Remote app feed url and remote app shortcut folder

Posted on 23/01/2019 by Kasper Kristensen

Remoteapp feed url: https://[server.domain.local]/RDWeb/Feed/webfeed.aspx

Remoteapp folder: %appdata%\Microsoft\Windows\Start Menu\Programs\Work Resources (RADC)

Get TLS certificate from smtp server

Posted on 19/12/2018 by Kasper Kristensen

Mini guide how to extract the public certificate from at SMTP server using TLS

openssl s_client -connect mail.example.com:25 -starttls smtp

1	openssl s_client -connect mail.example.com:25 -starttls smtp

Download OpenSSL for windows here: https://slproweb.com/products/Win32OpenSSL.html

copy Server certificate section from
-----BEGIN CERTIFICATE----- to
-----END CERTIFICATE-----
and save to a .cer file, and open the file

source: https://serverfault.com/questions/131627/how-to-inspect-remote-smtp-servers-tls-certificate

Download OpenSSL for windows here: https://slproweb.com/products/Win32OpenSSL.html

copy Server certificate section from

-----BEGIN CERTIFICATE----- to

-----END CERTIFICATE-----

and save to a .cer file, and open the file

source: https://serverfault.com/questions/131627/how-to-inspect-remote-smtp-servers-tls-certificate

Office365 outlook keep asking for password

Posted on 30/10/2018 by Kasper Kristensen

Office365 outlook keep asking for password

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity]
"DisableADALatopWAMOverride"=dword:00000001

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity]

"DisableADALatopWAMOverride"=dword:00000001

sources:https://community.spiceworks.com/topic/2025536-outlook-2016-365-keeps-asking-for-credentials?page=5 , https://support.microsoft.com/en-us/help/4025962/can-t-sign-in-after-update-to-office-2016-build-16-0-7967-on-windows-1

Microsoft Outlook cannot sign or encyrpt this message becauase you have no certfificates which can be used to send from your e-mail address

Posted on 11/10/2018 by Kasper Kristensen

Microsoft Outlook cannot sign or encyrpt this message becauase you have no certfificates which can be used to send from your e-mail address

Danish: Denne meddelelse kunne ikke signeres eller krypteres, fordi du ikke har et certifikat, som kan bruges til at sende fra din e-mail-adresse

Error message:

(Danish Error message)

FIX:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security]
"SupressNameChecks"=dword:00000001

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security]

"SupressNameChecks"=dword:00000001

Source: https://support.microsoft.com/en-us/help/276597/how-to-turn-off-e-mail-matching-for-certificates-in-outlook

How to Publish a Full Desktop Alongside Published RemoteApps

Posted on 05/09/2018 by Kasper Kristensen

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\CentralPublishedResources\PublishedFarms\<collection>\RemoteDesktops\<collection>

ShowInPortal     REG_DWORD     0x00000001 (1 means SHOW the desktop connection icon, 0 will hide it)

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\CentralPublishedResources\PublishedFarms\<collection>\RemoteDesktops\<collection>

ShowInPortal REG_DWORD 0x00000001 (1 means SHOW the desktop connection icon, 0 will hide it)

WS2012 VDI TIP: How to Publish a Full Desktop Alongside Published RemoteApps

Validate smtp server ssl certificate starttls

Posted on 05/09/2018 by Kasper Kristensen

openssl s_client -connect mailserver.com:25 -starttls smtp

1	openssl s_client -connect mailserver.com:25 -starttls smtp

Cisco ASA Route-based Site-to-Site VPN to Azure

Posted on 08/05/2018 by Kasper Kristensen

prerequirements: ASA software 9.8.1 (I have tested 9.8.2)

Azure configuration:
add a Virtual network gateway to you azure subnet, I use basic, then adding a connection to the gateway like this:

ASA configuration

Configure VPN interface:

crypto ikev2 policy 3
encryption aes-256
integrity sha
group 2
prf sha
lifetime seconds 10800


crypto ipsec ikev2 ipsec-proposal Proposal-Azure
  protocol esp encryption aes-256
  protocol esp integrity sha-1


crypto ipsec profile Profile-Azure
  set ikev2 ipsec-proposal Proposal-Azure
  set pfs group2
  set security-association lifetime kilobytes 102400000
  set security-association lifetime seconds 10800


interface Tunnel1
  nameif VPN-AZURE
  ip address 169.254.2.1 255.255.255.0 standby 169.254.2.2
  tunnel source interface outside
  tunnel destination [Azure vpngateway public ip]
  tunnel mode ipsec ipv4
  tunnel protection ipsec profile Profile-Azure


tunnel-group [Azure vpngateway public ip] type ipsec-l2l
tunnel-group [Azure vpngateway public ip] ipsec-attributes
ikev2 remote-authentication pre-shared-key [PreesharedKey]
ikev2 local-authentication pre-shared-key [PreesharedKey]

crypto ikev2 policy 3

encryption aes-256

integrity sha

group 2

prf sha

lifetime seconds 10800

crypto ipsec ikev2 ipsec-proposal Proposal-Azure

protocol esp encryption aes-256

protocol esp integrity sha-1

crypto ipsec profile Profile-Azure

set ikev2 ipsec-proposal Proposal-Azure

set pfs group2

set security-association lifetime kilobytes 102400000

set security-association lifetime seconds 10800

interface Tunnel1

nameif VPN-AZURE

ip address 169.254.2.1 255.255.255.0 standby 169.254.2.2

tunnel source interface outside

tunnel destination [Azure vpngateway public ip]

tunnel mode ipsec ipv4

tunnel protection ipsec profile Profile-Azure

tunnel-group [Azure vpngateway public ip] type ipsec-l2l

tunnel-group [Azure vpngateway public ip] ipsec-attributes

ikev2 remote-authentication pre-shared-key [PreesharedKey]

ikev2 local-authentication pre-shared-key [PreesharedKey]

Configure static route to azure networks:

route VPN-AZURE [local azure subnet scope] 255.255.255.0 [Azure vpngateway public ip] 1

1	route VPN-AZURE [local azure subnet scope] 255.255.255.0 [Azure vpngateway public ip] 1

Source:
https://supportforums.cisco.com/t5/vpn/route-based-vpn-vti-for-asa-finally-here/td-p/3046928

disable Welcome to the 2007 Microsoft Office splashscreen when opening Microsoft picture manager

Posted on 22/03/2018 by Kasper Kristensen

how to disable Welcome to the 2007 Microsoft Office splashscreen when opening Microsoft picture manager

it can be disabled by setting the following registrykey

HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\General\ShownOptIn"=dword:00000001

1	HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\General\ShownOptIn"=dword:00000001

I have been converting the adm file to a admx file, to be able to disable the welcome splashscreen via gpo

ADMX file: Office2007DisableSplashScreen

source: http://www.itninja.com/link/how-to-prevent-the-welcome-to-the-2007-microsoft-office-system-dialog-box-from-opening-when-a-2007-office-suite-is-started-for-the-first-time

Load driver to online Windows PE

Posted on 29/01/2018 by Kasper Kristensen

drvload.exe inf_path

source: https://technet.microsoft.com/en-us/library/cc766220(v=ws.10).aspx

error extending volume size not supported storage spaces

Posted on 22/01/2018 by Kasper Kristensen

If you are getting this error when you try to expand your storage spaces Vdisk, and you are using StorageTiers.

error extending volume size not supported storage spaces

you can expand your volume by using powershell instead

run the following command to get the names of your StorageTiers

Get-VirtualDisk <Vdisk FriendlyName> | Get-StorageTier | Select FriendlyName

1	Get-VirtualDisk <Vdisk FriendlyName> \| Get-StorageTier \| Select FriendlyName

In my case the name is VeeamVolume

Get-VirtualDisk “VeeamVolume” | Get-StorageTier | Select FriendlyName

and then expand the desired StorageTier

Get-StorageTier <StorageTier FriendlyName> | Resize-StorageTier -Size <Size>

1	Get-StorageTier <StorageTier FriendlyName> \| Resize-StorageTier -Size <Size>

Get-StorageTier VeeamVolume_HDD_Tier | Resize-StorageTier -Size 50TB

and after the resize

after StorageTier Resize

source: https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/resize-volumes