News Categories
Announcement (9) Amy Babinchak (64) Tips (1) SBS 2011 (6) Windows Essentials 2012 (4) Edwin Sarmiento (28) SQL Server (22) SQL Server 2012 (6) SQL Server Clustering (3) SQL Server Disaster Recovery (6) Windows Server 2008 Clustering (1) log shipping (1) Brian Higgins (3) Uncategorized (42) Hyper-V (67) Virtualization (13) Windows 8 (13) Cisco VPN Client (1) Windows Server 2012 (24) Friend of TT (4) Hangout (2) Office365 (4) DNS (8) Jeremy (7) Cliff Galiher (3) Active Directory (12) ClearOS (4) Linux (4) presentations (2) SQL PASS (6) Chris Matthews (4) Printers (2) SharePoint (8) SQL Server Administration (7) Windows PowerShell (3) recovery model (1) sql server databases (1) Dave Shackelford (7) SMB Nation (1) Steve (1) Boon Tee (5) Kevin Royalty (3) Lee Wilbur (2) Philip Elder (10) SMBKitchen Crew (31) Susan Bradley (15) AlwaysOn (1) AlwaysOn Availability Groups (4) readable secondaries (1) row versioning (1) undocumented (1) The Project (2) Webinar (3) Enterprise for SMB Project (9) Security (25) Remote Desktop Connection for Mac (1) Remote Desktop Services (8) Windows Server 2008 (1) Exchange (15) Powershell (6) Microsoft (15) Performance (7) data types (1) Server 2012 (1) monitoring (1) DevTeach (1) SQL Server High Availability and Disaster Recovery (5) Clusters (44) Hyper-V Server 2012 (2) Business Principles (26) Cost of Doing Business (13) DHCP (7) sbs (15) Windows Server (30) SMBKitchen (26) Windows Server 2008 R2 (4) StorageCraft (1) P2V (1) ShadowProtect (6) StorageCraft ShadowProtect (1) VHDs (1) Intel RAID (2) Intel Server System R2208GZ (1) Intel Server Systems (17) RAID (2) SAS (2) SATA (2) Server Hardware (12) Microsoft Licensing (2) OEM (2) System Builder Tips (4) Intel (5) Intel Channel Partner Program (4) Intel Product Support (10) Intel Server Boards (2) Intel Server Manager (2) Cloud (26) IT Solutions (2) On-Premises (20) SMB (9) WIndows Azure (2) StorageSpaces (1) Error (47) Error Fix (35) Intel Desktop Boards (2) Intel SSDs (2) SSD (2) Business Opportunity (17) Data Security (11) Identity Security (7) Information Security (14) Privacy (2) Intel Modular Server (6) Promise (2) Storage Systems (9) Live ID (2) Microsoft ID (4) User Profiles (2) Articles (2) Building Client Relationships (6) DBCC IND (2) DBCC PAGE (2) filtered indexes (2) SQL Server Index Internals (2) training (11) Adobe (3) Internet Street Smart (8) Intel Storage Systems (2) LSI Corp (2) LSI SAS6160 Switch (2) Storage Spaces (7) Firmware Update (2) Product Support (7) Hybrid Cloud Solutions (3) Server Core (2) MAXDOP (1) SharePoint 2013 (1) SharePoint best practices (1) SQL Server Authentication (1) Family (5) Alternatives (1) SBS 2011 Standard (4) Microsoft Small Business Specialist Community (2) Microsoft Surface (2) SBSC (2) Networking (4) Availability Groups (3) CANITPro (1) HA/DR (1) Step-By-Step: Creating a SQL Server 2012 AlwaysOn Availability Group (1) webcast (1) VMWare (2) Conferences (2) Client Focus (2) Disaster Recovery (6) Error Workaround (8) Troubleshooting (4) Logitech (2) Product Review (7) Windows Features (4) XBox Music (2) SBS 2008 All Editions (4) MDOP (2) Microsoft Desktop Optimization Pack (2) Software Assurance (2) W2012E (6) Windows Server 2012 Essentials (6) Internet Explorer (3) USB 3.0 (2) USB Hard Drive (2) Bug Report (2) Microsoft Office 365 (5) sharepoint online (2) BitLocker (2) Windows (2) Microsoft Update (3) Swing Migration (2) Windows Update (4) Outlook (2) Group Policy (9) WS2012e (2) WSUS (3) Office (3) Microsoft Downloads (5) Microsoft Office (3) DRP (3) Virtual Machines (2) Virtual Server Hardware (2) online course (1) SQL Server learning (7) 2 Factor Authentication (2) 2FA (2) PASS Summit 2013 (4) SQLPASS (5) Contest (1) e-learning (1) Udemy (1) smbtechfest (1) backups (2) PASS Summit First Timers (3) IIS (2) RD Gateway (4) RD RemoteApp (2) RDWeb (4) Remote Desktop Connection (2) Remote Web Access (2) Remote Web Workplace (2) Cryptolocker (6) Backup (4) Restore (2) CryptoLocker (1) AuthAnvil (1) SBS 2003 (1) SBS Migration (1) Windows Server 2012 R2 (9) Documentation (1) IE 11 (4) testimonials (11) SQL Server 2008 (1) Best Practices (1) Support (1) Intel Xeon Processor (1) RemoteApp (1) Android (1) iOS (1) Hyper-V Replica (2) PowerShell (2) SBS (3) Break (1) Business Intelligence (1) Excel 2013 (1) Power Map (1) Power Query (1) PowerBI (1) MultiPoint (2) Surface (1) Net Neutrality (1) Opinion (2) ASP (9) HP (2) Scale-Out File Server (8) SOFS (10) Windows Phone (1) Updates (1) Intel NUC (1) Intuit (1) QuickBooks (1) Office364 (1) Intel Server Systems;Hyper-V (1) Firewall (1) Patching (1) Mobile (1) Mobility (1) sharepoint (1) Microsoft Security (1) Beta (1) Storage Replication (1) outlook (1) Hyper-V Setup (3) JBOD (1) Azure (1) PCI (1) PCI DSS (1) PII (1) POS (1) MicroStaff (2) Catherine Barr (2) Third Tier (1) BeTheCloud (1) BrainExplosion (1) LookAWhale (1) Manuel (1) Rayanne (3) SuperSecretNews (1) TechYourBooks (3) Managed Services (1) Training (1) E-mail (1)
RSS Feed
Outlook SSL Prompts
Posted by Third Tier on 16 October 2014 08:58 AM

Official temporary solution for SSL prompts in outlook when using O365. Caused by a recent service update. I have also recently heard that it is also effect Exchange 2013 clients.

How are you doing today?

This is regarding Microsoft Case # xxxxxxxxxx

I tried calling you today at xxxxxxxxxx but was not able to reach you, so left Voice Mail. Please refer to below steps and let me know if the issue resolved with it.

ISSUE:  SSL error message in Outlook 2013.

CAUSE:   Issue started since the release of update for Outlook and backend team is working on it.  (Outlook 2013 CU (KB2889873)  )


Key:        HKEY_CURRENT_USER\Software\Microsoft\Exchange

Value:     MsoAuthDisabled

Type:      DWORD

Value:     1


Not a Third Tier customer yet? Let me introduce:  We’re Third Tier. We provide advanced Third Tier support for IT Professionals and MicroStaffing for IT consulting firms. Come on over, create an account (no charge) and follow our social media locations.

Third Tier Get Support BlogFeed Blog Twitter Twitter Facebook Facebook LinkedIn LinkedIN

Read more »

Searching Across Mailboxes in Exchange 2010
Posted by Third Tier on 09 October 2014 09:06 AM

We are getting more and more requests to perform a search to gather all emails on a particular topic and provide those results to a group of people. From the TechNet article referenced below, these are some of the reasons why you might find a need to search across mailboxes in Exchange.

  • Legal discovery   Complying with legal discovery requests for messaging records is one of the most important tasks for organizations involved in lawsuits. Without a dedicated tool, searching messaging records within several mailboxes that may reside in different mailbox databases can be a time-consuming and resource-intensive task. Using Multi-Mailbox Search, you can search a large volume of e-mail messages stored in mailboxes across one or more Exchange 2010 servers, and possibly in different locations.
  • Internal investigations   Multi-Mailbox Search can help you facilitate requests from managers or legal departments as part of internal investigations.
  • Human Resources monitoring   Multi-Mailbox Search can help you facilitate HR requests, such as standard e-mail monitoring requirements or a specific search.

Exchange has this functionality if you own the Exchange Enterprise CALS for all of the mailboxes on the server. The steps involved are these:

  1. Create a Discovery Search mailbox. This mailbox will hold the search results
  2. Enter your search criteria and run it
  3. Assign Full Mailbox permissions to the people that need to see the results and assist the users in adding the discovery search mailbox to Outlook

The search can get very granular, permissions can get very complex and there are a ton of options with which to run this process. I’m going to show a basic search which is what you will use in most cases. If you’d like to get into the nitty gritty TechNet is your best source. Start here:

For your ordinary search needs…

1. Create a Discovery Search Mailbox. This is a powershell only item. The command is New-Mailbox “Discovery Mailbox1” –Discovery –UserPrincipalName “”  Where Discovery Mailbox1 is the name that you want to call this mailbox by. I often use the date or in a recent the case, the name of the project that we wanted to gather up all emails from. What ever you name it, just make sure that it is obvious to all parties what it is. UserPrinicipalName is the name of the user for this mailbox. In Exchange every mailbox must have a user, this command will create the user for you in AD. I suggest naming the user the same as the discovery mailbox.

You will get a result from PowerShell like the one below.


And in Exchange you will now see the new mailbox. This mailbox has a 50GB quota by default. Keep that in mind as you are performing the search. May G-D have mercy on your soul and those of the people that have to read the search results if the mailbox exceeds 50GB. I wouldn’t wish the fate of having to read that much email on my worst enemy. Smile


Screenshots from

2. Enter your search criteria and run it. I find these unnecessarily buried and difficult to find. You find it in OWA and here’s how you get there. Log into OWA as an administrator. Go to Options, then change from Manage Myself to Manage My Organization. Move to Role & Auditing. Select Discovery Management role and add your administrator account to this group. This is required so that you can see and use the discover tools.


Logoff and back on again and you will now see the Discovery tools option.


To perform a search click NEW and enter your search criteria into the form.

The first item you come to in the form is keywords. This is the most important part of the whole form because here you are telling it what to search for. As an external consultant I always ask the client for the list of terms to search for. As noted in the screenshot below you will enter AND, OR or NOT between the search terms you list. After an initial search has been run, I always ask the client to review the results to determine whether the search is accurate and contains what they need. We can always change the search terms and run it again.


The rest of the form is very straight forward. It just wants to know which mailboxes to search (or all of them) and which users to include, exclude or not and what date range to include or not to limit it by date. Most often you will find that you will not be limiting the search by date or user.

The final part of the form is a little bit important. Here is where you will name the search. As before when I recommended that you name the user and search mailbox the same. I would name the search the same too to make it easy to keep track of.

If you select the radio button for Estimate the search results, all you will get is an estimate. The search mailbox won’t actually have anything in it. To move the search results into the search mailbox you have to select the Copy the search results to the destination mailbox radio button and then Browse to the mailbox you created.

Note the Enable deduplication checkbox. As you know when you send email to multiple people you get a lot of copies of the same email. This checkbox will eliminate those. However, if this is a legal issue that you are gathering the data for you probably will want to uncheck that box. Check with your client.


Now run the search! It will take a little while but actually it is quite quick. When finished you’ll find a nice little report in the right hand column that tells you how many emails and whose mailboxes they were in.

3. Assign Full Mailbox permissions to the people that need to see the results and assist the users in adding the discovery search mailbox to Outlook

Back in the Exchange Management console select the mailbox and Click Manage Full Access from the right column (near the bottom). Then add the users that need access to the search results mailbox.

Go to the users and assist them in adding an additional mailbox to Outlook so they can review the results.



Are you not a member of SMBKitchen ASP? Join up. $300 for new members. Just register for an account then proceed to payments, click buy more support and add the ASP to your cart.  Our goal is to help IT firms be more aware, be better consultants and survive in the new era.

Read more »


Original Here: MPECS Inc. Blog: MPECS Inc. Blog: Our SBS (Small Business Solution) Options with Standalone and Cluster Hardware Considerations

We’ve received a number of questions about the “How” we present our SBS to prospective and existing clients.

Our primary focus is on what we have provided with Small Business Server starting with SBS 2003 Standard.

  • Active Directory permissions based security

  • Remote Web Access (RWA/RWW) Portal
  • Remote Desktop access via RD Gateway (since SBS 2008 Standard)
  • RemoteApp access via RD Gateway for LoBs (since SBS 2008 Standard)
  • E-mail services access via Outlook, Outlook Anywhere, Exchange ActiveSync, and Outlook Web Access
  • Remote Folders and Files access
  • SharePoint based document management system
  • SQL backend for LoB, SharePoint, and other needs

We focus on the services the prospect would require while our existing clients are already used to them.

Once we have an understanding of the prospect’s needs, since we already know our client’s business really well, we move forward with a proposal that would be geared towards their business size and sensitivity to downtime.

On the services front where we are installing into a standalone host we would have two options:

  1. Base

    1. Requires two Windows Server OS Licenses

    2. DC, Exchange, RDS, and LoB (WSUS and LoBs)
  2. Premium Add-On
    1. Requires one Windows Server OS License

    2. SQL and SharePoint

Obviously the server and CALs would also be needed for the various components that will be installed into the guest OS.

If we are setting up a cluster then one needs to consider the number of VMs running on one or more of the nodes in the event of a node failure.

On the hardware side we would have a number of options:

  1. Entry-Level Single

    1. E3-1270v3, 32GB ECC, Hardware RAID, 8x 2.5” 10K SAS
  2. Mid-Level Single
    1. Single Socket 1U R1208JP4OC, E5-2600 series, 128GB ECC, Hardware RAID, 8x 2.5” 10K SAS
  3. High-Level Single
    1. Dual Socket 2U R2208GZ4GC, E5-2600 pair, 128GB-256GB ECC, Hardware RAID, 8x 2.5” 10K SAS or 16x 2.5” 10K SAS
  4. Entry-Level Asymmetric Cluster
    1. Pair of 1U R1208JP4OC or 2U R2208GZ4GC and an Intel JBOD2224S2DP
  5. Mid-Level Cluster
    1. Four 2U R2208GZ4GC and an Intel JBOD2224S2DP

      • Two Scale-Out File Server cluster nodes

      • Two Hyper-V cluster nodes
  6. High-End Cluster
    1. Six 2U R2208GZ4GC and three Intel JBOD2224S2DP units

      • Three Scale-Out File server cluster nodes

      • Three Intel JBODS with Two-Way or Three-Way Mirror and Enclosure Resilience
      • Three Hyper-V server cluster nodes

Within the above hardware configurations we would have a lot of flexibility that allows us to customize to the specific needs of the prospective client or our clients.

We work with a number of different firms that are prime candidates for at least an asymmetric cluster setup to minimize the possibility of downtime. The cost associated with these entry-level clusters versus a single larger server for the host platform makes them very attractive.

The basic VM configuration would involve fixed VHDX files unless the files are installed on dedicated partitions/LUNs. Note that we would use a shared set of partitions/LUNs if there are around 10 or more VMs as things get to be a bit of a bear to manage otherwise.

Our base VM configurations would be as follows:

  • DC: 4GB, 95GB OS VHDX, and 1TB Data VHDX

  • Exchange: 8GB, 95GB OS VHDX, and 250GB + 20GB/Mailbox Data VHDX
  • RDS: 4GB+, 95GB OS VHDX, and 100GB + 20GB/User Profile Disk
  • LoB: 8GB, 95GB OS VHDX, and 1TB Data VHDX Minimum
  • SQL: 16GB, 95GB OS VHDX, and 250GB+ Data VHDX
  • SharePoint: 16GB, 95GB OS VHDX, 200GB Data VHDX

We have a set of PowerShell steps and scripts that we use to configure these environments. PowerShell helps to greatly reduce the amount of time required to set things up. It also gives us consistency across all of our client deployments which is vital to troubleshooting if the need arises.

Shameless Plug: We’ve spent some time on the above in our SMBKitchen ASP Author Chats. If you are looking for more information the Author Chat is one of the best ways to do so.

Philip Elder
Microsoft Cluster MVP
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen ASP Project
Find out more at
Third Tier: Enterprise Solutions for Small Business

Read more »

Pruning Exchange Distribution Lists
Posted by Dave Shackelford on 13 February 2014 12:57 PM

Some organizations end up having cluttered distribution lists still populated with mailboxes belonging to employees who have left the company. One strategy I’ve employed is when an employee leaves, to add their mailbox to a Distribution List I call “Sunset”. That list contains all non-active employees whose mailboxes have not been deleted yet.

Once the mailbox is listed there, I can simply run the following script.

Get-DistributionGroup | where {$_.SamAccountName -ne “Sunset”} | get-distributiongroupmember | remove-distributiongroupmember “Sunset”

This checks every distribution group’s membership against the Sunset DL’s membership and removes any members of the Sunset list from the other lists.

Read more »


Original Posted Here:  MPECS Inc. Blog: Set Exchange 2010 and 2013 Internal and External Virtual Directory URLs in PowerShell

Here are the elevated PowerShell commands to run to set the virtual directory URLs

Get-ActiveSyncVirtualDirectory -server EXCHANGE | Set-WebServicesVirtualDirectory -ExternalUrl ‘’ -InternalUrl ‘’
Get-AutodiscoverVirtualDirectory -server EXCHANGE | Set-AutodiscoverVirtualDirectory -ExternalUrl ‘’ -InternalUrl ‘’
Get-ECPVirtualDirectory -server EXCHANGE | Set-AutodiscoverVirtualDirectory -ExternalUrl ‘’ -InternalUrl ‘’
Get-OabVirtualDirectory -server EXCHANGE | Set-AutodiscoverVirtualDirectory -ExternalUrl ‘’ -InternalUrl ‘’
Get-WebServicesVirtualDirectory -server EXCHANGE | Set-WebServicesVirtualDirectory -ExternalUrl ‘’ -InternalUrl ‘’
The elevated PowerShell commands to verify the settings:

Get-ActiveSyncVirtualDirectory | fl internalurl,externalurl
Get-AutoDiscoverVirtualDirectory | fl internalurl,externalurl
Get-ECPVirtualDirectory | fl internalurl,externalurl
Get-OabVirtualDirectory | fl internalurl,externalurl
Get-WebServicesVirtualDirectory | fl internalurl,externalurl
Please note that we run a split DNS setup to have the external URL map to an internal IP address while folks are in the office (as per SBS STD).

Philip Elder
Microsoft Cluster MVP
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen
Find out more at
Third Tier: Enterprise Solutions for Small Business

Read more »

SBS 2003 R2 Premium Migration to 2012 R2 Domain and Exchange 2013
Posted by Philip Elder on 26 November 2013 03:10 PM

Original Here: MPECS Inc. Blog: SBS 2003 R2 Premium Migration to 2012 R2 Domain and Exchange 2013

We are beginning our adventure migrating our last SBS 2003 R2 Premium server setup to a completely new setup.

We used the ShadowProtect backup image to restore to our Hyper-V server and utilized the Hardware Independent Restore process to inject the Hyper-V 2012 R2 VM drivers so we did not get any blue screens on the restored VM OS.


Our goal will be to end up with an RWA setup in 2012 Essentials R2 or we will be pitching the new Scorpion Software AuthAnvil Portal setup as an RWA replacement to this firm (and eventually all firms we manage).

Given that most accounting firms need to log into many different sites for their day-to-day routines we believe that new portal service will meet that need along with the partners that would prefer a short PIN to log on. :)

Plus it will give them a huge step up in security.

For now, we have their server up and running on one of our Server 2012 R2 Hyper-V lab setups as we will be running through the migration process a few times to make sure we have everything down.

We set up a Windows 7 Professional SP1 VM to verify that the SBS 2003 was happy:


The SBS Connect Computer wizard was run to successfully connect the Win7 VM to the SBS domain. From there we installed Office 2010 SP1 and reset a couple key user’s passwords to hook into their profiles.

We are now ready to begin the migration process in our lab.

  1. Install: Windows Server 2012 R2 DC VM
  2. Install: Windows Server 2008 R2 OS Temp VM
    1. Exchange 2010 with current SP installed
  3. Migrate Mailboxes and Public Folders
  4. Install: Windows Server 2012 RTM VM
    1. Install Exchange 2013 and CU3
  5. Migrate Mailboxes and Public Folders
  6. Install: Windows Server 2012 R2 VM(s)
    1. LoB Migration

Once we have run through the above process we will then move on to migrating their actual production network.

Philip Elder
Microsoft MVP
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen
Find out more at

Read more »

Help Desk Software by Kayako Fusion