Explorer.exe won’t load following a reboot

Recently encountered problems getting Windows Explorer shell to load in Windows XP after cleaning a spyware infection.  I found there are two registry keys that are critical in relation to loading explorer on boot,  you should check them first if you even encounter a problem getting Explorer.exe to load.

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon


HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon


Watch out for trailing comma’s on userinit.exe  (userinit.exe, ) as this is where malware likes to insert itself to load during windows startup.

Renew SSL self-signed certificate in SBS 2008

With Small Business Server 2008, you have the option to use a third party SSL certificate or the default self-signed SSL certificate. By default the self-signed certificate is valid for two years, but how to you renew it without interrupting OWA, Outlook, and Exchange? When the certificate is expired, Outlook 2007/2010 will give you an error message when opening, that the certificate is not valid. Here are the steps to fix it.

1. Goto the Windows SBS Console, click on Network Tab, then Connectivity Tab
2. Click on the certificate icon, then click the “view certificate properties” in the right pane. In the General tab of the new window, it will show the dates that the self-signed certificate is valid for.
3. In the “Connectivity Tasks” area, click “setup your Internet address”, go through the wizard to renew your self-signed SSL certificate.
4. When you now check the certififcate properties, you will see that it is now valid for another two more years.

BPOS – Exchange Hosted important Shell Commands

To add mailbox permissions to other users in Microsoft Exchange Hosted Services (BPOS).

Add-MSOnlineMailPermission -Identity user@example.com -TrustedUser admin@example.com –GrantFullAccess True –GrantSendAs True


Get Mailbox size settings from Microsoft Exchange Hosted Services

Get-XsHostedExchangeMailbox -SourceServer red001.mail.microsoftonline.com -SourceIdentity user@domain.com -SourceAdminCredential $cred -SourceDetail Full

http://blogs.pointbridge.com/Blogs/schertz_jeff/Pages/Post.aspx?_ID=85 [Read more…]

Installing Thawte’s new 2048 bit certificates

Thawte now is conforming to the new 2048 bit standard for their SSL certificates, which will require you to install two intermediate certificates on your server before they work and is validated. Below are the links to the articles and intermediate certificates. Download both certificates and import them into the “Intermediate Certificate Authority” in the Certificates MMC.

Thawte Intermediate and Cross Root CAs – link

Primary and Secondary Intermediate CAs – link

Moving DHCP from Windows Server 2003 to Windows Server 2008

Microsoft Support KB article on moving your DHCP scope(s) using netsh – link

Comparison of Exchange ActiveSync clients (mobile devices)

Great table on the features of ActiveSync and what each client (device) can do, – Wikipedia

Windows server backup fails consistency check of the Exchange database

Trying to backup Exchange 2010 and purge transaction logs using the built-in Windows Server Backup app (Windows 2008).

– Backup completes but with warnings and log files won’t purge

-Found that the backup will run successful only if database files and the transaction log files on the same volume

Moved the transaction logs files via the EMC to the save volume as the databases and got past the consistency check failure issue, and got a good backup w/flushed logs.

Import NK2 file into Outlook 2010

For some reason when using Outlook, all of the saved names/email addresses in the Outlook cache (.nk2) file was not being read by Outlook 2010. When looking at the .nk2 file in userAppDataRoamingMicrosoftOutlook it had been renamed to Outlook.nk2.old. When I renamed the .nk2 file back to Outlook.nk2 file, Outlook still would not use the autocomplete file. When having no .nk2 file Outlook didn’t create a .nk2 file either….weird. So, I found a way to import the .nk2 file in outlook: Close Outlook, go to the run window and type outlook.exe /importnk2

Microsoft Support KB – link

Change installation location of Trend Micro Client Server Security Agent

At some time you may need to change the default location of the Trend Micro Client/Server Security Agent on a desktop/server. In our case the server was very low on disk space on the C: drive, but the default install when executing \servernameofcscanautopccp.exe would go to the C: drive.

  1. Open the ofcscan.ini file, and go all the way down to the bottom of the file
  2. Change the path on the line “WinNT_InstallPath=$ProgramFilesTrend MicroClient Server Security Agent”
  3. Save the file and run autopccp.exe and it will go to the new path that you have saved

Outlook 2003 (connected to Exchange 2010) gives unknown error when deleting some messages

When users delete items from folders, outlook doesn’t seem to refresh the item list.  If you try and delete the item again, outlook throws an “unknown error” message.  If you delete an item and then navigate away from a folder or even use the navigation pane to display the same folder, the item list will refresh and remove the deleted message.

The issue is “The basic issue is that Outlook 2003 support UDP and polling notifications. Exchange 2007 supports UDP, polling and Async notifications. Exchange 2010 only supports polling and Async notifications. This means when Outlook 2003 move from Exchange 2007 to Exchange 2010, Outlook clients will fall back to polling which by default only gets notifications every 30secs-1min. This means any change won’t show up immediately.

UDP notification support was removed from Exchange 2010. As a result, Outlook 2003 can only use polling notifications in online mode, which are still supported by RPC Client Access. This will result in a slight delay in updates to item status (30 seconds on average up to a 1 minute delay) when changes are made to items in a mailbox accessed by Outlook 2003.”

The fix:

Method 1: Install Update Rollup 1 for Exchange Server 2010

Important This method contains steps that tell you how to modify the registry. However, serious problems may occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For more protection, back up the registry before you modify it so that you can restore the registry if a problem occurs. For more information about how to back up and then restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in Windows

You can download Update Rollup 1 for Exchange Server 2010 from the following article in the Microsoft Knowledge Base:

976573 Description of Update Rollup 1 for Exchange Server 2010

After you install the update, you must add the following registry data to the server by using the Client Access role.

  1. Start Registry Editor.  
  2. Locate and then click to select the following registry subkey: HKEY_LOCAL_MACHINESystemCurrentControlSetServicesMSExchangeRPCParametersSystem Create the ParametersSystem


    registry subkey if it does not exist.

  3. Add the following registry data to the server:Value type: REG_DWORD
    Value name: Maximum Polling Frequency
    Value data: any integer between 5000 and 120000 (decimal value)

  4. Exit Registry Editor.


  • The registry change is dynamically detected. Therefore, the new settings will be applied to any new connections that clients make after the change is made. If you want to make sure that the new settings are applied to all clients, you should recycle the Microsoft Exchange RPC Client Access service because connections from clients can remain alive for a long time.
  • Outlook 2003 does not poll the Exchange Server 2010 server in intervals that are less than 10 seconds. Therefore, any value less than 10000 will generally have the same effect.
  • This change does not reinstate UDP communication between Exchange Server 2010 and Outlook 2003. This change only enables polling to occur more frequently between Exchange Server 2010 and Outlook 2003.

Microsoft KB – link