How to enable online archive in Hybrid Exchange

https://social.technet.microsoft.com/wiki/contents/articles/51966.office-365-hybrid-enabling-in-place-archive-with-powershell.aspx

Sharepoint search error The item could not be indexed successfully because the item failed in the indexing subsystem.

https://docs.microsoft.com/en-us/archive/blogs/sp/clear-sharepoint-config-cache-with-powershell

http://bresleveloper.blogspot.com/2016/01/solved-item-could-not-be-indexed.html

in general

https://docs.microsoft.com/en-us/archive/blogs/sp/
https://blogs.msdn.microsoft.com/sharepoint_strategery/2014/12/04/sp2013-understanding-storage-locations-for-files-gathered-by-the-crawl-component/

is a good Knowledge base to keep in mind!

a tool to check Web site security from Mozilla

https://observatory.mozilla.org/

script to for TLS hardening in Windows servers

https://www.hass.de/content/setup-microsoft-windows-or-iis-ssl-perfect-forward-secrecy-and-tls-12

LDAP changes in Windows

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/ldap-channel-binding-and-ldap-signing-requirements-march-2020/ba-p/921536#

https://support.microsoft.com/en-us/help/4546509/frequently-asked-questions-about-changes-to-ldap

https://www.msxfaq.de/windows/sicherheit/ldapenforcechannelbinding.htm

https://docs.microsoft.com/en-us/archive/blogs/russellt/identifying-clear-text-ldap-binds-to-your-dcs

Once more about Skype EWS

http://www.uclabs.blog/2013/01/lync-and-exchange-web-services-ews-and.html

if you have SIP and SMTP (primary) different, then you need to make sure that autodiscover works ok.  You can redirect _autodiscover._tcp_smtp.domain to autodiscover.another.smpt.domain 443 if the later is defined and works ok.  Then you do not need to worry about UC SAN SSL.

With autodiscover.smpt.domain SFB client will try to connect directly, with SRV you can redirect to another domain.

Audiocodes ACA and KEMP CTP

Audiocodes Certified Associate and KEMP Certified Technical Professional  in the pocket!

Exchange 2016 CU15 tips

run updatecas.ps1 script to fix OWA and ECP
also check out this

https://social.technet.microsoft.com/Forums/windowsserver/en-US/5259018c-aec7-4490-a500-e1af54798f14/exchange-2013-ecp-error-line-43?forum=exchangesvrgeneral

1. Application Settings >> BinSearchFolders
2. Change the path with C:\Program Files\Microsoft\Exchange Server\V15\bin;C:\Program Files\Microsoft\Exchange Server\V15\bin\CmdletExtensionAgents;C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\Owa\bin
3. Then reset IIS to check this issue.

how to put server in maintenance mode:

https://practical365.com/exchange-server/installing-cumulative-updates-on-exchange-server-2016/

https://www.enowsoftware.com/solutions-engine/exchange-2019-cu4-and-exchange-2016-cu15-explained


# start maintenance on the computer

$Computer = $ENV:ComputerName
Set-ServerComponentState $Computer -Component HubTransport -State Draining -Requester Maintenance
Redirect-Message -Server $Computer -Target

# Prevent DAG member becoming PAM
Suspend-ClusterNode $Computer

# Move all Mailbox Databases and prevent hosting copies on current server
Set-MailboxServer $Computer -DatabaseCopyActivationDisabledAndMoveNow $True
Set-MailboxServer $Computer -DatabaseCopyAutoActivationPolicy Blocked

# Put the Exchange 2013 server in Maintenance Mode:
Set-ServerComponentState $Computer -Component ServerWideOffline -State Inactive -Requester Maintenance
# verify

Get-ServerComponentState $Computer | ft Component,State –Autosize


# stop maintenance on the computer

$Computer = $ENV:ComputerName
Set-ServerComponentState $Computer -Component ServerWideOffline -State Active -Requester Maintenance
Resume-ClusterNode $Computer
Set-MailboxServer $Computer -DatabaseCopyActivationDisabledAndMoveNow $False
Set-MailboxServer $Computer -DatabaseCopyAutoActivationPolicy Unrestricted
Set-ServerComponentState $Computer -Component HubTransport -State Active -Requester MaintenanceRestart-Service MSExchangeTransport
Restart-Service MSExchangeFrontEndTransport

Get-ServerComponentState $Computer | ft Component,State –Autosize

.net 4.8 is slow

First of all it is slow, yes, wait up to 30 minutes...

Otherwise start Windows installer service is not running as well as go via link below:

https://dotnet.microsoft.com/download/dotnet-framework/net48


https://support.microsoft.com/en-us/help/2570538/installing-updates-for-the-microsoft-net-framework-4-can-take-longer-t

https://www.catalog.update.microsoft.com/Search.aspx?q=4486153

Exchange internal relay must not include Exchange DAG servers

We see some issues with Shadow queue accumulating on one of the servers, it seems to be related to the fact that Exchange servers have been added to internal FrontEnd relay connector:

https://practical365.com/exchange-server/no-need-create-connectors-internal-exchange-server-mail-flow/

We see that this server is not cleaning shadow often enough - look for code XQDISCARD
in the hub smtp logs on other servers:

https://docs.microsoft.com/en-us/exchange/mail-flow/transport-high-availability/shadow-redundancy?view=exchserver-2019

Skype for Business Address book SQL table

https://itspartlycloudy.com/2015/06/05/getting-lync-2013-address-book-data-from-sql/

Windows Hello on HP Probook 470 G0

If you are looking for fingerprint sensor drivers for Windows Hello, try to get it from here:

https://h30434.www3.hp.com/t5/Notebook-Hardware-and-Upgrade-Questions/Biometric-Validity-

Sensor-Driver-Windows-10/td-p/6703491 

I have WH bio-metric sensor successfully running on this platform.

D.

SFB RTCXDS is growing fast

You can run this SQL transaction few times a day:

use master;
BACKUP log rtcxds TO DISK = 'NUL:';
GO
USE RTCXDS;
DBCC SHRINKFILE(rtcxds_log, 200);
GO