Tuesday 18 September 2012

Citrix: Cannot start Microsoft Office Outlook. Cannot open the Outlook window.

It occurs when file that maintains the Navigation Pane settings of outlook becomes corrupted, means outlook profile get corrupted. Please see below small steps to get resolve this issue if outlook doesn’t open at user end in citrix.

-In citrix, Outlook profiles saves under \\Profile Server\TS_Proifles\%username%\AppData\Roaming\Microsoft\outlookprofilename.xml (e;g outlook.xml).
-If outlook profile is corrupted then this outlookprofilename.xml file size will show 0 KB. This is a good indication of this corruption.
-We just need to rename this outlookprofilename.xml file, and ask user to logoff and relogin back to citrix and outlook.
-Once user will login, it will again automatically create a new outlookprofilename.xml, and all settings of outlook will remain same.

Wednesday 25 July 2012

Event ID: 10016, Source: Microsoft-Windows-DistributedCOM

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{61738644-F196-11D0-9953-00C04FD919C1}
to the user GKN\sp_db_access SID (S-1-5-21-973244980-2087295393-1065927410-1142) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.


Solution:
-GUID: {61738644-F196-11D0-9953-00C04FD919C1}
-Application name following to this GUID: IIS WAMREG admin Service
-Service Name: IISADMIN
-Permission issue: GKN\sp_db_access


Action taken:
Added in the account GKN\sp_db_access and set local launch and local activation

Path:
Administrative tool -> Component Services ->DCOM Config -> View -> Details -> Find GUID {61738644-F196-11D0-9953-00C04FD919C1} -> Added in the account GKN\sp_db_access and set local launch and local activation

PGP: Message is blocked - recipient email address could not be resolved. Error code: [0xa1010004].

CAUSE:The MAPI address space in PGP Desktop has to be configured to allow specific FAX address spaces.

SOLUTION:Add the following values to PGPprefs.xml
<key>MAPIfaxAddressSpaceList</key>
<string>FAX</string>

-To find PGPprefs.xml, go to
\%username%\UPM_Profile\AppData\Roaming\PGP Corporation\PGP \PGPprefs.xml

-Edit PGPprefs.xml in notepad.

-Find <key>MAPIfaxAddressSpaceList</key>

-Look next text to this string, it will show as <string></string>.

-Replace to <string></string> as <string>FAX</string>,
Note: Same will be performed in entire PGPprefs.xml file wherever you get <key>MAPIfaxAddressSpaceList</key>

-
Once it will replace, text will be shown as below.

<key>MAPIfaxAddressSpaceList</key> <string>FAX</string>,

-Log off and relogin back to PC, and check fax services. It should work.

Friday 13 July 2012

Blackberry- Block Social Networking Applications from BES

-Login to blackberry server.
-In BlackBerry Administration Service console, select BlackBerry solution management.
-Select Policy and then select Manage IT policies.
-Highlight the "Default" IT Policy or create new policy, and then click to open the policy.
-With the IT policy open, click Edit IT policy.
-Select the Security tab and set Disable Public Social Networking Applications to Yes.

Friday 18 May 2012

Error: ANS1705E System Writer(s) 'system writer' do(es) not exist.

If System Writers is not showing in "vssadmin list writers", there is some issue with permission on "%windir%\winsxs\temp\PendingRenames".
To allow appropriate permission, use below mentioned commands.

-Open cmd
-Go to %windir%\winsxs
-Type the following commands to allow permission:

Takeown /f %windir%\winsxs\temp\PendingRenames /a
icacls %windir%\winsxs\temp\PendingRenames /grant "NT AUTHORITY\SYSTEM:(RX)"
icacls %windir%\winsxs\temp\PendingRenames /grant "NT Service\trustedinstaller:(F)"
icacls %windir%\winsxs\temp\PendingRenames /grant BUILTIN\Users:(RX)
Takeown /f %windir%\winsxs\filemaps\* /a
icacls %windir%\winsxs\filemaps\*.* /grant "NT AUTHORITY\SYSTEM:(RX)"
icacls %windir%\winsxs\filemaps\*.* /grant "NT Service\trustedinstaller:(F)"
icacls %windir%\winsxs\filemaps\*.* /grant BUILTIN\Users:(RX)
net stop cryptsvc
net start cryptsvc


Now again run "vssadmin list writers" in command prompt, "system writers" should be visible there.

Friday 20 January 2012

How to enable PHP Extension in Windows Server 2003 IIS 6.0.

Installing PHP:-

1.    Download PHP.
2.    Create a directory in C:\PHP as installation directory. Then extract the files from php-5.1.4-Win32.zip into C:\PHP.
3.    Locate the file ‘php.ini-recommended’ in C:\PHP and rename it to ‘php’. (without the quotes of course)
4.    Open the ‘php.ini’ file and find the line which reads extension_dir = “./” and change it to extension_dir = “C:\PHP\ext”.
5.    Add the location of PHP directory to the server’s PATH environment variable so that Windows knows where to look for any PHP related executables (such as the PHP extension DLL‘s).
-To do this Right-click on My Computer,
-click Properties
-On the Advanced tab click Environment Variables.
-In the Environment Variables dialog box, under System variables highlight the Path variable and click Edit.
-Add ‘;C:\PHP’ (be sure to include the semi-colon separator) and click OK.
6.    Re-boot the server for this change to take effect.

----------------------------------------------------------------------------------

Configuring IIS to work PHP under IIS 6.0:-

 
1.    First we need to create and then enable an appropriate Web Service Extension so that IIS will both recognise and allow PHP files to be processed by the appropriate script engine.

2.    There is easier way of doing this by using the ‘iisext.vbs’, which we can find in C:\Windows\System32. Once we have this “iisext.vbs” file, we have to run below command in command prompt under C:\Windows\System32 directory.

cscript iisext.vbs /AddFile c:\PHP\php5isapi.dll 1 PHPISAPI 1 “PHP ISAPI”

3.    Now we can see, this script creates a new Web Service Extension in IIS, named “PHP ISAPI” with a status of Allowed.
----------------------------------------------------------------

For more information and screen shots on this, go to http://www.iisadmin.co.uk/?p=4

Monday 9 January 2012

How to check MX record of any Domain?

-Open a commnad prompt.
-Type "nslookup"
-Type "set q=mx"
-Type Domain name for which we want MX Record.

See below example.

-------------------------------
P:\>nslookupDefault Server:  stcdcpr01.prime-uk.local
Address:  10.250.1.12

> set q=mx> google.comServer:  stcdcpr01.prime-uk.local
Address:  10.250.1.12

google.com      MX preference = 10, mail exchanger = aspmx.l.google.com
google.com      MX preference = 50, mail exchanger = alt4.aspmx.l.google.com
google.com      MX preference = 40, mail exchanger = alt3.aspmx.l.google.com
google.com      MX preference = 30, mail exchanger = alt2.aspmx.l.google.com
google.com      MX preference = 20, mail exchanger = alt1.aspmx.l.google.com
aspmx.l.google.com      internet address = 209.85.229.27
alt4.aspmx.l.google.com internet address = 74.125.81.27
alt3.aspmx.l.google.com internet address = 74.125.127.27
alt2.aspmx.l.google.com internet address = 209.85.173.27
alt1.aspmx.l.google.com internet address = 173.194.69.27

Friday 6 January 2012

Restore deleted object in 2008 Active Directory?

There are few tool by which we can check deleted objects. Few of them are:
1) ADRestoreNET
2) ADRestore.exe

How to use ADRestoreNET
-Download ADRestoreNET.
-Extract the zip file,
-Install ADRestore.NET.msi,
-Open ADRestore.NET from Start>Program,
-Select Domain Controller Name, and click on Enumerate Tombstone.
-It will display all deleted objects.
-Click on object which we want to restore.
-Click on properties to show object details.
-Click on restore option to restore it.

How to use ADRestore.exe?
-Download ADRestore.exe.
-Extract the zip file,
-Open command prompt,
-type "adrestore.exe" (Without qoutes)
-It will display the active directory deleted objects
-If we want to recover the deleted user
-type "adrestore /r" (Without qoutes)
-Click yes on objects which we want to restore.


Note: Once we will restore object, it will show in correct OU where it was stored previosly. But it would be in disabled mode, we have to enable it manually.