Permission to read private key IIS Server

You need the permission to read private key for IIS Server.

   1.Go to this path:  C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys[File Name]

2. Go to that path and open file properties
3. Go to security tab
4. Click on "Edit" then "Add"
5. Add  users "Network Service" and "IIS_IUSRS" and give Full controll Permitions.

or add  IIS AppPool\[your application pool name]

Stop a hung service

If service is hung on stoping or starting :

open CMD as administrator

sc queryex "servicename"
taskkill /f /pid [PID] 

Source

View logged on user on Remote computer

View logged on user on Remote computer.

Download PStools. Use PSexec utill. I have pstools on my C drive.

cd c:\
cd pstolls
psexec.exe \\"compname or ip" cmd.exe
query user

TMG Error: 0xc004032a

TMG Error 0xc004032a when clicking on domain tab

To resolve this problem open ADSIedit and connect to TMG server. If you have TMG Array connect to TMG Config Storage server.

Select Distingushed Name or Naming Context” - CN=fpc2

“Select or type a domain or server that you logged in to” : <TMG_Server>:2171 or localhost:2171

Navigate:

•  CN=Array-Root
• 
  
•  CN=Arrays
• 
  
•  CN={Array’e ait olan GUID}
• 
  
•  CN=NetConfig
• 
  
•  CN=Networks
• 
  
•  CN={Network’e ait olan GUID} 
• 
  
•  CN=Proxy-LDT

You can see domain names against msFPCName in all related GUIDs, and delete dublicates.

Publish New Certificate Revocation List (CRL) from Offline Root CA to Active Directory and Inetpub

Publish New Certificate Revocation List (CRL) from Offline Root CA to Active Directory and Inetpub

1. Turn on the Offline Root CA and login with Admin account
2. Open the Certification Authority Console
3. Right Click on the "Revoked Certificates" and click Properties.
4. Set “CRL Publish interval” to a large value (Default is 26 Weeks) and  uncheck “Publish Delta CRL” check-box.

In order to Publish a new CRL from the offline Root CA to the Enterprise Sub CA you need to do the following:

1. Publish a new CRL on the Root CA, this can be done by Right Click the "Revoked Certificates" - All Tasks - Publish      
2. Copy the CRL file from the Root CA located under %systemroot%\system32\certsrv\certenroll to the Sub CA Server
3. Turn off the Root CA
4. Copy the above file to the InetPub folder (HTTP Path) in the Sub CA server which is by default located under the C:\inetpub\wwwroot\Certdata
5. Open an Admin Command Prompt and run the following command to publish it to the Active Directory (LDAP Path).                                                                                           

certutil -f -dspublish " C:\Inetpub\wwwroot\certdata\RootCA.crl      

Source                                                                                                                                            

Office Web Apps 2013 -2016 Server Install and Configuration

https://stevegoodyear.wordpress.com/sharepoint-2013-build-guide/office-web-apps-2013-server-install-and-configuration/

Office Web App

Sharepoint side :

get-SPWOPIBinding - show ofiice web app configuration

Remove-SPWOPIBinding -All:$true -remove office web app from sharepoint

New-SPWOPIBinding -ServerName "OfficewebAppServer FQDN"-AllowHtp- connect sharepoint to owa server

Set-SPWOPIZone -zone "external-https" - use if  users  have external and internal connection

Set-SPWOPIZone -zone "internal-http" - use if  you  have only internal connection