Thursday, November 5, 2020

Windows 10 machines with bitlocker on when you didn't enable it (finding the recovery key)

 I had a Lenovo Carbon X1 laptop that was bitlocker encrypted that I did not turn on.  As such, I did not have the recovery key.  I found that when a machine is connected to Azure, the machine auto-encrypts and stores the recovery key in Azure.

I found this information here:
https://hardsoft-support.kayako.com/article/99-windows-10-bitlocker-turns-on-without-a-notice

Short version of the above article:
1) go to https://manage.windowsazure.com/ and log in with your Azure connected email address
2) Go to users and find your device where you *should* see the recovery key.

Friday, February 28, 2020

Windows 8 - User profile service failed the sign in

I came across a Windows 8 laptop (yes in February 2020) that was running Windows 8, but when I created a new user and tried to log in, I got an error that said "User profile service failed the sign in" and the profile would not load at all.

The fix was to log in with an existing user, go into the application event log and find errors during the log in process relating to a permissions error copying data from c:\users\default to the new profile and deleting the minimum amount necessary (not the default folder or c:\users\default\appdata - much more specific). 

I found this info here:
https://answers.microsoft.com/en-us/windows/forum/windows_8-security/user-profile-service-failed-the-sign-in/17ad3f7c-3b2d-433f-a3d5-bf7f6a79df1a?auth=1&page=3

Here's the important text, in case that link gets removed/changed:

I have figured out what the problem is.  Basically, something from the Default profile directory fails to copy (this contains the initial files that Windows uses to set up a user).  The Default profile is found at:
C:\Users\Default 
If you go to c:\users, you will not see the Default directory. 
To determine what fails to copy, go to the event viewer (this is on the start menu - right mouse on the start icon and a list of programs will display.).  Open the Application Event log - (it will take a few moments for it to load the application event log - the Event Viewer application builds the logs and indexes before it will open completely. 
Scroll down the event log until you see warnings from the "User Profile General" under the Source column.  EventID 1509 indicates what files are not being copied.  In my case, the entry said:
"Windows cannot copy file \\?\C:\Users\Default\AppData\Local\Microsoft\VSCommon\12.0\SQM\sqmdata-13304-039-00000.sqm to location .... This error may be caused by network problems or insufficient security rights.
DETAIL - Access is denied.
^^^^^
Bingo - Access denied can be caused by a lot of things.  So, instead of struggling with what is wrong, just delete the directory that is causing the problem in the first place.  If it is critical, then running a repair on the application that fails should recover that information.  In my case, I deleted
VSCommon from C:\Users\Default\AppData\Local\Microsoft\
(Use Windows Explorer and enter in the address bar the parent directory for the offending files - I chose to enter C:\Users\Default\AppData\Local\Microsoft because I didn't want to screw with it HA HA)
Once you do that, log in with the new account and it should work.  If it doesn't go back to the event log and locate the new EventID 1509. 
DO NOT DELETE C:\Users\Default\AppData\Local\Microsoft.  Delete the directory that is after that is causing the problem.  Deleting the Microsoft or any of the directories about it will cause you all kinds of grief with a resulting rebuild of the computer.
Good Luck and don't panic.  There is a solution, just a question of your patience to find it.

Tuesday, July 30, 2019

Quickbooks multi-user requires NETBOIS names

This is a quick reminder for myself or anyone who is getting H202 errors or perhaps 6190 and 816 errors, the mapped drives on the remote computers need to refer to the server via NETBOIS name.  Oddly, the NETBIOS name was not resolving (pre-empted by the DNS server to an external address) for a setup I worked on.

My solution was to edit the HOSTS file to hardcode the NETBIOS name so the name could resolve.  This fixed my problem.

Quick big picture process for Quickbooks multi-user hosting.

1) make sure the Quickbooks database server is installed on the server (this is part of the installation of QuickBooks).
2) Share the folder that the QBW file is located (read and write)
3) Run Quickbooks Database Server on the host machine and scan the folder where the QBW file is located
4) On the other machines, map the share to a network drive using the NETBIOS name
5) Open the QBW file on any computer and put it in multiuser mode.


Monday, April 1, 2019

Installing Office 2019 Volume License

Office 2019 Volume License installation has a new installation process.  Here's the process I've successfully used.


  1. Download the Office Deployment Tool from here:
    https://www.microsoft.com/en-us/download/details.aspx?id=49117
  2. Create a new file called config.xml in the folder with the decompressed contents of the Office Deployment tool with the content referenced at the bottom of this post.  Make sure to add your own Office license MAK key in the PIDKEY area.
  3. From a DOS prompt, navigate to the folder where the files are stored and run:
    setup.exe /download config.xml 
  4. Wait 30 minutes
  5. From a DOS prompt, navigate to the folder where the files are stored and run:
    setup.exe /configure config.xml




Thursday, January 10, 2019

tracking disk usage on a Mac

When looking to track disk usage on a PC, I often use TreeSizeFree - which is awesome.  But I struggled to find something like that in a Mac.

I have used and like the trial of DaisyDisk.  It gives a graphical representation of all used files including hidden files and it can help you find things like Apple Mail usage or Outlook usage or itunes backups that can be eating up disk space within the Library folder.  

Thursday, November 1, 2018

Windows 7 compression bug fills up hard drive in Windows temp space

A couple times, I've seen a Windows 7 computer with no free hard drive space and tons of space used in c:\windows\temp.  The answer is in this article:
https://www.computerworld.com/article/3112358/microsoft-windows/windows-7-log-file-compression-bug-can-fill-up-your-hard-drive.html

It's some sort of bug in Windows.  The fix is:

1) stop the Windows Module Installer service
2) move all the files out of c:\windows\logs\cbs (I typically move them to c:\windows\logs\cbs.old)
3) delete all the files in c:\windows\temp
4) reboot


Tuesday, October 9, 2018

Enabling modern authentication (ADAL) on Skype for Business

By default, Skype for Business requires users to use App Passwords for logging into Skype for Business.

I'm stealing the info from this post from this excellent tutorial:
https://www.ronnipedersen.com/2017/07/11/enable-modern-authentication-for-skype-for-business-online

I'm simplifying for my future use.  Important note - the DNS records as defined by Microsoft should be in place before going through this process.  Particularly, there should be a CNAME record pointing lyncsicover.domainname.com to webdir.online.lync.com.

First, download the Visual Basic C++ 2017 redistributable from here:
https://aka.ms/vs/15/release/VC_redist.x64.exe

This is needed for the Skype for Business Powershell installer.

Then download the Skype for Business Powershell installer itself:
https://download.microsoft.com/download/2/0/5/2050B39B-4DA5-48E0-B768-583533B42C3B/SkypeOnlinePowerShell.Exe


Then run PowerShell and run these commands:
$sfboSession = New-CsOnlineSession -UserName user@domain.com
Import-PSSession $sfboSession

Then run:
Get-CsOAuthConfiguration

You'll find a line for "ClientAdalAuthOverride" which will likely show "disabled" which is the behavior we want to change.

Run this command:
Set-CsOAuthConfiguration -ClientAdalAuthOverride Allowed

This process allows ADAL (aka modern authentication).  The tutorial I am replicating says this change can take up to 24 hours to take effect, but it often takes effect within one hour.



Monday, September 10, 2018

Office 2016 won't activate with valid volume license key

If Office 2016 (pre-installed or even a volume license that has been installed and then later been update) won't activate - here's the problem and the fix.

What it looks like is that you choose to enter a product key, but then Office still won't activate.  The problem is that the system still thinks there's a trial version on the system.

Here's the fix . . .

Run this from an elevated command prompt:

(on a 32 bit system):
cscript.exe "C:\Program Files\Microsoft Office\Office16\OSPP.vbs" /dstatus

(on a 64 bit system)
cscript.exe "C:\Program Files (x86)\Microsoft Office\Office16\OSPP.vbs" /dstatus

You'll often see something like this (note that there are two versions listed here and one of them is in a grace period):













We can see that the trial version (in grace period) is on there simultaneously with our activated version.  The fix is to remove the trial version's license.  Here's the command to remove the trial version:

(on a 32 bit system):
cscript.exe "C:\Program Files\Microsoft Office\Office16\OSPP.vbs" /unpkey:KHGM9

(on a 64 bit system)
cscript.exe "C:\Program Files (x86)\Microsoft Office\Office16\OSPP.vbs" /unpkey:KHGM9


You might need to adjust the last 5 characters of the product key to match your specific situation.



Sunday, September 2, 2018

Pre-installed Office 2016 won't activate (keeps trying to activate even after entering the correct key)

If you're working with a pre-installed Office 2016 (Microsoft Desktop Apps) and you want to activate that installation with a volume license key, you need to make some registry edits.  Very, very annoying.

This page goes over the process:
https://support.office.com/en-us/article/office-repeatedly-prompts-you-to-activate-on-a-new-pc-a9a6b05f-f6ce-4d1f-8d49-eb5007b64ba1

In essence, you delete these two keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\16.0\Common\OEM

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\Common\OEM


Delete the entire OEM key

Saturday, September 1, 2018

Office 2016 installation fail - error 1935

I've had trouble with working with pre-installed Microsoft Office 2016 and then uninstalling that version and then installing my own Office 2016.

Per this page, the answer is to download and run the .net framework repair tool.  This will solve the issue and allow you to install your own Office 2016 volume license.

Thursday, August 23, 2018

Windows unable to check for updates - says service not started (even though the service is started)

I've seen a few Windows 7 machines that have Windows Update problems where the machine says the service is not started even the service is started.  When this happens, the computer can no longer check for updates and it'll go indefinitely without checking for updates. The fix is to wipe out the update cache and then check for updates again.

The process as described here:

Stop the Windows Update process
Delete the content from c:\windows\softwaredistribution
Start the Windows Update process

Check for Updates.

I also recommend that you make sure the system is set to install updates for all Microsoft products as well.  To do that, open Internet Explorer and put microsoft.com in the Compatibility View sites.  Then go to http://update.microsoft.com/microsoftupdate in IE.   


Friday, May 25, 2018

Fix for CredSSP terminal server errors

As of May 2018, I'm seeing several instances of errors connecting to terminal servers due to CredSSP errors.  Microsoft released a fix that needs to be applied to both the client and the server.  If one is patched, the other needs to be patched.  If one is patched and the other is not, the connection will fail.

The download will vary based on the OS of the unpatched system.  Here's the link

https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-0886

Here's what the error looks like:


Thursday, February 8, 2018

Storing Mac primary data storage folders within cloud storage folders

One of my favorite methods of backup is redirecting the primary data storage folders to a cloud service (like Dropbox or Google Drive).  On a Mac, the process is not intuitive.  Here's my process.

You need to perform the steps once for each folder you want to move.  So if you want to move three folders (desktop, documents, pictures), you'll need to perform the steps three times.  The steps involved two commends.

First, you move the data to the new location.  Then you create a symbolic link to the new location.  In the examples below are a series of commands for desktop, documents, pictures, music, and movies.  The commands with %username% and %Company% would be altered to match the real world situation.

iMac:~ username$ sudo mv ~/Documents "/Users/%username%/Dropbox (%Company%)/laptopdata/Documents"
iMac:~ username$ sudo rm -rf ~/Documents/
iMac:~ username$ ln -s "/Users/%username%/Dropbox (%Company%)/laptopdata/Documents" ~
iMac:~ username$ sudo mv ~/Desktop "/Users/%username%/Dropbox (%Company%)/laptopdata/Desktop"
iMac:~ username$ sudo rm -rf ~/Desktop/
iMac:~ username$ ln -s "/Users/%username%/Dropbox (%Company%)/laptopdata/Desktop" ~
iMac:~ username$ sudo mv ~/Movies "/Users/%username%/Dropbox (%Company%)/laptopdata/Movies"
iMac:~ username$ sudo rm -rf ~/Movies/
iMac:~ username$ ln -s "/Users/%username%/Dropbox (%Company%)/laptopdata/Movies" ~
iMac:~ username$ sudo mv ~/Pictures "/Users/%username%/Dropbox (%Company%)/laptopdata/Pictures"
iMac:~ username$ sudo rm -rf ~/Pictures/
iMac:~ username$ ln -s "/Users/%username%/Dropbox (%Company%)/laptopdata/Pictures" ~
iMac:~ username$ sudo mv ~/Music "/Users/%username%/Dropbox (%Company%)/laptopdata/Music"
iMac:~ username$ sudo rm -rf ~/Music/
iMac:~ username$ ln -s "/Users/%username%/Dropbox (%Company%)/laptopdata/Music" ~

Tuesday, January 23, 2018

IPS error initiated by Fortigate firewall

In this case, we had a user who had no internet access and got this screen when web browsing.


We found that the Fortigate 60D we had was causing this.  The cause seems to have been multiple invalid DNS lookups.  We didn't find any error logs that suggested that problem, but this is what this IPS block is typically caused by.  In the end, we fixed this by changing the user's LAN IP address, but we also could have seen the blocked IP addresses via these commands from the CLI:

OS 5.0:
get user ban list

OS 5.2
diagnose firewall ip_host list

To delete an entry, you'd enter this command:
diagnose firewall ip_host delete src4/src6

Exmaple:
diagnose firewall ip_host delete src4 10.10.10.21

The information from this page came from here:
http://kb.fortinet.com/kb/documentLink.do?externalID=FD36211


Tuesday, October 31, 2017

Ruckus daemon.err wsgclient errors every 5 seconds in the logs (firmware 104.0.0.0.1347)

I'm running a Ruckus R600, and I was getting errors every 5 seconds in the logs that looked like this:

---
Oct  4 13:37:15 RuckusAP daemon.err wsgclient[528]: communicatorInit:364 Init connection failed, ret:124, connectRetry:86990

Oct  4 13:37:15 RuckusAP daemon.err wsgclient[528]: registration:594 Failed to init socket! ret:124 url:https://RuckusController/wsg/ap

Oct  4 13:37:20 RuckusAP daemon.err wsgclient[528]: crResloveAddrInfo:152 getaddrinfo failed, ret:-2/Name or service not known

Oct  4 13:37:20 RuckusAP daemon.err wsgclient[528]: cmrInit:138 Call 'crDefSocketInit()' failed, ip: port:443, ret:124/CR initial socket failed


---

I worked with Ruckus support and found that the Ruckus was reaching out to a cloud server that it was not registered with and receiving these errors.  Ruckus said that these errors were normal and not a problem.  They walked me through the fix.  You fix it by SSLing to the Ruckus (I use Putty for this) and then log in and run these commands (the commands I'm typing are in bold):

Please login: super
password :
Copyright(C) 2016 Ruckus Wireless, Inc. All Rights Reserved.

** Ruckus R600 Multimedia Hotzone Wireless AP: 971603500291

rkscli: set scg disable
OK
rkscli: set discovery-agent
Commands starting with 'set discovery-agent' :
set discovery-agent : set controller discovery agent {options}
                 -> disable/enable
                 -- Configure Controller Discovery Agent Info

rkscli: set discovery-agent disable
OK

Wednesday, October 25, 2017

Submitting phishing and spam emails to Office365 for analysis

I found this link for how you can forward emails that are spam or phishing that are not caught by the Office365 junk filter for further analysis:

https://technet.microsoft.com/en-us/library/jj200769%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396

Friday, October 20, 2017

Remove HP Client Security for Windows 7 to Windows 10 upgradres

I was doing a Windows 7 to Windows 10 upgrade the other day on an HP EliteBook 840 and after a series of failures (error code 0xc1900208 - the eventual solution was to remove HP Client Security.  It's an incompatible app.

Tuesday, October 3, 2017

Visual Basic script to delete calendar appointments with a specific subject

I had a user on Outlook for Mac 2016 who had thousands of duplicate appointments (created by an Outlook bug).  Here was my fix . . .

I set up the user's account in my Outlook.

I pressed alt-F11 and expanded Project1 and then expanded Microsoft Outlook object and then expanded this Outlook session.  I double clicked on this Outlook session and put in this text in the right hand pane where DESIRED SUBJECT is the subject of the messages you want to remove.

When done, I clicked on the play button in the toolbar (green triangle) to run the script.


Option Explicit

Sub deleteOutlookAppt()
Dim olApp As Object 'Outlook.Application
Dim olNS As Object 'Outlook.Namespace
Dim olAptItemFolder As Object 'Outlook.Folder
Dim olAptItem As Object 'Outlook.AppointmentItem
Dim i As Long

    Set olApp = CreateObject("Outlook.Application")
    Set olNS = olApp.Session
    Set olAptItemFolder = olNS.GetDefaultFolder(9) '9=olFolderCalendar constant
   
    For i = olAptItemFolder.Items.Count To 1 Step -1
        Set olAptItem = olAptItemFolder.Items(i)
        If olAptItem.Subject Like "DESIRED SUBJECT" Then
            olAptItem.Delete
        End If
    Next i
   
    Set olAptItem = Nothing
    Set olAptItemFolder = Nothing
    Set olApp = Nothing
   
End Sub


Sunday, September 17, 2017

default password for NEC SV8100 and SV9100 DT700 and DT800 phones

On IP phones for the NEC SV8100 and NEC SV9100 phone systems (these are DT700 and DT800 phones), the default login for the phones is:

ADMIN (I've read this is case sensitive)
66333222 

Friday, August 11, 2017

Slow computer troubleshooting

Here's the list of things I do when troubleshooting a slow computer:

1) Run a malwarebytes scan and remove anything found
2) Install all applicable driver updates
3) Run "sfc /scannow" from an elevated command prompt
4) Install all applicable Windows updates
5) Install all applicable Office updates, if installed separately (true for some versions of Office 2016)
6) Check amount of free disk space (ideally at least 20 GB free)
7) Check for adware/crapware that is installed.  Remove by normal add/remove programs
8) Check CPU usage and disk usage for conditions above 99%