Blog
Other

Enable NetLogon Logging

To enable NetLogon Logging, use the following command on a domain controller: nltest /dbflag:0x2080ffff When finished, disable NetLogon Logging with this command: nltest /dbflag:0x0 The netlogon.log file is located in the %SystemRoot%\Debug directory of a Microsoft Windows Domain Controller. 0x2080ffff is the most verbose setting and shows detailed timestamps, the …

Read More
Deployment

Converting Windows BIOS installation to UEFI

There are several reasons to use UEFI instead of BIOS. I won’t go into details regarding that. But there are some cases when you already have a fully functional Windows installation running on BIOS and you don’t want to start all over again. Sadly, there are no tools that performs …

Read More
Deployment

ByPassing Customsettings.ini in MDT

You can run MDT  from UNC, no need for PXE, USB or Disc. Start litetouch.vbs from  the \\SERVER\Share$\Scripts folder. You can also bypass global rules that are in customsettings.ini These conditions can include but are not limited to: Task Sequence (specify TS, bypass prompt in wizard) Apps (Include, or Exclude …

Read More
Deployment

Upgrade MDT 2013 to MDT Current Branch

Upgrade MDT 2013 to MDT Current Branch Upgrading MDT (Microsoft Deployment Toolkit) is generally not an issue – the main points are: Upgrade the Windows ADK before upgrading MDT. Make sure you have a backup (or can restore to a pre-upgraded MDT) of the Deployment Share – the Upgrade will …

Read More
Applications

Office 365 shared computer activation

Shared computer activation lets you to deploy Office 365 ProPlus to a computer in your organization that is accessed by multiple users. In our case we have a RDS server that many users log onto as it has an old application still needed so also needs Office. Shared computer activation …

Read More
Deployment

Office 365 for Shared computer activation

We have a server that many people remote into do some work. We can now install office 365 that can be used on this shared device and it is called Shared Computer Activation. Serveral users can log into the machine and run office at the same time. Shared computer activation …

Read More
Office 365

Allow external email delivery to an Office 365 AD synced Distribution group.

You have distribution groups setup in Active Directory that are synced with Office 365. In the O365 console, you cannot enable allow external senders as it is synced from AD. So you have to set this in AD. There are a few ways to do this: Active Directory In Active …

Read More
Active Directory

Reset AD Users Password Expiration Date

1.In Active directory users and computers, make sure advanced features is enabled 2.Navigate to the user account, there should be an Attribute Editor tab 3.Scroll to the pwdLastSet field. Modify it by entering 0 (zero) in the value field. Click OK. This sets the value to (Never) as in the …

Read More
Active Directory

How to remove a KMS Server from your infrastructure

We had some rogue KMS server hosts in our infrastructure. My guess is someone inadvertently installed the wrong key. We can easily look up KMS hosts as they are published to DNS. from a command prompt run:

Run this for all your subdomain’s fqdn to list all servers. A …

Read More
Office 365

Create Alias email address in Office 365 for directory synced users

On a DirSync’d Office 365 environment, email address changes are managed in (on-premise) Active Directory (sync is a one-way sync) and cannot be done through the Office 365 / exchange portal To add an Email alias’ to a users account the AD attribute ‘Proxy Address’ must be updated and synced. …

Read More