travis' brain dump

Tech Stuff

Skype For Business: Invalid incoming HTTPS certificate

by on Dec.15, 2018, under Tech Stuff

Skype for Business Front End Server
Event ID 32042 – LS User Services – Invalid incoming HTTPS Certificate

I ran into this issue recently when someone thought it’d be cute to have the intermediate and root certs for a domain sitting in the same container (Trusted Root Certification Authorities). There’s a reason we have different containers folks. 🙂

Needless to say I was not amused after wasting an hour or so trying to figure out just why this error kept popping up in my event logs and the FE services wouldn’t come up. The worst part? I’d looked at the certificate objects and because these two certs looked almost identical in name, I missed them entirely during my search. 

So after doing a little digging around, I was pointed back towards a problem with a chain. There were a few examples of some Powershell to accomplish what I needed, but I liked this one the best. It allowed for me to see the list of my offenders easily. 

Get-ChildItem cert:\LocalMachine\root -Recurse | Where-Object {$_.Issuer -ne $_.Subject} |fl FriendlyName,Subject,Issuer

Once run, any certificate listed is going to be a cert you need to take a look at. You’ll most likely either move these certificates to the Intermediate or Personal containers. Just be careful where you move stuff so you don’t create new problems for yourself. 

Hopefully you can save yourself some time by having this handy. 

Leave a Comment more...

Migrating Windows DNS Server

by on Dec.09, 2018, under Tech Stuff

Ever needed to migrate a non-AD integrated Windows DNS Server to another instance of Windows? I found myself in the situation to do so this weekend so I figured I’d share the process for reference. 

From the source server: 

  1. Create a folder for storing the migration files. (ex. c:\temp\dnsgmig)
  2. From an elevated command prompt, execute the following commands:
    1. ‘reg export “HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Parameters” c:\temp\dnsmig\dns-params.reg
    2. ‘reg export “HKEY_LOCAL_MACHINE\System\CurrentVersion\DNS Server” c:\temp\dnsmig\dns-version.reg
  3. Modify dns-params.reg and change “PreviousLocalHostname” to the fqdn of your new DNS server. If you using the same name, skip this step. 
  4. Copy the folder c:\windows\system32\dns to c:\temp\dnsmig\

Copy the source folder (c:\temp\dnsmig) to the destination server. (example will use the same folder name)

  1. From an elevated command prompt, execute the following command: 
    1. Stop-Service DNS
  2. Click to import your two registry files, dns-params.reg and dns-version.reg. You’ll be prompted each time to confirm you want to import the information. Click ‘Yes’. 
  3. Copy all of the files from c:\temp\dnsmig\dns to c:\windows\system32\dns
  4. From an elevated command prompt, execute the following command:
    1. Start-Service DNS

You should now be up and running. 

Leave a Comment more...

MPIO on Nano Server

by on May.10, 2017, under Tech Stuff

After hunting around a little bit I found some great information on enabling and configuring MPIO on Nano Server. I figured, as always, I record down my thoughts here so I can reference them again later if needed and post it out publicly where it can be of some use to anyone wandering by. 

Useful Links: 

General information on MPIO from TechNet: Multpath I/O Overview

To enable MPIO on Nano Server, execute the following over your remote powershell session: 

Enable-WindowsOptionalFeature -Online -FeatureName MultiPathIO

Once enabled your SAN disks will be presented as duplicates (just as they are with MPIO under Windows Server), so you’ll need to execute additional powershell in order to claim or manage disks. 

Thankfully, Microsoft has published a script for this which can be downloaded from here: MPIO on NanoServer

It’s straight forward and works as designed, which feels odd sometimes when talking about Microsoft. 🙂 

Leave a Comment more...

Get BlockSize of Disks Using WMI & Powershell

by on Apr.12, 2017, under Tech Stuff

Ok, so I couldn’t find this earlier on the web easy enough, so I figured I’d stick it here for later if I ever need it again. I was trying to verify that my scripts had correctly formatted the volumes for SQL data with the correct block size. This should come in handy for anything else you need to verify block size with as well. 

$WMIQuery = “SELECT Label, Blocksize, Name FROM Win32_Volume WHERE FileSystem=’NTFS'”
Get-WmiObject -Query $WMIQuery -ComputerName ‘.’ | Select-Object Label, Blocksize, Name

Leave a Comment more...

Looking for something?

Use the form below to search the site:

Still not finding what you're looking for? Drop a comment on a post or contact us so we can take care of it!