Category: Microsoft

Importing/Exporting Local Policies from/to GPO Directives with 'LocalGPO'

The other day we installed Microsoft Security Compliance Manager, today we see that within its installation we have a command-line utility called LocalGPO. It will allow us to export the local policies of a computer to a GPO policy backup to later use them in the Active Directory or import from a GPO backup (Active Directory) to the home team, Useful for computers that can't belong to a domain, teams in DMZ…

Microsoft Security Compliance Manager – Hardening our servers

Microsoft Security Compliance Manager 2 is a repository of Microsoft security templates that we can apply to our servers or PCs on our network providing greater security, since these templates are predefined depending on the OS. and the services run by the target machine. The good thing is that we will be able to keep the templates always 'up to date’ through updates that we can download from the console. We will be able to import GPOs, More Baselines… we will be able to edit/duplicate them and to apply them to our environment we will export them.

Integrating Lync Server 2010 with OWA

In this document, we'll look at how to integrate instant messaging between Microsoft Lync Server 2010 and Microsoft Exchange Server 2010 SP1 allowing our users to connect from the outside without the Lync client, something that is missing when it previously existed in Office Communications Server, so that our users, once logged into OWA, will be able to use instant messaging from a browser anywhere securely and with any device,

Installing and Configuring Microsoft Lync Server 2010

It is the new product name Microsoft Office Communications Server, Lync Server will allow our users to be connected to each other at all times, being able to collaborate or participate with each other in a faster/easier way wherever they are; provides our users with the use of: voice, Instant messaging and audio conferencing, Video and web made easy. It also integrates seamlessly with Office applications & SharePoint,

Uninstalling apps remotely and in bulk

Many times we find ourselves with the need to uninstall certain software that we have installed on our workstations, via WMI (Windows Management Instrumentation) We can uninstall the software we need on the computers we need, a platform that is not widely used by 'us'’ Administrators. Thanks to the command line parameters we can use variables and/or files with lists of equipment to automate these tasks,

Enabling archiving in Exchange 2010 SP1

One of the important features that Microsoft Exchange SP1 brings us 2010 is the possibility of managing the archiving of our users directly in Exchange and being able to store it remotely wherever we are interested, for example in an archive database located on a secondary disk drive (without good performance, no RAID protection…) in order to maintain user mailboxes in accordance with our requirements; This is interesting for specific users who need to have a high volume of stored mail.

Migrating GPO's between different domains

If we need to carry policies from one Active Directory to another and we don't have a trust relationship, or there is no possible communication between them, we could make a backup of the GPO's that we are interested in in the source domain and import them through the migration tables in the destination domain. This document is valid for migrating GPO's between any version of Windows Server, since 2000, 2003, 2003 R2, 2008 or 2008 R2; In this document we will see how to perform these steps.

FAQ: OWA directory redirection in TMG

We will perform the following steps if we want our users not to have to write the /owa directory in Exchange, if we are using Microsoft Forefront Threat Management Gateway (TMG) 2010. 1º Create the rule to allow OWA to https://correo.midominio.com/owa (HTTP://www.bujarra.com/?p=4862). 2º Copy & Paste that rule into the TMG. Rename it and give it a correct name. 3º Edit it, from your properties: – On the “Action” put 'Deny'’ and redirect http to 'https://correo.midominio.com/owa'. – On the “Paths” delete all paths and create one with the following settings: External path: <same as internal> Internal path: /

Data Migration between 2 Untrusted domains (Subinacl)

In some not very frequent cases we find domain migrations in which we do not have permissions to manage the current domain completely and only access to OUs where we manage only the users within them. In the event that we need “Becoming independent” and migrate the data to a new domain, we will not be able to use Microsoft's common tools such as FSMT since they require a trust relationship to be able to pass the permissions. The first thing we must have is to create the same users and groups on the new server. To do this, we have two options: Create them by hand or use a tool such as ldifde that will allow us to export them from the OUs we have permissions to a text file and import them into the new domain. As there is no trust relationship, we will not have the same SIDs in the users of the domain 1 and mastery 2 so when performing […]