IPhone: Exchange ActiveSync setup

You need to install the self-signed server certificate onto the phone.

The certificate CN should match the hostname/IP address you're using to access the server (If its self-signed).

Two ways to get the certificate onto the phone a) email the certificate to the phone or b) download a copy of iPhone enterprise configuration utility and import the certificate that way.

After installation a service is installed.

To acesss this service goto http://localhost:3000 and create a configuration file and email it to the phone.

iPhone 2.1 software: Exchange ActiveSync Account Quick Setup Guide

http://support.apple.com/kb/HT2480

* Last Modified: September 13, 2008

* Article: HT2480 Summary

This article explains how to quickly create an Exchange ActiveSync account on your iPhone or iPod touch. Products Affected iPhone, iPod touch, iPhone 3G, iPod touch (2nd generation)

1. To add an Exchange account to your iPhone or iPod touch, tap Settings, then Mail, Contacts, Calendars, then Add Account, then Microsoft Exchange. Note, you can configure only one Exchange account per device..

2. On the next screen, enter your complete email address, domain, username, password, and a description (which may be anything you like). Ask your Exchange server administrator if you are unsure of the domain. If you are unable to view your folder list, or unable to send or receive email, leave the domain field blank.

3. Your iPhone (or iPod touch) will now try to locate your Exchange server using Microsoft's Autodiscovery service. If the server cannot be located, the screen below is shown. Enter your front-end Exchange server's complete address in the Server field. Contact your Exchange server administrator if you are unsure of the address.

Your iPhone or iPod touch will try to create a secure (SSL) connection to your Exchange server. If it cannot do this, it will try a non-SSL connection. To override the SSL setting, go into Settings, then Mail, Contacts, Calendars, select your Exchange account, tap Account Info, then toggle the Use SSL slider.

After successfully making a connection to the Exchange server, you may be prompted to change your device passcode to match whatever policies may have been set on your server.

4. Choose which type(s) of data you would like to synchronize: Mail, Contacts, and Calendars. Note that by default, only 3 days' worth of email is synchronized. To synchronize more, go into Settings, then Mail, Contacts, Calendars, select your Exchange account, and tap on Mail days to sync.

Note that after configuring an Exchange ActiveSync account, all existing contact and calendar information on the iPhone or iPod touch is overwritten. Additionally, iTunes no longer syncs contacts and calendars with your desktop computer. You can still sync your iPhone or iPod touch wirelessly with MobileMe services.

Kerio Firewall - Allow unrestricted access to URL

Setup the URL Groups first Go to Definitions > URL Groups Add the Require URL details here linked to relevant URL Group Use wildcards to allow access to entire domains: *.domain.com/* Go to Content Filtering > HTTP Policy Add new rule for the URL Group Select the "is in URL Group" and select the previously created URL Group. Under "Action" select Allow access. On the Content Rules tab Set everything to Allow and the check boxes are unchecked.

Install Symantec Endpoint on Server

Start installation

Make sure you use the Custom Installation.

Deselect everything except Anti-Virus\Spyware.

Pay attention on next dialogs: We DO NOT want to enable auto-protect and we DO NOT want to run Liveupdate.

Once installed - open the Configuration panel > Change Settings.

Under Centralized Exceptions > Click Configure Settings

Add Exceptions for the following directories:

For a DC

C:\Windows\NTDS\*

C:\Windows\ntfrs\*

C:\Windows\SYSVOL\*

For Exchange servers

C:\Program Files\Exchsvr (2003) or the Exchange Partition - you should in theory have it installed in its own partition in any case.

Include any data partitions - we don't want Symantec scanning shared drives, etc.

D:\*

E:\* or whatever

Go back to Change Settings

Under Antivirus and Antispyware protection > Click Configure settings

On the File System Auto-Protect tab

Check Enable auto-protect

For File Types > Uncheck "Determine file types by contents"

Under Options - Uncheck "Scan Files on network drives"

Click Advanced Uncheck "Enable Risk Tracer"

Click Heuristics - Uncheck "Enable Bloodhound"

That should do it - a safe level of protection without hindering the server from doing its job.

GPO: Refresh policy

Solution: Use gpupdate to refresh policy immediately. With Gpupdate you can specify certain options at the command line. Gpupdate replaces and improves on the Windows 2000 command secedit /refreshpolicy. Some policy items, such as computer-assigned software, require a reboot to take effect, however. User-assigned software requires the user to log on and log off.

GPO: Gpresult

Displays Group Policy settings and Resultant Set of Policy (RSoP) for a user or a computer.

Syntax gpresult [/s Computer [/u Domain\User /p Password]] [/user TargetUserName] [/scope {user | computer}] [{/v | /z}]

Parameters

/s Computer Specifies the name or IP address of a remote computer. Do not use backslashes. The default is the local computer.

/u Domain\User Runs the command with the account permissions of the user that is specified by User or Domain\User. The default is the permissions of the current logged-on user on the computer that issues the command.

/p Password Specifies the password of the user account that is specified in the /u parameter.

/user TargetUserName Specifies the user name of the user whose RSOP data is to be displayed.

/scope {user | computer} Displays either user or computer results. Valid values for the /scope parameter are user or computer. If you omit the /scope parameter, gpresult displays both user and computer settings.

/v Specifies that the output display verbose policy information.

/z Specifies that the output display all available information about Group Policy. Because this parameter produces more information than the /v parameter, redirect output to a text file when you use this parameter (for example, gpresult /z >policy.txt).

/? Displays help at the command prompt.

Remarks Group Policy is the primary administrative tool for defining and controlling how programs, network resources, and the operating system operate for users and computers in an organization. In an Active Directory environment, Group Policy is applied to users or computers on the basis of their membership in sites, domains, or organizational units. Because you can apply overlapping levels of policies to any computer or user, the Group Policy feature generates a resulting set of policies at logon. Gpresult displays the resulting set of policies that were enforced on the computer for the specified user at logon.

Examples The following examples show how you can use the gpresult command:

gpresult /user targetusername /scope computer

gpresult /s srvmain /u maindom\hiropln /p p@ssW23 /user targetusername /scope USER

gpresult /s srvmain /u maindom\hiropln /p p@ssW23 /user targetusername /z >policy.txt

gpresult /s srvmain /u maindom\hiropln /p p@ssW23

GPO: Client query of GPOs

Solution: To see what policy is in effect, use Resultant Set of Policy (RSoP) or gpresult.
You can also get a report on policy from Help and Support Center by following these steps:
Click the Start button, and then click Help and Support.
Click Support.
Under See Also, click Advanced System Information.
Under Advanced System Information, click View Group Policy settings applied.

The report includes the following:
User name and domain
Computer name and domain
When User Settings and Computer Settings were last applied
Folder redirection details
Logon, logoff, startup and shutdown scripts
Installed software
Administrative Templates
Security Settings
Connection and proxy settings for IE Maintenance

Google Desktop - Index Thunderbird

Source URL: http://www.imjustsharing.com/getting-google-desktop-to-index-thunderbird/

Exit Thunderbird

Copy GoogleDesktopMozilla*.* from the Google Desktop Program Folder to the Components Folder in the Thunderbird Program Folder.

Delete the compreg.dat file from C:\DocumentsandSettings\(username)\ApplicationData\Thunderbird\Profiles\(unique profile) or C:\Users\(username)\AppData\Roaming\Thunderbird\Profiles\(unique) if running Vista\Win7

Start Thunderbird and away we go

Exchange Technet Source

Source URL: http://technet.microsoft.com/en-us/library/aa996058%28EXCHG.80%29.aspx

Exchange 2007 - Set max receipients per message

Source URL: http://technet.microsoft.com/en-us/library/bb310760.aspx

From the Exchange PowerShell:
Set-ReceiveConnector -Identity "Contoso Receive Connector" -MaxRecipientsPerMessage 300

Exchange 2007 - Route non-deliverable elsewhere

Exchange 2007 - Route NDR email for local domain via smart host or DNS

Open Exchange System Manager

Go to Organisation
Configure receive domains

Set mode to Internal Relay - indicates that this server is not the only server that hosts email for this domain and to attempt delivery elsewhere rather than failing.

Authoritative is if this server hosts all email for the domain. If email recipients are not found - fail delivery.