When requesting a new AD CA certifiate via web enrolment, if it's ignoring the SAN attribute in the Attributes field, run this command on the CA:
certutil -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2
Then restart the CA service:
net stop certsvc
net start certsvc
Credit to Terence Luk.
An example of the value to use in the Attributes field to have SANs "MYSERVER" and "MYSERVER.mydomain.com" is:
san:dns=MYSERVER&dns=MYSERVER.mydomain.com
Using PowerShell.
Create a new gMSA account:
New-ADServiceAccount -Name "gMSAuser1" -DNSHostName "gMSAuser1.mybusiness.local" -Enabled $True
Assign it for use by computer 'MYCOMPUTER':
Set-ADServiceAccount -Identity gMSAuser1 -PrincipalsAllowedToRetrieveManagedPassword MYCOMPUTER$
Exchange Online PowerShell:
New-TenantAllowBlockListItems -ListType Sender -Block -NoExpiration -Entries badperson@example.com -Notes "My description"
This can be done without disruption.
del /f/s/q "E:\FOLDERTODELETE" > nul & rmdir /s/q "E:\FOLDERTODELETE"
(del should be quicker but might leave things behind. rmdir is slower but should delete things that del can't.
"C:\Program Files (x86)\Cisco\Cisco Secure Client\DART\dartcli.exe" -dst "C:\temp\DARTBundle.zip"
To add "contoso.com" and "fabrikam.com" to jsmith@example.com's Outlook Trusted Senders list, and add "jane@adatum.com" to their Blocked Senders list, without affecting existing entries:
Set-MailboxJunkEmailConfiguration -Identity jsmith@example.com -TrustedSendersAndDomains @{Add="contoso.com","fabrikam.com"} -BlockedSendersAndDomains @{Add=jane@adatum.com}
To view the user's list of Trusted Senders:
(Get-MailboxJunkEmailConfiguration jsmith@example.com).TrustedSendersAndDomains
And to view Blocked Senders:
(Get-MailboxJunkEmailConfiguration jsmith@example.com).BlockedSendersAndDomains
To connect to the RDS database:
From Exchange PowerShell:
# For every user mailbox, remove blocked senders with domains in $approvedDomainList $approvedDomainList = "gooddomainexample1.com","gooddomainexample2.com","gooddomainexample3" $user= Get-Mailbox -ResultSize unlimited -Filter {(RecipientTypeDetails -eq 'UserMailbox')} | Select Identity $user | ForEach-Object { if ($blockedDomains = ($_ | Get-MailboxJunkEmailConfiguration).BlockedSendersAndDomains | Where-Object {$_.Split('@')[1] -in $approvedDomainList}) { $_ | Set-MailboxJunkEmailConfiguration –BlockedSendersAndDomains @{remove=$blockedDomains} Write-Host "Removed the following address(es) from {0}'s blocked list:`n`t{1}" -f $_.Name,($blockedDomains -join "`n`t") } }
Check these Windows Registry keys to check a user's default printer.
Default printer:
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
Session redirected printer:
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\SessionDefaultDevices\X\Device
(new-object System.Net.WebClient).DownloadFile('https://dl.dell.com/AwesomeDrivers.EXE','C:\temp\Drivers\AwesomeDrivers.EXE')
And running PowerShell from Command Prompt:
PowerShell -Command "(new-object System.Net.WebClient).DownloadFile('https://dl.dell.com/AwesomeDrivers.EXE','C:\temp\Drivers\AwesomeDrivers.EXE')"Using MSOL PowerShell, outputting to CSV:
Get-MsolUser -All | Where-Object {($_.IsLicensed)}| Select UserPrincipalName, DisplayName, @{N="LastLogonDate";E={(Get-MailboxStatistics $_.UserPrincipalName).LastLogonTime}},@{n="Licenses Type";e={$_.Licenses.AccountSKUid}} | Export-Csv c:\temp\output.csv -NoTypeInformationDisplay firewall rules that contain the word 'zebra' using PowerShell:
Show-NetFirewallRule | where {$_.DisplayName -Like "*zebra*"} | select DisplayName
Remove a firewall rule using PowerShell:
Remove-NetFirewallRule -DisplayName "Zebra Application"Add a firewall rule using Command Prompt:
netsh advfirewall firewall add rule name="Zebra Application" dir=in action=allow protocol=TCP program="C:\program files (x86)\zebra\application.exe" profile=any enable=yesAfter creating the app, note the app's ObjectID and use AzureAD PowerShell:
$StartDate = Get-DateThis creates a client secret called "MySecretKey" that's valid for 40 years. The last line outputs the secret itself - take note of it as you won't be able to see it again.
Using Redirect rules:
#Redirect "/thename" "/path/to/file.txt"Using a RedirectMatch rule:
RedirectMatch 301 "^/thename/?$" "/path/to/file.txt"Using Rewrite Rules:
#RewriteEngine onIf using Migration Manager to migrate on-prem files to SharePoint Online, the tool temporarily caches files on the C drive during the copy process. If there's not enough free space on the C drive, the migration will fail.
To change the storage to a different drive:
If you're migrating files from an on-prem file share to SharePoint, you may need to export a list of files on both sides for comparison:
