Mitel 3300 command line intro.

You may have used the "Maintenance Commands" tool form the Mitel web interface. You can also telnet to the system and use some of the same commands. This is good for me because it works on a Mac which I use most of the time. I have always been irritated that the GUI requires IE.

telnet 10.1.2.3
system / xxxxxx  (Hint: This is not the same system password as the GUI)

There is a numbered menu bar at the bottom of the screen. To use these functions, type Esc and the number.

Here are my favorite commands.

stat trunk group 1 (This shows how many lines are busy)
cong (Traffic congestion report)
traffic status (I have not figured out how to use this feature yet but I want it)
loc num xxx (Identify extension number)
loc feat ext xxx (Shows if an extension is forwarded or if message light is on)

I will explore this CLI more later on.

Active Directory failed logon auditing II

You should automate evencombmt because it takes so long to run.

I created a scheduled task to run ev.bat every morning.

ev.bat contents:
eventcombmt /dc /evt:"529 644 675 676 681 4740 4771" /et:safa /log:sec /start

This will find failed logon attempts on all the domain controllers and dump them into text files under C:\temp. When someone asks why they keep getting locked out, I quickly go to \\myserver\c$\temp and browse the log files. Search for the username and there will be many entries in the log with an IP address. The IP address will be a PC or email server with the failed logon attempts.

How to setup Outlook 2010 over HTTP

How to setup Outllok 2010 over the Internet with Exchange and no VPN.

     
More Setting / Connection tab

Check Name

Access to this web server is disabled by default because it is controlled by basic authentication...

Microsoft has a "Fix it" file that did not work for me because it requires admin access. But I found this one registry value did the trick.


office-fix.reg

The contents of office-fix.reg.

[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\Internet]
"BasicAuthLevel"=dword:00000002

This post has been getting a lot of hits. Let me know if the fix worked for you.

Copy files form VMware datastore with PowerCLI.

$input1 = read-host "enter"
Copy-DatastoreItem "vmstore:\\datacenter1\datastore1\*$input1*" c:\vmware\bkups -Recurse

I copy files from a datastore to my local PC on a regular basis. Of course you need to install PowerCLI on the local PC.

Internet Explorer cannot find the Active Desktop HTML file.

"Internet Explorer cannot find the Active Desktop HTML file. The file is needed for your Active Desktop. To turn off Active Desktop, click OK."

The user clicks OK, but the error is back every time they login.

Go to the user profile under "Documents and Settings\user\Application Data\Microsoft" and add an empty folder called "Internet Explorer".

This worked!

How to find spammers in my maillog file?

This is the type of record I get when someone authenticates to send email.

Nov 29 09:45:28 ns1 sendmail[30199]: AUTH=server, relay=[1.2.3.4], authid=smithb, mech=PLAIN, bits=0

This command will parse the log file, sort, and count.

grep "authid" maillog | cut -d ":" -f 4 | sort -n | uniq -c

36772  AUTH=server, relay=[176.222.239.10], authid=smithb, mech=LOGIN, bits=0      1  AUTH=server, relay=[24.2.3.4], authid=usera, mech=PLAIN, bits=0      8  AUTH=server, relay=[64.201.195.49], authid=userb, mech=LOGIN, bits=0     94  AUTH=server, relay=[72.201.195.4], authid=userc, mech=LOGIN, bits=0

  The first user has connected to the outgoing server 37k times this week. Someone has hacked their password and is sending spam. I will save this command and find the culprit much faster next time.

I took some inspiration from this post.

http://www.oxxus.net/wiki/Mail_server_log_analyzing