Print

What ports need to be open for an IPsec VPN client to work?

Written by Daniel Mundy on Friday, 30 April 2010 14:56.

You will need to be certain that your firewall allows the following protocols inbound/outbound:

  • UDP port 500 (IKE, Internet Key Exchange)
  • IP Protocol 50 (ESP)
  • IP Protocol 51 (AH)

Also, you will need one of the following two:

  • UDP port 10000 (IPSec encapsulated in UDP) or
  • TCP port 443 (IPSec encapsulated in TCP)

 

If you are behind a device that does NAT (Network Address Translation) you will need to be sure it handles the IKE packets (i.e. it should know not to change the source port on IKE packets). On the Linksys model routers you do this by checking the "IPSec Passthrough" option, but most other firewalls know this protocol as well.

These ports should allow any IPsec VPN client including CISCO and Nortel.

Source: Brown University Wiki

Print

How to Enable IMAP in SBS 2003

Written by Daniel Mundy on Thursday, 29 April 2010 11:00.

To enable IMAP on SBS 2003, just set the service “Microsoft Exchange IMAP4” to automatic and start it. If you’re running ISA, you’ll need to run the CEICW again and add a firewall rule. The default Windows firewall (when you don’t have ISA) seems to let it in by default. You’ll also need to forward the port 143 from your router to the IP address of the SBS.

 

You’ll need to specify an SMTP server on the phone for outgoing email, best not to open this up in SBS! Use your mobile carrier’s SMTP server, eg. mail.vodafone.net.au

Print

HTC Magic, Google Android, and Exchange ActiveSync

Written by Daniel Mundy on Thursday, 29 April 2010 10:52.

HTC is only allowed to put ActiveSync on non-Google-branded Android phones (source). There are some websites that tell you it can be done, and works very well. Probably these reviewers had a test model of the HTC Magic that was not Google Branded. I had a surprise today when I tried to set up ActiveSync for a client, but the only options available were POP3 or IMAP. His HTC Magic had the words "With Google" printed on the back.

Click here to find out how to enable IMAP in SBS 2003.

 

Print

How to Export the Self-Signed SSL Certificate in SBS 2003

Written by Daniel Mundy on Wednesday, 28 April 2010 10:45.

  1. Open IIS Manager
  2. Right click "Default Web Site", select Properties
  3. Open the "Directory Security" tab
  4. Click "View Certificate"
  5. Open the "Details" tab
  6. Click "Copy to File"
  7. When prompted, do not export the private key
  8. You'll be asked which format to use, select "DER encoded binary X.509 (.CER)" - it should be selected by default

 

Print

RDP to Windows XP Fails, RDPDD.dll Failed to Load

Written by Daniel Mundy on Tuesday, 27 April 2010 13:43.

You may not be able to connect to a Windows XP computer using RDP. I've seen this a lot and always thought it was related to an NVIDIA driver. Updating the video card driver usually fixes the problem, but I've found an easier way.

 

To confirm that you're having the same issue, check the event log for the following:

Event Type:    Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Description:
Application popup: : \SystemRoot\System32\RDPDD.dll failed to load

You can fix this bug by increasing the size of the session image space by adding the following registry key:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]
"SessionImageSize"=dword:00000020

Source: http://forums.nvidia.com/index.php?showtopic=67147&hl=remote%20desktop&st=68

Note that apparently this can affect drivers by other vendors, but I have only ever seen it with NVIDIA.

Print

Windows Mobile Emulator

Written by Daniel Mundy on Thursday, 22 April 2010 14:18.

I use the Mobile Device Emulator to troubleshoot ActiveSync issues for my clients. It means I don't need to keep a spare Windows Mobile phone and I don't need to borrow the client's phone to do my testing.

 

1. Set up the Microsoft Device Emulator

You'll need to install the Microsoft Device Emulator first. This comes with Virtual PC, but in Windows 7 you have XP mode instead - unfortunately it does not have the emulator. The following article shows to to extract the stuff you need from the VPC setup file - Windows Virtual PC and the Microsoft Device Emulator

2. Install the Windows Mobile Emulator

3. Install the images

4. Run an image from the start menu in Windows Mobile 6 SDK - Standalone Images folder (note: I had to run the Images installer again and select Repair because the "Standalone Images" folder wasn't being created)

5. File, Configure, Network tab. Enable NE2000 PCMCIA network adapter and bind to: the NIC you configured it for in first step

6. Boot up the image. Then go to Settings -> Connections Tab -> Network Card and change "My network card connects to" from Work to The Internet

7. Test that the Internet works, by going to a website in IE. If it works, close the window (X at top-right) and say "Yes" to save the emulator before closing

If you have problems

Check the local firewall. I found this was blocking it, even though no alerts were coming up (even though I am usually prompted). Just turn it off and try again, as a quick check.

Also, try running the "Microsoft Device Emulator" installer again, and do the repair.

Additional Resources

 

Print

Number of Virtual CPUs Supported in a Hyper-V Guest

Written by Daniel Mundy on Wednesday, 21 April 2010 16:45.

The number of virtual CPUs you can use in a Hyper-V guest are dependant on the OS you are running in the guest. (source)

You can find out how many vCPUs are supported for your chosen guest OS on TechNet.

 

Print

Desktop Icons Missing in Windows 7

Written by Daniel Mundy on Tuesday, 20 April 2010 11:23.

Have all of your desktop icons gone missing?

Try this: Right-click on the desktop and select View > Show Desktop Icons.

This seems to happen after hibernation or sleep, and with multiple monitors.

Source: http://www.ghacks.net/2010/01/12/fix-missing-desktop-icons-windows-7/

 

Have some of your desktop shortcuts disappeared?

They are probably being deleted by the new "System Maintenance" feature! It runs weekly and removes any shortcut that have not been used for more than three months. It also removes any broken shortcuts on the desktop if there are more than four of them.

The problem is that it will recognize shortcuts to disconnected network locations as broken and also shortcuts that link to shell folders.

There are a few workarounds here.

Print

Windows Key Stuck in RDP

Written by Daniel Mundy on Monday, 19 April 2010 13:41.

If you lock your desktop with Windows + L key combination while an RDP session to another PC / server is active, the Windows key will be stuck in the "down" position in that RDP session. This is supposed to be fixed in Service Pack 1 for Windows Vista but still affects me running Windows 7 RTM. The workaround is to make sure the RDP session is active, and then lock the desktop again using Win+L. This will cause the Windows key to be stuck in the "up" position - much better.

Source: http://social.technet.microsoft.com/Forums/en/winserverTS/thread/cbaae74e-8311-4a46-a842-31dcdd6878dc