Category Archives: Windows

Delegates (Stedfortræder) problems in outlook

The error messages in Danish:
Indstillingerne for stedfortrædere blev ikke gemt korrekt. send på vegne af-liste kunne ikke aktiveres. Du har ikke den nødvendige tilladelse til at udføre denne handling på objektet.

The error messages in English:
The Delegates settings were not saved correctly.
Unable to activate send-on-behalf-of list.
You do not have sufficient permission to perform this operation on this object.

Solution:
In order to resolve this you need to give Write Personal Information permission to the SELF account on the user who is trying to add the delegate. To do this, follow these steps:-

Connect to your mail server.
Open Active Directory Users and Computers, and then click Advanced Features if it is not already selected on the View menu.
Expand your domain, and then locate the user’s Organisational Unit (OU).
In the right pane, right-click the user who is experiencing the delegate issue, and then click Properties.
Click the Security tab, locate the SELF account, and then click “Write Personal Information” and “Read Personal Information”.
Click OK

Vmware ESXi (ESX) 4.0 and Dell Openmanage SNMP Traps

First you need to install:
http://www.vmware.com/downloads/download.do?downloadGroup=VCLI40U1

This is a vmware CLI tools. Install it on a windows machine.
After you install remember to log out and the log in, else you will get this error:

Can’t load ‘C:/Program Files/VMware/VMware VI Remote CLI/Perl/site/lib/auto/XML/LibXML/Common/Common.dll’ for module XML::LibXML::Common: load_file:The specified module could not be found at C:/Program Files/VMware/VMware VI Remote CLI/Perl/lib/DynaLoader.pm line 230.

Then download Dell Openmanage  offline bundle to the same machine that you install Vmware vsphere CLI:

http://support.dell.com/support/downloads/download.aspx?c=us&cs=04&l=en&s=bsd&releaseid=R250294&SystemID=pwe_r710&servicetag=GWT2J4J&os=EIx4&osl=en&deviceid=21859&devlib=0&typecnt=0&vercnt=1&catid=-1&impid=-1&formatcnt=0&libid=36&typeid=-1&dateid=-1&formatid=-1&source=-1&fileid=365571

Put the Vmware ESXI into maintaince mode.

Start a dos prompt, and go to:

c:\program fileres\vmware\VMware vSphere CLI\bin

Type

vihostupdate.pl –server <IP address of ESXi 4 Host> -i -b <path to Dell OpenManage file>   (On the windows machine)

Reboot the Vmware ESXi machine.

vicfg-advcfg.pl –server <IP address of ESXi 4 Host> –set 1 UserVars.CIMoemProviderEnabled

Reboot the Vmware ESXi machine once again.

Make sure that the Dell openmanage is install on the ESXi.
/usr/lib/ext/dell/dataeng status if not then start it: /usr/lib/ext/dell/dataeng start (This commands should be run at the ESXi host)

vicfg-snmp.pl –server <IP address of ESXi 4 Host> -t <IP address of SNMP Traps destination>/<SNMP community> (On the windows machine)

And this command for enable SNMP Traps
vicfg-snmp.pl –server <IP address of ESXi 4 Host> -E (On the windows machine)

And then this to make Dell Openmanage happy about the SNMP traps configuration.
vicfg-snmp.pl –server <IP address of ESXi 4 Host> -c appmanager

Exit the maintenance mode.

If you need to test the SNMP traps you can run this command

vicfg-snmp.pl –server <IP address of ESXi 4 Host> -T  (On the windows machine)

And if you need to access the openmanage web interface, start Dell openmanage on a windows machine, and then logout (Right corner), and then on the login screen click on “Manage Remote Node”.

Type the ESXi hostname the username is root and the password is the password for root and tick the Ignore Certificate Warnings. Then click login.

Problems with KB967723 in windows update. Error code: 80070490

In Windows 2008, when you do a windows update you can receive a error code 80070490  when apply the update KB967723.

If you experience this problem, download the patch manually and install it.

Download i386 from here:

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=35c1d5a9-a953-4fc6-90c0-d2358c7b89e6

Download X64 from here:

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=6e46822e-f79d-492d-ad01-ee680ad324f5

Dell openmanage and Nimbus monitoring – SNMP Traps

Start Dell openmange.

Goto System -> Alert Management -> SNMP Traps.

Select all the information you want sent to Nimbus

Now startup services in adminsitration tools, and right click on SNMP Services and choice Properties.
Go to Traps, and type community name, in my example it is appmanager, and the traps destionations should be the nimbus server or where you are going to install the snmptd agents in nimbus.

No go into nimbus and install snmptd and dom_traps on the host where you will monitoring the Dell openmanage hardware.
And then go to host, and right click on snmptd agents, and choice configure.

Press the last icon, “User/Security Manager” and put in the community name from last step, in my example that will be appmanager.

Now you should be running

Sponsor link: http://www.it-århus.dk

ipsec Services: Only one usage of each socket address protocol network address port is normally permitted.

I have a servers that would not connect to the Internet, if I ping the gateway it says that:

Destination unreachable.

i found that the IPSec service was not stated. And if I start it it say: Only one usage of each socket address protocol network address port is normally permitted.

i found that there have been some problems after install

After Installing MS08-037 (951746 and 951748)

The solution was to reserved som port in the TCP/IP protocol

Here is the list of ports that we have seen conflicts with services on the machine.

  • 1645-1646 – Used by IAS
  • 1701-1701 – Used by L2TP
  • 1812-1813 – Used by IAS
  • 2883-2883 – Used by AUTD
  • 4500-4500 – Used by IPSEC

For now we are suggesting customers be proactive and modify the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ReservedPorts

I also found this in my event viewer

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 7/12/2008
Time: 6:38:37 PM
User: N/A
Computer: SERVER
Description:  The IPSEC Services Service terminated with the following error:  Only one usage of each socket address (protocol/network address/port) is normally permitted.

Event Type: Error
Event Source: IPSec
Event Category: None
Event ID: 4292
Date: 7/15/2008
Time: 2:53:14 PM
User: N/A
Computer:    SERVER
Description:  The IPSec driver has entered Block mode. IPSec will discard all inbound and outbound TCP/IP network traffic that is not permitted by boot-time IPSec Policy exemptions. User Action: To restore full unsecured TCP/IP connectivity, disable the IPSec services, and then restart the computer.  For detailed troubleshooting information, review the events in the Security event log.

Thanks to http://blogs.technet.com/sbs/archive/2008/07/17/some-services-may-fail-to-start-or-may-not-work-properly-after-installing-ms08-037-951746-and-951748.aspx

A significant number of invalid certificates have been provided by remote IP address 205.188.153.55 / 64.12.162.248

AOL has change there Root Certificate.
You can download them at https://pki-info.aol.com/AOL/

These 2 need to be imported in all Office Communication Server T – rusted Root Certification Authorities

You can see a video on howto import these 2 certificates here: http://simsbury.members.winisp.net/Update-AOL-Root-CA.wmv

There errors is belov

Multiple invalid incoming certificates.

In the past 1185 minutes the server received 12 invalid incoming certificates. The last one was from host 64.12.162.248.
Cause: This can happen if a remote server presents an invalid certificate due to an incorrect configuration or an attacker.
Resolution:
No action needed unless the number of failures is large. Contact the administrator of the host sending the invalid certificate and resolve this problem.

Over the past 0 minutes Office Communications Server has experienced TLS outgoing connection failures 1 time(s). The error code of the last failure is 0x80090325 (The certificate chain was issued by an authority that is not trusted.) while trying to connect to the host “sip.oscar.aol.com”.

Cause: Wrong principal error could happen if the peer presents a certificate whose subject name does not match the peer name. Certificate root not trusted error could happen if the peer certificate was issued by remote CA that is not trusted by the local machine.

In the past 0 minutes the server received 1 invalid incoming certificates. The last one was from host 64.12.162.248.

Cause: This can happen if a remote server presents an invalid certificate due to an incorrect configuration or an attacker.

Remote principal name is not configured in trusted server list.

After buying a CA sign certificate from Geotrust i got this in my Event viewer:

Remote principal name is not configured in trusted server list.

The subject name sip.XXX.com of the certificate assigned to process AVMCUSvc(1788) was not found in the trusted server list.
Certificate serial number: OU=Equifax Secure Certificate Authority, O=Equifax, C=US
Certificate issuer name: 0DA2A3.
Cause: Incorrect setup of the pool. Should never happen.
Resolution:
Verify that the Subject Name of the certificate presented by the remote peer is configured in the trusted server list.

For more information, see Help and Support Center at

I fix this problem by typing:

c:
cd \
cd “C:\Program Files\Microsoft Office Communications Server 2007 R2\ResKit”
cscript OCSTrustEntry.vbs /action:add /FQDN:sip.XXXX.com /type:TrustedServer

Sponsor link: http://www.it-århus.dk / http://www.it-aarhus.dk

Exchange Active Sync test

Hvis nogen har brug for at teste Active Sync, men ikke lige syntes de vil ødelægge deres egen telefons opsætning for at teste en given opsætningen, kan produktet her anbefales:

http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=38c46aa8-1dd7-426f-a913-4f370a65a582&displaylang=en

Det er en windows mobile emulator.

For at få netværk til at virke, kan henvises til denne guide:

http://www.betterthaneveryone.com/archive/2008/08/31/getting-network-access-on-the-windows-mobile-emulator.aspx

Office Communications Server 2007 R2: Installation failed with: Failure [0xC3EC78D8] Failed to read the Office Communications Server version information. This can happen if the computer clock is not set to correct date and time.

Its was solved by uninstall KB974571.

Microsoft recommends to postpone installing KB974571 on any LCS 2005 / OCS 2007 /OCS 2007 R2 servers.

Microsoft is investigating this issue, and will determine the most appropriate way to address it. Customers who are not running OCS or LCS server are not affected by this known issue, and can safely ignore this issue.

Customers who have deployed the OCS or LCS product on a server should assess the risk that is involved to decide whether to install the security update on that server. These customers should revisit this Knowledge Base article often, because this article will be updated as soon as more information and a resolution are available.

Office Communications Server 2007 R2: Installation failed with: Failure [0x80070005] Access is denied.

If you installation failed with: Failure [0x80070005] Access is denied.

This is a problems with administrator rights.

Please check the following things:

  1. The user need to be a domain user.
  2. The user is member of: Domain Admins group and RTCUniversalServerAdmins group. (Remember to relogon after you have put the user in these group).

Then right click on the installation file:

\Setup\amd64\setupee.exe (For enterprise)
\Setup\amd64\setupse.exe (For standard)

And then click Run As, then run it without “Run this program with restricted access”

Now you should be able to installed the Office Communications Server 2007 R2