www.butsch.ch - Page 12 of 29 - Enterprise IT explained for you and me

Exchange 2007 Exchange 2010 Exchange 2013 Exchange 2016 Exchange 2019 GPO | Gruppenrichtlinien M365 - Exchange Online Microsoft Exchange Outlook W10

Turn of Autodiscover warning box agree Outlook.exe with GPO

05.02.2019 admin

How to turn off Autodiscover Warning in Outlook 2010/2013/2016/2019 Warnung: Das Konto wurde fuer die Einstellung auf die Website umgeleitet https://support.microsoft.com/en-us/help/2480582/how-to-suppress-the-autodiscover-redirect-warning-in-outlook A little bit more explained than in the Microsoft KB and with a check THAT if you ONLY set the Registry key if the OFFICE Version is installed. During Migrations you could otherwise run […]

VMWare W10

Recovery Software Testdisk, Photorec, Recuva NTFS, NAS

24.01.2019 admin

If you need to recover Files from defective Media try these. Keep in Mind that most Ransomware does OVERWRITE Files Encrypted WHERE the Original File is. R-Studio and Recuva where mentioned in some Ransomware Blogs in 2019 where it’s said that you can’t recover even if you would have a recovery tool in place for […]

MSME | Security for Exchange SPAM Fortimail

Domains with .CH (Switzerland) extension active spreading Locky Ransomware in 2016/2017

23.01.2019 admin

Domains with .CH (Switzerland) extension active spreading Locky Ransomware in 2016/2017. We would like to state that the provider almost can’t do anything if the infect is with a hosting website and the customer has access via FTP and the customers client gets targeted. If they have a key logger or snigger on the client […]

Deployment Ivanti Frontrange Enteo

W10, Ivanti DSM Enteo Frontrange BALOON Meldungen fuer User abstellen

07.01.2019 admin

Der DSM Client zeigt outofthebox relativ viele Meldungen an (Rechts unten im TRAY) welche der User nicht sehen will. Die passiert z.B. bei einer Site Änderung wenn ein Laptop von einem LAN ans WIFI genommen wird usw. Man kann die Meldungen auf zwei Arten konfigurieren. Mit einen KONFIGURATIONPAKET Direkt per Registry VIA REGISTRY wie immer […]

Deployment GPO | Gruppenrichtlinien

IE11 leak in jscript.dll CVE-2018-8653 XMAS Hotfix

22.12.2018 admin

Microsoft Internet Explorer scripting engine JScript memory corruption vulnerability The Leak was patched back in 2015 for jscript9.dll which is by default used by IE11. We HIGHLY recommend this patch to urgently get installed intermin beside regular patch days and before XMAS. Esp. In Europe (Germany, Switzerland, EMEA) we have has a large amount of […]

FW Fortigate Mcafee/Trellix SECURITY TIE/ATD/ATP | Sandbox - Advanced Threat Protection

Browser Isolation V2.0 (Zusammen mit kommerziellen Proxy [MCAFEE | Symantec])

26.11.2018 admin

Ich habe einige neuere Präsentation zu neuen Webisolationen Konzepten angesehen. Arbeite selber zu 90% mit Mcafee seit 12 Jahren kenne aber diverse Symantec Enterprise Produkte von früher. Symantec bewirbt derzeit Ihre Web Isolation Loesung. (Fireglass gekauft und integriert in Ihre Serie der Produkte) Der key Punkt ist, dass dies bei Grossfirmen NUR in Verbindung mit […]

Microsoft Server OS Server 2008 R2 Server 2012 R2 Server 2016 Uncategorized

Event 10009 on Server 2008R2 Exchange 2010 Distributed COM

26.11.2018 admin

Event 10009 on Server 2008R2 Exchange 2010 Distributed COM If you RUN: Exchange Analyser Powershell command get-owavirtualdirectory (Or any other command the connects to CAS to enumerate values) This OBSOLETE and you COULD leave it as it is. If people from Event or SIEM are nagging you could solve it. We recommend leaving it as […]

Deployment GPO | Gruppenrichtlinien Hotfixes, Updates Scripting W10

Samsung SSD + Bitlocker leak

08.11.2018 admin

Check if you are affected by the 11/2018 SSD Bitlocker Leak. ADV180028 | Guidance for configuring BitLocker to enforce software encryption Security Advisory, Published: 06.11.2018 Producer: Samsung and Crucial Affected models proof: Crucial MX100, MX200, MX300, Samsung EVO 840, 850, Samsung External USB T3/T5 There is a leak with certain SSD Hard disk (Solid-state) together […]

CRUNCH Deployment FW Fortigate FW Sophos Ivanti Frontrange Enteo M365,AZURE,INTUNE Mcafee/Trellix Microsoft SCCM,MEM,MDT Scripting SECURITY W10

Missing entry in Fortigate Application Filter ROOT.CERTIFICATE.URL and OCSP source of W10 Setup failing

31.10.2018 admin

Fortigate Application Filter Certificate wrong/missing Entry sample for an important laptop driver (W10 Deployment fails because of signed Driver Revocation Lookup) OR HOW a missing small ENTRY I a FORTIGATE FIREWALL IPS/APP filter can ruin your Windows 10 OS-Deployment work. Reason: Missing entry in Fortigate Application Filter “ROOT.CERTIFICATE.URL” and “OCSP” source of failing deployment […]

Deployment

Deployment: Find GUID to Uninstall Software Silent W7/8 32/64BIT

19.10.2018 admin

Go through these Key Recursive and check for the value “UninstallString” under the GUID’s. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall MsiExec.exe /I{2F72F540-1F60-4266-9506-952B21D6640D} So Uninstall Silent of possible would be: MsiExec.exe /x{2F72F540-1F60-4266-9506-952B21D6640D } /qn REBOOT=ReallySuppress If the Uninstall works depends on the software and if the, as example, MSI Source file is STILL under The location mentioned in […]

Microsoft Exchange MSME | Security for Exchange

Exchange Public Folder Migration, Fixing malformed Category VBA Script Swiss version

15.10.2018 admin

The store driver couldn’t deliver the public folder replication message “Backfill Request (SMTP Address)” because the following error occurred: Property: [0x3ff00102] , PropertyErrorCode: UnknownError, PropertyErrorDescription: 0x8004010 > Was solved finally on Exchange 2010 SP3 WITH Rollup 2 > Please see end of document During Public Folder Migration you may have invalid Categories in Exchange 2003/2007. […]

Exchange 2010 Exchange 2013 Exchange 2016 Microsoft Exchange

Exchange Unable to open console GUI or PS error 1000 requests

15.10.2018 admin

Error: 1000 requests per 2 seconds in Exchange GUI or if you open Powershell worst case You open Exchange Powershell and the Shell “Jumps” to another Server (Like a CAS or other Mailbox Server) > Not the Local one You open the Exchange GUI and you can’t connect / Expand the on Premise Server Error: MTA […]

Exchange 2007 Exchange 2010 Exchange 2013 Exchange 2016

Exchange 2007/2010 Delete default Mailbox Database / remove last Mailbox/SG

15.10.2018 admin

Exchange 2007/2010 Delete default Mailbox Database / remove last Mailbox/SG When you are migrating an Exchange from 2003 to 2007/2010 if you want to delete remove old or default mailboxes there are always mailboxes, which prevent you. Here is the Microsoft Error as it shows up: MDB01FailedError:This mailbox database contains one or more mailboxes, mailbox plans, […]

ENS | Endpoint Security SECURITY

Mcafee/Trellix MVision Endpoint first look and why we never used it

08.10.2018 admin

We just did finish our first look at the new MVSION Client when already a new Release came out the last days. https://kc.mcafee.com/corporate/index?page=content&id=SNS1746 This report reflects version 18.10.2.2. Main reason business drivers for the MVSION version for us are: AMSI integration and usage of Windows Defender as base pattern scanner (You can only scan malware […]

Exchange 2010 Exchange 2013 Exchange 2016 SPAM Fortimail

Exchange: Setting SMTP max mail sizes in mail flow

27.09.2018 admin

Exchange: Setting SMTP max mail sizes in mail flow Default size is 10MB and that is just how it should be. Even if freeware mail provider has, 50MB Limits. It is not a law but its historical SMTP/RFC value from and people have lived with it for 15 years. Then some nerd put it up […]

Highroller