Software
Tired of “Outlook blocked access to the following potentially unsafe attachments: ….”?
Below is a simple way to get rid of that error. This was primarily taken from a Microsoft knowledgebase article (http://support.microsoft.com/kb/829982)
Follow these steps to modify the registry and alter Outlook’s attachment security behavior on your computer.
- Exit Outlook if it is running.
- Click Start, and then click Run. Copy and paste (or type) the following command in the Open box, and then press ENTER:
regedit
- Verify that the following registry key for your version of Outlook exists.
Microsoft Outlook 2000HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Outlook\SecurityMicrosoft Outlook 2002
HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Outlook\SecurityMicrosoft Office Microsoft Office Outlook 2003HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\SecurityMicrosoft Office Outlook 2007
HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\SecurityOutlook 2010
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\SecurityIf the registry key exists, go to step 5.
If the registry key does not exist, follow these steps to create it:
- Locate, and then click the following registry key:
HKEY_CURRENT_USER\Software\Microsoft
- Under Edit, click New, and then click Key.
- Type Office, and then press ENTER.
- Under Edit, click New, and then click Key.
- For Outlook 2000, type 9.0, and then press ENTER.
For Outlook 2002, type 10.0, and then press ENTER.
For Outlook 2003, type 11.0, and then press ENTER.
For Outlook 2007, type 12.0, and then press ENTER.
For Outlook 2010, type 14.0, and then press ENTER. - Under Edit, click New, and then click Key.
- Type Outlook, and then press ENTER.
- Under Edit, click New, and then click Key.
- Type Security, and then press ENTER.
- Locate, and then click the following registry key:
- Under Edit, click New, and then click String Value.
- Copy and paste (or type) the following name for the new value:
Level1Remove
- Press ENTER.
- Right-click the new string value name, and then click Modify.
- Type the file name extension of the file type that you want to open in Outlook. For example:
.exe
To specify multiple file types, use the following format:
.exe;.com - Click OK.
- Exit Registry Editor.
- Restart your computer.
When you start Outlook, you can open the file types that you specified in the registry.
Note We recommend that you enable only the file types that you have to have. If you rarely receive a particular file type, we recommend that you give Outlook temporary access to the file type that is in question. Then, reconfigure Outlook to block the file type by undoing the changes to the registry. For more information about how you can configure Outlook to block attachment file name extensions that Outlook does not block by default, click the following article number to view the article in the Microsoft Knowledge Base:
Active Directory domain controllers out of sync
We ran into a problem with one of our domain controllers that was not connected for an extended period of time where it could not sync changes properly when available again. There is a solution from Microsoft to resolve this issue.
We have repeated the knowledge base article here just in case it is not available on Microsoft’s site. The original article can be found here
Microsoft’s Article is shown here:
This step-by-step article describes how to use Netdom.exe to reset machine account passwords of a domain controller in Windows Server 2008 R2, in Windows Server 2008, or in Windows Server 2003.
Each Windows-based computer maintains a machine account password history that contains the current and previous passwords that are used for the account. When two computers try to authenticate with each other and a change to the current password is not yet received, Windows relies on the previous password. If the sequence of password changes exceeds two changes, the computers involved may not be able to communicate, and you may receive error messages. For example, you may receive “Access Denied” error messages when Active Directory replication occurs.
This behavior also applies to replication between domain controllers of the same domain. If the domain controllers that are not replicating reside in two different domains, look at the trust relationship more closely.
You cannot change the machine account password by using the Active Directory Users and Computers snap-in, but you can reset the password by using the Netdom.exe tool. The Netdom.exe tool is included in the Windows Support Tools for Windows Server 2003. The Netdom.exe tool is also included in Windows Server 2008 R2 and in Windows Server 2008.
The Netdom.exe tool resets the account password on the computer locally (known as a “local secret”) and writes this change to the computer’s computer account object on a Windows domain controller that resides in the same domain. Simultaneously writing the new password to both places ensures that at least the two computers involved in the operation are synchronized, and starts Active Directory replication so that other domain controllers receive the change.
The following procedure describes how to use the netdom command to reset a machine account password. This procedure is most frequently used on domain controllers, but also applies to any Windows machine account.
You must run the tool locally, from the Windows-based computer whose password you want to change. Additionally, you must have administrative permissions locally and on the computer account’s object in Active Directory to run Netdom.exe.
Use Netdom.exe to Reset a Machine Account Password
//
- Install the Windows Server 2003 Support Tools on the domain controller whose password you want to reset. These tools are located in the Support\Tools folder on the Windows Server 2003 CD-ROM. To install these tools, right-click the Suptools.msi file in the Support\Tools folder, and then click Install.
Note This step is not necessary in Windows Server 2008 R2 and in Windows Server 2008 because the Netdom.exe tool is included in these Windows editions.
- If you want to reset the password for a Windows domain controller, you must stop the Kerberos Key Distribution Center service and set its startup type to Manual.Notes
- After you restart and verify that the password has been successfully reset, you can restart the Kerberos Key Distribution Center (KDC) service and set its startup type back to Automatic. This forces the domain controller that has the incorrect computer account password to contact another domain controller for a Kerberos ticket.
- You may have to disable the Kerberos Key Distribution Center service on all domain controllers except one. If you can, do not disable the domain controller that has the global catalog, unless it is experiencing problems.
- Remove the Kerberos ticket cache on the domain controller where you receive the errors. You can do this by restarting the computer or by using the KLIST, Kerbtest, or KerbTray tools. KLIST is included in Windows Server 2008 R2 and in Windows Server 2008. For Windows Server 2003, KLIST is available as a free download in the Windows Server 2003 Resource Kit Tools. To obtain the tools, visit the following Microsoft Web site:
- At a command prompt, type the following command:
netdom resetpwd /s:server /ud:domain\User /pd:*
A description of this command is:
- /s:server is the name of the domain controller to use for setting the machine account password. This is the server where the KDC is running.
- /ud:domain\User is the user account that makes the connection with the domain you specified in the /s parameter. This must be in domain\User format. If this parameter is omitted, the current user account is used.
- /pd:* specifies the password of the user account that is specified in the /ud parameter. Use an asterisk (*) to be prompted for the password.
For example, the local domain controller computer is Server1 and the peer Windows domain controller is Server2. If you run Netdom.exe on Server1 with the following parameters, the password is changed locally and is simultaneously written on Server2, and replication propagates the change to other domain controllers:
netdom resetpwd /s:server2 /ud:mydomain\administrator /pd:* - Restart the server whose password was changed. In this example, this is Server1.
Fix Outlook Web Access (OWA) on Windows 7 and Vista
There is an issue using OWA on Windows 7 and Windows Vista which makes Outlook Web Access (OWA) unusable. To fix this requires a hotfix to be installed on the Exchange Server. The details of this hotfix can be found at the below link:
Interesting feature within Windows 7
Windows users are excited over the discovery of a hidden “GodMode” feature that lets users access all of the operating system’s control panels from within a single folder. In order to enable this feature all you need to do is to create a new folder and then rename the folder to the following:
GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}
Once that is done, the folder’s icon will change to resemble a control panel and will contain dozens of control options.
I think most of these options are available elsewhere, but this provides a simple, easy-to-use method to access all of them.
Mail Merge from Microsoft Outlook
Created a short video about how to do a Mail Merge from Microsoft Outlook using the Categories option for Contacts.
See all the details here
Getting more useful information into Google Analytics
We use Google Analytics (GA) for all our sites and most of our client sites. It often provides the most bang for the buck and makes slicing and dicing your analytics pretty easy to do.
On of the most interesting sections of Google Analytics is in the Visitors section and it is called User Defined. This is an area that allows you to create some customized “tags” or “labels” for any of your visitors.
I could go on and explain all the nitty-gritty details, but guys over at Google Analytics have already posted a very detailed explanation on how to implement this capability and shows how it can provide additional value to the tremendous value that GA already provides.
To review all the User Defined details you just use the links already created in this post.
Clearing Email History Lists in Outlook
One of the great features of Outlook (but also sometimes annoying) is that it remembers all the email addresses of the people that you send email to or receive email from. This makes it really easy for composing emails except for when you get an email address that is spelled incorrectly in that list. That can be extremely frustrating.
Turns out that it is super simple to remove that email address. Just compose and email and start typing the address. When you see it appear, just use the arrows to select the one that is incorrect and press the Delete key. It will be gone forever. Quick and easy.
If you want to clear the entire email history, you can do the following:
- Exit Outlook
- Run Windows Explorer
- Navigate to the C:\Documents and Settings\username\Application Data\Microsoft\Outlook folder (substitute username with your username)
- Find the file with the NK2 extension and rename or delete it.
Remote Desktop with Multiple Monitors / Screens
Great Script for Accessing IIS Configuration Properties
Need to extract information from IIS such as IP Addresses, Host Headers, Log Directories and lots more. This great little script from David Wang does a great job of this. It saved me hours and hours of work going through all my IIS servers manually.
Thanks David!
So what do you do with all those IIS log files?
You are responsible for one or more Windows web servers and you have all these IIS log files that you want to make some sense out of. If you have some basic SQL skills Microsoft is making available a utility called LogParser which does a great job getting in there and allowing you to query the files directly using some basic SQL syntax. The feature I like the best is the ability to convert the data into a SQL table for manipulation via T-SQL.
Here is a sample of what I did (this would all go on a single line)
c:\”program files”\”log parser 2.2″\LogParser -iCheckPoint:myCheckPoint.lpc -o:SQL -server:localhost -database:IISLogs -createtable:ON “SELECT * FROM ex0810*.log TO IISLogs”
This short command line will read in all log files that start with ex0810 and import them into a table called IISLogs. It will also create a checkpoint file so that if you run the command again it will not import records that have already been imported.
How cool is that?
Once all the importing is done you can leverage the SQL tables using whatever methods you need to.
If you need any help with stuff, send us a note at support at quarksoft.com.