OSX 10.13.6 code signature invalid / EXC_CORPSE_NOTIFY

Posted on 17/12/2020 by Kasper Kristensen

So, the steps

Utilities –> Terminal, and run those commands

sudo killall -9 trustd
sudo rm -f /Library/Keychains/crls/valid.sqlite3

sudo killall -9 trustd

sudo rm -f /Library/Keychains/crls/valid.sqlite3

Reboot
Wait 5-10 minutes for the new version to be installed.

To confirm, after reboot, run this:

sqlite3 /Library/Keychains/crls/valid.sqlite3 "select * from admin"

db_version|5|
db_format|3|
db_source|0|valid.apple.com
version|148|
check_again|0|o??????A

sqlite3 /Library/Keychains/crls/valid.sqlite3 "select * from admin"

db_version|5|

db_format|3|

db_source|0|valid.apple.com

version|148|

check_again|0|o??????A

source: https://discussions.apple.com/thread/252037712?answerId=254082855022#254082855022

Messages sent from a shared mailbox aren’t saved to the Sent Items folder of the shared mailbox in Outlook

Posted on 27/06/2019 by Kasper Kristensen

Click Start, click Run, type regedit, and then click OK.
Locate and then click the following registry subkey:
HKEY_CURRENT_USER\Software\Microsoft\Office\x.0\Outlook\PreferencesNote The x.0 placeholder represents your version of Office (16.0 = Office 2016, 15.0 = Office 2013, 14.0 = Office 2010).
On the Edit menu, point to New, and then click DWORD Value.
Type DelegateSentItemsStyle, and then press Enter.
Right-click DelegateSentItemsStyle, and then click Modify.
In the Value data box, type 1, and then click OK.
Exit Registry Editor.

https://support.microsoft.com/en-us/help/2843677/messages-sent-from-a-shared-mailbox-aren-t-saved-to-the-sent-items-fol

Remote app feed url and remote app shortcut folder

Posted on 23/01/2019 by Kasper Kristensen

Remoteapp feed url: https://[server.domain.local]/RDWeb/Feed/webfeed.aspx

Remoteapp folder: %appdata%\Microsoft\Windows\Start Menu\Programs\Work Resources (RADC)

Get TLS certificate from smtp server

Posted on 19/12/2018 by Kasper Kristensen

Mini guide how to extract the public certificate from at SMTP server using TLS

openssl s_client -connect mail.example.com:25 -starttls smtp

1	openssl s_client -connect mail.example.com:25 -starttls smtp

Download OpenSSL for windows here: https://slproweb.com/products/Win32OpenSSL.html

copy Server certificate section from
-----BEGIN CERTIFICATE----- to
-----END CERTIFICATE-----
and save to a .cer file, and open the file

source: https://serverfault.com/questions/131627/how-to-inspect-remote-smtp-servers-tls-certificate

Download OpenSSL for windows here: https://slproweb.com/products/Win32OpenSSL.html

copy Server certificate section from

-----BEGIN CERTIFICATE----- to

-----END CERTIFICATE-----

and save to a .cer file, and open the file

source: https://serverfault.com/questions/131627/how-to-inspect-remote-smtp-servers-tls-certificate

Office365 outlook keep asking for password

Posted on 30/10/2018 by Kasper Kristensen

Office365 outlook keep asking for password

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity]
"DisableADALatopWAMOverride"=dword:00000001

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity]

"DisableADALatopWAMOverride"=dword:00000001

sources:https://community.spiceworks.com/topic/2025536-outlook-2016-365-keeps-asking-for-credentials?page=5 , https://support.microsoft.com/en-us/help/4025962/can-t-sign-in-after-update-to-office-2016-build-16-0-7967-on-windows-1

Microsoft Outlook cannot sign or encyrpt this message becauase you have no certfificates which can be used to send from your e-mail address

Posted on 11/10/2018 by Kasper Kristensen

Microsoft Outlook cannot sign or encyrpt this message becauase you have no certfificates which can be used to send from your e-mail address

Danish: Denne meddelelse kunne ikke signeres eller krypteres, fordi du ikke har et certifikat, som kan bruges til at sende fra din e-mail-adresse

Error message:

(Danish Error message)

FIX:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security]
"SupressNameChecks"=dword:00000001

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security]

"SupressNameChecks"=dword:00000001

Source: https://support.microsoft.com/en-us/help/276597/how-to-turn-off-e-mail-matching-for-certificates-in-outlook

How to Publish a Full Desktop Alongside Published RemoteApps

Posted on 05/09/2018 by Kasper Kristensen

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\CentralPublishedResources\PublishedFarms\<collection>\RemoteDesktops\<collection>

ShowInPortal     REG_DWORD     0x00000001 (1 means SHOW the desktop connection icon, 0 will hide it)

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\CentralPublishedResources\PublishedFarms\<collection>\RemoteDesktops\<collection>

ShowInPortal REG_DWORD 0x00000001 (1 means SHOW the desktop connection icon, 0 will hide it)

WS2012 VDI TIP: How to Publish a Full Desktop Alongside Published RemoteApps

Validate smtp server ssl certificate starttls

Posted on 05/09/2018 by Kasper Kristensen

openssl s_client -connect mailserver.com:25 -starttls smtp

1	openssl s_client -connect mailserver.com:25 -starttls smtp

Cisco ASA Route-based Site-to-Site VPN to Azure

Posted on 08/05/2018 by Kasper Kristensen

prerequirements: ASA software 9.8.1 (I have tested 9.8.2)

Azure configuration:
add a Virtual network gateway to you azure subnet, I use basic, then adding a connection to the gateway like this:

ASA configuration

Configure VPN interface:

crypto ikev2 policy 3
encryption aes-256
integrity sha
group 2
prf sha
lifetime seconds 10800


crypto ipsec ikev2 ipsec-proposal Proposal-Azure
  protocol esp encryption aes-256
  protocol esp integrity sha-1


crypto ipsec profile Profile-Azure
  set ikev2 ipsec-proposal Proposal-Azure
  set pfs group2
  set security-association lifetime kilobytes 102400000
  set security-association lifetime seconds 10800


interface Tunnel1
  nameif VPN-AZURE
  ip address 169.254.2.1 255.255.255.0 standby 169.254.2.2
  tunnel source interface outside
  tunnel destination [Azure vpngateway public ip]
  tunnel mode ipsec ipv4
  tunnel protection ipsec profile Profile-Azure


tunnel-group [Azure vpngateway public ip] type ipsec-l2l
tunnel-group [Azure vpngateway public ip] ipsec-attributes
ikev2 remote-authentication pre-shared-key [PreesharedKey]
ikev2 local-authentication pre-shared-key [PreesharedKey]

crypto ikev2 policy 3

encryption aes-256

integrity sha

group 2

prf sha

lifetime seconds 10800

crypto ipsec ikev2 ipsec-proposal Proposal-Azure

protocol esp encryption aes-256

protocol esp integrity sha-1

crypto ipsec profile Profile-Azure

set ikev2 ipsec-proposal Proposal-Azure

set pfs group2

set security-association lifetime kilobytes 102400000

set security-association lifetime seconds 10800

interface Tunnel1

nameif VPN-AZURE

ip address 169.254.2.1 255.255.255.0 standby 169.254.2.2

tunnel source interface outside

tunnel destination [Azure vpngateway public ip]

tunnel mode ipsec ipv4

tunnel protection ipsec profile Profile-Azure

tunnel-group [Azure vpngateway public ip] type ipsec-l2l

tunnel-group [Azure vpngateway public ip] ipsec-attributes

ikev2 remote-authentication pre-shared-key [PreesharedKey]

ikev2 local-authentication pre-shared-key [PreesharedKey]

Configure static route to azure networks:

route VPN-AZURE [local azure subnet scope] 255.255.255.0 [Azure vpngateway public ip] 1

1	route VPN-AZURE [local azure subnet scope] 255.255.255.0 [Azure vpngateway public ip] 1

Source:
https://supportforums.cisco.com/t5/vpn/route-based-vpn-vti-for-asa-finally-here/td-p/3046928

disable Welcome to the 2007 Microsoft Office splashscreen when opening Microsoft picture manager

Posted on 22/03/2018 by Kasper Kristensen

how to disable Welcome to the 2007 Microsoft Office splashscreen when opening Microsoft picture manager

it can be disabled by setting the following registrykey

HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\General\ShownOptIn"=dword:00000001

1	HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\General\ShownOptIn"=dword:00000001

I have been converting the adm file to a admx file, to be able to disable the welcome splashscreen via gpo

ADMX file: Office2007DisableSplashScreen

source: http://www.itninja.com/link/how-to-prevent-the-welcome-to-the-2007-microsoft-office-system-dialog-box-from-opening-when-a-2007-office-suite-is-started-for-the-first-time