Things You Can Open in Windows From the Run Command

With all the work I do on Windows Server knowing these commands is a real time saver instead of always having to run things down through the GUI.  This isn't by any means a full list but here is a list of some of the things you can access in Windows without the mouse (type these at a Run Prompt):

    control = Opens the Control Panel Window

    control admintools = Opens the Administrative Tools

    control keyboard = Opens the Keyboard Properties Window

    control color = Opens the Display Properties (at the Appearance Tab in Windows 7)

    control folders = Opens the Folder Options Window

    control fonts = Opens the Font Policy Management Window

    control international (or intl.cpl) = Opens Regional and Language Options

    control mouse (or main.cpl) Opens mouse properties

    control userpasswords = Opens the User Accounts Editor

    control userpasswords2 (or netplwiz) = Opens User Account Access Restrictions

    control printers = Opens the Printers and Faxes Window

    control desktop (Windows Vista/7 only) = Opens Control Panel>Personalization

    appwiz.cpl = Opens the Add or Remove Programs Utility

    optionalfeatures = opens the Add or Remove Windows Component utility

    desk.cpl = Opens the Display Properties (Themes Tab)

    hdwwiz.cpl = Opens the Add Hardware Wizard

    irprops.cpl = Opens the Infrared utility (does nothing if no IR devices are installed)

    joy.cpl = Opens  Game Controller Settings

    mmsys.cpl = Opens the Sound and Audio device properties window (Volume Tab)

    sysdm.cpl = Opens the System Properties window

    telephon.cpl = Opens the Phone and Modem options window

    timedate.cpl = Opens the Date and Time Properties window

    wscui.cpl = Opens the Windows Security Center in XP (opens the Action Center in Windows Vista/7)

    access.cpl = Opens the Accessibility Options Window (does not work in Windows 7)

    wuaucpl.cpl = Opens Automatic Updates

    powercfg.cpl = Opens the Power Options Properties window

    ncpa.cpl = Opens the Network Connections window

    bthprops.cpl = Opens the Bluetooth Control window (does nothing if no bluetooth devices are installed)

    certmgr.msc = Opens the Certificate Management MMC

    compmgmt.msc = Opens the Computer Management

    comexp.msc (or dcomcnfg) = Opens the Computer Services MMC

    devmgmt.msc = Opens Device Manager

    diskmgmt.msc = Opens Disk Management

    eventvwr.msc (or eventvwr) = Opens the Event Viewer

    fsmgmt.msc = Opens Shared Folders

    napclcfg.msc = Opens the NAP client configuration tool

    services.msc = Opens Service Manager

    taskschd.msc (or control schedtasks) = Opens the Task Scheduler

    gpedit.msc = Opens the Group Policy MMC

    lusrmgr.msc = Opens Local Users and Groups

    secpol.msc = Opens the Local Security Settings window

    ciadv.msc = Opens the Indexing Service Window

    ntmsmgr.msc = Opens the Removable Storage Manager

    ntmsoprq.msc = Opens the Removable Storage Operator Requests

    wmimgmt.msc = Opens the WMI (Windows Management Instrumentation) window

    perfmon.msc (or perfmon) = Opens the Performance Monitor

    mmc = Opens a blank Microsoft Management Console

    mdsched = Opens the Memory Diagnostics tools

    dxdiag = Opens DirectX diagnostics tools

    odbcad32 = Opens the ODBC Data Source Administration window

    regedit (or regedt32) = Opens the Registry Editor (these commands actually open different Registry editors, google for the differences)

    drwtsn32 = Opens Dr. Watson

    verifier = Opens the Driver Verification Manager

    cliconfg = Opens the SQL Server Client Network Utility

    utilman = Opens the Utility Manager (in Windows 7 this opens the Ease Of Access Center)

    msconfig = Opens the System Configuration Utility

    sysedit = Opens the System Configuration Editor

    syskey = Opens the Windows Account Database Security Manager

    explorer = Opens Windows Explorer

    iexplorer = Opens Internet Explorer

    wab = Opens the Windows Address Book

    charmap = Opens the Character Map

    write = Opens Wordpad

Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS)

Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS)

If you're getting this error trying to move mailboxes from Exchange 2003 or 2007 to Exchange 2010 then here's the simple fix.

• Go into the user's account in AD and go to the Security tab. 
• Check the box to Inherit permissions. If it's already set, clear it, force an AD update, and then check the box again. 

I had 2 boxes do this on my last Exchange migration. It's a real pain to find out after you've waited on the mailbox to copy but a very easy fix.

Using Backup Exec 2010 R3 to Restore Exchange Data

I borrowed this write up from the Symantec Connect Community here.  This is very well written process to restore Exchange data with a minimum of fuss (if there is such a thing dealing with tape drives).

Restoring Data in Exchange

Before restoring data, a few things need to be checked and enabled:
● Check that there is sufficient disk space available. This is because Backup Exec will stage the entire Exchange Information Store before restoring any individual items.
● The default location for temporary files is: C:\Temp. This needs to be changed to the drive with the most space available.
This is done as follows: Tools, Options, Restore (Path on media server for staging temporary restore data…).
● The user concerned needs to be logged out of their email.
● Make sure the user informs the Service Desk/engineer of exactly what they want restored.


Restoring Data Using a Duplicate Copy

This method duplicates an Exchange Information Store to the local server hard drive. The reason for using this method would be due to a large Exchange IS database size, or wanting to stage the restore once.
Should a restore fail during normal restore process, the entire Exchange IS needs to be re-staged. This will take time depending on the database’s size.

Do the following:
● Check for a drive with sufficient disk space for the restore. The available space must be at least the size of the Exchange IS.
● On the target drive, create a folder called: Exchange Restore.
● Open Backup Exec, and go to Devices. Right-click Backup-to-Disk Folders, and choose: New Backup-to-Disk Folder. Give it the name: Exchange Restore, and point it to the target drive and folder. Click OK.
● Go to Job Setup, select the job that runs for the site, and under Backup Tasks, choose: New job to duplicate backup sets. Choose OK.
● Browse the server concerned, and under Microsoft Information Store, choose the Information Store you want to stage to disk. You need to select the date/media.
● Choose the new Backup-to-Disk folder created for this purpose, and click Run Now. Let the job complete.
● Make a note of the name of the image created by this job (Devices --> Backup-to-Disk Folders --> Exchange Restore).
● Click the Restore tab in Backup Exec. When the “Welcome to the Restore Wizard” screen shows, deselect the tab to “Always launch the Restore Wizard from the Restore Button”, and click Next.
● Under Selections, choose View by Media, and chose the image created in the duplication job.
● Find the user’s mailbox that needs to be restored, open the mailbox, and click Top of Information Store.
● From here, individual emails, contacts and folders can be restored.
● Select what needs to be restored.
● Click Resource Credentials, and then Test All to make sure that the security credentials are correct,
● Click Run Now.
● Go to Job Monitor, and the job should run successfully. This will restore data straight into the user’s mailbox.

Outlook 2010 Certificate Error After Migration

I recently did a migration from Exchange 2003 to Exchange 2010.  The new environment uses a CAS/HT server and a mailbox only server.  Everything went great until the first user opened up Outlook 2010 and there was the dreaded SECURITY ALERT stating that the certificate is invalid or does not match the name of the site.

Here's the fix for that little issue.

Assuming you have already installed the UCC certificate on the Exchange server you will need to enable the cert.  You can run the following command to enable the certificate.

Enable-ExchangeCertificate -Thumbprint 59 5e a4 7c f0 4e 66 da 3d 6b 29 95 f7 c4 b1 72 ca 0f 82 -Services "SMTP, IIS"

Note: The thumbprint needs to match the certificate you installed.  You can use either the GET-CERTIFICATE command or use the MMC, select the certificate, click on details, and then click on thumbprint.

For each CAS server that is installed a Service Connection Point (SCP) record is created for the autodiscover service for internal clients.

When i go into Outlook i get the following error:



This happens because the connection is using the NetBIOS name of mbx1 which does not match the name on the certificate. If you run Get-ClientAccessServer -Identity mbx1 | FL you would see that the AutoDiscoverServiceInternalUri says https://MBX1/Autodiscover/Autodiscover.xml and this does not match the certificate.  If you also check the other services and you will get the same results for OAB, EWS, Outlook Anywhere (OA) and Exchange Active Sync (EAS).  The fix is to update all theses internal URL links to match the name on the cert.

• Set-ClientAccessServer -Identity "mbx1" –AutodiscoverServiceInternalURI https://nlb.nwtraders.msft/autodiscover/autodiscover.xml

• Set-WebServicesVirtualDirectory -Identity "mbx1\EWS (Default Web Site)" –InternalUrl  https://nlb.nwtraders.msft/EWS/Exchange.asmx

• Set-OABVirtualDirectory -Identity “mbx1\OAB (Default Web Site)” -InternalURL https://nlb.nwtraders.msft/OAB

• Enable-OutlookAnywhere -Server mbx1 -ExternalHostname “nlb.nwtraders.msft” -ClientAuthenticationMethod “NTLM”

• Set-ActiveSyncVirtualDirectory -Identity “mbx1\Microsoft-Server-ActiveSync (Default Web Site)” -InternalURL https://nlb.nwtraders.msft/Microsoft-Server-Activesync

Note: If you do decide to enable OA externally it is important to note that the external host name value configured for Outlook Anywhere must match the Certificate Principal Name (CPN) on the certificate used by clients and must match the end point property in the client.

In order for Subject Alternate Name (SAN) certificates to be used for clients to connect to the OA service, where the CPN does not match the msstd value configured in the Outlook client profile (but the URL is listed in the SAN part of the certificate), certain conditions need to be met, these are listed below:-

• Outlook 2007 or higher
• Vista SP1

After this is completed once you open Outlook 2010 you will no longer get the certificate error.

How to Move Public Folders to Exchange 2010

Move public folder data to Exchange 2010

Public folders are an optional feature in Exchange 2010. If all client computers in your organization are running Microsoft Office Outlook 2007 or later, then public folders are an optional feature. However, if Outlook 2003 clients are in use, then public folders are required. In addition, if you're currently using public folders for collecting, organizing, or sharing documents and other information and you want to continue doing so, you can use public folder replication to move your public folder data to Exchange 2010.

How do I do this?
You can use the Exchange Management Console to perform this task.

1. In the Console tree, click Toolbox.
2. In the Result pane, double-click Public Folder Management Console. The Public Folder Management Console appears.
3. In the public folder tree, click or expand Default Public Folders, and then select the parent public folder of the public folder that you want to move to Exchange 2010. Note: To configure replication for the offline address book (OAB) or for Schedule+ free/ busy information, expand System Public Folders, and then click OFFLINE ADDRESS BOOK or SCHEDULE+ FREE BUSY.
4. In the Result pane, right-click the public folder you want to replicate to Exchange 2010 and select Properties.
5. On the Replication tab, click Add to select an Exchange 2010 public folder database and then click OK.
6. By default, Exchange uses the replication schedule configured for the public folder database. To create a custom replication schedule for the public folder, clear the Use public folder database replication schedule check box and select one of the settings in the list.
7. To create a customized schedule, click Customize.
8. To set the schedule, click the time grid in the Schedule dialog box. Public folder replication will run during the time slots that you specify.
9. Click OK to close the Schedule dialog box.
10. To specify the age limit for items in this public folder, type the number of days in the Local replica age limit (days) box. Items that have reached the age limit are deleted.

Note: Age limits should be used for public folders only. They should not be used for System Folders, such as OFFLINE ADDRESS BOOK or SCHEDULE+ FREE BUSY.

1. Click OK to close the Properties dialog and to save your changes.
2. Repeat Steps 4-11 for each public folder you want to move to Exchange 2010.

How do I know this worked?

You can use the Get-PublicFolder cmdlet in the Exchange Management Shell to verify replicas on the Exchange 2010 public folder database. For example, to determine the replicas for all public folders in the public folder tree, run the following command: Get-PublicFolder -Recurse | Format-List Name,Replicas To determine the replicas for all system folders, run the following command: Get-PublicFolder \NON_IPM_SUBTREE | Format-List Name,Replicas