Exchange Online - Search and Delete Specific Email

 

Connect Exchange Online Shell

1)   $Search=New-ComplianceSearch –Name “Remove Specific Emails” -ExchangeLocation All –ContentMatchQuery ‘(Subject: “Odelo Davranış Kuralları İncelemesi”)’ 

2)  Start-ComplianceSearch –Identity $Search.Identity 

3) New-ComplianceSearchAction –SearchName “Remove Specific Emails” -Purge –PurgeType SoftDelete 

Read more...

Symantec Endpoint Protection RPC Server is Unavailable Error

Symantec Endpoint Protection  RPC Server is Unavailable Error
SEP RPC Server is Unavailable Error

After performing so many tests I noticed that altough Windows Firewall is being managed and it is disabled by SEP, windows firewall still prevents RPC traffic.

You can disable Windows firewall by executing the command below on relevant client computers.

netsh advfirewall set allprofiles state off





Read more...

Exchange Server 2013 - 2016 Meeting Room Mail Forwarding

Set-Mailbox -Identity "Meeting Room 1" -ForwardingAddress meetingroom2@abc.com -DeliverToMailboxAndForward $True
Read more...

Exchange 2013 -2016 Meeting Rooms Allow External Requests

Get-Mailbox "Meeting Room 1" | Set-CalendarProcessing -ProcessExternalMeetingMessages $true

Read more...

Search and Delete specific message from all mailboxes Exchange 2016

Open the Exchange Management Shell

Run the following commands.

New-ComplianceSearch -Name "Remove Message" -ExchangeLocation all -ContentMatchQuery 'subject:"Check This Order"'

Start-ComplianceSearch -Identity "Remove Message"

1) (Received:4/13/2016..4/14/2016) AND (Subject:'Action required')

2) (From:chatsuwloginsset12345@outlook.com) AND (Subject:"Check This Order")

Delete

New-ComplianceSearchAction -SearchName "Remove Message" -Purge -PurgeType SoftDelete 

Source 

Read more...

While Editing NameServers Tab MMC Console Freezed

Install Hotfix Below, it worked for me.

https://support.microsoft.com/en-us/help/2581690/dns-management-snap-in-console-stops-responding-when-you-edit-the-name-servers-tab-in-windows-server-2008-r2

Read more...

NetApp Read Only User (8.1.2)

1)  
useradmin role add readonly1 -a api-aggr-list-*,api-cifs-share-list-iter-end,api-cifs-share-list-iter-next,api-cifs-share-list-iter-start,api-disk-list-*,api-fcp-adapter-list-info,api-file-read-file,api-fcp-service-status,api-ipspace-list-info,api-iscsi-service-status,api-license-list-info,api-lun-list-info,api-nfs-exportfs-list-rules,api-nfs-status,api-options-get,api-perf-object-counter-list-*,api-perf-object-get*,api-perf-object-instance-list-*,api-perf-object-list-*,api-quota-get-entry,api-quota-report-iter-end,api-quota-report-iter-next,api-quota-report-iter-start,api-snapshot-delta-info,api-snapshot-get-schedule,api-snapshot-list-*,api-snapshot-reserve-list-*,api-snapshot-autodelete-list-*,api-snmp-get,api-snmp-get-next,api-system-get-version,api-vfiler-get-*,api-vfiler-list-*,api-volume-get-language,api-volume-get-root-name,api-volume-list-*,api-useradmin-role-list,api-useradmin-group-list,api-useradmin-user-list,api-useradmin-domainuser-list,login-http-admin,api-system-cli,cli-cifs,api-system-available-replication-transfers,api-cifs-list-config,cli-vol,security-priv-advanced,api-lun-config-check-cfmode-info,cli-registry,api-aggr-check-spare-low,api-cifs-homedir-paths-get,api-cifs-top-iter-*,api-cifs-session-list-iter-*,api-cifs-share-list-iter-*,api-cifs-status,api-disk-sanown-list-info,api-file-get-file-info,api-file-list-directory-iter-*,api-igroup-list-info,api-iscsi-initiator-auth-list-info,api-iscsi-initiator-get-default-auth,api-iscsi-interface-list-info,api-iscsi-node-get-name,api-iscsi-portal-list-info,api-iscsi-target-alias-get-alias,api-iscsi-tpgroup-list-info,api-lun-get-comment,api-lun-initiator-list-map-info,api-lun-map-list-info,api-nfs-exportfs-list-rules-2



2)
useradmin role add readonly2 -a api-options-get,api-options-list-info,api-options-set,api-qtree-list-iter-*,api-registry-get,api-registry-list-info,api-snapmirror-get-status,api-snapmirror-list-connections,api-snapmirror-list-schedule,api-snapshot-autodelete-list-info,api-snapshot-list-info,api-snmp-get,api-snmp-status,api-system-cli,api-system-get-*,api-useradmin-group-list,api-useradmin-role-list,api-useradmin-user-list,api-volume-autosize-get,api-volume-get-language,api-volume-get-root-name,api-volume-list-info,api-volume-options-list-info,cli-cifs,cli-date,cli-ifconfig,cli-priv,cli-stty,cli-timezone,cli-uptime,login-http-admin,security-priv-advanced,api-cf-status,api-net-config-get*,cli-options,cli-vfiler,api-storage-disk-get*,api-clock-get*,api-diagnosis-config-get*,api-diagnosis-alert-get*

3)
 useradmin group add readonlygroup -c "Read Only Group" -r readonly1,readonly2 

Other Data Ontap Versions APIs List

https://kb.netapp.com/support/s/article/ka31A000000120KQAQ/how-to-create-a-read-only-user-to-monitor-a-storage-system-in-oncommand-system-manager-oncommand-unified-manager-and-performance-advisor?language=en_US

https://www.youtube.com/watch?v=GfNBzxx6C9o

 



Read more...

Windows Show Time Zone Command Line

systeminfo | findstr  /C:”Time Zone”
Read more...

Get mailbox grant send on behalf to (PowerShell)

et-Mailbox -Filter {GrantSendOnBehalfTo -ne $Null} |Select Alias, @{Name='GrantSendOnBeh
alfTo';Expression={[string]::join(";", ($_.GrantSendOnBehalfTo))}} | Export-Csv -NoType -encoding "unicode" C:\MailboxesSendOnBehalfPermCheck.csv
Read more...

Get mailbox forward to from mailboxes

Get-Mailbox -Filter {ForwardingAddress -ne $Null} |Select Alias, ForwardingAddress | Export-Csv -NoType -encoding "unicode" C:\MailboxesForwardcheck.csv
Read more...

List all Users Who Have Access to Other Exchange Mailboxes (PowerShell)

Get-Mailbox | Get-MailboxPermission | where {$_.user.tostring() -ne "NT AUTHORITY\SELF" -and $_.IsInherited -eq $false} | Select Identity,User,@{Name='Access Rights';Expression={[string]::join(', ', $_.AccessRights)}} | Export-Csv -NoTypeInformation C:\\mailboxpermissionscheck.csv

Read more...

You don't have permission to sync with this server exchange 2010

This error is caused by the maximum Mobile Phone limit (10 device)  in Exchange 2010.

You can increase this limit by using Throttling policy.

First Create new throttling policy.

New-Throttlingpolicy "Increased ActiveSync Devices1" -EasMaxDevices 

600 -EasMaxConcurrency 20

 -EasMaxDevices 20 (Maximum mobile phone limit)

 -EasMaxConcurrency  (Maximum  concurrent device that will sync.)

Then assign this policy to user.

Set-Mailbox username -ThrottlingPolicy "Increased ActiveSync Devices1"

Check if Policy applied to mailbox

Get-Mailbox username -ThrottlingPolicy | FL 

Read more...

Export Skype for Business Users List

Get-CsUser -OU "ou=Users,dc=domain,dc=com" | Export-Csv -Path c:\Logs\Skypeuser.csv
Read more...

Exchange 2010 Export to PST

Exchange 2010 Export to PST

Online Archive

New-MailboxExportRequest -Mailbox user.name -IsArchive -FilePath "\\exc01\PSTExport\username.pst"

Mailbox

New-MailboxExportRequest -Mailbox user.name -FilePath \\exc01\pst\username.pst

Get-MailboxExportRequest

Get-MailboxExportRequest -Name MailboxExport | fl

Get-MailboxExportRequest | Get-MailboxExportRequestStatistics

Get-MailboxExportRequest | where {$_.status -eq "Completed"}
Read more...

Active Directory Object Creation Date Report (Quest ActiveRoles Management Shell)

Computer accounts created in last 321 Days.

Get-QADComputer -CreatedAfter (Get-Date).AddDays(-321) | Export-CSV c:\SAMReport\AdReportComp.csv


User accounts created in last 321 Days.

Get-QADUser -CreatedAfter (Get-Date).AddDays(-321) | Export-CSV c:\samreport\AdReportUSer.csv

Read more...

NetApp NTP Server Configuration

filer0*> options time
timed.enable                 on         (same value in local+partner recommended)
timed.log                    on         (same value in local+partner recommended)
timed.max_skew               5m         (same value in local+partner recommended)
timed.min_skew               0          (same value in local+partner recommended)
timed.proto                  rtc        (same value in local+partner recommended)
timed.sched                  1h         (same value in local+partner recommended)
timed.servers                10.1.100.11 (same value in local+partner recommended)
timed.window                 0s         (same value in local+partner recommended)
Read more...

Prevent Exchange Server 2010 Direct File Server Access

By Default Exchange Server 2010 allows internal hyperlinks access by using Android smart phones.
Users can access hyperlinks that indicates internal file server in your organization by clicking hyperlinks in emails.

In order to prevent this type of access follow the steps below;

Open Exchange Management Console -> drill down to server configuration -> Client Access -> Exchange ActiveSync (middle tab) -> right click on the name (default website in my case) properties -> Remote file servers tab. From here, you can allow or deny access.
Read more...

Allowing server machine to use filesharing with itself via the DNS Alias (BackConnectionHostNames) (Windows Server 2008 & 2012)

This change is necessary for a DNS alias to work with filesharing from a machine to find itself. This creates the Local Security Authority host names that can be referenced in an NTLM authentication request.
To do this, follow these steps for all the nodes on the client computer:

1. To the registry subkey HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0, add new Multi-String Value BackConnectionHostNames
2. In the Value data box, type the CNAME or the DNS alias, that is used for the local shares on the computer, and then click OK.
   • Note: Type each host name on a separate line.

Read more...

FortiOS v5.x Alert email settings for email servers in different subnet

If your fortinet device and email server are in different subnet, FortiOS v5.x will not be able to send alert emails to email server by setting only email server address from Gui.

You should also perform some configuration from CLI.

Connect to device by SSH.

FG100D # config system email-server
 

FG100D (email-server) #
set      Modify value.
unset    Set to default value.
get      Get dynamic and system information.
show     Show configuration.
abort    End and discard last config.
end      End and save last config.


//execute show command to view your current settings.

FG100D (email-server) # show
config system email-server
    set reply-to "fw@fxxxx.com"
    set server "10.1.10.11"
    set port 587
end

 //execute get command to view your current settings.

FG100D (email-server) # get
type                : custom
reply-to            : fw@fxxx.com
server              : 10.1.10.11
port                : 587
source-ip           : 0.0.0.0      //define source-ip in order to FG to access email server in different subnet
source-ip6          : ::
authenticate        : disable
security            : none


FG100D (email-server) # set source-ip 10.5.x.x (FW interface IP address that can reach messaging server)


Now, FG will be able send alert emails to messaging server in different subnet

Be sure you already configured relay on your messaging server.
Read more...

Enable Host Check (AV- FW) FortiOS v5

config vpn ssl web portal

edit full-access

set host-check av-fw

end

Read more...