for example:

you want to allow ftp traffic to your ftp server 1.2.3.4, so you will type access-list acl_out permit tcp any host 1.2.3.4 eq ftp

if you look at your current configuration you had a rule blocking all the ftp traffic, so you will never be able to FTP to your server. 

access-list acl_out deny tcp any any eq ftp

access-list acl_out permit tcp any host 1.2.3.4 eq ftp  

Solution: move the new rule before the one denying the traffic.

to see the position of the rules in the access-list table, type show access-list

you will see something like this:

access-list acl_out line 1 deny tcp any any eq ftp

access-list acl_out line 2 permit tcp any host 1.2.3.4 eq ftp

remove the rule you previously entered with the no command and re-enter it with the new position in the table:

access-list acl_out line 1 permit tcp any host 1.2.3.4 eq ftp

if you run show access-list, you will now see:

access-list acl_out line 1 permit tcp any host 1.2.3.4 eq ftp
access-list acl_out line 2 deny tcp any any eq ftp

 now you can FTP to your server :-)

Note that this is pretty important when you are trying to block traffic from specific IP. You want to block it as soon as it gets to the firewall so use line 1 that way you no it is on top of the list 

Comments:
Date of last update: 08-21-10
Author: Gaetan Barthelemy

No related posts.

Solutions to the issue:

Your music, pictures and videos are saved on you SD card, so you can easily copy them to your computer for backup but what about all the applications you installed, you text messages or your settings?

For the apps you can use astro manager and for the data mybackup. Both are free if you are restoring to the same device. If you want to restore to a different device then you will need to purchase the pro version.

1. Backup/restore applications
- Go to the market and download astro manager
- Launch astro manager; go to tools and select manage backup/restore
- Select the apps you want to backup; then click on backup.

The apps are now saved on your SD card.
If you need to restore, open astro manager; select tools and then manage backup/restore; click on the backup tab; then select the apps you want to restore

2. Backup/restore data (settings; phone logs, contacts,…)

You can use mybackup to backup data or apps to your SD card. It will even allow you to save the backup online.
- Go to the market and download mybackup
- Open the apps
- Click on backup
- Select data; give a name to your backup then select what you would like to backup and where (local SD card or online)
- To restore, just select the backup set and select the data you would like to restore
- Once done you will need to restart your device

Comments:
Date of last update: 08-21-10
Author: Gaetan Barthelemy

No related posts.

you can block per IP or per range

if you need to block just one specific IP address:

access-list acl_out deny ip  host 175.45.176.2 .3 any

if you want to block a range:

access-list acl_out deny ip 175.45.176.0 255.255.252.0 any

Since each country is allocated their own range of IP, you can decide to block a specific country.

You can find the IP range by going to : http://www.countryipblocks.net/

For example choose Republic democratic of Korea: 175.45.175/22

then by entering in your cisco firewall configuration

access-list acl_out deny ip 175.45.176.0 255.255.252.0 any

no one in the republic democratic of Korea will be able to access your server.

Note that you need to enter the deny acces-list before the permit access-list as the order matters

Date of last update: 8-3-2010
Author:  Gaetan Barthelemy

No related posts.

this requires changes in the registry. Make sure to do a backup before making any changes.

Start Regedit and got o the following key:
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\ProofingTools\1.0\Override\en-US
You should find 2 entries (DLL and LEX) pointing to non-existing files.
Rename these to oldDLL and oldLEX.

close the registry and restart outlook

 Date of last update: 8-2-2010
Author: Gaetan Barthelemy

No related posts.

Affects: Outlook

Solutions to the issue:

1. how to remove a wrong or outdated address from the auto-complete list  

one day you create a new email and type the wrong recipient address (tets@ipsofacto.net instead of test@ipsofacto.net), and now everytime you start typing te, you will get the 2 email addresses. To delete the wrong one, highlight it from the address bar and then press the delete key.

2. How to add a bunch of email addresses at once to your auto-complete list

- select all the email addresses (from a text file (press enter after each address) or other contact list)

- start a new email; paste all the addresses you just copied into the To field

- press Ctrl + K

- close the email without sending it

- next time you compose a message you will see all those addresses in your auto-complete

Date of last update: 8-2-2010
Author: Gaetan Barthelemy

No related posts.

It was created by the same person who wrote Quicksilver for the Mac.  It is the first thing I install on any new mac.  ’
Author: Drew Hunzeker

No related posts.

1) Drag the public folder into the Area Marked “Subscribed Public Folders” This will cause your folders to be cached locally
2) Add to the favorites bar as you normally would.

Date of last update:7-23-2010
Author: Drew Hunzeker

No related posts.

1) Find a Windows Server 2003 x64 based system

2) Copy the ntbackup.exe, ntmsapi.dll, and vssapi.dll from C:\windows\system32 into a new folder.

3) Copy the folder on the Windows Server 2008 machine.

4) Run NTbackup as one normally would.  

Date of last update: 7-22-2010
Author: Drew Hunzeker

No related posts.

To find out if there is an outage:

1. Go to: http://repair.att.com/repair/landing.do
2. choose High Speed Internet/DSL and enter your telephone number.
If there is no outage in your area, you will be prompted to create a trouble report for your repair issue.
Date of last update:7-12-2010
Author: Drew Hunzeker

No related posts.

1. Make sure that the view icon is selected

If it is and you still don’t see your icons then continue reading…

These shortcuts are regarded as broken and are deleted by the System Maintenance troubleshooter.

The System Maintenance troubleshooter performs a weekly maintenance of the operating system. The System Maintenance troubleshooter either fixes problems automatically or reports problems through Action Center. When there are more than four broken shortcuts on the desktop, the System Maintenance troubleshooter automatically removes all broken shortcuts from the desktop.

WORKAROUND

You can disable the System Maintenance troubleshooter.

Note If you disable the System Maintenance troubleshooter, all the maintenance tasks that it performs are disabled.

To disable the System Maintenance troubleshooter, follow these steps:

1. Click Start and then click Control Panel.
2. Under System and Security, click Find and fix problems.
3. On the left navigation pane, click Change settings.
4. Set Computer Maintenance to Off.

Comments:
Date of last update: 06-15-2010
Author:Gaetan Barthelemy

No related posts.

 Sometimes people forget passwords. Sometimes the stored password on your hard drive gets corrupted in a system crash. Sometimes, malware changes your password without your knowledge. Whatever the cause, you CAN reset your password and get back into your Windows system.

Password resetting was not built into Windows prior to Vista. To get the reset job done you need to exploit a “bug” in Windows XP’s Setup process, or use a third-party password recovery program. First, here is how to use Windows XP’s Setup to reset your password:

• Insert your retail Windows XP CD in your CD drive
  * Start or restart the computer
  * When the “Welcome to Setup” screen appears, press Enter
  * Setup offers to repair a damaged installation. Select your Windows XP installation from the list and press R to begin the Repair process. Pay close attention, you will soon interrupt this process!
  * You will be required to reboot after the “copying files” stage; select “reboot” or wait for it to happen autmatically in 15 seconds. Put your fingers on the Shift and F10 keys and be ready!
  * When you see “Installing Devices” progress bar in the lower left-hand corner of the screen, press Shift-F10 together.
  * A command console window will open. Enter NUSRMGR.CPL and press Enter.
  * The User Accounts Manager console will appear. Pick the account you need to change and enter a new password. Tadaahhh

Comments:
Date of last update: 06-11-2010
Author:Gaetan Barthelemy

No related posts.

if you track the message you get retrying categorization on Exchange 2003.

When updating meeting sent to a distribution list or more than one user, the message is not being delivered and the sender will receive an undeliverable message a few days later (of course the meeting was never updated so you were wondering why no one showed up to your powerpoint presentation)
Your message did not reach some or all of the intended recipients.
Subject: NEW Weekly Sales Call beginning on 5/20
Sent: 5/24/2010 6:14 AM
The following recipient(s) cannot be reached:
xxxxx on 5/26/2010 6:35 AM
Could not deliver the message in the time limit specified. Please retry or contact your administrator.

Affects: exchange 2003; outlook 2003 and 2007
Solutions to the issue:

The problem is related to the way outlook 2007 and 2007 handle meetings. The Outlook 2007 client mangles the message headers, specifically for meeting request updates sent to distribution lists in GAL.

The headers are only mangled when you’re using Outlook 2007 on Exchange 2003. If you’re entirely a 2003 or 2007 front & back end, the hotfix is not needed.

You can read more and find the hotfix at http://support.microsoft.com/kb/938650/en-us

Note that you will need to restart the server after installing the hotfix and adding a registry key.

Comments:
Date of last update: 06-03-2010
Author:Gaetan Barthelemy

<u</u>

No related posts.

You can use the Add or Remove Programs item in Control Panel to remove Business Contact Manager. However, if you want to disable Business Contact Manager without removing Business Contact Manager, follow these steps:

1. Quit Outlook.
2. Click Start, click Run, type regedit, and then click OK.
3. Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\Microsoft.BusinessSolutions.eCRM.OutlookAddIn.Connect.1
4. Right-click LoadBehavior, and then click Modify.
5. In the Value data box, type 1, and then click OK.
6. Quit Registry Editor.
7. Start Outlook.

To enable Business Contact Manager after you have disabled Business Contact Manager, follow these steps:

1. Quit Outlook.
2. Click Start, click Run, type regedit, and then click OK.
3. Locate and then click following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\Microsoft.BusinessSolutions.eCRM.OutlookAddIn.Connect.1
4. Right-click LoadBehavior, and then click Modify.
5. In the Value data box, type 3, and then click OK.
6. Quit Registry Editor.
7. Start Outlook.

Comments:
Date of last update: 06-02-2010
Author:Gaetan Barthelemy

<u</u>

No related posts.

Creating a DMZ on an ASA is an easy way for small business clients to offer internet access to workers who sub lease office space from without granting access to the company server or other network resources.  One only needs to add a few lines to a standard configuration.

1. Telnet into your ASA and enter the enable mode.

2. Create a new VLAN. This articles assumes that the VLan 2 is facing the internet and Vlan 1 is the inside interface.

enter the configuration terminal by typing:

ASA#: conf t

create the vlan:

ASA(config)# int vlan3

turn off interface forwarding:

ASA(config-if)# no forward interface Vlan1

Name the vLan:

ASA(config-if)# nameif dmz

Set Security level:

ASA(config-if)#security-level 50

Give IP Address:

ASA(config-if)#ip address 192.168.xx.1 255.255.255.0

Exit vlan interface configuration:

ASA(config-if)#exit

3. link port 7 of the firewall to the DMZ (note that by default it is linked to the inside interface)

conifigure the switch port:

ASA(config)# interface Ethernet0/7

link the switchport to the vlan

ASA(config-if)# switchport access vlan 3

ASA(config-if)# exit

4. Set up DHCP and DNS:

ASA(config)# dhcpd address 192.168.60.100-192.168.60.150 dmz

ASA(config)# dhcpd dns 4.2.2.1 interface dmz

ASA(config)# dhcpd enable dmz

5. Set up Network Address Translation:

ASA(config)# nat (dmz) 1 0.0.0.0 0.0.0.0

6. Don’t forget to:

ASA# write

No related posts.

• Contents
• • SSH Installation
  • Test the SSH service
  • SSH Management
  • Configuration Files
  • Enable Root Access

SSH Installation

Logon to the ubuntu server and open the terminal when you are using the graphical user interface. Type the following commands to install the OpenSSH client and server.

sudo apt-get install openssh-server openssh-client

Test the SSH service

Type the following command to test the openssh-server:

shh user@localhost

The system will prompt for an message to accept the public key. This key is used for the RSA authentication. Accept the public key en authenticate with the OpenSSH server.

SSH Management

Type the following command to start/stop/restart the SSH server:

Start SSH Server

sudo service ssh start

Stop SSH Server

sudo service ssh stop

Restart SSH Server

sudo service ssh restart

When this command returns in an error then navigate to the path /etc/init.d

Type the following command to start the SSH server:

Start SSH Server

ssh start

Stop SSH Server

ssh stop

Restart SSH Server

ssh restart

Configuration Files

The configuration files are located in:

/etc/ssh/

Use ssh_config to edit your own ssh client settings and use sshd_config to edit the openssh server settings.

Enable Root Access

By default root access is disabled. To enable root access the following configuration file needs to be edited:

/etc/ssh/sshd_config

To edit with the nano editor use the following command, do not forget the sudo command because else you do NOT have permission to save the config.

sudo nano /etc/ssh/sshd_config

Change the following rule:

PermitRootLogin: No    <– change it to –>     PermitRootLogin : Yes

Press CTRL + O to save the changes and restart the SSH server

Date of last update: 5-28-10
Author: Peter Hooghuis

No related posts.

• Contents
• • Main Changes
  • 1. Regular PAT – 1 External IP to many internal IP addresses
  • 2. Static : PAT (Port Forwarding)
  • 3. No NAT (seen mainly – but not always – on VPN traffic)
  • 4. Access Lists

Issue: Cisco ASA 8.3 Command Changes
Affects: Cisco ASA version 8.3 and PIX version &
Solutions to the issue:

Main Changes

The main changes are on the NAT / Global / Access-List commands.
Basically there is no more global command, and we are now a lot more reliant on object groups.
If you are port forwarding (Static PAT) then the dns re-write will no longer work.
NAT 0 (or no nat) no longer exists. For example:

1. Regular PAT – 1 External IP to many internal IP addresses

- Before 8.3 version
nat (inside) 1 0 0
global (outside) 1 interface
- 8.3 version
object network obj_any
subnet 0.0.0.0 0.0.0.0
nat (inside,outside) dynamic interface

2. Static : PAT (Port Forwarding)

- Before 8.3 version

access-list inbound extended permit tcp any interface outside eq smtp
access-list inbound extended permit tcp any interface outside eq www
static (inside,outside) tcp interface smtp 192.168.1.10 smtp netmask 255.255.255.255
static (inside,outside) tcp interface www 192.168.1.10 www netmask 255.255.255.255

- 8.3 version

access-list inbound extended permit tcp any object obj-192.168.1.10-01 eq smtp
access-list inbound extended permit tcp any object obj-192.168.1.10 eq www
object network obj-192.168.1.10
host 192.168.1.10
object network obj-192.168.1.10-01
host 192.168.1.10
object network obj-192.168.1.10
nat (inside,outside) static interface service tcp www www
object network obj-192.168.1.10-01
nat (inside,outside) static interface service tcp smtp smtp

3. No NAT (seen mainly – but not always – on VPN traffic)

- Before 8.3 version

nat (inside) 0 access-list EXEMPT
access-list EXEMPT extended permit ip 192.168.1.0 255.255.255.0 66.67.70.0 255.255.255.0
- 8.3 version

object network obj-192.168.1.10
subnet 192.168.1.10 255.255.255.0
object network obj-66.67.70.0
subnet 66.67.70.0 255.255.255.0
nat (inside,any) source static obj-192.168.1.10.0 obj-192.168.1.10.0 destination static obj-66.67.70.0 obj-66.67.70.0

4. Access Lists

For as long as I can remember when you allowed access to an IP address on a PIX/ASA you allowed access to its translated IP address, NOW YOU DO NOT, you allow access to its “Pre-translation address”

- Before 8.3 version

access-list inbound extended permit tcp any host 123.123.123.123 eq www
access-group inbound in interface outside
static (inside,outside) tcp 123.123.123.123 www 10.254.254.5 www netmask 255.255.255.255

- 8.3 version

access-list inbound extended permit tcp any object obj-10.254.254.5
access-group inbound in interface outside
object network obj-10.254.254.5
host 10.254.254.5
nat (inside,outside) static 123.123.123.123 service tcp www www

References – Credits – Or External Links Cisco ASA 5500 Migration Guide for Version 8.3

Note that if you want to upgrade your asa to version 8.3, your current configuration will be migrated by the IP migrating tool from cisco.

Warning
If an access-list used by these features is shared with per-user ACL
then the original access-list has to be recreated.
INFO: Note that identical IP addresses or overlapping IP ranges on
different interfaces are not detectable by automated Real IP migration.
If your deployment contains such scenarios, please verify your migrated
configuration is appropriate for those overlapping addresses/ranges.
Please also refer to the ASA 8.3 migration guide for a complete
explanation of the automated migration process.

Date of last update: 5-24-10
Author: Gaetan Barthelemy

No related posts.

Faulting application name: spoolsv.exe, version: 6.1.7600.16385, time stamp: 0×4a5bd3d1
Faulting module name: TPVMMon.dll, version: 2.0.51.5, time stamp: 0×48359080
Faulting application start time: 0×01caa2aa2c4394d8
Faulting application path: C:\Windows\System32\spoolsv.exe
Faulting module path: C:\Windows\System32\TPVMMon.dll
Report Id: 7188e318-0e9d-11df-9123-895fd79b6e49
Faulting application name: spoolsv.exe, version: 6.1.7600.16385, time stamp: 0×4a5bd3d1Faulting module name: TPVMMon.dll, version: 2.0.51.5, time stamp: 0×48359080Exception code: 0xc0000005Fault offset: 0×000000000000846eFaulting process id: 0×1300Faulting application start time: 0×01caa2aa2c4394d8Faulting application path: C:\Windows\System32\spoolsv.exeFaulting module path: C:\Windows\System32\TPVMMon.dllReport Id: 7188e318-0e9d-11df-9123-895fd79b6e49
 
Affects:  Windows on a Mac.  Usually only once the bootcamp partition has been used by VMware Fusion on the Mac side. 

Solutions to the issue: Run Regedit and remove the following registry key:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Print\Monitors\ThinPrint Print Port Monitor for VMWare]

‘Comments:Export the Registry or take a system restore point before any changes to the registry!</u

‘Author: Drew Hunzeker

No related posts.

Start by creating the translation rule set:
Login

UC520(config)#voice translation-rule 800

Then create a translation rule for a ten digit number:

UC520(cfg-translation-rule)#rule 1 /\(……….\)/ /91\1/

You can test by leaving the the conf terminal and testing:

UC520#test voice translation-rule 800 4155738216
Matched with rule 1
Original number: 4155738216 Translated number: 914155738216
Original number type: none Translated number type: none
Original number plan: none Translated number plan: none

Come back to the Terminal and create a rule for seven digit numbers

UC520(config)#voice translation-rule 800
UC520(cfg-translation-rule)#rule 2 /\(…….\)/ /91\1/

Test:

UC520#test voice translation-rule 800 5738216
Matched with rule 2
Original number: 5738216 Translated number: 915738216
Original number type: none Translated number type: none
Original number plan: none Translated number plan: none

Then add a level of abstraction by creating a translation profile:

UC520(config)#voice translation-profile append_91
UC520(cfg-translation-profile)#translate calling 800
UC520(cfg-translation-profile)#exit

Finally Apply the Profile to all incoming voice ports:

UC520(config)#voice-port 0/1/0
UC520(config-voiceport)#translation-profile incoming append_91
UC520(config-voiceport)#exit
UC520(config)#voice-port 0/1/1
UC520(config-voiceport)#translation-profile incoming append_91
UC520(config-voiceport)#exit
UC520(config)#voice-port 0/1/2
UC520(config-voiceport)#translation-profile incoming append_91
UC520(config-voiceport)#exit
UC520(config)#voice-port 0/1/3
UC520(config-voiceport)#translation-profile incoming append_91
UC520(config-voiceport)#exit
UC520(config)#exit

Test, write, and bobs your uncle.

Related posts:

1. Cisco Unified Communications 500 Series

Affects: Outlook

Solution/Process: Google offers a free sync and email upload tool for Google Apps accounts coming from Outlook. However, there is no support for free gmail accounts. The way to transfer emails in such a situation is to use IMAP. Here are the steps:

- Export the folders/emails you want from Outlook to a new .pst file

- Create a new mail profile and new account and import the .pst file

- Add a new account using the gmail IMAP settings: www.howtogeek.com

- Copy the folders from the imported .pst file to the [Gmail] folder: www.labnol.org

- Your mail will now show up online in your gmail account

• Note – copying these folders may take some time. It is possible that if the folder is big enough it will lock up and cause Outlook to crash. In this case, it may be better to copy the emails in groups instead of as a whole folder.

Date of last update: 4-15-10

Author: Keller Medlin

Related posts:

1. Forcing Outlook 2007 to Download Complete IMAP Items
2. How to delete Google Apps Duplicate Contacts
3. Opening Attachments with the Outlook E-mail Security Update

Affects: .doc files and probably others

Solution/Process: If you use the “Set default programs” wizard or change the default program using the “always use this program” box, sometimes you will not be able to change the extension back. For example, a user accidentally changed .doc to open with Outlook and then could not change it back to Word.

You should download a program called “Types” http://types.sourceforge.net/ . Install it, then right click on the extension (in this case .doc) and go to properties. Then go to actions and browse to the winword.exe location and set it. Then go back to class and uncheck “Use linked class”. Close the program and try to open the file.

Date of last update: 4-13-10

Author: Keller Medlin

No related posts.

Affects: HP z800 workstations

Solution/Process: Certain configurations of these workstations ship with an ATI audio/video card and even if you try to update the drivers for the card it still says that there is no audio device detected. The solution is to go into the bios and enable the on-board sound and disable it on the card. Then you will be using the video from the card, but not the sound. The sound is only really useable in situations where you are using a HDTV.

Date of last update: 4-9-10

Author: Keller Medlin

Related posts:

1. New HP printer ink cartridges do not print clearly
2. HP Printer Tray Behavior
3. Hewlett-Packard HP

Affects: Windows environments running on a Mac

Solution/Process: If you have a second monitor configured to run with fusion then you may notice sometimes it does not come up correctly (either at all or it comes up as a mirror of your main desktop instead of extended). There are two things to try in this situation:

-Go to view, use single display in full screen and then go back to view, use all displays in full screen

-Reboot the windows environment and then reboot the Mac environment. For some reason it may require multiple restarts before it works properly.

• Note – One of the most noticeable times is that the monitor may not work after bringing the computer back from standby.

Date of last update: 4-9-10

Author: Keller Medlin

Related posts:

1. How to use shared folders on VMWare Fusion

Affects: HP printers

Solution/Process: This seems to be a known issue with some new HP cartridges. Assuming the cartridge hasn’t expired; the best way to fix this is to clean the gold connectors on the ink with a damp coffee filter or lent free cloth. Next, run the printer cleaning wizard (assuming there is one) multiple times (2x or 3x). Finally, run the alignment wizard. Then try printing a large document (10 or more pages). Sometimes the ink just needs to get going before it works properly so running it through a big print job should help.

Date of last update: 4-8-10

Author: Keller Medlin

Related posts:

1. Ricoh Multifunction Printer Error
2. HP Printer Tray Behavior
3. New HP Z800′s sound does not work out of the box

Affects: Windows desktops and servers

Solution Process: Sometimes users may notice that programs are opening seemingly on their own without prompt. This can be frustrating if the programs are popping up on screen and distracting the user from what they are doing. Oddly enough, it may be as simple as disabling the functionality of the extra keys on the keyboard. For example, some keyboards come pre-loaded with keys that will trigger certain windows programs or events. By using the software that came with the keyboard you should be able to disable these keys.

One example of this was a Logitech keyboard that had a touch sensitive key near the letter “Q”. A user was accidentally brushing past this key while typing and Windows Media Player was popping up; even without pressing the key. Using the Logitech software, I disabled the key and the issue stopped happening.

If the keyboard is not the issue then check to see if other programs are triggering the event. It could be that programs are tied to each other and causing each other to open.

Date of last update: 4-7-10

Author: Keller Medlin

Related posts:

1. Microsoft Windows Server 2008 or Microsoft Windows Server 2003
2. Microsoft Windows 7 Migration from XP
3. How to forward mail to an external email address

Affects: Known issue with Acronis backups but possibly other backup software as well

Solution/Process: If restoring a backup causes the disks to fail and not boot, the first thing to do is run a “chkdsk /r” and try to repair the disk. If for some reason the recovery console is not available or the administrator password is not known for the instance of windows that needs repairing, the next option is to install a new OS on another hard-drive. After the new OS is installed, the boot.ini file of the new OS can be configured to allow the old windows installation to show up as a boot option. This allows windows to use the new OS boot.ini file, but to boot into the old OS. You can modify the selections so that the old OS comes up by default, but the new OS is left as a secondary selection.

Here is an example of a boot.ini file configured with 2 choices:

[boot loader] timeout=10 default=multi(0)disk(0)rdisk(1)partition(2)\WINDOWS [operating systems] multi(0)disk(0)rdisk(1)partition(2)\WINDOWS=”Windows Server 2003 for Small Business Server” /fastdetect multi(0)disk(0)rdisk(1)partition(2)\WINDOWS.1=”Windows.1 Server 2003 for Small Business Server” /fastdetect

• Note that the correct rdisk, partition, and name have to be input. You can determine this information by running a “map arc” command. This will show the aforementioned information for each disk/partition.

Once the boot.ini file is configured, you will have to leave the new hard-drive in the system in order to boot to the old OS.

Date of last update: 4-06-10

Author: Keller Medlin

Related posts:

1. Setting up Time Machine Backups using a Buffalo Linkstation
2. Backup Exec System Recovery (BESR) by Symantec
3. Offsite Back-Ups by eFolder

For Development and Testing:

If you need to set up a mySQL server on a Mac OS X machine for testing purposes download MAMP (Mac Apache MySql Php or Python).  It contains an entire testing environment in a single application.  Once the application is installed you will find the MAMP folder in your application folder.  Configure and turn on the Servers by running the MAMP.app.  The web directory will will be /Applications/MAMP/htdocs.  You can see the magic when you point your browser to http://localhost:8888.  Configuring MySql will take place using PHPmyAdmin which is accessible from the MAMP home screen.  

For everyday use:

1. Download the latest .dmg installer (unless you are feeling spunky and want to compile your own) from mysql.com.  

2. For simple control you can install the preference pane that is included with the installer.  This will allow you to turn the service on or off.  (for bonus points you can turn it on and off by opening the terminal and typing in /usr/local/mysql/support-files/mysql.server start [or stop].

3. Otherwise you can install the the Beta Version of MySql’s Workbench Software that will give you a GUI for the Server. Make sure you get at least version 5.2 otherwise there is no server admin tab.  

It is a nice piece of software that will let you create your entire database schema visually and then sync it with the server.

Author: Drew Hunzeker

No related posts.

Affects: Wireless networks

Solution/Process: Adding a Wireless Booster is a good idea to remedy low signal. Meraki wireless access points provide an easy way to manage, configure, and scale a wireless network. With their centralized management web console, changes can be made quickly and securely. There are also some nice added features such as configurable guest access that make Meraki a great solution.

www.meraki.com

Author: Keller Medlin

Related posts:

1. Google-Meraki Wireless

Affects: Some Ricoh multi-function printers

Solution/Process: This is due to the fact that the printer is busy most likely with a print job. Unfortunately the only way around it is to keep hitting “Save” or “OK” to make the changes and eventually it will go through once there are no print jobs left. For a printer that is used frequently this becomes more of an issue. Even though a print job only takes about 10 seconds, if there are multiple jobs backing up in the queue, it can take a while to process the configuration changes.

Author: Keller Medlin

Related posts:

1. New HP printer ink cartridges do not print clearly

On a Windows Machine:

1. Open a Command Prompt either by searching for it (Vista and 7) in the start menu, or by opening the Start Menu selecting Run¦ and typing in the command CMD.

This will open a window with a command prompt.

2. Type the words: IPCONFIG /FLUSHDNS

3. Close the Window and try reloading the page

In Mac OSX:

1. Open a Terminal Session by opening terminal.app in Applications->Utilities.

2. In OSX versions greater than 10.5.2 Type the command: dscacheutil -flushcache

In OSX versions prior to 10.5.2 type the command : lookupd -flushcache

Linux:

1. Restart the nscd daemon with the command `/etc/init.d/nscd restart`

Author: Drew Hunzeker

Related posts:

1. How to install and configure Blackberry professional server
2. Microsoft Windows Server 2008 or Microsoft Windows Server 2003
3. Quickbooks Server Manager

Affects: Windows Server Operating Systems, Exchange 2003 & 2007

Solution/Process:
In Exchange Server 2003, mail for a recipient can be forwarded to an alternate recipient by modifying the recipient’s Delivery Options in ADUC | recipient -> properties | Exchange General tab.
If you need to forward mail to an external email address, you cannot simply type the address in Delivery Options. A (mail-enabled) Contact needs to be created in AD first, and Delivery Options modified to point to the Contact.
In Exchange Server 2007, these tasks remain the same. However, instead of using ADUC to accomplish them, you use the EMC or the shell (aka “EMS”). The new term for a Contact is MailContact.

To create a MailContact using the Exchange Management Console:
1. Expand Recipient Configuration | Mail Contact
2. In the Action pane, click New Mail Contact
3. To create a new Contact object, leave the default (New Contact) selected | click Next
4. Type First name, Last name
5. Click Edit to add the external email address
6. Click New to complete creation of new MailContact
To create a new MailContact using the Exchange Management Shell: New-MailContact -Name “Foo User” -ExternalEmailAddress “foo@externaldomain.com Next, we set the recipient’s Delivery Options to deliver to the alternate recipient.

To forward mail for a recipient to the MailContact using the Exchange Management Console:
1. Expand Recipient Configuration | Mailbox | select mailbox | properties | Mail Flow Settings tab | Delivery Options
2. Under Forwarding address, select the Forward to checkbox
3. Click Browse to select the MailContact

Modifying Delivery Options to forward email to an alternate recipient
4.( Optional): If a copy of the message needs to be delivered to both the external recipient and the original recipient’s mailbox, select the Deliver message to both forwarding address and mailbox
5. Click OK to close Delivery Options properties
6. Click OK to close recipient’s properties

Author: Keller Medlin

Related posts:

1. Opening Attachments with the Outlook E-mail Security Update
2. Automatic forwarding outside of the organisation
3. Using Exmerge on Exchange 2003

Affects: Windows PCs running Outlook 2007

Solution/Process:

In order to fix this go to Tools>Send/Receive>Send/Receive Settings> and then Define Send/Receive Groups. There is also a shortcut which is Ctrl+Alt+S.

When the Send/Receive Groups dialog box comes up, choose the edit button. Select your IMAP account in the left-hand pane and then under the Receive Mail Items section choose either “Download complete items” or “Use the custom behavior defined below”.

A good recommendation is to use the custom behavior and only download the complete items for the Inbox folder by selecting “Download complete item including attachments”.

Author: Keller Medlin

Related posts:

1. Transferring emails from Outlook to a free (non apps) Gmail account
2. How to reset the default virtual directories that are required to provide Outlook Web Access, Exchange ActiveSync, and Outlook Mobile Access services in Exchange Server 2003
3. How to forward mail to an external email address

Affects: Mac computers

Solution/Process:
Step 1: To use the LinkStation as a location for backups from a Mac running Time Machine, begin by creating a folder for the backups. Log into the web console for the LinkStation, then in Shared Folder Setup, click on Create Folder.

Step 2: Name the folder. Make sure that Apple is checked for Shared Folder Attributes. Disable Recycle Bin support. Click Save.

Step 3: Navigate to Extensions/Time Machine and click Modify Settings.

Step 4: Enable Time Machine. For the Target Folder, choose the folder you created for the backups. Click Save.

Step 5 : Enter the Mac’s “Computer Name” (from its Sharing page) as the Target Host Name. For the Target MAC address, enter the Mac’s Ethernet ID from Advanced Settings in its Network preferences page. See the next page for instructions on finding the right values for these fields. Click Create when done.

The name for the Target Host Name field can be found just under the Computer Name on the Sharing page in System Preferences. It is circled in red in the screenshot to the left. Do not include the part after the first period. By default, the Target Host name will be the same as the Computer Name above it unless you have changed it. To work with Time Machine, this name should contain only the following characters: 0123456789abcdefghijklmnopqrstu vwxyz-ABCDEFGHIJKLMNOPQRSTUVWXYZ. Spaces and other characters should not be used if Time Machine is to function properly.

For the Target MAC address, enter the Mac’s Ethernet MAC Address from System Profiler, located in Applications/Utilities. Make sure that you are looking at the Ethernet MAC Address and not the AirPort MAC Address, as they will be different.

It will take several minutes for the image file to be created. The file TargetHostName_TargetMACAddress. sparsebundle is being created in the backup folder. To be safe, wait ten minutes before continuing.

Step 6 : After ten minutes have passed, open the Finder. Click on All below Shared. Find your LinkStation’s “TimeMachine” in the window and double-click on it. Close the Finder.

Step 7 : Open Time Machine. Click on Choose Backup Disk.

Step 8 : Choose your LinkStation from the list and click Use for Backup. In 120 seconds, Time Machine will begin running a backup.

Author: Keller Medlin

Related posts:

1. Restoring a backup causes the machine to not boot
2. How to use shared folders on VMWare Fusion
3. Backup Exec System Recovery (BESR) by Symantec

Affects: Blackberry smartphones and Google Apps accounts

Solution/Process:
Sometimes users will notice that their contacts are duplicating sometimes multiple times. This seems to be a known and relatively common issue. Unfortunately the fix takes some time and involves wiping the Blackberry.

Step 1: Log into the web interface of the client (mail.domain.com) and run the “find duplicates” script for the contacts. If there are too many contacts for the script to run (usually over 5000) then you will have to manually delete them until it will run.

Step 2: Verify that there are no more duplicate contacts.

Step 3: Delete the Outlook profile and re-run the Google Sync application. Setup a new profile and do not import anything. This fixes the duplicate issue in Outlook as it will pull down the updated contact database with no duplicates.

Step 4: On the Blackberry remove all sync data by going to the sync application and going to “delete”. This can take up to an hour or more to remove. Then do a full backup of the blackberry and a security wipe (leaves SIM data alone).

Step 5: Once the Blackberry comes back up, re-download and run the sync application and sync the contacts and calendars. Then on the phone email setup, setup the personal email account but do NOT sync the contacts when it asks you. This will allow for the mail to flow through the normal blackberry mail interface and the calendar/contacts to pull from Google.

Author: Keller Medlin

Related posts:

1. Google Apps
2. Google Apps
3. Transferring emails from Outlook to a free (non apps) Gmail account

Affects: Mac systems and virtualized Windows systems

Solution/Process: In order to setup shared folders so that files can be easily accessed on both the Mac and Windows side, you first need to go to Virtual Machine > Shared Folders > Turn Shared Folders On
Then simply pick which folder you want to share (Documents, etc…). This will now allow you to copy files to access on both the Mac side and Windows side. This can be useful for screenshots, burning CDs, or other tasks that may require using one OS or the other.

Author: Keller Medlin

Related posts:

1. VMware Fusion does not detect second monitor or monitor does not show up
2. Setting up Time Machine Backups using a Buffalo Linkstation
3. Apple- Macs and iPhones

No related posts.

Affects: Adobe

Solutions to the issue:

You have the choice to disable Adobe Updater:
1. Start>Run>msconfig
2. Untick apdproxy and AdobeUpdater on the Startup Tab

Or if you still want to use Adobe Updater, you can move everything from the folder

“C:\Users\myusername\AppData\Local\Adobe\Updater5″
to
“C:\Users\myusername\AppData\Local\Adobe\Updater5\old”.

When you run the updater after this, it should work.
Author: Augustin, Anthony

No related posts.

Affects:

Solutions to the issue:

1. Send an email from the original domain (the LANLogic customer) to support@lanlogic.net asking for the domain to be added
2. LANLogic will send an email with the changes to be made to the MX record for the domain
3. Make the MX changes at the Domain Registrar

Comments:

Alias domains can only receive email. Email sent from the account will be sent from the Primary Email Address (see below to change Primary Address)

Aliases must be created for all users

1. Log into the Control Panel (https://cp.myhostedexchange.com with an admin account for your domain)
2. Click on “List users”
3. Select the user you want to add an alias for
4. Select “User Actions”
5. Click on “Manage Email Addresses”
6. Click on “Add”
7. Type in the full email alias (eg. alias@domain.com)
8. Click on “Add”

To make the alias domain the primary account (so it will be sent from the domain)

1. Log into the LANLogic web interface as the account admin
2. Click on “List users”
3. Select the user you want to add an alias for
4. Select “User Actions”
5. Click on “Manage Email Addresses”
6. Select the address you would like to set at primary
7. Click “set as Primary”

Author: Hunzeker, Drew

Related posts:

1. How to forward mail to an external email address
2. Granting Mailbox Permissions before an ExMerge
3. Transferring emails from Outlook to a free (non apps) Gmail account

To be able to do that, just follow these few steps:

1. Go to your event/group/page
2. Click on Invite people to come/Invite people to join/Suggest to friends
3. A window appears, with all your friends.
4. Paste this snippet in the URL field of your browser.
javascript:elms=document.getElementById(‘friends’).getElementsByTagName(‘li’);for(var fid in elms){if(typeof elms[fid] === ‘object’){fs.click(elms[fid]);}}
5. Left-click the mouse in the URL field and hit Enter, as you will do for any other address.
6. All of your friends have been selected. You can now click on Send invitations.

Comments: You can use the filter option to select friends from a precise network before step 4. You can then repeat the same steps for another network

Author: Messiant, Tatiana

No related posts.

Author: Hunzeker, Drew

Related posts:

1. New HP printer ink cartridges do not print clearly
2. New HP Z800′s sound does not work out of the box

• Use the following procedure to grant access to an Exchange 2000 or an Exchange 2003 mailbox:

Note: You must have the appropriate Exchange administrative permissions to do so.
1. Start Active Directory Users and Computers.
2. On the View menu, ensure that the Advanced Features check box is selected.
Note: This is not necessary on Exchange Server 2003 because of the fact that the Exchange Advanced tab is exposed by default.
3. Right-click the user whose mailbox you want to give permissions to and choose Properties.
4. On the Exchange Advanced tab, click Mailbox Rights.
5. Notice that the Domain Admins and Enterprise Admins have both been given Deny access to Full Mailbox access.
6. Click Add, click the user or group who you want to have access to this mailbox, and then click OK.
7. Be sure that the user or group is selected in the Name box.
8. In the Permissions list, click Allow next to Full Mailbox Access, and then click OK.
9. Click Ok all the way out.
Warning: If the Group or User name list is empty and you only see one line with the name of SELF – do NOT touch the permission settings before you read SELF Permission on Exchange Mailboxes.
Note: If the purpose of granting such access is to permit use of the EXMERGE utility (see Delete Messages from Mailboxes by using EXMERGE for an example of such a requirement), grant Receive As permissions. You can also grant Full Control permissions if you want complete access.

• Use the following procedure to grant access to Exchange 2000 or an Exchange 2003 mailbox found on a specific mailbox store:

Note: You must have the appropriate Exchange administrative permissions to do so.
1. Start Exchange System Manager.
2. Drill down to your server object within the appropriate Administrative Group. Expand the server object and find the required mailbox store within the appropriate Storage Group. Right-click it and choose Properties.

a. In the Properties window go to the Security tab.
b. Click Add, click the user or group who you want to have access to the mailboxes, and then click OK.
c. Be sure that the user or group is selected in the Name box.
d. In the Permissions list, click Allow next to Full Control, and then click OK.
Note: Make sure there is no Deny checkbox selected next to the Send As and Receive As permissions.

3. Click Ok all the way out.

• Use the following procedure to grant access to Exchange 2000 or an Exchange 2003 mailboxes found on a specific server:

Note: You must have the appropriate Exchange administrative permissions to do so.
1. Start Exchange System Manager.
2. Drill down to your server object within the appropriate Administrative Group. Right-click it and choose Properties.

a. In the Properties window go to the Security tab.
b. Click Add, click the user or group who you want to have access to the mailboxes, and then click OK.
c. Be sure that the user or group is selected in the Name box.
d. In the Permissions list, click Allow next to Full Control, and then click OK.

Note: Make sure there is no Deny checkbox selected next to the Send As and Receive As permissions.

3. Click Ok all the way out.
Note: It might take some time before the changes you’ve made will take effect. The amount of time needed is influenced by the number of domain controllers, Global Catalogs and site replication schedules and intervals. On one domain with one site containing multiple domain controllers it might take up to 15 minutes before you can begin using these new permissions. On single servers that are also DCs you can speed up the process by restarting the Information Store service.

Author: Hunzeker, Drew

Related posts:

1. Using Exmerge on Exchange 2003
2. How to forward mail to an external email address
3. How to reset the default virtual directories that are required to provide Outlook Web Access, Exchange ActiveSync, and Outlook Mobile Access services in Exchange Server 2003

No related posts.

• Exchange 2003:

1. Check in Exchange systems manager:
2. Global Settings/Internet message Format/default – advanced tab.
3. For your rule to work €œAllow automatic forward” needs to be checked.

• Exchange 2007:

1. Exchange management console
2. Organization Configuration /hub transport /remote domains
3. Click right on default format of original message sent as attachment to journal report
4. Check €œAllow automatic forward

Comments:

Author: Barthelemy, Gaetan

Related posts:

1. How to forward mail to an external email address
2. AutoDiscovery setup for intermedia when using Outlook 2007 and Exchange 2007
3. How to reset the default virtual directories that are required to provide Outlook Web Access, Exchange ActiveSync, and Outlook Mobile Access services in Exchange Server 2003

a. Drill down to your server object within the appropriate Administrative Group.
b. Expand the server object and find the required mailbox store within the appropriate Storage Group. Right-click it and choose Properties.
c. In the Properties window go to the Security tab.
d. Click Add, click the user or group who you want to have access to the mailboxes, and then click OK.
e. Be sure that the user or group is selected in the Name box.
f. In the Permissions list, click Allow next to Full Control, and then click OK (Note: Make sure there is no Deny checkbox selected next to the Send As and Receive As permissions.)
g. Click Ok all the way out.

4. Run Exmerge.exe

a. Select the exchange store and mailbox
b. Select the pst destination
c. Decide on any filters
d. Run it.

Comments:
Date of last update: 05/11/2009
Author: Hunzeker, Drew

Related posts:

1. Granting Mailbox Permissions before an ExMerge
2. How to reset the default virtual directories that are required to provide Outlook Web Access, Exchange ActiveSync, and Outlook Mobile Access services in Exchange Server 2003
3. How to forward mail to an external email address

Failure to have the QuickBooks Server Manager do so will result in the message “Error: “-6129,0″ or “-6133,0″ when creating a new company file or opening an existing one” being displayed.

1) Manually run the scan from the server (requires giving server access to whoever is creating the companies in QuickBooks)

a) Open the QuickBooks Database Server Manager and click the Scan Folders tab.
b) Indicate which folders contain QuickBooks company files. If unsure where files are stored, choose to scan entire disks.
c) Click the Scan button to begin the scan. The display bar will indicate which folders are being scanned.
Once the scan is complete, the company files in the scanned folders are configured for multi-user access.

-OR-

2) (Recommended) Set the QuickBooks Server Manager to monitor the drive on which the QuickBooks database is stored.

a) Open the QuickBooks Server Manager
b) Click on the Monitor Drives Tab
c) Select the local drive that contains the QuickBooks data files.

Related posts:

1. Quickbooks Installation Support
2. How to install and configure Blackberry professional server
3. Microsoft Windows Server 2008 or Microsoft Windows Server 2003

BlackBerry professional Server™ Express is for the company that wants to get up and running quickly with BlackBerry Enterprise Server, and includes one Client Access License (CAL), with the ability to add up to 30 additional CALs and/or upgrade to BlackBerry Enterprise Server at any time.

The BlackBerry Professional Server Express can be downloaded for free by entering the device pin (you can find it in your BB in options/status)

http://na.BlackBerry.com/eng/services/server/offers/professional_express.jsp

You will then receive an email with a link. Click on it and verify your information. On the next page, you can start downloading the software. At the bottom of the page you will have find important information (CAL License key, SRP identifier and SRP Authentication key).

Once the download is finished, unzip it but DO NOT start the installation yet.

Go here for the steps:

http://na.BlackBerry.com/eng/support/preinstallation/exchange.jsp

If your OS is Windows Server 2003, you can install and access the BlackBerry Enterprise Server using the Microsoft remote desktop connection program.

Attention: Do not install the Terminal Server program.

The process is the following:

1. Prepare BlackBerry enterprise server

1. Install Microsoft Exchange server 2003 or 2000 SP4  specifically dedicated to a BlackBerry Enterprise server
2. Install MSMQ Version 3
To install Message Queuing on a computer running Windows Server 2003

a. Click add or remove programs in control panel
b. In the add or remove programs dialog box, click add/remove windows components
c. In the windows components wizard dialog box, in the components box, click application server, and then click details
d. In the application server dialog box, in the subcomponents of application server box, select the message queuing check box, and then click details
e. Clear the default Active Directory Integration and Triggers subcomponents and select only the Common subcomponent.
f. Click OK.

3. Verify that MDAC version 2.8 SP1 or later is installed
Use component checker to do that. You can download it directly from:
http://www.microsoft.com/downloads/
4. Other software you will need to install if they are not present:

a. If you are using SNMP monitoring, you must install the SNMP service before you install the BlackBerry Enterprise Server.
Visit www.microsoft.com/technet/ for more information about installing and configuring the SNMP service.
b. Install Microsoft® Windows Media® Player Version 9 or later to support audio attachments.

5. Install one of the following database applications if needed otherwise gather the info about the SQL instance as you will need it later on.

a. Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
b. Microsoft SQL Server 2000 SP3a
c. Microsoft SQL Server 2005 (Professional, Enterprise, or Express) (Recommended)
Note 2: If you install BlackBerry MDS Services, you cannot use Microsoft SQL Server 2005 Express as your database application (hopefully a solution will be found for that)

Visit Microsoft for the download of SQL Server 2005 and install it:

1)   Use the instance “server_name\SQLEXPRESS in the installation process. (no need to reboot yet).
2)  Use the same instance name: SQLEXPRESS (by default)
3)  Use local service as the log on account.
4)  Accept all the other options default.

2. Prepare Network

Run a program to verify that outbound-initiated, bidirectional port communications to the BlackBerry infrastructure are operational.

1. Go to Commander and go to the directory where you unzipped the downloaded file.
2. Go to Tools directory
3. Type bbrsptext.exe –host srp.na.BlackBerry.net
4. You should receive a successful message

3. Prepare Active Directory and messaging system

1. Create a Microsoft Active Directory® account with an associated mailbox to act as a BlackBerry Enterprise. The user is called BESAdmin
2. Set permissions: http://www.BlackBerry.com

• Task 1

To assign Local Administrator rights to the BlackBerry Enterprise Server service account, complete the following steps:

For a BlackBerry Enterprise Server on a Domain Controller

a. Click Start > Programs > Administrative Tools > Active Directory Users and Computers.
b. Select the Built-in folder.
c. Double-click Administrators.
d. On the Members tab, click Add.
e. Select the BlackBerry Enterprise Server service account name (for example, BESAdmin), and then click Add.
g. Click OK.

For a BlackBerry Enterprise Server on a Member Server

a. Click Start > Administrative Tools > Computer Management.
b. In the left pane, expand System Tools and click Local Users and Groups.
c. In the right pane, double-click Groups.
d.  Right-click Administrators and click Properties.
e. In the Select Users, Contacts, Computers, or Groups window, select the BlackBerry Enterprise Server service account name.
f. Click OK.

• Task 2

To assign Local Security Policy permissions to the BlackBerry Enterprise Server service account, complete the following steps:

Note: This procedure allows the BlackBerry Enterprise Server service account to access the local computer and to run the BlackBerry Enterprise Server software as a Windows® service.

a. Click Start > Administrative Tools > Local Security Policy.
If the computer is a domain controller, click Start > Administrative Tools > Domain Controller Security Policy.
b. In the Local Securities window, click Local Policies > User Rights Assignment.
c. Perform one of the following steps:

* For Windows Server® 2000, double-click Log on Locally.

* For Windows Server 2003, double-click Allow Log on Locally.

d. Click Add User or Group.
e. Select the BlackBerry Enterprise Server service account name, and then click Add.
f. Click OK.
g. In the Local Security Settings window, double-click Log On As a Service.
h. Click Add User and then select the BlackBerry Enterprise Server service account.
i. Click OK.

• Task 3

To assign Microsoft Exchange Server permissions at the Administrative Group level, complete the following steps for your environment:

Note: This procedure allows a system administrator to manage BlackBerry smartphone users and groups.

For Microsoft Exchange 2000 or 2003

a. Click Start > Programs > Microsoft Exchange > System Manager.
b. Select Administrative Groups.
c. Right-click First Administrative Group and select Delegate Control.
d. In the Exchange Administration Delegation Wizard, click Next, and then click Add.
e. Click Browse and then select the BlackBerry Enterprise Server service account.
f. Click OK.
g. In the Role drop-down list in the Delegate Control window, select Exchange View Only Administrator.
h. Click OK to add the BlackBerry Enterprise Server service account to the Users and Groups list.
i. Click Next, and then click Finish.

For Microsoft Exchange 2007
To set an Exchange View Only Administrator role:

a. Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
b. In the command prompt window, type the following and then press ENTER:
add-exchangeadministrator <BESAdmin> -role ViewOnlyAdmin
where < BESAdmin> is the name of the BlackBerry Enterprise Server service account.

To check an Exchange View Only Administrator role:

a. Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
b. In the command prompt window, type the following and then press Enter:
get-exchangeadministrator | Format-List
c. Verify that the BlackBerry Enterprise Server service account has the ViewOnlyAdmin role.

• Task 4

To assign Microsoft Exchange Server permissions at the Microsoft Exchange Server level, complete the following steps:

For Microsoft Exchange 2000 or 2003

a. Click Start > Programs > Microsoft Exchange > System Manager.
b. Select Administrative Groups > First Administrative Group > Servers.
c. Right-click the Microsoft Exchange Server name and then click Properties.
d. On the Security tab, select the BlackBerry Enterprise Server service account.
e. Select the following permissions from the Permissions list:
f.

* Administer Information Store

* Send As

* Receive As

g. Click the Advanced button.
h. Verify that the Select the Allow inheritable permissions from parent to propagate to this object and all child objects option is selected.
i. Click OK.
j. Repeat the preceding steps for each Microsoft Exchange Server that will host mailboxes within the routing group.

For Microsoft Exchange 2007

To set Send As, Receive As, and Administer Information Store permissions, complete the following steps:

a. Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
b. Type the following line, and then press Enter:
get-mailboxserver <Exchange2007> | add-adpermission -user <BESAdmin> -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin

Where < Exchange2007> is the name of the Microsoft Exchange 2007 Server and < BESAdmin> is the name of the BlackBerry Enterprise Server service account.

If inheritiance to the individual mail stores is not enabled, to set the Send As, Receive As, and Administer information store permissions at the store level, complete the following steps from the Exchanage management shell:

get-mailboxdatabase <Exchange2007>\<dbname> | add-adpermission -user <BESAdmin> -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin

Where <dbname> = ‘First storage group\Mail box database’

To verify the Send As, Receive As, and Administer Information Store permissions, complete the following steps:

a. Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
b. In the command prompt window, type the following line and press Enter.
get-mailboxserver <Exchange2007> | get-ADpermission -user <BESAdmin> | Format-List

To verify the Send As, Receive As, and Administer Information Store permissions at the mailbox store level, complete the following steps:

a. Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
b. In the command prompt window, type the following and press Enter.
get-mailboxdatabase <Exchange2007>\<dbname> | get-ADpermission -user <BESAdmin> | Format-List

For Microsoft Exchange 5.5

The BlackBerry Enterprise Server service account requires the Service Account Admin permissions on the Site container and Configuration container.

• Task 5
  

To grant the Send As permission on a single account for all BlackBerry smartphone users in a Microsoft® Active Directory® domain or container, complete the following steps:

a. Open Active Directory Users and Computers.
b. From the View menu, select the Advanced Features option.

Note: If Advanced Features is not selected, the Security tab will not be visible for domain and container objects.

c. Right-click the appropriate domain or container and then click Properties.
d. On the Security tab, click Advanced.
e. If the BlackBerry Enterprise Server service account that requires the Send As permission is not listed, click Add and then select the BlackBerry Enterprise Server service account name.
f. Click OK.
g. Double-click the BlackBerry Enterprise Server service account name.
i. Select the Send As check box.
j. Click Apply and then click OK.
k. Close the Properties window and then close Active Directory Users and Computers.

Note: For more information about the Send As permission, see article 912918 in the Microsoft Support Knowledge Base.

Note that if the user is a domain admin or administrator you will either need to remove it from those groups or do the following:

Research: http://www.experts-exchange.com/Hardware/Handhelds_-_PDAs/BlackBerry/Q_23069375.html

To correct the “Send As” issue here are the steps used to quickly resolve this issue:

1. Open Active Directory and from the View menu select “Advanced Features”. Then go to each user that will be added to the BES and open their properties, go to the security tab and add the user BESadmin and add the security permission “Send As”.

2. Run the following script logged on as Administrator

Note: Only use this step if you have BlackBerry users that are members of Admin groups. Using best practice methods it is recommended that mobile user accounts aren’t members of any administration groups.

dsacls “cn=adminsdholder,cn=system,dc=domainname,dc=com ” /G “DOMAINNAME\BESadmin:CA;Send As”

Example 1: dsacls “cn=adminsdholder,cn=system,dc=ipsofacto,dc=office ” /G “ipsofacto\BESadmin:CA;Send As”

NOTE: dsacls can be found in the Windows Server 2003 SP1 Support Tools pack: Download details: http://www.microsoft.com/downloads/details.aspx?FamilyId=6EC50B78-8BE1-4E81-B3BE-4E7AC4F0912D

4. Install BlackBerry enterprise server

Install the BlackBerry Enterprise Server while logged in with the BESAdmin service account.

1. Execute the setup.exe
2. Follow the instruction:

a.  Enter user info and accept agreement
b.Prerequisites are ok
c. Enter besadmin’s password
d. Installation path do d:\Program Files\Research In Motion\BlackBerry Enterprise Server\
e. Logs path to d:\Program Files\Research in Motion\BlackBerry Enterprise Server\
f. BB Professional software name: “enter server name”

3. Restart and log in with BESAdmin Service Account
4. The setup has restarted and the setup will continue automatically
5. Database Settings

a. Database location: local
b. SQL server: downtown\SQLEXPRESS
c. Database name BESMgmt (default) port 1433
d. Database authentication: windows trusted
It will then prompt that the database BESMgmt doesn’t exit and ask if I would like to create it Yes
It has been created.

6. Enter SRP authentication info (received at registration)

a. Click on validate srp key and ID

7. Enter microsoft exchange server name : sfsbs01.Cooper-Roberts.office

a. Mailbox is besadmin
b. Click on check name
c. Click ok It has populated the SRP address with srp.us.BlackBerry.net

8. Click start services to start the BB services and complete the installation by clicking on finish

5. Activate BlackBerry device

Start the BlackBerry manager:

It asks for a mapi profile. Enter the server name (example Downtown) and user: besadmin
1. Add a BlackBerry device user

a. Open BlackBerry Manager.
b. In the left pane, click on add new users wizard
c. Select the user
d. IT policy: default
e. Device deployment:

1)   Wirelessly … best solution as there is no need to have a physical connection with the BB device
2)   Using the BB manager
3)   Using desktop manager

f. User create successfully. Click device management withing a users account to assign them a device with the users messaging account, and install the appropriate service books

2. Enable wireless activation of the BlackBerry device

a. Open BlackBerry Manager.
b. In the left pane, click the appropriate BlackBerry Enterprise Server.
c. In the right pane, click the User List tab.
d. Select a BlackBerry device user account.
e. Click Service Access.
f. Click Set Activation Password.
g. Specify a password to use for the BlackBerry device activation.

3. Enable folder redirection

a. Highlight the device and select folder redirection.
b. Select the folders you would like the messages to be redirected to the inbox on the device

6. Finalize Installation: Activate the BlackBerry device (see activation issue article)
Make sure that the user has the BB enterprise plan (if you go to options, advanced options but can’t see enterprise activation; then you don’t have the plan)
1. On the BlackBerry device, open Options.
2. Select Advanced Options, then select Enterprise Activation.
3. Type the BlackBerry device user email address and activation password.
4. Select Activate.
5. Send test email messages and appointments.

7. Adding new BlackBerry users to the BlackBerry manager:
1. Order an extra license (BBE BlackBerry Enterprise Server CAL, 1 user) from ingram (sku K65903) or from the BlackBerry website Go to: https://www.BlackBerry.com/purchaseonline
2. Add the extra license in BB manager:

a. Click on BB domain on the left
b. Then Global Tab
c. Account on the right side
d. License management
e. Enter the cal you received in the email

3. Add new user:

a. Choose the appropriate BlackBerry enterprise express server
b. Click the server configuration tab
c. Click Common
d. Then click add user and choose the user you want to add

4. Activate the new user by setting Activation Password:

a. Choose the appropriate BlackBerry enterprise express server
b. Click the Users list tab
c. Select a BlackBerry device user account
d. Click Service Activity
e. Click set an activation password
f. Specify a password

5. Enter the information in the BB

a. On the bb, open Options
b. Select advanced options
c. Then Enterprise activation
d. Type the email and the password
e. Select activate
f. It should now synchronize with the server (it may take a long time)
g. You should now be able to send and receive messages, as well as checking contacts, calendars

Related posts:

1. Quickbooks Server Manager
2. Microsoft Windows Server 2008 or Microsoft Windows Server 2003
3. BlackBerrys, Handheld Devices and iPhones

SUMMARY

This article describes how to use the Ntdsutil.exe tool to seize or transfer Flexible Single Master Operations (FSMO) roles.

MORE INFORMATION

The first Microsoft Windows 2000 Active Directory domain controller in a forest is granted five FSMO roles when you run the Dcpromo.exe program and install Active Directory. There are two FSMO roles that are forest-wide and three that are per domain. If child domains are created, the two forest-wide roles do not change. A forest with two domains would have eight FSMOs; two for the forest and three domain specific FSMO roles in each domain.

The five FSMO roles are:

• Schema master- Forest-wide and one per forest
• Domaine naming master – Forest-wide and one per forest
• Domain naming master – Forest-wide and one per forest
• RID master – Domain-specific and one for each domain
• DC – PDC Emulator is domain-specific and one for each domain
• Infrastructure master – Domain-specific and one for each domain

To move the FSMO roles from one computer to another, you can use two different methods. The first method is a transfer and is the method that is recommended. You can use the first method if both computers are running. Use the second method if the FSMO roles holder is offline. The second method requires you to use the Ntdsutil.exe tool to seize the roles.

Note: Only seize the FSMO roles to the remaining Active Directory domain controllers if you are removing the FSMO role holder from the domain or forest.

To seize or transfer the FSMO roles by using Ntdsutil, follow these steps:

1. On any domain controller, click Start, click Run, type ntdsutil in the Open box, and then click OK.
Note: Microsoft recommends that you use the domain controller that is taking the FSMO roles.
2. Type roles, and then press ENTER.
To see a list of available commands at any of the prompts in the Ntdsutil tool, type ?, and then press ENTER.
3. Type connections, and then press ENTER.
4. Type connect to server servername, where servername is the name of the server you want to use, and then press ENTER.
5. At the server connections: prompt, type q, and then press ENTER again.
6. Type seize role, where role is the role you want to seize. For a list of roles that you can seize, type ? at the Fsmo maintenance: prompt, and then press ENTER, or consult the list of roles at the beginning of this article. For example, to seize the RID Master role, you would type seize rid master. The one exception is for the PDC Emulator role, whose syntax would be “seize pdc” and not “seize pdc emulator”.

Note: All five roles need to be in the forest. If the first domain controller is out of the forest then seize all roles. Determine which roles are to be on which remaining domain controllers so that all five roles are not on only one server.

Microsoft recommends that you only seize all roles when the other domain controller is not returning to the domain, otherwise fix the broken domain controller with the roles.

Note If the domain controller that formerly held any FSMO role is not present in the domain and if it has had its roles seized by the earlier steps in this article, remove it from the Active Directory by following the procedure that is outlined in the following Microsoft Knowledge Base article: For additional information, click the following article number to view the article in the Microsoft Knowledge Base: HOW TO: Remove Data in Active Directory After an Unsuccessful Domain Controller Demotion

If the original domain controller with the FSMO roles is still online, transfer the roles. Type transfer role.

7. After you seize or transfer the roles, type q, and then press ENTER until you quit the Ntdsutil tool.

Note: Do not put the Infrastructure Master role on the same domain controller as the global catalog.

To check if a domain controller is also a global catalog server:

1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Sites and Services.
2. Double-click Sites in the left pane, and then browse to the appropriate site or click Default-first-site-name if no other sites are available.
3. Open the Servers folder, and then click the domain controller.
4. In the domain controller’s folder, double-click NTDS Settings.
5. On the Action menu, click Properties.
6. On the General tab, locate the Global Catalog check box to see if it is selected.

For additional information about FSMO roles, click the article numbers below to view the articles in the Microsoft Knowledge Base:
Windows 2000 Active Directory FSMO Roles
Flexible Single Master Operation Transfer and Seizure Process

NOTE: Do not put the Infrastructure Master (IM) role on the same domain controller as the global catalog server. If the Infrastructure Master runs on a global catalog server it will stop updating object information because it does not contain any references to objects that it does not hold. This is because a global catalog server holds a partial replica of every object in the forest.

The information in this article applies to:

• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Datacenter Server

See this article on the original website eSupport

Microsoft KB: Using Ntdsutil.exe to transfer or seize FSMO roles to a domain controller

No related posts.

With the rash of recent viruses using *.zip files to get past antivirus filters and bypass Outlook’s attachment block, you may want to add the zip extension to the Level1Remove key to force users to save zips to their hard drive before opening or block access to zip files completely by adding zip to the Level1Add key.
Solution:

Outlook 2007, Outlook 2003, Outlook 2002 and Outlook 2000 SP3 (but not Outlook 98 or earlier Outlook 2000 versions) allow the user to use a registry key to open up access to blocked attachments. (Always make a backup before editing the registry.) To use this key:

Run Regedit, and go to this key:

HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Outlook\Security (change 10.0 to 9.0 for Outlook 2000 SP3 or to 11.0 for Outlook 2003, 12.0 for Outlook 2007 )

Under that key, add a new string value named Level1Remove.

For the value for Level1Remove, enter a semicolon-delimited list of file extensions. For example, entering this:

.mdb;.url

would unblock Microsoft Access files and Internet shortcuts. Note that the use of a leading dot was not previously required, however, new security patches may require it. If you are using “mdb;url” format and extensions are blocked, add a dot to each extension. Note also that there is not a space between extensions.

If you are using this registry entry, a glance at Help | About Microsoft Outlook will show Security Mode: User Controlled above the license information. See OL2002 You Cannot Open Attachments for more information on this registry entry.

To force users to save *.zip files to the hard drive before opening, add .zip to the extensions step 3. See How to configure Outlook to block additional attachment file name extensions for more information.

If you prefer not to edit the registry directly, you can use one of the tools below to make the change; not all support both Outlook 2002 and 2000.

After applying this registry fix or using one of the tools, the user still has to save the attached file to a system drive before opening it. In effect, the fix rolls the attachment behavior back to Outlook 2000 SR-1, with its included Attachment Security Fix. An end-user cannot bypass this “save to disk” behavior and open the file directly from the mail message, though an Exchange administrator can.

See this artiche on the original website Slipstick

Related posts:

1. Transferring emails from Outlook to a free (non apps) Gmail account
2. How to forward mail to an external email address
3. Granting Mailbox Permissions before an ExMerge

However, if you delete the IIS virtual directories that are used by Outlook Web Access and by other mobility services, the virtual directories are not automatically re-created when you restart the Exchange System Attendant service. This article describes two methods that you can use to delete and to re-create the virtual directories that are used by Outlook Web Access.

Note In Microsoft Exchange 2000 Server, after you delete the virtual directories for Outlook Web Access, the virtual directories are re-created when you restart the Exchange System Attendant service.

For more information about the virtual directories for Outlook Web Access in Exchange Server 2003, click the following article number to view the article in the Microsoft Knowledge Base:
821898 (http://support.microsoft.com/kb/821898/ ) Virtual Internet Information Services (IIS) directories that are used by Outlook Web Access in Exchange Server 2003

See Microsoft KB for the full description.
http://support.microsoft.com

Related posts:

1. Using Exmerge on Exchange 2003
2. AutoDiscovery setup for intermedia when using Outlook 2007 and Exchange 2007
3. Transferring emails from Outlook to a free (non apps) Gmail account

Author: De Wulf, Olivier

No related posts.

Create a subdomain called autodiscover.yourdomain.com and add the CNAME record that points to autodiscoverredirect0XX.msoutlookonline.net. You can find this information on the control panel on the Get Started page under Advanced Settings.

IMPORTANT: Due to the distributed nature of DNS, the CNAME record you created following the instructions in this guide may take up to 2-7 days to propagate across the Internet. In other words, you will be able to take advantage of the AutoConnect feature only when the DNS changes have fully propagated. If you do not know how to check that, just wait for a few days and try to configure a new Outlook 2007 profile using this feature.auto

For example, create CNAME similar to the following:
autodiscover.ingridandisabel.com. 86400 IN CNAME autodiscoverredirect016.msoutlookonline.net.
(Note: for Verio, I had to add the period at the end of each subdomain to prevent ‘ingridandisabel.com’ from being appended to the domain.)

Comments:

Comment 1)

Some features that will not work properly without an Autodiscover record:

• Outlook 2007 setup using AutoDiscovery

• Free/Busy information in your calendar

• Out of office Autoresponse messages

• Proper Syncing Of Offline Address Book

Comment 2)

More articles related to this issue:

• Troubleshooting Error 0x8004010F When Outlook 2007 Clients Download OAB (http://technet.microsoft.com/en-us/library/cc411331.aspx)

• Not downloading Offline address book files. A server (URL) could not be located. 0X8004010F (http://forums.msexchange.org/m_1800475070/tm.htm)

• Administering the offline address book in Outlook 2003 and Outlook 2007 (http://support.microsoft.com/kb/841273)

Author: created by Hunzeker, Drew, modified by Baptista, Luis

Related posts:

1. How to reset the default virtual directories that are required to provide Outlook Web Access, Exchange ActiveSync, and Outlook Mobile Access services in Exchange Server 2003
2. Using Exmerge on Exchange 2003
3. Automatic forwarding outside of the organisation

No related posts.

Replace ‘youremail@domain.com’ with your Google Account username.
5. Click Add.
6. Under the Delegation tab, select the calendars you’d like to add to iCal by checking the boxes next to them. You may need to hit refresh to get the latest list of calendars.
7. Add your email address to your Address Book card by selecting Add Email. You’ll be prompted to add your email address only if your address is not already in your Address Book.
Comments: You won’t be able to invite or email guests to Google Calendar events within iCal if your address is not in your Address Book.
Your Google Calendar will now appear in iCal’s list of calendars, and changes you make to your Google Calendar in iCal will be reflected when you sign in to Google Calendar.
Event information will automatically refresh every five minutes. You can change this interval by opening the iCal > Preferences > Accounts menu and selecting a new refresh interval under the ‘Refresh calendars’ drop-down. Keep in mind you can also force a refresh by selecting a calendar and pressing the Apple and R keys at the same time.
Calendars that are checked but disabled have already been added to iCal – you can remove them from within iCal.

Author: De Wulf, Olivier

Related posts:

1. Google Apps
2. Google Apps
3. How to delete Google Apps Duplicate Contacts

No related posts.

Related posts:

1. Google Apps
2. How to delete Google Apps Duplicate Contacts
3. Enable Google Calendar in Apple’s iCal