We have multiple users experience issues with room finder. Room finder will not load the available rooms.
I didn't setup the rooms so I think there may be something wrong with how the rooms are setup.
Is there a missing setting or anything else I could check or test?
Thank you
I have a Microsoft 365 Group owner who is unable to update their group. In searching for a fix, I found that none of the solutions worked for me. The user was confirmed as added to the group (recipients> groups> group> Ownership) , and the policies allowed users to update groups that they are a part of (Permissions> User Roles> Default Role Assignment Policy> MyDistributionGroupMembership: Enabled).
Is there a permissions limitation that I'm not seeing?
I have a user who came across this issue recently with their hp officejet 8620 printer. The Printer will not print. No matter what we seem to try on the Mac it will not print.
When printing is tested from the Mac, the printer gets stuck at 40% after about 5 minutes an error is displayed "unable to verify, printer not responding". When printing from any other Mac or device, printing works.
Is there anything else I can try?
We have a single user that was not created correctly in Exchange on-prem. This is causing issues with SMTP mail not routing/failing to deliver to the o365 email.
In our environment, users are created in Exchange on-prem as an "Office 365" mailbox, which then creates the account in Active Directory, and Office 365.
For this user it looks like the user was created in Active Directory First, then the AD Sync synced the account to Office 365. A mail user has been created in exchange on prem, but this doesn't look like it's the solution as all other accounts on prem are "Office 365".
Is there a way to fix the missing "Office 365" account in exchange on prem?
attempted to add
[PS] C:\Windows\system32>Set-RemoteMailbox $USER -ExchangeGuid $GUIDHERE
The operation couldn't be performed because object '$USER' couldn't be found on 'AD1.DOMAIN.LOCAL'.
+ CategoryInfo : NotSpecified: (:) [Set-RemoteMailbox], ManagementObjectNotFoundException
+ FullyQualifiedErrorId : [Server=EXCHANGE1,RequestId=c45a6d57-2c60-43d1-a36d-67bbbccc8bcf,TimeStamp=5/19/2020
10:19:41 PM] [FailureCategory=Cmdlet-ManagementObjectNotFoundException] 1082ECE3,Microsoft.Exchange.Management.Rec
ipientTasks.SetRemoteMailbox
+ PSComputerName : EXCHANGE1.DOMAIN.LOCAL
a single computer cannot access a website; other computers are able to access the website.
none of the below fixes resolved the issue, is there anything else that could be causing this?
Thank you for any additional information, questions, or suggestions.
Recently we've had a file server recreated with the same disks. The new server newfs1 was created with the same exact disks, same path, same disk; as the old file server oldfs1.
Both servers are in the Failover Cluster Manager. The problem comes in with the oldfs1 server--this server is creating alerts constantly because it is in a failed state in the Cluster Manager. I think the solution is to remove the node, but I'm not 100% sure that the disks will stay intact, or if there would be any issues.
Is it safe to right-click>remove the oldfs1 node from the cluster manager?
Is there a better way to handle getting rid of the oldfs1 node from cluster manager?
I am also open to any suggestions.
Microsoft has an advisory that states they will be prepping LDAP/SSL (LDAPS). https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV190023
While Microsoft doesnt specifically list instructions to setup LDAP/SSL for Azure AD Connect, there is reference to LDAP/SSL (LDAPS) being used in article: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-ports
Thank you
We have an OWA site that we want to remove. We dont want our users being able to see the OWA web site, and we don't want external threats to see our OWA site.
Other services like Autodiscovery are still needed to function.
In researching this, I only find items to recreate OWA, and it doesnt drill into enough detail as to what will happen if I only delete OWA. Additionally Microsofts Documentation on removing OWA just causes more confusion stating:
When you use this cmdlet, make sure that you don't accidentally delete the default Outlook on the web virtual directory.2
All Windows 10 computers in our remote location are having domain trust relationship issues. The computers are able to login after a reboot takes place, but the issue repeats after the computer goes to sleep.
There is a Domain Controller in the Remote site, Remote-AD-- however it seems like the machines are logging into the domain at the main site, Main-AD.
Remote server remote-ad does not seem to be functional. remote-ad is not accepting pc's that are domain joined, and doesnt seem to replicate properly
cannot connect windows 10 machines to the domain without specifying to use Main-ad as the server
(SUCCESS) - network. Network checked, routing seems to be working fine, pings and connectivity work between workstations and servers
(SUCCESS) DNS - DNS itself seems to be pulling the correct ip addresses for all Domain controllers
(ISSUES) Replication - Issues Identified with replication
Reset-ComputerMachinePassword -Credential $c (doesn't work)
Rejoining computer to the domain (works temporarily)
uncheck IPV6 (didnt solve the problem)
ipconfig /release /renew
running: repadmin /showrepl Major issues shown syncing to the Remote-AD
the trust relationship between this workstation and the primary domain failed
All domain controllers in the following site that can replicate the directory partition over this transport are currently unavailable.
Site: CN=SLC,CN=Sites,CN=Configuration,DC=Domain,DC=com Directory partition: CN=Configuration,DC=Domain,DC=com Transport: CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=Domain,DC=com
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
I'm currently struggling with understanding how Exchange Certificates are uploaded and managed on servers. I've found the following How to Renew SSL Certificate for Exchange 2013 Server Step by Step Guide, but it doesn't seem to cover adding the certificate to the Exchange OWA sites, nor does it state how to verify what services should be checked on the new certificate. I'm just extra cautious about updating the certificate because there are multiple certificates already in the Exchange Control Panel> Servers> Certificates, and they all seem to be covering different services.
Is there a way to verify what Services I should be replacing? (see Scope)
Do service certificates automatically get replaced by the new certificate once the new certificate has a service selected or do the old certificates have to be unchecked?
Is there anything I need to do to ensure the websites, like ECP, OWA, etc., also get updated?
mail.domain.com to replace a digicert sslmail.domain.com has a ECP site, Autodiscovery, and OWA sitedigicert: IMAP, POP, IIS, SMTPMicrosoft Exchange Self Signed Cert: SMTP, IISMicrosoft Exchange Server Auth Certificate: SMTPHow to Renew SSL Certificate for 2013 Step by Step
1) Creating a new CSR (Certificate signing request)
- Open EAC or Exchange Admin Center Web page.
- Navigate to Servers section.
- Click on Certificates Option.
- Select Server Name.
- Click on Certificate you need to renew.
- Click on Renew option.
- Save the new CSR request to your desired UNC path.
- Submit the CSR request to generate a new certificate with your 3rd party Certificate vendor.
- Download the new certificate.
2) Installing new certificate
- Open EAC or Exchange Admin Center Web page.
- Navigate to Servers section.
- Click on Certificates Option.
- Select Server Name.
- Now Select Certificate with status "Pending Request".
- Right-hand side, click on the complete option.
- Now enter the UNC path for new downloaded Certificate.
3) Assign New Certificate to Services like IIS, SMTP, IMAP or POP
- Open EAC or Exchange Admin Center Web page.
- Navigate to Servers section.
- Click on Certificates Option.
- Select Server Name.
- Select the new certificate.
- Click on Edit Icon.
- Click on Services option.
- Click on the Services checkbox you want to assign and save.
- Certificate renew completed for the single server.
Note: If you have more than one Exchange server. Move to Step 4.
4) Exporting Certificate from First Exchange Server in the same Org.
- Export certificate from the server you first renewed or installed.
- Open EAC or Exchange Admin Center Web page.
- Navigate to Servers section.
- Click on Certificates Option.
- Select First Server Name.
- Select the new certificate you want to export.
- Click on “…” or more icon and select Export Exchange Certificate.
- Enter the UNC path, where you want to export the new certificate.
- Provide the password and follow rest of the steps.
5) Importing Certificate on Other Exchange Servers in the same Org.
- Open EAC or Exchange Admin Center Web page.
- Navigate to the Servers section.
- Click on the Certificates Option.
- Click on “…” or more icon.
- Click Import Exchange Certificate
- Enter the UNC path for the exported certificate you did in step 4 above.
- Enter the password you gave in step 4 above.
- Now click on "+" icon and add your other Exchange 2013 servers.
- Follow Wizard and finish the import process.
6) Assign Services on other Exchange servers.
• Follow Step 3.
I am working on a double booking issue where Room calendars appear to be allowing meetings to be booked at the same time as other meetings. The calendars themselves seem to have the correct settings, and I can't seem to recreate the issue myself-- however, I do know it is a problem as this issue has come up once a week for the past 3 weeks in separate resource mailboxes, with different people.
This is an exchange-hybrid setup. Room calendars are created in o365, not synced.
I currently have a case open with Microsoft, however they have been closing the case on me due to not being able to recreate the issue on demand.
Is there anything I could try?
Thank you for any additional information.
The Rooms are declining the conflict meetings, but the meetings stay in the user's calendar. Checking sent items a declined notice was sent to the user mailbox.
A room resource not being able to delete a users meeting from their mailbox could be normal functionality, I'm double checking with Microsoft.
get-mailbox [email protected] | Get-CalendarProcessing | FL
AutomateProcessing : AutoAccept
AllowConflicts : False
BookingType : Standard
BookingWindowInDays : 365
MaximumDurationInMinutes : 1440
AllowRecurringMeetings : True
EnforceSchedulingHorizon : True
ScheduleOnlyDuringWorkHours : False
ConflictPercentageAllowed : 0
MaximumConflictInstances : 0
ForwardRequestsToDelegates : True
DeleteAttachments : True
DeleteComments : True
RemovePrivateProperty : True
DeleteSubject : True
AddOrganizerToSubject : True
DeleteNonCalendarItems : True
TentativePendingApproval : True
EnableResponseDetails : True
OrganizerInfo : True
ResourceDelegates : {}
RequestOutOfPolicy : {}
AllRequestOutOfPolicy : False
BookInPolicy : {}
AllBookInPolicy : True
RequestInPolicy : {}
AllRequestInPolicy : False
AddAdditionalResponse : False
AdditionalResponse :
RemoveOldMeetingMessages : True
AddNewRequestsTentatively : True
ProcessExternalMeetingMessages : False
RemoveForwardedMeetingNotifications : False
IsValid : True
ObjectState : Changed
I have a DAG Database, DAG1, with 300000 CopyQueueLength. The Status for the copy is Failed and Suspended. In researching the problem I found that a reseed is needed for the database to get exchange copy up and running-- However I'm concerned about the space on that DAG database needs to copy over to the EXCH2 server.
Does CopyQueueLength denote the items to be copied or the size in kb?
What should I take into account for the space required before running a reseed?
I am experiencing issues with the Video and Audio matching up for Terminal Desktops running on our Citrix Servers. We are running Citrix Xenapp 6.
Users open chrome and open videos, the video loads, but it appears that the Audio is not sync'd up and lags behind the actual picture of the video.
Is there anything in Citrix that I can be using to troubleshoot the issue?
Are there known fixes for this Video/Audio Sync issue?
I currently have little background with citrix, and guidance or information is appreciated. Thank you
Currently, we have SMTP Authentication setup via a Domain Admin account. I'm not a fan of the setup since it is a domain admin for an individuals admin account.
Is there a group that I could assign a dedicated account/service to resolve dependency on an individuals admin account?
Clarification. SMTP on the server is working, it's when SMTP is used via an application it fails. We found out recently that a domain admin account was being used for SMTP authentication because of a password expiration and the domain admin had to be set to not expire to prevent the issue. Having the domain admin configured to send email through this application creates a dependency and I'm looking to eliminate future headaches.
Is there a correct/better way of determining the correct OID to use for SNMP monitoring?
I was able to download the MIB directly from the device, but I am lost on finding the correct OID from the list of hundreds of OIDs. All forums that I've come across have a different model OID, or simply say "use the OID and you'll be good" without details...
We have a failover cluster manager managing 4 node(host) servers. How would I go about rebooting one of the nodes in the failover cluster.
We have a group policy object that denies installation from user AppData folders. However, we are trying to install Acronis Backup software onto the environment. We are trying to deploy this application to multiple machines (100-200 machines) and it relies on our RMM to deploy it with the correct settings. This application eventually uses AppData to install onto the machines.
Is there a way to allow an application to run in AppData given the GPO settings?
Thank you for any additional information or guidance.
# Enforcement
Policy Setting
Apply Software Restriction Policies to the following All software files except libraries (such as DLLs)
Apply Software Restriction Policies to the following users All users
When applying Software Restriction Policies Ignore certificate rules
# Designated File Types
File Extension File Type
ADE ADE File
ADP ADP File
BAS BAS File
[REDACTED]
# Trusted Publishers
Trusted publisher management Allow all administrators and users to manage user's own Trusted Publishers
Certificate verification None
Software Restriction Policies/Security Levelshide
Policy Setting
Default Security Level Unrestricted
# Software Restriction Policies/Additional Ruleshide
Path Ruleshide
%AppData%\*.exe
Security Level Disallowed
Description Don't allow executables to run from %AppData%
Date last modified
[REDACTED]
Windows 2012 server needs to be evaluated for minimum requirements for a new application. Although the server seems that it can have the software installed onto it, I still want to be able to see the full picture so I'm not surprised a month down the road. Which additional items should I be checking besides the spec-sheet?
Thank you
I found the registry key UninstallString while trying to uncover the path to an uninstaller. This was found in HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall
The UninstallString Contained: MsiExec.exe /X{DBB43649-A97A-41A2-80E4-20E1D2340EBC}
I interpret this as Windows using the MsiExec.exe with flag /X on path {DBB43649-A97A-41A2-80E4-20E1D2340EBC}.
However, when I try the command in CMD(as admin) it does not find the uninstall. When I run Program files, program files finds wherever this MSI is behind the scenes and uninstalls it so Windows knows where it is ultimately.
My main goal was to get a script created to uninstall software for multiple Windows Servers. Is there a way to find the uninstaller for a program so it can be uninstalled via CMDs MSIExec?
Thank you for any assistance and direction
We've identified an obscene amount of user login attempts from users that are not in our domain. Below are example log files. We can't narrow down where these logins are coming from. None of the computer sources are showing, unfortunately.
Is there another way I can narrow down the source of these logins?
ERROR EX 1
An account failed to log on.
Subject: Security ID: NULL SID Account Name: - Account Domain: -
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed: Security ID: NULL SID Account
Name: ITUSER Account Domain:
Failure Information: Failure Reason: Unknown user name or bad
password. Status: 0xC000006D Sub Status: 0xC0000064
Process Information: Caller Process ID: 0x0 Caller Process Name: -
Network Information: Workstation Name: Source Network Address: -
Source Port: -
Detailed Authentication Information: Logon Process: NtLmSsp
Authentication Package: NTLM Transited Services: - Package Name
(NTLM only): - Key Length: 0
This event is generated when a logon request fails. It is generated on
the computer where access was attempted.
The Subject fields indicate the account on the local system which
requested the logon. This is most commonly a service such as the
Server service, or a local process such as Winlogon.exe or
Services.exe.
The Logon Type field indicates the kind of logon that was requested.
The most common types are 2 (interactive) and 3 (network).
The Process Information fields indicate which account and process on
the system requested the logon.
The Network Information fields indicate where a remote logon request
originated. Workstation name is not always available and may be left
blank in some cases.
The authentication information fields provide detailed information
about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
ERROR EX 2
An account failed to log on.
Subject: Security ID: NULL SID Account Name: - Account Domain: -
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed: Security ID: NULL SID Account
Name: LURRUTI Account Domain:
Failure Information: Failure Reason: Unknown user name or bad
password. Status: 0xC000006D Sub Status: 0xC0000064
Process Information: Caller Process ID: 0x0 Caller Process Name: -
Network Information: Workstation Name: Source Network Address: -
Source Port: -
Detailed Authentication Information: Logon Process: NtLmSsp
Authentication Package: NTLM Transited Services: - Package Name
(NTLM only): - Key Length: 0
This event is generated when a logon request fails. It is generated on
the computer where access was attempted.
The Subject fields indicate the account on the local system which
requested the logon. This is most commonly a service such as the
Server service, or a local process such as Winlogon.exe or
Services.exe.
The Logon Type field indicates the kind of logon that was requested.
The most common types are 2 (interactive) and 3 (network).
The Process Information fields indicate which account and process on
the system requested the logon.
The Network Information fields indicate where a remote logon request
originated. Workstation name is not always available and may be left
blank in some cases.
The authentication information fields provide detailed information
about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.