Monthly Archives: October 2011

You are browsing the site archives by month.

Happy Halloween 2011

This year I’m mad scientist at the door greeting trick or treaters….. or translation the best “door” costume I could come up with given the fact that I saw trick or treaters heading down the road.  A little hair gel to make the hard  hair stand up a bit more than it normally does, a bit of eyeliner around the eyes and eyebrows and nose to make a mustache and a bit of masking tape around the glasses.  Oh and a lab coat.  What can I say, I was pressed for time and the Princess costume takes too much time to throw on.



I must admit the mad scientist costume was inspired by Raymond Chen’s blog today.


http://blogs.msdn.com/b/oldnewthing/archive/2011/10/31/10231476.aspx


At least for me it’s effective

Watch for USB flash drives

Error message when you start your computer with a non-system disk:
http://support.microsoft.com/default.aspx?scid=kb;en-us;812492


When remotely patching, ensure that flash drives are not stuck in machines.  I nearly started tearing apart and replacing a hard drive on a workstation before I spotted a flash drive in the back causing the system not to boot.

QuickBooks Loan Manager and Internet Explorer 9 Problem FIXED

QuickBooks Loan Manager and Internet Explorer 9 Problem FIXED : Practical QuickBooks:
http://qbblog.ccrsoftware.info/2011/10/quickbooks-loan-manager-and-internet-explorer-9-problem-fixed/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+PracticalQuickbooks+%28Practical+QuickBooks%29


I’ve had IE9 installed for a while – mainly because if you never use the items that have issues with IE9, you never see the issues.  Bottom line if you were holding back, there’s now a fix.

>>>Exchange Server Solution Sharing – 2011 October<<<:

Post: Cannot Setup Active Sync


http://social.microsoft.com/Forums/en-US/partnermsgexchange/thread/cac6adfd-0426-45c4-8234-a564c515e041



Problem Description:


================


Environment: Exchange 2010


 


Symptom: In order to fix the Active Sync setup issue, the customer reinstalled IIS and Client Access Server for several times. After that, the Exchange Management Console/Shell cannot be opened successfully.


 


Cause:


================


1. The Default Web Site also hosts another web site which contains a web.config file and its sub virtual directory inherits settings from this web.config file.


2. The binding of the Default Web Site is incorrect.


 


Resolution:


================


1. Remove the web.config file of the Default Web Site.


2. Correct the binding settings of the Default Web Site.




Best regards,

Ryan Ye
Partner Online Technical Community
—————————————————————————————–
We hope you get value from our new forums platform! Tell us what you think:
http://social.microsoft.com/Forums/en-US/partnerfdbk/threads
——————————————————————————————
This posting is provided “AS IS” with no warranties, and confers no rights.

>>>Exchange Server Solution Sharing – 2011 October<<<:
http://social.microsoft.com/Forums/en-US/partnermsgexchange/thread/174a90a6-8140-4a1b-a591-3bee775ce8a0

>>>Solution Sharing—-Internet Explorer—–September<<<:

Post: <Link redirection in IE 9>



<http://social.microsoft.com/Forums/en-US/partnerinternetie/thread/e781f225-8328-459a-8ac4-7b5421a5fc12>





Description:



==============



Environment: Windows 7 SP1 with IE 9 installed





While trying to open a link terminates with .pdf in IE9 (such ashttp://support.domain.com/report.pdf), the link cannot open. We have tried add the sites to “trusted sites”.





Cause:



==============



This can be caused by ProxySubClsid32 pointing to the incorrect value.





Resolution:



==============



Verify the following REG_SZ value is {A4A1A128-768F-41E0-BF75-E4FDDD701CBA} under:



[HKEY_CLASSES_ROOT\Interface\{79EAC9C5-BAF9-11CE-8C82-00AA004BA90B}\ProxyStubClsid32]



Best regards,

Alex Yu
Partner Online Technical Community
—————————————————————————————–
We hope you get value from our new forums platform! Tell us what you think:
http://social.microsoft.com/Forums/en-US/partnerfdbk/threads
——————————————————————————————
This posting is provided “AS IS” with no warranties, and confers no rights.


 


>>>Solution Sharing—-Internet Explorer—–September<<<:
http://social.microsoft.com/Forums/en-US/partnerinternetie/thread/7a9accdd-24dd-41a6-9013-42580e2e793e

Now patching


…. patching/updating an iPhone better known as … about as entertaining as watching paint dry. 

Fixing a bit of thumbprints

The STARTTLS certificate will expire soon: subject: domain.com, hours remaining: 76EB0A88D2FAE18ACD758189A6C630A1771990D0. Run the New-ExchangeCertificate cmdlet to create a new certificate.


So if you are like me and running a SBS box with a third party cert, you’ll get to a stage where the internal self signed leaf certificates will expire and the third party cert won’t be impacted.  You could ignore this, but it will annoy you to smithereens in your event logs.


I know it’s not my third party cert as I have that SSL cert for a LONG time.



Yeah, I didn’t want that sucker to expire on me as one time I accidentally did let a SSL cert lapse.


The fix my network wizard won’t get rid of this unless you are using a self signed cert.


The two certs that are not liking this are:


AccessRules        : {System.Security.AccessControl.CryptoKeyAccessRule, System
                     .Security.AccessControl.CryptoKeyAccessRule, System.Securi
                     ty.AccessControl.CryptoKeyAccessRule}
CertificateDomains : {domain.com, SERVER.internaldomain.lan}
HasPrivateKey      : True
IsSelfSigned       : False
Issuer             : CN=domain-SERVER-CA
NotAfter           : 11/23/2011 11:24:00 PM
NotBefore          : 11/23/2009 11:24:00 PM
PublicKeySize      : 2048
RootCAType         : Registry
SerialNumber       : 6139F43E000000000005
Services           : IMAP, POP, SMTP
Status             : Valid
Subject            : CN=domain.com
Thumbprint         : 76EB0A88D2FAE18ACD758189A6C630A1771990D0

AccessRules        : {System.Security.AccessControl.CryptoKeyAccessRule, System
                     .Security.AccessControl.CryptoKeyAccessRule, System.Securi
                     ty.AccessControl.CryptoKeyAccessRule}
CertificateDomains : {Sites, SERVER.internaldomain.lan}
HasPrivateKey      : True
IsSelfSigned       : False
Issuer             : CN=domain-SERVER-CA
NotAfter           : 11/23/2011 7:08:18 PM
NotBefore          : 11/23/2009 7:08:18 PM
PublicKeySize      : 2048
RootCAType         : Registry
SerialNumber       : 61269AC0000000000002
Services           : IMAP, POP, SMTP
Status             : Valid
Subject            : CN=Sites
Thumbprint         : 41ECAF354F3E542F4865FBAA970CBC65B291303A


Those thumbprint thingys will be very important.



http://geekcroft.wordpress.com/2008/10/15/renewing-internal-certificates-the-easy-way/


And we’re going to fix it like that. Kinda.  I could remove these certs, but if I run this command and then say NO that I want to leave the third party cert in place, it will extend the old cert AND leave my third party cert in place.


Launch the Exchange powershell window


Get-ExchangeCertificate -Thumbprint 41ECAF354F3E542F486
5FBAA970CBC65B291303A | New-ExchangeCertificate



Now we do the list command to make sure that the new certs are there


get-exchangecertificate | fl


With the new certificate in place we may now remove the old certificate using Remove-ExchangeCertificate with the thumbprint value of the old certificate:
Remove-ExchangeCertificate -Thumbprint 76EB0A88D2FAE18ACD758189A6C630A1771990D0


(that thumbprint value is unique to the cert, so don’t copy it for your setup)



Send yourself an email to make sure all is well and there you go.


Again WITH A THIRD PARTY CERT I could have just removed those internal self signed expiring certs, but I didn’t want to do that.

Network capture tool that works on events

Event Log Driven Network Capture Tool:
http://nm3eventcap.codeplex.com/

Download and copy the tool to the terminal server.


Install network monitor on the terminal server.
http://www.microsoft.com/downloads/details.aspx?FamilyID=983b941d-06cb-4658-b7f6-3088333d062f&displaylang=en

Download and copy the nm3eventcap.exe to the server.
http://www.codeplex.com/NM3EventCap

Open a command window with run as administrator, run command,
Nm3eventcap.exe 56.cap –o 56 –f “tcp.port==3389″ –b 1000


NOTE: above command will keep capturing the logs until event 56 appears and the maximum log file size is 1G. Please keep it running and please do not close the command window and log off the session until the event 56 happens again.
(note that was in a partner post about TS debugging but it’s a great tip for debugging something in the event logs in general)


http://social.microsoft.com/Forums/en-US/partnerwinserver7rcthreads/thread/c8face23-348a-45b5-ae8b-1152e8f10ff9

Fresno Partner group meeting

Tonight we had our Fresno partner group meeting and we talked about several topics -- how good Bob Nitrio and Karl Palachuk were at the Sacramento IT pro group.  
They discussed cloud computing and how to be a trusted advisor and really understand the business model.
We talked about SMBMVPtour content (MultiPoint in particular) and then Windows 8 and the new start menu and WHERE is the classic menu.
Then we talked about Windows Storage Server Essentials R2.


Next month the topic will be ... so?  Can you install SBS in Azure or Amazon Web services?  Or subtitled the SMB guys and gals figure out what this cloud stuff is really.

Dear Exchange

We need to talk.  You’ve put on a few pounds lately.  You aren’t the thin young thing you used to be.  To the point where people are talking behind your back.  In various listserves in fact, folks are starting to chat about how there’s a young thin thing called Kerio that is attracting the eyes of folks.  It’s lighter.  Thinner.  Less maintenance….and worse yet, CHEAPER than you are. 


I know that since you were born you have had your feet on the ground but lately you have your nose in the air so much that I’m starting to get concerned that you don’t realize that not all of the people around you are too thrilled with what you are up to. 


I know you say that you want to be built for those big spender folks, but are they forking out the money for you lately?  I also know that while some people want to travel in the areas you say you plan to go to, not everyone does.  To the point where the Kerio buzz for SMB in starting to grow.  Someone even said they are putting Kerio on SBS Essentials.


Bottom line, just be aware that people are talking behind your back.  And it’s not what I think you want them to be talking about.