iSmakkk ....cUp of cOffeE: October 2009

Tuesday, October 20, 2009

Exchange 2007 OWA not Working

Issue these commands from the Exchange 2007 Management Shell.

1. remove-owavirtualdirectory -Identity "owa (Default Web Site)" (Note the website name is case sensitive)

2. New-owavirtualdirectory –Name “owa” –website “Default Web Site”

You will likely have to re-add the certificate and\or re-enable Forms Based Authentication if applicable.

3. Re-register the .NET 2.0

IIS 6.0 supports both the 32-bit mode and the 64-bit mode. However IIS 6.0 does not support running both modes at the same time on a 64-bit version of Windows. ASP.NET 1.1 runs only in 32-bit mode. ASP.NET 2.0 runs in 32-bit mode or in 64-bit mode. Therefore, if you want to run ASP.NET 1.1 and ASP.NET 2.0 at the same time, you must run IIS in 32-bit mode.

Note If you have Microsoft Exchange Server 2007 installed on the computer, use the instructions for ASP.NET 2.0, 64-bit version.

Before you can switch between the different versions of ASP.NET, visit the following Microsoft Developer Network (MSDN) Web site to download and install both the .NET Framework 1.1 and the .NET Framework 2.0:

http://msdn2.microsoft.com/en-us/netframework/aa731542.aspx (http://msdn2.microsoft.com/en-us/netframework/aa731542.aspx)

For example, if you are running Microsoft Windows x64 Edition, download the following two redistributable packages:

The .NET Framework Version 2.0 Redistributable Package x64 (64 Bit)
The .NET Framework Version 1.1 Redistributable

After you install the redistributable packages, you can switch between the different versions of ASP.NET. To do this, follow these steps for each ASP.NET version:

ASP.NET 1.1, 32-bit version

To run the 32-bit version of ASP.NET 1.1, follow these steps:

Click Start, click Run, type cmd, and then click OK.
Type the following command to enable the 32-bit mode:
cscript %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs SET W3SVC/AppPools/Enable32bitAppOnWin64 1
Type the following command to install the version of ASP.NET 1.1 and to install the script maps at the IIS root and under:
%SYSTEMROOT%\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe -i
Make sure that the status of ASP.NET version 1.1.4322 is set to Allowed in the Web service extension list in Internet Information Services Manager.

ASP.NET 2.0, 32-bit version

To run the 32-bit version of ASP.NET 2.0, follow these steps:

Click Start, click Run, type cmd, and then click OK.
Type the following command to enable the 32-bit mode:
cscript %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs SET W3SVC/AppPools/Enable32bitAppOnWin64 1
Type the following command to install the version of ASP.NET 2.0 (32-bit) and to install the script maps at the IIS root and under:
%SYSTEMROOT%\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe -i
Make sure that the status of ASP.NET version 2.0.50727 (32-bit) is set to Allowed in the Web service extension list in Internet Information Services Manager.

ASP.NET 2.0, 64-bit version

To run the 64-bit version of ASP.NET 2.0, follow these steps:

Click Start, click Run, type cmd, and then click OK.
Type the following command to disable the 32-bit mode:
cscript %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs SET W3SVC/AppPools/Enable32bitAppOnWin64 0
Type the following command to install the version of ASP.NET 2.0 and to install the script maps at the IIS root and under:
%SYSTEMROOT%\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.exe -i
Make sure that the status of ASP.NET version 2.0.50727 is set to Allowed in the Web service extension list in Internet Information Services Manager.

Note The build version of ASP.NET 2.0 may differ depending on what the currently released build version is. These steps are for build version 2.0.50727.

In Exchange Manager, disable Outlook Anywhere, IISRESET, Enable OutlookAnywhere, IISRESET

In EM set the path properties and set Forms Authenticaion, disbale Anonymous access, Turn on Require SSL in IIS

IISRESET

Wednesday, October 14, 2009

Tuesday, October 13, 2009

How can I gain access to a Windows NT/2000/XP/2003 computer if I forgot the administrator

How can I gain access to a Windows NT/2000/XP/2003 computer if I forgot the administrator’s password? How can I reset the administrator’s password if I forgot it?

Posted using ShareThis

Reset your Cisco PIX password

Takeaway: Losing the password to your firewall can be a nightmare. Fortunately, there are a couple of methods for resetting the password on your Cisco PIX firewall. Scott Lowe explains how you can use either a floppy disk or a TFTP server to reset it.

Admit it. You’ve at one point or another forgotten a password or two, which probably wasn't fun but didn't cause any major problems. However, forgetting the password to your firewall will cause headaches no administrator wants to weather. And, when such a password is forgotten, there's little you can do but give up the ghost. Or is there?

In this Daily Feature, I will show you two different methods you can use to reset your Cisco PIX firewall password. Although both methods take advantage of similar techniques, each uses different hardware. The first method employs the use of a floppy drive, and the second uses a TFTP server.

Physical security
The resetting of the password field assumes that physical security for the network hardware is in place, because it requires either a serial connection to the PIX or access to the firewall's floppy drive.

As Cisco suggests, the procedure you use depends on the version of the PIX software that you are running and whether or not your PIX has a floppy drive. If there is no floppy drive in your PIX, you will either have to use a TFTP server or directly access specific memory locations on the PIX memory. The latter solution is both complex and dangerous, so either the floppy or TFTP method is recommended.

Downtime
Please note that some PIX downtime is required to perform the following procedures.

Resetting your password with a floppy device
To begin, download two files from Cisco's Web site (you must have a username/password to enter this area of the site). The first is a file named rawrite.exe, and the second is a binary file that is dependent upon the version of the PIX software that you are running.

The rawrite.exe utility is used to create a bootable PIX floppy disk. This bootable disk will be used to install the .bin file that you downloaded. To create this floppy disk, make sure that there is a floppy disk in your PC and then execute the rawrite.exe utility. For my system, I downloaded the rawrite.exe file and the np52.bin file (since I am running the 5.2 version of the PIX software) and created the boot floppy with these steps.

Once the process is complete, remove the floppy disk from the drive and insert it into the PIX floppy drive. Next, make sure your serial connection to the PIX is working by attempting a standard login via hyperterminal. With a properly working serial connection and your floppy disk in the PIX floppy drive, reset the PIX. The PIX will boot from this disk and reset the password to the factory default, cisco. When it's done, you'll receive the following message on the connected PC or terminal:
Erasing Flash Password. Please eject diskette and reboot.

Reboot the unit again. The telnet password to the PIX will be set to cisco and can be changed using the commands passwd yourpassword and enable password yourenablepassword, where yourpassword and yourenablepassword are the administrator-specified passwords. Your PIX will be accessible again with the passwords that you specify.

Resetting with a TFTP server
If your PIX doesn't have a floppy drive, place the np52.bin file or whichever one matches your version of PIX software on your TFTP server. The PIX needs to be rebooted and an ESCAPE ([Ctrl][Z]) sequence sent as soon as the startup message appears. This puts the PIX to a monitor> command prompt. You will need to enter some basic parameters to give the PIX simple network connectivity. To do this, you will need to know the interface, address, server, and file commands necessary to establish a connection. Here is an example session that would set these parameters, assuming the inside interface is being used to connect to the TFTP server.

The PIX will reboot and you can reset the password as you like.

If your PIX firewall doesn't have a floppy drive and you don't have a TFTP server, I recommend that you get one. Having one will allow you to back up your configuration from time to time and restore corrupt images.

Last resort
If you cannot install a TFTP server and you don't have a floppy drive in your PIX, it's time to call the Cisco Technical Assistance Center (TAC). They will walk you through a series of steps that involve accessing specific memory locations on the PIX without using the .bin file from the Web site. When resetting passwords in this way, be cautious, because the steps vary from model to model and can be dangerous if not used properly. Some steps involve directly accessing memory locations, which could easily overwrite a critical memory address and render your PIX unbootable, so be careful.

Resetting Cisco Switch Password

This documents the procedure for performing a password recovery on a Cisco 2950 switch (and probably other models, as well).

1. Unplug the power cable

2. Hold down the mode button while replugging the power cable

3. Type flash_init over the console

4. Type load_helper

5. Type Dir flash :
//make sure to type the semi-colons

6. Type rename flash:config.txt flash:config.old
//the password is contained in the config.txt file

7. Type boot
//this reboots the system

8. Type n to skip the initial setup configuration

9. Type enable
//this takes you to the enable mode

10. Type rename flash:config.old flash:config.txt

11. Save config.txt to system
#copy flash:config.txt system:running-config

12. Enter config mode and change the password
# config t
# no enable secret
//this applies only if the enable secret password was created

13. Finally, write the changes to memory
# write memory