Windows
Mozilla Thunderbird + strange behaviour
I got the strange behaviour of Thunderbird: couldn’t open list of letters in the same window, couldn’t create a new letter and so on. Resolved this way: Go to %Appdata%\Roaming\Thunderbird\Profiles\Your Profile and delete all except: Folders: Mail, Imap Mail; Files: key3, abook, prefs, signons. Start Thunderbird again – done.
Windows server 2012 + Shadow session issue
I got the strange behaviour after installing updates. When I connected to a user session and then disconnected the user couldn’t switch languages and the lang.panel disappeared. Resolved such way: Control Panel\All Control Panel Items\Language\Advanced settings\Let me set a different input method for each app window – put a tick. MS brought head ake as […]
NPS + regex
Some notice for using regex in NPS policies. I tried to filter users by a tab: Constraints – Called Station ID with regex: ^.+:MyAP But it didn’t work. So I used the same filter in a tab: Conditions – Called Station ID with regex: ^.+:MyAP Then it started to work.
Restore default security settings for Windows folder
secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose
EventViewer + Powershell + Event 4740
I attached this script to the event 4740 to notify users about issues with their acounts Script: ############################################ # Alert script for the security event 4740 # # Just attach it to the event # # 2015 # ############################################ # Get the […]
Events + Scheduler + Email when someone is connected via RDP
Just edit and import XML-file into Task Scheduler. There is XML: <?xml version=”1.0″ encoding=”UTF-16″?> <Task version=”1.2″ xmlns=”http://schemas.microsoft.com/windows/2004/02/mit/task”> <RegistrationInfo> <Date>2013-07-26T06:55:11.4860707</Date> <Author>Me</Author> <Description>Sends emails when server is accessed via RDP (Flag 10 – Remote connect).</Description> </RegistrationInfo> <Triggers> <EventTrigger> <Enabled>true</Enabled> <Subscription><QueryList><Query Id=”0″ Path=”Security”><Select Path=”Security”>*[System[(EventID=4624)]] and *[EventData[Data[@Name=’LogonType’] and (Data=10)]]</Select></Query></QueryList></Subscription> <ValueQueries> <Value name=”IpAddress”>Event/EventData/Data[@Name=”IpAddress”]</Value> <Value name=”TargetUserName”>Event/EventData/Data[@Name=”TargetUserName”]</Value> <Value name=”WorkstationName”>Event/EventData/Data[@Name=”WorkstationName”]</Value> <Value name=”eventRecordID”>Event/System/EventRecordID</Value> </ValueQueries> […]
Windows + powershell + handles count
Just a .ps1 script to find handle eaters. $s = [WmiSearcher]’Select * from Win32_Process where Handlecount > 1000′ $s.Get() |sort handlecount |ft handlecount,__path,name -auto
Automatically disable or re-enable IPv6 or its components
http://support.microsoft.com/kb/929852/en-us Create DWORD (32) HKLM\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters \DisabledComponents 0x20 – Priority IPv4 over IPv6 0x10 – Disable IPv6 except tunnel interfaces
Offline Address Book Fails to Download in Exchange 2010
I met the strange behavior with downloading OAB from Outlook after renewing a certificate – it was to long processing and seemed unsuccessfull (no new records were downloaded). Found this solution – it helped. Copy-pasted from: http://www.concurrency.com/blog/offline-address-book-fails-to-download-in-exchange-2010/ I ran into an interesting issue where the Exchange 2010 OAB failed to download to Outlook 2010, 2007, and […]
Windows events for auditing logon issues
Event Id Event Type Event Occured Reason 529 Failure Audit Logon Failure Unknown user name or bad Password 539 Failure Audit Logon Failure The user trying to logon is already locked 612 Policy Change Policy Changed General Audit Policy changed 643 Policy Change Domain Policy Changed Changes in Account Lockout and Password policis 644 Success […]