Inlägg

Publicerat

Windows 2012 R2 Dedupe

Windows Dedupe 2012 R2

Install with Powershell

Import-Module ServerManager
Add-WindowsFeature -name FS-Data-Deduplication
Import-Module Deduplication

Set it up on drives

Enable-DedupVolume E:
Set-Dedupvolume E: -MinimumFileAgeDays 3

Starta optimering direkt…
Start-DedupJob -Type Optimization -Volume E

visa dedupe job & Status…
Get-Dedupjob
Get-DedupStatus

Publicerat

VFS01

Addera ett Cname till DNS recordet och peka på den plats som servern just nu heter

Sätt upp ett SPN ytterligare på maskinen med följande exempel setspn -S HOST/VFS01 BVDC01 setspn -S HOST/VFS01.bit.local BVDC01

Kolla så nya namnet finns i listan. setspn -l BVDC01

Vill man radera namnet gör mand et med följande setspn -D HOST/VFS01 BVDC01 setspn -D HOST/VFS01.bit.local BVDC01

You must register the Kerberos service principal names (SPNs), the host name, and the fully-qualified domain name (FQDN)
for all the new DNS alias (CNAME) records. If you do not do this, a Kerberos ticket request for a DNS alias (CNAME) record
may fail and return the error code KDC_ERR_S_SPRINCIPAL_UNKNOWN.

Publicerat

DNS post

Långsamma inloggningstider löstes med omstart av DNS… här är lite loggar på hur det hittades…
Kanske något för Bphast att automatisera…

DNS_issue

Publicerat

2012 R2 – UPD

Collection of things regardsin RDS and Profile disk.. 2012R2

Redirekta övriga mappar som vanligt till användarens profil/userfiles med GP.

dock tas inte allt med då…
Tex start-menyn (New UI)

Fixa detta med följande

add#1

 

 

 

 

 

 

 

 

 

 

add#2

 

 

 
Powershell script för att identifiera sid idn GetUser.ps1
Kör scriptet från sharet….

 

 

Publicerat

IIS as SMTP Relay

Configure Windows Server 2012 SMTP Relay

Go in Server Manager to Tools > Internet Information Services (IIS) 6.0 Manager > Right-click [SMTP Virtual Server #1] > Click ”Properties” .

Click ”Access” tab > Click Connection > Check ”All except the list below” > OK > Click Relay > Check ”All except the list below” > OK.

Click ”Delivery” tab > Click ”Outbound Security” > Check ”Basic Authentication” > Type username and password of Office 365 user > Click ”TLS encryption” > OK >
Click ”Outbound connections” > Change ”TCP port” to 587 > OK > Click ”Advanced” > Fill in ”Smart host” with the name of the Office 365 SMTP server > OK > OK.

Check firewall rules – ”Simple Mail Transfer Protocoll (SMTP-In)”

Warning! You have an open relay now. Use this setup to check the email notification system. When you see it´s fully functional go back to the ”Access” tab and narrow down the ”Connection” and ”Relay” settings to the necessary systems. When no other system needs to relay, just check ”Only the list below” and grant ”127.0.0.1ÔÇ│ access.

Publicerat

365

365 Settings!
POP-inställning
Server name: outlook.office365.com
Port: 995
Encryption method: SSL

IMAP-inställning
Server name: outlook.office365.com
Port: 993
Encryption method: SSL

SMTP-inställning
Server name: smtp.office365.com
Port: 587
Encryption method: TLS

Publicerat

Find service start/run accounts

A powershell script that finds all services , filters som out depsending on start account…

$host_name = ”.”
# Addera här de tjänstekonton man vill filtrera bort
$accounts = ”NT Authority\\LocalService”,”NT AUTHORITY\\NetworkService”,”LocalSystem”
$Accountsfilter=”Select * from Win32_Service WHERE ”+ (($accounts | foreach-object { ”NOT StartName=’$_'” }) -join ’ AND ’)
Get-WmiObject -query $Accountsfilter | ft Name, DisplayName,Startmode,StartName

Publicerat

Office 365 – Whitelisting

Please refer to the following steps to create a transport rule to achieve it
1.Sign in your portal(https://login.microsoftonline.com/), click admin -> Exchange.
2.Click mail flow -> rules.
3.Click ”+” to add a new rule.
4.Click more options in the new window.
5.”*Apply this rule ifÔǪ” -> ”The senderÔǪ” -> ”domain is”
6.”*Do the followingÔǪ” -> ”Modify the message properties” -> ”Set the spam confidence level (SCL) to ”Bypass spam filtering”

To whitelist or blacklist an IP address for all users in a domain

1. Log into OWA as an Admin.

2. Open Exchange Admin Center

3. Select Protection > Connection Filter

4. Select the Default filter

5. Add the desired IP address to the Connection Filter’s IP Allow list and IP Block list.