MUNDY.CO

What ports need to be open for an IPsec VPN client to work?

Details: Created on Friday, 30 April 2010 14:56; Last Updated on Saturday, 29 May 2010 20:07; Written by Daniel Mundy; Hits: 12283

You will need to be certain that your firewall allows the following protocols inbound/outbound:

UDP port 500 (IKE, Internet Key Exchange)
IP Protocol 50 (ESP)
IP Protocol 51 (AH)

Also, you will need one of the following two:

UDP port 10000 (IPSec encapsulated in UDP) or
TCP port 443 (IPSec encapsulated in TCP)

    <div class="moduletable">

    </div>

If you are behind a device that does NAT (Network Address Translation) you will need to be sure it handles the IKE packets (i.e. it should know not to change the source port on IKE packets). On the Linksys model routers you do this by checking the "IPSec Passthrough" option, but most other firewalls know this protocol as well.

These ports should allow any IPsec VPN client including CISCO and Nortel.

Source: Brown University Wiki

How to Enable IMAP in SBS 2003

Details: Created on Thursday, 29 April 2010 11:00; Last Updated on Saturday, 29 May 2010 20:09; Written by Daniel Mundy; Hits: 5692

To enable IMAP on SBS 2003, just set the service “Microsoft Exchange IMAP4” to automatic and start it. If you’re running ISA, you’ll need to run the CEICW again and add a firewall rule. The default Windows firewall (when you don’t have ISA) seems to let it in by default. You’ll also need to forward the port 143 from your router to the IP address of the SBS.

You’ll need to specify an SMTP server on the phone for outgoing email, best not to open this up in SBS! Use your mobile carrier’s SMTP server, eg. mail.vodafone.net.au

HTC Magic, Google Android, and Exchange ActiveSync

Details: Created on Thursday, 29 April 2010 10:52; Last Updated on Saturday, 29 May 2010 20:09; Written by Daniel Mundy; Hits: 1765

HTC is only allowed to put ActiveSync on non-Google-branded Android phones (source). There are some websites that tell you it can be done, and works very well. Probably these reviewers had a test model of the HTC Magic that was not Google Branded. I had a surprise today when I tried to set up ActiveSync for a client, but the only options available were POP3 or IMAP. His HTC Magic had the words "With Google" printed on the back.

Click here to find out how to enable IMAP in SBS 2003.

How to Export the Self-Signed SSL Certificate in SBS 2003

Details: Created on Wednesday, 28 April 2010 10:45; Last Updated on Saturday, 29 May 2010 20:09; Written by Daniel Mundy; Hits: 2810

Open IIS Manager
Right click "Default Web Site", select Properties
Open the "Directory Security" tab
Click "View Certificate"
Open the "Details" tab
Click "Copy to File"
When prompted, do not export the private key
You'll be asked which format to use, select "DER encoded binary X.509 (.CER)" - it should be selected by default

RDP to Windows XP Fails, RDPDD.dll Failed to Load

Details: Created on Tuesday, 27 April 2010 13:43; Last Updated on Saturday, 29 May 2010 20:10; Written by Daniel Mundy; Hits: 4438

You may not be able to connect to a Windows XP computer using RDP. I've seen this a lot and always thought it was related to an NVIDIA driver. Updating the video card driver usually fixes the problem, but I've found an easier way.

To confirm that you're having the same issue, check the event log for the following:

Event Type:    Information
Event Source:    Application Popup
Event Category:    None
Event ID:    26
Description:
Application popup:  : \SystemRoot\System32\RDPDD.dll failed to load

You can fix this bug by increasing the size of the session image space by adding the following registry key:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]
"SessionImageSize"=dword:00000020

Source: http://forums.nvidia.com/index.php?showtopic=67147&hl=remote%20desktop&st=68

Note that apparently this can affect drivers by other vendors, but I have only ever seen it with NVIDIA.

Windows Mobile Emulator

Details: Created on Thursday, 22 April 2010 14:18; Last Updated on Thursday, 27 January 2011 12:14; Written by Daniel Mundy; Hits: 1676

I use the Mobile Device Emulator to troubleshoot ActiveSync issues for my clients. It means I don't need to keep a spare Windows Mobile phone and I don't need to borrow the client's phone to do my testing.

1. Set up the Microsoft Device Emulator

You'll need to install the Microsoft Device Emulator first. This comes with Virtual PC, but in Windows 7 you have XP mode instead - unfortunately it does not have the emulator. The following article shows to to extract the stuff you need from the VPC setup file - Windows Virtual PC and the Microsoft Device Emulator

2. Install the Windows Mobile Emulator

3. Install the images

4. Run an image from the start menu in Windows Mobile 6 SDK - Standalone Images folder (note: I had to run the Images installer again and select Repair because the "Standalone Images" folder wasn't being created)

5. File, Configure, Network tab. Enable NE2000 PCMCIA network adapter and bind to: the NIC you configured it for in first step

6. Boot up the image. Then go to Settings -> Connections Tab -> Network Card and change "My network card connects to" from Work to The Internet

7. Test that the Internet works, by going to a website in IE. If it works, close the window (X at top-right) and say "Yes" to save the emulator before closing

If you have problems

Check the local firewall. I found this was blocking it, even though no alerts were coming up (even though I am usually prompted). Just turn it off and try again, as a quick check.

Also, try running the "Microsoft Device Emulator" installer again, and do the repair.

Additional Resources

Number of Virtual CPUs Supported in a Hyper-V Guest

Details: Created on Wednesday, 21 April 2010 16:45; Last Updated on Saturday, 29 May 2010 20:10; Written by Daniel Mundy; Hits: 1666

The number of virtual CPUs you can use in a Hyper-V guest are dependant on the OS you are running in the guest. (source)

You can find out how many vCPUs are supported for your chosen guest OS on TechNet.

Desktop Icons Missing in Windows 7

Details: Created on Tuesday, 20 April 2010 11:23; Last Updated on Saturday, 29 May 2010 20:10; Written by Daniel Mundy; Hits: 3744

Have all of your desktop icons gone missing?

Try this: Right-click on the desktop and select View > Show Desktop Icons.

This seems to happen after hibernation or sleep, and with multiple monitors.

Source: http://www.ghacks.net/2010/01/12/fix-missing-desktop-icons-windows-7/

Have some of your desktop shortcuts disappeared?

They are probably being deleted by the new "System Maintenance" feature! It runs weekly and removes any shortcut that have not been used for more than three months. It also removes any broken shortcuts on the desktop if there are more than four of them.

The problem is that it will recognize shortcuts to disconnected network locations as broken and also shortcuts that link to shell folders.

There are a few workarounds here.

Windows Key Stuck in RDP

Details: Created on Monday, 19 April 2010 13:41; Last Updated on Saturday, 29 May 2010 20:10; Written by Daniel Mundy; Hits: 3476

If you lock your desktop with Windows + L key combination while an RDP session to another PC / server is active, the Windows key will be stuck in the "down" position in that RDP session. This is supposed to be fixed in Service Pack 1 for Windows Vista but still affects me running Windows 7 RTM. The workaround is to make sure the RDP session is active, and then lock the desktop again using Win+L. This will cause the Windows key to be stuck in the "up" position - much better.

Source: http://social.technet.microsoft.com/Forums/en/winserverTS/thread/cbaae74e-8311-4a46-a842-31dcdd6878dc

Relevant

A New Template for Joomla!