Search This Blog

Wednesday, 31 July 2013

Share Point 2013 - Access is denied. Verify that either the Default Content Access Account has access to this repository, or add a crawl rule to crawl this repository.

You have errors in the event log relating to being unable to crawl your Share Point Site. This is because the Loop Back feature of Share Point has not been disabled, this issue is described here

Error Message in the Crawl Log


When you look in the Crawl Logs you can see the error listed for your Share Point Web Application.

Run PowerShell Script


You can disable the loopback feature with the PowerShell cmds

New-ItemProperty HKLM:\System\CurrentControlSet\Control\Lsa -Name "DisableLoopbackCheck" -Value "1" -PropertyType dword

Restart Share Point Server Search Service


Restart the Share Point Server Search Service 15 Service.

Start a new Crawl


In Share Point Central Administration, go to Crawling, Content Sources and then start a new crawl.

Crawl Success


You should now see your crawl has been successful.

Citrix - How to send CTRL ALT DEL to your session.

Press CTRL & F1


In a Citrix Session to produce the CTRL ALT DEL key combination, press CTRL & F1.

Choose Task Manager


Choose Start Task Manager.

Task Manager


You now have access to Task Manager and if you need to end a task that is not responding you can do so.

Wednesday, 24 July 2013

Small Business Server 2011 - Out Of Office Unavailable

Users report that they cannot set their Out Of Office, when you try to access EMC or EMS you are displayed with an error.

Out Of Office Error


The error message "Your automatic reply settings cannot be displayed because the server is currently unavailable." when a user tries to set their Out Of Office.

EMC and EMS Error


When you try to use the EMC or the EMS you are shown this error message that WinRM client cannot use Kerberos to connect to the local computer on port 80.

Cause of Error


The cause for this error is that there is a web site in IIS that is running on port 80 and as a result of this the Default Web Site cannot use port 80. Above you can see the Default Web Site has a ? symbol and the SharePoint - 80 site is stopped. I have stopped the SharePoint site as it was running on Port 80 and stopping the Default Web Site from running on this port. I then restarted the Default Web Site and I could access the EMC and EMS again.

Stop Site from Running on Port 80


In the Actions Pane on the right side choose the Bindings option.

Set Start Up of Site


Ensure the Start Automatically option is set to false so the site will not start automatically again.

Thursday, 11 July 2013

Blackberry Server - User displays Failed to Start in BES Console

User does not receive emails on their Blackberry Handset and in the console they are showing as status Failed to Start.

Step 1 - Error Failed to Start


If you have Blackberry users who report that they have no emails on their handsets and you see the status Failed to Start in the console. Look at the event log for the following errors shown above.

Step 2 - Event Log


Check the Application event log for the errors 20400 and 20154. These relate to permission access to the users mailbox on a mailbox database. The cause is that you have a mailbox database that the Besadmin account does not have permissions to.

Step 3- Set Permissions for Besadmin to Mailbox Database


If you have Exchange 2010 then you have to set the permissions to the users mailbox database using Powershell. This is explained in this KB from Blackberry

Get-MailboxDatabase | Add-ADPermission -User "BESAdmin" -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin, ms-Exch-Store-Visible

Once this is issue, restart the Blackberry Server and the users will show as Running in the console.

Thursday, 4 July 2013

Exchange 2010 - How to renew a SSL Certificate with DigiCert Part 2

Part 2 of how to install an SSL Certificate for Exchange 2010

Step 16 - Order


The order is now processing and will be available in the next 30 mins.

Step 17 - Download Certificate


When the Certificate is available choose the option to download the certificate, choose the right version for your Server Software.

Step 18 - Transfer CER file to Exchange Server


Transfer the CER file to the root of the Exchange Server.

Step 19 - Import CER file with Powershell


Import the CER file using the following Powershell cmd

Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path c:\mycert.cer -Encoding byte -ReadCount 0)) | Enable-ExchangeCertificate -Services "IIS,POP,IMAP,SMTP"

Step 20 - Check Certificates in use


Use the Get-ExchangeCertificate cmd to check the certificates installed, you will now see you have the renewed certificate and the old certificate. You now need to remove all the old expired certificates.

Step 21 - Confirm Renewed Certificate


Use the Get-ExchangeCertificate | FL cmd to show the certificate details and confirm the renewed certificate is installed as Valid and has the correct notAfter date.

Step 22 - Remove Expired Certificates


Use the Get-ExchangeCertificate cmd and find any certificate that has expired or is no longer required. Copy the Thumbprint to the clipboard.

Step 23 - Remove Certificate cmd


Enter the cmd to remove the certificate with the Thumbprint on the clipboard.

Remove-ExchangeCertificate -Thumbprint Thumbprint

Step 24 Check Certificate on Service


Visit the Exchange Outlook Web App and check the certificate displayed is the renewed certificate.

Exchange 2010 - How to renew a SSL Certificate with DigiCert Part 1

How to renew an SSL Certificate that is used by an Exchange 2010 Server for IIS Services

Step 1 - Show existing Certificate


Open the Exchange Management Shell and enter the cmd Get-ExchangeCertificate | FL to show all the existing certificates. Note the NotAfter date that shows the expiry date.

Step 2 - DigiCert Portal


Login to the Digicert portal at and then choose My Orders and find your SSL Certificate that is due to expire. Click on the order number on the left.

Step 3 - Renew Certificate


Scroll down the page and choose the Renew button.

Step 4 - Validity Period


Choose the Validity Period for the Certficate, confirm the Common Name is correct and then click the Optional I would like to provide my CSR and auto fill names now.

Step 5 - CSR


The CSR Window is displayed, choose the Server Software for the Certifciate and click on the Upload a CSR link.

Step 6 - CSR Creation Tool


Next click on the Exchange 2010 CSR Creation Tool.

Step 7 - Create CSR Command


Enter in the Certificate Details the correct Common Name, this is the primary domain name for the certificate, then enter any Subject Alternative Names (SAN) such as autodiscover below and the correc owner details. The CSR Powershell cmd is generated for you on the right hand pane. Copy this to the clipboard.

Step 8 - Generate the CSR in PowerShell


Paste the CSR Powershell cmd into your Exchange Server Powershell.

Step 9 - CSR Text File


Based on the location of the CSR file in your Powershell cmd, open the TXT file and copy the entire contents to the clipboard.

Step 10 - Enter CSR


Paste the CSR Text into the Digicert CSR Pane. Click Continue.

Step 11 - Continue Certificate Renew


You return to the Certificate Renew window. Click continue.

Step 12 - Organization Details


Confirm the correct Organization details and Contact Details are chosen.

Step 13 - Make Purchase


Enter your payment details and purchase the Certificate.

Step 14 - Order Processing


The order will now be processed.