Prevent Exchange Server 2010 Direct File Server Access

By Default Exchange Server 2010 allows internal hyperlinks access by using Android smart phones.
Users can access hyperlinks that indicates internal file server in your organization by clicking hyperlinks in emails.

In order to prevent this type of access follow the steps below;

Open Exchange Management Console -> drill down to server configuration -> Client Access -> Exchange ActiveSync (middle tab) -> right click on the name (default website in my case) properties -> Remote file servers tab. From here, you can allow or deny access.
Read more...

Allowing server machine to use filesharing with itself via the DNS Alias (BackConnectionHostNames) (Windows Server 2008 & 2012)

This change is necessary for a DNS alias to work with filesharing from a machine to find itself. This creates the Local Security Authority host names that can be referenced in an NTLM authentication request.
To do this, follow these steps for all the nodes on the client computer:

1. To the registry subkey HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0, add new Multi-String Value BackConnectionHostNames
2. In the Value data box, type the CNAME or the DNS alias, that is used for the local shares on the computer, and then click OK.
   • Note: Type each host name on a separate line.

Read more...

FortiOS v5.x Alert email settings for email servers in different subnet

If your fortinet device and email server are in different subnet, FortiOS v5.x will not be able to send alert emails to email server by setting only email server address from Gui.

You should also perform some configuration from CLI.

Connect to device by SSH.

FG100D # config system email-server
 

FG100D (email-server) #
set      Modify value.
unset    Set to default value.
get      Get dynamic and system information.
show     Show configuration.
abort    End and discard last config.
end      End and save last config.


//execute show command to view your current settings.

FG100D (email-server) # show
config system email-server
    set reply-to "fw@fxxxx.com"
    set server "10.1.10.11"
    set port 587
end

 //execute get command to view your current settings.

FG100D (email-server) # get
type                : custom
reply-to            : fw@fxxx.com
server              : 10.1.10.11
port                : 587
source-ip           : 0.0.0.0      //define source-ip in order to FG to access email server in different subnet
source-ip6          : ::
authenticate        : disable
security            : none


FG100D (email-server) # set source-ip 10.5.x.x (FW interface IP address that can reach messaging server)


Now, FG will be able send alert emails to messaging server in different subnet

Be sure you already configured relay on your messaging server.
Read more...

Enable Host Check (AV- FW) FortiOS v5

config vpn ssl web portal

edit full-access

set host-check av-fw

end

Read more...

Enable two factor Email authentication FortiOS v5

To enable email two-factor authentication - CLI

config user local

edit  username

set email-to  useremailaddress

set two-factor email

end

Read more...

RPC Error while trying to connect NetApp Filer through MMC or while trying to edit Local Users and Groups on MMC

Add name and IP address of your filers to your host file.
Read more...

Operating System Error 1808 & Operating System Error 5 Access Denied

If you are getting these errors while trying to backup to network share on MS SQL Server;

Change SQL Server and SQL Agent service Log on accounts to user that have access right on network share.
Read more...