You should only open attachments from a trustworthy Source ( Office Documents ) in Outlook

When trying to open an Office Document ( Work, Excel, Powerpoint etc) attachment in Outlook it displayes the following dialogue box

“You should only open attachments from a trustworthy Source”

As the tick box is greyed out, you can run a registry update to remove this Prompt for all Office Documents. This was the prompt will still display dangerous file types such as .exe

The registry file can be downloaded here or the code can be used from here before hand :

http://pastebin.com/UvsnsVPG

Tags: Doc, Excel, Outlook, Powerpoint, Xls, You should only open attachments from a trustworthy Source

Word 2003 freezing and duplicating content when mouse scrolling

On documents in Word 2003 with pages around 6 pages , when scrolling up and down a few times e.g. 3  -4 , it starts to duplicate to content on the screen. We expeirenced this in Citrix as well as locally. The issue is resolved by microsoft with a HotFix which is installed after Service Pack 3

Download Link below , the fix works without a restart of the computer but word will need to be closed and opened

 http://hotfixv4.microsoft.com/Microsoft%20Word%202003/sp4/office2003KB957706GLB/11.0000.0000.8238/free/363491_intl_i386_zip.exe

Tags: Word 2003 freezing and duplicating when mouse scrolling

When trying to save from PGP Desktop you get – the specified save location is not valid

When create a new secure file in PGP Desktop the following error message is displayed when you try and save to a network Path

“The specified Save Location is not valid.”

This is a restriction on some old apps as well as this version of PGP Desktop which is up-to-date which disables saving to a UNC Path e.g.  \\server\user\data. The way around this is either to save locally to the machine or map the UNC path as a network drive and save via that network drive

Tags: PGP Desktop, the specified save location is not valid, UNC Path

The application cannot be executed because the following Shell Folder defined in the registry cannot be found. Please contact the system administrator.

When opening DSS player after modifying the registry or profile settings you might get the following error message

The application cannot be executed because the following Shell Folder defined in the registry cannot be found. Please contact the system administrator. Templates

In my case the following folder was not available

%appdata%\microsoft\windows\template

Recreating this folder fixed the problem. This error message might also display MyDocuments , So I would check the My Documents path in Olympus in the program if you can get in or the registry is set correctly. If not reinstalling should recreate this!

Tags: DSS Player, The application cannot be executed because the following Shell Folder defined in the registry cannot be found. Please contact the system administrator.

Domain and DNS not working after VMware conversion – Booting a domain controller (DC) standalone

I would like to thank Dan Furse from Response IT for this little trick bit!

When virtulising a domain controller from Physical to Virtual, it is recommended to segregate it from any other domain controllers on the network in-case replication occurs during the convert. Usually servers will be offsite so you can disable the site to site VPN’s during the conversion, onsite you will need to swap the host to a different unroutable subnet  and assign the virtual host an ip on that network for the management port.

After migration you might find that the server’s DNS and DC functionality has stopped working.

If you have a DC that is:

a)      A FSMO role holder

b)      NOT the only DC in a domain

c)       Booted standalone (ie it can’t contact any other DCs in the domain)

If the FSMO role holder can’t talk to at least one of its inbound replication partners after a reboot, it won’t advertise itself as either a DC or a DNS server. This is a precaution in case the FSMO roles may have been changed on other DCs while this one was down, so it has to do an initial sync to check that it is still the FSMO holder before it allows DNS/DC connections

You will need to add the following Registry Key and Reboot the machine, then it will skip initial replication and boot standalone.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters]

“Repl Perform Initial Synchronizations”=dword:00000000

Tags: Booting a dc standalone, Booting a domain controller standalone, dns not working on domain controller after convert, domain not working after virtual convert

Remote Web Workplace on New Windows 7 Machine Not Loading up Active X RDP Client

On trying to access the Remote Web Workplace on a Small Business Server 2003 / 2008 server on a brand new machine, the Active X Client Would Not Load. After clicking the connect button a white screen would be displayed and nothing would happen.

1) The ActiveX Control was enabled and installed

2) The Site was added to Trusted Sites

3) Made sure UAC was turned off

4) Made sure I could register mstscax.dll

Upon trying to run a VB Scribt to add the Registry Values I was greeted with the following Error message

Can’t find script engine “VBScript” for script.

As per this link this was caused by Macafee being preinstalled on the machine ( Even though it was BullGuard currently installed as the AV )

http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_programs/error-2738-could-not-access-vbscript-run-time-for/1a4499ae-8bc1-4534-9c6f-4d399ac70d9a?page=3

I downloaded the Macafee Removal Tool http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe , ran and removed , restarted and it fixed the Remote Web Workplace issue as well as the VB Script Problem!

Tags: 64bit, Can't find script engine "VBScript" for script., Remote Web Workplace Windows 7, Server 2003 Remote Web Workplace

Install Blackberry Enterprise Server on SBS 2008

( Courteous of http://www.edutech.me.uk/bes-express/installing-bes-express-on-sbs2008-server/ ) for future reference

First of all we need to install the Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1 if these have not already been done. You can download these from:

http://www.microsoft.com/downloads/details.aspx?FamilyID=E17E7F31-079A-43A9-BFF2-0A110307611E&displaylang=en

Your Server must also have Microsoft Exchange Server 2007 Service Pack 2 and all Patches Installed.

Once you have installed the above, you then need to Raise Windows Server 2008 Active Directory Domain and Forest Function Levels.

1. To do this launch “Active Directory Users and Computers” from the Administrative Tools
2. Right click your domain and choose ‘Raise Domain Function Level’
3. Choose Windows Server 2008 and click Raise, Accept and Ok and then Ok upon Success
4. Close MMC and then launch “Active Directory Domains and Trusts” from the Administrative Tools.
5. Right Click ‘Active Directory Domains and Trusts’ and select Raise Forest Function Level.
6. Choose Windows Server 2008 and click Raise, Accept and Okay and then Ok upon Success.

 Next, we need to create a Windows account and mailbox to act as the Blackberry Enterprise Server Express Account

1. Open the Exchange Management Console
2. Select the Recipient Configuration Node, and then the Mailbox Note. Click on “New Mailbox” on the right
3. Select “User Mailbox” as the type and then click next, Create a Mailbox for “New User” and click next
4. Fill in the usual fields First Name, Name, User Logon Name and give a strong password to the account (BESAdmin – Recommended Username) and then click next.
5.  Select the Mailbox Database you wish to add the account too, click on next and then new

Once that process has been completed successfully, you then need to configure some settings within Exchange Server 2007 using the Exchange Management Shell

1. Launch the Exchange Management Shell
2. Type in the following PowerShell command to set ViewOnlyAdmin role for BESAdmin

add-exchangeadministrator “BESAdmin” -role ViewOnlyAdmin

1. Type in the following PowerShell command to assign the ms-Exch-Store-Admin, Receive As, and Send-As Permissions for BESAdmin

get-mailboxserver “ContosoServer” | add-adpermission -user “BESAdmin” -accessrights ExtendedRight -extendedrights Receive-As, ms-Exch-Store-Admin, Send-As

 Next we need to configure the server that will host the Blackberry Enterprise Server Express Software

1. Launch “Active Directory users and Computers”
2. Select the hive Builtin and double click ‘Administrators’
3. Choose the tab ‘Members’ and click on Add, Type ‘BESAdmin’ and click ‘Check Names’, Click Ok, Apply and then Ok

1. Launch Group Policy Management
2. Right click ‘Default Domain Controllers Policy’ and then choose ‘Edit’
3. Choose Computer Configuration –> Windows Settings –> Security Settings –> Local Policies –> User Rights Assignment and double right click in the right pane ‘Allow log on locally’
4. Click ‘Add User or Group’ , Browse, Type ‘BESAdmin’ and click ‘Check Names’  click on Ok, Apply and then Ok.
5. Scroll down and double click ‘Log on as a Service’
6. Check ‘Define these policy settings’ and click ‘Add User or Group’
7. Click Browse, type ‘BESAdmin’ and click ‘Check Names’ and then Click on Ok, Ok, Apply and then Ok

Once you have completed these steps, we will then need to configure the Database Server and Run the BES Setup but before we can do that we need to get you on to the RIM website to Register and Download the Software and get all of the Licence/CAL keys you will be required to enter later.

http://na.blackberry.com/eng/services/business/server/express

NOTE: You need to now Logoff from the Server and logon with the BESAdmin account you created earlier, if you DO NOT do this then the whole thing will just fail and give you a headache!

Run the download, unzip the contents into a folder C:\BESExpress and the setup will start automatically.

Make sure that on the prompt it states you are logged in with the BESAdmin account and the domain shown is correct.

Fill in the details asked for, Username/Organisation/Country and accept the Licence Agreement.

On the next screen choose ‘Create a Blackberry Configuration Database’ and click on next, choose the defaults and then click on next, go through the checklist and make sure you do not see any warnings. If you do then please correct the warnings by installing any components you may be missing. (If your server is up to date then this should be fine).

On SBS2008 there is already a SQL 2005 Instance, you can choose to install the database into the SBSMonitoring Instance but I would recommend that you create a dedicated instance, the BES Express software will look after all of that for you.

So, on the next screen choose “Install Microsoft SQL Server 2005 Express Edition SP3 on this Computer”, and then click on next.

Fill in the Password and the name of your server and then click on next, make sure you type in this information correctly otherwise again you will have problems further down the line, review your settings and click Install.

Go and grab yourself a drink, and some lunch if it’s that time already and when you return it should be prompting you to restart the server. After the server has restarted make sure you logon again with the BESAdmin account otherwise it won’t continue the setup.

*NOTE it won’t fail if you logon with Administrator by accident, just logoff and login as the right user.

Once you have logged back on to the server, the installation should pop back up for you on screen, leave the settings as they are on screen and select next.

Wait a couple of seconds and then you will be asked to create the BESMgmt Database, Choose Yes and then the database will be created, Click on Ok once you the Success Info Prompts.

On the next screen you will be asked to fill in the CAL Key, SRP Identifier and Authentication Key, Click on Verify on both SRP Host and SRP Authentication Information, upon success click next

On the next screen, fill in the name of your server and the mailbox field is the user you created earlier BESAdmin, Select ‘Check Name’ and then Apply and Ok

Next, type in a password for the SSL Certificate and click on next

On the next screen type in the account credentials to allow the Blackberry Administration Service to Authenticate users in Microsoft Active Directory, NOTE: DO NOT use the BESAdmin account here, Use the account you created upon Installation of the Server Operating System i.e. Administrator and then click Next.

On the next screen I chose to use a Non Active Directory Account to manage the Blackberry Accounts, So Select “Use Blackberry Administration Services Authentication” and type in a Secure Password, and then click next.

Nearly Finished, Click on “Start Services” on the next page and sit back and wait in suspense, click on next and then you should see the results come back as Successful.

Then make a Note/Save the URL’s and then click on Finish

Finally, configure the firewall on the Small Business Server to allow access to the Blackberry Administration Service and Web Desktop Manager. I personally chose to do this via Command Prompt but it can be doing using the GUI via Control Panel.

1. Launch Command Prompt (Start > Run > CMD > Enter)
2. Type netsh firewall add portopening TCP 3443 “BESExpress Management Port” and press Enter.

Tags: Blackberry Enterprise Server Express, Small Business Server 2008

Cannot promote server as domain controller – Server 2012 Migratation

When migrating an SBS 2003 box to Server 2012, when it runs through the migration wizard it displays the error

Cannot promote server as domain controller

Upon checking the logs and the Sites and Services it creates Domain Controller but the NTDS connector are missing

Upon checking the settings for the SBS 2003 box , the primary DNS server for the box had been set ( by another company ) to the Gateway/Router instead of itself ( Either 127.0.0.1 or the Local IP of the Server ). I’m not sure how the Domain had been working before hand , but after setting this to the correct value I retried the Wizard and the wizard ran through and completed successfully.

Tags: Cannot promote server as domain controller, Server 2012

Changing the page setup ( Margins ) do not work in Outlook

Changing the page setup in Outlook proves useless because HTML messages are not printed by Outlook itself – it uses IE’s print settings to print.

So if your margins are off you must change them within Internet Explorer to fix the problem.

 1.Open Internet Explorer

 2.Go to “File” in the menu bar

 3.Choose “Page Setup”

 4.Change the Margins

Exchange 2010 ( SBS 2011 ) Mail Enabled Public Folder Produces TOREDRV.Deliver.Exception:ObjectNotFoundException

After a Windows Update, Mail Enabled Public Folders produce the following NDR

#554 5.2.0 STOREDRV.Deliver.Exception:ObjectNotFoundException; Failed to process message due to a permanent exception with message The Active Directory user wasn’t found. ObjectNotFoundException: The Active Directory user wasn’t found. ##

To Fix this do the following :

Go to adsiedit.msc.

Locate: CN=Configuration\services\Microsoft Exchange\Administrative Groups\Name of Legacy Admin Group\Servers

Check that the “Servers” container is empty. If so, right-click on “Servers” and delete the container.

Tags: exchange 2010, Mail Enabled Public Folder, TOREDRV.Deliver.Exception:ObjectNotFoundException