Sysprep Unattend File in Windows Server 2008

http://www.curuit.com/sysprep-unattend-file-in-windows-server-2008-20071228101/

userAccountControl: 0x82020 = ( UF_PASSWD_NOTREQD | UF_SERVER_TRUST_ACCOUNT | UF_TRUSTED_FOR_DELEGATION );

To restore the default "userAccountControl" attribute value for the computer account you can either use LDP or ADSIEDIT.MSC. Here I will explain how to change it with ADSIEDIT.MSC.

When using ADSIEDIT.MSC:

•From the command-line start ADSIEDIT.MSC
•Connect to the domain NC
•Navigate to the OU or container that contains the computer account of the server for which the "userAccountControl" attribute value must be changed
•Right click on the computer account of the server for which the "userAccountControl" attribute value must be changed and retrieve the properties
•Scroll down to the "userAccountControl" attribute
•You should see some value:
•If the server already is a DC change the value to: 532480

Configuring multiple E-mail domains in exchange 2010

http://blog.shareef.info/2010/06/02/configuring-multiple-e-mail-domains-in-exchange-2010/

You get error code 0x80090016 whenever you attempt to create a new Scheduled Task on a Windows 2003 machine

4. Start your computer in Safe mode, and then log on as administrator.
5. Double-click My Computer, and then click Folder Options on the Tools menu.
6. On the View tab, click to select Show hidden files and folders, and then click OK.
7. Backup and then delete all of the files in the "C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18" folder.
8. Restart your computer, and then see if the issue is resolved.


http://blogs.msdn.com/b/john_daskalakis/archive/2009/04/07/9535705.aspx

ADMT Could Not Verify Auditing and TcpipClientSupport on Domains

Things to check when you receive this error:

■The account you are using in the target domain to run ADMT needs to be in the source domain “Administrators” group.
■The {SOURCEDOMAIN}$$$ group exists in the source domain, if you have to create it, don’t add any members to it or it will fail.
■Ensure you have enabled auditing of account management in the source domain:
■Open domain controllers security policy
■Expand Local Policies -> Audit Policies
■Double-click “Audit account managment”, put a check in “Define these policy settings”, “Success”, & “Failure”

http://elderec.org/2011/06/admt-could-not-verify-auditing-and-tcpipclientsupport-on-domains/

(VZMutex lock failed. (Failed to acquire vm lock /vmfs/volumes/xxx/.vzmutex due to an SSH connection issue.))

(VZMutex lock failed. (Failed to acquire vm lock /vmfs/volumes/xxx/.vzmutex due to an SSH connection issue.))

http://www.blogger.com/img/blank.gif

Delegate the enable/disable accounts permission in Active Directory

To delegate the ability to enable and disable user accounts in Active Directory:

Launch Active Directory Users and Computers with adminsitrative credentials
Right click on the OU where you want to delegate the ability to enable and disable user accounts
Select the Active Directory security group that you want to delegate the ability to and press Next
Select Create Custom Task to Delegate and press Next
Under Delegate Control Of select the Only the following objects in the folder radio button
Select the User objects check box and press Next
Under Show these permissions uncheck General and select Property-specific
Select the Read userAccountControl and Write userAccountControl check boxes and press Next and Finish

Hoe to convert a a mailbot to a shared mailbox

Set-Mailbox ConfRoom1 -Type Shared

http://technet.microsoft.com/en-us/library/bb201749.aspx

Step-by-step Microsoft Lync 2010 Consolidated Standard Server Install Guide

I use the following link , and it worked like a charm.

http://imaucblog.com/archive/2010/09/15/step-by-step-microsoft-lync-2010-consolidated-standard-server-install-guide/

Delegate permission let one user to join pc to a domain

1. Click Start, click Run, type dsa.msc, and then click OK.
2. In the task pane, expand the domain node.
3. Locate and right-click the OU that you want to modify, and then click
Delegate Control.
4. In the Delegation of Control Wizard, click Next.
5. Click Add to add a specific user or a specific group to the Selected users
and groups list, and then click Next.
6. In the Tasks to Delegate page, click Create a custom task to delegate,
and then click Next.
7. Click Only the following objects in the folder, and then from the list,
click to select the following check boxes: . Computer objects
. Create selected objects in this folder
. Delete selected objects in this folder

8. Click Next.
9. In the Permissions list, click to select the following check boxes:. Reset
Password
. Validated write to DNS host name
. Read and write Account Restrictions
. Validated write to service principal name

10. Click Next, and then click Finish.
11. Close the "Active Directory Users and Computers" MMC snap-in.

good tool for Bulk Changes

ADModify.NET is a tool primarily utilized by Exchange and Active Directory administrators to facilitate bulk user attribute modifications. See http://blogs.technet.com/exchange/archive/2004/08/04/208045.aspx for launch details

How to cleanup the Exchange Catalog Data after a mbdc move

So for example I have a mailbox that resided at the following: E:\Mailbox\USMBDB03 and after moving the DB to F:\ the Catalog data is still there: E:\Mailbox\USMBDB03\CatalogData-4aa4fde6-634a-4845-b62f-d853c52a7536-0ba86735-c7aa-4fd7-a497-5e36462e842d

Open up Exchange Powershell and run the following CMD:

Set-MailboxDatabase "US MBDB Users D-F" -IndexEnabled $false

Move the catalog file to an alt location until everything is said and done.

then do a Set-MailboxDatabase "US MBDB Users D-F" -IndexEnabled $true

Reference:

Automatic workstation object removal

You can use dsquery command to find inactive computers and then delete them
with dsrm.
dsquery computer domainroot -inactive NumberOfWeeks | dsrm -noprompt



http://technet.microsoft.com/en-us/library/cc755655(WS.10).aspx

Best practices the following have been disabled on each server

· Windows Firewall

· TCP Chimney

· IPV6

· RSS

· Network DMA

- Autotunning

Syntax: netsh interface tcp set global autotuninglevel=disabled

You need to set permissions on each mailbox database for BES when running in an Exchange 2010 env.

Unable to reply to email on BES device

I was getting the following errors in the application logs on the BES server:

"xxx"

So a restart of the server resolved the issues, and I was able to reply to email.

Messages stuck in Exchange 2010 queue for certain email domains

I set the FQDN of the SMTP connector on the HT and disabled autotuning via the folowing syntax:

netsh interface tcp set global autotuninglevel=disabled