First email in my life this mail is trusted

I have received thousand or millions of email from the day I registered my email account since young day, this is first trusted email I ever saw. How cool it was. ”Hotmail” double-checked my email

Facebook in https

Just saw the prompt notification after login Facebook account, Facebook have lifting it’s security to prevent identity fraud. Good job !

How to scan range of server using for update using MBSA CLI

MBSA 2.2 can be downloaded from here

Differences Between Mbsa.exe and Mbsacli.exe

For most functions of MBSA, the GUI tool, Mbsa.exe, and the command-line tool, Mbsacli.exe, perform the same functions. In some cases, the command-line interface provides more technical options for advanced administrators. The following command-line switches are examples of command-line interface–based features that are not available in the MBSA GUI tool:

• /nvc. This switch instructs MBSA to not attempt to connect to the Internet to check for an updated version of the MBSA scan tool.
• /qp. This switch instructs MBSA to not show scan progress.
• /qt. This switch instructs MBSA to not display the completed scan report immediately after a scan completes.
• /Unicode. This switch instructs MBSA to provide the completed scan report in Unicode format.
• /u. This switch lets you specify the user name of an administrator-level user on the target computer(s).
• /p. This switch lets you specify the password of an administrator-level user on the target computer(s).
• /catalog. This switch lets you specify an alternate location for the offline catalog (Wsusscn2.cab) file.
• /rd. This switch lets you specify an alternate location for the completed scan report. (This is useful when running MBSA in a non-user context or as a domain administrator.) You can use this switch to place completed scan reports on a network share or in a local directory.
• /nd. This switch instructs MBSA to not download any files from the Microsoft Web site when performing a scan. In other words, it instructs MBSA to perform the scan like it would in offline mode.
• /xmlout. This switch instructs MBSA to perform a security scan (no vulnerability assessment checks) using the most basic files necessary to perform an MBSA scan (Mbsacli.exe and Wusscan.dll) without performing a full MBSA installation. This is useful for performing a basic security scan without having to install all MBSA features. This mode allows a limited set of command-line switches, including only /catalog, /wa, /wi, /nvc, and /Unicode.

When the mbsacli command runs without any command-line switches, it runs a default scan against the local computer.

Scanning range of server for WSUS update remotely from one server, this is great used for who have more than 1 server in big range, helpful.

Example:

C:\Program Files\Microsoft Baseline Security Analyzer 2> mbsacli /nvc /r 172.x.x.10-172.x.x.15
Microsoft Baseline Security Analyzer
Version 2.2 (2.2.2170.0)
(C) Copyright 2002-2010 Microsoft Corporation. All rights reserved.

Scanning...
1 of 16 computer scans complete.
2 of 16 computer scans complete.
3 of 16 computer scans complete.
Scan Complete.

172.18.200.11 : Logon failure: unknown user name or bad password. (Not joined to domain)
172.18.200.15 : Could not resolve the computer name: . Please specify computer name, domain\computer, or an IP address. (IP Not in use)
172.18.200.14 : Could not resolve the computer name: . Please specify computer n
ame, domain\computer, or an IP address.(IP Not in use)

Computer Name, IP Address, Assessment, Report Name
-----------------------------------------------------
DEV\AD01, x.x.x.12, Incomplete Scan, DAD01 (4-18-2011 5-10 PM) (Valid Server)
DEV\DSM01, x.x.x.13, Incomplete Scan, DSM01 (4-18-2011 5-10 PM) (Valid Server)

Icon showing update detected, 19 updates is detected and ready for installation

Scripting

How to scan range of server using for update using MBSA CLI

Amazing 9 years old football player

This kid have great talent to play football in international field.

But if you are same team with him, you might be bored, because he never pass the ball (Jokes)

Right Management Service (RMS)

 

RMS is used for protect documents & email

What RMS can prevent

• Prevent viewing
• Print
• Save / Modify
• Copy / Paste
• Forwarding
• Expiration

What RMS cannot prevent

Protect against

• Camera photo
• Screen capture program
• Recording software

Work for who

• User email address
• Client window vista/7/2008 (Download required for XP,2k,2k3)
• Applications (Office Pro 2003,2007 Enter/Pro/Ultimate)
• Mobile 6
• Office Sharepoint 2007 above
• Exchange Server 2007 SP1 above

Installation

Server1

• Prepare RMS services account (Password never expires), RMS installer account (Password never expires)
• Install Active Directory Certificates services, Webs Server (IIS)
• Setup certificate templates, web server (duplicate certificate, 2003/2008), allow server permission to server that allow to enroll
• Enable customize certificate template created

Server2

• Bring in certificate –> MMC –> Certificates –> Request new certificate –> Fill up details to enroll, FQDN, URL (rms.lab.com), make private key exportable and achieve
• Add Roles ADRMS and fill in step by step details required
• ADRMS, add new template
• Test it

How to change Lightweight data services (LDS) database & log & backup DB folder location & restore & removal

How to change location LDS database folder location from default location to E: drive , LDS log and creating a backup

1. 1) Moving LDS database folder location, LDS log folder location
2. 2) Backup LDS database
3. 3) Authoritative restore
4. 4) Remove LDS

1) Moving LDS database folder location, LDS log folder location

• Step 1: Create new folder for LDSdatabase, LDSlog, LDSBackup
• Step 2: Go to cmd, net stop ldsinstance
• Step 3: From cmd, using ntdsutil, access to lds instance, type in activate instance ldsinstance
• Step 4: files
• Step 5: move db to e:\Ldsdatabase
• Step 6: move logs to e:\Ldslog
• Step 7: verify from folder
• Step 8: quit
• Step 9: Go to cmd, net start ldsinstance

2) Backup LDS database

• Step 1: Go to cmd, net stop ldsinstance
• Step 2: From cmd, using dsdbutil, access to lds instance, type in activate instance ldsinstance
• Step 3: ifm (install from media)
• Step 4: create full e:\ldsbackup
• Step 5: Go to cmd, net start ldsinstance

3) Authoritative restore

• Step 1: Go to cmd, net stop ldsinstance
• Step 2: From cmd, using dsdbutil
• Step 3: list instances
• Step 4: authoritative restore
• Step 5: restore object cn=lablds, dc=lab, dc=com

4) Remove LDS

• Step 1: Uninstall custom lds from add/remove
• Step 2: Uninstall LDS roles

April Fools 2011 video : Complex numbers in Math Class

Video from MDWeathers

3 minutes to relax.

This is truly cool where this guy integrated reality and virtual to give a presentation, timing have to match next action.

Prologue Artwork – Iron Man 2 with hologram & 3D

For more Prologue Artwork, refer here

Microsoft interactive presentation in Cebit 2011 with BIG 234” touch screen

Video by StereolizeDesign

For more interactive multimedia by Stereolize, refer here

System Center Essentials 2010 (SCE 2010) Basic Introduction

At this post, I will give basic intro about system center essentials 2010. Follow on at next post, I will try capture more screenshot on program features in depth with you. So that you could gain more understanding about the product prior hands on installing a server and compare the difference with others products.

This product is designed for small medium enterprise with user size in between 50 – 500 with less than 50 server. If you supporting for small medium business who got budget constraint, this is a “great piece” software to have. It is one of the best product combined all menu into single console and allow you to do most administration work you need. This product helps you in :

• Gather company asset details into a single view with reporting
• Gather a single view what program has installed into each pc
• Gather status of each pc event status, ok, warning,
• Gather status of each pc connected or offline
• Monitor pc/server/network devices status
• Migration physical machine to virtual machine
• WSUS features keep your pc up to date
• Single/group software deployment over the network
• Remote directly to the client pc / server
• Easy agent deployment using Active Directory object grouping / discovery
• Easy modification to redirect update server from WSUS to SCE2010 using Group policy
• Monitoring using management pack
• Template create virtual machine
• All window OS supported

Refer next articles for

Installation

Features & Experience

Pros & Cons

Conclusion

Fixing corrupted Window vista or Window 7 user profile

Here are one common error you might face when your pc try to load your profile but prompted it failed the logon

The User Profile Service failed the logon. User profile cannot be loaded.

Solution:
Logon to administrator profile, follow instruction on below KB to fix the issue. (I tried, it works great!)
http://support.microsoft.com/kb/947215

Overview of the transport pipeline in Exchange 2010 (Diagram)

 

Gmail mark a day ! Service disruption 28/2/2011

So many mistakes in typing !!!
.29% is a big number ! x worldwide

Singapore MessagingTalk User Group Event – Feb 2010‏

 

~ Courtesy from MTUG email notification

Monthly Newsletter
MessagingTalk User Group

Feb 2011

Nov Meet Up Agenda

Date: 23rd Feb 2011
Time: 7:00 PM - 10:00PM
Venue: Microsoft Singapore (Conference Room SINOMB 22CF-12)
7:00 PM to 7:15PM - Registration
7:20 PM to 8:00PM – Exchange Server 2010 -- Introduction and Discontinued features in Exchange 2010 by Fahad Shaikh
8:00 PM to 8:15 PM -- Exchange Server 2010 -- Useful Tools for Upgrade by Fahad Shaikh
8:00 PM to 8:15PM - Toilet/Stretching Break
8:45 PM to 9:00 PM – Exchange Server 2010 -- Upgrading from and Co-existence with Exchange 2003 by Fahad Shaikh
9:00 PM to 9:25 PM -- Exchange Server 2010 -- Upgrading from and Co-existence with Exchange 2007 by Fahad Shaikh


About Fahad Shaikh:
Fahad Shaikh works as a messaging and collaboration consultant in a MNC and is based in Singapore.Apart from his experience in various technolgies his main focus has been on planning, designing , deploying , migrating and troubleshooting Microsoft Exchange Server 2000, 2003 , 2007 and 2010. He is MCSE (Windows 2003), MCSA (Messaging), MCITP (Exchange 2010,2007) and MCTS (OCS 2007).
Registration
For registration, please email to tristonwan@gmail.com with the following:
· MessagingTalk ID (Create an account, if you do not have one - visit: http://www.messagingtalk.org/user/register)
· Name
· Email Address
Note: There won’t be an event confirmation. Just turn up, we don’t turn people away. However, please register if you’re coming.
Your friendly MTUG Group leaders 
Triston Wan

Singapore Windows IT Pro User Group Event – Feb 2010

~ Courtesy from SWUG email notification
  

Monthly Newsletter
Singapore Windows IT Pro User Group

February 2011 Newsletter

Welcome 2011
Hi SWUGsters,
Firstly a Happy Chinese New Year to all. How’s your Hong Bao collecting so far? Here wishing all of you Gong Xi Fa Cai, money “too” much!
We are already in the second month of 2011. Looking back at 2010, we ended it with a fun filled and successful CTU II. CTU II attracts 87 attendees breaking out into 4 tracks and 16 sessions which encapsulated various technologies such as Sharepoint, Windows Azure and many others. Not forgetting Kinect which give many attendees a chance to try out the fun loving experience at the same time have a great workout session on a Saturday afternoon.
In our November meet up, we have collected feedbacks on the topic which you guys wish to hear more. We do hear more voices asking for some round-table session to share their experiences. Yes we heard you. This will serves as our guideline as we move forward in 2011. To start thing off, we are have some “light” round-table this month addressing the most fundamental yet import part of our IT infrastructure.
In Microsoft at 2011 International Consumer Electronics Show Keynote session, Steve Ballmer conclude year 2010 for Microsoft and the achievement they have meet. At the same time he addresses in year 2011 what is Microsoft pushing out. This is a 1 hour keynote session that none of you should missed. Wait no more and start clicking here.
Just a little teaser for march meet up, do look out for our March newsletter as we are arrange for some interesting topic for March meet up. Also take note that we will be shifting back our meet up for March. More detail in March newsletter, so stay tune.
Cheers,
SWUG Leads

February Meet Up Agenda
Date: 23th February 2011 (Wednesday)
Time: 7.00pm to 9.30pm
Venue: 1 Marina Boulevard #21-00,MS Singapore – Auditorium
6.30pm: Registration
7.00pm: Session 1 – Round-table discussion on how to design an Active Directory Domain (ADDS 2008 R2) Part I
8.15pm: Toilet/Stretching Break
8.30pm: Session 2 – Round-table discussion on how to design an Active Directory Domain (ADDS 2008 R2) Part II
9.30pm: Home Sweet Home
Session 1 & 2 – Round-table discussion on how to design an Active Directory Domain (ADDS 2008 R2)
Abstract:
Active Directory Domain Services is identified as the fundamental piece of component that other Microsoft Products rely on. For our coming Feb SWUG session, we will do a round-table session where we can discuss on how to design an Active Directory Domain.
During the session, we welcome everyone to share their experience on setting up an Active Directory Domain too.What we wish to achieve is that we can learn from each other especially on the do and don’t while setting up an Active Directory Domain.
Registration
For registration, please email to admin@sgwindowsgroup.org with the following:
- SWUG ID
- Name
- Email Address
Note: There won’t be an event confirmation. Just turn up, we don’t turn people away. However, please register if you’re coming.

Relax your mind for 5 minutes…