Pages

12/29/2006

Cisco::Tip::Reload in X



"reload in x" and "reload cancel"
When making configuration changes remotely that you think might disconnect you if you make a mistake, setup an automatic reboot in a few minutes, make the change, if you screw up and get disconnected, it will restart with the old config. After making a successful change, write the config and then cancel the restart.

The following example reloads the software on the router in 10 minutes:
Router# reload in 10

Router# Reload scheduled for 11:57:08 PDT Fri Apr 21 1996 (in 10 minutes)
Proceed with reload? [confirm]
The following example reloads the software on the router at 1:00 p.m. today:
Router# reload at 13:00

Router# Reload scheduled for 13:00:00 PDT Fri Apr 21 1996 (in 1 hour and 2 minutes)
Proceed with reload? [confirm]

The following example reloads the software on the router on April 20 at 2:00 a.m.:
Router# reload at 02:00 apr 20
Router# Reload scheduled for 02:00:00 PDT Sat Apr 20 1996 (in 38 hours and 9 minutes)
Proceed with reload? [confirm]
The following example cancels a pending reload:
Router# reload cancel
%Reload cancelled.

12/26/2006

Outlook: Problems Syncing Offline Folders



From: MS KB 842284

How to create a new .ost file and synchronize the folders

To create a new .ost file, rename the old .ost file, and then synchronize the new .ost file with the computer that is running Microsoft Exchange Server. When you rename the old .ost file, Outlook creates a new file. To do this, follow these steps:

1. Quit all programs.
2. Click Start, point to Search, and then click For Files or Folders.
3. In the search dialog box, click All files and folders.
4. In the All or part of the file name tab, type *.ost .
5. Do not type anything in the A word or phrase in the file box.
6. Click the hard disk in the Look in list. Then, under the More advanced options option, click to select the Include subfolders check box, and then click Search

In the Name column, you see the .ost file. The default location for the .ost file is as follows.

For Microsoft Windows 95 and Microsoft Windows 98:
C:\Windows\Local Settings\Application Data\Microsoft\Outlook

For Microsoft Windows 2000, Microsoft Windows NT and Microsoft Windows XP:
C:\Documents and Settings\user name\Local Settings\Application Data\Microsoft\Outlook

7. Right-click the .ost file, and then click Rename. Rename the file by using a different file name extension, such as an .old file name extension instead of the .ost file name extension.
8. On the File menu, click Close.
9. Start Outlook, point to Send/receive on the Tools menu, and then click Send/Receive All.
You see the status of the new synchronization in the lower-right part of the screen, and you now have a new .ost file.

Because the .ost file is a replication of the information that is stored in the Exchange Server mailbox, this procedure does not damage any information.

12/04/2006

Hey, Scripting Guy! How Can I Delete All the .BAK Files in a Folder That Are More Than 7 Days Old?:
"dtmDate = Date - 7

strDay = Day(dtmDate)

If Len(strDay) < 2 Then
strDay = '0' & strDay
End If

strMonth = Month(dtmDate)

If Len(strMonth) < 2 Then
strMonth = '0' & strMonth
End If

strYear = Year(dtmDate)

strTargetDate = strYear & strMonth & strDay

strComputer = '.'

Set objWMIService = GetObject('winmgmts:\\' & strComputer & '\root\cimv2')

Set FileList = objWMIService.ExecQuery _
('ASSOCIATORS OF {Win32_Directory.Name='C:\Scripts'} Where ' _
& 'ResultClass = CIM_DataFile')

For Each objFile In FileList
strDate = Left(objFile.CreationDate, 8)
If strDate < strTargetDate Then
If objFile.Extension = 'bak' Then
objFile.Delete
End If
End If
Next"

10/24/2006

You Had Me At EHLO... : Free Busy generation process: "Free Busy generation process
From working with customers there seems to be some confusion around how Free Busy information is generated and read by the client. There is even further confusion about how to balance Free Busy access across multiple sites. In this post I hope to clear most of that up and provide some guidance that will help you prevent issues with Free Busy."
You Had Me At EHLO... : The free/busy data story: "The free/busy data story
Exchange Free Busy (FB) data itself is not simple or easy to read. This will describe what the data looks like in the Exchange store, how it’s calculated and processed through the Outlook client.
"
Microsoft Exchange: Publish different free/busy time periods: "Microsoft Exchange: Publish different free/busy time periods"
By default, Outlook will publish two months of free/busy information. While you're able to change this interval in Outlook (by going to (Tools > Options > Calendar Options > Free/Busy Options), Outlook Web Access is also subject to this two-month default, which can prove to be quite inconvenient since OWA users don't have an easy way to change this setting. To make matters worse, even if you do configure Outlook with a longer interval, Outlook may eventually revert back to the two month default. While you can run Outlook with the /cleanfreebusy switch to correct the problem, it still may not "stick."

The solution: On your Exchange servers, add a registry key that redefines the two month default value into something more suitable for your organization.

-Open the registry editor.
-Browse to the key HKLM\Software\Microsoft\ExCDO\Parameters.
-Under this key, add a DWORD entry named "FBPublishMonth".
-The value of this new entry is a number, which is the number of months for which you would like to publish free/busy information across the board, for all users.
-Restart IIS and the System Attendant services on your Exchange servers.
Help and Support: "Microsoft Support Lifecycle
Microsoft’s Support Lifecycle policy provides consistent and predictable guidelines for product support availability at the time of product release and throughout the product life. By understanding the product support available, customers are better able to maximize the management of their IT investments and strategically plan for a successful IT future. "

9/29/2006

Windows::Management


Find how long since you last restarted:
systeminfo | find "Up Time"

9/26/2006

InfoWorld GripeLine by Ed Foster | InfoWorld | The Adobe License Manager and Acrobat | September 25, 2006 12:26 AM | By Ed Foster: "September 25, 2006

The Adobe License Manager and Acrobat
Filed under: None
Up until now, corporate customers have generally been spared having to deal with product activation and other anti-piracy technology in the software products they buy in volume. With Acrobat 8, however, Adobe is rather quietly and somewhat tentatively introducing an embedded license control technology called the Adobe License Manager.
For reasons I'm not entirely clear on myself, I seem to be the first trade press person in a position to report on the Adobe License Manager (ALM). It's not that Adobe's been keeping it a secret that it planned to introduce an asset management tool that would track Adobe volume licenses for anti-piracy purposes. For months Adobe has been openly discussing it with some customers and analysts in various venues. There is now a FAQ page on ALM on Adobe's website, and the company is beginning a customer education campaign about it this week. Which makes it all the stranger that Adobe's press materials last week announcing Acrobat 8 were silent on the subject of ALM, considering that it seems like something corporate customers interested in the new Acrobat will want to know.
Perhaps that's where the tentativeness I referred to comes in. Prior to the Acrobat announcement, Adobe made the decision that for the first year of version 8 volume license customers will be able to 'opt out' from using ALM. At deployment time - after the volume agreement has been negotiated and approved, in other words - the customer will have the option until Fall of 2007 to deploy Acrobat 8 software that does not have ALM embedded.

9/22/2006

Outlook::Windows XP SP2::Enable RPC Polling


The Outlook Find feature and the new mail notifications do not work after you apply Windows XP Service Pack 2: "SYMPTOMS
After you apply Microsoft Windows XP Service Pack 2 (SP2) on your computer, you may notice that the following behaviors occur in Microsoft Outlook:•When you connect to a Microsoft Exchange Server-based computer and receive a new e-mail message, you are not prompted with a notification, and the new e-mail message does not automatically appear in your Inbox. If you click Send/Receive or another Outlook folder, and then you click your Inbox folder to update the Outlook message pane, any new e-mail messages that you have will appear.
•When you try to send an e-mail message in Outlook, the e-mail message may remain in your Outbox folder longer than expected. Or, there may be a delay before the e-mail message is sent."
XADM: Description of the MAPI Client Connection Polling of an Exchange Server: "This article describes the MAPI client connection polling that is performed at regular intervals by a MAPI client to verify the connection with an Exchange server"

9/21/2006

nonadmin - DropMyRights: "DropMyRights is a tool written by Michael Howard that allows administrators to run internet-facing applications (such as email clients and web browsers) as a non-administrator. You can read about it and download it from his MSDN article
Browsing the Web and Reading E-mail Safely as an Administrator

9/20/2006

CITRIX::VMWARE


BriForum 2006 Video: Ron Oglesby on the feasibility of running Citrix in a VM: "Video: Ron Oglesby on the feasibility of running Citrix in a VM"
Network Monitoring, Free Network monitor, Woodstone Servers Alive, POPPager the best networking tools and services: "Servers Alive is an end-to-end network monitoring tool running on Windows 2000/2003/XP. It works agentless and across operating systems. Its checks and alerts are on the cutting edge of technology. "
Toolbars are locked - Unable to customize the toolbar: "Toolbars are locked - Unable to customize toolbar and tool band
Symptoms
When you right-click the standard toolbar in Internet Explorer, the Customize option is missing, and the toolbar options are grayed-out as seen in the picture. This is due to the restrictions set in the registry."
Click Start, Run and type Regedit.exe.
Navigate to the following locations one by one:
HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer

and

HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer

In the right-pane, delete these two values (if exists)
NoBandCustomize
NoToolbarCustomize

9/01/2006

XSS, Cookies, and Session ID Authentication ? Three Ingredients for a Successful Hack > The Fixes: "There are a few things that the web developers could do to help prevent these types of attacks. First, all form fields should be filtered to prevent XSS attacks. This is typically as simple as filtering just the '<' and '>' characters, but can be extended beyond that to also include '&*^%%$#@!(){}[]\|';:/?.,>'. The point is to think about what characters are actually needed. Second, a user should never be allowed to upload a file that could be executed on the server. In other words, an upload script should be limited to just those files that are necessary for business. In addition to this, I would suggest uploading files to a non-executable directory on the webserver (e.g. /home/files vs. /home/www/files)."

8/08/2006

ThomasKoetzing.de - Understanding and Troubleshooting Citrix's Seamless Windows Engine: "This article will explain how these technical components work and how you can fix seamless windows problems "

ICA Client Printer Creation


Citrix White Paper
http://support.citrix.com/servlet/KbServlet/download/584-102-8107/icaprinting.pdf
CTX681954 - Troubleshooting Citrix ICA Printer Auto-creation: "Troubleshooting Citrix ICA Printer Auto-creation "
Wfshell.exe crashes - Brian Madden's Community Forum: "Grimace Not-So-Newbie


Posts: 25
Score: 0
Joined: 3/17/2005
Status: offline This issue has been addressed in a Citrix Hotfix Rollo-up:
PSE400W2KR01

http://support.citrix.com/article/CTX107504

_____________________________

La Grimace

(in reply to Joe McGaugh)
Post #: 8


RE: Wfshell.exe crashes - 1/24/2006 7:59:23 AM


Joe McGaugh
Master Yoda





Posts: 676
Score: 13
Joined: 4/15/2005
From: Florida
Status: offline Yes, this roll-up addresses the issue, but I have not seen it Resolve the issue in all instances. If you don't do the necessary maintenance as Jeff and I both have talked about, your putting a bandaid on the issue. Clean the servers and remove all the native drivers first, set printing policies for UDP and do not allow native drivers to install automatically, and if your still having an issue, then try the patch.

_____________________________

Joe "
wfshell.exe error

From one kind soul:

Duplicate Problem by terminating application by clicking on "X". Log back in and you should see the wfshell error.

Resolution -

In the "CCC" under advanced setting, change the configuration from "reset" on a broken connection to disconnect. After this configuration is made, log off and log back on and terminate application by clicking on the "X" again. After you log back on, the wfshell error should not be there nor in the eventlog anymore. You can modify the idle timeout settings for users to control the number of active idle session on your Citrix Servers. Hope this helps and it is a relief to finally find the cause of this error.
CDM Redirector Timeout Event ID 70 in MetaFrame 1.8 :: Tokeshi.com :: Citrix Support :: Thin Client Support :: Terminal Server Help

In the Events Viewer, one might find a varied number of Event ID 70 in Source: CDM Redirector. This occurs when the CDM Redirector timed out on a request to access a client device.

This can happen when an application is attempting to access a client device during a disconnect. Check Citrix Server Administration when you see this event appear. The best way to determine what client device is causing this issue is to turn off client device mapping (client drive, client COM ports, client printers). Enable them one at a time and monitor the client's logon process.

If you find that you are receiving these timeouts due to network latency, you can modify the timeout values in the registry key shown below:

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Changing Keys and Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Make sure you back up the registry before you edit it. If you are running Windows NT, be sure to update your Emergency Repair Disk (ERD).

The registry key is:

HKLM\SYSTEM\CurrentControlSet\Services\Cdm\Parameters

Increase the settings for the following:
RequestTimeout: Default is 60 (in seconds)
DirCacheTimeout Default is 30 seconds
CacheTimeout is 60 seconds

8/03/2006

Event ID 9646 is logged when you try to send many messages in Exchange Server 2003

Can't get to Delta.com


I had this problem recently and a search of the internet found several interesting instances of this happening to others.
One example:http://www.experts-exchange.com/Security/Q_21649945.html

Title: Access denied due to security policy violation

When I link to some web pages, I am getting this error message:

Access denied due to security policy violation

Reject ID: 438f612b-1000c-42852404-7b6

Does this look familiar to anyone? I can't tell if it is coming from something on our end (like Checkpoint NG) or on the other end. It does not happen all the time on even the same website, just on certain pages for unknown reason.

I see several reports of this exact message on Google, but no one has an answer to the question.


Comment from HarkinsIT
Date: 01/26/2006 01:15PM PST
Comment


I have received a few complaints from my users about not being able to access particular sites, particularly delta.com. I too am running a Checkpoint firewall (NGXR60) and have found the following in the SmartDefense log: WSE0020008 found both content-length and transfer-encoding headers in response.

It's not the same exact error you are getting, RobWalling, but I was wondering if you had found a solution. I have been pouring through the SmartDefense settings and so far I haven’t been able to find anything about this.

Just wondering.....Thanks.


Comment from RobWalling
Date: 01/27/2006 11:40AM PST
Comment


After playing around with it for awhile and talking to Check Point, I finally discovered that the "ASCII Only Response Headers" criteria in the Web Intelligence piece of NGX was what was causing the problem. Turned it off, and all is well. Putting it in "Monitor Only" mode will still block it though! That really made it hard to figure out. Of course what opened myself up to, I'm not sure yet.

BTW, user ID "mobot" is someone else. I latched onto this thread because it described the same problem.

Thanks.



Comment from m298908
Date: 01/27/2006 11:42AM PST
Comment


We recently upgraded our check point software also and started having this for delta.com. It is only happening to one user though. I can get to it fine. Very strange. I will try this setting and see if it works. thx

Citrix::Performance Metrics


Percent Interrupt Time
The processor is spending a large amount of time responding to I/O rather than user processing. A large value for interrupt time indicates a hardware problem or a very busy server.

Context Switches per Second
A large # of threads and/or processes are competing for processor time.

5/05/2006

data center::equipment rack::power


Equipment Rack power should not provide more outlets than a UPS circuit can service. A power strip the height of the rack will seldom or never be adequately supplied by one circuit of a UPS.
A suggestion would be to put 2-4 smaller PDU's (maybe the width of the rack.) Into separate circuits of one UPS to prevent overloading and tripping the circuit.

4/18/2006

Windows 2003::ISA::DCOM


DCOM Security in Windows 2003 SP1
Windows 2003 SP1 has a new security group: Distributed COM Users
This group is new with Windows Server 2003 SP1 and that, by default, remote DCOM attempts are blocked to all but users in "Distributed COM Users" group (or administrators.)

4/17/2006

Outlook::Holidays


Holidays available only through 2005 calendar year in Outlook 2002
Article ID : 811544
Last Review : January 5, 2006
Revision : 1.1
SYMPTOMS
You cannot add holidays to the Microsoft Outlook 2002 calendar for the year 2006 or later.
CAUSE
This behavior is by design. Microsoft Outlook 2002 provides some of the more popular holidays, but only through to the end of the year 2005.
WORKAROUND
Additional holidays are available from some third-party companies.

You can modify the Outlook holiday file to create your own updated list of holidays. To do so, follow the directions in the "Resolution" section of the following article:
280976 (http://support.microsoft.com/kb/280976/) Foreign national and religious holidays incorrectly added in US English Outlook Calendar G - M
MORE INFORMATION
Microsoft is working on releasing a holiday update. Check this article at a later date to obtain a link to the update.

4/14/2006

MS Office::Browser Window



It is a pain for Office documents to open in the current IE browser window.

-------------------------------------------
Steps to enable Doc links to open outside of IE:
1. Launch Windows Explorer.
2. From the Tools menu, select Folder Options.
3. From the Options dialog box, click the File Types tab.
4. From the listing of "Registered File Types," select "Microsoft Word Document," and click the Advanced button.
5. From the Edit File Type screen, clear the "Browse in same window" check box, which toggles whether a Word document is launched outside of Internet Explorer.
6. Click OK to close the dialog boxes.

OR - create a registry file from the lines below and merge it in registry.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Word.Document.8]
@="Microsoft Word Document"
"EditFlags"=dword:00010000
"BrowserFlags"=dword:00000008

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Excel.Sheet.8]
@="Microsoft Excel Worksheet"
"EditFlags"=dword:00010000
"BrowserFlags"=dword:00000008

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PowerPoint.Show.8]
@="Microsoft PowerPoint Presentation"
"EditFlags"=dword:00010000
"BrowserFlags"=dword:00000008

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Visio.Drawing.6]
@="Microsoft Visio Drawing"
"EditFlags"=dword:00010000
"BrowserFlags"=dword:00000008

4/07/2006

Cisco::6509::Supervisor Module Gigabit Interface



Supervisor modules for 6509 and 4507R switches have two SFP slots for gigabit interfaces. On a Cisco 4507R with redundant supervisor modules, only the first interface on each module is active. The second interface is inactive.

This does not happen on 6509 switches, according to:

Cisco Config Guide)


Note With Release 12.2(18)SXD and earlier releases, the two Gigabit Ethernet interfaces on a redundant Supervisor Engine 720 are always active.

3/10/2006

Proportional Belief: "keep open, as it were, the ground that's already been cleared. Some falsehoods "

Not a technical Blog but a very interesting discussion

2/24/2006

Windows::XP::Registry


Default user desktop appearance
This is located in the registry under:
HKEY USERS\ . DEFAULT\Control Panel\
Desktop - has the desktop background settings
Colors - contains color settings
Etc.

2/17/2006

Links::Freeware


This is a great "top free software" list that includes great free security utilities.
The 46 Best-ever Freeware Utilities
http://www.techsupportalert.com/best_46_free_utilities.htm