Search This Blog

Wednesday 31 July 2013

Share Point 2013 - Access is denied. Verify that either the Default Content Access Account has access to this repository, or add a crawl rule to crawl this repository.

You have errors in the event log relating to being unable to crawl your Share Point Site. This is because the Loop Back feature of Share Point has not been disabled, this issue is described here http://support.microsoft.com/kb/896861

Error Message in the Crawl Log

media_1375258143816.png

When you look in the Crawl Logs you can see the error listed for your Share Point Web Application.

Run PowerShell Script

media_1375258239259.png

You can disable the loopback feature with the PowerShell cmds

New-ItemProperty HKLM:\System\CurrentControlSet\Control\Lsa -Name "DisableLoopbackCheck" -Value "1" -PropertyType dword

Restart Share Point Server Search Service

media_1375259610988.png

Restart the Share Point Server Search Service 15 Service.

Start a new Crawl

media_1375258277485.png

In Share Point Central Administration, go to Crawling, Content Sources and then start a new crawl.

Crawl Success

media_1375259214879.png

You should now see your crawl has been successful.

Citrix - How to send CTRL ALT DEL to your session.

Press CTRL & F1

2013-07-31_08.10.01.png

In a Citrix Session to produce the CTRL ALT DEL key combination, press CTRL & F1.

Choose Task Manager

media_1375254645999.png

Choose Start Task Manager.

Task Manager

media_1375254654563.png

You now have access to Task Manager and if you need to end a task that is not responding you can do so.

Wednesday 24 July 2013

Small Business Server 2011 - Out Of Office Unavailable

Users report that they cannot set their Out Of Office, when you try to access EMC or EMS you are displayed with an error.

Out Of Office Error

media_1374660434476.png

The error message "Your automatic reply settings cannot be displayed because the server is currently unavailable." when a user tries to set their Out Of Office.

EMC and EMS Error

media_1374660453305.png

When you try to use the EMC or the EMS you are shown this error message that WinRM client cannot use Kerberos to connect to the local computer on port 80.

Cause of Error

media_1374660470730.png

The cause for this error is that there is a web site in IIS that is running on port 80 and as a result of this the Default Web Site cannot use port 80. Above you can see the Default Web Site has a ? symbol and the SharePoint - 80 site is stopped. I have stopped the SharePoint site as it was running on Port 80 and stopping the Default Web Site from running on this port. I then restarted the Default Web Site and I could access the EMC and EMS again.

Stop Site from Running on Port 80

media_1374660690573.png

In the Actions Pane on the right side choose the Bindings option.

Set Start Up of Site

media_1374660695550.png

Ensure the Start Automatically option is set to false so the site will not start automatically again.

Thursday 11 July 2013

Blackberry Server - User displays Failed to Start in BES Console

User does not receive emails on their Blackberry Handset and in the console they are showing as status Failed to Start.

Step 1 - Error Failed to Start

media_1373533066765.png

If you have Blackberry users who report that they have no emails on their handsets and you see the status Failed to Start in the console. Look at the event log for the following errors shown above.

Step 2 - Event Log

media_1373533078496.png

Check the Application event log for the errors 20400 and 20154. These relate to permission access to the users mailbox on a mailbox database. The cause is that you have a mailbox database that the Besadmin account does not have permissions to.

Step 3- Set Permissions for Besadmin to Mailbox Database

media_1373533088528.png

If you have Exchange 2010 then you have to set the permissions to the users mailbox database using Powershell. This is explained in this KB from Blackberry

Get-MailboxDatabase | Add-ADPermission -User "BESAdmin" -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin, ms-Exch-Store-Visible

Once this is issue, restart the Blackberry Server and the users will show as Running in the console.

Thursday 4 July 2013

Exchange 2010 - How to renew a SSL Certificate with DigiCert Part 2

Part 2 of how to install an SSL Certificate for Exchange 2010

Step 16 - Order

media_1372937898708.png

The order is now processing and will be available in the next 30 mins.

Step 17 - Download Certificate

media_1372939657246.png

When the Certificate is available choose the option to download the certificate, choose the right version for your Server Software.

Step 18 - Transfer CER file to Exchange Server

media_1372939734523.png

Transfer the CER file to the root of the Exchange Server.

Step 19 - Import CER file with Powershell

media_1372939785824.png

Import the CER file using the following Powershell cmd

Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path c:\mycert.cer -Encoding byte -ReadCount 0)) | Enable-ExchangeCertificate -Services "IIS,POP,IMAP,SMTP"

Step 20 - Check Certificates in use

media_1372940041464.png

Use the Get-ExchangeCertificate cmd to check the certificates installed, you will now see you have the renewed certificate and the old certificate. You now need to remove all the old expired certificates.

Step 21 - Confirm Renewed Certificate

media_1372940065057.png

Use the Get-ExchangeCertificate | FL cmd to show the certificate details and confirm the renewed certificate is installed as Valid and has the correct notAfter date.

Step 22 - Remove Expired Certificates

media_1372940196350.png

Use the Get-ExchangeCertificate cmd and find any certificate that has expired or is no longer required. Copy the Thumbprint to the clipboard.

Step 23 - Remove Certificate cmd

media_1372940240293.png

Enter the cmd to remove the certificate with the Thumbprint on the clipboard.

Remove-ExchangeCertificate -Thumbprint Thumbprint

Step 24 Check Certificate on Service

media_1372940342451.png

Visit the Exchange Outlook Web App and check the certificate displayed is the renewed certificate.

Exchange 2010 - How to renew a SSL Certificate with DigiCert Part 1

How to renew an SSL Certificate that is used by an Exchange 2010 Server for IIS Services

Step 1 - Show existing Certificate

media_1372937297492.png

Open the Exchange Management Shell and enter the cmd Get-ExchangeCertificate | FL to show all the existing certificates. Note the NotAfter date that shows the expiry date.

Step 2 - DigiCert Portal

media_1372937400277.png

Login to the Digicert portal at www.digicert.com and then choose My Orders and find your SSL Certificate that is due to expire. Click on the order number on the left.

Step 3 - Renew Certificate

media_1372937411024.png

Scroll down the page and choose the Renew button.

Step 4 - Validity Period

media_1372937462670.png

Choose the Validity Period for the Certficate, confirm the Common Name is correct and then click the Optional I would like to provide my CSR and auto fill names now.

Step 5 - CSR

media_1372937483857.png

The CSR Window is displayed, choose the Server Software for the Certifciate and click on the Upload a CSR link.

Step 6 - CSR Creation Tool

media_1372937507661.png

Next click on the Exchange 2010 CSR Creation Tool.

Step 7 - Create CSR Command

media_1372937563156.png

Enter in the Certificate Details the correct Common Name, this is the primary domain name for the certificate, then enter any Subject Alternative Names (SAN) such as autodiscover below and the correc owner details. The CSR Powershell cmd is generated for you on the right hand pane. Copy this to the clipboard.

Step 8 - Generate the CSR in PowerShell

media_1372937631172.png

Paste the CSR Powershell cmd into your Exchange Server Powershell.

Step 9 - CSR Text File

media_1372937649561.png

Based on the location of the CSR file in your Powershell cmd, open the TXT file and copy the entire contents to the clipboard.

Step 10 - Enter CSR

media_1372937664306.png

Paste the CSR Text into the Digicert CSR Pane. Click Continue.

Step 11 - Continue Certificate Renew

media_1372937678829.png

You return to the Certificate Renew window. Click continue.

Step 12 - Organization Details

media_1372937719702.png

Confirm the correct Organization details and Contact Details are chosen.

Step 13 - Make Purchase

media_1372937854900.png

Enter your payment details and purchase the Certificate.

Step 14 - Order Processing

media_1372937880041.png

The order will now be processed.