Tuesday, November 20, 2018

Top 10 IT Certifications 2019

2019 is here already! Good grief! Time is flying. Ok. So here is your Top 10 IT Certifications for 2019. If you are not working in the cloud, seriously...stop playing around and get serious about your career before one of us hungry IT people eat your lunch!

The days of playing guardian over an infrastructure and hiding what can be done in the cloud, in a colocation data center or offsite outside of your company, non-profit or organization are OVER. FUD (Fear, Uncertainty and Doubt) no longer will work to your benefit if your one of these dinosaurs in an organization scared of change. It will happen whether you like it or not.

Drumroll!!! Hands-on IT Certifications where recruiters will blow up your LinkedIn with offers!

1. AWS Solutions Architect - Associate Level (Champion):

2. AWS Solutions Architect - Professional Level:

3. Azure Solutions Architect Expert - ***NEW***NEW***NEW***

4. Certified Ethical Hacker - ***Enterprises and Defense (Globally)***

5. VMware Certified Professional 6.5 - Datacenter Virtualization

6. Cisco CCNA (Cisco Certified Networking Associate)

7. Red Hat Certified Engineer (RHCE) **Always A Hotcake**

8. Nutanix Platform Expert ***Jack of All Trades - Will Not Pass without Vast Experience***

9. Google Cloud Architect

10. Whatever you like!

Innovating Technologies that will drive Technological change:

1. Blockchain and its derivative technologies (e.g. Holochain)

2. AI (Artificial Intelligence) / ML (Machine Learning)

3. Mobile (Android and iPhone) - Full Stack Development


Saturday, November 10, 2018

How to Configure a Default Login Screen for Windows 10 with Group Policy

1. Create a folder called "Logo" under NETLOGON

2. Add the image to the folder

3. Use %logonserver% to identify multiple domain controllers since if you identify one specific DC and it goes down or there is any other problem with a particular DC, user's won't get the login screen image (the policy won't run on login).

Example: \\%logonserver%\netlogon\Logo\w10-lock-screen.jpg

4. The GPO Setting is under Personalization under Computer Configuration


Thursday, November 8, 2018

Migration from Exchange 2013 to Office365 Authentication Error

1. Verify that the Administrative user has the permission for "Application Impersonation" in the Exchange Admin Center.

2. Change all users in your local Active Directory over to the UPN for the verified (publicly resolvable Active Directory Domain). Powershell command:

$LocalUsers = Get-ADUser -Filter {UserPrincipalName -like '*domain.local'} -Properties userPrincipalName -ResultSetSize $null

$LocalUsers | foreach {$newUpn = $_.UserPrincipalName.Replace("domain.local","public.com"); $_ | Set-ADUser -UserPrincipalName $newUpn}

3. Sync your Azure Active Directory Tool (Force the Update)

Start-ADSyncSyncCycle -PolicyType initial

4. Verify that your login with "public.com" is working on https://portal.office.com

Username: stewie.griffin@public.com
Password: test0!

You call that a password?

This is a password son!!: %&^*(LUIKG/73&^%HVJB)&*(YIU)(&*^UTY8567irtufgykA&*(^RTUFGYOHPI()$%^^#$%TE

How to Fix Microsoft Exchange 2013 to Office 365 Error ews/mrsproxy.svc' failed.The HTTP request was forbidden with client authentication scheme ‎’Negotiate‎’

1. The first part of the denial is that the Exchange 2013 server has to be set to "0" instead of "1" in their attributes.

2. Login to your DC and then search for ADSI Edit (Windows 2012/2016/2019 Server):

Change the "adminCount" setting to "1" and then reboot the server (NOTE: I saw that even on reboot, this flag remained. So I doubt it has anything to do with the http authentication.) This is when I then ran the following commands on the Exchange 2013 Server itself in EMS. This is the Microsoft article: https://support.microsoft.com/en-us/help/2975731/access-is-denied-error-when-you-try-to-move-mailboxes-to-exchange-onli but it had no impact at all on the error even after rebooting. It just came back.

3. Login to the CAS or Exchange Server and Open the Exchange Management Shell

4. Run the following command in the EMS:
[PS] c:\Windows\system32\Get-WebServicesVirtualDirectory | select *auth*

5. Look at the output for BasicAuthentication. You will see it set to false:

6. Run the command: Get-WebServicesVirtualDirectory | Set-WebServicesVirtualDirectory –BasicAuthentication $TRUE

NOTE: if it times out in CAS you can also run it on the Exchange Server or do it in the Exchange Admin Center under Servers >> Virtual Directories >> OWA (etc)

7. After this fix. Run the Microsoft Office 365 Hybrid Connection Wizard (You will need your O365 Administrator account and an AD account that is an Exchange organization administrator so that you can complete the wizard.

8. You will need to install the application on the CAS server itself (NOTE: Do not install it on Exchange or your local machine. It will just fail).

9. Run the Data Migration from the Exchange Admin Center after you verify that you have successfully configured the Hybrid tool (also make sure you have already assigned licenses to users and you have the Azure AD Connect tool already configured on your local domain controller.

(NOTE: You have to have a subscription active in Microsoft Azure or if you purchase from Rackspace then your account will have a Tenant account and you will be able to configure the tool).

10. ADFS Configuration using AD Directory Sync:

Lifesaver Credit (Thanks Guys!!!): 
http://bit.ly/2zCiuP0 (Jaap Wesselius)
http://bit.ly/2RLGvuv (Dan Djurasovic)

Helpful (Not Used, but relevant and may help others):

Thursday, November 1, 2018

Transfer FSMO Roles

1. Login with a forest level administrator account

2. Open CMD prompt as an Administrator

3. Run the following commands:

ntdsutil - > roles -- > connections --> connect to server dc-servername -- > quit

Schema Master
transfer schema master
<Enter Key>

RID Master
transfer rid master
<Enter Key>

Domain Naming Master
transfer naming master
<Enter Key>

PDC Emulator
transfer pdc
<Enter Key>

Infrastructure Master
transfer infrastructure master
<Enter Key>

Type q / q and that's it! Shut the box down or do whatever you were going to do!


Wednesday, October 31, 2018

Microsoft Exchange Transport Services Won't Start

Open PowerShell with the Exchange PowerShell CMD Tool

Check the Health of Exchange:

Check the Exchange Database Status:
Get-MailboxDatabase -Status | Format-List name,server,mounted

Check the Queues:
Get-Queue | Select Identity,Status,MessageCount

Open up Event Viewer and Read the logs and check what's going on. If you cannot start the EdgeSync Service. Re-Add:

New-EdgeSyncServiceConfig - Site YourSitesandServicesLocation

Start --> Run --> services.msc

Re-Start the services. If Microsoft Filtering is hung. Bounce the server. Mail should start flowing again. If not...Microsoft Support is your friend. Don't take all day...troubleshoot what you can and then bow humbly, give up and call support. Your busy right?

Microsoft US Support: 1 (800) 642-7676
Microsoft US Support (URL): https://support.microsoft.com/en-us/assistedsupportproducts

Mount Exchange Database

Mount-Database -identity Domain\Exchange Server Name\ mailbox name

Get-Server *Exchange* | Start-Service
Get-ServerHealth -Identity Domain\Exchange Server Name
Get-ServerComponentState -Identity Domain\Exchange Server Name
Get-DomainController | fl name,adsite
Get-ExchangeServer | fl name,admindisplayversion,serverrole,site Add=PSSnapin *exch*


Sunday, October 28, 2018

How to Install VMware ESXi 6.7 on VMware Workstation 15

Static IP configuration were causing me some headaches. The alternative options are DHCP and DHCP with a reservation if you have a DHCP server you manage. Optionally, you can go the static configuration route but it was a headache for me and I'm busy and have other things to do.

Lab Scenario with VMware Workstation 15 (WS15 was on W10)

1. Download the ISO and then double-click until you find the .ova and double-click it or right click and open it in VMware Workstation. The wizard is pretty simple.

2. After you import the VM and configure the VM with the Wizard. VMware Photon 1.0 will launch and run the scripts in the background. Be patient. It runs for like 5-8 minutes. Just leave it alone. It will boot and you will see the screen. NOTE: Make sure you type in :5480 after the IP or the hostname or you will see bupkis.

https://ipaddress or FQDN:5480. I recommend using the FQDN

3. Select the option that works for you and install everything.