Wired 802.1x authentication with MS RADIUS server and Meraki switch

 Group policy:

1. 
2. 

 

NPS configuration:

1. add all switches under RADIUS clients
   
   You will have to use the same shared secret on switch RADIUS authentication
2. Create new (or edit existing) Connection Request Policy
   Use all default only add condition NAS Port Type “Ethernet”
   
3. Create new Network Policy:
   
   
   
   * under NAS Port Type select ETHERNET
   
   
4. On the Meraki switch access control configure new policy:
   
5. Assign the policy to individual ports:
   

Posted in Network, Servers, WindowsTagged wired 802.1xEdit 

Firefox 59 disable hardware acceleration

 For some reason Firefox 59 on windows 10 (1709) under parallels started to misbehave and displayed address bar text and background all black.

On some pages the page was inverted with blocks of black and some flickering was noticeable as well.

After some frustration and lots of trial and error I disabled hardware acceleration when available option under Firefox preferences which did the trick.

Windows server service will not stop

 Force quit windows service which failed to stop using service.msc

1. find service name using service.msc / properties
2. using command prompt enter sc queryex [servicename] (and note PID number)
3. enter taskkill /pid [pid number] /f

Windows 10 gray-scale

Windows 10 has option to display everything in gray-scale.

It can be switched on and off by keyboard combination of CTRL + WIN + C key

It is possible to activate it accidentally if you have keyboard with CTRL and Windows key right next to each other since CRTL + C is to copy.

Hope this helps someone else who ends up in the gray-scale world of windows 10.

Outlook 2016 to Exchange 2016 mapi connection problems.

 During my exchange 2010 to exchange 2016 migration I run in to outlook connectivity problem which made it impossible to connect.

There are hundreds of similar issues on google unfortunately none of them solved the problem until I found two solutions on separate blogs and combined them and here is my final fix:

1. Set-MapiVirtualDirectory -identity “exchange2016\mapi (Default Web site)” -IISAuthenticationMethods NTLM
2. this requires editing Autodiscover and EWS virtual directory using IIS server interface on the exchange 2016 server.
   Remove negotiate provider from Windows Authentication.
   

 

References:

1. this is the first blog thanks to which I was able to get outlook 2016 working unfortunately only with exchange cached mode disable.
2. this is the send blog (last post have the solution) which helped me to get outlook 2016 working on the local LAN and behind the firewall as well as with or without using exchange cached mode.
3. In addition you need to have MAPI enabled on the exchange 2016 server which is the default but just in case here is the MS link with instructions.

change pwdLastSet to reset user password last set in AD

 what worked for me was to change it to 0 first and then change it to -1

If set to 0 it will force user to change password on next login. (If user doesn’t have flag set to Don’t Expire Password)

If set to -1 the password change date will be set to current date and time.

 

reference:

http://ldapwiki.com/wiki/Pwd-Last-Set%20attribute

exchange 2010 remove users emails before specific date

If user has a lot of emails which they need to delete here is a command which can help at the server end:

 

Search-Mailbox -Identity “User Name” -SearchQuery “Received:<$(’12/31/2013′)” -DeleteContent

 

ref: https://social.technet.microsoft.com/Forums/exchange/en-US/6114adb8-7e65-46e0-b54f-704ad15ef723/command-to-delete-all-the-items-from-a-mailbox-till-a-specific-date?forum=exchange2010

exchange 2010 failed to create new GAL

error when trying to create new GAL using:

New-GlobalAddresslist “new GAL” –ConditionalCustomAttribute1 “STAFF” –IncludedRecipients “AllRecipients”

WARNING: One or more global address lists were missing from the Active Directory attribute. This is likely caused by
using legacy Exchange management tools to create global address lists.
Active Directory operation failed on server1.domain.local. This error is not retriable. Additional information: The name ref
erence is invalid.
This may be caused by replication latency between Active Directory domain controllers.
Active directory response: 000020B5: AtrErr: DSID-03152C47, #1:
0: 000020B5: DSID-03152C47, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 907ff (globalAddressList2)
+ CategoryInfo : NotSpecified: (0:Int32) [New-GlobalAddressList], ADConstraintViolationException
+ FullyQualifiedErrorId : 8E376CCD,Microsoft.Exchange.Management.SystemConfigurationTasks.NewGlobalAddressList

 

the most likely problem is corupted entry.

This can be tested using power shell script on AD server:

---

$ad = [ADSI]"LDAP://rootDSE";
$domain = $ad.rootDomainNamingContext;
$obj = New-Object System.DirectoryServices.DirectoryEntry("LDAP://CN=Microsoft Exchange,CN=Services,CN=Configuration,$domain"); 

$count = 0;
$Gals1= $obj.GlobalAddressList;
foreach($g in $Gals1)
{
   $g= $g.ToString().ToLower(); 
   if($g.Contains("cn=deleted objects"))
   {
      Write-Host $g;
      $count= $count +1;  
   }
}

Write-Host "$Count corrupted GAL entries found in property GlobalAddressList";

$count = 0;
$Gals2= $obj.GlobalAddressList2;
foreach($g in $Gals2)
{  
   $g= $g.ToString().ToLower();
   if($g.Contains("cn=deleted objects"))  
   {
      Write-Host $g;          
      $count= $count +1;  
   }
}
Write-Host "$Count corrupted GAL entries found in property GlobalAddressList2";

---

you will get output something like this:

cn=default global address list\0adel:cc665233-b490-477a-a972-60fdd6d991ef,cn=deleted objects,cn=configuration,dc=domain,dc=
local
1 corrupted GAL entries found in property GlobalAddressList
0 corrupted GAL entries found in property GlobalAddressList2

If you find corrupted entries (make sure to have full system backup) you will have to remove them using ADSI edit on domain controller.

Using ADSI edit connect to configuration:

configuration\ Services\ Microsoft Exchange (right click / properties)

depending on the listed corruption look for GlobalAddressList or GlobalAddressList2 and click edit.

Remove corrupted entries.

This helped me to fix creating new GAL.

 

reference:

https://social.technet.microsoft.com/Forums/exchange/en-US/52854856-f517-4827-b3d3-3e589a422672/exchange-2010-sp-2-cant-create-second-gal?forum=exchange2010hosters

https://social.msdn.microsoft.com/Forums/en-US/3210af54-d8b4-490f-9f5f-f4fc3209d324/newglobaladdresslist-fails-ad44a06f?forum=os_exchangeprotocols&forum=os_exchangeprotocols

 

https://www.experts-exchange.com/articles/12458/Failed-to-create-New-Global-Address-List-on-Exchange-2010.html

Compress folder on macOS Sierra and windows 10

 macOS Sierra:

1. Create folder and place all the files you want to compress in it.

2. Right click on the folder and click on Compress.

 

Windows 10:

1. Create folder and place all the files you want to compress in it.
2. Right click on the folder and select Send to > Compressed (zipped) folder.

Posted in Apple, WindowsTagged compressedEdit 

Spotlight not indexing after Sierra upgrade

 Looks like this helped me:

1. first I removed all selections under System Preferences/ Spotlight/ search results
2. restart
3. use terminal:
   sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.metadata.mds.plist
   wait 20s
   sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.metadata.mds.plist
   sudo mdutil -E /Volumes/*
   you should get a message indicating that indexing is enabled.

 

 

resources:

https://discussions.apple.com/thread/7684120?start=0&tstart=0

https://discussions.apple.com/thread/5004598?start=0&tstart=0

mac OS Sierra remove parental control using terminal

 for some reason I had parental control enabled on network user with local admin rights.

it wasn’t possible to remove them using system preferences.

to remove it I used terminal command:

sudo dscl . -mcxdelete /Users/username
sudo rm -rf /Library/Managed\ Preferences/username