IT Tips&Tricks

Metasploit & MS08_067

2012-02-06T11:11:00.003+02:00

Bu video, Sadece antivirus kullanımının yeterli olmadığı, bilgisayarlarımız üzerinde güvenliğinin sağlanması için kişisel güvenlik duvarı kullanılması gerektiğini ve tüm işletim sistemi ve yazılımların güncellemelerinin yapılması gerektiği konusunda bilgilendirmek için hazırlanmıştır.

SQL Server replication requires the actual server name to make a connection to the server. Connections through a server alias, IP address, or any....

2011-07-07T17:41:00.001+03:00

"SQL Server replication requires the actual server name to make a connection to the server. Connections through a server alias, IP address, or any other alternate name are not supported."

Cause : the server name has been changed after SQL Server Installation

Resolution : You can change the server name in SQL server by using the code below; Execute in SSMM.

sp_dropserver 'old_server_name'(Ex : oldserver\instance)
GO
sp_addserver 'current_computer_name'Ex : newserver\instance), 'local'

Last Backup Date of SQL DBs

2011-06-02T08:33:00.001+03:00

SELECT sdb.Name AS DBName,
COALESCE(CONVERT(VARCHAR(20), MAX(bus.backup_finish_date), 100),'No Backup Yet') AS LastBackUpDate FROM sys.sysdatabases sdb LEFT OUTER JOIN msdb.dbo.backupset bus ON bus.database_name = sdb.name
GROUP BY sdb.Name

CLARiiON AX4 Storage Systems Feature Summary

2011-05-27T16:16:00.001+03:00

CLARiiON CX4 Storage Systems Feature Summary

2011-05-27T16:08:00.002+03:00

Vmware ESX4.1 Add ISCSI Storage

2011-05-26T13:30:00.015+03:00

Follow the steps below to create new VMKERNEL Connection to use with ISCSI adapter.
If you dont do the steps below and try to add iscsi target from dynamic discovery
You will see the message

"The host bus adapter is not associated with a vmknic. To configure targets the adapter should be associated with a vmknic. Refer to the VMware documentation to associate the adapter with a vmknic."

Procedure

1 Log in to the vSphere Client and select the host from the inventory panel.
2 Click the Configuration tab and click Networking.
3 In the Virtual Switch view, click Add Networking.
4 Select VMkernel and click Next.
5 Select Create a virtual switch to create a new vSwitch.
6 Select a NIC you want to use for iSCSI traffic.
7 Click Next.
8 Enter a network label.
Network label is a friendly name that identifies the VMkernel port that you are creating, for example,
iSCSI.
9 Click Next.

IMPORTANT If you are creating a port for the dependent hardware iSCSI adapter, make sure to select the NIC that corresponds to the iSCSI component.

Use the vSphere CLI command to determine the name of the physical NIC, with which the iSCSI adapter is associated.(You should press Alt+F1 for command mode on esx)
Alt + F2 turn back)

esxcli swiscsi vmnic list -d vmhba#
vmhba# is the name of the iSCSI adapter.

You might be enable TEch Support mode to execute the commands above;

Enabling and Accessing Tech Support Mode
To enable local or remote TSM from the Direct Console User Interface (DCUI):
1.At the DCUI of the ESXi host, press F2 and provide credentials when prompted.
2.Scroll to Troubleshooting Options, and press Enter.
3.If you want to enable local TSM, select Local Tech Support and press Enter once. This allows users to login on the virtual console of the ESXi host.

If you want to enable remote TSM, select Remote Tech Support (SSH) and press Enter once. This allows users to login via SSH on the virtual console of the ESXi host.
4.Optionally, if you want to configure the timeout for TSM:

a.Select Modify Tech Support timeout and press Enter.
b.Enter the desired timeout value in minutes and press Enter.

6.Press Esc three times to return to the main DCUI screen.

After you have done the above 9 steps configuration- networking tab should be like picture below;

Before adding to ESX server you should create target and LUNs on ISCSI device.

After this open Configuration Tab and select storage adapters from left menu.

Select the appropirate hba from the right menu and click properties and add IP and port (default 3260) of ISCSI device to dynamic discovery tab and 2-10 seconds later control the static discovery tab if the address added correctly

LUNs that you have created on ISCSI device should be visible on the below part like "QNAP ISCSI Disk (naa....) on the picture.

After adding ISCSI device IP, we should add LUNs as a storage to ESX server.

Open Configuration Tab- Select Storage from the left menu. Select AddStorage from right side.

Select Disk / LUN form the opened window click next.
Select the LUN that you will use as a datastore. Click Next give Name ex: "DRSQLSERVER"

Next,next,finish.

Then on previous screen click refresh to see your new datastore. Than you can use this datastore to install new virtual machine.

Source : https://www.vmware.com/pdf/vsphere4/r41/vsp_41_esxi_i_get_start.pdf

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1025644

http://searchvmware.techtarget.com/tip/VMware-Consolidated-Backup-Adding-an-iSCSI-LUN-to-ESX-Server

http://www.vladan.fr/how-to-connect-esx4-vsphere-to-openfiler-iscsi-nas/

http://www.mattlestock.com/2009/06/esxi-iscsi/

http://www.vmware.com/files/pdf/vmware_esxi_management_wp.pdf

SQL Database Rebuild or Reorganize Index

2011-04-07T15:51:00.006+03:00

To choose rebuild or reorganize index process first you need to control index fragmentation status. Execute the code below, SQL Management Studio.
-------------------

Use AdventureWorks
GO
SELECT
ps.object_id,
i.name as IndexName,
OBJECT_SCHEMA_NAME(ps.object_id) as ObjectSchemaName,
OBJECT_NAME (ps.object_id) as ObjectName,
ps.avg_fragmentation_in_percent,
ps.page_count
FROM sys.dm_db_index_physical_stats (DB_ID(), NULL, NULL , NULL, 'LIMITED') ps
INNER JOIN sys.indexes i ON i.object_id=ps.object_id and i.index_id=ps.index_id
WHERE avg_fragmentation_in_percent > 5 AND ps.index_id > 0
ORDER BY avg_fragmentation_in_percent desc
---------------------------------------

If the value in "avg_fragmentation percent" column for index is grater than 30 the you should use rebuild else use reorganize.

Rebuild Code

ALTER INDEX [Index name]
ON [ObjectSchemaName].[ObjectName] REBUILD WITH (ONLINE = ON)

----------------------

Reorganize Code

Use AdventureWorks
GO
ALTER INDEX [Index name]
ON [ObjectSchemaName].[ObjectName] REORGANIZE
---------------------------------------

Note : Online index operations can only be performed in Standard or Enterprise edition of SQL Server.

--------------------------------------------------------
You can create a SP by using the code below for automaticly reorganize and rebuild indexes.

CREATE PROC [INDEX_MAINTENANCE] @DBName VARCHAR(100)
AS BEGIN
SET NOCOUNT ON;
DECLARE
@OBJECT_ID INT,
@INDEX_NAME sysname,
@SCHEMA_NAME sysname,
@OBJECT_NAME sysname,
@AVG_FRAG float,
@command varchar(8000),
@RebuildCount int,
@ReOrganizeCount int

CREATE TABLE #tempIM (
[ID] [INT] IDENTITY(1,1) NOT NULL PRIMARY KEY,
[INDEX_NAME] sysname NULL,
[OBJECT_ID] INT NULL,
[SCHEMA_NAME] sysname NULL,
[OBJECT_NAME] sysname NULL,
[AVG_FRAG] float
)
SELECT @RebuildCount=0,@ReOrganizeCount=0

--Get Fragentation values
SELECT @command=
'Use ' + @DBName + ';
INSERT INTO #tempIM (OBJECT_ID, INDEX_NAME, SCHEMA_NAME, OBJECT_NAME, AVG_FRAG)
SELECT
ps.object_id,
i.name as IndexName,
OBJECT_SCHEMA_NAME(ps.object_id) as ObjectSchemaName,
OBJECT_NAME (ps.object_id) as ObjectName,
ps.avg_fragmentation_in_percent
FROM sys.dm_db_index_physical_stats (NULL, NULL, NULL , NULL, ''LIMITED'') ps
INNER JOIN sys.indexes i ON i.object_id=ps.object_id and i.index_id=ps.index_id
WHERE avg_fragmentation_in_percent > 5 AND ps.index_id > 0
and ps.database_id=DB_ID('''+@DBName+''')
ORDER BY avg_fragmentation_in_percent desc
'

exec(@command)
DECLARE c CURSOR FAST_FORWARD FOR
SELECT OBJECT_ID,INDEX_NAME, SCHEMA_NAME, OBJECT_NAME, AVG_FRAG
FROM #tempIM
OPEN c
FETCH NEXT FROM c INTO @OBJECT_ID, @INDEX_NAME, @SCHEMA_NAME, @OBJECT_NAME, @AVG_FRAG
WHILE @@FETCH_STATUS = 0
BEGIN
--Reorganize or Rebuild
IF @AVG_FRAG>30 BEGIN
SELECT @command = 'Use ' + @DBName + '; ALTER INDEX [' + @INDEX_NAME +'] ON ['
+ @SCHEMA_NAME + '].[' + @OBJECT_NAME + '] REBUILD WITH (ONLINE = ON )';
SET @RebuildCount = @RebuildCount+1
END ELSE BEGIN
SELECT @command = 'Use ' + @DBName + '; ALTER INDEX [' + @INDEX_NAME +'] ON ['
+ @SCHEMA_NAME + '].[' + @OBJECT_NAME + '] REORGANIZE ';
SET @ReOrganizeCount = @ReOrganizeCount+1
END

BEGIN TRY
EXEC (@command);
END TRY
BEGIN CATCH
END CATCH

FETCH NEXT FROM c INTO @OBJECT_ID, @INDEX_NAME, @SCHEMA_NAME, @OBJECT_NAME, @AVG_FRAG
END
CLOSE c
DEALLOCATE c

DROP TABLE #tempIM

SELECT cast(@RebuildCount as varchar(5))+' index have been Rebuild,'+cast(@ReOrganizeCount as varchar(5))+' index have been Reorganized.' as Result
END
----------------------------------------------------------

Use the code below for calling SP

exec master.dbo.INDEX_MAINTENANCE 'DBName'

Mailbox stay in disconnected after move mailbox process

2011-03-21T18:06:00.004+02:00

Solution
Exchange 2007
Server Configuration->Mailbox->RightClick to old database->Properties
Limits Tab->Set Keep Deleted Mailboxes to Zero (0)
and then on EMS execute the command below;
Clean-MailboxDatabase "Old Database Name"
In order to learn Database name;
Get-mailboxdatabase

Exchange 2003
http://support.microsoft.com/kb/940012

The ReportServerVirtualDirectory element is missing.

2011-02-25T16:41:00.004+02:00

Open RSWebApplication.config file ,

Check if the below lines are same,

(Add ReportServer)

Restart IIS

The session setup from the computer %computername% failed to authenticate.

2011-02-25T13:24:00.003+02:00

The cause of this error is the expired computer accound password. By Default computer accounts change password automaticly in every 30 days. If, replication between computer and dc's are not successfull after password changes DC will remove computer account from domain.

You can disable this behaviour from group policy settings,

Setting is under Computer Configuration -> Windows Settings -> Security Settings -> Local Policies/Security Options -> Domain Member: Domain Member: Disable machine account password changesYou should enable this settings.

Exchange 2007 Mailbox Sizes

2011-02-22T17:37:00.001+02:00

Execute the command on EMS.

Get-MailboxStatistics | Sort-Object TotalItemSize –Descending | ft DisplayName,@{ expression={$_.TotalItemSize.Value.ToKB()}},ItemCount

You can use toMB or toGB

Event ID 1025 0xc0041800

2011-02-22T17:28:00.003+02:00

If you are getting this error on Exchange Server 2007, you should rebuild the indexing catalog.

Content Indexing received an unusual and unexpect error code from MSSearch
Error: 0xc0041800

Execute the command below on Exchange Management Shell

ResetSearchIndex.ps1 [-force] -all

Follow the results from event viewer, you should get Event ID: 110 after successfull process.

GFI EndPoint Security Installation Error (Process Roll Back)

2011-02-09T14:56:00.004+02:00

If you can not install GFI Endpoint Security 4.x , process is rolling back and service can not start;
Apply the steps in link

http://kbase.gfi.com/showarticle.asp?id=KBID003806

Drive is not accesible Access is denied

2011-02-09T10:24:00.004+02:00

If you are using Symantec Endpoint Encryption and user not registered yet, you will get "Drive:\(Letter) is not accessible Access is denied" message while trying to access removable storage device.
Register user and try again

KMS Server on Windows 2003

2011-02-08T19:45:00.008+02:00

Install KMS

KMS 1.1 Download Link
Update 1 Link
VAMT 2.0 Download Link

Install KMS1.1 then install Update then VAMT. After installation you should restart server.
Open VAMT console

1) License Installation

First Verify then add product key.

2) Add Client

3) Update Client Status to get Licensing information

4) Install Product key (Use MAK Key) (We Will use Proxy Activation)

Select Apply Confirmation ID and Activate.

Ok-->Close-->Close

Add User to Group

2011-02-07T10:52:00.001+02:00

Command will add user1 to local administrators group.

net localgroup "Administrators" "domain\user1" /add

Enable Local User

2011-02-07T10:46:00.000+02:00

net user user1 Password /active:yes

Enable DHCP VB Script (WMI)

2011-02-07T10:44:00.000+02:00

strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")

Set colNetAdapters = objWMIService.ExecQuery _
("Select * from Win32_NetworkAdapterConfiguration where IPEnabled=TRUE")

For Each objNetAdapter In colNetAdapters
errEnable = objNetAdapter.EnableDHCP()
Next

Disable CDROM VB Script

2011-02-07T10:43:00.001+02:00

const HKEY_LOCAL_MACHINE = &H80000002
strComputer = "."
Set StdOut = WScript.StdOut

Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & strComputer & "\root\default:StdRegProv")

strKeyPath = "SYSTEM\CurrentControlSet\Services\Cdrom"
strValueName = "Start"
dwValue = 4
oReg.SetDWORDValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,dwValue

Disable USB Storage VB Script

2011-02-07T10:41:00.001+02:00

const HKEY_LOCAL_MACHINE = &H80000002
strComputer = "."
'Set StdOut = WScript.StdOut
Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & strComputer & "\root\default:StdRegProv")
strKeyPath = "SYSTEM\CurrentControlSet\Services\USBSTOR"
strValueName = "Start"
dwValue = 4
oReg.SetDWORDValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,dwValue

Use dwValue = 3 for enable

Remove From Local Administrators VBS Script

2011-02-07T10:28:00.003+02:00

Script will remove the users from Local Administrators group except which are stated in script.Username must be in CAPITAL letter.

Script

Option Explicit
Dim network, group, user
Set network = CreateObject("WScript.Network")
Set group = GetObject("WinNT://" & network.ComputerName & "/Administrators,group")
For Each user In group.members
If UCase(user.name) <> "user1" And UCase(user.name) <> "user2" And UCase(user.name) <> "user3" And UCase(user.name) <> "user4" And UCase(user.name) <> "user5" And UCase(user.name) <> "user6" Then
group.remove user.adspath
End If
Next

View LDAP servers by command prompt

2011-01-27T19:06:00.001+02:00

nslookup -type=srv _ldap._tcp.aaa.local

Cisco Switch MAC based Port Security

2011-01-27T18:34:00.007+02:00

In order configure MAC Address based Port Security on Cisco Switch perform the following commands; (These commands below are valid for 3750 series, for other models command may vary) conf t int GiX/x/x switchport mode access (port security can be used on access mode) switchport port-security switchport port-security mac-address xxxx.xxxx.xxxx end wr (To determine maximum number of mac addresses that can connect to specific interface; config-if)switchport port-security maximum number Only MAC address xxxx.xxxx.xxxx will be able to connect to related port. Otherwise port will be shutdown (default action) If port is shutdown, you will see port status as a err-disabled #show interfaces gigabitethernet 4/1/1 status Port Name Status Vlan Duplex Speed Type Gi4/1 err−disabled 100 full 1000 1000BaseSX

In order to re-enable port(In interface prompt);

int G1/0/19 no switchport port-security (this cmd will completely remove port-security, may not be necessary) shut no shut Manually enabling port can be nightmare for network administrators. You can configure automatic recovery by using the commands below; (config)#errdisable recovery cause psecure-violation (config)#errdisable recovery interval ? <30-86400> timer-interval(sec) (config)#errdisable recovery interval 300 With the configuration above you can assign only one mac address per port, by using mac access lists you can assign many mac addresses to a port; Ex; mac access-list extended PermitMacList permit host xxxx.xxxx.xxxx any int fa0/1 mac access-group PermitMacList in int fa0/2 mac access-group PermitMacList in

Register ASP.NET 2.0

2010-12-30T14:03:00.002+02:00

Go to "$Windir$\Microsoft.NET\Framework\V2.0.50727" folder
and execute the command below;

aspnet_regiis.exe -i -enable

How to open Wikileaks Insurance File.

2010-11-30T08:35:00.004+02:00

Download AESCRYPT from www.aescrypt.com.
Change the insurance file extension to .aes

But first you need password!

Symantec Endpoint Encryption Upgrade Commands.

2010-11-04T12:59:00.002+02:00

These commands are Valid for Upgrading from 7.0.4 to 7.0.6.

msiexec /i "path\new packet name.msi" REINSTALL="ALL" REINSTALLMODE="vomus"

Firstly, you should install framework, then others(FD, RS)

Fatal error. Machine will need to be restarted. Brief description: The application returned a status of [0x80000001] in the state State_Initialized.

2010-11-02T14:35:00.002+02:00

This error is bug of Symantec Endpoint Encryption 7.0.3 & 7.0.4
If you are getting tihs error, you should decrypt disk by using Recovery CD, uninstall old SEE FD software and upgrade it to 7.0.6.

Application Deploy Parameters-1

2010-10-27T20:04:00.003+03:00

Acrobet Reader 9.x Install Parameter = /sAll
Java Runtime Environment Install Parameter = /s ADDLOCAL=ALL IEXPLORER=1 MOZILLA=1 REBOOT=Suppress
Flash Player Install Parameter = -install
Firefox Install Parameter = -ms -ma

Symantec DLP Which files are indexed?

2010-07-27T13:11:00.002+03:00

If you wonder about which files are indexed in Symantec DLP follow the steps below;

1) Open ManagerLogging.properties
2) Change ServletLogHandler.level to FINEST
3) Add com.vontu.cracker.DocumentCracker.level = FINEST
4) Re-run the indexer
The tomcat log should have an entry for each file after it's processed by the content extractor but before it's added to the index.

Symantec DLP - EndPoint Incidents Active Directory Attributes Lookup Problem

2010-06-29T19:03:00.006+03:00

If you are using Symantec DLP v10.0 and if you have problem about getting Active Directory attributes from endpoint incidents try the steps below;

Verify Active Directory Connection by using method that described in Symantec Data Loss Prevention Administration Guide.

Check the log. You will have a log like that below;

if you have Exception: krb_error 14 KDC has no support for encryption type (14) KDC has no s upport for encryption type line

Possible solution is the check "USe DES Encryption types for this account" from user properties in the releated user.

and the AD attiributes will come in the next endpoint incidents.

AD Connection Test

C:\Vontu\jre\bin>kinit
Password for dlpx@xxxx.LOCAL:
Exception: krb_error 14 KDC has no support for encryption type (14) KDC has no s upport for encryption type
KrbException: KDC has no support for encryption type (14)
at sun.security.krb5.KrbAsRep.(Unknown Source)
at sun.security.krb5.KrbAsReq.getReply(Unknown Source)
at sun.security.krb5.KrbAsReq.getReply(Unknown Source)
at sun.security.krb5.internal.tools.Kinit.sendASRequest(Unknown Source)
at sun.security.krb5.internal.tools.Kinit.(Unknown Source)
at sun.security.krb5.internal.tools.Kinit.main(Unknown Source) Caused by: KrbException: Identifier doesn't match expected value (906)
at sun.security.krb5.internal.KDCRep.init(Unknown Source)
at sun.security.krb5.internal.ASRep.init(Unknown Source)
at sun.security.krb5.internal.ASRep.(Unknown Source)
... 6 more

These settings are not available in preference mode

2010-06-23T09:06:00.002+03:00

If you get this warning on Windows Server 2008 , while changing internet explorer Group Policy settings try the step below;

Click Reset Browser Setting in Group Policy, Under User Configuration

The Java Virtual Machine has exited with a code of -1, the service is being stopped.

2010-05-13T18:45:00.004+03:00

Event Type: Error
Event Source: semsrv
Event Category: None
Event ID: 4096
Date: 5/13/2010
Time: 6:37:09 PM
User: N/A
Computer: TNSEP
Description:
The Java Virtual Machine has exited with a code of -1, the service is being stopped.
If you are getting this error on Symantec Endpoint Protection Manager and can not open the SEPM console follow the steps below;

Be sure that IUSR_XXXX user are not in the Guest Group, if it is than remove it from there and add to the Local Users group.

Secondly, Open the IIS Manager

Right Click to Symantec Web Server Web Page , Click Properties

On the Web Site TAB, check if your SEP Server IP Adress is correct. Click Apply and OK.
Then, start Symantec Endpoint Protection Manager service and Open and Login to the Console.

Symantec Endpoint Protection Manager - Clear Still Infected

2010-04-13T08:37:00.005+03:00

Open Monitors-->Log-->Log Type(Computer Status) Advance Settings --> Compliance Options
Tick "Infected only" and then Click View log

Select the computers by using (Ctrl or Shift+Click) and click Clear infected status.

Open Home Page and Click Refresh

Disable StartTLS on Exchange 2007

2010-04-12T16:25:00.005+03:00

If you want to Disable StartTLS on Edge Transport you should apply these command below on Hub Transport server.

Firstly, get all your connector list by using the command below;

Get-SendConnector (On edge transport)

To disable "TLS" enter the following command (On hub transport)

Set-SendConnector -Identity "send Connector full name" -IgnoreSTARTTLS $true

To check if your changes apply succesfully, enter the following commands on Edge transport server

Get-SendConnector "Send Connector Full Name"fl IgnoreSTARTTLS

If answer is false ; Enter the following commands below,

Test-EdgeSynchronization (Check synchronization)

Start-EdgeSynchronization (Start Synchronization Immediately)

Failed to find updates with error code 80244010

2010-03-30T12:08:00.001+03:00

If you are getting this error in windowsupdate.log file while you are trying to deploy updates using wsus 3 sp1 ;

try the steps below;

Method 1: Download and install the Windows Update Agent
For more information about how to download the latest version of Windows Update Agent, click the following article number to view the article in the Microsoft Knowledge Base:
949104 (http://support.microsoft.com/kb/949104/ ) How to obtain the latest version of the Windows Update Agent to help manage updates on a computer

Method 2: Register the Wups2.dll file
To register the Wups2.dll file in Windows, follow these steps:
Stop the Automatic Updates service. To do this, follow these steps:
Open the Command Prompt window. To do this, click Start, click Run, type cmd, and then click OK.
At the command prompt, type the following command, and then press ENTER:
net stop wuauserv
Register the Wups2.dll file. To do this, follow these steps:
At the command prompt, type the following command, and then press ENTER:
regsvr32 %windir%\system32\wups2.dll

Note For a computer that is running Windows XP Professional x64 Edition, type the following command, and then press ENTER:
regsvr32 %windir%\syswow64\wups2.dll
Click OK if you receive a verification message.
Start the Automatic Updates service. To do this, type the following command at the command prompt, and then press ENTER:
net start wuauserv
Exit the Command Prompt window. To do this, type exit at the command prompt, and then press ENTER.

Source : http://support.microsoft.com/kb/943144

DL380G6 Loud FAN Noise

2010-03-17T16:47:00.003+02:00

Steps that explained below will reset NVRAM configuration for motherboard.
1) Power Off your Server and unplug power cords.
2) To prevent RAID configurations from losting, remove all of your disk.
3) You will see very little switch in front of battery.
4) Configure the number6 to on state
5) Power on server for 10 seconds, then power off and unplug the cords.
6) Configure the number 6 to off state again on switch.
7) Insert disks , power on server.

It works for me! Be carefull while changing switch states.

The exchange server address list service failed to respond

2010-03-17T16:45:00.004+02:00

If you are getting this error on Exchange 2007 while creating new mailbox,

Try restarting Microsoft Exchange System Attendant Service.

Uninstall Applications using MSIEXEC

2010-03-05T13:35:00.001+02:00

msiexec /uninstall {GUID} /q REMOVE=ALL

You can find GUIDs under

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Type msiexec on "Run" to get other parameters.

View Disconnected Mailbox on Exchange 2007 by using PowerShell

2010-02-28T19:58:00.002+02:00

Execute the command below on PwerShell.

Get-MailboxStatistics -Server | where { $_.DisconnectDate -ne $null } | select DisplayName,DisconnectDate

How To Enable Disconnected Mailbox On Exchange 2007

2010-02-28T19:55:00.001+02:00

Follow the links below;

http://www.msexchange.org/tutorials/Managing-mailboxes-Exchange-Server-2007-Part2
.html

Symantec Agent is not running or running an incompatible version

2010-02-19T15:24:00.008+02:00

If you are living DHCP address switching problem between Quarantine and Default scope address and using DHCP pluggin for NAC solution check the following steps below;

1) Firstly Control your DHCP User Class Properties ; Be sure you have correctly configured your scope options.

Under Static Route Option you should type the releaated host ip address twice or if host is one other subnet type gateway and host ip address.

2) Under User Class Check if your DHCP lease time is not too long.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007378141105298

3) Check the solution in the links below;
http://www.symantec.com/connect/forums/snac-dhcpplugin-always-get-quarantined-ip-address

http://service1.symantec.com/SUPPORT/ent-security.nsf/ppfdocs/2008020608273348?Open&dtype=corp&src=&seg=&om=1&om_out=prod

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007091212133148

4) Lastly , as my experience DHCP Server and SEPM should be installed on different servers.

IMCAEX The recipient's e-mail address was not found in the recipient's e-mail system.

2010-02-12T16:51:00.006+02:00

Check If your User have LegacyExchangeDN Attribute by using ADSIEDIT tool.

IF The Attribute has not been set then execute the Powershell command below;

Get-MailContact -OrganizationalUnit "OUNAME" -resultsize unlimited Where-Object { $_.legacyexchangedn -eq "" } Set-MailContact
Get-MailUser -OrganizationalUnit "OUNAME" -resultsize unlimited Where-Object { $_.legacyexchangedn -eq "" } Set-MailUser
Get-DistributionGroup -OrganizationalUnit "OUNAME" -resultsize unlimited Where-Object { $_.legacyexchangedn -eq "" } Set-DistributionGroup
Get-AddressList Set-AddressList
Get-AddressList Update-AddressList

Note: Instead OUNAME type your Organizational Unit name where your users resides.

Update Default Global Address List on Exchange 2007

2010-01-15T10:27:00.002+02:00

Execute the command on Exchange Management Shell.

Update-GlobalAddressList -Identity "Default Global Adress List"

Access to the address list service on all Exchange 2007 servers has been denied

2010-01-15T10:24:00.003+02:00

Make Sure the user that you perform Management Shell operations is the member of the following Domain Groups.

Exchange Organization Administrators
Exchange Recipients Administrators

Add the user to the groups above and log off/log on aain and try management shell commands again.

Also check if System Attendant service is running.

NetApp Perfstat tool Usage

2009-11-13T13:22:00.003+02:00

Perfstat is a NetApp tool that you can monitor and reveal your NetApp Storage devices . You can download it from NetApp web site.

Usage of perfstat is;

perfstat -f IPAddressofNetAPP -t 10 -i 12 > perfstat.out

10 : Get statistics for every 10 minutes;
12 : Number of sample
perfstat.out : Name of the file that log will be saved into.

Reindex SQL Server Database

2009-08-24T10:07:00.005+03:00

Sometimes you may need to reindex your database while you transport it from SQL 2000 to SQL 2005.

Execute the command below(Write your db name instead of mydatabasename)

DECLARE @Database VARCHAR(255)
DECLARE @Table VARCHAR(255)
DECLARE @cmd NVARCHAR(500)
DECLARE @fillfactor INT
SET @fillfactor = 90
DECLARE DatabaseCursor CURSOR FOR
SELECT name FROM master.dbo.sysdatabases
WHERE name NOT IN ('master','model','msdb','tempdb','distrbution')
ORDER BY 1
OPEN DatabaseCursor
FETCH NEXT FROM DatabaseCursor INTO @Database
WHILE @@FETCH_STATUS = 0
BEGIN
SET @cmd = 'DECLARE TableCursor CURSOR FOR SELECT table_catalog + ''.'' + table_schema + ''.'' + table_name as tableName
FROM ' + @Database + '.INFORMATION_SCHEMA.TABLES WHERE table_type = ''BASE TABLE'''
-- create table cursor
EXEC (@cmd)
OPEN TableCursor
FETCH NEXT FROM TableCursor INTO @Table
WHILE @@FETCH_STATUS = 0
BEGIN
-- SQL 2000 command
--DBCC DBREINDEX(@Table,' ',@fillfactor)
-- SQL 2005 command
SET @cmd = 'ALTER INDEX ALL ON ' + @Table + ' REBUILD WITH (FILLFACTOR = ' + CONVERT(VARCHAR(3),@fillfactor) + ')'
EXEC (@cmd)
FETCH NEXT FROM TableCursor INTO @Table
END
CLOSE TableCursor
DEALLOCATE TableCursor
FETCH NEXT FROM DatabaseCursor INTO @Database
END
CLOSE DatabaseCursor
DEALLOCATE DatabaseCursor

Hide SQL Server Database(s)

2009-08-24T09:54:00.004+03:00

Sometimes you may want to hide SQL Server databases from unauthorized users.(Like hosting firm etc.)
To show SQL databases to only authorized users follow the steps below;

Open New Query;

Execute the command below to remove "view all database(s) right" from public role;

USE master
GO
DENY VIEW any DATABASE TO public

Thsn Execute command below to append users to view and own database

USE database_name
GO
EXEC sp_changedbowner username

Event ID: 17896

2009-05-28T08:10:00.003+03:00

Event Type: Information
Event Source: MSSQLSERVER
Event Category: (2)
Event ID: 17896
Description:

The time stamp counter of CPU on scheduler id 2 is not synchronized with other CPUs.

Check the Links Below;
http://blogs.msdn.com/psssql/archive/2006/11/27/sql-server-2005-sp2-will-introduce-new-messages-to-the-error-log-related-to-timing-activities.aspx

http://support.microsoft.com/default.aspx?scid=kb;en-us;931279

CPU number	Statements to enable processor affinity
02 CPUs	exec sp_configure 'affinity mask', 0x00000003 GO reconfigure GO
04 CPUs	exec sp_configure 'affinity mask', 0x0000000F GO reconfigure GO
08 CPUs	exec sp_configure 'affinity mask', 0x000000FF GO reconfigure GO
16 CPUs	exec sp_configure 'affinity mask', 0x0000FFFF GO reconfigure GO
32 CPUs	exec sp_configure 'affinity mask', 0xFFFFFFFF GO reconfigure GO

Get Missing indexes on your Database(s)

2009-05-27T13:02:00.003+03:00

Execute the command below;

SELECT DB_NAME(database_id) AS [DATABASE],
Equality_Columns, Inequality_Columns,
Included_Columns, STATEMENT
FROM sys.dm_db_missing_index_details
ORDER BY 1

where DATABASE is your DB Name where missing index(es) found.
equality_columns index is required on these columns
inequality_columns is list of columns that are used for inequality comparison and index is required on these.
included_columns is list of columns that are used in query for other than comparison and covering index on these is suggested.
Statement is name of table along with column where index is missing

SQL Server 2005 recovery Models

2009-05-27T12:42:00.002+03:00

The recovery model of database determines the type of database transactions are logged and the degree of concern that provided to data loss in case of any failure.

Full Recovery Model of SQL Server 2005

The full recovery model does the most extensive logging and allows the database to be recovered to the point of failure. Full recovery model presents the highest protection against data loss. You should always configure all production databases to use full recovery.

Bulk-logged Recovery Model of SQL Server 2005

The bulk-logged recovery model fully logs transactions but mostly bulk operations, such as bulk loads, Select statements. Bulk-logged recovery model allows the database to be recovered to the end of a transaction log backup only when the log backup contains bulk changes. Recovery to the point of failure is not supported.

Simple Recovery Model of SQL Server 2005

Simple recovery model logs most transactions, logging only the information required to ensure database consistency after a system crash or after restoring a database backup. With simple recovery model the database can be recovered only to the most recent backup. This recovery model has the should not be used where data loss in the event of a crash cannot be tolerated.

View SQL Server Error log's detail by SQL Commands

2009-05-27T12:29:00.004+03:00

Execute the command below to get error logs Archive number.

exec sp_enumerrorlogs

Then execute ;

exec sp_readerrorlog archivenumber

SQL Server System Statistical Functions

2009-05-20T08:04:00.004+03:00

@@TIMETICKS
Number of millionths of a second in a timer tick.
@@CONNECTIONS
The number of connections or attempted connections.
@@CPU_BUSY
Timer ticks that the CPU has been working for SQL Server.
@@IDLE
Time in timer ticks that SQL Server has been idle.
@@IO_BUSY
Timer ticks that SQL Server has spent performing I/O operations.
@@PACKET_ERRORS
Number of network packet errors that have occurred.
@@PACK_RECEIVED
Number of packets read from the network.
@@PACK_SENT
Number of packets written to the network.
@@TOTAL_ERRORS
Number of read/write errors during I/O operations.
@@TOTAL_READ
Number of disk reads.
@@TOTAL_WRITE
Number of disk writes.

Usage:

Example : (Get SQL Server I/O)

Check if index(es) used in your Query.

2009-05-12T15:22:00.004+03:00

Open New Query and write your query. Before executing your query press CTRL + L see estimated execution for your query. You can mouse over each node in the execution plan to get more information about that step, such as the type of operation that node represents, the number of rows affected, and a breakdown of the costs associated with that step.

Check if Trace is running on your SQL Server

2009-05-11T15:12:00.002+03:00

Execute the code below on SQL Management Studio check if trace is running on SQL server.

SELECT * FROM fn_trace_getinfo(default);
GO

HP NC373i Disappears after Installing HP PSP Version 8.x

2009-05-09T12:56:00.001+03:00

If your NIC Card (NC373i) has disappeared on HP BL460c server after applying PSP 8.x Pack follow the steps below to bring it back.

To resolve this issue, delete the wdf01000.sys from c:\windows\system32\drivers\ , and then re-run the HP PSP package.

Blue Screen Error 0x0000007E (0x00000005, 0x80888D615, 0xF7906C08, 0xF7906904) on HP Servers

2009-05-09T12:31:00.004+03:00

If you are getting Blue Screen Error 0x0000007E (0x00000005, 0x80888D615, 0xF7906C08, 0xF7906904) on HP BL460c while trying to shutdown your HP server (BL,DL series ) read and apply the steps below;

Cause : You probably have installed the PSP 7.80 nic drivers (v3.0.5).

Solution : You should rollback your driver to previous version or apply the latest version of your Nic drivers.

I have applied the CP008415.exe pack from PSP 8.00 and the problem has gone away now.

If your are trying Nic drivers coming with PSP 8.20 , you could experience the problem;

Notice: (Revision) HP NC-Series Broadcom 1GbE Multifunction Driver for Windows Server - First Update to Version 4.6.16.0 To Avoid Message "HP Virtual Bus Device Installation Requires a Newer Version. Version 4.6.16.0 is Required."

Check the Link Below;

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684544&dimid=1002159936&dicid=alr_apr09&jumpid=em_alerts/us/apr09/all/xbu/emailsubid/mrm/mcc/loc/rbu_category/alerts

SQL Server Detailed Memory Usage Information.

2009-05-07T10:19:00.005+03:00

You can use DBCC Memorystatus command to view detailed memory information.

Check http://support.microsoft.com/kb/907877 for meanings

Enable Network Connection for MSDE

2009-05-06T13:50:00.004+03:00

By default remote connecion to MSDE engine is disabled. You should enable network connections on MSDE to connect remotely.

Follow the steps below;

1) Start --> Run --> svrnetcn (This command Launchs SQL Server Network utility)

Choose TCP/IP connections click --> Enable

Click Apply -> OK

And Restart SQL Server service.

MSDE starts to listen requests from TCP 1433

View MAC Address(es) and IP Address of devices connected to Cisco Router

2009-05-04T17:06:00.003+03:00

Execute the show arp command and get the MAC and IP address of devices connected to Cisco Router.

CPU(s) operating at reduced performance level due to a low power cap

2009-05-04T16:19:00.005+03:00

You should disable power capping or set it to a value which is greater then the current in the iLO2.

Open ILO2 Choose Power Management TAB.

If power capping feature is not available;

install latest version of Power Management Module.

Message Tracking in Exchange 2007

2009-05-04T10:46:00.006+03:00

By default in Exchange 2007 , message tracking system is enabled. Youcan use message message tracking logs for mail flow analysis as well as troubleshooting .

You can get message tracking system settings by using Get-TransportServer for Edge and Hub transport roles and the Get-MailboxServer for Mailbox server roles.

You can modify the message tracking settings by using the Set-TransportServer and Set-MailboxServer

Using these commands above you can ;

Enable or disable message tracking system (Enabled by default)
Enable or disable logging of message subject lines (Enabled by default)

Set the maximum size of log files (10MB by default)
Set the maximum size of the log file directory (250MB by default)
Change the path of the log file (‘C:\Program Files\Microsoft\Exchange Server\TransportRoles\Logs\MessageTracking’ by default)

Set the maximum age of message tracking log files (30 days by default)

Example Command

Set Maximum Directory size 1 GB maximum log file age 40 days

C:\>[PS] C:\Users\Administrator\Desktop>Set-TransportServer SV2008 -MessageTrackingLogMaxDirectorySize 1GB -MessageTrackingLogMaxAge 40.00:00:00[PS]

Searching Message Tracking Logs

Message sent from ittips@tricks.com to test@exchange2007.net between dates releated. (First 50 Result)

[PS] C:\>Get-MessageTrackingLog -Server SV2008 -EventID SEND -Sender ittips@tricks.com -Recipients test@exchange2007.net -Start 1/1/2009 -End 2/4/2009 –ResultSize 50

Search By Subject

$hubs Get-MessageTrackingLog -MessageSubject "Production" -Start "1/01/2009 00:00:00" -End "1/04/2009 23:59:59

The properties on 'user name' have invalid data Error on Exchange 2007

2009-05-04T08:26:00.006+03:00

If you get The properties on ''username" have invalid data. If you click OK, default value will be used instead and will be saved if you do not change them before hitting Apply or OK on the property page. If you click cancel, the object will be displayed read-only and corrupted values will be retained.The following values have invalid data: Database error on Exchange 2007 try the steps below.

1)Remove the users from within Exchange Server and Reboot Server,
2)Add users again and assigen them to the primary mail database

or check!

http://support.microsoft.com/kb/951710

Terminal Services Black Screen RDP Session

2009-05-02T12:18:00.002+03:00

Solution Offer.
Cause to this situation can be MTU settings.

Try the following Steps Below.

1. Start > Run > Regedit
2. Navigate to HKLM \ System \ Current Control Set \ Services \ TCPIP\ Parameters
3. In the right hand pane, Right Click > New > DWORD
4. Call it EnablePMTUBHDetect set its hex value to 1
5. Reboot

Expired Credentials. Windows needs your current credentials to ensure network connectivity.

2009-05-02T12:05:00.002+03:00

If you get the warning "Expired Credentials. Windows needs your current credentials to ensure network connectivity. Please lock this computer then unlock it using your most recent password or smart card." after logging to your computer .

Follow these steps below,

1) Check if your computer system time is matched +/- 5 minutes to your DC's time.
2)Try Use "net use * /d" command to delete all mapping drives. Then use "net use \\servername password /u:domainname\username" to cache the credentials. Relogon
3)Check the link
http://searchwindowsserver.techtarget.com/tip/0,289483,sid68_gci1022111,00.html

Deleted Files are shown while performing search on Windows Vista

2009-04-29T14:53:00.003+03:00

In order to view correct search results we should rebuild search index.

Start --> Run --> control srchadmin.dll

Search Database will be automaticly reindexed.

Disable Cisco Password Recovery

2009-04-28T14:55:00.003+03:00

Cisco devices permits to password recovery by default during the reload system. But if person has a physical access to devices he can change password.For this reason, you may want to disable password recovery procedure.

Use the “no service password-recovery” command
When you do this carefully read the warning message.

Router(config)#no service password-recovery
WARNING:
Executing this command will disable password recovery mechanism.
Do not execute this command without another plan for
password recovery.
Are you sure you want to continue? [yes/no]: yes
Router(config)#

Block Dictionary Attack on Cisco

2009-04-28T14:46:00.004+03:00

To block dictionary attack on Cisco routing and switching devices we can use login block- for command.
By using this command we can block for ‘x’ seconds after failed ‘y’ logins are tried within ‘z’ seconds.
The following example shows how block login access for 100 seconds after 4 failed login attempts within 20 seconds:

login block-for 100 attempts 4 within 20

During this block period all types of login attempts( Telnet, SSH, and HTTP) are denied.

But it is possible to exclude IP address for this blocking.
Ex: Exclude 192.168.1.0 Network (C Class)

login quiet-mode access-class 10
access-list 101 permit ip 192.168.1.0 0.0.0.255 any

View Possible Bad indexes on SQL Database

2009-04-28T13:20:00.002+03:00

Execute the following code to view possible bad indexes in SQL Database;

SELECT object_name(s.object_id) AS 'Table', i.name AS 'Index ', i.index_id,
user_updates AS 'Total Number of Writes', user_seeks + user_scans + user_lookups AS 'Total Number of Reads',
user_updates - (user_seeks + user_scans + user_lookups) AS 'Difference'
FROM sys.dm_db_index_usage_stats AS s WITH (NOLOCK)
INNER JOIN sys.indexes AS i WITH (NOLOCK)
ON s.object_id = i.object_id
AND i.index_id = s.index_id
WHERE objectproperty(s.object_id,'IsUserTable') = 1
AND s.database_id = db_id()
AND user_updates > (user_seeks + user_scans + user_lookups)
AND i.index_id > 1
ORDER BY 'Difference' DESC, 'Total Number of Writes' DESC, 'Total Number of Reads' ASC;

View SQL Server Hardware Information by SQL Commands

2009-04-28T13:17:00.002+03:00

Execute the following Command to view detailed CPU , Memory information.

SELECT cpu_count AS 'Logical CPU Count', hyperthread_ratio AS 'Hyperthread Ratio',
cpu_count/hyperthread_ratio As 'Physical CPU Count',
physical_memory_in_bytes/1048576 AS 'Physical Memory (MB)'
FROM sys.dm_os_sys_info;

Hide Users from Global Address List on Exchange 2007

2009-04-27T12:22:00.002+03:00

Open Exchange Management Shell and Execute the command Below;

Set-Mailbox "Mailbox Name" -HiddenFromAddressListsEnabled $true

Enable HTTPS-HTTP Bridging on the TS Gateway

2009-04-27T11:06:00.005+03:00

Open TS Gateway Manager.

In the TS Gateway Manager console tree, right click to the TS Gateway server, click Properties.

On the SSL Bridging tab, select the Use HTTPS-HTTP bridging check box, click OK.

A warning message will appear, stating that for the SSL bridging settings to take effect, you must recycle the default application pool of IIS. If you want to recycle the default application pool now click Yes. To recycle the default application pool manually later, click No.

ISA Server Configuration for TS Gateway

http://technet.microsoft.com/en-us/library/cc731353.aspx

View SQL Server Database Columns Collations that different from Database

2009-04-24T21:10:00.004+03:00

Execute the code below to find out which columns have different collation.

SELECT TABLE_SCHEMA, TABLE_NAME, COLUMN_NAME, COLLATION_NAME FROM information_schema.columnsWHERE COLLATION_NAME IN (SELECT DISTINCT COLLATION_NAME FROM INFORMATION_SCHEMA.COLUMNSEXCEPT(SELECT DATABASEPROPERTYEX('sds', 'Collation')UNION ALLSELECT NULL))

Get Creation Time for SQL Database

2009-04-22T15:55:00.001+03:00

Execute The Command Below;

select @@servername + ' '+ convert(varchar(20),crdate,111) + ' '+ [Name] from sys.sysdatabases order by crdate desc

Get Last Modified Date for SQL Server Objects

2009-04-22T15:51:00.004+03:00

Execute the command below;

SELECT name
FROM sys.objects
WHERE DATEDIFF(D,modify_date, GETDATE()) <>

Get SQL Server Version

2009-04-22T15:46:00.002+03:00

Execute the command below on SQL Server Management Studio

select @@version

Block Conficker Script ISA 2004 & ISA 2006

2009-04-20T17:21:00.003+03:00

Download the script file from the link above.

Block_Conficker_Script

Execute on the server that ISA server installed by double clicking the file.

New HTTP signatures will be automaticly created.

Disable Autorun via Group Policy

2009-04-17T09:11:00.007+03:00

In order to disable autorun features of all drives in domain computers follow these steps below.

Open Group Policy Object Editor , and edit releated Domain Policy.

Locate Computer Policy\Computer Configuration\Administrative Templates\System in the left pane then find "Turn Off Autoplay" in the right pane.

Double click and set feature to enable set Turn of Autoplay to : All Drives

Disable Autorun in Vista;

Open : Gpedit.msc

Locate the following policy;

Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\AutoPlay Policies

SQL 2005 Processes Detailed Status Query

2009-04-16T14:27:00.002+03:00

Use the quey below to find detailed information about processes.
How many process are working? , How many are sleeping..., and the total number of processes.

SELECT COUNT(*) AS ProcessStatusCount,CASE Status
WHEN 'Running' THEN 'Number of Process Currently Running One or More Requests '
WHEN 'Sleeping ' THEN 'Number of Process Currently Sleeping'
ELSE 'Dormant – Session resets
END Status
FROM sys.dm_exec_sessions GROUP BY Status

Exchange 2007 Mailbox Size

2009-04-16T09:03:00.003+03:00

Use the command below on Exchange Management Shell to get Mailbox Sizes on Exchange 2007.

Get-MailboxStatistics -database “Mailbox Database” Select DisplayName, TotalItemSize Format-Table

W32Time Error Event ID:48

2009-04-15T14:52:00.003+03:00

Possible reason is you have problem about connecting to time server or time server is experiencing diffuculties.

List of time servers is available at ;
http://support.microsoft.com/kb/262680

After choosing time server follow the steps below;

net stop w32time
w32tm /unregister
w32tm /register
net time /setsntp:TimeServerIPNumber
net start w32time

If you want to use a FQDN instead of the IP address as time server, add ",0x1" at the end of the net time command

net time /setsntp:time-a.nist.gov,0x1

Block or Allow Google Earth Through Firewall

2009-04-15T14:30:00.003+03:00

In order to deny or allow access to Google Earth , block or allow access to these address on your firewall;

http://maps.google.com/
http://auth.keyhole.com/
http://kh.google.com/

View SQL 2005 Database Logical File Name

2009-04-15T13:43:00.005+03:00

Execute the EXEC sp_helpfile command on New Query window.
First Columns indicates the logical name of database file(s).

Windows 2008 Certification Paths

2009-04-15T09:38:00.001+03:00

WinServer2008-CertPaths ew

Check if Group Policy Applied on Domain Group

2009-04-10T08:46:00.003+03:00

You can check if your Group Policy is applied on Group by using ,
GPRESULT command.

Start -> Run -> (Execute the Commands Below) .

GPRESULT
GPRESULT /USER targetusername /V
GPRESULT /S system /USER targetusername /SCOPE COMPUTER /Z
GPRESULT /S system /U username /P password /SCOPE USER /V

Check If Group Policy Applied on Client

2009-04-10T08:24:00.006+03:00

You can check if group policy applied on client by using "Resultant set of Group Policy" Console

Execute Start -> Run -> rsop.msc

After policy is processed;

Check if your Group Policy is applied on Client successfully.

Disconnect all users from SQL Database

2009-04-09T14:53:00.003+03:00

Run the code below on SQL Management Studio,

DECLARE @User VARCHAR(8000)
SELECT @user=COALESCE(@user,'')+'Kill '+CAST(spid AS VARCHAR(10))+ '; '
FROM sys.sysprocesses WHERE DBID=DB_ID('EF_GR') EXEC(@user)

//EF_GR is a name of database

Exchange 2007 Check User Storage Limits

2009-04-08T12:06:00.003+03:00

Excute the command below on Exchange Management Shell to get Storage statistics.

get-mailboxstatistics

Exchange 2007 "Send As" Feature

2009-04-08T11:21:00.005+03:00

How to Grant Send As Permission.
Open Exchange Management Shell.

Execute the following command.

Add-ADPermission "Mailbox" –User "Domain\User" –Extendedrights SendAs

Example:
This command grant test2 user to send as permission for egemen mailbox

Remove, Disable, Enable etc .. Devices by Command Prompt (Devcon.exe)

2009-04-07T17:29:00.005+03:00

Download devcon.exe

Download And Extract it to any Folder.

Enter to the folder by using command prompt.

Example (Com port remove and rescan)

devcon remove @ACPI\PNP0501\*
devcon rescan

Example (Listing all classes)

devcon classes

Example (Listing all usb devices Hardware IDs)

devcon /hwids *usb*

If you get [::1] while ping to localhost

2009-04-07T11:44:00.004+03:00

::1 is a short way of writing 0000:0000:0000:0000:0000:0000:0000:0001

Disable IPv6 from network connections properties , if you don't use.

Modify Group Policy Refresh Interval

2009-04-07T10:02:00.003+03:00

By default, Group Policy refresh happens every 90 minutes for clients and users , every 5 minutes for domain controllers (DCs).

We can modify these refresh intervals by following the steps below.

Open the relevant Group Policy Object (GPO). Then click Edit.Expand Computer Configuration, Administrative Templates, System, Group Policy.

For Computers
Find "Group Policy refresh interval for computers," then select Enabled. Enter the new refresh rate and the maximum random time to wait for the refresh (to prevent all machines getting GPO updates at the same time), click OK.
For DCs
If required, open Group Policy refresh interval for domain controllers," then select Enabled. Enter the new refresh rate, this refresh rate must be significantly less than average computer policy refresh rate, and the maximum random time to wait for the refresh (to avoid all machines updating at the same time), click OK.
For Users
Expand User Configuration, Administrative Templates, System, Group Policy.

Double-click "Group Policy refresh interval for users."

Select Enabled, set the values, then click OK.

Close the Group Policy Editor (GPE).

Block Skype using Group Policy

2009-04-06T17:57:00.004+03:00

Copy the following below code to the text file and save as Skype.adm then import to your Domain Group Policy.

Code

Then use various options to limit Skype usage.

Block Skype on ISA 2006 & ISA 2004

2009-04-06T17:25:00.002+03:00

There is a research from Columbia University about Skype Blocking.
http://www1.cs.columbia.edu/~library/TR-repository/reports/reports-2004/cucs-039-04.pdf

By preventing all protocols access to 80.160.91.11 (Skype Auth Server), you can Block Skype.

View MAC Addresses of devices connected to HP Procurve Switch

2009-04-06T16:35:00.003+03:00

Connect to HP Procurve Switch via Telnet.

Execute show mac-address command.

You will see the connected devices MAC addresses and which port they are connected to.

Remove APEX SQL Log tables from database

2009-04-06T16:03:00.005+03:00

If you want to remove all tables about APEX SQL Log from database after uninstalling the program.

Execute the code below;

IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlLogMonitor_Stop') EXEC master.dbo.xp_ApexSqlLogMonitor_Stop
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlConnectionMonitor_Stop') EXEC master.dbo.xp_ApexSqlConnectionMonitor_Stop
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlLog') EXEC master.dbo.sp_dropextendedproc 'xp_ApexSqlLog'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlLogApi') EXEC master.dbo.sp_dropextendedproc 'xp_ApexSqlLogApi'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_InitLogNav') EXEC master.dbo.sp_dropextendedproc 'xp_InitLogNav'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_UnInitLogNav') EXEC master.dbo.sp_dropextendedproc 'xp_UnInitLogNav'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlLogMonitor') EXEC master.dbo.sp_dropextendedproc 'xp_ApexSqlLogMonitor'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlLogMonitor_Stop') EXEC master.dbo.sp_dropextendedproc 'xp_ApexSqlLogMonitor_Stop'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlLogMonitor_Info') EXEC master.dbo.sp_dropextendedproc 'xp_ApexSqlLogMonitor_Info'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlLogMonitor_Enable') EXEC master.dbo.sp_dropextendedproc 'xp_ApexSqlLogMonitor_Enable'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlLogMonitor_Disable') EXEC master.dbo.sp_dropextendedproc 'xp_ApexSqlLogMonitor_Disable'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlConnectionMonitor') EXEC master.dbo.sp_dropextendedproc 'xp_ApexSqlConnectionMonitor'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlConnectionMonitor_Stop') EXEC master.dbo.sp_dropextendedproc 'xp_ApexSqlConnectionMonitor_Stop'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlConnectionMonitor_Info') EXEC master.dbo.sp_dropextendedproc 'xp_ApexSqlConnectionMonitor_Info'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlConnectionMonitor_Enable') EXEC master.dbo.sp_dropextendedproc 'xp_ApexSqlConnectionMonitor_Enable'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_ApexSqlConnectionMonitor_Disable') EXEC master.dbo.sp_dropextendedproc 'xp_ApexSqlConnectionMonitor_Disable'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_EnableLiveLog') EXEC master.dbo.sp_dropextendedproc 'xp_EnableLiveLog'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_DisableLiveLog') EXEC master.dbo.sp_dropextendedproc 'xp_DisableLiveLog'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'xp_GetLiveLogStatus') EXEC master.dbo.sp_dropextendedproc 'xp_GetLiveLogStatus'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'ln_open') EXEC master.dbo.sp_dropextendedproc 'ln_open'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'ln_is_open') EXEC master.dbo.sp_dropextendedproc 'ln_is_open'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'ln_is_valid') EXEC master.dbo.sp_dropextendedproc 'ln_is_valid'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'ln_seekga') EXEC master.dbo.sp_dropextendedproc 'ln_seekga'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'ln_seekgr') EXEC master.dbo.sp_dropextendedproc 'ln_seekgr'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'ln_tellg') EXEC master.dbo.sp_dropextendedproc 'ln_tellg'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'ln_read') EXEC master.dbo.sp_dropextendedproc 'ln_read'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'ln_close') EXEC master.dbo.sp_dropextendedproc 'ln_close'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'sp_ApexSqlLogMonitor_Start') EXEC master.dbo.sp_procoption 'sp_ApexSqlLogMonitor_Start', 'startup', 'false'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'sp_ApexSqlLogMonitor_Start') EXEC master.dbo.sp_executesql N'DROP PROCEDURE sp_ApexSqlLogMonitor_Start'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'sp_ApexSqlConnectionMonitor_Start') EXEC master.dbo.sp_procoption 'sp_ApexSqlConnectionMonitor_Start', 'startup', 'false'
IF EXISTS(SELECT * FROM master.dbo.sysobjects WHERE name = 'sp_ApexSqlConnectionMonitor_Start') EXEC master.dbo.sp_executesql N'DROP PROCEDURE sp_ApexSqlConnectionMonitor_Start'
DBCC LogNavXp (FREE)
DBCC ApexSqlLogXprocs (FREE)
DBCC ApexSqlServerXprocs (FREE)

Update Statistics on SQL 2005 Database

2009-04-06T15:59:00.000+03:00

Execute the command Below;

SELECT

sum(cache_plan.size_in_bytes)

FROM sys.dm_exec_cached_plans as cache_plan

outer apply sys.dm_exec_sql_text (cache_plan.plan_handle) as sql_text

Total Used Cache SQL Server 2005

2009-04-06T15:56:00.002+03:00

Use the Query below to find total used cache in bytes;

SELECT

sum(cache_plan.size_in_bytes)

FROM sys.dm_exec_cached_plans as cache_plan

outer apply sys.dm_exec_sql_text (cache_plan.plan_handle) as sql_text

Check SQL Database Health Status

2009-04-06T15:53:00.000+03:00

Execute ;

DBCC Checkdb

Exchange 2007 Local Continuous Replication

2009-04-06T11:06:00.013+03:00

You can provide High Availibility to your Exchange 2007 server by using Local Continious future without using another hardwares.

To enable this future open Exchange Management Console. Choose Mailbox Under Server Configuration.

In the right pane in database managment TAB, Right click "First Storage Group" and Choose "Enable Local Continuous Replication".

click NEXT .

Enter path for system and log files .

Cick Next and Enter the path for LCR database.

(Using another physical disk will increase performance of your replication.)

You must use identical name for your LCR database file name.

Click Next. And click Enable on the next screen.
After successful completion . Click finish.

Control creation of new files by comparing two locations.

LatestAvailableLogTime
The time stamp on the source storage group of the most recently detected new transaction log file.
LastCopyNotificationedLogTime
The time associated with the last new log generated by the active storage group and known to the copy.
LastCopiedLogTime
The time stamp on the source storage group of the last successful copy of a transaction log file.
LastInspectedLogTime
The time stamp on the target storage group of the last successful inspection of a transaction log file.
Seeding
Indicates that seeding is in progress. Possible values are True and False.

Enable Anti-Spam updates on Exchange 2007

2009-04-06T10:37:00.002+03:00

Open Exchange Management Shell,

Execute the command below;

This command will enable Antispam automatic updates and options in Microsoft Update.

"Enable-AntispamUpdates -Identity SV2008 -IPReputationUpdatesEnabled $True -MicrosoftUpdate RequestNotifyDownload -UpdateMode Automatic -SpamSignatureUpdatesEnabled $True"

Type your Exchange server name to the bold part (SV2008).Do not use quotas.