showing all posts
by lunarg on May 25th 2016, at 15:59

You can quickly check which mailbox has e-mail forwarding settings enabled through the EMS:

Get-Mailbox -Filter {ForwardingAddress -ne $null} | FT Name,ForwardingAddress,DeliverToMailboxAndForward -Autosize

You can use the cmdlet above and process its output or export it to a CSV (using Export-CSV).

by lunarg on May 23rd 2016, at 15:27
Internet Explorer 8 is the last version for Windows XP and 2003, but with them no longer being supported, the download links have been removed as well, making it difficult to download and install it. Although XP and 2003 are quite outdated, certain scenarios still require the use of XP and/or 2003.

A default install of XP/2003 contains Internet Explorer 6, so not being able to download IE8 would result in those systems running an even more outdated and unsecure browser. While IE8 isn't that much better, I consider it a tiny bit more secure, hence this article...

For the moment, the standalone installation files still exist on the Microsoft servers, but they are no longer linked to from the  ...
by lunarg on May 18th 2016, at 16:09
You can add a secondary IP address on any interface (e.g.) without using VLAN tagging. This is useful if you have more than one subnet on your LAN, have no VLANs but want both subnets to be routable, without using an additional physical interface.

Create a static ARP entry for the gateway address of the additional subnet on the interface. Select the interface on which the subnet will be on. Enable Publish ARP. This will also automatically fill in the MAC address of the selected interface.

Create an address object for the additional subnet.

Add a static route for the additional subnet:Source: ANY

Destination: the address object you created in the previous step.

Service: ANY

Gateway: 0.0  ...
by lunarg on May 15th 2016, at 12:31
Control + Shift + Eject*Locks your Mac so you will have to unlock it with your password. Note that this will also sleep the display but the Mac will continue to run.
Command + Option + Eject*Puts the entire Mac asleep. This is the same as clicking on the Apple-icon at the left-top and choose "Sleep".

* Newer Macs: Eject = Power

To properly "lock" your Mac when using either of the shortcuts, you will have to enable Require password after sleep or screen saver begins (System Preferences → Security & Privacy). When not set to immediately, the configured delay will be used when using the shortcuts.

by lunarg on May 10th 2016, at 09:52

You can use Terminal in combination with AppleScript to set/change the wallpaper on your Mac. While not immediately obvious when you would need this, it might come in handy for automation purposes.

Open a Terminal and run the following command:

osascript -e 'tell application "Finder" to set desktop wallpaper to POSIX file "/path/to/file.jpg"'

Replace /path/to/file.jpg with the full path of the file you want to use. All common formats (JPG, PNG, etc.) are supported.

by lunarg on April 28th 2016, at 15:11
When pushing out the configuration from the HiveManager to Aerohive APs, and you have one or more captive portal in use, the update may fail with an error about unable to upload the captive portal files. The detailed error message reveals a problem with SCP (such as not enough free space to store files).

The problem is that the "web-directory", a local folder in the AP is taking up too much space on the flash memory. You can completely clear the folder through the CLI, then have the update put the captive portal files back.

Log on directly to the access point with SSH, using the device admin user and the CAPWAP password you specified in the HiveManager.

Clear the contents of the  ...
by lunarg on April 28th 2016, at 12:13

To look up MAC addresses on a Juniper switch (running JunOS), log on to the CLI, then type:

show ethernet-switching table brief

You can narrow down the search as well:

show ethernet-switching table brief | match 00:11:22:33:44:55
by lunarg on April 26th 2016, at 16:56
If you have an encrypted DMG on Mac and you need to access the contents on a Windows machine, you can use HFSExplorer!

Similar to Microsoft's Bitlocker, you can also encrypt entire drives/partitions with a high-grade security algorithm. And just like Bitlocker can encrypt virtual harddisks (VHD), Mac can encrypt volumes stored in a DMG. Out of the box, the two technologies are not at all compatible. But there are some third-party tools out there which allow you to access encrypted DMGs from Windows.

HFSExplorer is an open-source utility on Windows which can open any type of DMG and also supports opening encrypted DMGs. To install the software, you will need to have 32-bit Java installed (d  ...
by lunarg on April 22nd 2016, at 14:14

If you are not interested in Windows 10, but are plagued with the icon and prompts to upgrade to Windows 10, you can get rid of this. The Windows 10 Upgrade comes with Windows Update in KB3035583. You can uninstall this update in order to remove the Windows 10 Upgrade.

Note that after removal, you will have to hide the update from Windows Update to prevent it from being installed again.

by lunarg on April 22nd 2016, at 11:16

When upgrading Dell Force10 switches, keep in mind that starting from FTOS version 9.10, MTU per port can no longer be set to 12000. It is now limited to a maximum of 9216, making it the same maximum as the DNOS (Dell Networking) firmware. After the firmware update, the MTU of each port will automatically be adjusted.

For jumbo frames, this doesn't really change anything. An MTU 9216 on the switch still results in a datagram MTU of 9000, sufficient for e.g. Equallogic storage.

by lunarg on April 22nd 2016, at 11:09

You may encounter the problem with Windows Update to take an extreme amount of time to search for updates. Additionally, the Windows Update process (part of svchost.exe) runs at 100% CPU time and uses a large amount of memory.

You can resolve this by installing the optional KB3102810.

If you are installing a fresh copy of Windows 7 / 2008R2, it is also highly recommended to install KB3112343 before searching for other updates. This considerably speeds up the search for updates.

by lunarg on April 21st 2016, at 16:43
During the installation of ADMT PES (Password Export Server), the installer reports the encryption key password is wrong, even though you're absolutely sure it's the correct password. Although KB2004090 states this is for 3.1, the problem also exists on 3.2.

The reason for this is that the MSI installer does not elevate the session. If you are not logged on with the Administrator-account, the elevation does not occur automatically and the error mentioned above will appear, without any mention of elevation requirements.

To work around the issue, you can follow the steps below. This will ensure the MSI installer runs in an elevated session and the installation will continue as normal. Altern  ...
by lunarg on April 14th 2016, at 16:41

A bit hard to find through the search on Microsoft website, so here's the direct link:

by lunarg on April 12th 2016, at 14:04
by lunarg on April 8th 2016, at 17:22
Mac OSX 10.10.4 introduces TRIM support for third party SSDs. Until then, you had to use third party tools such as Trim Enabler in order to get TRIM on your SSD.

By default, when replacing your HDD with a third party SSD (i.e. an SSD not from Apple), TRIM is still not enabled. But you can run a simple command from a Terminal which will do just that:

sudo trimforce enable

This will enable TRIM on any SSD that supports it. Note that you will have to reboot for the changes to take effect.

If you wish to disable TRIM (why on earth would you do that?), you can run the same command, replacing enable with disable.

Note that trimforce does not completely replace Trim Enabler as it only enables   ...
by lunarg on April 8th 2016, at 17:08
Version 8 of the Equallogic PS firmware introduces a default policy for automatic snapshot creation. This means that by default, a daily snapshot will be created for each volume present in the group. The policy also states to keep 2 snapshots, which can be very space consuming, quickly filling up your Equallogic.

When upgrading the firmware to version 8 from an earlier version, this policy will automatically be created and activated, without telling you, causing headaches among those unaware of this change.

From the CLI, you can check whether the default policy is active:

grpparams default-snapshot-sched show

To turn off this policy from the CLI, type this:

grpparams default-snapshot-  ...
by lunarg on April 8th 2016, at 16:16

Windows checks its access to the internet by performing an HTTP GET to the following URL:

If the request succeeds, Windows determines that the connection to the internet is up. The mechanism uses whatever has been set up as an internet connection and will also use any configured proxy.

by lunarg on April 8th 2016, at 15:57

In-place online archive, this means having your online archive readily available in Outlook, is only available if you have Office ProPlus or a standalone version of Outlook. Outlook from Office Standard (including Office365 Business Premium) does not provide access to the online archive, and as such, it can only be opened from OWA.

by lunarg on March 17th 2016, at 13:30
There are a variety of methods to enable Remote Desktop and Remote Management from a script. This is particularly useful if you have many Core Servers and no SCCM or some other deployment system.


(Get-WmiObject Win32_TerminalServiceSetting -Namespace root\cimv2\terminalservices).SetAllowTsConnections(1,1)Set-ExecutionPolicy Unrestricted -ForceEnable-PSRemoting -Force

This enables Remote Desktop with NLA (first param), adjust the required firewall rules (second param), and finally, enables Remote Management.


cscript %windir%\system32\scregedit.wsf /ar 0cscript %windir%\system32\scregedit.wsf /cs 1

Like the PS variant, this enables Remote Desktop while the second line   ...
by lunarg on March 17th 2016, at 09:34
Aside from pulling power cables from a Dell server or blade, there are some other ways to (soft-)reset a frozen iDRAC.

Each rack server has an i-Button on the front panel of the server. To soft-reset iDRAC, hold down this button for 20 seconds.

If you still can log on using SSH, you can also reset it that way, saving you a trip to the server room. See the last part of this article to see how to do this.

To reset the iDRAC on a blade, you can log in on the CMC to do so.

From Chassis Overview, click Troubleshooting, then click on Reset Components (the third item in the submenu, next to Diagnostics).

If you cannot log in using the web interface but still have access to the unit through SSH  ...
showing all posts