Bulk removal of Password Never Expires checkbox in AD

No one intends this but it is a problem that sooner or later you will be come across in your system administrator career.

I’ve see this resolved many different ways, but I like to narrow it down to a particular OU. Depending on your case you may want to clean this across the board in AD.

Here is command prompt to the rescue:

I haven’t tried this, but some have said the following works in Powershell:

For OU:

For AD:

Quest AD PowerShell cmdlets

I had trouble finding the Quest AD Powershell Cmdlets today. I knew Quest got acquired by Dell but I thought that my favorites would have still worked. Anyways, after a little of digging on the internet i was able to find them. It is now called ActiveRoles Management Shell for Active Directory  Here is the link: ActiveRoles Management Shell for Active Directory

The following zip includes:

ActiveRoles Management Shell for Active Directory 32-bit Aug. 27, 2014 1.5.1
ActiveRoles Management Shell for Active Directory 32-bit – Zip Aug. 27, 2014 1.6.0
ActiveRoles Management Shell for Active Directory 64-bit Aug. 27, 2014 1.5.1
ActiveRoles Management Shell for Active Directory 64-bit – Zip Aug. 27, 2014 1.6.0

Release Notes and User Guides
ActiveRoles Management Shell for Active Directory – User Help Guide Aug. 27, 2014 1.5
ActiveRoles Management Shell for Active Directory – Administrator’s Guide Aug. 27, 2014 1.6.0

Download

Microsoft IIS: Disabling the SSL v3 Protocol

Depending on how your Windows servers are configured, you may need to disable SSL v3.

Note that older versions of Internet Explorer may not have the TLS protocol enabled by default. If you disable SSL versions 2.0 and 3.0, the older versions of Internet Explorer will need to enable the TLS protocol before they can connect to your site.

For a Simpler Way to Disable the SSL v3 Protocol:

DigiCert is not responsible for any complications or problems if you decide to use this .zip file to disable the SSL v3 protocol on your server.

  1. Log into your server as a user with Administrator privileges.
  2. Download DisableSSL3.zip, extract the .zip file contents, and then double-click DisableSSL3.reg.
  3. In the Registry Editor caution window, click Yes.
  4. Restart server.

If you prefer to do it yourself, follow the steps in the instruction below.

Microsoft IIS: How to Disable the SSL v3 Protocol

  1. Open the Registry Editor and run it as administrator.For example, in Windows 2012:
    1. On the Start screen type regedit.exe.
    2. Right-click on regedit.exe and click Run as administrator.
  2. In the Registry Editor window, go to:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Schannel\Protocols\Windows Registry Key
  3. In the navigation tree, right-click on Protocols, and in the pop-up menu, click New > Key.Windows Registry Key
  4. Name the key, SSL 3.0.
  5. In the navigation tree, right-click on the new SSL 3.0 key that you just created, and in the pop-up menu, click New > Key.Windows Registry Key
  6. Name the key, Client.
  7. In the navigation tree, right-click on the new SSL 3.0 key again, and in the pop-up menu, click New > Key.Windows Registry Key
  8. Name the key, Server.
  9. In the navigation tree, under SSL 3.0, right-click on Client, and in the pop-up menu, click New > DWORD (32-bit) Value.Windows Registry Key
  10. Name the value DisabledByDefault.
  11. In the navigation tree, under SSL 3.0, select Client and then, in the right pane, double-click the DisabledByDefault DWORD value.Windows Registry Key
  12. In the Edit DWORD (32-bit) Value window, in the Value Data box change the value to 1 and then, click OK.
  13. In the navigation tree, under SSL 3.0, right-click on Server, and in the pop-up menu, click New > DWORD (32-bit) Value.Windows Registry Key
  14. Name the value Enabled.
  15. In the navigation tree, under SSL 3.0, select Server and then, in the right pane, double-click the Enabled DWORD value.Windows Registry Key

Outlook: Removing Copy from all the Calendar entries after importing from PST

This article applies to Outlook 2007 and 2010. If you are experiencing this issue with other mail clients, please contact Support.

The “Copy” prefix is usually added to calendar items when items are imported from a PST file or copied from another calendar.

To avoid this happening move items to the calendar instead of importing:

  1. Open Outlook.
  2. Open the .PST file (one that was imported) as an Outlook Data File.
    File > Open > Outlook Data File (.pst)
  3. Switch to Calendar view and check the boxes next to both calendars to view them side by side.
  4. Right-click and drag the item from the pst file calendar to your current mailbox calendar and select “Move” from the menu.
  5. Repeat for every similar item.

To get rid of this “Copy” prefix, you can copy the script that is provided below and run it in Outlook. The script will remove the prefix however you could be still unable to edit the calendar items. To run the script that will remove the “Copy” prefix:

  1. In Outlook, select the Calendar.
  2. Press Alt+F11 to open the VBA editor.
  3. Expand Project1, then double-click on ThisOutlookSession to open the code window.
  4. Copy the code below and paste it into the code window, then Save.
  5. Click the Run button.
 

Enabling ActiveSync for a Security Group using Powershell

 

Disabling ActiveSync for a Group of Users using Powershell

I have tested this only in a Hybrid environment.

  • Create a Universal AD Security Group called O365_Disabled_ActiveSync_Users.
  • Add all the members to it.
  • Make sure it has an email address that registers in Office365.

Connect to Office365 via Powershell ISE:

Copy the following code in a file called DisableActiveSync.ps1 and run in powershell. Add the users in the group will have ActiveSync now disabled.

nvvsvc.exe C++ Runtime Error

If you are getting this error you will be getting a black screen and a mouse pointer only. This will be the same even if you login to safe mode or low graphics mode.

Here is the fix:

If you have another OS installed in the system (you have a multiboot system):
1. Log-in to your computer using another OS (You can use Hiren’s Boot CD/DVD or Ubuntu Live Disc).
2. Locate the root directory of your computer (that disk or partition in which you installed the OS that you can’t open).
3. Locate and open the “windows” folder.
4. Locate and open the “system32” folder under that “windows” folder.
5. Locate and open the “config” folder.
6. Rename Default to Default.bak, Sam to Sam.bak, Security to Security.bak, Software to Software.bak, and System to System.bak
7. You will see a folder named “RegBack”. Open it and copy all of its contents to the “config” folder.
8. Restart the computer and you display should be back.
9. Update the drivers from Nvidia’s site.
10. You’re Done!

Exchange 2007: Give a user full access to all mailboxes

The following command will give full access to the Mailbox database including future mailboxes when they are created. Just change the name of the Mailbox Database to yours and the name to the one you wish to use

Now access to all mailboxes:

For Send As:

For Recieve As:

In exchange 2010 only you can use this command:

Make sure you have OWA enabled for the user to view the mailbox.

Windows: Remove hidden NIC

Applies to Windows 2003

I was getting this error after have made some change with my virtual NIC adapters. The error I was facing was this one, when I was making changes to the only NIC there was installed:

The IP address XXX.XXX.XXX.XXX you have entered for this network adapter is already assigned to another adapter Name of adapter. Name of adapter is hidden from the network and Dial-up Connections folder because it is not physically in the computer or is a legacy adapter that is not working. If the same address is assigned to both adapters and they become active, only one of them will use this address. This may result in incorrect system configuration. Do you want to enter a different IP address for this adapter in the list of IP addresses in the advanced dialog box?

The problem was that I had an old “ghost” NIC with some settings applied to it. The NIC was no longer installed so I was not able to remove or change the settings the normal way. First I tried to find the information in the registry, but there were a lot of entries and it didn’t seem to work. Then I did what I always do in those situations.


1. Open a command prompt and enter the commands above.

 

 

 

 

 

 

 

 

 

 

 

 

2. From the view menu select: Show hidden devices

 

 

 

 

 

 

 

 

 

 

 

 

 

 

3. Select the NIC that are removed from the system and right click and chose “Uninstall”
The NIC that are grayed out are no longer in the system

After following the above steps I was able to change the IP settings on my NIC without any warning.

This operation has been cancelled due to restrictions in effect on this computer.

Trying to open a hyperlink in Microsoft Office Outlook or Microsoft Office Word – you receive the following error message and subsequently cannot open the hyperlinks:
This operation has been cancelled due to restrictions in effect on this computer.
Cause: Upgrading Internet Explorer from a previous version or uninstalling Google Chrome can corrupt dependent registry keys.

Following the simple steps below will help fix the issue:

Open a Command prompt as Administrator on Windows Vista or Windows 7. Then copy and paste the following info line by line – pressing the enter key on your keyboard to initialize each command:


REG ADD HKEY_CURRENT_USER\Software\Classes\.htm /ve /d htmlfile /f
REG ADD HKEY_CURRENT_USER\Software\Classes\.html /ve /d htmlfile /f
REG ADD HKEY_CURRENT_USER\Software\Classes\.shtml /ve /d htmlfile /f
REG ADD HKEY_CURRENT_USER\Software\Classes\.xht /ve /d htmlfile /f
REG ADD HKEY_CURRENT_USER\Software\Classes\.xhtml /ve /d htmlfile /f