20090603

exchange 2010 and ws08

I just noticed that removing PowerShell from Server 2008, and installing the PowerShell v2 CTP3 version results in the Server Manager not knowing that PowerShell V2 got installed.

image

Control Panel knows about it.

image

I wish we could have ONE place to look, ONE place manage this stuff.  I thought we were really onto something with the ServerManager route, but then MSFT does this.

And oh, BTW, the PS CTP3 will not remove the existing PS.  Arrgh.

20090513

The Black Swan

Started reading “The Black Swan” by Nassim Nicholas Taleb (whoever he is).  This item hit my reading list because of a recommendation regarding (believe it or not) BCDR (Business Continuity/Disaster Recovery) discussions in a recent training event.

The “hired gun” was pontificating (and doing very well, I might add) at some BCDR point, when, out came a reference to this book.

I try hard to learn from everything I do; I also admit that I have severe shortcomings in this area - but I work on it.  So when this pontificator spouted this BCDR drivel, I wrote down the name of the book, and we moved on.  However, by the end of the session, I had added the book to my shopping cart on Amazon.

Two reasons.  Numero Uno, Andrew Ehrensing (the hired gun) impressed the hell out of me - if he thought this book was worth reading, maybe there was something to it.  Number 2, the guns’ soliloquy made a tremendous amount of sense - I intend to make reference to it the next time I am in front of a customer. Ergo, I needed to at least skim the material so I could nominally refer to it.

Wow.  I just finished the prologue.  If the rest of this book is as good as the opening, then this is a real gem.

Thank you Andrew!

20090317

Install Exchange 2007 SP1 prerequisites on Server 2008

 

Note: No Server 2008 Core - must be full version

  • This does NOT cover setting up for clustering.
  • This does not cover NLB

I don't think you can have an Exchange Server without having PowerShell or the management tools; therefore, you will see that each section has PowerShell and management tool support. By having the management tools on each server, you will be able to manage the Exchange Organization from any role server. Exchange 2007 server should have things like dsa.msc, so you will also see the RSAT-ADDC install listed. I also think that not enabling the Outlook Anywhere (RPC/HTTP) is a crime, as is not using SSL on that component, so you will see that listed for the CAS role also (although not the SSL part).

At the very bottom, you will see a "single server" section that will install ws08 support for a server that will be CAS, HT, MBX, and UM.  The first few sections for Powershell, IIS, and RPC proxy are just for reference.

Feel free to cut and paste to fit your needs.


#PowerShell install

ServerManagerCmd -i PowerShell

#IIS

ServerManagerCmd -i Web-Server
ServerManagerCmd -i Web-ISAPI-Ext
ServerManagerCmd -i Web-Metabase
ServerManagerCmd -i Web-Lgcy-Mgmt-Console
ServerManagerCmd -i Web-Basic-Auth
ServerManagerCmd -i Web-Digest-Auth
ServerManagerCmd -i Web-Windows-Auth
ServerManagerCmd -i Web-Dyn-Compression

#RPC Proxy

ServerManagerCmd -i RPC-over-HTTP-proxy

# Mgmt Tools support

ServerManagerCmd -i Web-Metabase
ServerManagerCmd -i Web-Lgcy-Mgmt-Console

#MBX

ServerManagerCmd -i PowerShell

ServerManagerCmd –i RSAT-ADDC
ServerManagerCmd -i Web-Server
ServerManagerCmd -i Web-ISAPI-Ext
ServerManagerCmd -i Web-Metabase
ServerManagerCmd -i Web-Lgcy-Mgmt-Console
ServerManagerCmd -i Web-Basic-Auth
ServerManagerCmd -i Web-Windows-Auth

ServerManagerCmd -i Web-Metabase
ServerManagerCmd -i Web-Lgcy-Mgmt-Console

#CAS
ServerManagerCmd -i PowerShell

ServerManagerCmd –i RSAT-ADDC

ServerManagerCmd -i Web-Server
ServerManagerCmd -i Web-ISAPI-Ext
ServerManagerCmd -i Web-Metabase
ServerManagerCmd -i Web-Lgcy-Mgmt-Console
ServerManagerCmd -i Web-Basic-Auth
ServerManagerCmd -i Web-Digest-Auth
ServerManagerCmd -i Web-Windows-Auth
ServerManagerCmd -i Web-Dyn-Compression

ServerManagerCmd -i RPC-over-HTTP-proxy

#HT
ServerManagerCmd -i PowerShell

ServerManagerCmd –i RSAT-ADDC

ServerManagerCmd -i Web-Metabase
ServerManagerCmd -i Web-Lgcy-Mgmt-Console

#UM
ServerManagerCmd -i PowerShell
ServerManagerCmd -i Desktop-Experience

ServerManagerCmd –i RSAT-ADDC

ServerManagerCmd -i Web-Metabase
ServerManagerCmd -i Web-Lgcy-Mgmt-Console

#Edge
ServerManagerCmd -i PowerShell
ServerManagerCmd -i ADLDS

ServerManagerCmd -i Web-Metabase
ServerManagerCmd -i Web-Lgcy-Mgmt-Console

#Single Server (CAS, HT, MBX, UM)

ServerManagerCmd -i PowerShell

ServerManagerCmd -i RSAT-ADDC
ServerManagerCmd -i Web-Server
ServerManagerCmd -i Web-ISAPI-Ext
ServerManagerCmd -i Web-Metabase
ServerManagerCmd -i Web-Lgcy-Mgmt-Console
ServerManagerCmd -i Web-Basic-Auth
ServerManagerCmd -i Web-Digest-Auth
ServerManagerCmd -i Web-Windows-Auth
ServerManagerCmd -i Web-Dyn-Compression
ServerManagerCmd -i RPC-over-HTTP-proxy
ServerManagerCmd -i Desktop-Experience

#end

windows update on ws08

Just ran into a really stupid issue.

Silly me, I decided to fully update a ws08 server before installing Exchange 2007 SP1 onto that host.

BITS was on, Update was set to notify but don’t download.

WS08 is actually a VM on hyper-v.  Internet access was good.

I could update update itself, and update got me the list of recommended updates and whatnot, complete with device drivers and everything, but it would not download anything.  

The oh-so-helpful result of running Windows Update was:  “windows update encountered an unknown error 80200010”

None of the fixes worked, but I did find a little blurb that indicated that the error code meant that there was no valid network.  Bullshit says I.  Alas, nothing fixed it.  Only 67 returns in Google for that error phrase.  I tried them all, but number 67 was the hint about “no network.”  After verifying the network was indeed there, I cycled the NIC.

Walla!  Success.  You must be kidding me.  When the VM first started, I had fat-fingered the default gateway, and I am betting that the BITS never picked up on me fixing that…but cycling the NIC caused it to reread.

20090302

TSA Parasites

I am on my way to Oakland this morning.  Whilst standing in yet another line at the airport, I observed our government at work.

No less than 16 TSA employees, 14 of them doing nothing.  To be fair, and politically correct, the Rastafarian-looking dude was working at loading and humping bags back and forth.  One other guy was pawing through (random?) bags.  Sneezed on a couple of them.  In the 15 minutes or so that I observed these high-achieving union employees, I never saw more than 2 of them working at any time.

I assume that the color of the shirts denotes some sort of hierarchy – the folks in the blue shirts were serious nose-pickers.

The scary part of all this is that this will NEVER go away.  We are stuck with these people and the entire tax burden until such time as the government collapses – with ever higher wages, ever higher retirement and benefits, and ever less actual security.  These people were working where when this glorious dole-based opportunity came along?

Let us not discuss the baggage screening area where the even less motivated were checking ID and boarding passes.  I got through the screening so quickly, I wonder if anyone with more than two or three brain cells actually screened anything.  What exactly do we think, as tax payers, is being accomplished with all of this activity? Does this really make people feel safer; and because we “feel” it, we are?

Moo.  Or maybe baah.

20090227

The Forgotten Man

I was introduced to this essay yesterday.  Written by William Graham Sumner d. 1910.  So appropriate then, and even more so today.  Classic.  I cannot believe I had never seen this before.

"The Forgotten Man"
By William Graham Sumner.1

The type and formula of most schemes of philanthropy or humanitarianism is this: A and B put their heads together to decide what C shall be made to do for D. The radical vice of all these schemes, from a sociological point of view, is that C is not allowed a voice in the matter, and his position, character, and interests, as well as the ultimate effects on society through C's interests, are entirely overlooked. I call C the Forgotten Man. For once let us look him up and consider his case, for the characteristic of all social doctors is, that they fix their minds on some man or group of men whose case appeals to the sympathies and the imagination, and they plan remedies addressed to the particular trouble; they do not understand that all the parts of society hold together, and that forces which are set in action act and react throughout the whole organism, until an equilibrium is produced by a re-adjustment of all interests and rights. They therefore ignore entirely the source from which they must draw all the energy which they employ in their remedies, and they ignore all the effects on other members of society than the ones they have in view. They are always under the dominion of the superstition of government, and, forgetting that a government produces nothing at all, they leave out of sight the first fact to be remembered in all social discussion - that the State cannot get a cent for any man without taking it from some other man, and this latter must be a man who has produced and saved it. This latter is the Forgotten Man.
The friends of humanity start out with certain benevolent feelings toward "the poor," "the weak," "the laborers," and others of whom they make pets. They generalize these classes, and render them impersonal, and so constitute the classes into social pets. They turn to other classes and appeal to sympathy and generosity, and to all the other noble sentiments of the human heart. Action in the line proposed consists in a transfer of capital from the better off to the worse off. Capital, however, as we have seen, is the force by which civilization is maintained and carried on. The same piece of capital cannot be used in two ways. Every bit of capital, therefore, which is given to a shiftless and inefficient member of society, who makes no return for it, is diverted from a reproductive use; but if it was put into reproductive use, it would have to be granted in wages to an efficient and productive laborer. Hence the real sufferer by that kind of benevolence which consists in an expenditure of capital to protect the good-for-nothing is the industrious laborer. The latter, however, is never thought of in this connection. It is assumed that he is provided for and out of the account. Such a notion only shows how little true notions of political economy have as yet become popularized. There is an almost invincible prejudice that a man who gives a dollar to a beggar is generous and kind-hearted, but that a man who refuses the beggar and puts the dollar in a savings bank is stingy and mean. The former is putting capital where it is very sure to be wasted, and where it will be a kind of seed for a long succession of future dollars, which must be wasted to ward off a greater strain on the sympathies than would have been occasioned by a refusal in the first place. Inasmuch as the dollar might have been turned into capital and given to a laborer who, while earning it, would have reproduced it, it must be regarded as taken from the latter. When a millionaire gives a dollar to a beggar the gain of utility to the beggar is enormous, and the loss of utility to the millionaire is insignificant. Generally the discussion is allowed to rest there. But if the millionaire makes capital of the dollar, it must go upon the labor market, as a demand for productive services. Hence there is another party in interest - the person who supplies productive services. There always are two parties. The second one is always the Forgotten Man, and any one who wants to truly understand the matter in question must go and search for the Forgotten Man. He will be found to be worthy, industrious, independent, and self-supporting. He is not, technically, "poor" or "weak"; he minds his own business, and makes no complaint. Consequently the philanthropists never think of him, and trample on him.
We hear a great deal of schemes for "improving the condition of the working-man." In the United States the farther down we go in the grade of labor, the greater is the advantage which the laborer has over the higher classes. A hod-carrier or digger here can, by one day's labor, command many times more days' labor of a carpenter, surveyor, book-keeper, or doctor than an unskilled laborer in Europe could command by one day's labor. The same is true, in a less degree, of the carpenter, as compared with the book-keeper, surveyor, and doctor. This is why the United States is the great country for the unskilled laborer. The economic conditions all favor that class. There is a great continent to be subdued, and there is a fertile soil available to labor, with scarcely any need of capital. Hence the people who have the strong arms have what is most needed, and, if it were not for social consideration, higher education would not pay. Such being the case, the working-man needs no improvement in his condition except to be freed from the parasites who are living on him. All schemes for patronizing "the working classes" savor of condescension. They are impertinent and out of place in this free democracy. There is not, in fact, any such state of things or any such relation as would make projects of this kind appropriate. Such projects demoralize both parties, flattering the vanity of one and undermining the self-respect of the other.
For our present purpose it is most important to notice that if we lift any man up we must have a fulcrum, or point of reaction. In society that means that to lift one man up we push another down. The schemes for improving the condition of the working classes interfere in the competition of workmen with each other. The beneficiaries are selected by favoritism, and are apt to be those who have recommended themselves to the friends of humanity by language or conduct which does not betoken independence and energy. Those who suffer a corresponding depression by the interference are the independent and self-reliant, who once more are forgotten or passed over; and the friends of humanity once more appear, in their zeal to help somebody, to be trampling on those who are trying to help themselves.
Trades-unions adopt various devices for raising wages, and those who give their time to philanthropy are interested in these devices, and wish them success. They fix their minds entirely on the workmen for the time being in the trade, and do not take note of any other workmen as interested in the matter. It is supposed that the fight is between the workmen and their employers, and it is believed that one can give sympathy in that contest to the workmen without feeling responsibility for anything farther. It is soon seen, however, that the employer adds the trades-union and strike risk to the other risks of his business, and settles down to it philosophically. If, now, we go farther, we see that he takes it philosophically because he has passed the loss along on the public. It then appears that the public wealth has been diminished, and that the danger of a trade war, like the danger of a revolution, is a constant reduction of the well-being of all. So far, however, we have seen only things which could lower wages - nothing which could raise them. The employer is worried, but that does not raise wages. The public loses, but the loss goes to cover extra risk, and that does not raise wages.
A trades-union raises wages (aside from the legitimate and economic means notice in Chapter VI) by restricting the number of apprentices who may be taken into the trade. This device acts directly on the supply of laborers, and that produces effects on wages. If, however, the number of apprentices is limited, some are kept out who want to get in. Those who are in have, therefore, made a monopoly, and constituted themselves a privileged class on a basis exactly analogous to that of the old privileged aristocracies. But whatever is gained by this arrangement for those who are in is won at a greater loss to those who are kept out. Hence it is not upon the masters nor upon the public that trades-unions exert the pressure by which they raise wages; it is upon other persons of the labor class who want to get into the trades, but, not being able to do so, are pushed down into the unskilled labor class. These persons, however, are passed by entirely without notice in all the discussions about trades-unions. They are the Forgotten Men. But, since they want to get into the trade and win their living in it, it is fair to suppose that they are fit for it, would succeed at it, would do well for themselves and society in it; that is to say, that, of all persons interested or concerned, they most deserve our sympathy and attention.
The cases already mentioned involve no legislation. Society, however, maintains police, sheriffs, and various institutions, the object of which is to protect people against themselves - that is, against their own vices. Almost all legislative effort to prevent vice is really protective of vice, because all such legislation saves the vicious man from the penalty of his vice. Nature's remedies against vice are terrible. She removes the victims without pity. A drunkard in the gutter is just where he ought to be, according to the fitness and tendency of things. Nature has set up on him the process of decline and dissolution by which she removes things which have survived their usefulness. Gambling and other less mentionable vices carry their own penalties with them.
Now, we never can annihilate a penalty. We can only divert it from the head of the man who has incurred it to the heads of others who have not incurred it. A vast amount of "social reform" consists in just this operation. The consequence is that those who have gone astray, being relieved from Nature's fierce discipline, go on to worse, and that there is a constantly heavier burden for the others to bear. Who are the others? When we see a drunkard in the gutter we pity him. If a policeman picks him up, we say that society has interfered to save him from perishing. "Society" is a fine word, and it saves us the trouble of thinking. The industrious and sober workman, who is mulcted of a percentage of his day's wages to pay the policeman, is the one who bears the penalty. But he is the Forgotten Man. He passes by and is never noticed, because he has behaved himself, fulfilled his contracts, and asked for nothing.
The fallacy of all prohibitory, sumptuary, and moral legislation is the same. A and B determine to be teetotalers, which is often a wise determination, and sometimes a necessary one. If A and B are moved by considerations which seem to them good, that is enough. But A and B put their heads together to get a law passed which shall force C to be a teetotaler for the sake of D, who is in danger of drinking too much. There is no pressure on A and B. They are having their own way, and they like it. There is rarely any pressure on D. He does not like it, and evades it. The pressure all comes on C. The question then arises, Who is C? He is the man who wants alcoholic liquors for any honest purpose whatsoever, who would use his liberty without abusing it, who would occasion no public question, and trouble nobody at all. He is the Forgotten Man again, and as soon as he is drawn from his obscurity we see that he is just what each one of us ought to be.

_______________________________
NOTES:




1 William Graham Sumner (1840-1910) was a Professor of Political Economy and of Sociology at Yale. In the book in which I found this essay (Macmillan, 1916), the editors -- English Professors Berdan, Schultz and Joyce of Yale -- wrote a short introductory paragraph, as follows: "This brilliant essay by Professor Sumner illustrates the effective use of the deductive structure. In two paragraphs defining who is the Forgotten Man, the general principle is stated so fully that the reader unconsciously accepts it. But once the reader has accepted this principle, it is applied to the consideration of trades unions and temperance legislation, with startling results. The essay, then, consists in the statement of a general principle, followed by two illustrations. Just as the form resolves itself into a simple arrangement, so the style is simple. There is no attempt at rhetorical exaggeration, no appeal to the emotions. It does read, and it is intended to read, as an ordinary exercise of the logical faculty. This mathematical effect is gained by the device of using the A and B that are associated in the mind with school problems, And the brilliance of the essay lies in the apparent inevitability with which the author reaches conclusions widely differing from conventional views. Since the importance of the essay lies exactly in these applications, actually the structure approaches the deductive type.





20090213

Migration from LCS to OCS R2

In my new project, I am involved in figuring out the migration of LCS 2005 to OCS 2007 R2.

Should you be in the same boat, you may appreciate the following list of prerequisites you will need on some/all of your LCS servers. And I suggest your read the supporting information on these updates and hotfixes.  There are some stumbling points.

Ensure that Live Communications Server 2005 servers are patched with the following updates:

Live Communications Server Service Pack 1: This upgrade to the base LCS 2005 is available at http://www.microsoft.com/downloads/details.aspx?FamilyID=3508860C-2616-4B5A-BA00-353BE599A7B1&displaylang=en

Update for Live Communications Server 2005; February 10, 2006, available at http://support.microsoft.com/kb/911996

Live Communications Server 2005 post-Service Pack1 hotfix package: July 21, 2006, available at http://support.microsoft.com/kb/921543

Update for Live Communications Server 2005 Service Pack 1: September 2008 available at http://support.microsoft.com/kb/950614

Update your Communicator 2005 clients with the Communicator 2005 hotfix package: December 19, 2008 available at http://support.microsoft.com/kb/949280

Enjoy!

20090211

Office Communicator 2007 R2 Install

 

What you need:

  1. You do have Outlook installed, yes?
  2. Communicator.msi – get this from your network administrator.  This is licensed software.  Referred to in some circles as “MOC”
  3. .Net 3.5 SP1 with an update.  The update to .Net 3.5 SP1 is operating system specific.  Get the update here (MS KB959209).  Get .Net 3.5 SP1 here.
  4. MS KB936864 (Office 2007) or Office 2007 SP1.  Here is the link to the hotfix, you are on your own for the Office 2007 SP1.
  5. ConfAddins_Setup Get it here.  This allows Outlook to function with live meeting scheduling.
  6. LMSetup Get it here.  Live Meeting client.  What will you do without it?
  7. MS XML 6 SP1. This install is operating system specific. Get it here. 

Ok, let us get started.

  1. Sign out of, and exit both Office Communicator 2007 (or LCS 2005), and Outlook.  The MOC installer wants them closed. YMMV.
  2. Install the .Net 3.5 SP1, followed by the update from MS KB959209.
  3. Install the MS XML 6 SP1.
  4. Ensure that you are either Office 2007 SP1 or have the hotfix as mentioned above (MS KB936864).
  5. Execute the Communicator.msi.  This will uninstall what is already there and install itself whilst retaining all settings.
  6. Execute ConfAddins_setup.exe. This will uninstall what is already there and install itself whilst retaining all settings.
  7. Execute LMSETUP.exe.  This will uninstall what is already there and install itself whilst retaining all settings.

20090210

invalid static URL in R2 MOC/Svr/Pool

 

Just ran across a strange problem.

One user could not be contacted by other users even though their presence was good.

This user could initiate conversations, and then things worked normally.

logging revealed the following:

TL_INFO(TF_PROTOCOL) [2]0AAC.0F60::02/10/2009-00:06:40.517.0000cb04 (SIPStack,SIPAdminLog::TraceProtocolRecord:SIPAdminLog.cpp(122))$$begin_record
Instance-Id: 00013F2B
Direction: outgoing;source="local"
Peer: 1.2.3.4:56634
Message-Type: response
Start-Line: SIP/2.0 500 The server encountered an unexpected internal error
From: "user"<sip:user@domain.org>;tag=3703bcb871;epid=de577344ca
To: <sip:user2@domain.org>;tag=A1D2F034A80C8DC2C22BC2B0BB538B47
CSeq: 1 INVITE
Call-ID: 4f0e2c32a0ac42b8a3ebfa96c1704671
Proxy-Authentication-Info: Kerberos rspauth="602306092A864886F71201020201011100FFFFFFFF5A639D1C74445CDE716249160B5E67D5", srand="99E853C4", snum="27", opaque="753DF002", qop="auth", targetname="sip/OCS1.domain.org", realm="SIP Communications Service"
Via: SIP/2.0/TLS 1.2.3.4:56634;ms-received-port=56634;ms-received-cid=1F9900
ms-diagnostics: 1;reason="Service Unavailable";source="OCS1.domain.org";AppUri="
http://www.microsoft.com/LCS/ApiModule";reason="The application specified an invalid static forwarding url"
Content-Length: 0
Message-Body: –
$$end_record

Resolution:  removed a bogus entry in AD user object.

Telephones| IP Phones | Other

There was a text entry there rather than numeric.

Question: What is the mechanics of the UR stuffing this bogus value into somewhere that caused this failure?  I doubt I will ever know.

20090127

lcs 2005 revisited - ew

For the morbidly curious, in support of the LCS 2005 Migration Document project, I have been building (yet another) lab.

As of now, I have a fully functional (no PSTN :( ) LCS 2005 SP1 pool, Access Proxy, sited behind an ISA 2006.  And it connected first time through from my home network via the AP.

All this goodness running under Hyper-V.

Servers are ws03 r2 sp2.

Client is currently OC2005 on XP and OC2005 on win7beta.

A few notes:

WS03 r2 SP2 breaks ISA 2006 (I had forgotten).  This requires two separate reg hacks (disable RSS and Task offload)

Hklm\system\currentcontrolset\services\tcpip\parameters [dword EnableRSS = 0] [DisableTaskOffload = 1]

DNS stinks for LCS.

Certs came from a standalone CA on the DC.  An enterprise CA would not give me private keys on the certs unless I moved the DC to Server Enterprise which I was unwilling to do.

It is amazing what we have to re-learn at times, eh wot?

20090122

CA woes

My new project is kicking off, and my first task is to build my lab.

As the new project involves LCS 2005, I need to be able to issue PKI, so I installed my CA  - but I did it as an Enterprise CA on a ws03 Std server.

Because LCS 2005 is such a bear on certs, my first round of testing on the CA involved getting some test certs with SAN entries that included exportable private keys.  Just to make sure I can do it and have it be right the first time through.

This forced me to relearn certutil.exe and certreq.exe.

I also relearned certreq.inf files....very handy - I cannot believe I ever stopped using that method.  Well, I know why: OCS 2007 has a cert wizard that works really well.

At any rate it seems that there is no way to get an Enterprise CA running on ws03/08 standard edition server to give you private keys.  The issue is converting/duplicating the existing webserver template which makes the new template a v2 template - and to use that new template requires enterprise server edition.  arrrgh.

No amount of tweaking the inf file allowed me to get a private key with the cert - the private key simply is not included with the issued certificate.

My search for a solution will continue, as I need this to work.  My short term solution was to fall back to a Standalone CA, which allows the private keys very easily.  arrgh.  I wanted an Enterprise CA.

20080926

change of venue

Well, WaMu is gone.

6th largest banking entity in the US bought out.  Pennies on the dollar.

Makes you wonder - if 2% of the mortgages in the US have defaulted, and there is a spectre of all the ARMS going down also, what is the true value of the property?

I know that the county I live in has always raised the taxes every year - an action which contributes to my property value going up.  If my property value deflates by 20-30% due to this "financial crisis," will the county lower my taxes by a like amount? 

Somehow, I do not think so.  Money grubbers will always spend more than they can bring in.  Politicians will always take actions that increase their clout and monetary control (equates to the same thing, eh?).

Bastids.

20080702

Quote of the Day

I saw this in reference to the liberal (generally) media of the Western culture (both Euro and USA).

"When the eagles are silent, the parrots begin to jabber."

Winston Churchill

20080625

OCS 2007 passwords

Just had serious fun with a failing install of OCS SE.

Ended up being service account passwords that had a space in them.

WOW.  You gotta be kidding me.

There are a variety of hotfix and QFE and updates that purportedly fix this, but how the fsck are you supposed to get that stuff in place when the silly thing won't even finish the install?

AAR, changed the passwords and now we are good.

 

Dayum!

20080609

OCS 2007 and ISA 2006

Do you have a need to publish the various OCS 2007 components to the internet for remote users, federation, PIC and the like?

Go here for an awesome tutorial on how to accomplish this.

 

http://www.isaserver.org/tutorials/OCS-2007-ISA-2006-Firewall-Design-Architecture.html

20080514

Beer and Taxes

For those who understand, no explanation is needed. For those who do not understand, no explanation is possible.

Let's see if the politicians can figure this out...

Tax System explained in beer.

Suppose that every day, ten men go out for beer and the bill for all ten comes to $100. If they paid their bill the way we pay our taxes, it would go something like this:

  • The first four men (the poorest) would pay nothing.
  • The fifth would pay $1.
  • The sixth would pay $3.
  • The seventh would pay $7.
  • The eighth would pay $12.
  • The ninth would pay $18.
  • The tenth man (the richest) would pay $59.

So, that's what they decided to do.
The ten men drank in the bar every day and seemed quite happy with the arrangement, until one day, the owner threw them a curve. "Since you are all such good customers," he said, "I'm going to reduce the cost of your daily beer by $20."Drinks for the ten now cost just $80.
The group still wanted to pay their bill the way we pay our taxes so the first four men were unaffected. They would still drink for free.

But what about the other six men - the paying customers? How could they divide the $20 windfall so that everyone would get his 'fair share?'
They realized that $20 divided by six is $3.33. But if they subtracted that from everybody's share, then the fifth man and the sixth man would each end up being paid to drink his beer. So, the bar owner suggested that it would be fair to reduce each man's bill by roughly the same amount, and he proceeded to work out the amounts each should pay.
And so:

  • The fifth man, like the first four, now paid nothing (100% savings).
  • The sixth now paid $2 instead of $3 (33%savings).
  • The seventh now pays $5 instead of $7 (28%savings).
  • The eighth now paid $9 instead of $12 (25% savings).
  • The ninth now paid $14 instead of $18 ( 22% savings).
  • The tenth now paid $49 instead of $59 (16% savings).

Each of the six was better off than before. And the first four continued to drink for free. But once outside the restaurant, the men began to compare their savings.
"I only got a dollar out of the $20,"declared the sixth man. He pointed to the tenth man," but he got $10!"
"Yeah, that's right," exclaimed the fifth man. "I only saved a dollar, too. It's unfair that he got ten times more than I!"
"That's true!!" shouted the seventh man. "Why should he get $10 back when I got only two? The wealthy get all the breaks!"

"Wait a minute," yelled the first four men in unison. "We didn't get anything at all. The system exploits the poor!"
The nine men surrounded the tenth and beat him up.
The next night the tenth man didn't show up for drinks, so the nine sat down and had beers without him. But when it came time to pay the bill, they discovered something important. They didn't have enough money between all of them for even half of the bill!

And that, boys and girls, journalists and college professors, is how our tax system works. The people who pay the highest taxes get the most benefit from a tax reduction. Tax them too much, attack them for being wealthy, and they just may not show up anymore. In fact, they might start drinking overseas where the atmosphere is somewhat friendlier.

David R. Kamerschen, Ph.D.Professor of EconomicsUniversity of Georgia

20080508

e2k7 message size limits

not my material, I am just posting it.  Good stuff though!

http://exchangeshare.wordpress.com/2008/04/24/exchange-2007-where-to-set-message-mail-size-limit/

---

I was contacted by some person who bitched me out regarding me having cross posted some material, and that I did not link back, suck up, or somesuch.

So, I removed the content and replaced it with a link.

 

Seeing as how this blog is really so I can always access information I need, I sure wonder who this IAMME person is...Amit Tank did not seem to have any issue, I never claimed it was my own material, gees, something for free, and someone complains about it.

Go figure.

20080430

HT role sizing guide

This link here:  http://telnetport25.wordpress.com/2008/02/28/suggested-hub-transport-hardware-config-for-exchange-2007-installations-of-5000-users/

represents an excellent e2k7 HT role sizing guide.

Enjoy!

20080407

Standby Continuous Replication (SCR)

Exchange 2007 SCR Setup

(or, subtitled, Patience is a Virtue)

1. Make sure that the drive array setup for the source server and the target server are identical. At a bare minimum, the same drive letters must be available. With enough space.

a. For this specific example

i. F: (logs)

ii. G: (SG1\DB1)

iii. H: (SG2\DB2) (public folder DB)

iv.  Full paths are not needed upfront, but will work if they are present.  What is needed is the duplicate drive arrangement.  If the source server has the logs and whatnot on Drive F, then the target needs to have the same arrangement.

2. Ensure that the servers both have Exchange 2007 SP1

3. Modify the registry for remote streaming backup – this is “on” for RTM, “off” for SP1. This needs to be enabled or SCR will not work.

HKLM\System\CurrentControlSet\Services\MSExchangeIS\ParametersSystem
Name: Enable Remote Streaming Backup
Type: DWORD
Value: 0 = default behavior (remote backup disabled)
1 = remote backup enabled

4. Restart msexchangeis on each server.

5. Commands will work from each server, but for simplicity sake, we will operate commands from the target server because there is a chance that the update-storagegroupcopy may need to be run manually – and that requires working from the target server (same as CCR).

6. Commands that will be used – these are the same commands used for CCR and LCR. The difference is that SCR needs to have “-standbymachine targetserver)” at the end of them, or things don’t look right or work right.

a. Enable-storagegroupcopy

b. Suspend-storagegroupcopy

c. Resume-storagegroupcopy

d. Update-storagegroupcopy

e. Get-storagegroupcopystatus sourceserver\* -standbymachine targetserver

7. Enable-storagegroupcopy sourceserver\sg1 –replaylagtime 0.0:10:0 –truncationlagtime 0.0:10:0 –standbymachine targetserver

a. This enables the storagegroup for SCR, with a log file delay of 10 minutes, and waits for 10 more minutes before truncating the log file.

Replaylagtime- Time that the Microsoft Exchange Replication Service should wait before replaying logs. Default is 24 hours and max time is 7 days.

TruncationLagTime- Amount of time Microsoft Exchange Replication Service waits before truncating log files that have been copied to the target

b. Do this for each SG that is needed.  Be Patient!

c. Be patient after running this command. About five minutes will do.

d. If there is a need to manually seed, wait the five minutes.

a. If needed, update-storagegroupcopy sourceserver\SG1 –standbymachine targetserver

b. Be patient. The command should resume the storagegroupcopy status to active when it gets done.

OK. So we have good SCR:

clip_image002

20080327

e2k7 full access for a group

Do you have an email account in e2k7 that needs to grant full access to for a group of other people? Do they need to also be able to send-as that account?

1. Create the account.

2. Create a security group.

3. Populate the security group with the lucky individuals.

4. Run the following from the PS: add-mailboxpermission.

5. Step through the command. The zippy screen shot illustrates this. You can also give it the command on one long string if you can ever figure out the syntax.

a. The first identity is the account that is granting the rights.

b. The second identity is the account (in this case an SG) that needs to access/send-as.

6. You could modify this to just fullaccess or just sendas. Also receiveas.

7. Remove-mailboxpermission is the reverse of this process.

image

20080320

OMG funny

I had forgotten various foreign locations until I read this.

ROFL material.

http://www.banterist.com/archivefiles/000348.html

20080305

ws08/e2k7 backup

ws08 e2k7 ntbackup

 

http://cs.thefoleyhouse.co.uk/blogs/karl/archive/2008/02/10/how-to-backup-exchange-2007-on-server-2008.aspx

20080226

e2k7 antispam primer

Wow.

I have zero idea who this guy is, but he deserves a medal of sorts for this blog on Exchange IMF, be it 2003 or 2007.

Very nice material.

http://exchangepedia.com/blog/labels/IMF.html

Kudos to Bharat Suneja whoever you are.  Nicely done.

20080215

quote for today

In order to succeed, your desire for success should be greater than your fear of failure. - Bill Cosby

20080214

java hog

Everyone calls MS bloatware, heavy, overloaded, etc etc.

I just had to install Java Runtime to play some silly internet game.

This freakin thing wants 143MB of drive space so websites can have little plugin bullshit operate.

Wow.

And MS is bloatware. 

I wonder just how much of the "bloatware" is actually "I hate MS."