showing all posts
by lunarg on March 20th 2020, at 16:02

With the strong increase in hackers targeting Office 365 tenants, it may be useful to see who has Global Administrator access in your tenant. This can be done either via the Office 365 Portal but also through Powershell.

Note: be sure to install the required Powershell cmdlets before attempting this.

Connect to your Office 365 tenant:


To retrieve a list of users with the Global Administrator role, run this:

Get-MsolRoleMember -RoleObjectId $(Get-MsolRole -RoleName "Company Administrator").ObjectId | Select DisplayName,EmailAddress

You can append Export-Csv to export the list to a CSV-file.

by lunarg on March 17th 2020, at 09:26
If you wish to use TLS, or are using TLS authentication in a Office 365 Hybrid environment, and have manually changed or renewed the SSL certificate, you may still get errors about unable to initiate the TLS session (STARTTLS), even though the SSL certificate has been correctly renewed. Just setting the SSL certificate to be used with SMTP is not enough to make TLS work correctly. You also need to (re-)configure the TLS certificate name on your send and receive connectors.

As stated by the manual:

The TlsCertificateName parameter specifies the X.509 certificate to use with TLS sessions and secure mail. Valid input for this parameter is [I]Issuer[S]Subject. The Issuer val  ...
by lunarg on February 20th 2020, at 16:47

By default, macOS'es Quick Look functionality caches previews of all files, even those found on file shares or encrypted file systems. This may not be what you want. Fortunately, you can disable Quick Look caching.

Open Terminal and type in these commands:

qlmanage -r disablecache
qlmanage -r cache
rm -rf $TMPDIR/../C/
by lunarg on January 21st 2020, at 15:11
For people using Windows 10 LTSC builds, where the Windows Photos app is not available (and not installable), or for people with nostalgic feelings, you can restore the original Windows Photo Viewer from Windows 7.

The full article with registry hacks can be found here: It reactivates Windows Photo Viewer as an option to open image files with, though you still need to manually make the association.

In a corporate environment, to force the file association to Windows Photo Viewer for various common file types, you can do so through GPO by creating a file associations XML:

<?xml version="1.0&qu  ...
by lunarg on January 13th 2020, at 14:50

If you want to set the Dock size in macOS to a specific value, you can use the Terminal to do so:

defaults write tilesize -int 32; killall Dock

This will set the icon size to 32px, and then restart Dock. To get the current value of the Dock size:

defaults read tilesize
by lunarg on January 7th 2020, at 11:40
It is still possible to provision the Panasonic KX-TGP500B01 on 3CX version 16 (tested with 16 update 3), even though it is deprecated, by following the instructions outlined here.

The phone template is no longer available but can be obtained by fetching it from 3CX version 14 or 15. Most people no longer have this running so as an alternative, you can grab the template from this article. The firmware files are still available for download from the 3CX website (see forementioned link).

Note that the same limitations to the phone usage apply, and with the template it is not possible to add the base station as a FXS/DECT device. Only the first handset is provisionable, additional handsets mu  ...
by lunarg on December 12th 2019, at 12:53

The original version of Boxer is currently no longer in development. Being still 32-bit, it doesn't run on macOS Catalina. Luckily, some people are working on making Boxer 64-bit and have already some success.

You can follow the thread here on github and includes some working downloads.

by lunarg on December 9th 2019, at 16:54
I had an issue where vMotion would no longer work. When selecting the target host in the vCenter UI, the compatibility check would fail with the error:

A general system error occurred: Connection refused: The remote service is not running OR is overloaded, OR a firewall is rejecting connections.

A Google search for the issue reveals quite a bit of possible causes, mostly pointing to several more standard causes, which were all in order. When digging deeper in the logs, I stumbled upon the same message appearing in /storage/log/vmware/vmware-vpxd/vpxd.log.

Continuing the search, someone mentioned that it could be caused by services not started, which can easily be revealed when loggi  ...
by lunarg on December 9th 2019, at 15:45
You can disable password expiration from the command-line when logging on using SSH or by enabling the Bash shell. Note that you will need root privileges (i.e. root account) to make this change.

If shell access is not enabled, you need to enable it first:

Log on to the appliance management portal: https://ip-or-fqdn:5480/.

In the Navigator, click on Access. On the right side (Access Settings), click on the Edit button.

Tick the box next to Enable SSH Login for remote access, or if you rather prefer making the change through the VMRC, check the box Enable BASH Shell. Then click OK. The change is effective immediately.

Log on to the shell using either SSH (using PuTTY or another applicat  ...
by lunarg on December 2nd 2019, at 14:41

HPE has determined an issue with certain HPE SAS Solid State Drives (SSDs) which have a bug in their firmware causing a drive failure at 32,768 hours of operation. A critical patch has been releases to address the issue.

More information:

by lunarg on November 18th 2019, at 10:14
Updating the firmware on the Dell EMC PowerVault ME 4 series is pretty straight forward. If you are downloading the firmware on macOS, there's a small caveat though.

The download is delivered as a ZIP-file and contains a single binary file with the extension .bin. When unpacking this ZIP file through the Finder, the BIN file also gets unpacked. In order to successfully get the BIN file, you need to unpack the file through Terminal:

Download the latest firmware from

Start up Terminal and navigate to the folder where you downloaded the ZIP file containing the firmware.

Unzip the ZIP file using the "unzip" command:unzip GT280R004-01-dellemc.bin

This will unpack a  ...
by lunarg on November 14th 2019, at 15:38
Barracuda NextGen firewalls are managed either by webinterface or by using the FirewallAdmin (used to be: NGAdmin) management application. This is a standalone application consisting of a single executable which can be downloaded and run (like a portable app). The software does not need any installation but if you're using the software in a shared environment (such as a Terminal Server), it may be useful to "install" the software in a central location and create shortcuts to it, like if you were to install the software. By using NullSoft Scriptable Install System (NSIS), you can create an installer that does just that.

Because of copy- and redistribution rights, a prebuild install  ...
by lunarg on November 5th 2019, at 09:55
Ever since Windows 2000, by default, Numlock is turned off at the logon screen. This can be annoying if you use the numpad to type in (part of) your password. Luckily, you can change this behaviour through a registry fix.

The registry key to change is the same for all versions of Windows, but the value to enter is different depending on the version of Windows.

Fire up regedit.

Navigate to the key HKEY_USERS\.DEFAULT\Control Panel\Keyboard.

Look for the registry value InitialKeyboardIndicators, which needs to be changed to:Windows 7: set the value to 2

Windows 8, 8.1, 10 (older builds): set the value to 80000002

Windows 10 (newer builds): set the value to 2147483650

Note that for Win  ...
by lunarg on October 30th 2019, at 12:26

If you're looking for the Group Policy Templates (ADM/ADMX) for configuring Acrobat Reader DC, you can download them from the Adobe FTP:

by lunarg on October 29th 2019, at 13:01

There's no proper uninstall tool for Office on Mac. To completely uninstall Office for Mac, follow these official instructions:

by lunarg on October 29th 2019, at 12:59
To get rid of Microsoft AutoUpdate on Mac, remove these files and folders:

In the System Library (you need "sudo"):

Folder: /Library/Application Support/Microsoft/MAU2.0

File: /Library/LaunchDaemons/

File: /Library/LaunchAgents/

File: /Library/PrivilegedHelperTools/

In your user's Library (needs to be done for each user):

File: ~/Library/Preferences/

File: ~/Library/Preferences/

Folder: ~/Library/Application Support/Microsoft AU Daemon

Folder: ~/Library/Application Support/Microsoft Update Assistant

File: ~/L  ...
by lunarg on October 27th 2019, at 11:48

If you're not ready/able to upgrade to macOS Catalina, you can hide the update from Software Update.

Note that because of sudo, you'll need to be an admin on your Mac.

Open Terminal and enter the following command:

sudo softwareupdate --ignore "macOS Catalina"

Enter your password when prompted.

When you are ready to update, you can un-hide Catalina the same way:

sudo softwareupdate --reset-ignored
by lunarg on October 11th 2019, at 13:55

Not straightforward to find on the website (but with a little bit of Googling, here it is): an overview of the system requirements for VMware Fusion. All versions are listed:

by lunarg on October 9th 2019, at 15:19

A very nice article explaining how to migrate from an external Platform Service Controller to an embedded one:

A note about versioning: use the same version of the converge tool as the version of your vCenter and PSC. Otherwise the converge will most likely fail (as it did when using 6.7 tool on a 6.5 environment).

by lunarg on September 26th 2019, at 12:11
Check_MK, standalone or as part of OMD (The Open Monitoring Distribution), has built-in support for monitoring AeroHive wireless infrastructure through a Hive Manager. It uses the on-premise Hive Manager in order to collect information from devices registered to the Hive Manager.

Note for HMOL users
Because the agent uses the Hive Manager API, HMOL environments are not supported, as they do not allow the HM API to be enabled.

By default, HM API is turned off. Log on to the Hive Manager using an admin account. Go to:

Home → Administration → HiveManager Settings

Scroll down to API Authorization Settings, then click Settings.

Check Enable API Access, and type in a username, and t  ...
showing all posts
« February 2021»
« If the batteries of a TV remote run out, why do we press the buttons so much harder? »