Office365 outlook keep asking for password

Posted on 30/10/2018 by Kasper Kristensen

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity]
"DisableADALatopWAMOverride"=dword:00000001

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity]

"DisableADALatopWAMOverride"=dword:00000001

sources:https://community.spiceworks.com/topic/2025536-outlook-2016-365-keeps-asking-for-credentials?page=5 , https://support.microsoft.com/en-us/help/4025962/can-t-sign-in-after-update-to-office-2016-build-16-0-7967-on-windows-1

Microsoft Outlook cannot sign or encyrpt this message becauase you have no certfificates which can be used to send from your e-mail address

Posted on 11/10/2018 by Kasper Kristensen

Microsoft Outlook cannot sign or encyrpt this message becauase you have no certfificates which can be used to send from your e-mail address

Danish: Denne meddelelse kunne ikke signeres eller krypteres, fordi du ikke har et certifikat, som kan bruges til at sende fra din e-mail-adresse

Error message:

(Danish Error message)

FIX:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security]
"SupressNameChecks"=dword:00000001

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security]

"SupressNameChecks"=dword:00000001

Source: https://support.microsoft.com/en-us/help/276597/how-to-turn-off-e-mail-matching-for-certificates-in-outlook

How to Publish a Full Desktop Alongside Published RemoteApps

Posted on 05/09/2018 by Kasper Kristensen

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\CentralPublishedResources\PublishedFarms\<collection>\RemoteDesktops\<collection>

ShowInPortal     REG_DWORD     0x00000001 (1 means SHOW the desktop connection icon, 0 will hide it)

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\CentralPublishedResources\PublishedFarms\<collection>\RemoteDesktops\<collection>

ShowInPortal REG_DWORD 0x00000001 (1 means SHOW the desktop connection icon, 0 will hide it)

WS2012 VDI TIP: How to Publish a Full Desktop Alongside Published RemoteApps

Validate smtp server ssl certificate starttls

Posted on 05/09/2018 by Kasper Kristensen

openssl s_client -connect mailserver.com:25 -starttls smtp

1	openssl s_client -connect mailserver.com:25 -starttls smtp

Cisco ASA Route-based Site-to-Site VPN to Azure

Posted on 08/05/2018 by Kasper Kristensen

prerequirements: ASA software 9.8.1 (I have tested 9.8.2)

Azure configuration:
add a Virtual network gateway to you azure subnet, I use basic, then adding a connection to the gateway like this:

ASA configuration

Configure VPN interface:

crypto ikev2 policy 3
encryption aes-256
integrity sha
group 2
prf sha
lifetime seconds 10800


crypto ipsec ikev2 ipsec-proposal Proposal-Azure
  protocol esp encryption aes-256
  protocol esp integrity sha-1


crypto ipsec profile Profile-Azure
  set ikev2 ipsec-proposal Proposal-Azure
  set pfs group2
  set security-association lifetime kilobytes 102400000
  set security-association lifetime seconds 10800


interface Tunnel1
  nameif VPN-AZURE
  ip address 169.254.2.1 255.255.255.0 standby 169.254.2.2
  tunnel source interface outside
  tunnel destination [Azure vpngateway public ip]
  tunnel mode ipsec ipv4
  tunnel protection ipsec profile Profile-Azure


tunnel-group [Azure vpngateway public ip] type ipsec-l2l
tunnel-group [Azure vpngateway public ip] ipsec-attributes
ikev2 remote-authentication pre-shared-key [PreesharedKey]
ikev2 local-authentication pre-shared-key [PreesharedKey]

crypto ikev2 policy 3

encryption aes-256

integrity sha

group 2

prf sha

lifetime seconds 10800

crypto ipsec ikev2 ipsec-proposal Proposal-Azure

protocol esp encryption aes-256

protocol esp integrity sha-1

crypto ipsec profile Profile-Azure

set ikev2 ipsec-proposal Proposal-Azure

set pfs group2

set security-association lifetime kilobytes 102400000

set security-association lifetime seconds 10800

interface Tunnel1

nameif VPN-AZURE

ip address 169.254.2.1 255.255.255.0 standby 169.254.2.2

tunnel source interface outside

tunnel destination [Azure vpngateway public ip]

tunnel mode ipsec ipv4

tunnel protection ipsec profile Profile-Azure

tunnel-group [Azure vpngateway public ip] type ipsec-l2l

tunnel-group [Azure vpngateway public ip] ipsec-attributes

ikev2 remote-authentication pre-shared-key [PreesharedKey]

ikev2 local-authentication pre-shared-key [PreesharedKey]

Configure static route to azure networks:

route VPN-AZURE [local azure subnet scope] 255.255.255.0 [Azure vpngateway public ip] 1

1	route VPN-AZURE [local azure subnet scope] 255.255.255.0 [Azure vpngateway public ip] 1

Source:
https://supportforums.cisco.com/t5/vpn/route-based-vpn-vti-for-asa-finally-here/td-p/3046928

disable Welcome to the 2007 Microsoft Office splashscreen when opening Microsoft picture manager

Posted on 22/03/2018 by Kasper Kristensen

how to disable Welcome to the 2007 Microsoft Office splashscreen when opening Microsoft picture manager

it can be disabled by setting the following registrykey

HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\General\ShownOptIn"=dword:00000001

1	HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\General\ShownOptIn"=dword:00000001

I have been converting the adm file to a admx file, to be able to disable the welcome splashscreen via gpo

ADMX file: Office2007DisableSplashScreen

source: http://www.itninja.com/link/how-to-prevent-the-welcome-to-the-2007-microsoft-office-system-dialog-box-from-opening-when-a-2007-office-suite-is-started-for-the-first-time

Load driver to online Windows PE

Posted on 29/01/2018 by Kasper Kristensen

drvload.exe inf_path

source: https://technet.microsoft.com/en-us/library/cc766220(v=ws.10).aspx

error extending volume size not supported storage spaces

Posted on 22/01/2018 by Kasper Kristensen

If you are getting this error when you try to expand your storage spaces Vdisk, and you are using StorageTiers.

error extending volume size not supported storage spaces

you can expand your volume by using powershell instead

run the following command to get the names of your StorageTiers

Get-VirtualDisk <Vdisk FriendlyName> | Get-StorageTier | Select FriendlyName

1	Get-VirtualDisk <Vdisk FriendlyName> \| Get-StorageTier \| Select FriendlyName

In my case the name is VeeamVolume

Get-VirtualDisk “VeeamVolume” | Get-StorageTier | Select FriendlyName

and then expand the desired StorageTier

Get-StorageTier <StorageTier FriendlyName> | Resize-StorageTier -Size <Size>

1	Get-StorageTier <StorageTier FriendlyName> \| Resize-StorageTier -Size <Size>

Get-StorageTier VeeamVolume_HDD_Tier | Resize-StorageTier -Size 50TB

and after the resize

after StorageTier Resize

source: https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/resize-volumes

Citrix: You have not chosen to trust AlphaSSL CA – SHA256 G2

Posted on 15/01/2018 by Kasper Kristensen

Download: AlphaSSL SHA-256 R1 Intermediate Certificates from this link

https://support.globalsign.com/customer/portal/articles/1223298-alphassl-intermediate-certificates

Send mails from Sharp MFP printer ends up in Spam/unwanted mail-folder

Posted on 11/01/2018 by td

If you experience mails sent from your Sharp MFP printer ends up in spam it could be due to the fact that the MFP printer sends “on behalf of”

To change this behavior, log in to the printer and chose system settings -> Settings for picture send -> scan settings

(please note the above path is loosely translated from danish)

Check that Sendername og email-address is filled in.