Wednesday, February 15, 2017

Configure Office Web Apps Server

Rum PowerShell as administrator:

Import-Module OfficeWebApps

New-OfficeWebAppsFarm -InternalURL <a href="https://<FQDN" title="https://<FQDN">https://<FQDN</a> OWAS Server> -ExternalURL <a href="https://<URL" title="https://<URL">https://<URL</a> OWAS public name> –CertificateName “Certificate Friendly Name” -AllowHTTP

New-OfficeWebAppsHost "Domain Name" 


to Check Offece Web Server open this link :

 https://FQDN OWAS Server/hosting/discovery



Publish Office WebAPP TMG

Permission to read private key IIS Server

You need the permission to read private key for IIS Server.

   1.Go to this path:  C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys[File Name]

  1. Go to that path and open file properties
  2. Go to security tab
  3. Click on "Edit" then "Add"
  4. Add  users "Network Service" and "IIS_IUSRS" and give Full controll Permitions.
or add  IIS AppPool\[your application pool name]

Stop a hung service

If service is hung on stoping or starting :

open CMD as administrator

sc queryex "servicename"
taskkill /f /pid [PID] 




Source


Thursday, February 9, 2017

View logged on user on Remote computer

View logged on user on Remote computer.

Download PStools. Use PSexec utill. I have pstools on my C drive.

cd c:\
cd pstolls
psexec.exe \\"compname or ip" cmd.exe
query user

Sunday, January 29, 2017

TMG Error: 0xc004032a

TMG Error 0xc004032a when clicking on domain tab


To resolve this problem open ADSIedit and connect to TMG server. If you have TMG Array connect to TMG Config Storage server.

Select Distingushed Name or Naming Context” - CN=fpc2
“Select or type a domain or server that you logged in to” : <TMG_Server>:2171 or localhost:2171

Navigate:

  •  CN=Array-Root

  •  CN=Arrays

  •  CN={Array’e ait olan GUID}

  •  CN=NetConfig

  •  CN=Networks

  •  CN={Network’e ait olan GUID} 

  •  CN=Proxy-LDT

You can see domain names against msFPCName in all related GUIDs, and delete dublicates.



Saturday, January 28, 2017

Publish New Certificate Revocation List (CRL) from Offline Root CA to Active Directory and Inetpub

Publish New Certificate Revocation List (CRL) from Offline Root CA to Active Directory and Inetpub

  1. Turn on the Offline Root CA and login with Admin account
  2. Open the Certification Authority Console
  3. Right Click on the "Revoked Certificates" and click Properties.
  4. Set “CRL Publish interval” to a large value (Default is 26 Weeks) and  uncheck “Publish Delta CRL” check-box.

In order to Publish a new CRL from the offline Root CA to the Enterprise Sub CA you need to do the following:

  1. Publish a new CRL on the Root CA, this can be done by Right Click the "Revoked Certificates" - All Tasks - Publish      
  2. Copy the CRL file from the Root CA located under %systemroot%\system32\certsrv\certenroll to the Sub CA Server
  3. Turn off the Root CA
  4. Copy the above file to the InetPub folder (HTTP Path) in the Sub CA server which is by default located under the C:\inetpub\wwwroot\Certdata
  5. Open an Admin Command Prompt and run the following command to publish it to the Active Directory (LDAP Path).                                                                                           
certutil -f -dspublish " C:\Inetpub\wwwroot\certdata\RootCA.crl      


Source