Windows 2008 core quick guide

A quick command guide for Windows 2008 core

How to add a role or feature on Windows core

one of the ways is to use disk. Another is to use ocsetup. Below is an example of disk usage: dism /online /enable-feature /featurename:snmp-sc

NETSH set DNS servers priority by index

example for the interface named "LAN", we set higher priority one DNS netsh interface ipv4 add dnsserver "LAN" static 192.168.0.254 index=1

Windows 2008 core remote management

The quickest way to enable core remote management is by starting sconfig.cmd and selecting 4) Configure Remote Management You need to do additional manipulations to enable Volume Management also.

Business management of IT

http://www.cpaaustralia.com.au/documents/business-management-of-IT.pdf

IT governance explained to business directors

http://www.cpaaustralia.com.au/documents/ITgovernance-guide-for-company-directors.PDF

Powershell script to extract table from html

had to extract table from HTML and this is what I came up with for a particular case: $firstTag=' <tr class="Row">' $secondTag='</tr> ' cd c:\Temp\ foreach ($line in (Get-Content *.html)) { if ($line -match $firstTag) { do {$foreach.MoveNext(); $line=$foreach.current | Out-File -FilePath 'out.txt' -Append -Encoding Unicode; } until ($foreach.current -match $secondTag) continue } }
Note that I had to twick original html files from Cp-1252 to Unicode - using utility from http://sourceforge.net/projects/cp-converter/ I used http://powergui.org/ to debug the script

PMP related info

http://www.maxwideman.com/
http://sridharpeddisetty.blogspot.ch/2008/05/my-notes-on-pmp-formulas.html
http://sridharpeddisetty.blogspot.ch/2010/11/my-notes-on-pmbok-v4.html
http://sridharpeddisetty.blogspot.ch/2008/05/my-notes-on-pmp.html

http://www.iowacom.net/1.pdf
http://www.iowacom.net/test2.pdf

Cisco ATA-187 unregistered - workarounds

1) try to enable only UDP in System > Security Profile > Phone Security Profile - ATA-187 SIP non-secure.

2) with ssh enabled  try to telnet to port 7870 and run reboot cli to softreboot the ATA

see more tips at https://supportforums.cisco.com/message/3775179

Windows 8 is essentially Windows 7 with new GUI

For the set of old apps Windows 8 is the same as Windows 7, I was able to install without any problem, SAP GUI 7.20, TrendMicro antivirus. There is embeded Windows Defender in Windows 8, but it has to be switched off to let Trend to run.

The magic is unlocked when you have real "METRO" app in hand. Then Windows 8 (with WinRT) will shine differently. As you know, WinRT gives an asyncronous framework for fluid interface, it is more secure, as it run apps in isolated enviroment where not all user right are immediately given to an app, etc, etc.

Windows 8 Enterprise first look

Hi, I'm trying to install Windows 8 Enteprise from the DVD I received from Microsoft about a month ago. Looks good, setup is hyper easy.

Now I need to activate it and booms! I do not have Volume activation in my network. Actually there is a update that fixes that http://support.microsoft.com/kb/2757817, but it is not available in our company.

This article explains how to deal with this situation:

http://blogs.technet.com/b/keithmayer/archive/2012/08/24/tip-of-the-day-microsoft-windows-8-enterprise-activation-itpro-windows8.aspx

Let me try first  with mak, since this is a test lab install....and it works! Windows 8 is activated with mak.


New(old) key to remember Winkey-R  since there is no start button. This is how to run programs by manually typing command line. Another way is to move mouse to right top corner and select search....

getting PMP

Preparing myself for PMP certification - two days training from http://www.Knowledgehut.com/ and ordered a book "PMP Exam Prep, Seventh Edition: Rita's Course in a Book for Passing the PMP Exam"

SAP

Re-reading old training materials TERP10 and ADM325 Software logistics - ISBN 1-59229-059-0  (SAP Change and Transport Management, Achim Kosegi, Rainer Nerding)  - very good reading - comparable to Dan Brown - joking :)

 

Microsoft risk mitigation tool

According to Microsoft it helps to mitigate some issues with IE while there is no patch for certain vulnerabilites:

http://support.microsoft.com/kb/2458544

WAN optimisation

you need to consider WAN Optimisation if

congestion is more than 30%
latency > 125ms
packet loss > .25%

Latency

Users start percieving lag if RT latency 200ms - Citrix ICA - webminar https://event.webcasts.com/viewer/event.jsp?ei=1007158

Windows will not allow SSL Certificates with key less 1024

Check your systems now: http://blogs.technet.com/b/pki/archive/2012/06/12/rsa-keys-under-1024-bits-are-blocked.aspx

How to access configuration of Cisco IP phone from Call manager's HTTP (easier than tftp)

ref example

http://schgvacm001:6970/SEP1CAA0710BDA7.cnf.xml

or

http://schgvacm001:6970/SEP1CAA0710BDA7.cnf.xml.sgn

Enjoy!

CentOS 5 time zone issue

It is a second time that I'm having issue with timezone. Even if all settings are ok it shows wrong timezone.

The siolution is

yum reinstall tzdata

A Network weathermap

http://www.network-weathermap.com/about

Exchange 2010 sp2 export to pst

it is done only in powershell...

http://exchangeserverpro.com/export-mailboxes-exchange-server-2010-sp1

How to properly reboot Cisco Call Manager

admin:utils system restart

http://atc.go0se.com/?paged=2

Cisco e-books at 9.99$

http://www.ciscopress.com/deals/

Citrix VDI-in-a-box 5.1 is available

few days ago Citrix has released an upgrade for VDI-in-a-box 5.0. You can install 5.1 directly or upgrade from 5.0xx

TRIM on SSD disk in Windows 7

Verify that TRIM is enabled on W7 by runing as admin command:

fsutil behavior query DisableDeleteNotify

it should return 0

TRIM is a way to collect garbage on SSD otherwise it will be slowing down with time.

Backup exec errors on Exchange

According to Symantec, errors in the Exchange 2010 eventlog
"Cmdlet failed. Cmdlet Get-MailboxDatabaseCopyStatus, parameters {Identity=Public Folders\*, Active=True}." or  "Cmdlet failed. Cmdlet Get-Mailbox, parameters {Database=Public Folders, ResultSize=unlimited}." and so on, can be ignored - http://www.symantec.com/docs/TECH169638

Twitter widget breaks IE9 back button

IE9 back button issue can be observed now on several sites hosting twitter button. Example: lenta.ru

If you go to a page with twitter button, and then click IE9 back button it will show http://platform.twitter.com/widgets/tweet_button.1346143399.html as example.

Really annoying.

Exchange 2010 SP2 OWA http issues

Exchange OWA error: "Your request couldn’t be completed. This may have occurred for security reasons or because your session timed out"

refer to http://www.exchangedude.net/index.php/2012/01/owa-2010-sp2-your-request-couldnt-be-completed-this-may-have-occurred-for-security-reasons/ for a solution.

Another solution would be to change to ssl.

The need of backup (video) explained

http://vimeo.com/45145641

ATA 187 telnet

Cisco ATA 187 can run telnet on port 7870 and it gives access directly to linux sh...

HP Update (HPU)

a software from HP like Windows Updates: http://h10025.www1.hp.com/ewfrf/wc/softwareDownloadIndex?softwareitem=HU-74441-7&cc=us&dlc=en&lc=en&os=4062&product=3892964&sw_lang=

Juniper SSL browsing tool bar

it is possible to disable a Juniper SSL browsing tool bar for a specific URL - refer to http://kb.juniper.net/InfoCenter/index?page=content&id=KB25387&actp=search&viewlocale=en_US&searchid=1343729631134

Upload a patch package and use internal URL rather than external in the filter.
 

Adobe Flash player autoupdate and Bluecoat

Review the following advice on exception policy for Flash autoupdate:
https://kb.bluecoat.com/index?page=content&id=FAQ1791&actp=RSS

CentOS 5 life cycle

CentOS 5 (RHEL5) will be safe to use until 2017: refer to upstream life cycle info: https://access.redhat.com/support/policy/updates/errata/

Autocomplete search in MOSS 2010

http://weblogs.asp.net/jan/archive/2009/07/02/sharepoint-search-as-you-type-with-jquery.aspx

to query People change scope to "People" and modify the query string to add "*"

from: <QueryText language='en-US' type='STRING' >SCOPE:\"" + quickSearchConfig.scope + "\"" + query + "</QueryText> \ to: <QueryText language='en-US' type='STRING' >SCOPE:\"" + quickSearchConfig.scope + "\"" + query + "*"+ "</QueryText> \

AD reporting with SSRS

http://blog.sdbonline.com/2008/10/determine-ad-group-membership-in-sql.html

Cisco IP Phone Owner ID is greyed out in CM

If  owner ID  is greyed out in Call Manager (8.6), check if you have extension mobility enabled - scroll little bit lower on the same page. Uncheck it then set owner ID. 

Junkmail GPO in Outlook

http://www.effectusdigital.com/outlook-junk-mail-filter-through-group-policy/

as explained above, do not forget registry JunkMailImportLists otherwise it will not work...

update from http://forums.msexchange.org/m_1800545996/printable.htm:

We got an update from Microsoft -- they say that the best option is:

New-TransportRule -Name ' Flag internal email domains as not junk and set SCL to minus 1' -Comments ' Flag internal email domains as not junk and set SCL to minus 1' -Priority '0' -Enabled $true -FromAddressContainsWords 'domain1.com','domain2.com' -SetSCL '-1'

The reason why email from our own internal domains is being flagged as junk is because the emails are being send un-authenticated and are not really "people" with AD accounts. They are 3rd party internal applications that cannot send/use authenticated senders.

So "white-listing" internal un-authenticated email seems to be the option to go with until we can replace this legacy software or find ways to convert them to authenticated senders.

SCL field in Outlook

http://blogs.technet.com/b/ewan/archive/2011/07/08/tip-o-the-week-44-viewing-only-external-email.aspx

Spyware?

Just discovered a great tool from Kaspersky: Rescue disk  CD/usb - it can scan Windows 7 disk and update databases online. I regret  that I did not use it immediately before spyware deinstalled itself...

Spyware?

Interesting case today, where the PC was slow, with high hdd activity and very strange traffic with task  Id 0 to IP 50.56.48.215 and 68.232.34.73 and possibly others. Few days ago this PC was highlighted by snort as "SPYWARE-PUT Trackware casalemedia runtime detection"

PC is protected with Trend.  After sucessful installation of Lavasoft, I realised that it actually did not install, folder is absent. Second time, the same result. Somebody is playing jokes? Third time it was installed ok and suddenly strange activity stopped, as if it deinstalled itself to avoid detection.

Further scan with Lavasoft and Kaspesky did not uncover anything. Puzzle...

How to enable Do Not Track in IE9

http://ie.microsoft.com/testdrive/Browser/DoNotTrack/Default.html

Exchange 2010 stats with powershell

http://www.christiano.ch/wordpress/2010/03/14/microsoft-exchange-2007-2010-statistics-using-exchange-management-shell-ems/

Somebody said Apple is more secure than Microsoft?

http://www.zdnet.com/blog/security/apple-security-blunder-exposes-lion-login-passwords-in-clear-text/11963

Add admin user to Cisco Unity Express via SSH

http://www.cisco.com/en/US/products/sw/voicesw/ps5520/products_password_recovery09186a008042aa29.shtml

AsyncOS 7.5.1 blocks Office files

Cisco IronPort AsyncOS 7.5.1 has a bug and it blocks Office 2007/2010 files as executables (some Office file files have .bin for printer settings). Defect 81190 apparently was fixed in 7.5.2 and higher - ref readme.  https://supportforums.cisco.com/thread/2127402

Video guide on how to configure Lync 2010

http://www.macroconnect.net/LyncCompleteTrainingGuide.htm#CONFIGURINGLYNCMOBILE

Cisco IP phone ssh syslog debug

Found a cisco guide on how to debug IP phone via ssh and syslog.

https://supportforums.cisco.com/docs/DOC-16924

Webdial from Excel

Here it is an Excel formula to call a number using Cisco Webdialer:

A1                   A2
0012345          =HYPERLINK(https://server:port/webdialer/Webdialer?destination="&A1,"Dial")

Cisco ATA 187 and fax

ATA 187 does not work well with some fax devices, in our case it is Xerox 7228. The config that works (little bit weird): enable t38 on outgoing and disable on incoming
!
dial-peer voice 300 voip
no modem passthrough
session target ipv4:192.168.25.1
incoming called-number 0T
voice-class codec 1
voice-class h323 1
dtmf-relay h245-alphanumeric
fax-relay sg3-to-g3
fax nsf 000000
fax protocol t38 version 0 ls-redundancy 5 hs-redundancy 2 fallback pass-through g711ulaw
no vad
!
dial-peer voice 200 voip
destination-pattern 5..
session target ipv4:192.168.25.1
voice-class codec 1
voice-class h323 1
dtmf-relay h245-alphanumeric
fax-relay sg3-to-g3
fax nsf 000000
fax protocol pass-through g711ulaw
no vad
!

update: moved from ATA to FXS card in router and all issues are gone - isn't it a magic? Heh, Cisco?  :)
update2: Cisco made available configurations scenarios: https://supportforums.cisco.com/docs/DOC-25210

Cisco IP phone BLF button does not pickup call

Please refer to the Cisco prerequisites for call pickup: http://www.cisco.com/en/US/docs/voice_ip_comm/cucmbe/rel_notes/6_1_2/cucmbe-rel_note-612_2.html#wp308333 I my case there was an issue with the following: "The call pickup group for the monitoring user must contain the pickup group for the monitored destination, or call pickup will fail" Now when the reception and the user extension are in the same or in the inherited groups and it works ok.

Remote Lync troubleshooting tool

A nice RUCT tool to check yours or partners Lync installation. Can check certificates or DNS records.

Sharepoint Designer 2010 error

All of a sudden I was not able to open Intranet DEV site with Sharepoint Designer 2010. It was giving error "The Server could not complete your request" and in the eventlog the error was:

Log Name: Application Source: System.ServiceModel 3.0.0.0 Date: 1/24/2012 2:16:34 PM Event ID: 3 Task Category: WebHost Level: Error Keywords: Classic User: XXX Computer: XXX Description: WebHost failed to process a request. Sender Information: System.ServiceModel.ServiceHostingEnvironment+HostingManager/54467399 Exception: System.ServiceModel.ServiceActivationException: The service '/_vti_bin/client.svc' cannot be activated due to an exception during compilation. The exception message is: Operation is not valid due to the current state of the object.. ---> System.InvalidOperationException: Operation is not valid due to the current state of the object. at Microsoft.SharePoint.ApplicationRuntime.SPLayoutsMappedFile.MapLayoutsVirtualPath(String virtualPath) at Microsoft.SharePoint.ApplicationRuntime.SPVirtualPathProvider.GetCacheKey(String virtualPath) at Microsoft.SharePoint.Publishing.Internal.CmsVirtualPathProvider.GetCacheKey(String virtualPath) at System.Web.Compilation.BuildManager.GetCacheKeyFromVirtualPath(VirtualPath virtualPath, Boolean& keyFromVPP) at System.Web.Compilation.BuildManager.GetVPathBuildResultInternal(VirtualPath virtualPath, Boolean noBuild, Boolean allowCrossApp, Boolean allowBuildInPrecompile) at System.Web.Compilation.BuildManager.GetVPathBuildResultWithNoAssert(HttpContext context, VirtualPath virtualPath, Boolean noBuild, Boolean allowCrossApp, Boolean allowBuildInPrecompile) at System.Web.Compilation.BuildManager.GetCompiledCustomString(String virtualPath) at System.ServiceModel.ServiceHostingEnvironment.HostingManager.GetCompiledCustomString(String normalizedVirtualPath) at System.ServiceModel.ServiceHostingEnvironment.HostingManager.CreateService(String normalizedVirtualPath) at System.ServiceModel.ServiceHostingEnvironment.HostingManager.ActivateService(String normalizedVirtualPath) at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath) --- End of inner exception stack trace --- at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath) at System.ServiceModel.ServiceHostingEnvironment.EnsureServiceAvailableFast(String relativeVirtualPath) Process Name: w3wp Process ID: 8476

The solution was according to this post. In web.config just under the line: <system.servicemodel> add the following line: <servicehostingenvironment aspNetCompatibilityEnabled="true"/> after iisreset I was able to open a site.

update: there might be similar symptoms in case of low memory conditions. -the solution is obvoisly to add RAM.

Juniper SSL as a reverse proxy for Lync

http://forums.juniper.net/t5/SSL-VPN/Configuring-SSL-VPN-as-Reverse-Proxy-for-Lync/m-p/125823#M13346

Lync Edge firewall ports and NAT requirements

http://technet.microsoft.com/en-us/library/gg425882.aspx

Xerox Fax over IP guide for some WC products

http://www.office.xerox.com/support/dctips/dc08cc0439.pdf

How to install Lync edge

http://www.youtube.com/watch?v=aM_0XKww7Uc

Yahoo or Google weather on your cisco IP Phone

<%@ Language=JavaScript%> <% Response.ContentType = "text/xml"; Response.Write("<CiscoIPPhoneText>\r\n"); Response.Write("<Title>Weather forecast for Geneva</Title>\r\n"); Response.Write("<Prompt></Prompt>\r\n"); Response.Write("<Text>"); try { var xmlhttp = new ActiveXObject("Msxml2.XMLHTTP"); xmlhttp.Open("GET", "http://weather.yahooapis.com/forecastrss?w=782538&u=c", false); xmlhttp.Send(); var xmldata = ""; xDoc = new ActiveXObject("MSXML2.DOMDocument") xDoc.async = false; xDoc.loadXML(xmlhttp.responseText); var node = xDoc.selectSingleNode("//rss/channel/item/yweather:forecast"); xmldata = node.attributes.getNamedItem("text").value; Response.Write(xmldata);Response.Write(".\r\n"); xmldata = node.attributes.getNamedItem("low").value; Response.Write("Low temperature: "); Response.Write(xmldata);Response.Write("°\r\n"); xmldata = node.attributes.getNamedItem("high").value; Response.Write("High temperature: "); Response.Write(xmldata);Response.Write("°\r\n"); } catch(err) { Response.Write("Yahoo Service Error\r" + err.description + "\r" + err.number); } Response.Write("</Text>\r\n"); Response.Write ("<SoftKeyItem><Name>Exit</Name><URL>SoftKey:Exit</URL><Position>3</Position></SoftKeyItem>\r\n"); Response.Write("</CiscoIPPhoneText>\r\n"); Response.End(); Session.Abandon(); %> and Google: <%@ Language=JavaScript%> <% Response.ContentType = "text/xml"; Response.Write("<CiscoIPPhoneText>\r\n"); Response.Write("<Title>Weather in Geneva</Title>\r\n"); Response.Write("<Prompt></Prompt>\r\n"); Response.Write("<Text>"); try { var xmlhttp = new ActiveXObject("Msxml2.XMLHTTP"); xmlhttp.Open("GET", "http://www.google.com/ig/api?weather=Geneva,Switzerland&hl=en", false); xmlhttp.Send(); var xmldata = ""; xDoc = new ActiveXObject("MSXML2.DOMDocument") xDoc.async = false; xDoc.loadXML(xmlhttp.responseText); var node = xDoc.selectSingleNode("//xml_api_reply/weather/current_conditions/temp_c"); xmldata = node.attributes.getNamedItem("data").value; Response.Write("Temperature: ");Response.Write(xmldata);Response.Write("°\r\n"); node = xDoc.selectSingleNode("//xml_api_reply/weather/current_conditions/condition"); xmldata = node.attributes.getNamedItem("data").value; Response.Write(xmldata); Response.Write("\r\n"); node = xDoc.selectSingleNode("//xml_api_reply/weather/current_conditions/humidity"); xmldata = node.attributes.getNamedItem("data").value; Response.Write(xmldata); Response.Write("\r\n"); } catch(err) { Response.Write("Google Service Error\r" + err.description + "\r" + err.number); } Response.Write("</Text>\r\n"); Response.Write ("<SoftKeyItem><Name>Exit</Name><URL>SoftKey:Exit</URL><Position>3</Position></SoftKeyItem>\r\n"); Response.Write("</CiscoIPPhoneText>\r\n"); Response.End(); Session.Abandon(); %>