Month: July 2015

Bulk removal of Password Never Expires checkbox in AD
No one intends this but it is a problem that sooner or later you will be come across in your system administrator career.

I’ve see this resolved many different ways, but I like to narrow it down to a particular OU. Depending on your case you may want to clean this across the board in AD.

Here is command prompt to the rescue:
```
dsquery user "OU=Microsoft,DC=Redmond,DC=CORP,DC=LOCAL" -limit 4000 | dsmod user -pwdneverexpires no
```
I haven’t tried this, but some have said the following works in Powershell:

For OU:
```
Get-ADUser -Filter {(ObjectClass -eq "user")} -SearchBase "OU=Offices,DC=Contoso,DC=com" | Set-ADUser -PasswordNeverExpires:$FALSE
```
For AD:
```
Get-ADUser -Filter {(ObjectClass -eq "user")} | Set-ADUser -PasswordNeverExpires:$FALSE
```
July 23, 2015
Quest AD PowerShell cmdlets

I had trouble finding the Quest AD Powershell Cmdlets today. I knew Quest got acquired by Dell but I thought that my favorites would have still worked. Anyways, after a little of digging on the internet i was able to find them. It is now called ActiveRoles Management Shell for Active DirectoryÂ Â Here is the link:Â ActiveRoles Management Shell for Active Directory

The following zip includes:

ActiveRoles Management Shell for Active Directory 32-bit Aug. 27, 2014 1.5.1
ActiveRoles Management Shell for Active Directory 32-bit – Zip Aug. 27, 2014 1.6.0
ActiveRoles Management Shell for Active Directory 64-bit Aug. 27, 2014 1.5.1
ActiveRoles Management Shell for Active Directory 64-bit – Zip Aug. 27, 2014 1.6.0

Release Notes and User Guides
ActiveRoles Management Shell for Active Directory – User Help Guide Aug. 27, 2014 1.5
ActiveRoles Management Shell for Active Directory – Administrator’s Guide Aug. 27, 2014 1.6.0

Download

July 4, 2015
Microsoft IIS: Disabling the SSL v3 Protocol
Depending on how your Windows servers are configured, you may need to disable SSL v3.

Note that older versions of Internet Explorer may not have the TLS protocol enabled by default. If you disable SSL versions 2.0 and 3.0, the older versions of Internet Explorer will need to enable the TLS protocol before they can connect to your site.

For a Simpler Way to Disable the SSL v3 Protocol:

DigiCert is not responsible for any complications or problems if you decide to use this .zip file to disable the SSL v3 protocol on your server.
1. Log into your server as a user with Administrator privileges.
2. Download DisableSSL3.zip, extract the .zip file contents, and then double-click DisableSSL3.reg.
3. In the Registry Editor caution window, click Yes.
4. Restart server.
If you prefer to do it yourself, follow the steps in the instruction below.

Microsoft IIS: How to Disable the SSL v3 Protocol
1. Open the Registry Editor and run it as administrator.For example, in Windows 2012:
  1. On the Start screen type regedit.exe.
  2. Right-click on regedit.exe and click Run as administrator.
2. In the Registry Editor window, go to:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Schannel\Protocols\
3. In the navigation tree, right-click on Protocols, and in the pop-up menu, click New > Key.
4. Name the key, SSL 3.0.
5. In the navigation tree, right-click on the new SSL 3.0 key that you just created, and in the pop-up menu, click New > Key.
6. Name the key, Client.
7. In the navigation tree, right-click on the new SSL 3.0 key again, and in the pop-up menu, click New > Key.
8. Name the key, Server.
9. In the navigation tree, under SSL 3.0, right-click on Client, and in the pop-up menu, click New > DWORD (32-bit) Value.
10. Name the value DisabledByDefault.
11. In the navigation tree, under SSL 3.0, select Client and then, in the right pane, double-click the DisabledByDefault DWORD value.
12. In the Edit DWORD (32-bit) Value window, in the Value Data box change the value to 1 and then, click OK.
13. In the navigation tree, under SSL 3.0, right-click on Server, and in the pop-up menu, click New > DWORD (32-bit) Value.
14. Name the value Enabled.
15. In the navigation tree, under SSL 3.0, select Server and then, in the right pane, double-click the Enabled DWORD value.
July 4, 2015
Outlook: Removing Copy from all the Calendar entries after importing from PST
This article applies to Outlook 2007 and 2010. If you are experiencing this issue with other mail clients, please contact Support.

The “Copy” prefix is usually added to calendar items when items are imported from a PST file or copied from another calendar.

To avoid this happening move items to the calendar instead of importing:
1. Open Outlook.
2. Open the .PST file (one that was imported) as an Outlook Data File.
  File > Open > Outlook Data File (.pst)
3. Switch to Calendar view and check the boxes next to both calendars to view them side by side.
4. Right-click and drag the item from the pst file calendar toÂ your current mailbox calendarÂ and select “Move” from the menu.
5. Repeat for every similar item.
To get rid of this “Copy” prefix, you can copy the script that is provided below and run it in Outlook. The script will remove the prefix however you could be still unable to edit the calendar items. To run the script that will remove the “Copy” prefix:
1. In Outlook, select the Calendar.
2. Press Alt+F11 to open the VBA editor.
3. Expand Project1, then double-click on ThisOutlookSession to open the code window.
4. Copy the code below andÂ paste it into the code window, then Save.
5. Click the Run button.
```
Sub RemoveCopy()
Dim myolApp As Outlook.Application
Dim calendar As MAPIFolder
Dim aItem As Object

Set myolApp = CreateObject("Outlook.Application")
Set calendar = myolApp.ActiveExplorer.CurrentFolder

Dim iItemsUpdated As Integer
Dim strTemp As String

iItemsUpdated = 0
For Each aItem In calendar.Items
    If Mid(aItem.Subject, 1, 6) = "Copy: " Then
      strTemp = Mid(aItem.Subject, 7, Len(aItem.Subject) - 6)
      aItem.Subject = strTemp
      iItemsUpdated = iItemsUpdated + 1
    End If
    aItem.Save
Next aItem

MsgBox iItemsUpdated & " of " & calendar.Items.Count & " Meetings Updated"

End Sub
```
July 2, 2015