News Categories
Announcement (9) Amy Babinchak (64) Tips (1) SBS 2011 (6) Windows Essentials 2012 (4) Edwin Sarmiento (28) SQL Server (22) SQL Server 2012 (6) SQL Server Clustering (3) SQL Server Disaster Recovery (6) Windows Server 2008 Clustering (1) log shipping (1) Brian Higgins (3) Uncategorized (42) Hyper-V (67) Virtualization (13) Windows 8 (13) Cisco VPN Client (1) Windows Server 2012 (24) Friend of TT (4) Hangout (2) Office365 (4) DNS (8) Jeremy (7) Cliff Galiher (3) Active Directory (12) ClearOS (4) Linux (4) presentations (2) SQL PASS (6) Chris Matthews (4) Printers (2) SharePoint (8) SQL Server Administration (7) Windows PowerShell (3) recovery model (1) sql server databases (1) Dave Shackelford (7) SMB Nation (1) Steve (1) Boon Tee (5) Kevin Royalty (3) Lee Wilbur (2) Philip Elder (10) SMBKitchen Crew (31) Susan Bradley (15) AlwaysOn (1) AlwaysOn Availability Groups (4) readable secondaries (1) row versioning (1) undocumented (1) The Project (2) Webinar (3) Enterprise for SMB Project (9) Security (25) Remote Desktop Connection for Mac (1) Remote Desktop Services (8) Windows Server 2008 (1) Exchange (15) Powershell (6) Microsoft (15) Performance (7) data types (1) Server 2012 (1) monitoring (1) DevTeach (1) SQL Server High Availability and Disaster Recovery (5) Clusters (44) Hyper-V Server 2012 (2) Business Principles (26) Cost of Doing Business (13) DHCP (7) sbs (15) Windows Server (30) SMBKitchen (26) Windows Server 2008 R2 (4) StorageCraft (1) P2V (1) ShadowProtect (6) StorageCraft ShadowProtect (1) VHDs (1) Intel RAID (2) Intel Server System R2208GZ (1) Intel Server Systems (17) RAID (2) SAS (2) SATA (2) Server Hardware (12) Microsoft Licensing (2) OEM (2) System Builder Tips (4) Intel (5) Intel Channel Partner Program (4) Intel Product Support (10) Intel Server Boards (2) Intel Server Manager (2) Cloud (26) IT Solutions (2) On-Premises (20) SMB (9) WIndows Azure (2) StorageSpaces (1) Error (47) Error Fix (35) Intel Desktop Boards (2) Intel SSDs (2) SSD (2) Business Opportunity (17) Data Security (11) Identity Security (7) Information Security (14) Privacy (2) Intel Modular Server (6) Promise (2) Storage Systems (9) Live ID (2) Microsoft ID (4) User Profiles (2) Articles (2) Building Client Relationships (6) DBCC IND (2) DBCC PAGE (2) filtered indexes (2) SQL Server Index Internals (2) training (11) Adobe (3) Internet Street Smart (8) Intel Storage Systems (2) LSI Corp (2) LSI SAS6160 Switch (2) Storage Spaces (7) Firmware Update (2) Product Support (7) Hybrid Cloud Solutions (3) Server Core (2) MAXDOP (1) SharePoint 2013 (1) SharePoint best practices (1) SQL Server Authentication (1) Family (5) Alternatives (1) SBS 2011 Standard (4) Microsoft Small Business Specialist Community (2) Microsoft Surface (2) SBSC (2) Networking (4) Availability Groups (3) CANITPro (1) HA/DR (1) Step-By-Step: Creating a SQL Server 2012 AlwaysOn Availability Group (1) webcast (1) VMWare (2) Conferences (2) Client Focus (2) Disaster Recovery (6) Error Workaround (8) Troubleshooting (4) Logitech (2) Product Review (7) Windows Features (4) XBox Music (2) SBS 2008 All Editions (4) MDOP (2) Microsoft Desktop Optimization Pack (2) Software Assurance (2) W2012E (6) Windows Server 2012 Essentials (6) Internet Explorer (3) USB 3.0 (2) USB Hard Drive (2) Bug Report (2) Microsoft Office 365 (5) sharepoint online (2) BitLocker (2) Windows (2) Microsoft Update (3) Swing Migration (2) Windows Update (4) Outlook (2) Group Policy (9) WS2012e (2) WSUS (3) Office (3) Microsoft Downloads (5) Microsoft Office (3) DRP (3) Virtual Machines (2) Virtual Server Hardware (2) online course (1) SQL Server learning (7) 2 Factor Authentication (2) 2FA (2) PASS Summit 2013 (4) SQLPASS (5) Contest (1) e-learning (1) Udemy (1) smbtechfest (1) backups (2) PASS Summit First Timers (3) IIS (2) RD Gateway (4) RD RemoteApp (2) RDWeb (4) Remote Desktop Connection (2) Remote Web Access (2) Remote Web Workplace (2) Cryptolocker (6) Backup (4) Restore (2) CryptoLocker (1) AuthAnvil (1) SBS 2003 (1) SBS Migration (1) Windows Server 2012 R2 (9) Documentation (1) IE 11 (4) testimonials (11) SQL Server 2008 (1) Best Practices (1) Support (1) Intel Xeon Processor (1) RemoteApp (1) Android (1) iOS (1) Hyper-V Replica (2) PowerShell (2) SBS (3) Break (1) Business Intelligence (1) Excel 2013 (1) Power Map (1) Power Query (1) PowerBI (1) MultiPoint (2) Surface (1) Net Neutrality (1) Opinion (2) ASP (9) HP (2) Scale-Out File Server (8) SOFS (10) Windows Phone (1) Updates (1) Intel NUC (1) Intuit (1) QuickBooks (1) Office364 (1) Intel Server Systems;Hyper-V (1) Firewall (1) Patching (1) Mobile (1) Mobility (1) sharepoint (1) Microsoft Security (1) Beta (1) Storage Replication (1) outlook (1) Hyper-V Setup (3) JBOD (1) Azure (1) PCI (1) PCI DSS (1) PII (1) POS (1) MicroStaff (2) Catherine Barr (2) Third Tier (1) BeTheCloud (1) BrainExplosion (1) LookAWhale (1) Manuel (1) Rayanne (3) SuperSecretNews (1) TechYourBooks (3) Managed Services (1) Training (1) E-mail (1)
RSS Feed
News
Jan
14
How to Block Cryptowall
Posted by Third Tier on 14 January 2015 09:08 AM

Our friends at Calyptix Security have written several blog posts on the topic of file encrypting menaces, several of which reference our free Cryptolocker Prevention Kit. Now it’s our turn to share their knowledge. Read the blog post at Calyptix Security

Block – CryptoWall traffic is associated with IP 146.185.220.0/23. Block this IP range by adding it to your static blacklist.

Patch – Always maintain the latest versions of your firmware, antivirus, operating systems, and other systems. Routinely update as new patches become available.

Educate – Explain to users the dangers and warning signs of phishing emails and suspicious attachments.

Backup – Maintain backups of all important files both onsite and offsite. Test them often. Ensure they are configured to prevent backup of infected files. <added by Third Tier, Make sure that your backup storage location is not writable by anyone other than the account running the backup>

Plan – Assume disaster is inevitable. Plan how you will respond.

Configure – Adjust security settings to prevent forced downloads.

Control – Use web filtering to control the sites users can access. Use egress or outbound traffic filtering to prevent connections to malicious hosts.

Read our other blog posts on blocking encrypting malware

_____

Not a Third Tier customer yet? Let me introduce:  We’re Third Tier. We provide advanced Third Tier support for IT Professionals and MicroStaffing for IT consulting firms. Come on over, create an account (no charge) and follow our social media locations.

Third Tier Get Support BlogFeed Blog Twitter Twitter Facebook Facebook LinkedIn LinkedIN


Read more »



Dec
18
Third Tier 2015 Sneak Preview
Posted by Third Tier on 18 December 2014 02:10 PM

We held a webinar where we talked about what we’ll be up to in 2015. Here’s the concluding slide. 8 programs and 11 staff. We recorded the session; you can download it and have a listen. We talked about our current programs: Helpdesk, MicroStaffing, SMBKitchen and Brain Explosion. Then we talked about our new programs: Super Secret News, Look a Whale, Tech Your Books and Be the Cloud. We also announced a monthly webinar series. All of the new things start up in 2015.

image


Read more »



Oct
24
CryptoWall Expands to Images
Posted by Third Tier on 24 October 2014 10:50 AM

CryptoWall has expanded into images hosted as advertising on popular sites.

http://www.ibtimes.co.uk/cryptowall-ransomware-infects-millions-via-yahoo-match-com-aol-other-major-websites-1471290

Sites that have had infected advertising in recent months include these very popular locations. The crypto

Websites Serving CryptoWall ransomware variants like this one will never be proactively detected by your anti-malware protects easily, because they exclusively use legal means of installation and operation. Meaning that everything they do is allowed by a non-admin user of a computer. There is no suspicious behavior.

Recently we’ve heard that there are now over a hundred variants of Crypto but the thing is that they continue to infect via the same method. Improvements are related to being in more places where they might find you (distribution) and improvements in hiding the trail back to the authors (deception). Which means that you can continue to use our Cryptolocker Prevention Kit to protect your computers.

In addition to the software restriction policies in the kit, we also recommend blocking .RU at the edge of your network (your firewall) and making sure that no one but the account used by your backup software has write access to your backup location. Further you should minimize the number of mapped drives that each individual has access to because in the event of infection anything that the user has access to including network mapped drives could be encrypted by the Crypto variants.

Find our free kit on our blog. Be sure to read everything that we’ve written about Crypto so you know how to use the kit before you deploy it. And check out what we really do at Third Tier, which is help MSP’s be more successful.

Our Crypto Information and Prevention Kit: http://www.thirdtier.net/?s=crypto

What we do at Third Tier. HelpDesk for IT Professionals, MicroStaffing for MSP’s, the SMBKitchen ASP Project

_____

Not a Third Tier customer yet? Let me introduce:  We’re Third Tier. We provide advanced Third Tier support for IT Professionals and MicroStaffing for IT consulting firms. Come on over, create an account (no charge) and follow our social media locations.

Third Tier Get Support BlogFeed Blog Twitter Twitter Facebook Facebook LinkedIn LinkedIN

Related Posts

  • 43
    Sorry folks, been really busy!We have an ASP Author’s Chat starting right now! Philip ElderMicrosoft Cluster MVPMPECS Inc. Co-Author: SBS 2008 Blueprint Book Chef de partie in the SMBKitchen ASP ProjectFind out more atThird Tier: Enterprise Solutions for Small Business
    Tags: asp, project, find, smbkitchen, third, tier
  • 40
    Original Posted Here: MPECS Inc. Blog: SMBKitchen Update - ASP Project Good news! We are continuing on with our SMB Kitchen Project. My involvement will be changing to be more workable with the crazy schedule I've been having this last year. Time involvement to produce documentation and How-To videos is huge. Trying to set aside…
    Tags: project, asp, smbkitchen, will
  • 39
    Things have been moving along at a great pace! With tax season upon us we had a crazy number of calls over corrupted Print Formats in CCH Taxprep T1 2012 v1. Somehow during the conversion process from the previous year’s Print Formats things got mangled and we were running our feet off trying to keep…
    Tags: tier, third, smbkitchen, number, support, blog, project
  • 36
    “I follow Third Tier's blog because...of the great information like the Crypto prevention.”, Anonymous At Third Tier, well let’s face it, we’re geeks that like to geek. So when a problem like Cryptolocker came along we read the materials and about it and said to ourselves, that’s nice but what should we do about it?…
    Tags: blog, kit, third, read, tier, support, cryptolocker, prevention, http://www.thirdtier.net/?s=crypto, social
  • 33
    So I’m not very good at designing a website that sell, SELLs, SELLS! Instead I’m really better at providing information. So I updated the webpage to better inform you on what ASP is all about. I hope this answers some questions. In summary we’re all about sharing what makes our local firms successful with you.…
    Tags: third, tier, asp, support, create, advanced, professionals, introduce, customer, account

Read more »



Oct
16
Outlook SSL Prompts
Posted by Third Tier on 16 October 2014 08:58 AM

Official temporary solution for SSL prompts in outlook when using O365. Caused by a recent service update. I have also recently heard that it is also effect Exchange 2013 clients.

How are you doing today?

This is regarding Microsoft Case # xxxxxxxxxx

I tried calling you today at xxxxxxxxxx but was not able to reach you, so left Voice Mail. Please refer to below steps and let me know if the issue resolved with it.

ISSUE:  SSL error message in Outlook 2013.

CAUSE:   Issue started since the release of update for Outlook and backend team is working on it.  (Outlook 2013 CU (KB2889873)  )

RESOLUTION :

Key:        HKEY_CURRENT_USER\Software\Microsoft\Exchange

Value:     MsoAuthDisabled

Type:      DWORD

Value:     1

_____

Not a Third Tier customer yet? Let me introduce:  We’re Third Tier. We provide advanced Third Tier support for IT Professionals and MicroStaffing for IT consulting firms. Come on over, create an account (no charge) and follow our social media locations.

Third Tier Get Support BlogFeed Blog Twitter Twitter Facebook Facebook LinkedIn LinkedIN


Read more »



Oct
14
Storage replication: Can it work for SMB’s?
Posted by Third Tier on 14 October 2014 01:51 PM

What would a small business use Windows Server Storage Replication for?

What Microsoft says, “Storage Replica (SR) is a new feature that enables storage-agnostic, block-level, synchronous replication between clusters or servers for disaster recovery, as well as stretching of a failover cluster for high availability. Synchronous replication enables mirroring of data in physical sites with crash-consistent volumes ensuring zero data loss at the file system level. Asynchronous replication allows site extension beyond metropolitan ranges with the possibility of data loss.”

The purpose is to replication storage volumes, not entire servers, to another server. Any volume with a page file will fail to replicate and the system volume will also fail. So when you think about Storage Replication believe what it says, storage only.

clip_image002

What could we use this for in SMB then? Well let’s say we have a CAD server and it’s critical that the data that server contains remains accessible at all times. A CAD server is really generally just a file storage server. So for continuity purposes we could use Storage Replication to replicate the data volume over to another server in our network. In case the CAD server should fail we can could mount this replicated storage location into an existing virtual machine and map a drive to the new location for our users. This mapped drive could even be pre-staged for them in an existing group policy.

Prior to Storage Replication what would we do? Well we could backup and restore (cheap but slow) or we could use hyper-v replication and replicate the whole server to another hyper-v parent (fast but expensive). Now we have a third choice and this third choice sit right in the middle between better than backup but not quite as good as a full server replication as far as speed to recovery goes but I suspect that because of the cost savings we’ll see a lot of Storage Replication deployments.

If you haven’t looked at Storage Replication yet look at this article in TechNet: Technical Preview Step-by-Step Guide: Storage Replica It has a nice step-by-step lab. Also included in this paper is information on Stretch Cluster Storage Replication if you are into clustering your servers the technology is interesting but perhaps beyond the reach of the majority of small business customers.

_____

Not a Third Tier customer yet? Let me introduce:  We’re Third Tier. We provide advanced Third Tier support for IT Professionals and MicroStaffing. Come on over, create an account (no charge) and follow our social media locations.

Third Tier Get Support BlogFeed Blog Twitter Twitter Facebook Facebook LinkedIn LinkedIN


Read more »



Oct
9
Searching Across Mailboxes in Exchange 2010
Posted by Third Tier on 09 October 2014 09:06 AM

We are getting more and more requests to perform a search to gather all emails on a particular topic and provide those results to a group of people. From the TechNet article referenced below, these are some of the reasons why you might find a need to search across mailboxes in Exchange.

  • Legal discovery   Complying with legal discovery requests for messaging records is one of the most important tasks for organizations involved in lawsuits. Without a dedicated tool, searching messaging records within several mailboxes that may reside in different mailbox databases can be a time-consuming and resource-intensive task. Using Multi-Mailbox Search, you can search a large volume of e-mail messages stored in mailboxes across one or more Exchange 2010 servers, and possibly in different locations.
  • Internal investigations   Multi-Mailbox Search can help you facilitate requests from managers or legal departments as part of internal investigations.
  • Human Resources monitoring   Multi-Mailbox Search can help you facilitate HR requests, such as standard e-mail monitoring requirements or a specific search.

Exchange has this functionality if you own the Exchange Enterprise CALS for all of the mailboxes on the server. The steps involved are these:

  1. Create a Discovery Search mailbox. This mailbox will hold the search results
  2. Enter your search criteria and run it
  3. Assign Full Mailbox permissions to the people that need to see the results and assist the users in adding the discovery search mailbox to Outlook

The search can get very granular, permissions can get very complex and there are a ton of options with which to run this process. I’m going to show a basic search which is what you will use in most cases. If you’d like to get into the nitty gritty TechNet is your best source. Start here: http://technet.microsoft.com/en-us/library/dd335072(v=exchg.141).aspx

For your ordinary search needs…

1. Create a Discovery Search Mailbox. This is a powershell only item. The command is New-Mailbox “Discovery Mailbox1” –Discovery –UserPrincipalName “discoverymailbox1@mydomain.com”  Where Discovery Mailbox1 is the name that you want to call this mailbox by. I often use the date or in a recent the case, the name of the project that we wanted to gather up all emails from. What ever you name it, just make sure that it is obvious to all parties what it is. UserPrinicipalName is the name of the user for this mailbox. In Exchange every mailbox must have a user, this command will create the user for you in AD. I suggest naming the user the same as the discovery mailbox.

You will get a result from PowerShell like the one below.

3

And in Exchange you will now see the new mailbox. This mailbox has a 50GB quota by default. Keep that in mind as you are performing the search. May G-D have mercy on your soul and those of the people that have to read the search results if the mailbox exceeds 50GB. I wouldn’t wish the fate of having to read that much email on my worst enemy. Smile

4

Screenshots from http://theucguy.net/discovery-mailbox-in-exchange-2010/

2. Enter your search criteria and run it. I find these unnecessarily buried and difficult to find. You find it in OWA and here’s how you get there. Log into OWA as an administrator. Go to Options, then change from Manage Myself to Manage My Organization. Move to Role & Auditing. Select Discovery Management role and add your administrator account to this group. This is required so that you can see and use the discover tools.

image

Logoff and back on again and you will now see the Discovery tools option.

image

To perform a search click NEW and enter your search criteria into the form.

The first item you come to in the form is keywords. This is the most important part of the whole form because here you are telling it what to search for. As an external consultant I always ask the client for the list of terms to search for. As noted in the screenshot below you will enter AND, OR or NOT between the search terms you list. After an initial search has been run, I always ask the client to review the results to determine whether the search is accurate and contains what they need. We can always change the search terms and run it again.

image

The rest of the form is very straight forward. It just wants to know which mailboxes to search (or all of them) and which users to include, exclude or not and what date range to include or not to limit it by date. Most often you will find that you will not be limiting the search by date or user.

The final part of the form is a little bit important. Here is where you will name the search. As before when I recommended that you name the user and search mailbox the same. I would name the search the same too to make it easy to keep track of.

If you select the radio button for Estimate the search results, all you will get is an estimate. The search mailbox won’t actually have anything in it. To move the search results into the search mailbox you have to select the Copy the search results to the destination mailbox radio button and then Browse to the mailbox you created.

Note the Enable deduplication checkbox. As you know when you send email to multiple people you get a lot of copies of the same email. This checkbox will eliminate those. However, if this is a legal issue that you are gathering the data for you probably will want to uncheck that box. Check with your client.

image

Now run the search! It will take a little while but actually it is quite quick. When finished you’ll find a nice little report in the right hand column that tells you how many emails and whose mailboxes they were in.

3. Assign Full Mailbox permissions to the people that need to see the results and assist the users in adding the discovery search mailbox to Outlook

Back in the Exchange Management console select the mailbox and Click Manage Full Access from the right column (near the bottom). Then add the users that need access to the search results mailbox.

Go to the users and assist them in adding an additional mailbox to Outlook so they can review the results.

 

____

Are you not a member of SMBKitchen ASP? Join up. $300 for new members. http://helpdesk.thirdtier.net/. Just register for an account then proceed to payments, click buy more support and add the ASP to your cart.  Our goal is to help IT firms be more aware, be better consultants and survive in the new era.


Read more »




Help Desk Software by Kayako Fusion