Adding a new disk to an LVM with esx

$ lsblk

Look at disks to check what is already in use

Add disk in vcenter

$ for h in $(ls /sys/class/scsi_host); do

echo ‘- – -‘ > /sys/class/scsi_host/$h/scan
done

$ for h in $(ls /sys/class/scsi_host); do
    echo '- - -' > /sys/class/scsi_host/$h/scan
done
$ lsblk

look at disks, it should be added

fdisk -l

take note of added disk

eg: /dev/sdc

fdisk /dev/sdc
n - new partition
p - primary
1
defaults
w - write
pvscan

take note of disk /dev/sdc1

pvcreate /dev/sdc1
vgdisplay

take note of vg name, eg: ubuntu-vg

vgextend ubuntu-vg /dev/sdc1
pvscan

disk should be added

lvdisplay

take note of LV name (logical volume name), eg: /dev/ubuntu-vg/ubuntu-lv

lvextend -l +100%FREE /dev/ubuntu-vg/ubuntu-lv
resize2fs -p /dev/ubuntu-vg/ubuntu-lv

Upgrading Debian Buster to Bullseye

sudo apt update
sudo apt -y remove apt-listchanges
sudo apt -y upgrade
sudo apt -y full-upgrade
sudo apt -y autoremove
sudo sed -i 's/buster/bullseye/g' /etc/apt/sources.list
sudo sed -i 's/buster/bullseye/g' /etc/apt/sources.list.d/*.list
sudo sed -i 's#/debian-security bullseye/updates# bullseye-security#g' /etc/apt/sources.list
export LC_ALL=C 
sudo apt update
sudo apt -y upgrade
sudo apt -y full-upgrade
sudo apt -y autoremove

References: https://linuxize.com/post/how-to-upgrade-debian-10-to-debian-11/

 

Reduce RDS SPLA CALS (licensing)

From https://social.technet.microsoft.com/Forums/ie/en-US/eac06eab-3455-4d8e-8698-ddb8d4189e64/reducing-the-number-of-remote-desktop-licensing-peruser-cals-?forum=winserverTS

We can use the following commands

Get-WmiObject Win32_TSLicenseKeyPack|Select KeyPackId, ProductVersion, TotalLicenses, TypeAndModel|Format-List

Invoke-WmiMethod -Class Win32_TSLicenseKeyPack -Name RemoveLicensesWithIdCount -ArgumentList <Keypack>,<NumberofLicensesToRemove>

For Example, if we had 14 RDS cals, and wanted to reduce them to 12:

PS C:\Windows\system32> Get-WmiObject Win32_TSLicenseKeyPack|Select KeyPackId, ProductVersion, TotalLicenses, TypeAndModel|Format-List

KeyPackId : 2
ProductVersion : Windows 2000 Server
TotalLicenses : 4294967295
TypeAndModel : Built-in TS Per Device CAL

KeyPackId : 3
ProductVersion : Windows Server 2019
TotalLicenses : 14
TypeAndModel : RDS Per User CAL

You can see KeyPackId 3 has the RDS cals we want to reduce, we would use the command:

Invoke-WmiMethod -Class Win32_TSLicenseKeyPack -Name RemoveLicensesWithIdCount -ArgumentList 3,2

This would reduce Keypack 3 by 2 licenses, bringing it to a total of 12.

Unable to access IBM IMM after firmware update

After updating an ancient IBM System x3200 M3 IMM firmware, attempting to logon gave the following error: “Your session has been terminated due to account deletion, account disabled, session termination, or session inactivity.”

image

 

This forum post had the answer in a screenshot.  You will need the ASU (older version for this model (v9.64) – you can download this from IBM.

Running the downloaded file extracts the ASU utility to the current directory.  Once extracted, open a command prompt and run the following commands (substituting %HOSTIP%, %USERID%, %PASSWORD% with your details):

asu64.exe set IMM.https_service enable –host %HOSTIP% –user %USERID% –password %PASSWORD%

asu64 set IMM.SSL_Server_Enable enable –host %HOSTIP% –user %USERID% –password %PASSWORD%

asu64 rebootimm –host %HOSTIP% –user %USERID% –password %PASSWORD%

(The full IMM documentation is here)

You should now be able to access the IMM over HTTPS.

From what I can determine, the firmware update changes something with HTTP and cookies, and HTTPS was not enabled on the original IMM firmware.

Exchange connectivity test fails when certificate doesn’t match name

I had a scenario where I was using a single name SSL certificate which was setup for mail.domain.test.  I needed to get autodiscover to work for this domain name.  The DNS host was Godaddy.

I configured an SRV record as follows:

The target pointed to the certificate name.  EG: mail.domain.test.  This allowed the https://testconnectivity.microsoft.com test to go through.

 

References:

https://au.godaddy.com/help/outlook-windows-manually-add-autodiscover-srv-record-20066

Set AD Dial in Options for VPN via Powershell

We had a customer that used the “dial in” options in AD to determine whether or not the users were allowed to use a VPN.  They didn’t want to change this to use groups or NPS.

 

The following powershell allowed us to set this policy based on a group:

$users=get-adgroupmember “Remote_users”

foreach ($user in $users)

{

    set-aduser $user -replace @{msnpallowdialin=$TRUE}

}

Adobe Customisation Wizard

Update 13/05/2022

The URL for adobe customization wizard has changed: https://www.adobe.com/devnet-docs/acrobatetk/tools/Wizard/index.html


As a follow on to http://anonit.net/adobe-dc-customisation-wizard/ , you can download the ADMX templates for Adobe Reader DC here: ftp://ftp.adobe.com/pub/adobe/acrobat/win/AcrobatDC/misc/.

If you need it for some reason (no longer supported) Adobe 11 Customisation Wizard is available here: https://supportdownloads.adobe.com/thankyou.jsp?ftpID=5515&fileID=5526

 

 

 

 

 

Manually triggering a BSOD

Causing system crash from Keyboard – if you ever want to test ….. something.

USB Keyboard?

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kbdhid\Parameters

CrashOnCtrlScroll – dword 0x01

 

Press CTRL and Scroll Lock twice, and you should get a BSOD, stop 0xE2, and a memory dump if not disabled.

 

HyperV Keyboards are in the key

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hyperkbd\Parameters

 

 

Resources:

https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/forcing-a-system-crash-from-the-keyboard?redirectedfrom=MSDN