jueves, 5 de mayo de 2016

Run script As user (Useful when running scripts with encrypted credentials) | Ejecutar script como otro usuario (útil cuando el script tiene credenciales encriptadas)


Sometimes you need to store username and password on your scripts and if you are sharing them with other members of your team you should use a common account to encrypt the values, in my case we run scripts manually or by using PDQ Deploy (Admin Arsenal) running on a service account, encrypting credentials mean that if someone has physical access to the scripts they will not have the credentials to execute it unless they get access to the credentials used to encrypt them.

$Credentials = (Get-Credential)
$ScriptToExecute = {return (
Get-Item Env:AppData)}
$AppData =
Invoke-Command -ComputerName localhost -Credential $Credentials -ScriptBlock $ScriptToExecute
$AppData # Now contains the Environment var named "AppData"

Thank you Mathias for sharing this quick and easy way to do this:



martes, 3 de diciembre de 2013

Print server properties (Useful when dealing with printer drivers in a Terminal Services environment) | Propiedades de impresoras, muy util cuando hay que instalar controladores en Terminal Services

I found this very useful every time I have to deal with drivers in Terminal Servers, the most common scenario is for HP Printers that need a specific PCL driver to work properly, the Easy Print Driver is great because it offers compatibility with most printers but not all features are available and customers want to have the same level of functionality and user experience in RDS that they have when using their local computer (Just remember to modify the GPO to not use Easy Print as the first option, more to come on this)


 




You can get the full list of switches by executing: | La lista completa de modificadores la encuentras ejecutando el siguiente comando 

printui /?

miércoles, 6 de noviembre de 2013

Reduce Timeouts by enabling Keep Alive Heart Beat (RDS-RDP) / Keep Alive heart beat reduce las desconexiones por timeout en sesiones the RDS-RDP

HKEY_LOCAL_MACHINE\ SYSTEM\CurrentControlSet\Control\Terminal Server and created with a Value of 1 (DWORD 32bit)

If your TS environment is accessed by remote users connecting from the Internet, specially from high latency WAN connections like cellular data and satellite, is a good idea to turn on "Keep-alives"on your server.  This will help prevent users from being disconnected due to inactivity timeouts on routers.

To do this:


  1. Start--Run--gpedit.msc
  2. In the left pane, navigate to Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Session Host\Connections
  3. In the right pane, double-click Configure keep-alive connection interval (I used 1 as the value)
  4. Select Enabled, then click OK
  5. Apply the gpupdate /force or Restart the server for the change to take effect


This not always helps as Bryan Q (a colleague)  found that for some reason not all keepalives reach their destination in our environment, still we noticed considerable improvement in disconnects, most likely the missing packets are related to network issues, still I will investigate a little more and share my findings.



lunes, 28 de octubre de 2013

Exchange 2010 Console not opening WS-Management error | Consola de Exchange 2010 no abre con error en WS-Management

The attempt to connect to http://yourserver.domain.local/Powershell user ‘Kerberos’ authentication failed: Connecting to remote server failed with the following error message: The WS-Management service cannot process the request. The system load quota of 1000 requests per 2 seconds has been exceeded. Send future requests at a slower rate or raise the quota for this user. The next request from this user will not be approved for at least X milliseconds.


If you see the above message when trying to open the Exchange Console you will be probably asking yourself WTF, as I was a couple of days ago, mainly because the error message says nothing about how to solve it, Events are all normal and your Exchange Server is performing ok apart from the console not opening. After wandering about the issue I found that a simple iisreset (do not forget about running the command in an elevated Command Prompt or PowerShell session) will do the trick, I am still researching about how this error is generated and why resetting the IIS service works to fix it, in the mean time this is the workaround.



martes, 16 de abril de 2013

Network Interface(s) after Linux P2V or V2V conversion | Interface de red de sistemas Linux después de una conversión P2V o V2V

When I started to migrate the systems I manage from a Xenserver environment to a VMWare environment I noticed that all the Linux systems were not able to connect to the network unless I destroyed and recreate the Interface, same happened when importing OVA or OVF templates. Finally I manage to squeeze some time and research about this issue and find a post on Alex Cline's blog where he explains why this happens and also present a more elegant solution rather than my primitive "search & destroy). Below I will summarize the solution, please refer to Alex Cline blog to read the full explanation and details.

When trying to bring up Network Interface the following message appears:

Bringing up interface eth0: Device eth0 does not seem to be preset, delaying initialization.      [FAILED]

To fix this, open /etc/udev/rules.d/70-persistent-net.rules. with your favorite text editor you will see something like this:

# This file was automatically generated by the /lib/udev/write_net_rules# program, run by the persistent-net-generator.rules rules file.## You can modify it, as long as you keep each rule on a single# line, and change only the value of the NAME= key. # PCI device 0x8086:0x100f (e1000) (custom name provided by external tool)SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:50:56:9c:00:16", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0" # PCI device 0x8086:0x100f (e1000) (custom name provided by external tool)SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:50:56:9c:00:18", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1"



Take note of the MAC Address (HW Address) assigned by VMWare to the virtual interface and editudev's rules accordingly, for example, assume the virtual interface MAC Address is 00:50:56:9c:00:18, you will need it to edit rules so you end with something like this:

# This file was automatically generated by the /lib/udev/write_net_rules# program, run by the persistent-net-generator.rules rules file.## You can modify it, as long as you keep each rule on a single# line, and change only the value of the NAME= key.# PCI device 0x8086:0x100f (e1000) (custom name provided by external tool)SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:50:56:9c:00:18", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"# PCI device 0x8086:0x100f (e1000) (custom name provided by external tool)SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:50:56:9c:00:18", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"

basically you have to delete unused network interface(s) rules and rename the one that has the current MAC Address.Finally, you need to validate MAC Address in /etc/sysconfig/network-scripts/ifcfg-eth0 to avoid , remember the MAC Address is the value of HWADDRESS.

jueves, 5 de enero de 2012

Re-Lock BitLocker Drive | Volver a bloquear un disco con BitLocker

I decided to put an end to the issue of not being able to lock my drives whenever I wanted to, so I started to search for answers and as usual CLI commands were the solution, using CLI drives can be locked again without a restart.

 

Syntax

manage-bde -lock <drive letter>: -ForceDismount

 

Something more like a “right click” thing is better and Jonathan at Jonamafun’s racetrack has a tutorial on this, just remember that an Administrator access is needed.

 

Sources/Fuentes:

http://jonamafun.blogspot.com/2009/11/how-to-re-lock-bitlocker-drive.html

http://technet.microsoft.com/en-us/library/dd894351(WS.10).aspx

 

 

Para volver a bloquear el acceso a un disco duro usando BitLocker sin tener que reiniciar la máquina, es necesario utilizar la consola:

 

Sintaxis

manage-bde -lock <letra del disco>: -ForceDismount

 

existe una forma más fácil de bloquear los discos y esto es utilizando el menú contextual, para lo que es necesario hacer algunas modificaciones en el registro de Windows, Jonathan tiene una entra da en su blog Jonamafun’s racetrack que cubre muy bien esta parte.

 

 

miércoles, 4 de enero de 2012

DTMF VoIP softphone tones | Tonos DTMF en softphones DTMF

When working with SIP IVRs it’s important to set the right configuration for DTMF tones.

 

 

Es importante utilizer la configuración correcta de acuerdo a lo que el IVR SIP utiliza para trabajar con tonos DTMF.

 

Sources/Fuentes:

http://www.cisco.com/en/US/docs/ios/12_3/sip/configuration/guide/chapter8.html http://www.voip-info.org/wiki/view/SIP+DTMF+Signalling

http://www.3cx.com/blog/voip-howto/dtmf-rfc2833/

 

 

 

Server Reboot HP | iLO2 | Reinicio de servidor

I have an IVR (Nortel ICP) HP Proliant DL 360 G5 Server Windows 2003 Standard SP2 with many confusing event entries like the Event ID 57 and unexpected reboots:

 

 

Many forums at HP Communities helped me nailed this down to a faulty HP iLO driver firmware, updating it to 1.12.1 The issue is the unexpected reboots that corrupt the files used by the IVR (JBOSS WAR file), this is a live incident case I will update the post with the outcome.

 

 

Diagnosticando un IVR (Nortel ICP) HP Proliant DL 360 G5 Server Windows 2003 Standard SP2 me encontré con varios eventos de hpqilo2 que muestran instancias duplicadas y particularmente el evento 57 (ver imagen).

 

Varias entradas en los foros de HP indican que es algo común (lo reportan en servidores blade, pero mi caso es un servidor de rack y tiene los mismos síntomas). Este es un caso abierto, próximamente actualizaré la entrada con el resultado.

 

Downloaded Firmware/Firmware descargado:

http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareIndex.jsp?lang=en&cc=us&prodNameId=3288144&prodTypeId=15351&prodSeriesId=1121486&swLang=8&taskId=135&swEnvOID=1005#78213

 

Sources/Fuentes:

 

http://h30499.www3.hp.com/t5/ProLiant-Servers-ML-DL-SL/Strange-events-from-hpqilo2/td-p/4400209

 

http://h30499.www3.hp.com/t5/ITRC-remote-lights-out-mgmt-iLO/BL460c-ILO2-problem-after-firmware-ROM-flash-upgrade-to-1-70/td-p/4380992/page/2

 

http://bsmith9999.blogspot.com/2009_04_01_archive.html

 

 

 

miércoles, 26 de octubre de 2011

Unattended Installation from USB | VMware ESXi 4.1 Update 1 | Instalación desatendida desde USB

If you are looking for an unattended installation of VMware ESXi 4.1 I strongly suggest you to visit Ivo Bereens blog and follow his post Create a bootable VMware ESXi 5 USB stick in Windows and perform a scripted installation,, this works perfectly fine, also you can use Lili Linux Live USB Creator and make your life easier as this tool do all the work for you, this is tested for ESXi 4.1 update 1, you can get a copy from here. There's also a post regarding ESXi 5 that uses Lili Linux Live USB Creator, also don't forget about PLOP, this tool will help in the testing process as it allows VMware Workstation to boot from USB, Ivo has a post about this (this guy rules, isn't he?).


martes, 25 de octubre de 2011

Useful resources: MS Word :Recursos útiles

This blog has really useful things about MS Word, whenever I say: What if...? there is the answer or at least a very good starting point.

http://thenewpaperclip.com/2009/04/24/insert-a-date-picker-into-your-word-2007-document/

El link es para ir a un blog con cosas interesantes y útiles sobre Word, muchas de las veces que yo me pregunto si algo se puede hacer en Word la respuesta la encuentro ahí o, al menos, la orientación necesaria para lograrlo.

lunes, 10 de octubre de 2011

Remote server administration tool / Administración remota de servidores 2008

You can administrate Windows Server 2008 roles and features from a W7 or Vista PC using this snap-in Windows6.1-KB958830, be careful to choose the right architecture (x86 or x64).

Read more:

http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=7887


Es posible administrar las funciones y roles de un servidor Windows Server 2008 desde una PC con W7 o Vista utilizando el siguiente control Windows6.1-KB958830, solamente hay que tener cuidado al escoger la versión ya que depende de la arquitectura de nuestro sistema operativo, el cual puede ser de 32 o 64 bit.

martes, 4 de octubre de 2011

Features and their GUID’s in SP2010 - Reference | Tabla de SharePoint 2010 Features y su GUID

I was working with an update and migration of a SP 2007 farm to a SP 2010 environment and this GUID's get in the way when not remembering or not documented features needed for a particular site (every site you migrate needs certain Site and Site Collection features). This is a complete reference of those GUID's, some of them are not an exact match but definitely make things easier, all credit to .

Feature GUID's List

lunes, 23 de mayo de 2011

SET NTP sync in Windows 2003 CLI | Configurar NTP para sincronizar reloj Windows 2003 CLI

Set NTP peers:

 

w32tm /config /manualpeerlist:”0.pool.ntp.org 1. time-a.nist.gov” /syncfromflags:MANUAL /reliable:YES /update

 

Restart Time Service:

 

net stop w32time

net start w32time

 

Screen Capture:

 

 

 

Read More:

 

http://technet.microsoft.com/en-us/library/bb490605.aspx

http://tf.nist.gov/tf-cgi/servers.cgi

viernes, 13 de mayo de 2011

Lync-OCS-Exchange Certificates

Don’t forget to verify your certificates expiration date. When a certificate is expired, services from that server will be disabled, you will see errors in the Event Viewer/application pointing to a certificate failure.

 

Moral of the story… Always begin troubleshooting of this system by verifying certificates (expiration date if systems were operational and general certificate parameters if this is a fresh install)

 

 

miércoles, 20 de abril de 2011

BOXI Configure SMTP to send emails | Configurar SMTP en BOXI para enviar reportes por correo electrónico


Read More | Leer más
http://www.businessobjectstips.com/tips/server/fixing-the-business-objects-xi-destination-dll-disabled-crystalenterprise-smtp-error/

miércoles, 23 de marzo de 2011

Install Web Intelligence Rich Client from InfoView

To install Web Intelligence Rich Client

from InfoView

 

1. Log into InfoView.

2. Click Preferences at the top right of the InfoView screen.

3. Scroll down and click Web Intelligence Preferences.

4. Click Desktop (Web Intelligence Rich Client required) in the Select a

default creation/editing tool section.

5. Click Document List at the top left of the InfoView screen.

6. Click New > Web Intelligence Document or select an existing document

to edit.

Web Intelligence Rich Client is downloaded to your computer and launched

to create the document.

Note: If you install Web Intelligence Rich Client from InfoView, the Web

Intelligence Rich Client online help system is not installed to your local

computer. If you work in Connected mode, Web Intelligence Rich Client

displays help pages stored on the server. If you work in Offline or Standalone

mode, help pages are not available.

 

Read More:

http://help.sap.com/businessobject/product_guides/boexir3/en/xi3_web_intelligence_rich_client_en.pdf

 

 

 

Spectrum Report Manager/Business Objects no CLASSPATH WIS 01901

Situation:

 

Web Intelligence Rich Client not running reports (WIS 10901 Java Class not found in classpath : com.mysql.jdbc.Driver)

 

Resolution:

 

Search for the jdbc.sbo file in the Business Intelligence Server, open it with a text editor and search for a <CLASSPATH> tag, should be something like this (This one is for MySQL):

 

<DataBase Active="Yes" Name="MySQL 5">

            <JDBCDriver>

            <ClassPath>

                  <Path>D:\CA\SC\CommonReporting3\common/4.0/java/lib/external\mysql-connector-java.jar</Path>

</ClassPath>

 

Copy the mysql-connector*.jar from that path to a folder (C:\TEMP for example) in the PC where the WEBI Rich Client is and set the Environment variable CLASSPATH to folder\mysql-connector*.jar; (for example CLASSPATH= C:\Temp\mysql-connector-java.jar;)

 

Read More:

 

 

http://wiki.sdn.sap.com/wiki/display/BOBJ/Connectivity+configuration+between+BOE+and+Data+Federator

miércoles, 9 de marzo de 2011

Lync MAPI 2010 COM Server

Situation


Lync MAPI ask for credentials

Microsoft Lync 2010 MAPI COM Server (Credentials Screen)

Environment

Windows 7 Enterprise 64-bit Client in a corporate Network (Windows 2008 R2 Domain Controller)
Microsoft Office Professional Plus 2010 (Outlook) Version 14.0.5128.5000 64-bit
Lync 2010 64-bit Client Version 4.0.7577.0

Investigation



I remember using Credential Manager when Outlook 2007 start asking for credentials, the solution to that was to delete the entry for Outlook in Credential Manager and open Outlook to restore the entry with the right values; I research a little bit more on this and found this post where Allen Song propose the * before domain name, that took care of all Credential issues (Outlook, Communicator MAPI -this was because of a 32 to 64 bit arquitectural difference- and Lync MAPI)


Solution

Go to Credential Manager
Add entry:
Log on to: *.domainname (such as *.microsoft.com)
Username: domain\username
Password: password


Source:

http://social.technet.microsoft.com/Forums/en/exchangesvrclients/thread/e3e5b9cd-cdce-45ce-a6a6-eafc5011032a