<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Kreslavsky IT blog</title>
	<atom:link href="http://www.kreslavsky.com/feed" rel="self" type="application/rss+xml" />
	<link>http://www.kreslavsky.com</link>
	<description>News, guides, and tips to antivirus programmes, scripts, and security</description>
	<lastBuildDate>Sun, 29 Jan 2012 04:57:38 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>WP-Admin Blank or Not loading</title>
		<link>http://www.kreslavsky.com/2012/01/wp-admin-blank-or-not-loading.html</link>
		<comments>http://www.kreslavsky.com/2012/01/wp-admin-blank-or-not-loading.html#comments</comments>
		<pubDate>Sun, 29 Jan 2012 04:57:38 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Wordpress]]></category>
		<category><![CDATA[not loading]]></category>
		<category><![CDATA[wp-admin]]></category>

		<guid isPermaLink="false">http://www.kreslavsky.com/?p=1402</guid>
		<description><![CDATA[It is really frustrating when you can’t access wp-admin folder. It hapens to me once and, now I’m sharing posible solutions with you. It can be caused by several issues. So this is what you should check, and possibly solve it. Solution 1 Rename your Plugins folder and check if you can access admin menu, if issue has been caused by plugin you will be able to access. Than try to isolate the plugin, by disabling them one by one. Solution 2 Rename your original wp-admin and wp-include folders, Upload a new ones from fresh WordPress installation via FTP. Solution 3. Rename your functiuions.php filie wihich is usualy located under your current theme. Sometimes WP-Admin get’s stuck because of a line in this file.]]></description>
			<content:encoded><![CDATA[<p>It is really frustrating when you can’t access wp-admin folder. It hapens to me once and, now I’m sharing posible solutions with you.</p>
<p>It can be caused by several issues. So this is what you should check, and possibly solve it.</p>
<p><strong>Solution 1</strong> </p>
<p>Rename your Plugins folder and check if you can access admin menu, if issue has been caused by plugin you will be able to access.   <br /> Than try to isolate the plugin, by disabling them one by one.</p>
<p><strong>Solution 2</strong></p>
<p>Rename your original wp-admin and wp-include folders, Upload a new ones from fresh WordPress installation via FTP. </p>
<p><strong>Solution 3.</strong></p>
<p>Rename your functiuions.php filie wihich is usualy located under your current theme.    <br />Sometimes WP-Admin get’s stuck because of a line in this file.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kreslavsky.com/2012/01/wp-admin-blank-or-not-loading.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>HRESULT Error 0x8007ffff – Solved</title>
		<link>http://www.kreslavsky.com/2011/10/hresult-error-0x8007ffff-solved.html</link>
		<comments>http://www.kreslavsky.com/2011/10/hresult-error-0x8007ffff-solved.html#comments</comments>
		<pubDate>Mon, 03 Oct 2011 10:07:04 +0000</pubDate>
		<dc:creator>Gil Kreslavsky</dc:creator>
				<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[0x8007ffff]]></category>
		<category><![CDATA[Administrative Account]]></category>
		<category><![CDATA[Domain Admin]]></category>
		<category><![CDATA[Error Code]]></category>
		<category><![CDATA[First Option]]></category>
		<category><![CDATA[HP]]></category>
		<category><![CDATA[Hp Software]]></category>
		<category><![CDATA[HRESULT]]></category>
		<category><![CDATA[Laptop]]></category>
		<category><![CDATA[login problem]]></category>
		<category><![CDATA[Login Screen]]></category>
		<category><![CDATA[Logs]]></category>
		<category><![CDATA[Privacy Manager]]></category>
		<category><![CDATA[Reboot]]></category>
		<category><![CDATA[Recovery Tools]]></category>
		<category><![CDATA[Repair Cd]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Safe Mode]]></category>
		<category><![CDATA[Sw]]></category>

		<guid isPermaLink="false">http://www.kreslavsky.com/2011/10/hresult-error-0x8007ffff-solved.html</guid>
		<description><![CDATA[I got this&#160; error while trying to login to HP ProBook laptop. Whenever I put password I got HRESULT error with 0x8007ffff code and on the bottom it just says &#8216;OK&#8217; i press it and it goes back to the login screen. First option is to use HP recovery tools and try to use recovery/repair CD Using this option you are in risk to lose your data-Not Good. Other option is try using some other administrative account. I was able to login with local administrative account , also you can use domain admin. From logs I found that what is causing the issue is the HP software installed on laptop . I removed all HP ProtectTools related SW. To be more specific Device Access Manger for HP ProtectTools Privacy Manager for HP ProtectTools Drive Encryption for HP ProtectTools After reboot you will be able to login with your account. I read about third option. You can also login in safe mode and reset user password.]]></description>
			<content:encoded><![CDATA[<p>I got this&#160; error while trying to login to HP ProBook laptop.   <br />Whenever I put password I got <strong>HRESULT</strong> error with <strong>0x8007ffff</strong> code    <br />and on the bottom it just says &#8216;OK&#8217; i press it and it goes back to the login screen.</p>
<p>First option is to use HP recovery tools and try to use recovery/repair CD   <br />Using this option you are in risk to lose your data-Not Good.</p>
<p>Other option is try using some other administrative account. I was able to login with local administrative account , also you can use domain admin.</p>
<p>From logs I found that what is causing the issue is the HP software installed on laptop . I removed all HP ProtectTools related SW.</p>
<p>To be more specific </p>
<ul>
<li>Device Access Manger for HP ProtectTools</li>
<li>Privacy Manager for HP ProtectTools</li>
<li>Drive Encryption for HP ProtectTools</li>
</ul>
<p>After reboot you will be able to login with your account.</p>
<p>I read about third option.   <br />You can also login in safe mode and reset user password.    </p>
]]></content:encoded>
			<wfw:commentRss>http://www.kreslavsky.com/2011/10/hresult-error-0x8007ffff-solved.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Outlook 2010 Automatically maps mailboxes</title>
		<link>http://www.kreslavsky.com/2011/09/outlook-2010-automatically-maps-mailboxes.html</link>
		<comments>http://www.kreslavsky.com/2011/09/outlook-2010-automatically-maps-mailboxes.html#comments</comments>
		<pubDate>Sun, 18 Sep 2011 07:22:45 +0000</pubDate>
		<dc:creator>Gil Kreslavsky</dc:creator>
				<category><![CDATA[Exchange 2010]]></category>
		<category><![CDATA[Office 2010]]></category>
		<category><![CDATA[Access Page]]></category>
		<category><![CDATA[Automatic Mapping]]></category>
		<category><![CDATA[Mailboxes]]></category>
		<category><![CDATA[Map]]></category>
		<category><![CDATA[Maps]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Multiple Users]]></category>
		<category><![CDATA[Outlook]]></category>
		<category><![CDATA[Outlook 2010]]></category>
		<category><![CDATA[Personal Mailbox]]></category>
		<category><![CDATA[Power Shell]]></category>

		<guid isPermaLink="false">http://www.kreslavsky.com/2011/09/outlook-2010-automatically-maps-mailboxes.html</guid>
		<description><![CDATA[A new client side feature which Microsoft has released in Exchange 2010 SP1 is the ability of Outlook 2010 to automatically map all mailboxes to which the logged in user has full access. There by, on each mailbox that you have been granted Full Access, you will see it on your own personal mailbox. In Order to disable automatic mapping: Go to this user mailbox, right click on it and choose manage full mailbox access, then just remove your user from the full mailbox access page You can use ADSIEDIT, and go this user properties, and under msExchDelegateListLink attribute, just remove the link to your user You can use the following script for future mailbox permissions – this will add full mailbox access with no AutoMapping. You can remove msExchDelegateListLink values from multiple users properties using ADModify.net In order to find all users that have Full Mailbox Access on other users’ mailbox, run the following powershell: Get-Mailbox -ResultSize Unlimited &#124; Get-MailboxPermission &#124; ? {($_.AccessRights -match &#34;FullAccess&#34;) -and -not ($_.User -like &#34;NT AUTHORITYSELF&#34;)} &#124; ft Identity, User]]></description>
			<content:encoded><![CDATA[<p>A new client side feature which Microsoft has released in Exchange 2010 SP1 is the ability of Outlook 2010 to automatically map all mailboxes to which the logged in user has full access.   <br />There by, on each mailbox that you have been granted Full Access, you will see it on your own personal mailbox.</p>
<p><strong>In Order to disable automatic mapping</strong>:</p>
<ol>
<li>Go to this user mailbox, right click on it and choose manage full mailbox access, then just remove your user from the full mailbox access page</li>
<li>You can use ADSIEDIT, and go this user properties, and under msExchDelegateListLink attribute, just remove the link to your user</li>
<li>You can use the following <a href="http://www.stevieg.org/2011/02/disable-exchange-2010-sp1s-auto-shared-mailbox-mapping" target="_blank" rel="nofollow">script</a> for future mailbox permissions – this will add full mailbox access with no AutoMapping.</li>
<li>You can remove msExchDelegateListLink values from multiple users properties using ADModify.net</li>
</ol>
<p>In order to find all users that have <strong>Full Mailbox Access</strong> on other users’ mailbox, run the following powershell:</p>
<blockquote><p>Get-Mailbox -ResultSize Unlimited | Get-MailboxPermission | ? {($_.AccessRights -match &quot;FullAccess&quot;) -and -not ($_.User -like &quot;NT AUTHORITYSELF&quot;)} | ft Identity, User</p>
</blockquote>
]]></content:encoded>
			<wfw:commentRss>http://www.kreslavsky.com/2011/09/outlook-2010-automatically-maps-mailboxes.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Grant editor permission to calendar via power shell Exchange 2010</title>
		<link>http://www.kreslavsky.com/2011/09/grant-editor-permission-to-calendar-via-power-shell-exchange-2010.html</link>
		<comments>http://www.kreslavsky.com/2011/09/grant-editor-permission-to-calendar-via-power-shell-exchange-2010.html#comments</comments>
		<pubDate>Wed, 14 Sep 2011 08:15:30 +0000</pubDate>
		<dc:creator>Gil Kreslavsky</dc:creator>
				<category><![CDATA[Exchange 2010]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Attribute]]></category>
		<category><![CDATA[Calendar Editor]]></category>
		<category><![CDATA[Calendar Permissions]]></category>
		<category><![CDATA[Calendar Sharing]]></category>
		<category><![CDATA[Calendar User]]></category>
		<category><![CDATA[Client Exchange]]></category>
		<category><![CDATA[Contributor]]></category>
		<category><![CDATA[Echange 2010]]></category>
		<category><![CDATA[Folder Permissions]]></category>
		<category><![CDATA[Old Fashion Way]]></category>
		<category><![CDATA[Power Exchange]]></category>
		<category><![CDATA[Power Shell]]></category>
		<category><![CDATA[Ps Command]]></category>
		<category><![CDATA[PS Script]]></category>
		<category><![CDATA[Shell]]></category>

		<guid isPermaLink="false">http://www.kreslavsky.com/2011/09/grant-editor-permission-to-calendar-via-power-shell-exchange-2010.html</guid>
		<description><![CDATA[The old fashion way for granting permission was to access user calendar and share the calendar from client. Exchange 2010 allows us to use power shell for assigning calendar permissions. You can add Reviewer, Editor and all other permission types remotely without moving from your chair. To assign Calendar Editor permission use the following command: Set-MailboxFolderPermission -Identity Granter_Username:Calendar -User ‘Granted_username’ -AccessRights Editor You can review calendar permissions with following PS command Get-MailboxFolderPermission -Identity Granter_Username:calendar You can use the same PS command to provide all available access rights. Just replace the attribute after -AccessRights Here is a list of folder permissions in Exchange 2010 Permission level Effective permission None&#160; FolderVisible Owner CreateItems, ReadItems, CreateSubfolders, FolderOwner, FolderContact, FolderVisible, EditOwnedItems, EditAllItems, DeleteOwnedItems, DeleteAllItems PublishingEditor CreateItems, ReadItems, CreateSubfolders, FolderVisible, EditOwnedItems, EditAllItems, DeleteOwnedItems, DeleteAllItems Editor CreateItems, ReadItems, FolderVisible, EditOwnedItems, EditAllItems, DeleteOwnedItems, DeleteAllItems PublishingAuthor CreateItems, ReadItems, CreateSubfolders, FolderVisible, EditOwnedItems, DeleteOwnedItems Author&#160;&#160; CreateItems, ReadItems, FolderVisible, EditOwnedItems, DeleteOwnedItems NonEditingAuthor CreateItems, ReadItems, FolderVisible Reviewer&#160;&#160; ReadItems, FolderVisible Contributor&#160; CreateItems, FolderVisible]]></description>
			<content:encoded><![CDATA[<p>The old fashion way for granting permission was to access user calendar and share the calendar from client.</p>
<p>Exchange 2010 allows us to use power shell for assigning calendar permissions. You can add Reviewer, Editor and all other permission types remotely without moving from your chair.</p>
<p>To assign <strong>Calendar Editor</strong> <strong>permission</strong> use the following command:</p>
<blockquote><p>Set-MailboxFolderPermission -Identity <em>Granter_Username</em>:Calendar -User ‘<em>Granted_username</em>’ -AccessRights Editor</p>
</blockquote>
<p>You can review calendar permissions with following PS command</p>
<blockquote><p>Get-MailboxFolderPermission -Identity <em>Granter_Username</em>:calendar</p>
</blockquote>
<p>You can use the same PS command to provide all available access rights.   <br />Just replace the attribute after <em>-AccessRights</em> </p>
<p><a href="http://www.kreslavsky.com/wp-content/uploads/2011/09/windows_powershell_icon_2.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="windows_powershell_icon_2" border="0" alt="windows_powershell_icon_2" src="http://www.kreslavsky.com/wp-content/uploads/2011/09/windows_powershell_icon_2_thumb.png" width="126" height="126" /></a></p>
<p>Here is a list of folder permissions in Exchange 2010</p>
<table border="0" cellspacing="0" cellpadding="2" width="400">
<tbody>
<tr>
<td valign="top" width="200"><strong>Permission level</strong></td>
<td valign="top" width="200"><strong>Effective permission</strong></td>
</tr>
<tr>
<td valign="top" width="200">None&#160; </td>
<td valign="top" width="200">FolderVisible</td>
</tr>
<tr>
<td valign="top" width="200">Owner</td>
<td valign="top" width="200">CreateItems, ReadItems, CreateSubfolders, FolderOwner, FolderContact, FolderVisible, EditOwnedItems, EditAllItems, DeleteOwnedItems, DeleteAllItems</td>
</tr>
<tr>
<td valign="top" width="200">PublishingEditor</td>
<td valign="top" width="200">CreateItems, ReadItems, CreateSubfolders, FolderVisible, EditOwnedItems, EditAllItems, DeleteOwnedItems, DeleteAllItems</td>
</tr>
<tr>
<td valign="top" width="200">Editor</td>
<td valign="top" width="200">CreateItems, ReadItems, FolderVisible, EditOwnedItems, EditAllItems, DeleteOwnedItems, DeleteAllItems</td>
</tr>
<tr>
<td valign="top" width="200">PublishingAuthor</td>
<td valign="top" width="200">CreateItems, ReadItems, CreateSubfolders, FolderVisible, EditOwnedItems, DeleteOwnedItems</td>
</tr>
<tr>
<td valign="top" width="200">Author&#160;&#160; </td>
<td valign="top" width="200">CreateItems, ReadItems, FolderVisible, EditOwnedItems, DeleteOwnedItems</td>
</tr>
<tr>
<td valign="top" width="200">NonEditingAuthor </td>
<td valign="top" width="200"> CreateItems, ReadItems, FolderVisible</td>
</tr>
<tr>
<td valign="top" width="200">Reviewer&#160;&#160; </td>
<td valign="top" width="200">ReadItems, FolderVisible</td>
</tr>
<tr>
<td valign="top" width="200">Contributor&#160; </td>
<td valign="top" width="200">CreateItems, FolderVisible</td>
</tr>
</tbody>
</table>
]]></content:encoded>
			<wfw:commentRss>http://www.kreslavsky.com/2011/09/grant-editor-permission-to-calendar-via-power-shell-exchange-2010.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Outlook 2007/2010 Favorites bar disappeared</title>
		<link>http://www.kreslavsky.com/2011/07/outlook-20072010-favorites-bar-disappeared.html</link>
		<comments>http://www.kreslavsky.com/2011/07/outlook-20072010-favorites-bar-disappeared.html#comments</comments>
		<pubDate>Mon, 04 Jul 2011 08:41:56 +0000</pubDate>
		<dc:creator>Gil Kreslavsky</dc:creator>
				<category><![CDATA[Office 2010]]></category>
		<category><![CDATA[Outlook 2007]]></category>
		<category><![CDATA[Favorites Bar]]></category>
		<category><![CDATA[Folders]]></category>
		<category><![CDATA[Outlook 2010]]></category>
		<category><![CDATA[Outlook Bar]]></category>
		<category><![CDATA[Outlook Exe]]></category>
		<category><![CDATA[Outlook Favorites]]></category>
		<category><![CDATA[Run Exe]]></category>

		<guid isPermaLink="false">http://www.kreslavsky.com/2011/07/outlook-20072010-favorites-bar-disappeared.html</guid>
		<description><![CDATA[&#160; If your favorites bar in outlook is missing from any reason you can return it by simple step. &#160; &#160; &#160; &#160; Close your outlook . Navigate to Start&#62;run Type outlook.exe /resetnavpane Your favorites bar will be restored but you will need to re-add your folders again.]]></description>
			<content:encoded><![CDATA[<p>&#160;</p>
<p>If your favorites bar in outlook is missing from any reason you can return it by simple step.</p>
<p><a href="http://www.kreslavsky.com/wp-content/uploads/2011/07/image.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; float: left; border-top: 0px; border-right: 0px; padding-top: 0px" title="Outlook Favorites" border="0" alt="Outlook Favorites" align="left" src="http://www.kreslavsky.com/wp-content/uploads/2011/07/image_thumb.png" width="230" height="134" /></a></p>
<p>&#160;</p>
<p>&#160;</p>
<p>&#160;</p>
<p>&#160;</p>
<ul>
<li>Close your outlook .</li>
<li>Navigate to Start&gt;run</li>
<li>Type outlook.exe /resetnavpane</li>
</ul>
<p>Your favorites bar will be restored but you will need to re-add your folders again.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kreslavsky.com/2011/07/outlook-20072010-favorites-bar-disappeared.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>BES 5.0 remote wipe Blackberry Device</title>
		<link>http://www.kreslavsky.com/2011/05/bes-5-0-remote-wipe-blackberry-device.html</link>
		<comments>http://www.kreslavsky.com/2011/05/bes-5-0-remote-wipe-blackberry-device.html#comments</comments>
		<pubDate>Thu, 05 May 2011 08:31:14 +0000</pubDate>
		<dc:creator>Gil Kreslavsky</dc:creator>
				<category><![CDATA[BES Server]]></category>
		<category><![CDATA[Black Berry]]></category>
		<category><![CDATA[Blackberry]]></category>
		<category><![CDATA[BlackBerry Device]]></category>
		<category><![CDATA[Delete]]></category>
		<category><![CDATA[Device Data]]></category>
		<category><![CDATA[Little Bit]]></category>
		<category><![CDATA[Pin Number]]></category>
		<category><![CDATA[Wipe]]></category>

		<guid isPermaLink="false">http://www.kreslavsky.com/2011/05/bes-5-0-remote-wipe-blackberry-device.html</guid>
		<description><![CDATA[&#160; In BES 4.1 there was an option to remotely wipe BlackBerry devices. In BES 5 it exists to , but you need to dig little bit to find it. It is located under: BlackBerry solution management &#62; User &#62; Search for required user&#62; Click the users PIN number&#62; at the bottom of the page press on&#160; “Delete all device data and disable device”]]></description>
			<content:encoded><![CDATA[<p>&#160;</p>
<p>In BES 4.1 there was an option to remotely wipe BlackBerry devices.</p>
<p>In BES 5 it exists to , but you need to dig little bit to find it.</p>
<p>It is located under:   <br />BlackBerry solution management &gt; User &gt; Search for required user&gt; Click the users PIN number&gt; at the bottom of the page press on&#160; <strong>“Delete all device data and disable device”</strong></p>
<p><a href="http://www.kreslavsky.com/wp-content/uploads/2011/05/image.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="Delete all device and disable device" border="0" alt="Remote wipe" src="http://www.kreslavsky.com/wp-content/uploads/2011/05/image_thumb.png" width="886" height="202" /></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.kreslavsky.com/2011/05/bes-5-0-remote-wipe-blackberry-device.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Deploy wireless settings with Key using netsh script and GPO</title>
		<link>http://www.kreslavsky.com/2011/05/deploy-wireless-settings-with-key-using-netsh-script-and-gpo.html</link>
		<comments>http://www.kreslavsky.com/2011/05/deploy-wireless-settings-with-key-using-netsh-script-and-gpo.html#comments</comments>
		<pubDate>Tue, 03 May 2011 08:36:13 +0000</pubDate>
		<dc:creator>Gil Kreslavsky</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[GPO]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Scripts]]></category>
		<category><![CDATA[Vista]]></category>
		<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[Certificates]]></category>
		<category><![CDATA[Command Prompt]]></category>
		<category><![CDATA[Deploy]]></category>
		<category><![CDATA[Deployment]]></category>
		<category><![CDATA[Export Profile]]></category>
		<category><![CDATA[Folder C]]></category>
		<category><![CDATA[Gpo]]></category>
		<category><![CDATA[Interface]]></category>
		<category><![CDATA[Lan Settings]]></category>
		<category><![CDATA[Lt]]></category>
		<category><![CDATA[netsh]]></category>
		<category><![CDATA[Profile Name]]></category>
		<category><![CDATA[script]]></category>
		<category><![CDATA[Shared Key]]></category>
		<category><![CDATA[Wireless]]></category>
		<category><![CDATA[Wireless Lan]]></category>
		<category><![CDATA[Wireless Management]]></category>
		<category><![CDATA[Wireless Profile]]></category>
		<category><![CDATA[Wlan]]></category>
		<category><![CDATA[Workstation]]></category>
		<category><![CDATA[Yourkey]]></category>

		<guid isPermaLink="false">http://www.kreslavsky.com/2011/05/deploy-wireless-settings-with-key-using-netsh-script-and-gpo.html</guid>
		<description><![CDATA[&#160; Windows 2008 has built in policy GPO for wireless setting management. You can configure your network setting using Certificates. It is the most recommended and secure way But if you like to deploy the wireless settings using static key, you will have to use other way. The steps bellow describe the way to deploy Wireless LAN settings with a Pre-Shared Key The purpose is to Automate Adding Wireless Profile in Windows. Preparations Configure Wireless settings on one workstation from command prompt run netsh wlan export profile name=&#34;NameOfyourProfile&#34; folder=c:temp interface=&#34;wirelesssettings” Confirm that under c:temp you have wirelesssettings.xml file Open wirelesssettings.xml file locate the following line &#60;protected&#62;true&#60;/protected&#62; Change it to &#60;protected&#62;false&#60;/protected&#62; Under you will see encrypted line &#60;keyMaterial&#62;01000000D08C9DDF0115D1118&#60;/keyMaterial&#62; Change it to your key like that &#60;keyMaterial&#62;Yourkey&#60;/keyMaterial&#62; Note: It means that your wireless key will be in clear text and everyone who has access to the file will be able to read your wireless key&#34; Deployment Copy your wireless settings xml file to NETLOGON Create a bat or cmd file with the following line netsh wlan add profile filename=&#34;\yourserverNETLOGONwirelesssettings.xml&#34; user=all Run the bat file from some domain member computer and confirm that it works After finishing all steps above you can deploy the script from GPO Note: Setting are applicable for Windows Vista Windows 7 and Windows 2008 Only]]></description>
			<content:encoded><![CDATA[<p>&#160;</p>
<p>Windows 2008 has built in policy GPO for wireless setting management.    <br />You can configure your network setting using Certificates. It is the most recommended and secure way     <br />But if you like to deploy the wireless settings using static key, you will have to use other way.</p>
<p>The steps bellow describe the way to deploy Wireless LAN settings with a Pre-Shared Key   <br />The purpose is to Automate Adding Wireless Profile in Windows.</p>
<p>Preparations</p>
<ul>
<li>Configure Wireless settings on one workstation </li>
<li>from command prompt run      <br />netsh wlan export profile name=&quot;<em>NameOfyourProfile</em>&quot; folder=<em>c:temp</em> interface=&quot;wirelesssettings” </li>
<li>Confirm that under c:temp you have wirelesssettings.xml file </li>
<li>Open wirelesssettings.xml file locate the following line      <br />&lt;protected&gt;true&lt;/protected&gt; </li>
<li>Change it to &lt;protected&gt;false&lt;/protected&gt; </li>
<li>Under you will see encrypted line &lt;keyMaterial&gt;01000000D08C9DDF0115D1118&lt;/keyMaterial&gt; </li>
<li>Change it to your key like that &lt;keyMaterial&gt;<em>Yourkey&lt;/keyMaterial&gt;</em><br />
<blockquote>
<p>Note: It means that your wireless key will be in clear text and everyone who has access to the file will be able to read your wireless key&quot;</p>
</blockquote>
</li>
</ul>
<p>Deployment</p>
<ul>
<li>Copy your wireless settings xml file to NETLOGON </li>
<li>Create a bat or cmd file with the following line      <br />netsh wlan add profile filename=&quot;\yourserverNETLOGONwirelesssettings.xml&quot; user=all </li>
<li>Run the bat file from some domain member computer and confirm that it works </li>
</ul>
<p>After finishing all steps above you can deploy the script from GPO</p>
<blockquote><p>Note: Setting are applicable for Windows Vista Windows 7 and Windows 2008 Only</p>
</blockquote>
]]></content:encoded>
			<wfw:commentRss>http://www.kreslavsky.com/2011/05/deploy-wireless-settings-with-key-using-netsh-script-and-gpo.html/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>550 5.1.1 User unknown&#8221; Error while sending to distribution group in Exchange 2010</title>
		<link>http://www.kreslavsky.com/2011/04/550-5-1-1-user-unknown-error-while-sending-to-distribution-group-in-exchange-2010.html</link>
		<comments>http://www.kreslavsky.com/2011/04/550-5-1-1-user-unknown-error-while-sending-to-distribution-group-in-exchange-2010.html#comments</comments>
		<pubDate>Fri, 22 Apr 2011 14:45:00 +0000</pubDate>
		<dc:creator>Gil Kreslavsky</dc:creator>
				<category><![CDATA[Exchange 2010]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[550 5.1.1 User unknown]]></category>
		<category><![CDATA[Distribution Group]]></category>
		<category><![CDATA[Distribution Groups]]></category>
		<category><![CDATA[Double Click]]></category>
		<category><![CDATA[Emails]]></category>
		<category><![CDATA[Emc]]></category>
		<category><![CDATA[External Users]]></category>
		<category><![CDATA[Face]]></category>
		<category><![CDATA[Internal Distribution]]></category>
		<category><![CDATA[Internal Mail]]></category>
		<category><![CDATA[Mail Flow]]></category>
		<category><![CDATA[Mail Relay]]></category>
		<category><![CDATA[Message Delivery]]></category>
		<category><![CDATA[Organization]]></category>
		<category><![CDATA[Settings Tab]]></category>

		<guid isPermaLink="false">http://www.kreslavsky.com/2011/04/550-5-1-1-user-unknown-error-while-sending-to-distribution-group-in-exchange-2010.html</guid>
		<description><![CDATA[&#160; You may face this error while user is sending email from outside the company&#160; to distribution group in your Exchange 2010 organization. You can’t send it either from internet internal mail relay or SMTP server When review logs you see &#34;550 5.1.1 User unknown&#34; error . it works fine with no issues If you use Outlook or OWA Why: When you create new Distribution group In Exchange 2010 an Require that all senders are authenticated has been marked by default.So unauthenticated users are unable to send emails to distribution groups. To fix this: Double click on Distribution Group name in EMC locate the Mail Flow Settings tab Press on Message Delivery Restrictions Uncheck the Require that all senders are authenticated Please note that it will allow external users to send emails to internal distribution groups . It is not recommended to set the setting to “All company” and other large mailing lists]]></description>
			<content:encoded><![CDATA[<p>&#160;</p>
<p>You may face this error while user is sending email from outside the company&#160; to distribution group in your Exchange 2010 organization.   <br />You can’t send it either from internet internal mail relay or SMTP server When review logs you see &quot;<strong>550 5.1.1 User unknown</strong>&quot; <strong>error</strong> . </p>
<p>it works fine with no issues If you use Outlook or OWA</p>
<p>Why: When you create new Distribution group In Exchange 2010 an <strong>Require that all senders are authenticated</strong> has been marked by default.So unauthenticated users are unable to send emails to distribution groups.</p>
<p>To fix this:</p>
<ul>
<li>Double click on Distribution Group name in EMC locate the Mail Flow Settings tab</li>
<li>Press on<strong> Message Delivery Restrictions</strong></li>
</ul>
<p><a href="http://www.kreslavsky.com/wp-content/uploads/2011/04/image.png"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Mail Flow Settings" border="0" alt="Mail Flow Settings" src="http://www.kreslavsky.com/wp-content/uploads/2011/04/image_thumb.png" width="349" height="393" /></a> </p>
<ul>
<li>Uncheck the <strong>Require that all senders are authenticated</strong></li>
</ul>
<p><a href="http://www.kreslavsky.com/wp-content/uploads/2011/04/image1.png"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Require that all senders are authenticated" border="0" alt="Require that all senders are authenticated" src="http://www.kreslavsky.com/wp-content/uploads/2011/04/image_thumb1.png" width="348" height="373" /></a> </p>
<blockquote><p>Please note that it will allow external users to send emails to internal distribution groups . It is not recommended to set the setting to “All company” and other large mailing lists</p>
</blockquote>
]]></content:encoded>
			<wfw:commentRss>http://www.kreslavsky.com/2011/04/550-5-1-1-user-unknown-error-while-sending-to-distribution-group-in-exchange-2010.html/feed</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Shut Down Exchange 2010 DAG member</title>
		<link>http://www.kreslavsky.com/2011/04/shut-down-exchange-2010-dag-member.html</link>
		<comments>http://www.kreslavsky.com/2011/04/shut-down-exchange-2010-dag-member.html#comments</comments>
		<pubDate>Thu, 21 Apr 2011 11:12:22 +0000</pubDate>
		<dc:creator>Gil Kreslavsky</dc:creator>
				<category><![CDATA[Exchange 2010]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Scripts]]></category>
		<category><![CDATA[C Program]]></category>
		<category><![CDATA[Cluster Group]]></category>
		<category><![CDATA[Company Mail]]></category>
		<category><![CDATA[Dag]]></category>
		<category><![CDATA[Databases]]></category>
		<category><![CDATA[Emc]]></category>
		<category><![CDATA[Functionality]]></category>
		<category><![CDATA[High Availability Solution]]></category>
		<category><![CDATA[Mail Services]]></category>
		<category><![CDATA[Maintenance]]></category>
		<category><![CDATA[Maitainance]]></category>
		<category><![CDATA[Members]]></category>
		<category><![CDATA[Microsoft Exchange Server]]></category>
		<category><![CDATA[Microsoft Server]]></category>
		<category><![CDATA[Node]]></category>
		<category><![CDATA[Pam]]></category>
		<category><![CDATA[PS Script]]></category>
		<category><![CDATA[Shutdown Exchange]]></category>
		<category><![CDATA[Type Cd]]></category>
		<category><![CDATA[Windows Server]]></category>
		<category><![CDATA[Windows Shutdown]]></category>

		<guid isPermaLink="false">http://www.kreslavsky.com/2011/04/shut-down-exchange-2010-dag-member.html</guid>
		<description><![CDATA[&#160; While performing maintenance to Exchange 2010 DAG server you should first remove the DAG member from DAG group.Other wise you may have unwanted DB failovers and many other unexpected issue that may affect company mail services availability Shutting Down DAG Members The Exchange 2010 high availability solution is integrated with the Windows shutdown process. If an administrator or application initiates a shutdown of a Windows server in a DAG that has a mounted database that&#8217;s replicated to one or more DAG members, the system attempts to activate another copy of the mounted database prior to allowing the shutdown process to complete. However, this new behavior doesn&#8217;t guarantee that all of the databases on the server being shut down will experience a lossless activation. As a result, it&#8217;s a best practice to perform a server switchover prior to shutting down a server that&#8217;s a member of a DAG. The correct way to perform any maintenance is to run first&#160; StartDagServerMaintenance.ps1 script that is located under “C:Program FilesMicrosoftExchange ServerV14scripts” This script moves all the active databases to next preferred DAG server and prevents active databases from moving to that server during the maintenance. In addition the script ensures that all critical DAG support functionality that may be on this server has been moved to next proffered server To run the script open EMC Type: cd $exscripts StartDagServerMaintenance.ps1 -server YourServername The script performs the following tasks on the background: Runs the Suspend-MailboxDatabaseCopy cmdlet for each database copy hosted on the DAG member. Pauses the node in the cluster, which prevents the node from being and becoming the PAM. Sets the value of the DatabaseCopyAutoActivationPolicy parameter on the DAG member to blocked Moves all active databases currently hosted on the DAG member to other DAG members. If the DAG member currently owns the default cluster group, the script moves the default cluster group (and therefore the PAM role) to another DAG member. If any of the preceding tasks fails, all operations, except for successful database moves, are undone. &#160; After the maintenance is complete and the DAG member is ready to return to serve clients you need to run the following script: cd $exscripts StopDagServerMaintenance.ps1 -server YourServername The script performs the following tasks on the background: Runs the Resume-MailboxDatabaseCopy cmdlet for each database copy hosted on the DAG member. Resumes the node in the cluster, which enables full cluster functionality for the DAG member. Sets the value of the DatabaseCopyAutoActivationPolicy parameter on the DAG member to Unrestricted &#160; I highly recommend using&#160; Start/StopDagServerMaintenanceInstalling maintainance scripts before any action that requiers server Reboot/ShutDown or Update Rollups instalation. &#160; Most of the material has been taken from Managing Database Availability Groups MS article]]></description>
			<content:encoded><![CDATA[<p>&#160;</p>
<p>While performing maintenance to Exchange 2010 DAG server you should first remove the DAG member from DAG group.Other wise you may have unwanted DB failovers and many other unexpected issue that may affect company mail services availability</p>
<p><strong>Shutting Down DAG Members</strong> </p>
<p>The Exchange 2010 high availability solution is integrated with the Windows shutdown process. If an administrator or application initiates a shutdown of a Windows server in a DAG that has a mounted database that&#8217;s replicated to one or more DAG members, the system attempts to activate another copy of the mounted database prior to allowing the shutdown process to complete. </p>
<p>However, this new behavior doesn&#8217;t guarantee that all of the databases on the server being shut down will experience a lossless activation. As a result, it&#8217;s a best practice to perform a server switchover prior to shutting down a server that&#8217;s a member of a DAG.</p>
<p>The correct way to perform any maintenance is to run first&#160; StartDagServerMaintenance.ps1 script that is located under “C:Program FilesMicrosoftExchange ServerV14scripts”   <br />This script moves all the active databases to next preferred DAG server and prevents active databases from moving to that server during the maintenance.     <br />In addition the script ensures that all critical DAG support functionality that may be on this server has been moved to next proffered server</p>
<p>To run the script open EMC   <br />Type:    <br /><em>cd $exscripts     <br />StartDagServerMaintenance.ps1 -server YourServername</em></p>
<p>The script performs the following tasks on the background:</p>
<ul>
<li>Runs the <em>Suspend-MailboxDatabaseCopy</em> cmdlet for each database copy hosted on the DAG member.</li>
<li>Pauses the node in the cluster, which prevents the node from being and becoming the PAM.</li>
<li>Sets the value of the <em>DatabaseCopyAutoActivationPolicy</em> parameter on the DAG member to <strong>blocked</strong></li>
<li>Moves all active databases currently hosted on the DAG member to other DAG members.</li>
<li>If the DAG member currently owns the default cluster group, the script moves the default cluster group (and therefore the PAM role) to another DAG member.</li>
</ul>
<p>If any of the preceding tasks fails, all operations, except for successful database moves, are undone.</p>
<p>&#160;</p>
<p>After the maintenance is complete and the DAG member is ready to return to serve clients you need to run the following script: </p>
<p><em>cd $exscripts     <br />StopDagServerMaintenance.ps1 -server YourServername</em></p>
<p>The script performs the following tasks on the background:</p>
<ul>
<li>Runs the Resume-MailboxDatabaseCopy cmdlet for each database copy hosted on the DAG member.</li>
<li>Resumes the node in the cluster, which enables full cluster functionality for the DAG member.</li>
<li>Sets the value of the <em>DatabaseCopyAutoActivationPolicy</em> parameter on the DAG member to <strong>Unrestricted</strong></li>
</ul>
<p>&#160;</p>
<p><img src="http://i.msdn.microsoft.com/Global/Images/clear.gif" />I highly recommend using&#160; Start/StopDagServerMaintenanceInstalling maintainance scripts before any action that requiers server Reboot/ShutDown or Update Rollups instalation.</p>
<p>&#160;</p>
<p>Most of the material has been taken from Managing <a href="http://technet.microsoft.com/en-us/library/dd298065.aspx" target="_blank">Database Availability Groups MS article</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.kreslavsky.com/2011/04/shut-down-exchange-2010-dag-member.html/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Some Exchange 2010sp1 power shell scripts part1</title>
		<link>http://www.kreslavsky.com/2011/04/some-exchange-2010sp1-power-shell-scripts-part1.html</link>
		<comments>http://www.kreslavsky.com/2011/04/some-exchange-2010sp1-power-shell-scripts-part1.html#comments</comments>
		<pubDate>Thu, 14 Apr 2011 11:23:19 +0000</pubDate>
		<dc:creator>Gil Kreslavsky</dc:creator>
				<category><![CDATA[Exchange 2010]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Scripts]]></category>
		<category><![CDATA[Alias]]></category>
		<category><![CDATA[Cluster Member]]></category>
		<category><![CDATA[Csv]]></category>
		<category><![CDATA[Dag]]></category>
		<category><![CDATA[Distribution Group]]></category>
		<category><![CDATA[Firewall]]></category>
		<category><![CDATA[Group Owner]]></category>
		<category><![CDATA[Mail]]></category>
		<category><![CDATA[Mailbox Format]]></category>
		<category><![CDATA[Mailboxes]]></category>
		<category><![CDATA[Move Mailbox]]></category>
		<category><![CDATA[Profiles]]></category>
		<category><![CDATA[Quota Report]]></category>
		<category><![CDATA[Server Exchange]]></category>
		<category><![CDATA[Server Servername]]></category>
		<category><![CDATA[Shell Scripts]]></category>

		<guid isPermaLink="false">http://www.kreslavsky.com/?p=1163</guid>
		<description><![CDATA[&#160; Get Quota report Get-Mailbox &#124; Format-Table alias, *quota Delete message from Mailbox get-mailbox -resultsize unlimited &#124; search-mailbox -SearchQuery &#8220;Subject:ABDCEV&#8217;&#8221; -DeleteContent Turn Off firewall on all profiles netsh advfirewall set allprofiles firewallpolicy allowinbound,allowoutbound Exchange 2007 &#8211; check DB copy status. Get-StorageGroupCopyStatus -StandbyMachine mtvmail01 Message Tracking log to csv (&#124; Select Sender, Recipients, TimeStamp, MessageSubject) Get-MessageTrackingLog -Server servername-ResultSize Unlimited &#124; Where { $_.Sender -like &#8220;username*&#8221; } &#124; Export-CSV &#8220;c:username.csv&#8221; Put Exchange DAG cluster member to Maintainance cd $exscripts StartDagServerMaintenance.ps1 -server servername Get Exchange DAG cluster member from Mainatainance cd $exscripts StopDagServerMaintenance.ps1 -server servername Set Distribution group owner Set-DistributionGroup groupname -ManagedBy &#8220;User Name&#8221; -BypassSecurityGroupManagerCheck Access rights to all mailboxes in DB or All Get-Mailbox &#124; Add-MailboxPermission -User “Username” -AccessRights FullAccess -InheritanceType All Get-MailboxDatabase –identity “DBNAME” &#124; Add-ADPermission -User “UserName” -AccessRights GenericAll Move Mailbox New-MoveRequest -Identity user@mail.com -TargetDatabase DBNAME -BadItemLimit 100 -AcceptLargeDataLoss Add permition to send as Add-ADpermission -Identity &#8220;DatabaseName&#8221; -user &#8220;username&#8221;  -ExtendedRights Receive-as]]></description>
			<content:encoded><![CDATA[<p>&nbsp;</p>
<p><strong>Get Quota report<br />
</strong>Get-Mailbox | Format-Table alias, *quota</p>
<p><strong>Delete message from Mailbox<br />
</strong>get-mailbox -resultsize unlimited | search-mailbox -SearchQuery &#8220;Subject:ABDCEV&#8217;&#8221; -DeleteContent</p>
<p><strong>Turn Off firewall on all profiles<br />
</strong>netsh advfirewall set allprofiles firewallpolicy allowinbound,allowoutbound</p>
<p><strong>Exchange 2007 &#8211; check DB copy status.<br />
</strong>Get-StorageGroupCopyStatus -StandbyMachine mtvmail01</p>
<p><strong>Message Tracking log to csv (| Select Sender, Recipients, TimeStamp, MessageSubject)<br />
</strong>Get-MessageTrackingLog -Server <strong>servername</strong>-ResultSize Unlimited | Where { $_.Sender -like &#8220;username*&#8221; } | Export-CSV &#8220;c:username.csv&#8221;</p>
<p><strong>Put Exchange DAG cluster member to Maintainance<br />
</strong>cd $exscripts<br />
StartDagServerMaintenance.ps1 -server servername</p>
<p><strong>Get Exchange DAG cluster member from Mainatainance</strong></p>
<p>cd $exscripts<br />
StopDagServerMaintenance.ps1 -server servername</p>
<p><strong>Set Distribution group owner<br />
</strong>Set-DistributionGroup groupname -ManagedBy &#8220;User Name&#8221; -BypassSecurityGroupManagerCheck</p>
<p><strong>Access rights to all mailboxes in DB or All<br />
</strong>Get-Mailbox | Add-MailboxPermission -User “Username” -AccessRights FullAccess -InheritanceType All<br />
Get-MailboxDatabase –identity “DBNAME” | Add-ADPermission -User “UserName” -AccessRights GenericAll</p>
<p><strong>Move Mailbox<br />
</strong>New-MoveRequest -Identity user@mail.com -TargetDatabase DBNAME -BadItemLimit 100 -AcceptLargeDataLoss</p>
<p><strong>Add permition to send as<br />
</strong>Add-ADpermission -Identity &#8220;DatabaseName&#8221; -user &#8220;username&#8221;  -ExtendedRights Receive-as</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kreslavsky.com/2011/04/some-exchange-2010sp1-power-shell-scripts-part1.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

