96 packs (remember 2 cores per pack) but you must purchase a total of 96 packs x 3 hosts in the event that two of them were to go offline and you have to run all of your VMs on one host and because you can vMotion them around. This simply means a business would now need to purchase 288 cores of licensing to be properly licensed.<br />
<br />
I know this is a bit wordy but I hope it makes a little better sense than all of the other confusing information out there about it. I'm confident this is correct as our licensing supplier has been through the offical training and this was how it was explained to me.<br />
<br />
Good luck.<br />
<br />
<br />
<b><br /></b>
<br />
<br />Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-43544871232467759662016-09-19T20:45:00.000-04:002016-10-28T11:03:47.100-04:00ESXi 6 - The Primary GPT table states that the backup GPT is located beyond the end of the diskI was attempting to reinstall ESXi 6.0 on a server that had a previous datastore on a RAID 5 array. The array was missing a disk so I destroyed and recreated the array minus the missing disk and decided to just do without the storage of the one disk.<br />
<br />
When I attempted to add the array into my fresh ESXi 6 load I got this error:<br />
<br />
<i>Call "HostDatastoreSystem.QueryVmfsDatastoreCreateOptions" for object "ha-datastoresystem" on ESXi "xxx.xx.xxx.xxx" failed</i><br />
<i><br /></i>
Not knowing how to fix this I did some research and found out a quick and easy repair.<br />
<br />
1. Enable SSH on the VMware host.<br />
2. Connect and run <i>"ls -lha /vmfs/devices/disks" </i>and this will list your disks with their disk ID.<br />
3. Run the following command on the disk <i>"partedUtil getptbl /vmfs/devices/disks/naa.5000c501234597a333"</i><br />
<i><br /></i>
This will return the following output if you have chosen the correct disk:<br />
<br />
Error: The primary GPT table states that the backup GPT is located beyond the end of disk. This may happen if the disk has shrunk or partition table is corrupted. Fix, by writing backup table at the end? This will also fix the last usable sector appropriately as per the new reduced size. diskPath (/dev/disks/naa.5000c501234597a333) diskSize (286748000) AlternateLBA (570310655) LastUsableLBA (570310622)<br />
Warning: The available space to /dev/disks/naa.5000c501234597a333 appears to have shrunk. This may happen if the disk size has reduced. The space has been reduced by (283562656 blocks). You can fix the GPT to correct the available space or continue with the current settings ? This will also move the backup table at the end if it is not at the end already. diskSize (286748000) AlternateLBA (570310655) LastUsableLBA (570310622) NewLastUsableLBA (286747966)<br />
Error: Can’t have a partition outside the disk!<br />
Unable to read partition table for device /vmfs/devices/disks/naa.5000c501234597a333<br />
<br />
Apparently deleting the RAID array didn't fully erase all of the previous partition information. Now it needs to be cleared manually.<br />
<br />
4. Run the following to clear it: <i>"partedUtil setptbl /vmfs/devices/disks/naa.5000c501234597a333"</i><br />
<i><br /></i>
That's all there is to it. By creating a msdos partition on the disk it will clear the previous error and allow esxi to create a datastore there with no errors.<br />
<br />
Good luck!<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
This is veUnknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-88349186598811773972016-07-01T10:07:00.001-04:002016-07-01T10:07:16.131-04:00[SOLVED] Blank Screen after ECP Login Exchange 2013/2016Issue:<br />
<br />
After logging into the Exchange ECP with the correct credentials you get just a blank screen with no errors messages. This will almost always happen if you remove a certificate using the certificates MMC or even sometimes if you remove one using the ECP. <br />
<br />
Below is what you need to check to fix this problem:<br />
<br />
Since this change is not reflected in the backend website you have to make sure that the Exchange ECP site is looking at the same certificate in both locations.<br />
<br />
<b>IIS Default Site SSL Certificate</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPIJLHcFaBwEuR-6UuFSYoFgaykfRW9yamIqK0nBP2grjRTgb8SfJ2P3B7hNzz25WG3duG3yTqJumlP5LUZcKUA5yUhzHpXMZ2CGtgDkHnyA1J4TpynP1xfwaG52V_yebNRjxdDA/s1600/IIS+Default.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="236" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPIJLHcFaBwEuR-6UuFSYoFgaykfRW9yamIqK0nBP2grjRTgb8SfJ2P3B7hNzz25WG3duG3yTqJumlP5LUZcKUA5yUhzHpXMZ2CGtgDkHnyA1J4TpynP1xfwaG52V_yebNRjxdDA/s400/IIS+Default.png" width="400" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<b>IIS Back End SSL Certificate</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDEyS_UdplJe4O0pcj0MffyJQPSi_Wb9Rg0gkmEQu7IN6xJBhhgnbp08sOITiAArMHcrSTRY1u077kRc0oRivzacdVxOHgRN8qXbGk9DCuRsdiXRxkOdW_9atmcnn2E29x9eH7EQ/s1600/IIS+backend.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="232" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDEyS_UdplJe4O0pcj0MffyJQPSi_Wb9Rg0gkmEQu7IN6xJBhhgnbp08sOITiAArMHcrSTRY1u077kRc0oRivzacdVxOHgRN8qXbGk9DCuRsdiXRxkOdW_9atmcnn2E29x9eH7EQ/s400/IIS+backend.png" width="400" /></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDEyS_UdplJe4O0pcj0MffyJQPSi_Wb9Rg0gkmEQu7IN6xJBhhgnbp08sOITiAArMHcrSTRY1u077kRc0oRivzacdVxOHgRN8qXbGk9DCuRsdiXRxkOdW_9atmcnn2E29x9eH7EQ/s1600/IIS+backend.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><br /></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDEyS_UdplJe4O0pcj0MffyJQPSi_Wb9Rg0gkmEQu7IN6xJBhhgnbp08sOITiAArMHcrSTRY1u077kRc0oRivzacdVxOHgRN8qXbGk9DCuRsdiXRxkOdW_9atmcnn2E29x9eH7EQ/s1600/IIS+backend.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><br /></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDEyS_UdplJe4O0pcj0MffyJQPSi_Wb9Rg0gkmEQu7IN6xJBhhgnbp08sOITiAArMHcrSTRY1u077kRc0oRivzacdVxOHgRN8qXbGk9DCuRsdiXRxkOdW_9atmcnn2E29x9eH7EQ/s1600/IIS+backend.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><br /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
The certificate choice in both of these locations have to match exactly then the issue is resolved. <br />
<br />
Good luck!Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-69404192335884305052016-04-28T19:57:00.004-04:002016-04-28T19:57:51.517-04:00[SOLVED] Windows 10 File Explorer Not Responding, Freezing, Locking UpSo lately this problem for me has gotten out of hand. After some research on the web and a couple of Microsoft articles here's what you can do to fix this issue:<br />
<br />
1. Open Control Panel<br />
2. Select File Explorer Options<br />
3. Click on CLEAR at the bottom beside of "Clear File Explorer History".<br />
<br />
Apparently bad data in this windows can cause Explorer to freeze up.<br />
<br />
One more thing. If this doesn't work then change the option at the top of the File Explorer Options to open to "This PC" instead of the default which is quick access.<br />
<br />
Hope this helps if you're running into this issue.<br />
<br />
<br />Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-24434149714269805452016-01-04T10:47:00.001-05:002016-01-04T10:47:45.204-05:00UCS login Error: Java.io.IOException: Invalid HTTP ResponseSo trying to check our UCS server I ran into this issue today.<br />
<br />
If you aren't running the latest UCS software then certain versions of Java will toss this error. If you need to get logged in and don't have the option for updating the UCS software right away then here's how you can get around it.<br />
<br />
Just enable HTTP via SSH and you can then login. Remember to disable this once you have your UCS software and Java versions current because until you do everything is transmitted in clear text.<br />
<br />
<i>UCS# scope system</i><br />
<i>UCS /system# scope services</i><br />
<i>UCS /system/services# enable http</i><br />
<i>UCS /system/services# disable http-redirect</i><br />
<i>Warning: When committed, this closes all web sessions</i><br />
<i>UCS /system/services# commit</i><br />
<i><br /></i>
Once this is done now you can connect to the UCS Manager without the error. Unknownnoreply@blogger.com1tag:blogger.com,1999:blog-7425517.post-89319829166479173792015-11-17T15:48:00.001-05:002015-11-17T15:48:14.732-05:00Exchange Calendar Permissions Using PowerShellWith Exchange 2010 and now extended into Exchange 2013 and 2016, Microsoft added the ability to manage permissions on folders in a user's email account through PowerShell.<br />
<br />The most common is managing calendar permissions. Here's an example of some commands:<br />
<br />
To get the permission on a mailbox:<br />
<br />
<i>Get-MailboxPermission -Identity "Boss Hog"</i><br />
<i><br /></i>
To get the permissions of a subfolder:<br />
<br />
<i>Get-MailBoxFolderPermission -Identity "Boss Hog:\Calendar"</i><br />
<i><br /></i>
To change permissions on a subfolder:<br />
<br />
<i>Add-MailboxFolderPermission -Identity "Boss Hog:\Calendar" -user "Roscoe" -AccessRights Reviewer</i><br />
<i><br /></i>
To remove permissions on a subfolder:<br />
<br />
<i>Remove-MailboxFolderPermission -Identity "Boss Hog:\Calendar" -user "Roscoe"</i><br />
<i><br /></i>
<i><br /></i>
Here's also a list of all of the permissions you can assign. <a href="https://support.office.com/en-us/article/Share-your-calendar-information-353ed2c1-3ec5-449d-8c73-6931a0adab88" target="_blank">HERE</a> is a link to Office support with some details on what each of these permission levels can do.<br />
<br />
<br />
<ul>
<li>None</li>
<li>Free/Busy</li>
<li>Free/Busy, Subject, Location</li>
<li>Contributor</li>
<li>Reviewer</li>
<li>Nonediting Author</li>
<li>Author</li>
<li>Publishing Author</li>
<li>Editor</li>
<li>Publishing Editor</li>
<li>Owner</li>
</ul>
<div>
Hopefully this will give you some assistance when you need to edit calendar permissions without the need to login as that user account and then use Outlook to make the edits. Granted that's the GUI route but this works best from an Exchange administrator's perspective.</div>
<div>
<br />Good luck!</div>
<br />
<i><br /></i>
<i><br /></i>Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-7425517.post-22193789632255771012015-08-27T16:44:00.003-04:002016-01-20T11:11:18.607-05:00Convert Cisco 1700/2700 Series APs to Autonomous ModeFor smaller environments it's not always cost effective to buy a WLC so the need arises to put the APs into autonomous mode.<br />
<br />
Since the 1700/2700 series APs ship in lightweight mode, here's how to change them over to autonomous mode:<br />
<br />
1. Log in to www.cisco.com<br />
2. Click on "Support" at the top of the page.<br />
3. Click the "Downloads" button.<br />
4. Select "Wireless" from the left side.<br />
5. Select "Access Points".<br />
6. Select "Cisco 1700 Series Access Points".<br />
7. Select Cisco Aironet 1702i Access Points".<br />
8. Click "Autonomous AP IOS Software". As of this writing the latest version is 15.3.3-JBB1(ED)<br />
9. Connect to the AP using a console cable.<br />
10. Power on the AP. If you have a POE switch then that way is best. If not use a power injector or power cord for the AP.<br />
11. Start a TFTP server on your laptop or PC and set the LAN interface to 10.0.0.1 255.25.255.0<br />
12. Open a serial connection to the AP. Once the boot up finishes log in. Remember the default password is Cisco.<br />
13. Enter the following commands in this order:<br />
<br />
<ul>
<li><i>enable</i></li>
<li><i>debug capwap console cli</i></li>
<li><i>debug capwap client no-reload</i></li>
<li><i>capwap ap ip address 10.0.0.2 255.255.255.0</i></li>
<li><i>capwap ap ip default-gateway 10.0.0.1</i></li>
<li><i>archive download-sw /force /overwrite tftp://10.0.0.1/filename.tar</i></li>
</ul>
<div>
14. Once the upload, extraction, and installation is complete (3 to 5 minutes) the AP will restart.</div>
<div>
15. Once the restart is completed log in and do a show <i>version command</i>.</div>
<div>
16. Verify the AP now provides access to the full suite of IOS commands.</div>
<div>
17. Configure as needed.</div>
<div>
<br /></div>
<div>
If you get any errors from the AP while it is still in lightweight mode during this process I find it easiest to just put these commands into a text file and then paste them into Putty vs trying to type them in with the lines scrolling.</div>
<div>
<br /></div>
<div>
I hope this helps you get your APs setup faster and don't have to deal with a complicated process.</div>
<div>
<br />
Good luck.</div>
<br />
<br />Unknownnoreply@blogger.com7