TIPS & TRICKS: Make Sure 'Display Name' Is Populated

Learned something new today about Exchange. Apparently, the Display Name field holds much more significance than I originally thought. When searching for users to create a new profile (i.e. hitting Check Name) in Outlook setup, it actually relies on the Display Name field to find the appropriate user in the Global Address List. I used to think that giving it the correct username was enough.

In the future, I will make sure to have Display Name filled out appropriately and not leave it blank.

TIPS & TRICKS: Enterprise-Level Networking

I deal, mostly, with consumer level equipment for helping home and small-office users get connected. Most situations don't call for spending more money than consumer-level hardware costs to get together a suitable networking situation.

However, even home and small-office users, sometimes have very specific situations that require some higher quality equipment that provide specific functionality. Case in point, I once tried to help someone setup a wireless network in a 2500+ square foot home. I had recommended using Apple equipment, since they were mostly a Mac household and the Airport-branded equipment provided most of what they need. My lesson learned from this project was that the Airport Extreme can only accept one additional Airport Express as an extender to the wireless network. Most of the house had coverage after I put in the Airport Extreme and couple of Airport Express Base Stations. The one place that lacked good coverage was the pool house. Without getting into the specifics, I finally figured out a second Airport Express setup as an extender off another Airport Express that was already acting as an extender (i.e. Airport Extreme > Airport Express > Airport Express), really degrades the bandwidth down to even below optimum dial-up speeds.

Moral of the story, the right tools always gets the job done better. To that end, I recently got a recommendation from the This Week in Enterprise Tech podcast about this company that does some good work with equipment that might have helped in my project I just mentioned. It's called MikroTik (http://mikrotik.com/). Next time I need something more than consumer-level gear, I'll take a look at these guys.

TIPS & TRICKS: Software Recommendations

My list of software to try to make my own life more efficient. Reminder: Automate repetitive tasks. Don't get too caught up in the automation itself.


OS X:

• CheatSheet - Free app that summarizes the keyboard shortcuts available for the current application. http://www.cheatsheetapp.com/CheatSheet/

iOS:

• Drafts - Paid note taking app heard about on Mac Power Users podcast. Useful for starting email messages, text messages, reminders, etc. http://agiletortoise.com/drafts/

TIPS & TRICKS: Improve the Security of a New Computer

Often, I field questions about how to protect a computer, especially when it's brand new. I've often given customized advice to people, depending on their current environment. But, I get the questions enough that I considered composing a document that outlines this information.

Fortunately, I have (and, so have you) paid for someone else to compose this document for us:

http://www.us-cert.gov/security-publications/ten-ways-improve-security-new-computer

This federal government site has a wealth of information, including this well-written document, on how to secure your computer from the bad guys. There's lots of ways to protect your new computer from getting compromised, but this document provides a great baseline for everyone to follow.

Besides the steps outlined in this document, I would also add that setting up a new machine is a perfect time to also setup a solid backup solution and consider encrypting the hard drive in your computer, especially if it's a notebook that gets lots of miles.

TIPS & TRICKS: Browser and Other Security Tests

With all the recent 0-day exploits and other vulnerabilities making news, I thought it would be helpful to have some resources to test out your environment.

First, browser security checks:

• http://www.isjavaexploitable.com
• https://browsercheck.qualys.com

Next, router and computer security checks:

•  Use ShieldsUP! and the Instant UPnP Exposure Test at this site: https://www.grc.com/

As always, security is like an onion. A well secured computing environment will have lots of layers. These tools are another layer of protection.

TIPS & TRICKS: Viewing Hidden Files in OS X

Initially, I wanted to find a way to transfer music off an old iPod that hadn't been synced to anything for a long time. I have done this many times with a Windows machine and even told people that it's possible to do it on a Mac (OS X). However, I've never actually done it myself.

The basic process is the same on OS X as it is on Windows. Use the OS explorer window to navigate the iPod after making sure that hidden files are visible. On OS X, this is the secret sauce:

• Launch Terminal, located at /Applications/Utilities.
• Type or copy/paste the following two commands into the Terminal window, next to the Terminal prompt. Press the return or enter key after you enter each line.
• defaults write com.apple.finder AppleShowAllFiles TRUE
• killall Finder
• If you ever want to make the hidden folders disappear again, just run the code again, but change TRUE to FALSE.

Making hidden files visible in the operating system can be useful for other troubleshooting and modification steps. 

A follow-up tip to this one is how to make a hidden folder into a non-hidden folder once it's made visible and to recursively make all subfolders unhidden:

• Using the same terminal window, drag the folder or file into the terminal window. This will put the correct path to the file/folder that needs to be changed to unhidden. 
• Using the arrows on the keyboard, backspace to the beginning of the path and type in:
• chflags -R nohidden
• This should give a command that looks something like:
• chflags -R nohidden /Users/username/Desktop/FolderName
• Follow-up the successful command with a:
• killall Finder

TIPS & TRICKS: AppleCare Support Page

Been administering Macs for quite some time. In the past, to view all the machines I manage under one Apple ID I used this page:

http://www.apple.com/support/applecare/view

However, today I learned about a tool I had not encountered before:

http://supportprofile.apple.com

This page is different than the page I've used in the past. It also seems to give me more information than than the old page and more ways to manage the information.

One important note to mention is these two sites are two completely different sites. Information on one site does not necessarily show up on the other as I found out in attempting to register a custom MacBook Air with Auto-Enrolled AppleCare that was purchased from an Apple Authorized Reseller. I had to get on the phone with AppleCare Agreement Administration in order to address this disparity. I assume Apple is in a transition between these two sites. Until they get past the transition, I would recommend making sure that the information for all your machines show up in both areas.

Hope this helps you. Happy computing.

TIPS & TRICKS: Free E-Books for Windows Administrators

There's a lot of free information out there. I always figured if I really wanted to learn something, I didn't necessarily need to go to school for it. Don't get me wrong, the structure of school is something that I require to streamline my learning. However, the information can, often times, be found for free in our information age. As a systems administrator, part of my job is to keep learning and staying abreast of the latest technology. As a frugal individual, I strive to find the free stuff that works for me (not all free stuff holds value for me). I did come across this site that has free e-books on topics that are relevant to my role as a systems administrator:

http://4sysops.com/archives/free-e-books-for-windows-administrators/

Hope this helps you too in the quest for free, yet valuable information...

TIPS & TRICKS: Download Dell OS Media

So the other day, I was helping someone reload their Dell machine. The media to reinstall Windows was not available. I contacted Dell to see if they could send another set. They agreed, but I needed to get this machine back up and running sooner. At some point, I thought to myself how great it would be if I could just download the media and create my own bootable media set. Eventually, I found the original set that came with the computer and got it reloaded. However, I came across this site that does allow downloading of software to create bootable media. Fortunately, it's a Dell site, which redirects to Digital River, also a trustworthy site. http://en.community.dell.com/support-forums/software-os/w/microsoft_os/1439.02-microsoft-windows-and-microsoft-office-downloads.aspx Hope this helps. Happy Computing.

TIPS & TRICKS: Manually Change Time Machine Backup Schedule

Apple's Time Machine was, by far, the best tool Apple introduced with OS X Leopard (10.5). Backups are always the last thing most users think about. But, it's the first thing people wish they would have had when there's some failure that prevents them from accessing their data. Time Machine's simplicity should have every single person who doesn't already have a backup solution adopt it with fervor.

As great as the tool is for most backup needs, I have discovered a drawback. Time Machine runs a backup once an hour. The constant barrage of data hitting the backup destination can put a toll on the media. In many cases, the media is an external hard drive with physical hard drive. The drives themselves are not nearly as sturdy as they used to be. I've come across users who have had to replace their backup drives inside of 6 months. If you need the once an hour backup interval, then you'll need to put up with this routine maintenance. Think of it as changing the oil filter every time you change your oil in the car.

Fortunately, there is a fix for those people who don't need the backups nearly that frequently. As the saying goes, there's an app for this. However, I am an fan of understanding how the underlying code works. The manual method is this command (all one line):

sudo defaults write /System/Library/LaunchDaemons/com.apple.backupd-auto StartInterval -int 14400

The 14400 is the number of seconds in 4 hours. The number you choose should be a factor of 3600 seconds (1 hour). For example if you want to do it once every 7 days, you would use 604800. You can also check the change with this command:

sudo defaults read /System/Library/LaunchDaemons/com.apple.backupd-auto StartInterval

Hope this helps you out with extending the life of that backup hard drive.

TIPS & TRICKS: iPhone Syncing Error

Syncing my iPhone with iTunes on my workstation yielded an error message that said "The iPhone cannot be synced. An unexpected error occurred (1150)." The only way I could figure out a way around this error was to disable all restrictions on the iPhone itself. I tried disabling individual restrictions, but nothing worked. Only completely disabling all restrictions helped the sync complete.

Oh, it also helps to unplug the sync cable if you have it plugged in after disabling all restrictions. Unplugging and replugging the iPhone to the computer seems to tell iTunes that changes were actually made.

Hope that helps you.

TIPS & TRICKS: Force Facebook to Clear Page Cache

To be clear, this tool really refreshes Facebook's cache of a particular page. In addition, this tool doesn't clear any caches in Facebook pages. Rather, it checks third party pages for updated content.

https://developers.facebook.com/tools/debug

I came across this while posting a status update with a link on a Page I manage. The link's preview showed some outdated information, which I knew had been updated already. Using this developer tool helped to update the cache to show the current information on the link preview.

TIPS & TRICKS: Microsoft Group Policy Settings Spreadsheet

Group policy can be daunting. I'm sure I've shared other people's frustrations when just simply looking for a particular setting. There's been countless times when I wished I could just do a search on the whereabouts of a particular setting. At least, these spreadsheets are searchable:

http://www.microsoft.com/en-us/download/details.aspx?id=25250

RANTS & RAVES: Fingerprint Reader Software by UPEK

I have my reservations about fingerprint readers. This article about how the UPEK software stores a users passwords in a very insecure way, serves to make me more wary about anything that stores passwords.

http://blog.crackpassword.com/2012/08/upek-fingerprint-readers-a-huge-security-hole/

Fortunately, the silver lining I'm pulling out of this story rests with the great advantage of using disk encryption such as BitLocker. If the disk is encrypted, then the not so securely stored password for the fingerprint reader turns out the encrypted just by virtue of being stored on the same disk. If you've got multiple drives or volumes, then make sure that the separate drives are encrypted too.

Lesson learned before I get into any trouble.

TIPS & TRICKS: Active Directory Users & Computers Filtering

Handy little LDAP query to filter users who have not changed passwords after a certain date (in this case, September 5th) (all one line):

(&(objectCategory=user)(pwdLastSet>=129913020000000000)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))

Here are the steps to run the filter:

• In ADUC, click on Set Filtering options icon
• click "Create custom", then Customize button
• click on Advanced tab, then enter (or copy/paste) LDAP query:
• (&(objectCategory=user)(pwdLastSet>=129913020000000000)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
• then click OK button, then OK again to close Filter Options
• In OU list at left, navigate to your OU, which will now show only users who have changed password since cutoff time.
• 129913020000000000 = number of 100 nanosecond intervals since Jan 1, 1601 to 9/5/2012 12:00 AM.
• (!(userAccountControl:1.2.840.113556.1.4.803:=2)) is a bitwise operation to exclude disabled users.
• If you want to return to seeing all users and objects, you need to clear the filter, by clicking on Set Filtering options icon, then click "Show all types of objects"
• You can reverse the query to see users who haven't changed password yet, by changing the query string >= to <=

TIPS & TRICKS: Recalibrate a Sticky iPhone Home Button

Didn't know about this trick until today. Apparently, if the home button on the iPhone is sticking or not responding, recalibrating it could help to get it working again. Here are the steps:

1. Click on a native iOS application (i.e. Stocks, Email, Messages, etc.).
2. Push and hold the power button on top until the "slide to power off" screen appears.
3. Let go of the power button. 
4. Push and hold the home button until the "slide to power off" screen disappears and let go of the home button. 

The home button should be recalibrated now. 

Hope this helps someone. 

TIPS & TRICKS: Adobe Acrobat Licensing Error

Encountered this error message:

The scenario is that this error shows up after deploying a custom Windows 7 image. When a new user logs into the machine and tries to launch a PDF file, this error message appears.

Here is Adobe's knowledge base article on this:

http://helpx.adobe.com/acrobat/kb/error-213-19-licensing-acrobat.html

Part of the problem is that the user needs to have full access to \ProgramData\Adobe (I found that just giving an administrative account explicit access to that folder temporarily and launching Acrobat once was enough). However, the more specific problem is that Adobe forces a window on first launch of Adobe Acrobat that asks you to register the software. If that process can either get disabled or launched prior to imaging (without getting reset during the Sysprep process), then we can avoid this error message. Thanks a bunch Adobe.

RANTS: The Day Has Finally Arrived

People have been saying for some time that Macs are safe and are not susceptible to malware infections. As a result, anti-malware software is not needed. The market more or less followed this trend. But, this has changed. Malware is not something that only PC users have to deal with anymore. I've been asked many times in the past whether anti-virus or other anti-malware was needed. I've always said that it's better to be proactive about protection than to wait until there's a problem. By then, the computer would've already been infected.

Here's a BBC news article about Macs becoming the right size target for attackers to pay attention:

http://www.bbc.co.uk/news/science-environment-17623422

Here's the F-Secure link about how to figure out if your Mac might be infected:

http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml

Hope this helps someone.

RANTS & RAVES: Reasons to Upgrade

I've got an iPhone 3G. You read that right, iPhone 3G. It's as slow as molasses. But, I've been holding off on upgrading for several reasons. First, I'd like to think that I'm environmentally conscious by taking longer to upgrade the device. Second, I think that the device has some life left in it. It does the basics for me. I just can't ask it to do more, which brings me to this post. Here's an ongoing list of the reasons why I really need to upgrade:

1. Can't rotate photos. I took a photo of a sheet of paper, instead of photo copying it. Problem is I took it in landscape mode and I am unable to keep it in landscape view to keep the text upright. When the phone is in landscape the photo rotates to portrait mode and the text is sideways. My neck hurts. 
2. Photos are very low in quality. I'm capturing precious moments in very low quality. Great for hiding those pimples. 
3. No front facing camera. Can't Skype or Facetime. 
4. 
   

RAVES: Shadow IT

Good short article about reevaluating the role of IT departments. The two important points I got out of this article are:

1. Users really want to consume more information. 
2. IT departments need to expand on productivity and capacity in order to meet the demand of their users to consume more information. 

http://www.theregister.co.uk/2012/03/22/shadow_it/