Корпоративний Google Chrome або як керувати закладками

Під час роботи у компанії чи у замовника може виникнути потреба додати корпоративні web ресурси в закладки Google Chrome користувачам компанії.

 

Як дізнатись дату та час, коли Windows був встановлений на вашому комп'ютері або на сервері?

Іноді вам може знадобитись знати коли встановлена ОС Windows.

Є кілька способів перевірити дату та час встановлення Windows.

 

How to find out the date and time when Windows was Installed in your computer or server?

Sometimes you may want to know when Windows OS was installed?

There are some ways to check Windows installation date and time.

 

Method 1: Using SystemInfo command in Command Prompt
1. Open Command Prompt
2. Run following command:

systeminfo | find /i "date"

 

 

 

Method 2: Using WMIC command in Command Prompt
1. Open Command Prompt
2. Run following command:

WMIC OS GET installdate

 

 

 

Method 3: Using Registry Editor

1. Open regedit
2. Go to following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

 

3. Look for InstallDate DWORD value

 

 

4. This DWORD contains total number of seconds since 1st January 1970.

 

Method 4: Using SystemInfo Command in PowerShell

[PS] systeminfo | Select-String "Install Date:"

 

 

 

Update Windows Certification Authority to SHA256

certutil -setreg ca\csp\CNGHashAlgorithm SHA256

net stop certsvc

net start certsvc

 

 

Exchange: Hide Mailbox from Address List

In organization you might need to hide a mailbox from the GAL for some reason.

For this procedure you may use Exchange Admin Center or the Exchange Management Shell.

Hide mailbox using the Exchange Admin Center:

Select Recipients - Mailboxes

Click edit on the mailbox where you want to hide from the GAL.

 

On the properties page for the user, ensure you are on the General tab/page
Select option "Hide from address lists" then click Save button.

 

 

 

Hide mailbox using the Exchange Management Shell:

 

Set-Mailbox -Identity <UserName> -HiddenFromAddressListsEnabled $true

 

 

To show mailbox using the Exchange Management Shell:

 

Set-Mailbox -Identity <UserName> -HiddenFromAddressListsEnabled $false

 

 

 

 



System Center Endpoint Protection. Your system administrator has restricted access to this app.

When I click on System Center Endpoint Protection

I get following error: "Your system administrator has restricted access to this app."

 

Get Active Directory Schema Version from PowerShell

To view Active Directory Schema Version from PowerShell use command

 

[PS]Get-ADObject (Get-ADRootDSE).schemaNamingContext -properties objectVersion

 

 

 

 

How to view the version and build number of a Microsoft Exchange Server

Applies to: Exchange Server 2010, Exchange Server 2013, Exchange Server 2016

To view the version and build number of a Microsoft Exchange Server run the following command in the Exchange Management Shell

[PS] Get-ExchangeServer | Format-List Name, Edition, AdminDisplayVersion, ServerRole

But what if you don't have easy access to EMS, or you want to check the version of the Exchange Server your mailbox is hosted?

Як подивитись версію та номер збірки Microsoft Exchange Server

Застосовується до: Exchange Server 2010, Exchange Server 2013, Exchange Server 2016

Щоб переглянути версію та номер збірки Microsoft Exchange Server, виконайте таку команду в Exchange Management Shell

 

[PS] Get-ExchangeServer | Format-List Name, Edition, AdminDisplayVersion, ServerRole

  

 

Windows 10: versions and build numbers

Update 2022/09

Windows 10 November 2021 Update 

Version 21H2

Release Date: 2021/11/16

Windows 10 May 2021 Update 

Version 21H1 (OS build 10.0.19043)

Release Date: 2021/05/18

Windows 10 October 2020 Update
Version 20H2 (OS build 10.0.19042)

Windows 10 May 2020 Update

Version 2004 (OS build 10.0.19041)

Windows 10 November 2019 Update

Version 1909 (OS build 10.0.18363)

Windows 10 May 2019 Update

Version 1903 (OS build 10.0.18362)

Windows 10 October 2018 Update
Version 1809 (OS build 10.0.17763)

Windows 10 April 2018 Update

Version 1803 (OS build 10.0.17134) 

Windows 10 Fall Creators Update

Version 1709 (OS build 10.0.16299)  

Windows 10 Creators Update

Version 1703 (OS build 10.0.15063)

Windows 10 Anniversary Update

Version 1607 (OS build 10.0.14393)

Windows 10 November Update

Version 1511 (OS build 10.0.10586)

Windows 10 

Version 1507 (RTM) (OS build 10.0.10240)

Notes
To see which version of Windows 10 your device is currently running, select the
Start button, then select Settings > System > About

Or type command winver

Version. The version number gives you the information on what version of Windows 10 you’re running. The number is based on the date of the most recent large build release and uses a YYMM format.

OS Build. Shows the specific operating system build you’re running.


External links
Windows 10 release information
Windows 10 update history

Get Exchange Install Path

If you don't know path where Exchange Server installed on the server, you may use environment variable called “ExchangeInstallPath”.

Exchange creates environment variable “ExchangeInstallPath” which holds the install path for Exchange on a given server.

This can be accessed via Powershell using:

 

[PS]$env:ExchangeInstallPath

This can be useful in scripts.
 

How to Publish Outlook Calendar as Internet Calendar

Enable Internet calendar publishing.

• Internet calendar publishing. Part 1.
• Internet calendar publishing. Part 2.

 

Pre-requisites

• You will need to have access to Outlook for Windows
• You must have direct access to the Calendar (mailbox) you want to publish

Publishing

 

1. Open Outlook

 

Internet calendar publishing. Part 2.

Enable Internet calendar publishing.

• Internet calendar publishing. Part 1.

Add the sharing policy "Internet Calendar Publishing" to a user mailbox
 

Exchange Admin Center

Mailboxes - Mailbox features - Sharing policy - Internet Calendar Publishing

 

Exchange Management Shell

[PS]Set-Mailbox -Identity <user name> -SharingPolicy "Internet Calendar Publishing"

Example:

[PS]Set-Mailbox Andriy.Zarevych -SharingPolicy "Internet Calendar Publishing"

To view user  sharing policy use:

[PS]Get-Mailbox <user name> | Format-List SharingPolicy

Example:

[PS]Get-Mailbox Andriy.Zarevych | Format-List SharingPolicy

 

 

Internet calendar publishing. Part 1.

Users in Microsoft Exchange Server organizations can share calendar availability (free/busy) information with users in non-Exchange organizations and other individuals with Internet access. Internet calendar publishing provides increased flexibility and increases the number of users who can share calendar availability information.

 

You can use sharing policies to control how users in your Exchange organization share calendar information with users outside your organization.

 

For enable internet calendar publishing need to do some steps.

 

Set Windows Update settings using SCONFIG

Type in command prompt
sconfig

Option #5 shows the current configuration of your Windows Update settings

 

How to Add an Email Signature in Outlook Web App

In this article, I will illustrate the steps to create and add signatures to your all outgoing and forwarded email messages in Outlook Web App.

 

Office 365

Open https://outlook.office.com/ in web browser

Login with your account.

Happy SysAdmin Day!

 

View and Change Active Directory MaxPageSize

 

MaxPageSize - This value controls the maximum number of objects that are returned in a single search result, independent of how large each returned object is. To perform a search where the result might exceed this number of objects, the client must specify the paged search control. This is to group the returned results in groups that are no larger than the MaxPageSize value. To summarize, MaxPageSize controls the number of objects that are returned in a single search result.
Default value: 1,000

 

Some LDAP clients can only receive the first 1,000 results when they make an LDAP question to Active Directory, when more results be that requite the query scope. If there are 2,000 results to be returned, the client will receive the “Size Limit Exceeded” error when the paging is not enabled or not present.

 

How we can view or change MaxPageSize value?

 

Happy SysAdmin Day!

Import Updates to WSUS from Microsoft Update Catalog

I want to show the ability to add updates to the WSUS in the example on KB4012598.

Open the WSUS console.
Select Import Updates



 

Імпорт поновлень до WSUS з Microsoft Update

Хочу показати можливість додавання поновлень до WSUS на прикладі KB4012598.

Відкриваємо консоль WSUS.

Виберіть Import Updates

 

 

Install VMware Tools On Windows Server 2012 R2 / 2016 Core

 

Open the Virtual Machine Console -> VM -> Guest -> Install/Upgrade VMware Tools

 

 

Example 1.

In Command prompt type PowerShell

 

Check where the Vmware Tools are mounted on

[PS] Get-Psdrive

 

Go to the Drive with Vmware Tools

 

[PS] D:

 

[PS] .\setup64.exe

 

 

 

Follow the steps and restart when completed.

 

When install VMTools done - restart the server:

[PS] Restart-Computer

 

Example 2.

Enter the following command:     

D:\>setup64.exe /S /v "/qn REBOOT=Y"

 

 

Command prompt will return to D:\>. For a minute or two the installation is done than server will reboot.

 

 

 

 

Enable Exchange Online for modern authentication

By default, modern authentication isn't enabled in Exchange Online, but you can enable it.

 

Enable modern authentication in Exchange Online

 

1. Connect to Exchange Online PowerShell.

2. Run the following command in Exchange Online PowerShell:

 

 Set-OrganizationConfig -OAuth2ClientProfileEnabled $true

 

3. To verify that the change was successful, run the following command in Exchange Online PowerShell:

 

Get-OrganizationConfig | Format-Table -Auto Name,OAuth*

Enable Modern Authentication for Microsoft Office 2013

For enable modern authentication for Microsoft Office 2013, you need to set specific registry keys.

 

Note: Modern authentication is already enabled for Office 2016

 

Enable and Disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server

(draft)

How to remove SMB v1 in Windows 8.1, Windows 10, Windows 2012 R2, and Windows Server 2016

• Windows Server PowerShell Command:
Remove-WindowsFeature FS-SMB1
 
• Windows Client PowerShell Command:
Disable-WindowsOptionalFeature -Online -FeatureName smb1protocol

How to enable or disable SMB protocols on the SMB server

Windows 8 and Windows Server 2012

• To view the current state of the SMB server protocol configuration, run the following command:
Get-SmbServerConfiguration | Select EnableSMB1Protocol, EnableSMB2Protocol
• To disable SMBv1 on the SMB server, run the following command:
Set-SmbServerConfiguration -EnableSMB1Protocol $false

• To disable SMBv2 and SMBv3 on the SMB server, run the following command:
Set-SmbServerConfiguration -EnableSMB2Protocol $false

• To enable SMBv1 on the SMB server, run the following command:
Set-SmbServerConfiguration -EnableSMB1Protocol $true

• To enable SMBv2 and SMBv3 on the SMB server, run the following command:
Set-SmbServerConfiguration -EnableSMB2Protocol $true

Notes:
• You do not have to restart the computer after you run the Set-SMBServerConfiguration.
• When you enable or disable SMBv2 in Windows 8 or in Windows Server 2012, SMBv3 is also enabled or disabled.

Tips of the day #1706

Tip of the day #1706-1

Use Windows PowerShell to change the UPN suffix for all users
Change all company.local suffixes to company.com

Import-Module ActiveDirectory

Example 1.
$LocalUsers = Get-ADUser -Filter {UserPrincipalName -like '*company.local'} -Properties userPrincipalName -ResultSetSize $null

$LocalUsers | foreach {$newUpn = $_.UserPrincipalName.Replace("company.local","company.com"); $_ | Set-ADUser -UserPrincipalName $newUpn}

Rename and Move an Exchange Mailbox Database

To rename the default database running the following command:
[PS] C:/>Set-Mailbox "Mailbox Database 12453789" -Name "MailBoxDB-2"


Move the database files:
[PS] C:/> Move-DatabasePath -Name "MailBoxDB-2" -EdbFilePath "D:/MailBoxDB/MailBoxDB-2/MailBoxDB-2.edb" -LogFolderPath "E:/MailBoxDBLogs/MailBoxDB-2"

Update AD Group ManagedBy Attribute – PowerShell Script

 

Example 1.

Input File
Groups-170316-1.csv - The input file contains group names.

Script

Import-module ActiveDirectory

$User = "User-170316"

Import-CSV "C:\Scripts\Groups-170316-1.csv" | % {

$Group = $_.GroupName

Get-ADGroup $Group | Set-ADGroup -ManagedBy $User
}

Notes:
$User = <ADUser>


Example 2.

Input File
Groups-170316-2.csv - The input file contains group and user names.

Exchange 2007 - end of life on April 11th

11 квітня завершується підтримка Exchange Server 2007.
Також завершується підтримка інших продуктів Office 2007.

Детальніше за посиланнями:

Exchange 2007 reaches end of life on April 11th. What’s your plan to move?

Exchange 2007 End of Life Roadmap

Setting Distribution Groups Default OU in Exchange 2010/2013/2016

When we creating a Mail Distribution Group in the Exchange Shell or Exchange Admin Center, we are given the option to choose which Organizational Unit (OU) in Active Directory (AD) we want the Distribution Group to be created.

Exchange 2013

Change a Universal Distribution Group to a Universal Security Group in Exchange 2010/2013

Let's convert Mail Distribution Group to Mail Enabled Security Group.

Оpen ADUC and take properties of the Group, then change the Group type from Distribution



to Security

Now in Exchange Admin Center we have a Mail Universal Security Group instead of a Mail Universal Distribution Group

 
 
 
 
 
 
 
 
Let’s use this group to set permissions. Start Outlook and add this group to set permissions to my Calendar folder.
 
Add this group to the Calendar folder and press ok.
 
If you see the Deny circle sign on the distribution group

 
 
You receive an error message in Outlook when you try to set permissions for a distribution group on a mailbox folder in Exchange Server

 

Convert Username to SID and Vice Versa

In Windows environment, each domain and local user, a group or other security objects are assigned a unique identifier — Security Identifier or SID.

SID used to control access to different resources: network shares, registry keys, file system objects, etc.

Now we will see some simple ways to get SID by username and the reverse.

 

Set default OU for new Users in AD

Log into a Domain Controller as a Domain Admin
Open a CMD prompt


To change the default container for user objects, enter:

ReDirUsr Container-DN

where Container-DN is the DistinguishedName name of the container that will become the default location for newly created user objects.

For example:

   redirusr "OU=New Users,DC=mydomain,DC=com"



To revert to the default settings you will need to run the following commands:

   redirusr cn=users,DC=company,dc=com"

Note: the domain functional level must be at least Windows Server 2003

Set default OU for new Computers in AD

Log into a Domain Controller as a Domain Admin
Open a CMD prompt
 

To change the default container for computer objects, enter:

 

ReDirCmp Container-DN

 

where Container-DN is the DistinguishedName name of the container that will become the default location for newly created computer objects.

 

For example:

 

   redircmp "OU=New Computers,DC=mydomain,DC=com"

 

To revert to the default settings you will need to run the following commands:

 

   redircmp cn=computers,DC=company,dc=com"

 

Note: the domain functional level must be at least Windows Server 2003