Controlling PSTs through Regedit

All credit goes to the Microsoft article. Just posting here in case the post disappears.
https://support.microsoft.com/en-us/help/3058474/how-to-use-outlook-policy-to-control-pst-use-and-creation-in-the-offic

Prevent users from adding new data or content to an existing .pst file

To prevent users from adding new data or content to an existing .pst file, add the PSTDisableGrow registry entry, and then set the value to 1. To do this, follow these steps:

1. Open Registry Editor.
2. Locate, and then click the following registry subkey:
   HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\<x>.0\Outlook\PST
   Note The <x>.0 placeholder represents the version of Outlook: for example, 15.0 is Outlook 2013, 14.0 is Outlook 2010, and 12.0 is Outlook 2007.
3. On the Edit menu, point to New, and then click DWORD Value.
4. Type PSTDisableGrow, and then press Enter.
5. Right-click the PSTDisableGrow registry entry that you created, and then click Modify.
6. In the Value data box, type 1, and then click OK.

Note The PSTDisableGrow registry entry can be set to the following values:

Value	Description
0	User can add new items to an existing .pst file. This is the default value.
1	Use cannot add new content or data to an existing .pst file

Prevent users from adding new .pst files

To prevent users from connecting a .pst file to Outlook, add the DisablePST registry entry, and then set the value to 1. To do this, follow these steps:

1. Open Registry Editor.
2. Locate, and then click the following registry subkey:
   HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\<x>.0\Outlook
   Note The <x>.0 placeholder represents the version of Outlook: for example, 15.0 is Outlook 2013, 14.0 is Outlook 2010, and 12.0 is Outlook 2007.
3. On the Edit menu, point to New, and then click DWORD Value.
4. Type DisablePST, and then press Enter.
5. Right-click the DisablePST registry entry that you created, and then click Modify.
6. In the Value data box, type 1, and then click OK.

Note The DisablePST registry entry can be set to the following values:

Value	Description
0	Users can add .pst files. This is the default value.
1	Users cannot add .pst files. However, in scenarios where a .pst file was connected to Outlook before this registry value was added, the existing .pst file will still be connected. No new.pst files can be added.
2	Users can only add exclusive sharing .pst files, such as SharePoint .pst files.

Office 365 online calendar not showing event, showing plus one (+1)

I had a weird one today.
A user created a shared calendar to add recurring appointments.
The appointments displayed for one month, but not the next. On the next month it showed a +1 instead of the event.

It turns out this was because of the screen size/zoom settings.
Zoomed out one click of the mouse wheel (ctrl+mouse wheel) and the even displayed.

Disable Windows 10 logon pin

This was conducted on a domain joined computer.

Settings>Accounts>Sign in options
Click "Forgot Pin"
Enter domain password
Click Cancel on the new pin screen.

Simply going to Change pin and cancelling does not clear the pin, you have to 'forgot pin' to clear it.

Hope someone finds this useful.

Radius on Meraki

What I did:

Created a certificate:
https://www.youtube.com/watch?v=ls9CW6jl6Q0

mmc.exe
File>Add Remove Snap in
Certificates
Local computer

Expand Certificates
Personal
Right click Certificates
All tasks, Request New Certificate
Next Next
Select Domain Controller


Add Network Policy and Access services
Server 2012:
Server Manager
Add Roles and Features
Role based
Network Policy and Access Services
Next
Select Network Policy Server and Host Credential Authorization Protocol
Next next next next until its done.

Register NPS with AD:
Open NPS
Right click NPS(local)
Register server in Active Directory

Add RADIUS Client:
Open NPS
Right Click RADIUS Clients>New
Add Friendly name and IP of Meraki WiFi
Create Secret
Ok

Create NPS Policy
https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_with_WPA2-Enterprise

Open the Network Policy Server console.
Select NPS(Local), so you see the Getting Started pane.
Select RADIUS server for 802.1X Wireless or Wired Connections in the Standard Configuration drop down.

Click Configure 802.1X to begin the Configure 802.1x Wizard.
When the Select 802.1X Connections Type window appears select the radio button Secure Wireless Connections and type a Name: for your policy or use the default. Click Next.
Verify the APs you added as RADIUS clients on the Specify 802.1X switches window. Click Next.
For Configure an Authentication Method select Microsoft: Protected EAP (PEAP).
Click Configure to review the Edit Protected EAP Properties. The server certificate should be in the Certificate issued drop down. Make sure Enable Fast Reconnect is checked and EAP type is Secure password (EAP-MSCHAPv2). Click OK. Click Next.
When the Specify User Groups window appears click Add.
Type or find the Domain Users group. This group should be located in the same domain as your RADIUS server.
When the group is added click OK. Click Next.
Click Next on Configure a Virtual LAN (VLAN) window.
When then Completing New IEEE 802.1X Secure Wired and Wireless Connections and RADIUS clients appears click Finish.

Change the Policy Process Order

Navigate to Policies>Connection Request Policies. Right click the wireless policy and Move Up so it is process first.
Navigate to Policies>Network Policies. Right click the wireless policy and Move Up so it is process first.

Disable Auto Remediation

Navigate to Policies>Network Policies. Right click the wireless policy and select Properties.
On the Setting tab for the policy uncheck the box Enable auto-remediation of client computers and click OK.
(This is located under NAP Enforcement.)



On to the Meraki

Hover over Wireless, select SSIDs
Create or Select an existing SSID and Edit Settings
Association Requirements:
WPA2-Enterprise with my Radius Server

Splash Page:
(I left this as None for corporate users)
RADIUS Servers:
Add IP of server, port 1812, add secret and test.
Addressing and traffic
I left these in Bridge mode: Make clients part of LAN.
I have one site with multiple Meraki APs, I will test Layer 3 roaming there.


Later on I might find out this is riddled with security holes, but for now it works for users to use AD creds and access network resources while on WiFi.

Outlook emails disappearing, not in deleted items

I've had this complaint a couple times.
Email 'magically disappears'
It's not in deleted, not in the recoverable items on the server.
Turns out, if you hit backspace in newer versions of outlook (2016 for sure) backspace will put the email into the archive folder.

Media server with Ubuntu, Plex and and Intel NUC

What I used:
Intel NUC kit, NUC7i5BNH
Corsair 4GB DDR4 2133mhz unbuffered CL15 SoDIMM
Seagate 2tb 7mm HDD
Mac Computer
4GB flash drive
Ubuntu 16.04.3 64 bit
http://releases.ubuntu.com
Etcher

Ubuntu has a cool tutorial on making the USB flash bootable:
https://tutorials.ubuntu.com/tutorial/tutorial-create-a-usb-stick-on-macos#0

I'll copy the important bits in case the link dies

• Launch Disk Utility from Applications>Utilities or Spotlight search
• Insert your USB stick and observe the new device added to Disk Utility
• Select the USB stick device and select Erase from the tool bar (or right-click menu)
• Set the format to MS-DOS (FAT) and the scheme to GUID Partition Map
• Check you've chosen the correct device and click Erase

Install Etcher from here: https://etcher.io

Select the ISO of Ubuntu in Etcher and tell it to load it to the USB. SOOO much easier than this used to be.

Boot the NUC and let it run. This took quite a while for me.

install Plex from Plex.tv

Install the newest handbrake like this:
http://www.ubuntoid.com/install-handbrake-ubuntu-16-04-16-10/

sudo add-apt-repository ppa:stebbins/handbrake-releases

sudo apt-get update

sudo apt-get install handbrake-gtk handbrake-cli

Then

sudo apt-get update && sudo apt-get upgrade

sudo apt-get install ubuntu-restricted-extras

sudo apt-get install libdvdcss2

sudo apt-get install libudf-dev 

I had to do those last two (I think) to get dvds to play at all. I'm new to this whole thing...
But I'm pretty sure this is all I ended up having to do to get handbrake working. I'll probably wipe the drive again and test this to see if this is all I had to do. I'm sure eventually this will crash and I'll have to redo it all again.
I kept getting the problem where the Encoding button was greyed out, I found out that when selecting the DVD drive, it was selecting the AUDIO_TS folder, selecting the VIDEO_TS folder got the encoding button to work.
It took about a half hour to rip a 2 hour animated DVD at the Super HQ 1080p setting.

Hooooly crap there is a lot of settings in handbrake.
This guys post helped me a lot.
https://mattgadient.com/2013/06/12/a-best-settings-guide-for-handbrake-0-9-9/

Update:
I'm using the following settings on handbrake:
I started with the 1080p Fast as a baseline.
I bumped RF to 12 and put it on Very Fast.
(I ripped a movie at Very Fast and the one just above placebo (slowest setting) and the file size was about the same, it just took a little longer.)
profile is Main and its set to 4.0.
(the default Apple TV setting its high and 4.2 so I ripped a movie at both settings and there wasn't a noticeable difference in quality or file size.)

I left Audio default, just checking the box for DTS-HD passthrough. No idea what this does. I have a sound bar/sub setup and the sound is very good on the default setting (based on the 1080p fast profile).
At least on par with Netflix or playing the disk through an Xbox.

File sizes are around 3-4gb and they finish in about an hour.
Quality on my 70in tv is good, even better on a 42 or my iPhone. Which you have to have Plex Premium for if you want to play more than a minute at a time. I like the program so I'll probably just buy their forever license, still have some reading to do on how that works.
(update:5/12/18 I bought the license, no regrets.)

So far so good. I've watched movies while its ripping dvds and it does fine, so I'm not too concerned with its performance doing multiple streams.
There was on time I think it got a little warm, causing it to shut down. I set RF to its lowest setting and let handbrake run for a while. The NUC went flashing orange, but started right back up when I hit power and it continued ripping. It was pretty weird. This resulted in a 14gb file that wouldn't play through Plex, giving me a shaka3015 error. I spent a whole two minutes researching what the error meant before giving up.
It would play through Ubuntu's media player though, so the file was fine.
I ripped the movie again with my 'pretty good' settings and it played fine through Plex.

Update:5/12/18
BluRay...
I could read some BluRays, but not others.
This thread fixed it for me:
https://askubuntu.com/questions/565516/can-linux-play-blu-rays
I already had MakeMKV installed so straight to:
Step 2: Uninstall the open-source libaacs

sudo apt-get remove libaacs0

Step 3: Symlink MakeMKV's libmmbd to emulate libaacs and libdplus
(/usr/lib might not be the correct directory for you – do a search for "libmmbd.so")

cd /usr/lib
sudo ln -s libmmbd.so.0 libaacs.so.0
sudo ln -s libmmbd.so.0 libbdplus.so.0

Note, I couldn't find libmmbd.so through the search, I didn't do a CLI search, maybe I would have found it that way.
I added them to the /usr/lib like it says and I was able to read BluRay.

That got it so I could read the files, then I had to do this:
https://www.makemkv.com/forum2/viewtopic.php?f=8&t=14821
Go http://vlc-bluray.whoknowsmy.name/ and download KEYDB.cfg. Put it under ~/.MakeMKV.
This location can be viewed and changed in the preferences of MakeMKV.
Mine was home/(computername)/.MakeMKV
Make sure you can view hidden folders.


Update:
I'm doing everything with Makemkv now, the quality is basically lossless. The files are huge, but data is cheap. I'm running a seagate (I think) 8tb external drive. I haven't had any streaming latency, even with blueray.

Finding out what port devices are plugged into: Cisco

Telnet to switch
login,
(it would be a good idea to enable logging before running these)
enable

switch#>sh arp

this will give the mac/ip list

switch#>show mac address-table

This will give mac/port

I enabled logging so I had a notepad with all the data.
Manually went in and made it a CSV, there might be a way to do this automatically, but I didn't do it that way...

In the end, after manipulating the data in excel, I ended up with a workable list of IP, MAC, and Port numbers.  I figured nslookup is easy enough to find out what the device is via the IP, but I guess you could go to DNS/DHCP also.

Xerox Workcentre not pingable by Hostname

Requested Host Name is not verified, have you seen this on your Xerox WorkCentre?

Well I finally got this working.

In my environment, I have assigned all my printers a static IP address, which is then shared through a print server, I know, revolutionary right?

In the near future we'll be going through a re-IP, so my static assignments aren't going to work. On all my other printers (HP, Ricoh, Brother) I was able to add a host name, ping the host name, and share the printer via a port based on that hostname instead of the IP. Now I can put that printer into DHCP, ready for the re-ip.

The Xerox did not want to play. And the kicker, the Xerox printers aren't in the office I'm in. So I was afraid to go DHCP and lose connection.

Luckily I work with some pretty smart people, and it was suggested I put a reservation for the device based on its MAC. Brilliant.

So I did that, went to DHCP, success. It pulled the right address and I was connected. The other cool part is the Host Name verified.

Ping test? success!

This re-IP might not be that bad after all.

Enabling Telnet on cisco switch

After setting up my switch I could ping it and access the UI, but couldn't Telnet into it, because I didn't turn it on...

switch>enable
switch#config t
switch(config)#line vty 0 4
switch(config-line)#password <password>
(this doesn't require the <>, you just put the password. Ex, if you want the password to be Password1 it would look like this:
switch(config-line)#password Password1
that's it)
switch(config-line)#login
switch(config-line)#end

now test it

switch#telnet (IP of switch)

once connection is verified, save it.

switch#write memory
switch#copy running-config startup-config

Double saved.

Making Cisco switch pingable

If you're like me, you went through the initial setup wrong and need to do the following:

 (remember to enable)

Switch# write erase Erasing the nvram filesystem will remove all files! Continue? [confirm]y[OK] Erase of nvram: complete Switch# Switch# reload

This will run for a while... a long while

In my case, I wanted to assign an IP to the vlan 1 (why? I don't know, I just did OK?)

Ok, so after that:
switch#config t
switch[config]#interface vlan 1
switch[config-if]#ip address x.x.x.x x.x.x.x
(second set of x.x.x.x for subnet)
switch[config-if]#exit
switch[config]#ip routing
switch[config]#show running-config
(make sure ip routing is listed)
switch[config]#interface vlan 1
switch[config-if]#ip address x.x.x.x x.x.x.x
switch[config-if]#no shutdown
switch[config-if]#exit
switch[config]#exit
switch#write memory
switch#copy running-config startup-config
(hit enter on the save prompt)

now that IP routing is turned on, you won't be able to ping from another subnet... until:

switch#config t
switch[config]#ip route 0.0.0.0 0.0.0.0 (ip of router)

Make DomainA see DomainB

Able to ping each other by IP, not able to ping by name.

Make sure one of the hardcoded DNS servers is the servers IP or 127.0.0.1.

Open DNS manager
Right Click Forward Lookup Zones

Defaults click next all the way through, zone name DomainName (.corp,.com,whatever)
Expand the new zone
Right click, New Host (A) name

Name of server and IP address

Pinging between via name works now.