www.butsch.ch - Page 13 of 29 - Enterprise IT explained for you and me

Exchange 2010 Exchange 2013 Exchange 2016

Exchange Wildcard Certificate imported Powershell without password option (PrivateKeyMissing)

28.08.2018 admin

Valid Exchange 2010/2013/2016 Problem: You can IMPORT a KEYFILE (Password) protected Exchange Certificate via PowerShell. The import itself does work, it’s there but the Cert is NOT usable for Exchange or visible in PowerShell get-exchange certificate or in the Exchange Console under Certificates. Import-ExchangeCertificate -Instance <String[]> [-Confirm] [-DomainController <Fqdn>] [-FriendlyName <String>] [-Password <SecureString>] [-PrivateKeyExportable <$true […]

Deployment GPO | Gruppenrichtlinien

GPO, W10, CSE_NOBACKGROUND and CSE_Drives GPO, English German mix how to fix RIGHT way

31.07.2018 admin

There have been some WRONG Blogs about correcting this issue with wrong GPO / Gruppenrichtlinie Language / Sprach-Files. Here is the error you see. Folgende Fehler sind aufgetreten: Das Richtlinienpräsentationselement “CSE_NOBACKGROUND” auf das in Präsentation “CSE_Drives” verwiesen wird, ist nicht vorhanden. Datei \\SERVER045.bsb.local\SysVol\bmw.local\Policies\PolicyDefinitions\GroupPolicyPreferences.admx, Zeile 334, Spalte 70 Please do a COPY and DUMP of the […]

Exchange 2007 Microsoft Exchange

Exchange 2010 Transport Service down after JULY 2018 Patchday (KB4338818)

24.07.2018 admin

Certain patches from July 2018 Patchday did render the Transport Service of Exchange 2010 Sp1-Sp3 unresponsive. This can be solved by applying the Patches mentioned in below table. Some of them are “PREVIEW of Monthly” Releases. So Microsoft did not do V2 Patch as before but include the bug fix in the PREWVIEW Cumu. Most […]

EPO | ePolicy Orchestrator Mcafee/Trellix SQL

McAfee EPO Server SQL Server Performance tips

04.07.2018 admin

McAfee EPO Server SQL Server Performance tips This is based on McAfee Information for their McAfee EPO DB running under SQL 2005/2008R2/2012 upwards The EPO Database itself should be: Autoshrink = False Auto Close = False Auto update Statistics = True Auto shrink and auto close are database options that should be set to false. […]

FW Sophos SECURITY VMWare

SOPHOS UTM 9.4 VMware on ESXi does not start after crash of ESX or Storage

11.06.2018 admin

SOPHOS UTM 9.4 VMware on ESXi does not start after crash of ESX or Storage File system inconsistency – cannot run fsck The console hangs at Press F2 with white Screen you can’t logon or ping the machine You can’t connect with SSH You can’t acces the machine on port 4444 You DID not move […]

WSUS

KB4103727 RDP client/Server not patched workaround

30.05.2018 admin

CredSSP updates for CVE-2018-0886 If you currently can’t logon to RDP and you have no timeline to patch both sides there is a workaround. Notice that this does reopen the exploit in RDP. There is also a GPO which you can use to set central. The workaround is a better solution that letting people […]

Deployment GPO | Gruppenrichtlinien W10

EFAIL and Microsoft GPO Policy Chaos

16.05.2018 admin

Problem: There is a man-in-the-middle leak where you can capture an E-Mail (Only if you have access to the flow) attach a content And if the CLIENT does autoload (When you open the E-Mail) external pictures get content. Now this would not be too complicated if there where No newsletters where people store large pictures […]

Exchange 2010 Exchange 2013 Microsoft Exchange

Exchange-20102013-POP-or-IMAP-with-Wildcard-Certificate-activation

03.01.2018 admin

You try to activate a WILDCARD Certificate for IMAP or POP Services for Exchange 2010. Either GUI or Powershell this does not work as wanted: Enable-ExchangeCertificate -Server ‘ exchange2010’ -Services ‘IMAP, IIS, SMTP’ -Thumbprint ‘C22E2AE9FC07C7DA55454522B0E0ACF996C8’ ERROR: This certificate with thumbprint C22E2AE9FC0646473449422B0E0ACF996C8 and subject ‘*.butsch.ch’ cannot used for IMAP SSL/TLS connections because the subject is not […]

Deployment Ivanti Frontrange Enteo W10

W10 1709 (Fall Creator) unable to make OS Setup package under DSM Frontrange 2016.2 R2 latest updates

16.11.2017 admin

W10 1709 (Fall Creators Update) unable to install under DSM Frontrange 2016 R2 latest updates You are unable to do a SETUPdatei with the Paket Assistant under DSM 2016.2 R2 latest patches 14.11.2017 3844 Unter dem angegeben Verzeichnis-Pfad wurden keine Installationsdateien gefunden. ERROR: WORKAROUND: Add following on DSM/Frontrange/Enteo Server: <INIValue>rs3</INIValue> <INIValue>rs3_release</INIValue> First time in file: […]

Deployment W10 WMI

W10: Enable Remote Management for WMI from Commandline silent

14.11.2017 admin

Security related this is turned OFF on W10 all release. You still may need this for Remote Management or testing Certain things you can’t do on the LOCAL client (Like checking process for LOGON Credentials provider with WMI). Here is how to turn on Windows Remote Management Silent via Commandline on WINDOWS 10. Screen shows […]

Exchange 2010 Exchange 2013 Exchange 2016 Microsoft Exchange

Exchange 2010 Console error, an error caused a change in the current set of domain controllers

19.10.2017 admin

(PID 5856, Thread 164) Task Get-FederationTrust throwing terminating exception at stage Microsoft.Exchange.Data.Directory.ADTransientException: An error caused a change in the current set of domain controllers.. Exception: {2fa78b33-8275-45ce-a132-9bce2a244a92} EventID: 5 I have seen this only in large Forest wide usage with Child domains and different Administrator accounts used to operate the console. Error in Exchange 2010 Management […]

APPV/MSIX Deployment Microsoft SCCM,MEM,MDT W10

Installshield V6.X, Microsoft APP-V 4.6.x Sequence error

19.10.2017 admin

ERROR: The Installshield engine (ikernel exe) could not be launched interface not registered FEHLER: Schnittstelle nicht unterstützt Problem: You are unable to sequence a software setup, which comes with Installshield/Flex Version 6 under WIN 7 with APPV 4.6.X sequencer. We just had a case where a producer of a German software still uses Installshield […]

CRUNCH EPO | ePolicy Orchestrator Mcafee/Trellix Microsoft Server OS SECURITY Uncategorized

MCAFEE 5.3.3 Certificate – Cipher Suites TLS problem- Agent does not report back

16.10.2017 admin

Mcafee EPO Server 5.3.3 seems to have problems on some older OS like 2008R2 regarding TLS ciphers (We did not see this in 2012R2 to date with our customers). The A-Z sort order of those is the source. This had such an impact that Mcafee did release this info to all customer with SNS-Alert. This […]

Exchange 2013 Microsoft Exchange

Exchange 2007 > 2013 Transition/Migration, POPUP on Outlook 2010 or Public Folder can’t be open from 2007

16.10.2017 admin

Exchange 2007 > 2013 Transition/Migration, POPUP on Outlook 2010 or Public Folder can’t be open from 2007 Error1: When you click a Public Folder, which lies on 2007 in Outlook.exe “Cannot expand the folder. Microsoft Exchange is not available. Either there are network problems or the Exchange server is down for maintenance.” Event […]

WSUS

WSUS How to integrate 2012R2 on an older Server OS-version WSUS

15.10.2017 admin

How to integrate 2012R2 on an older Server OS-version WSUS. Install this Hotfix on Server 2012 R2 so you see “Windows 10” instead of “Vista” and “Server 2012 R2” instead of “Windows 6.3” https://support.microsoft.com/en-us/kb/2919355 https://support.microsoft.com/de-de/kb/3095113 Hotfix WIN10 Integration WSUS This hotfix enables Windows Server Update Services (WSUS) on a Windows Server 2012-based or a […]

Highroller