<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Fragged!</title>
	<atom:link href="http://fragged.nu/feed/" rel="self" type="application/rss+xml" />
	<link>http://fragged.nu</link>
	<description>computer related stuff, with a light sprinkle of hobbies</description>
	<lastBuildDate>Tue, 01 May 2012 16:54:21 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>DIY Simulator seat</title>
		<link>http://fragged.nu/2012/05/diy-simulator-seat/</link>
		<comments>http://fragged.nu/2012/05/diy-simulator-seat/#comments</comments>
		<pubDate>Tue, 01 May 2012 07:29:35 +0000</pubDate>
		<dc:creator>Simon Juul Larsen</dc:creator>
				<category><![CDATA[Cars]]></category>
		<category><![CDATA[Gaming]]></category>
		<category><![CDATA[3D Vision]]></category>
		<category><![CDATA[Apache Air Assault]]></category>
		<category><![CDATA[DiRT 3]]></category>
		<category><![CDATA[DYI]]></category>
		<category><![CDATA[G25]]></category>
		<category><![CDATA[g940]]></category>
		<category><![CDATA[gaming]]></category>
		<category><![CDATA[logitech]]></category>
		<category><![CDATA[NVIDIA]]></category>
		<category><![CDATA[racing]]></category>
		<category><![CDATA[Simulation]]></category>

		<guid isPermaLink="false">http://fragged.nu/?p=453</guid>
		<description><![CDATA[Inspired by other people on the interwebs, I decided it was about time to make my own simulator/racing/gaming seat &#8211; something I&#8217;ve been wanting to do for a long time. A video of the finished product can be seen below. It&#8217;s quite a party-piece with friends, even those who are not gamers, and even the [...]]]></description>
			<content:encoded><![CDATA[<p>Inspired by other people on the interwebs, I decided it was about time to make my own simulator/racing/gaming seat &#8211; something I&#8217;ve been wanting to do for a long time.</p>
<p>A video of the finished product can be seen below. It&#8217;s quite a party-piece with friends, even those who are not gamers, and even the games who are not &#8220;simmers&#8221;/&#8221;racers&#8221;. <img src='http://fragged.nu/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p><span style="text-align:center; display: block;"><a href="http://fragged.nu/2012/05/diy-simulator-seat/"><img src="http://img.youtube.com/vi/Dj1NXIK21v8/2.jpg" alt="" /></a></span></p>
<p>Read the full story below&#8230;</p>
<p><span id="more-453"></span></p>
<h2>Requirements</h2>
<ol>
<li>It should be compatible with multiple game controllers (Logitech G25, Logitech G940, Steel Battalion, Mouse+keyboard, others)</li>
<li>It needs to be easy to disassemble, leaving just a seat for guests.</li>
<li>Mounted on wheels.</li>
<li>Relatively lightweight.</li>
<li>No motion controllers/actuators/vibrators fixed to seating/frame.</li>
<li>No speaker mounts.</li>
<li>No screen/TV mount.</li>
<li>Adjustable for users of different sizes.</li>
<li>Usable for both Left-hand-drive and Right-hand-drive (gear-shifter &amp; handbrake must be movable).</li>
</ol>
<h2>Optionals</h2>
<div>
<ol>
<li>Option for using 4- or 6-point racing harness.</li>
<li>Rumble/vibration added to Steel Battalion controller.</li>
<li>Option to use Logitech G25 pedals, shifter &amp; handbrake for Microsoft Wireless Wheel.</li>
</ol>
</div>
<h2>Sources of inspiration</h2>
<ul>
<li><a href="http://forums.finalgear.com/entertainment/my-new-racing-cockpit-g25-27792/" target="_blank">Chilicoke DIY cockpit</a></li>
<li><a href="http://chilicoke.com/logitechwheel.htm" target="_blank">Chilicoke G25 Steering Wheel adapter &amp; Shifter paddles</a></li>
<li><a href="http://www.ricmotech.com/store/index.php?main_page=product_info&amp;cPath=20&amp;products_id=9" target="_blank">Ricmotech Simulation Racing Systems &#8211; DIY Sim Racing Cockpit</a></li>
<li><a href="http://www.ricmotech.com/store/index.php?main_page=page&amp;id=18" target="_blank">Ricmotech Simulation Racing Systems &#8211; free shifter mod</a></li>
<li><a href="http://www.bigmech.com/sb/sb_controller_mod/disclaimer.html" target="_blank">AlphA&#8217;s Steel Battalion Controller mod</a></li>
<li><a href="http://simhq.com/forum/ubbthreads.php/topics/3323724/G940_MOD_Warning_large_picture.html" target="_blank">MasterTec&#8217;s G940 &#8220;Reversal bug&#8221; mod/fix</a>  &#8211; <a href="http://www.lca.ympsa.com/g940mod.html" target="_blank">alt. link</a></li>
</ul>
<p>&nbsp;</p>
<h2>Bill Of Materials</h2>
<p>All prices in Danish Kroner (DKK)</p>
<ul>
<li>Sparco Chrono Road seat 1700,-</li>
<li>Mounting console for seat 100,-</li>
<li>Sparco 6-point racing harness 575,-</li>
<li>Plumbing parts for handbrake 250,-</li>
<li>Handbrake cover 125,-</li>
<li>Momo steering wheel 1225,-</li>
<li>G25 steering wheel adapter &amp; shifter paddles 475,-</li>
<li>Assorted screws and bits and bobs 800,-</li>
<li>Electronic connectors 275,-</li>
</ul>
<p>Total: 5525,- dkr, approx $1000<br />
Controllers NOT included!</p>
<p>&nbsp;</p>
<h2>The frame</h2>
<p>And old shelving system was used as a frame &#8211; it&#8217;s made of steel tubing in 32mm (1-1/4&#8243;) diameter, 40cm wide, with a chrome finish &#8211; 3 sections were cut up and used. The longest section for the base is xxcm, and has 6 rubber wheels mounted, 4 of which has &#8220;brakes&#8221;. The front is the second-longest at xxcm and holds the pedals in place. The smallest is the &#8216;steering-column&#8217;, and is xxcm &#8211; it holds the main platform. The 2 smaller sections are secured together using a steel hose clamp, and to the bottom frame by squeezing the ends flat and bolting them to the sides (inside + outside) of the main frame. The seat-console sits on top of some reinforcement bars, and all the small tubing on the bottom section has been welded in place for stability.</p>
<p>&nbsp;</p>
<h2>Mounting arrangement / multiple devices</h2>
<p>To accommodate multiple devices (not at the same time!) the mounting arrangement is a simple platform. An indent has been made for the Logitech G25, and the backside has been angled to fit the Steel Battalion shape. Holes are drilled where they are needed (for both G25 + handbrake, Steel Battalion and G940). The platform has steel supports underneath.</p>
<p>&nbsp;</p>
<h2>Assembly / disassembly</h2>
<p>The platform for hold the controllers can be removed by first unlocking the 2 pins located underneath the plate, then lifting it up. The side-boards and handbrake attach to the &#8216;wings&#8217; of the main platform. The modded Logitech G25 pedals are removed by either unlocking the 2 pins, or simply rotating it and lifting it out. The seat is secured with 4 bolts from below that are welded in place so you only have to remove the nuts on the topside.</p>
<p>&nbsp;</p>
<h2>G25 modifications</h2>
<p><strong>Reverse-mounted pedals mod<br />
</strong>Instructions for reverse-mounting your pedals can be found @ <a href="http://chilicoke.com/mods/reversepedal.htm" target="_blank">Chilicoke&#8217;s site</a>, but it&#8217;s simply a matter of taking the plastic box apart and mounting the 3 pedals upside down (in the correct order) with a M6 machine screw mounted through a plate (remember to flip the pedal plates). I  mounted my pedals to a piece of chipboard that fits inside the width of the frame. It suspends from the supports in the top, and locks into place with the supports below.</p>
<p><strong>Heavier shift &amp; reverse resistance mod</strong><br />
I followed <a href="http://chilicoke.com/mods/shifterresistance.htm" target="_blank">Chilicoke&#8217;s guide</a> for this mod, but had some problems finding a rubber o-ring with the correct size in my local hardware shop. Eventually I found a fit. The spacer for the heavier shift was done by sawing off a bit of a 6mm bolt.</p>
<p><strong>Shift noise mod<br />
</strong>Found this one over at <a href="http://www.ricmotech.com/store/index.php?main_page=page&amp;id=18" target="_blank">Ricmotech</a> &#8211; a simple mod to make the shifter sound better (less plastic/clonking noise). While the unit is disassembled, a piece of rubber insulation tape (for sealing doorframes etc.) is added to the inside of the shifter opening.</p>
<p><strong>Handbrake mod</strong><br />
Inspired by Chilicoke (again!) I wanted a handbrake, <a href="http://chilicoke.com/mods/ebrake.htm" target="_blank">see his site for wiring instructions etc</a>.  I wanted a minimum of travel, and I wanted the handle to go straight up, at 90° from the plate it was resting on. The handbrake handle was made out of 10mm and 12mm copper tubing from the plumbing department. A T-section for the 12mm pipe was drilled up so the 10mm pipe could fit through and act as a bearing. A spring was scrounged from some brake parts. It was all mounted on a custom-shaped piece of chipboard, that is mirrored so it fits on both the right- and left-hand side of the wheel. A gearknob from an old Fiat 127 &#8216;Arbath&#8217; was used for the handle &#8211; since no push-button is needed. A small microswitch is fitted underneath (secured in place with epoxy), and is activated by operating the lever backwards. The wires from the microswitch are mounted to clips to take any eventual strain. A male mono minijack connecter is fitted to the end, and color-coded appropriately.</p>
<p><strong>Color-coding buttons</strong><br />
I can&#8217;t remember the Xbox X/Y/A/B button layout very good, so when I&#8217;m playing Test Drive Unlimited 2 or NFS: The Run, I can&#8217;t remember what&#8217;s what. A simple paintjob of the 4 topmost buttons on the gearshift unit does it.</p>
<p><strong>G25 pedals for Microsoft Wireless Wheel</strong><br />
Guide: <a href="http://forums.forzamotorsport.net/forums/thread/2975695.aspx">http://forums.forzamotorsport.net/forums/thread/2975695.aspx<br />
</a>To come later &#8211; maybe <img src='http://fragged.nu/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> </p>
<p>&nbsp;</p>
<h2>Steel Battalion modifications</h2>
<ul>
<li>Vibration/rumble mod</li>
<li>Hardmount mod</li>
</ul>
<div>&#8230; maybe, at some point&#8230;</div>
<p>&nbsp;</p>
<h2>Keyboard modifications</h2>
<p>I wanted the option to secure the keyboard I&#8217;m using like everything else, so M6 nuts were added to the bottom of the keyboard to allow hardmounting &#8211; this means that the keyboard will sit at an angle when used on a regular table, which is fine by me! The keyboard shown is a Microsoft Sidewinder X6.</p>
<h2>Logitech G940 modifications</h2>
<p><strong>Hardmount specifications</strong><br />
I hardmounted my G940 to the support plate on my rig, here are the distance between the mounting holes for all 3 devices:</p>
<p>Throttle assembly: 6,75&#8243;x7,75&#8243;</p>
<p>Joystick assembly: 6,75&#8243;x7,75&#8243;</p>
<p>Pedal assembly: 11&#8243;x6,25&#8243;</p>
<p><strong>Throttle cable mod/fix</strong><br />
I will determine if this is needed at a later point.</p>
<p><strong>Reversal bug mod/fix</strong><br />
I will determine if this is needed at a later point.</p>
<p><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Ffragged.nu%2F2012%2F05%2Fdiy-simulator-seat%2F&amp;title=DIY%20Simulator%20seat" id="wpa2a_2"><img src="http://fragged.nu/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://fragged.nu/2012/05/diy-simulator-seat/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ServiceDesk Plus with own Microsoft PKI</title>
		<link>http://fragged.nu/2012/04/servicedesk-plus-with-own-microsoft-pki/</link>
		<comments>http://fragged.nu/2012/04/servicedesk-plus-with-own-microsoft-pki/#comments</comments>
		<pubDate>Tue, 17 Apr 2012 08:29:06 +0000</pubDate>
		<dc:creator>Simon Juul Larsen</dc:creator>
				<category><![CDATA[IT]]></category>
		<category><![CDATA[Apache Tomcat]]></category>
		<category><![CDATA[Certificate]]></category>
		<category><![CDATA[keystore]]></category>
		<category><![CDATA[Microsoft PKI]]></category>
		<category><![CDATA[ServiceDesk Plus]]></category>
		<category><![CDATA[SSL]]></category>

		<guid isPermaLink="false">http://fragged.nu/?p=625</guid>
		<description><![CDATA[Sometimes it might be useful to have a certificate for ServiceDesk Plus that has been issued by your own Microsoft PKI, rather than a public vendor. Here is how I did it: (%SDPfolder% refers to the &#8220;ServiceDesk&#8221; folder, in my case this was C:\ManageEngine\ServiceDesk) Items marked with bold are variables that you have to change [...]]]></description>
			<content:encoded><![CDATA[<p>Sometimes it might be useful to have a certificate for ServiceDesk Plus that has been issued by your own Microsoft PKI, rather than a public vendor.</p>
<p>Here is how I did it:</p>
<p>(%SDPfolder% refers to the &#8220;ServiceDesk&#8221; folder, in my case this was C:\ManageEngine\ServiceDesk)</p>
<p>Items marked with <strong>bold</strong> are variables that you have to change to reflect your environment.</p>
<ol>
<li>Rename the default keystore &#8220;sdp.keystore&#8221;  in %SDPfolder%\jre\bin to &#8220;sdp.keystore.original&#8221;</li>
<li>Start a commando-prompt and &#8220;CD&#8221; to %SDPfolder%\jre\bin</li>
<li>Generate a new keystore with the command: keytool -genkey -alias <strong>domain.com</strong> -keyalg RSA -keystore sdp.keystore<br />
Explanation; Alias is only used internally in the keystore, end users will not see it. You should set it to the domain, not the FQDN. As keystore, specify original &#8220;sdp.keystore&#8221; name &#8211; then you don&#8217;t have to change any configs later.</li>
<li>Next you will be promted for a password for your new keystore &#8211; set it to: sdpsecured<br />
Explanation; By using the default sdpsecured password you don&#8217;t have to change any configs later.</li>
<li>Now you will be prompted for first name, last name and all that stuff.<br />
First name and last name: <strong>server.domain.com &lt;FQDN&gt;</strong><br />
Organizational unit: <strong>server.domain.com &lt;FQDN&gt;</strong><br />
Organization: <strong>server.domain.com &lt;FQDN&gt;</strong><br />
City or Locality: <strong>dk &lt;2-letter country code&gt; </strong><br />
State or Province: <strong>dk &lt;2-letter country code&gt; </strong><br />
Two-letter country code: <strong>dk &lt;2-letter country code&gt; </strong><br />
Is CN=server.domain.com, OU=server.domain.com, O=server.domain.com, L=DK, ST=DK, c=DK correct? <strong>Yes </strong></li>
<li>Use the same password as keystore password, so press RETURN.</li>
<li>Now to generate a Certificate Request: keytool -certreq -keyalg RSA -alias <strong>domain.com</strong> -file <strong>C:\certreq.txt</strong> -keystore sdp.keystore<br />
Keystore password: sdpsecured</li>
<li> Copy all the text from the new Certificate request file C:\certreq.txt</li>
<li>Visit your PKI Certificate Enrollment website (https://certenroll.domain.local)</li>
<li>Request a certificate -&gt; Submit a certificate request by using a base-64-encoded&#8230;.</li>
<li>Paste the Certificate request, and select an appropriate Certificate Template (a web server certificate with key usage: Server Authentication)</li>
<li>Submit and generate the certificate.</li>
<li>Download the DER encoded Certificate Chain &#8211; this will give you a &#8220;certnew.p7b&#8221; file. Save this somewhere easy to reach.</li>
<li>Open the &#8220;certnew.p7b&#8221; file (will open with certmgr)</li>
<li>Expand the &#8220;Certificates&#8221; folder.</li>
<li>Double-click the certificate issued to your own PKI <strong>ROOT</strong> CA, click the Details tab and use the Copy to File&#8230; button. Save the certificate to C:\root.der</li>
<li>Double-click the certificate issued to your own PKI <strong>ISSUER</strong> CA, click the Details tab and use the Copy to File&#8230; button. Save the certificate to C:\intermed.der</li>
<li>Back in command promt; keytool -import -trustcacerts -keystore sdp.keystore -alias root -file <strong>C:\root.der.cer</strong></li>
<li>keytool -import -trustcacerts -keystore sdp.keystore -alias intermed -file C:\intermed.der.cer</li>
<li>keytool-import -trustcacerts -keystore -sdp.keystore -alias <strong>domain.com</strong> -file <strong>C:\certnew.p7b</strong></li>
<li>Verify all certificates are installed with keytool -list -keystore sdp.keystore</li>
<li>Copy the keystore file we have generated and populated: %SDPfolder%\jre\bin\sdp.keystore to %SDPfolder%\server\default\conf\sdp.keystore (overwrite or rename the target file if there is one)</li>
<li>Stop and start ServiceDesk Plus &#8211; You should now have your own SSL certificate being used, assuming you had already enabled SSL for ServiceDesk Plus</li>
</ol>
<p>&nbsp;</p>
<p>If HTTPS/SSL is not already enabled, do the following to enable:</p>
<ol>
<li>Stop ServiceDesk Plus</li>
<li>Run %SDPfolder%\bin\changeWebServerPort.bat 443 https</li>
<li>Start ServiceDesk Plus again</li>
</ol>
<p>&nbsp;</p>
<p>Also, another neat trick is to install IIS (Internet Information Services) on the same server, and use this to redirect HTTP users to your HTTPS site:</p>
<ol>
<li>If not already installed, install IIS (Windows Server 2008 &#8211; Add Role). Be sure to check the ASP feature when installing.</li>
<li>Create a &#8220;default.asp&#8221; file in C:\Inetpub\wwwroot with the following content;<br />
&lt;%@ Language=VBScript %&gt;<br />
&lt;%<br />
Response.Status=&#8221;301 Moved Permanently&#8221;<br />
Response.AddHeader &#8220;Location&#8221;,&#8221;https://<strong>server.domain.com</strong>/&#8221;<br />
%&gt;</li>
<li>Done!</li>
</ol>
<p><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Ffragged.nu%2F2012%2F04%2Fservicedesk-plus-with-own-microsoft-pki%2F&amp;title=ServiceDesk%20Plus%20with%20own%20Microsoft%20PKI" id="wpa2a_4"><img src="http://fragged.nu/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://fragged.nu/2012/04/servicedesk-plus-with-own-microsoft-pki/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Change audio device with 1 click</title>
		<link>http://fragged.nu/2012/04/change-audio-device-with-1-click/</link>
		<comments>http://fragged.nu/2012/04/change-audio-device-with-1-click/#comments</comments>
		<pubDate>Wed, 11 Apr 2012 08:09:28 +0000</pubDate>
		<dc:creator>Simon Juul Larsen</dc:creator>
				<category><![CDATA[IT]]></category>
		<category><![CDATA[Audio Devices]]></category>
		<category><![CDATA[AutoIt]]></category>
		<category><![CDATA[Microsoft Windows 7]]></category>

		<guid isPermaLink="false">http://fragged.nu/?p=594</guid>
		<description><![CDATA[At work I have a USB Headset connected to my PC, as well as a regular set of speakers with a 3,5mm Minijack. I often need to switch from one device to the other, and the Sound settings in the systray is simply too annoying to use. I searched and stumbled upon this discussion; https://getsatisfaction.com/microsoft/topics/need_shortcut_to_change_audio_device_in_one_click I [...]]]></description>
			<content:encoded><![CDATA[<p>At work I have a USB Headset connected to my PC, as well as a regular set of speakers with a 3,5mm Minijack. I often need to switch from one device to the other, and the Sound settings in the systray is simply too annoying to use.</p>
<p>I searched and stumbled upon this discussion; <a title="https://getsatisfaction.com/microsoft/topics/need_shortcut_to_change_audio_device_in_one_click" href="https://getsatisfaction.com/microsoft/topics/need_shortcut_to_change_audio_device_in_one_click">https://getsatisfaction.com/microsoft/topics/need_shortcut_to_change_audio_device_in_one_click</a></p>
<p>I ended up using the solution provided by &#8220;Bas&#8221;, which involves a script using AutoIT. It works perfectly! I have added a shortcut to the executable to my Taskbar, and now I can switch audio devices with 1 click. <img src='http://fragged.nu/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
Get the AutoIT file here: <a href="http://fragged.nu/2012/04/change-audio-device-with-1-click/toggle-audio-7/" rel="attachment wp-att-619">toggle-audio-7</a></p>
<p><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Ffragged.nu%2F2012%2F04%2Fchange-audio-device-with-1-click%2F&amp;title=Change%20audio%20device%20with%201%20click" id="wpa2a_6"><img src="http://fragged.nu/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://fragged.nu/2012/04/change-audio-device-with-1-click/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Policy Reporter &#8211; Trace slow logon times</title>
		<link>http://fragged.nu/2012/03/policy-reporter-trace-slow-logon-times/</link>
		<comments>http://fragged.nu/2012/03/policy-reporter-trace-slow-logon-times/#comments</comments>
		<pubDate>Tue, 13 Mar 2012 13:01:09 +0000</pubDate>
		<dc:creator>Simon Juul Larsen</dc:creator>
				<category><![CDATA[IT]]></category>
		<category><![CDATA[Citrix XenApp]]></category>
		<category><![CDATA[debug]]></category>
		<category><![CDATA[logon]]></category>
		<category><![CDATA[slow login]]></category>
		<category><![CDATA[troubleshooting]]></category>

		<guid isPermaLink="false">http://fragged.nu/?p=580</guid>
		<description><![CDATA[Primarily while working with Citrix/Terminal Services installations, I often came across the sentence; &#8220;Why are logon times so slow?&#8221; One very good tool to assist in troubleshooting this problem is to use SysPro Policy Reporter, which is even freeware! In brief it allows you to view the content of %systemRoot%\Debug\UserMode in a meaningful manner. You [...]]]></description>
			<content:encoded><![CDATA[<p>Primarily while working with Citrix/Terminal Services installations, I often came across the sentence; &#8220;Why are logon times so slow?&#8221;<br />
One very good tool to assist in troubleshooting this problem is to use SysPro Policy Reporter, which is even freeware!</p>
<p>In brief it allows you to view the content of %systemRoot%\Debug\UserMode in a meaningful manner. You will be able to view the exact timestamp for each entry, and this can give you clues to optimize your logon experience.  You will not get exact answers, but hopefully you will be able to translate the results yourself.</p>
<p>To be able to generate logon debug-output, you first have to enable this. See the instructions here: <a title="http://support.microsoft.com/kb/221833" href="http://support.microsoft.com/kb/221833" target="_blank">http://support.microsoft.com/kb/221833</a></p>
<p>In brief:</p>
<blockquote><p>Use Registry Editor to add or to modify the following registry entry:<br />
Subkey:<br />
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon<br />
Entry: UserEnvDebugLevel<br />
Type: REG_DWORD<br />
Value data: 10002 (Hexadecimal)</p></blockquote>
<p>You can get SysPro Policy Reporter here: <a href="http://www.sysprosoft.com./policyreporter.shtml">http://www.sysprosoft.com./policyreporter.shtml</a></p>
<p>Alternative download link: <a href="http://fragged.nu/2012/03/policy-reporter-trace-slow-logon-times/policy_reporter4_2/" rel="attachment wp-att-584">Policy Reporter 4.2.11</a></p>
<p><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Ffragged.nu%2F2012%2F03%2Fpolicy-reporter-trace-slow-logon-times%2F&amp;title=Policy%20Reporter%20%E2%80%93%20Trace%20slow%20logon%20times" id="wpa2a_8"><img src="http://fragged.nu/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://fragged.nu/2012/03/policy-reporter-trace-slow-logon-times/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PowerShell snips</title>
		<link>http://fragged.nu/2011/12/powershell-snips/</link>
		<comments>http://fragged.nu/2011/12/powershell-snips/#comments</comments>
		<pubDate>Thu, 29 Dec 2011 09:35:47 +0000</pubDate>
		<dc:creator>Simon Juul Larsen</dc:creator>
				<category><![CDATA[IT]]></category>
		<category><![CDATA[Microsoft Exchange Server (2007)]]></category>
		<category><![CDATA[powershell]]></category>
		<category><![CDATA[Quest]]></category>

		<guid isPermaLink="false">http://fragged.nu/?p=346</guid>
		<description><![CDATA[An assortment of PowerShell scripts I have stumbled upon, modified where needed. Use at your own risk blah blah. Sorry if I don&#8217;t give credit, but I simply can&#8217;t remember where I got them all from! Many of them require Quest ActiveRoles Management Shell, an extension for Windows PowerShell (freeware). Generic PowerShell Read .CSV file [...]]]></description>
			<content:encoded><![CDATA[<p>An assortment of PowerShell scripts I have stumbled upon, modified where needed. Use at your own risk blah blah. <img src='http://fragged.nu/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
Sorry if I don&#8217;t give credit, but I simply can&#8217;t remember where I got them all from!<br />
Many of them require <a href="http://www.quest.com/powershell/activeroles-server.aspx">Quest ActiveRoles Management Shell, an extension for Windows PowerShell</a> (freeware).<br />
<strong></strong></p>
<h2>Generic PowerShell</h2>
<p><strong>Read .CSV file and do something for each object:</strong><br />
ForEach ($usr in Get-Content &#8220;C:\temp\Users.csv&#8221;) { Get-Mailboxstatisti<br />
cs($usr)}</p>
<h2></h2>
<h2><strong>Groups/AD users</strong></h2>
<p><strong>Copy Group Members from Group A to B:</strong><br />
Get-QADGroupMember GroupA | % { Add-QADGroupMember GroupB -Member $_ }</p>
<p><strong>Copy Group Membership information from User A to B:</strong><br />
(Get-QADUser userA).MemberOf | Add-QADGroupMember -Member domain\userB</p>
<p><strong>&#8220;Bulk&#8221; change attributes on AD users:</strong><br />
Get-QADuser -sizelimit 0 | where-object { $_.Department -eq &#8220;Sales&#8221; } | foreach-object {Set-QADuser $_ -Department &#8220;Commercial&#8221;}<br />
<em>(Searches all users (sizelimit 0) where Department = &#8220;Sales&#8221; and for each object sets Department = &#8220;Commercial&#8221;)</em></p>
<p><strong>Find &#8220;indirect&#8221; (nested) AD group memberships for a specific user:</strong><br />
Get-QADMemberOf &#8220;John Doe&#8221; -indirect | fl name,description &gt;&gt; C:\JDoe.txt</p>
<p><strong>Find members of AD group, export to CSV:</strong><br />
get-qadgroupmember &#8220;group name&#8221; | select-object logonname, firstname, lastname | export-csv c:\filename.csv</p>
<p><strong>Export selected ExtensionAttribute (or other) to CSV file</strong></p>
<p>Get-QADUser -IncludedProperties extensionAttribute1 -sizeLimit 0 | Select-Object Name, samaccountname, extensionAttribute1 | Out-File C:\WhoIsWho.csv -width 400</p>
<p><strong>Blank out ExtensionAttribute1 for all users that have it</strong><br />
Get-QADuser -sizelimit 0 | Set-QADUser -ObjectAttribute @{extensionAttribute1=$null}</p>
<p><strong>Select users by country CAUTION, do not edit in this way!</strong><br />
Get-QADuser -sizelimit 0 -IncludedProperties c | Where-Object {$_.C -eq &#8220;GB&#8221; }</p>
<p>&nbsp;</p>
<h2>Exchange 2007/2010</h2>
<p><strong>Set Exchange mailbox quota:</strong><br />
set-mailbox &#8220;John Doe&#8221; -UseDatabaseQuotaDefaults $false -IssueWarningQuota 4GB -ProhibitSendQuota 5GB -ProhibitSendReceiveQuota 6GB<br />
<em>(Warning at 4GB, Block Send at 5GB and block receive at 6GB, remember to NOT use QuotaDefaults)</em></p>
<p><strong>Export mailbox statistics to CSV file</strong><br />
C:\&gt;Get-MailboxStatistics | ft Displayname,totalitemsize,databasename | Out-File C:\Mailboxstatistics.csv -width 200</p>
<p><strong>Export mailboxes to .PST file</strong><br />
Add-mailboxpermission -identity &#8220;John Doe&#8221; -accessrights fullaccess -user &#8220;AdminUser01&#8243;<br />
Export-Mailbox -Identity &#8220;John Doe&#8221; -PSTFolderpath X:\folder<br />
<em>(AdminUser01 has to be the one who&#8217;s running the Powershell at the moment of Exporting)</em></p>
<p><strong>Removing disconnected mailboxes in Exchange Server 2007/2010</strong><br />
<em>Listing all disconnected mailboxes:</em><br />
Get-MailboxStatistics | where-object { $_.DisconnectDate -ne $null } | Select DisplayName,MailboxGuid<br />
<em>Removing a single entry:</em><br />
Remove-Mailbox -Database &lt;Database-Name&gt; -StoreMailboxIdentity &lt;MailboxGuid&gt; -confirm:$false<br />
<em>Removing all users at the same time:</em><br />
$users = Get-MailboxStatistics | where-object { $_.DisconnectDate -ne $null } | Select DisplayName,MailboxGuid<br />
<em>Now that we have all disconnected mailboxes in a var, we can run the following cmdlet to remove all of them:</em><br />
$users | ForEach { Remove-Mailbox -Database &#8220;Mailbox Database&#8221; -StoreMailboxIdentity $_.MailboxGuid -confirm:$true }</p>
<p>&nbsp;</p>
<p><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Ffragged.nu%2F2011%2F12%2Fpowershell-snips%2F&amp;title=PowerShell%20snips" id="wpa2a_10"><img src="http://fragged.nu/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://fragged.nu/2011/12/powershell-snips/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Password Expiration Notice email</title>
		<link>http://fragged.nu/2011/11/password-expiration-notice-email/</link>
		<comments>http://fragged.nu/2011/11/password-expiration-notice-email/#comments</comments>
		<pubDate>Mon, 28 Nov 2011 08:36:19 +0000</pubDate>
		<dc:creator>Simon Juul Larsen</dc:creator>
				<category><![CDATA[IT]]></category>
		<category><![CDATA[password expiration]]></category>
		<category><![CDATA[powershell]]></category>
		<category><![CDATA[vbs]]></category>

		<guid isPermaLink="false">http://fragged.nu/?p=512</guid>
		<description><![CDATA[Found this very nice solution to sending password-reminders to users, all rights reserver Richard L. Mueller. http://www.rlmueller.net/PasswordExpires.htm &#160; VBScript program demonstrating how to use ADO to find all user accounts where the password will expire within a specified number of days in the future. The program does not retrieve users whose password has already expired. The [...]]]></description>
			<content:encoded><![CDATA[<p>Found this very nice solution to sending password-reminders to users, all rights reserver Richard L. Mueller. <a href="http://www.rlmueller.net/PasswordExpires.htm">http://www.rlmueller.net/PasswordExpires.htm</a></p>
<p>&nbsp;</p>
<blockquote><p>VBScript program demonstrating how to use ADO to find all user accounts where the password will expire within a specified number of days in the future. The program does not retrieve users whose password has already expired. The program also does not retrieve users whose password does not expire, whose password cannot change, where the user is not required to have a password, or where the account is disabled.</p>
<p>The program uses the domain maximum password age policy and the value of the pwdLastSet attribute of the users to determine when the passwords expire. Do not use this program if you use the new fine-grained password policies feature of Windows Server 2008. This program assumes the same password policy applies to all users.</p>
<p>The program filters on users where the pwdLastSet attribute corresponds to dates in the past such that the password will expire in the specified range. This requires converting the critical dates into the corresponding Integer8 values. For the users retrieved, the program uses the pwdLastSet attribute value to determine when the password will actually expire, in the time zone of the local computer.</p>
<p>For each user account found the program sends an email message to the user. The program uses the value of the &#8220;mail&#8221; attribute of the user object, which corresponds to the field &#8220;E-mail&#8221; on the &#8220;General&#8221; tab of ADUC. If this attribute does not have a value, the program uses the &#8220;proxyAddresses&#8221; attribute. This multi-valued attribute is used by Exchange to specify email addresses. This program uses the &#8220;primary&#8221; address of the user, which is the value which has either &#8220;SMTP:&#8221; or &#8220;X400:&#8221; as the prefix, in upper case. There can be only one &#8220;primary&#8221; email address in the collection. All other values have all lower case prefixes.</p>
<p><a title="Click here to view or download the program. Rename .txt file to .vbs before running program." href="http://www.rlmueller.net/Programs/PwdExpires.txt">PwdExpires.txt</a> &lt;&lt;&#8211; Click here to view or download the program</p>
<p>Next is a similar PowerShell script that retrieves all users whose passwords will expire within the specified number of days. An email function has recently been added, so the program is identical to the first.</p>
<p><a title="Click here to view or download the program. Rename .txt file to .ps1 before running program." href="http://www.rlmueller.net/PowerShell/PSPwdExpires.txt">PSPwdExpires.txt</a> &lt;&lt;&#8211; Click here to view or download the program</p></blockquote>
<p>&nbsp;</p>
<p>Hosted copies of the original script can be found here:</p>
<p><a href="http://fragged.nu/2011/11/password-expiration-notice-email/pspwdexpires-ps1/" rel="attachment wp-att-514">PSPwdExpires.ps1</a></p>
<p><a href="http://fragged.nu/2011/11/password-expiration-notice-email/pwdexpires-vbs/" rel="attachment wp-att-515">PwdExpires.vbs</a></p>
<p>&nbsp;</p>
<p>I modified the script (PowerShell) to allow for HTML emails with multiple lines of text.</p>
<p>First bit:</p>
<blockquote>
<pre>Function SendEmail($To, $Body)
{
    $Message = New-Object System.Net.Mail.MailMessage `
        $Script:From, $To, $Script:Subject, $Body
	$Message.IsBodyHtml = "true"
    $Client.Send($Message)
}</pre>
</blockquote>
<p>Last bit (where you enter your custom text):</p>
<blockquote>
<pre>    If ("$Mail" -ne "")
    {
        $Notice = "&lt;font size='2' face='Verdana'&gt;" `
			+ "&lt;b&gt;This is an automated message!&lt;/b&gt;&lt;br&gt;&lt;br&gt;" `
			+ "Your password for username $Name will expire by: &lt;b&gt;$PwdExpires&lt;/b&gt; (mm/dd/yyyy) &lt;br&gt;" `
			+ "Before then you must change your password by following one of the procedures mentioned below: &lt;br&gt;" `
			+ "&lt;/font&gt;"
        SendEmail $Mail $Notice
        "Email sent to $Name ($Mail), password expires $PwdExpires"
    }</pre>
<p>&nbsp;</p></blockquote>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Ffragged.nu%2F2011%2F11%2Fpassword-expiration-notice-email%2F&amp;title=Password%20Expiration%20Notice%20email" id="wpa2a_12"><img src="http://fragged.nu/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://fragged.nu/2011/11/password-expiration-notice-email/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Battlefield 3 CO-OP and playing with friends doesn&#8217;t work</title>
		<link>http://fragged.nu/2011/10/battlefield-3-co-op-and-playing-with-friends-doesnt-work/</link>
		<comments>http://fragged.nu/2011/10/battlefield-3-co-op-and-playing-with-friends-doesnt-work/#comments</comments>
		<pubDate>Fri, 28 Oct 2011 17:52:00 +0000</pubDate>
		<dc:creator>Simon Juul Larsen</dc:creator>
				<category><![CDATA[Gaming]]></category>
		<category><![CDATA[IT]]></category>
		<category><![CDATA[Antivirus]]></category>
		<category><![CDATA[Avast!]]></category>
		<category><![CDATA[Battlefield 3]]></category>
		<category><![CDATA[BF3]]></category>
		<category><![CDATA[CO-OP]]></category>
		<category><![CDATA[COOP]]></category>
		<category><![CDATA[multiplayer]]></category>

		<guid isPermaLink="false">http://fragged.nu/?p=501</guid>
		<description><![CDATA[Symptoms: When inviting a friend (in platoon or otherwise) to a game in Battlefield 3 on PC via the Battlelog (web-based) browser, one player will be unable to receive invites, and the invites that same player sends will not be usable by the other party. Also the player having this problem will not be able [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Symptoms:</strong> When inviting a friend (in platoon or otherwise) to a game in Battlefield 3 on PC via the Battlelog (web-based) browser, one player will be unable to receive invites, and the invites that same player sends will not be usable by the other party. Also the player having this problem will not be able to receive chats, but can send.</p>
<p><strong>Cause:</strong> Avast! Antivirus is causing this.</p>
<p><strong>Solution:</strong> Disable Avast! Antivirus when playing Battlefield 3.</p>
<p><em>Confirmed with Avast! Program Version 6.0.1289, definitions version 111028-0</em></p>
<p><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Ffragged.nu%2F2011%2F10%2Fbattlefield-3-co-op-and-playing-with-friends-doesnt-work%2F&amp;title=Battlefield%203%20CO-OP%20and%20playing%20with%20friends%20doesn%E2%80%99t%20work" id="wpa2a_14"><img src="http://fragged.nu/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://fragged.nu/2011/10/battlefield-3-co-op-and-playing-with-friends-doesnt-work/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>VBScript: Bypass the &#8220;Open File – Security Warning&#8221; dialog from VbScript</title>
		<link>http://fragged.nu/2011/09/vbscript-bypass-the-open-file-security-warning-dialog-from-vbscript/</link>
		<comments>http://fragged.nu/2011/09/vbscript-bypass-the-open-file-security-warning-dialog-from-vbscript/#comments</comments>
		<pubDate>Thu, 01 Sep 2011 13:33:24 +0000</pubDate>
		<dc:creator>Simon Juul Larsen</dc:creator>
				<category><![CDATA[IT]]></category>
		<category><![CDATA[vbscript]]></category>

		<guid isPermaLink="false">http://fragged.nu/?p=472</guid>
		<description><![CDATA[Found this solution to an annoying VBscript problem that I just had to save here: You have had it before: the “Open File – Security Warning”. Nice feature, but not very interesting during execution of scripts. However you may not want to turn it off. The simple solution in VBScript has been offered by MS [...]]]></description>
			<content:encoded><![CDATA[<p>Found this solution to an annoying VBscript problem that I just had to save here:</p>
<blockquote><p>You have had it before: the “Open File – Security Warning”. Nice feature, but not very interesting during execution of scripts. However you may not want to turn it off.</p>
<p>The simple solution in VBScript has been offered by MS themselve: the SEE_MASK_NOZONECHECKS environment variable. Change it at the start of your script and restore it at the end. Plain &amp; simple!</p>
<p>Sample code (same as the KB article):<br />
<em>set oShell= CreateObject(“Wscript.Shell”)<br />
set oEnv = oShell.Environment(“PROCESS”)<br />
oEnv(“SEE_MASK_NOZONECHECKS”) = 1<br />
oShell.Run “c:\ms04-038\WindowsXP-KB834707-x86-enu /quiet /passive /norestart”,0,True<br />
oEnv.Remove(“SEE_MASK_NOZONECHECKS”)</em></p>
<p>The Open File – Security Warning dialog box is displayed when you try to silently install a hotfix or an update by using a Visual Basic script in Windows XP Service Pack 2<br />
<a title="http://support.microsoft.com/kb/889815" href="http://support.microsoft.com/kb/889815">http://support.microsoft.com/kb/889815</a></p></blockquote>
<p><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Ffragged.nu%2F2011%2F09%2Fvbscript-bypass-the-open-file-security-warning-dialog-from-vbscript%2F&amp;title=VBScript%3A%20Bypass%20the%20%E2%80%9COpen%20File%20%E2%80%93%20Security%20Warning%E2%80%9D%20dialog%20from%20VbScript" id="wpa2a_16"><img src="http://fragged.nu/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://fragged.nu/2011/09/vbscript-bypass-the-open-file-security-warning-dialog-from-vbscript/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Exchange 2007 Certificate renewal</title>
		<link>http://fragged.nu/2011/07/exchange-2007-certificate-renewal/</link>
		<comments>http://fragged.nu/2011/07/exchange-2007-certificate-renewal/#comments</comments>
		<pubDate>Wed, 20 Jul 2011 12:54:50 +0000</pubDate>
		<dc:creator>Simon Juul Larsen</dc:creator>
				<category><![CDATA[IT]]></category>
		<category><![CDATA[Certificate]]></category>
		<category><![CDATA[Microsoft Exchange Server (2007)]]></category>

		<guid isPermaLink="false">http://fragged.nu/?p=374</guid>
		<description><![CDATA[Reference/credits go to: http://telnetport25.wordpress.com/2008/07/13/windows-2008-exchange-2007-renewing-an-existing-ssl-certificate-on-your-client-access-server/ SSL certificates are issued for periods of spanning a number of years (typically in multiples for example 1, 2 or more years – however eventually they do expire and need to be renewed. The renewal process involves generating a fresh CSR (Certificate Signing Request) on one of your Exchange Client Access servers [...]]]></description>
			<content:encoded><![CDATA[<p>Reference/credits go to: <a href="http://telnetport25.wordpress.com/2008/07/13/windows-2008-exchange-2007-renewing-an-existing-ssl-certificate-on-your-client-access-server/">http://telnetport25.wordpress.com/2008/07/13/windows-2008-exchange-2007-renewing-an-existing-ssl-certificate-on-your-client-access-server/</a></p>
<p>SSL certificates are issued for periods of spanning a number of years (typically in multiples for example 1, 2 or more years – however eventually they do expire and need to be renewed.</p>
<p>The renewal process involves generating a fresh CSR (Certificate Signing Request) on one of your Exchange Client Access servers – this is then sent to a root certification authority (for example VeriSign or Thwate) for processing into a valid SSL certificate (essentially they sign the request).</p>
<p><span id="more-374"></span>In order to generate a CSR file on the Exchange 2007 Client Access Servers and Windows 2008 open the Exchange Management Shell [ <strong>START -&gt; Programs -&gt; Microsoft Exchange Server 2007 -&gt; Exchange Management Shell</strong> ] and type the following command:</p>
<p><strong><em>New-ExchangeCertificate -GenerateRequest -Path c:\myReq.csr -KeySize 1024 -SubjectName “c=GB, s=Middx, l=MyCompany, ou=IT, cn=mail.mydomain.com” -PrivateKeyExportable $True</em></strong></p>
<p>The string that you provide after the “<strong><em>-SubjectName</em></strong>” switch is VERY important it is made up of the following values:</p>
<p><strong>c=</strong> [This is the Country of origin]</p>
<p><strong>s=</strong> [This is the state (that you are in)]</p>
<p><strong>i=</strong> [This is the company that you work for - or indeed the SSL certificate will be assigned to - you should note that if you ave purchased SSL certificates before it is worth ensuring that the company naming convention is consistent throughout all certificates that you have purchased]</p>
<p><strong>ou=</strong> [This is the organisation unit that the section of the company which will take charge of the certificate - typically I enter in "IT" for this value]</p>
<p><strong>cn= </strong>[This should be set to the DNS FQDN of the Client Access server which will be using the certificate - for example "<strong><em>OWA.mydomain.com</em></strong>" or "<strong><em>mail.mydomain.com</em></strong>"</p>
<p>This will produce a file in the root of c:\ on the CAS server called “<strong><em>myReq.csr</em></strong>” – this should be sent to Thwate.</p>
<p>When the CSR has been generated you will be provided with a CRF (Certificate Response File) which looks like the following (this will be returned to you via e-mail):</p>
<p>-----BEGIN CERTIFICATE-----JJkbbssCCAuucgAwIBAgIQcyE6jZgwnFgAq0d7onjMFzANBgkqhkiG9w0BAQUFADCBzj<br />
EEWNNNEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du<br />
MR0wGwYDVQQKExRUaGF3dGUgQ29uc3VsdGluZyBjYzEoMCYGA1UECxMfQ2VydGlmaWNhdGlv<br />
blahblahblahblahblahblahblahblahblahblahblahblahblahblahblahblahblahblahblahblahblahblahblah<br />
2NybC50aGF3dGUuY29tL1RoYXd0ZVByZW1pdW1TZXJ2ZXJDQS5jcmwwMgYIKwYBBQUHAQEE<br />
JjAkMCIGCCsGAQUFBzABhhZodHRwOi8vpgthennn/ss88877a222129tMAwGA1UdEwE<br />
B/wQCMAAwDQYJKoZIhvcNAQEFBQADgYEAuYSyeOUx53TkjCfol2psVY3E9uzMb6P6nrgs2U<br />
uG8BBQlshPkv+te8G2JpaaaaCmcrCV8J0WQN8mRm5443vbdasafJTBxB2PAZfl3GSWEgDIH<br />
q/lg3IOxG43YK4qDWYTu3j/Ngymq8g/d+0VrqkF/AmXWnGMGIQmE3GUnUDXeZKOR8SM=<br />
-----END CERTIFICATE-----</p>
<p>You should copy the CRF (including the “<strong>Begin Certificate</strong>” and “<strong>End Certificate</strong>”) into a text file called “<strong><em>Owa.txt</em></strong>” and then rename the file “<strong><em>owa.cer</em></strong>” – you should then copy this file up to a drive on the CAS server where you are working.</p>
<p><strong>Installing the Certificate on your Client Access Server:</strong></p>
<p>Firstly you need to remove the existing (expired) SSL certificate from your Client Access Server - in order accomplish this you need to perform the following steps:Open the Exchange Management Shell [ <strong>START -&gt; Programs -&gt; Microsoft Exchange Server 2007 -&gt; Exchange Management Shell</strong> ]</p>
<p>Then type in the following command:</p>
<p><strong><em>Get-ExchangeCertificate | fl | out-file –filePath c:\certs.txt</em></strong></p>
<p>This will create a text file in the root of C:\ called “<strong><em>certs.txt</em></strong>” which contains the details of every certificate install on the server – the output should look like the following:</p>
<p><img src="http://telnetport25.files.wordpress.com/2008/07/image8.png?w=500&amp;h=175" alt="image" width="500" height="175" border="0" /></p>
<p>The key property that will identify the certificate that you wish to replace is the “Not After” field – as this is essentially the expiry date and should have already expired or indeed be very close to expiring.Make a note of the thumbprint (the long number at the bottom after the “<strong><em>thumbprint</em></strong>” field) and then type in the following command:</p>
<p><strong><em>Remove-ExchangeCertificate –thumbprint &lt;The Thumb Print that you noted down&gt;</em></strong></p>
<p>As a tip here is to copy the thumbprint from the text file above and then paste it into the Powershell Window.When you have typed the command and pressed enter you will be presented with the confirmation message –<strong><em>see below</em></strong>;</p>
<p><strong><em>Confirm</em></strong></p>
<p><strong><em>Are you sure you want to perform this action?</em></strong></p>
<p><strong><em>Remove certificate with thumbprint 138B6EC5AAE868F495ECCBDA05C1F011B08A7CD3?</em></strong></p>
<p><strong><em>[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help</em></strong><strong><em>(default is “Y”):y</em></strong></p>
<p>Confirm the action by entering “<strong>a</strong>” and then press <strong><em>&lt;ENTER&gt;</em></strong></p>
<p>You are now ready to import the new certificate onto the Client Access Server – in order to do this type in the following command within the Powershell window (ensure that the path you specify to the certificate file matches the location where you placed the new certificate in the earlier steps:</p>
<p><strong><em>Import-ExchangeCertificate -path e:\certificates\owa.cer –FriendlyName “owa.mydomain.com”</em></strong></p>
<p>You should then be presented with the following output – again here you will need to make a note of the thumbprint:</p>
<p><span style="font-family: 'Courier New';">Thumbprint Services Subject</span></p>
<p><span style="font-family: 'Courier New';">———- ——– ——-</span></p>
<p><span style="font-family: 'Courier New';">B52842F7408772B7151FF74FDAE914EA7B59B53A ….. CN=owa.mydomain.com,…</span></p>
<p>Now that the certificate has been imported into the certificates repository you need to enable it for OWA – in order to do this run the following command in the<br />
Powershell window:</p>
<p><strong><em>Enable-ExchangeCertificate -Thumbprint B52842F7408772B7151FF74FDAE914EA7B59B53A -Services IIS</em></strong></p>
<p>The new certificate should now be installed you can confirm this by running the following command:</p>
<p><strong><em>Get-ExchangeCertificate</em></strong></p>
<p>The output of which should be:</p>
<p><span style="font-family: 'Courier New';">Thumbprint Services Subject</span></p>
<p><span style="font-family: 'Courier New';">———- ——– ——-</span></p>
<p><span style="font-family: 'Courier New';">B52842F7408772B7151FF74FDAE914EA7B59B53A …W. CN=owa.mydomain.com,…</span></p>
<p>The key thing here to note is the “<strong>W</strong>” under services (this signifies that the cert has been enabled for OWA) and that the thumbprint matched what you have typed in previously</p>
<p><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Ffragged.nu%2F2011%2F07%2Fexchange-2007-certificate-renewal%2F&amp;title=Exchange%202007%20Certificate%20renewal" id="wpa2a_18"><img src="http://fragged.nu/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://fragged.nu/2011/07/exchange-2007-certificate-renewal/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Disable Image Resize Dialog in MS-Outlook</title>
		<link>http://fragged.nu/2011/07/disable-image-resize-dialog-in-ms-outlook/</link>
		<comments>http://fragged.nu/2011/07/disable-image-resize-dialog-in-ms-outlook/#comments</comments>
		<pubDate>Wed, 20 Jul 2011 12:51:56 +0000</pubDate>
		<dc:creator>Simon Juul Larsen</dc:creator>
				<category><![CDATA[IT]]></category>
		<category><![CDATA[Microsoft Office]]></category>
		<category><![CDATA[Outlook]]></category>

		<guid isPermaLink="false">http://fragged.nu/?p=379</guid>
		<description><![CDATA[If you select an image file and choose “Send To — Mail Recipient” in the context menu, the Send Pictures via E-mail dialog appears to ask you if you want to resize the image. To disable the dialog and to directly open the email client with the image attachment, follow the instructions below. This tip [...]]]></description>
			<content:encoded><![CDATA[<p>If you select an image file and choose “Send To — Mail Recipient” in the context menu, the Send Pictures via E-mail dialog appears to ask you if you want to resize the image. To disable the dialog and to directly open the email client with the image attachment, follow the instructions below. This tip was hard to find with Google, so I pasted it here verbatim:</p>
<p>To disable the resize dialog for .JPG file type, use these steps [<a href="http://windowsxp.mvps.org/noimgresize.htm">Reference</a>]:</p>
<ol>
<li>Click Start, Run. Type regedit.exe and press {ENTER}</li>
<li>Navigate to the following location: HKEY_CLASSES_ROOT\.JPG</li>
<li>Backup the key by exporting it to a file.</li>
<li>In the right-pane, double-click PerceivedType and assign a blank data to it.</li>
<li>Close Registry Editor.</li>
</ol>
<p>The same procedure applies for other image types. The original source also gives this caution, however, I did not encounter the mentioned problem:</p>
<p><em>There may be some minor side effects of using this method, as the PerceivedType string is another important file class information. PerceivedType string helps Windows determine the actual Type (image, video, audio or whatever) for a file. In case you experience image preview issues or any other problems after following the method in this article, you can revert the setting by changing the PerceivedType to image. Alternately, type REGSVR32 SHIMGVW.DLL in Start, Run dialog to regain the functionality.</em></p>
<p><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Ffragged.nu%2F2011%2F07%2Fdisable-image-resize-dialog-in-ms-outlook%2F&amp;title=Disable%20Image%20Resize%20Dialog%20in%20MS-Outlook" id="wpa2a_20"><img src="http://fragged.nu/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://fragged.nu/2011/07/disable-image-resize-dialog-in-ms-outlook/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

