Friday, June 10, 2022

Exchange update - unable to access OWA

Ran into a problem with Exchange 2013 CU23, after updating OWA was unavailable. Users could login, but after doing so got an "Something went wrong" message.

Turns out the Exchange Server Auth Certificate got pointed to the wrong certificate. To solve this issue:

  1. Find out what Exchange is using for the current auth certificate by running the following command:
    Get-ExchangeCertificate (Get-AuthConfig).CurrentCertificateThumbprint

  2. If you get an error running the command above, it means that the patch changed your auth certificate. You need to point exchange back to the correct certificate. To do that, you need to find the thumbprint of the auth certificate on your server. You can do this by running the following command:

Get-ExchangeCertificate

  1. Look for the auth certificate on your exchange server and get the thumbprint of that certificate. Output of the Get-ExchangeCertificate follows:

Thumbprint Subject


7F7B8143A318C4E93796099E53D9D748F2FE0xxx CN=Microsoft Exchange Server Auth Certificate

  1. As other posters have mentioned, to point Exchange back to the correct certificate, run the following commands:

Set-AuthConfig -NewCertificateThumbprint 7F7B8143A318C4E93796099E53D9D748F2FE0xxx -NewCertificateEffectiveDate (Get-Date)
Set-AuthConfig -PublishCertificate
Set-AuthConfig -ClearPreviousCertificate

(copy-pasted from here).

In my case, doing the above and restarting IIS worked.

Friday, January 14, 2022

Run individual Win10 system settings

 Microsoft has removed Advanced System Settings from it's Settings app and Control Panel. To get to it, run:

 

sysdm.cpl


Some more tricks, via Reddit:

I'm sure everyone knows the shortcut to open Run is [ WIN ] + R

Another great shortcut to know from here is that when submitting your Run command. If you hold Ctrl + Shift when you push Enter, your command will be Run As Admin. If the user is not an admin, you'll be prompted to elevate.

control - Control Panel

devmgmt.msc - Device Manager

services.msc - Opens Services. This is not the same as the Services tab in Task Manager, this is the administrative, services snap-in. And it's better.

regedit - Registry Editor

fsmgmt.msc - File Share Management. I'm not even sure how else to get here. Whenever I bring this thing up people wonder what the hell it is.

appwiz.cpl - Add/Remove Programs

ncpa.cpl - Network Properties (Change Adapter Options)

dsa.msc - Active Directory Users and Computers (Domain Services Administration)

gpmc.msc - Group Policy Management Console

lusrmgr.msc - Local Users Manager

gpedit.msc - Local Group Policy Editor

mmsys.cpl - Audio Control Panel (Multimedia System Control Panel)

wf.cpl - Windows Firewall

sysdm.cpl - System Properties (Advanced System Settings)

desk.cpl - Desktop Display Control Panel. It's close. You might be able to click it faster than you can type it.

taskmgr

No administrator access in Windows 10

 I recently ran into a PC where the administrator account was forgotten.

To get into such a PC:

1. Restart into Safe mode with Command Prompt (to restart into safe mode, hold 'Shift' while restarting).

2. To actually get into Safe mode, go to Troubleshoot -> Advanced options -> Startup Settings -> Restart.

3. In the CMD, run net user administrator /active:yes (or just net user administrator to the the status).

4. Restart, this time into Safe mode with networking. It should login as the administrator user where you can create a normal user and give them admin rights.