Thursday, November 15, 2007

Microsoft Certified Technology Specialist: (MCTS ) Microsoft Exchange Server 2007



Exchange Server 2007 is Microsoft's brand-new certification that is both a one-exam certification, granting students the MCTS designation, and an entry exam for both the IT professional developer and IT professional administrator certifications.

Here what Microsoft says?

  • MCTS candidates must pass one exam that focuses on the following:
  • Installing and configuring Exchange servers
  • Creating and modifying recipients and public folders
  • Maintaining and optimizing the messaging system
  • Monitoring and reporting on the messaging system
  • Troubleshooting messaging issues
  • Managing data recovery and disaster recovery of a messaging environment

Here are the new Exams:

MCITP: Enterprise Messaging Administrator certification

  • Exam 70-236 Exchange Server 2007, Configuring
  • Exam 70-237 PRO: Designing Messaging Solutions with Microsoft Exchange Server 2007
  • Exam 70-238 PRO: Deploying Messaging Solutions with Microsoft Exchange Server 2007

Free Book & Resources to Prepare:

I hope you get all you need

Regards,

Oz ozugurlu






Tuesday, November 13, 2007

WEBSENSE Detecting Blocked URL Redirection

Problem:

Client cannot access to certain website within the allowed URL. Client is getting access denied within the allowed HTML pages, or some of the functions embedded into aalowed pages wont function properly.

Solution:

We will figure out what exactly is getting blocked by Websense. To perform this function follows the steps below.

Note: you need to know the client IP address whom is having trouble when accessing to this URL. You can also prepare a staging PC, and simulate the same scenario, in this case you will use the staging PC's IP Address.

Log into web sense server (nhqdtccf1.archq.ri.redcross.net)

  • Go to command line
  • Drill down to following directory on the Websense server
  • D:\Websense\bin>
  • Type the following command from this directory

D:\Websense\bin>TestLogServer.exe -onlyip 10.177.10.104 -file test2.txt

Replace the IP address in this example to IP address of the Client PC, who is having trouble to access the problem link, or pages.

When client is accessing the link the web sense will detect the exact URL and all you need to do is to allow the requested address by the browser by adding it to corporate allowed list

This will resolve the issue, and client will be able to access the full functionality of the website

Thanks

Oz ozugurlu

DNS clients send two types of queries Iterative and Recursive queries



Let's try to understand two types of queries are being used by DNS server for name resolutions.

Iterative queries
(query the best answer)

  • Client expects best answer from server
  • DNS server does not query other DNS servers
  • May refer client to another DNS server
  • Typically sent by DNS servers, not Microsoft Windows clients

Let us say our DNS name space is SMTP25.org. This mean our domain controller will be Authoritative for SMTP25.org and all domain controller, which are running DNS, will know any type of question they maybe asked by client for their own DNS name space.

We will perform Iterative query to the SMTP25.org DNS servers for Microsoft.com, and will look into each step and observer what happens.

  • Client makes iterative query to one of the DC's/DNS servers on SMTP25.org.
  • Since the DC/DNS serve does not own the DNS name space, it informs Client as follows
  • I am not authoritative for this DNS Name Space (SMTP25.org), but I do know who the Authoritative server is, for sales.microsoft.com (SMTP25.org DNS server did the query and got an IP address for DNS server, who owns the records for Microsoft.com) and hands out the IP address of the DNS server does Authoritative for Microsoft.com.
  • Client now does know the IP address of the Authoritative DNS server for Microsoft.com and ask this DNS server same question, I need to get to Sales.Microsoft.com, your IP is given to me as Authoritative DNS server, can provide me the resources I am trying to access.
  • The DNS server replies, I am not authoritative for Sales.Microsoft.com, but I do know who the Authoritative server is, here is the IP Address go ask him.
  • Finally Client has the IP address for the DNS server, who is authoritative for Sales.Microsoft.com

    Client ask the same question, server pulls out the IP address for the requested resources, and hands it to the client and finally happy end, Client can open direct TCP/IP connection to this resource server.

As you can see client is doing all the heavy lifting, client needs to go to different DNS server each time, client get partial answer and finally client is able to locate the resource server IP Addresses.

Recursive queries

We will use same story for recursive query. The DNS server will perform the heavy lifting; client is talking too at the first time. If we were the ask same question, to the DNS server we are talking too,

Where is Sales.microsoft.com the same process will be performed by a DNS server and when DNS server is able to locate the IP address for requested namespace, DNS server will return this information to the client, so that client can open direct TCP/IP connection to that server.

Just like, you have a personal secretary and you want to find the phone number of your best body "James" from high school. You ask your secretary to get you James number, your secretary calls your high school, gets information about James home address, She lookup up on the yellow book locates the phone number calls the number , figures out James in no longer living there, but people give her a number where he can be reached at. She makes sure James is available on that number, and turns the number to you. Now you call your body James and start talking to him. Your secretary has done all the heavy lifting for you, which she used Recursive queries to get the James number.

  • Now if you are not able to have a secretary, you have to call the Scholl first.
  • Scholl gives you a number to call.
  • You call that number second.
  • The people who live in that home give you another number to cal.
  • Finally, you call that number and able talk to your body. This would be iterative query.

Regards,

Oz ozugurlu

How to Reset Directory Services Recovery Mode password on a Domain Controller



DSRM is being configured at the first time, when a server promoted to be a domain controller. Often time administrators make up a password and this password gets forgotten and when it is needed, resetting DSRM password will be necessary. This process is very straight forward. Do not confuse this password with Domain administrator password. When DSRM mode is initiated, the local administrator account is authenticated by the SAM (Security account manager).

Go to command Line and follow the steps below. (NTSUTIL is part of windows 2003 support tools)

C:\>ntdsutil

ntdsutil: set dsrm password

  • Reset DSRM Administrator Password: reset password on server dc1
  • Please type password for DS Restore Mode Administrator Account: ***********
  • Please confirm new password: ***********
  • Password has been set successfully.

How to Move .DIT Database to another location

In this scenario the drive holds the NTDS.DIT database is going out of space and we need to move it to different drive.

  • Click Start, click Run, type ntdsutil in the Open box, and then press ENTER.
  • At the Ntdsutil command prompt, type files, and then presses ENTER.
  • At the file maintenance command prompt, type move DB to new location (where new location is an existing folder that you have created for this purpose), and then press ENTER.
  • To quit Ntdsutil, type quit, and then press ENTER.
  • Restart the computer

How to Move Log Files

Use the move logs to command to move the directory service log files to another folder. For the new settings to take effect, restart the computer after you move the log files.

  • Ntdsutil
  • type files Press Enter (maintenance command prompt)
  • Move files to E:\NTDS\Logs ( this is the directory I have created on the second Hard drive, my logs are located on C drive and I am moving them from C drive to E drive.

KB:322672

Best,

Oz ozugurlu