<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Geoff @ UVM</title>
	<atom:link href="http://www.uvm.edu/~gcd/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.uvm.edu/~gcd</link>
	<description>Adventures in System Administration</description>
	<lastBuildDate>Wed, 08 Feb 2012 19:32:30 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Webmail on a Netbook</title>
		<link>http://www.uvm.edu/~gcd/2012/02/webmail-on-a-netbook/</link>
		<comments>http://www.uvm.edu/~gcd/2012/02/webmail-on-a-netbook/#comments</comments>
		<pubDate>Wed, 08 Feb 2012 19:10:13 +0000</pubDate>
		<dc:creator>Geoff</dc:creator>
				<category><![CDATA[Guides]]></category>
		<category><![CDATA[Posts]]></category>
		<category><![CDATA[browser]]></category>
		<category><![CDATA[Hacks]]></category>
		<category><![CDATA[usability]]></category>
		<category><![CDATA[XP]]></category>

		<guid isPermaLink="false">https://www.uvm.edu/~gcd/?p=473</guid>
		<description><![CDATA[Amid the praise for and complaints about the newer version of webmail, we received a plea from a netbook user. She pointed out that the new layout made it very difficult to navigate among her mail folders. I use a netbook myself, and I thought I&#8217;d share some things that we can do to improve [...]]]></description>
			<content:encoded><![CDATA[<p>Amid the praise for and complaints about the newer version of webmail, we received a plea from a netbook user. She pointed out that the new layout made it very difficult to navigate among her mail folders. I use a netbook myself, and I thought I&#8217;d share some things that we can do to improve our browsing from a netbook. Specifically, we’re going to take webmail from this:
<p><a href="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-before-sm.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="Webmail on a netbook - before" border="0" alt="Webmail on a netbook - before" src="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-before-sm_thumb.png" width="504" height="297"></a>
<p>to this:
<p><a href="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-after-sm.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="Webmail on a netbook - after" border="0" alt="Webmail on a netbook - after" src="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-after-sm_thumb.png" width="504" height="297"></a></p>
<p><span id="more-473"></span>
<p>I&#8217;m using Firefox in my example because that&#8217;s the browser that the original querent was using. However, most modern browsers support similar kinds of options.</p>
<p>When the new webmail first was deployed, the folder list was confined to the bottom part of the sidebar. On a netbook, this was a really small area. SAA&#8217;s Scott Dellinger already has made some major improvements in the layout of the webmail window.</p>
<table border="0" cellspacing="0" cellpadding="2">
<tbody>
<tr>
<td valign="top">Originally, the list of folders was confined to a small area in the sidebar.</td>
<td valign="top">&nbsp;</td>
<td valign="top">With Scott’s improvements, there’s more room to view folders.</td>
</tr>
<tr>
<td valign="top"><a href="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-sidebar-orig.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="New webmail original sidebar" border="0" alt="New webmail original sidebar" src="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-sidebar-orig_thumb.png" width="205" height="604"></a></td>
<td valign="top">&nbsp;</td>
<td valign="top"><a href="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-sidebar-better.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="New webmail improved sidebar" border="0" alt="New webmail improved sidebar" src="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-sidebar-better_thumb.png" width="205" height="604"></a></td>
</tr>
</tbody>
</table>
<p>&nbsp;</p>
<p>Even with the improved layout, there’s still a lot of the precious vertical space &#8212; usually 600 pixels &#8212; eaten up by parts of the browser that we can reclaim. </p>
<p><strong>Turn off the <em>Menu Bar</em> and <em>Bookmarks Toolbar</em></strong></p>
<p>Right-click in the blank space on the menu or tool bar to get the menu below, and then click the <em>Menu Bar</em> and <em>Bookmarks Toolbar</em> items in turn.</p>
<p><a href="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-02-cropped.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="Firefox menu bar and bookmarks toolbar" border="0" alt="Firefox menu bar and bookmarks toolbar" src="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-02-cropped_thumb.png" width="504" height="174"></a></p>
<p>By disabling the Menu Bar, we get a Firefox menu in the upper left that gives us all the functionality we need, but tucked out of the way. Turning off the Bookmarks Toolbar turns on a small Bookmarks button. We can also access bookmarks through the Firefox menu.</p>
<p><a href="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-new-menus.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="Firefox menu and bookmarks menu" border="0" alt="Firefox menu and bookmarks menu" src="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-new-menus_thumb.png" width="504" height="154"></a></p>
<p>Here’s what those menus look like when we click on them:</p>
<table border="0" cellspacing="0" cellpadding="2" width="500">
<tbody>
<tr>
<td valign="top" width="250">Notice the bookmarks sub-menu…</td>
<td valign="top" width="250">The bookmarks menu is quicker, though.</td>
</tr>
<tr>
<td valign="top" width="250"><a href="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-firefox-menu.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="Firefox menu expanded" border="0" alt="Firefox menu expanded" src="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-firefox-menu_thumb.png" width="273" height="267"></a></td>
<td valign="top" width="250"><a href="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-bookmarks-menu.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="Firfox bookmarks menu expanded" border="0" alt="Firfox bookmarks menu expanded" src="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-bookmarks-menu_thumb.png" width="219" height="344"></a></td>
</tr>
</tbody>
</table>
<p>We now have two fewer menu bars, the tabs are sharing the title bar with the Firefox menu, and bookmarks are still a quick click away, which makes a lot more room for the content we actually want. </p>
<p>Here’s one more tweak to try. On the Firefox menu, there’s a <em>Full Screen</em> option. Select that option, or hit the F11 function key, to make the Firefox menus autohide as well.</p>
<p><a href="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-07.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="Webmail on a netbook - after" border="0" alt="Webmail on a netbook - after" src="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-07_thumb.png" width="504" height="297"></a></p>
<p>There. Now we have all 1024 x 600 pixels devoted to webmail, or to whatever site we want to browse. We can move our cursor to the top of the screen to make Firefox show the menus and address bar. The regular keyboard shortcuts continue to function, as well (e.g., CTRL+T for a new tab). To exit Full Screen mode, we can hit F11 again or right-click on the Firefox toolbar.</p>
<p>We can perform a similar tweak to Windows so that even programs without a full screen mode can use the whole screen. We’ll set the Windows taskbar to <em>autohide</em>, so that it only appears when we move the mouse cursor to the bottom of the screen. Just right-click on an empty portion of the taskbar and select <em>Properties</em> from the context menu. Next, check the option labeled <em>Autohide the taskbar</em>.</p>
<p><a href="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-autohide-taskbar.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="Windows autohide taskbar" border="0" alt="Windows autohide taskbar" src="http://www.uvm.edu/~gcd/files/2012/02/netbook-webmail-autohide-taskbar_thumb.png" width="504" height="297"></a></p>
<p>I hope this is helpful. Most of the options we explored above are available on other modern browsers, too. I use Windows 7 and Internet Explorer 9 on my netbook.</p>
<p>Whatever your choice of web browser, make the most of the space you have on your small screens.</p>
<p><a href="http://browsehappy.com/" target="_blank">Browse happy</a>!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.uvm.edu/~gcd/2012/02/webmail-on-a-netbook/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Custom FSRM notification script</title>
		<link>http://www.uvm.edu/~gcd/2012/01/custom-fsrm-notification-script/</link>
		<comments>http://www.uvm.edu/~gcd/2012/01/custom-fsrm-notification-script/#comments</comments>
		<pubDate>Fri, 20 Jan 2012 19:39:33 +0000</pubDate>
		<dc:creator>Geoff</dc:creator>
				<category><![CDATA[Posts]]></category>
		<category><![CDATA[PowerShell]]></category>
		<category><![CDATA[Scripting]]></category>
		<category><![CDATA[WindowsServer]]></category>

		<guid isPermaLink="false">https://www.uvm.edu/~gcd/?p=451</guid>
		<description><![CDATA[I’ve been working on a script to generate an informative message to users when they exceed quota thresholds on our file server. The features of the File Server Resource Manager (FSRM) provides a variety of useful variables that can be plugged into an automated email. However, we have found that it’s often very useful to [...]]]></description>
			<content:encoded><![CDATA[<p>I’ve been working on a script to generate an informative message to users when they exceed quota thresholds on our file server. The features of the <a href="http://technet.microsoft.com/en-us/library/cc754810(WS.10).aspx" target="_blank">File Server Resource Manager</a> (FSRM) provides a <a href="http://technet.microsoft.com/en-us/library/cc788122(WS.10).aspx" target="_blank">variety of useful variables</a> that can be plugged into an automated email. However, we have found that it’s often very useful to provide more information about the kind of files that a user is storing, something akin to the output of the very useful and free utility <a href="http://windirstat.info/" target="_blank">WinDirStat</a>.</p>
<p>I’ve made progress on the script that generates the email. However, I’ve run into a snarl in trying to configure the quota notification to run the script. The script runs just fine from a command prompt, even from a command prompt running as the Local System account. But when I trigger an FSRM event that should drive the script, I get an error in the Application Log:</p>
<p>&#160;</p>
<p><span id="more-451"></span><br />
<blockquote>
<p>Log Name:&#160;&#160;&#160;&#160;&#160; Application     <br />Source:&#160;&#160;&#160;&#160;&#160;&#160;&#160; SRMSVC      <br />Event ID:&#160;&#160;&#160;&#160;&#160; 8197      <br />Description:      <br />File Server Resource Manager Service error: Unexpected error. </p>
<p>Operation:     <br />&#160;&#160; Running command line action.      <br />&#160;&#160; Quota limit reached.      <br />&#160;&#160; Processing File Server Resource Manager event</p>
<p>Context:     <br />&#160;&#160; Action type: Command Action      <br />&#160;&#160; Account: NT AUTHORITY\LocalSystem      <br />&#160;&#160; Executable path: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe      <br />&#160;&#160; Arguments: C:\local\secure\notify-test.ps1 -path [Quota Path] -email [Source Io Owner Email]      <br />&#160;&#160; Working directory:       <br />&#160;&#160; Quota path: K:\homes1\g\gcd      <br />&#160;&#160; Threshold percent: 100</p>
<p>Error-specific details:     <br />&#160;&#160; Error: AuthzInitializeContextFromSid, 0&#215;80070005, Access is denied.</p>
</blockquote>
<p>After spending hours searching online, I finally stumbled on a couple posts on the TechNet Forums. The <a href="http://social.technet.microsoft.com/Forums/en-US/winserverfiles/thread/0110864a-6604-4181-96cb-8ab1fefbee7c" target="_blank">first one</a> described a problem very similar to mine, in which the poster worked around the issue by using a <em>local admin account</em>, rather than a domain account that’s a member of the Administrators group. </p>
<p>One of the responses to this post included <a href="http://social.technet.microsoft.com/Forums/en-US/winserverManagement/thread/c0f61131-8d6f-4853-b41e-4694642af939" target="_blank">instructions for modifying the ACLs on the FSRM XML data files.</a> The first step is to use <strong><a href="http://technet.microsoft.com/en-us/sysinternals/bb897553" target="_blank">psexec</a></strong> to launch a command prompt as the <em>Local System</em> account. I didn’t feel like mangling the ACLs on the FSRM on the production file server. I <em>did</em> like the reminder of psexec’s capabilities. </p>
<p>I ran <strong>psexec -i -s</strong> and then ran my dirquota quota modify command as <em>Local System</em>. And when I triggered a quota event, my script fired successfully.</p>
<p>I will want to confirm with Microsoft Premier Support that modifying the ACLs is a safe operation before I do so, but at least I have a work-around until then.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.uvm.edu/~gcd/2012/01/custom-fsrm-notification-script/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Semisynchronous WMI</title>
		<link>http://www.uvm.edu/~gcd/2011/09/semisynchronous-wmi/</link>
		<comments>http://www.uvm.edu/~gcd/2011/09/semisynchronous-wmi/#comments</comments>
		<pubDate>Wed, 14 Sep 2011 18:32:39 +0000</pubDate>
		<dc:creator>Geoff</dc:creator>
				<category><![CDATA[Catch]]></category>
		<category><![CDATA[Perl]]></category>
		<category><![CDATA[WMI]]></category>

		<guid isPermaLink="false">https://www.uvm.edu/~gcd/2011/09/semisynchronous-wmi/</guid>
		<description><![CDATA[Experimenting with querying WMI from Perl with Win32::OLE, I ran across the following WMI query options in an Perl example from Microsoft’s Script Center: After some digging, I found the following explanation of those options wbemFlagReturnImmediately, and wbemFlagForwardOnly: Because WMI manages the object, semisynchronous mode is more secure than asynchronous mode. However, if you use [...]]]></description>
			<content:encoded><![CDATA[<p>Experimenting with querying WMI from Perl with Win32::OLE, I ran across the following WMI query options in an <a href="http://gallery.technet.microsoft.com/scriptcenter/f67dd5c6-8dae-4d5f-a7f0-a2dfc316ce9d" target="_blank">Perl example from Microsoft’s Script Center</a>:</p>
<p>
<pre class="brush: perl; light: true; title: ; notranslate">$colItems = $objWMIService-&amp;gt;ExecQuery (&quot;SELECT * FROM Win32_Share&quot;,&quot;WQL&quot;,wbemFlagReturnImmediately | wbemFlagForwardOnly); </pre>
</p>
<p>After some digging, I found the following explanation of those options <i>wbemFlagReturnImmediately</i>, and <i>wbemFlagForwardOnly</i>:</p>
<blockquote><p>Because WMI manages the object, semisynchronous mode is more secure than asynchronous mode. However, if you use semisynchronous mode with more than 1,000 instances, instance retrieval can monopolize the available resources, which can degrade the performance of the program or script and the computer using the program or script. Each object takes up the necessary resources until the memory is released.
<p>To work around this condition, you can call the method with the <em>iFlags</em> parameter set with the <strong>wbemFlagForwardOnly</strong> and <strong>wbemFlagReturnImmediately</strong> flags to instruct WMI to return a forward-only <a href="http://msdn.microsoft.com/en-us/library/aa393762(v=vs.85).aspx"><strong>SWbemObjectSet</strong></a>. A forward-only <strong>SWbemObjectSet</strong> eliminates the performance problem caused by a large data set by releasing the memory after the object is enumerated.</p>
</blockquote>
<p>[from: <a title="http://msdn.microsoft.com/en-us/library/aa384832(v=vs.85).aspx" href="http://msdn.microsoft.com/en-us/library/aa384832(v=vs.85).aspx">http://msdn.microsoft.com/en-us/library/aa384832(v=vs.85).aspx</a> ]
<p>I wanted to put this somewhere, because I’m sure I’ll forget.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.uvm.edu/~gcd/2011/09/semisynchronous-wmi/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>I should have known better</title>
		<link>http://www.uvm.edu/~gcd/2011/09/i-should-have-known-better/</link>
		<comments>http://www.uvm.edu/~gcd/2011/09/i-should-have-known-better/#comments</comments>
		<pubDate>Thu, 08 Sep 2011 18:29:46 +0000</pubDate>
		<dc:creator>Geoff</dc:creator>
				<category><![CDATA[Posts]]></category>
		<category><![CDATA[Server2008R2]]></category>
		<category><![CDATA[vim]]></category>

		<guid isPermaLink="false">https://www.uvm.edu/~gcd/2011/09/i-should-have-known-better/</guid>
		<description><![CDATA[I spent a some time configuring the Eventlog-to-Syslog service on my domain controllers, yesterday. A bunch of that time was spent trying to figure out why the service wasn’t able to read the config file I had created. The upshot is that I had installed a 32-bit version of my text editor of choice. When [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.uvm.edu/~gcd/files/2011/09/vim_editor.gif"><img style="background-image: none; border-bottom: 0px; border-left: 0px; margin: 0px 0px 0px 2px; padding-left: 0px; padding-right: 0px; display: inline; float: right; border-top: 0px; border-right: 0px; padding-top: 0px" title="vim_editor" border="0" alt="vim_editor" align="right" src="http://www.uvm.edu/~gcd/files/2011/09/vim_editor_thumb.gif" width="62" height="60"></a>
<p>I spent a some time configuring the <a href="http://code.google.com/p/eventlog-to-syslog/" target="_blank">Eventlog-to-Syslog</a> service on my domain controllers, yesterday. A bunch of that time was spent trying to figure out why the service wasn’t able to read the config file I had created.</p>
<p>The upshot is that I had installed a 32-bit version of <a href="http://www.vim.org/" target="_blank">my text editor of choice</a>. When I created the config file in c:\windows\System32 using 32-bit Vim, the <a href="http://msdn.microsoft.com/en-us/library/aa384187(v=vs.85).aspx" target="_blank">WoW64 file system redirector</a> on Server 2008 R2 was transparently relocating that file to c:\windows\SysWOW64. Then, when I tried to start the service, it failed to find or load the config file because it didn’t exist in the correct location.</p>
<p>So, I have replaced the <a href="http://www.vim.org/download.php#pc" target="_blank">standard gvim install</a> with the <a href="http://code.google.com/p/vim-win3264/" target="_blank">native 64-bit version</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.uvm.edu/~gcd/2011/09/i-should-have-known-better/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Prototyping Windows File Services</title>
		<link>http://www.uvm.edu/~gcd/2011/07/prototyping-windows-file-services/</link>
		<comments>http://www.uvm.edu/~gcd/2011/07/prototyping-windows-file-services/#comments</comments>
		<pubDate>Mon, 18 Jul 2011 19:34:08 +0000</pubDate>
		<dc:creator>Geoff</dc:creator>
				<category><![CDATA[Posts]]></category>
		<category><![CDATA[CFSv2]]></category>
		<category><![CDATA[Server2008R2]]></category>

		<guid isPermaLink="false">https://www.uvm.edu/~gcd/2011/07/prototyping-windows-file-services/</guid>
		<description><![CDATA[After seven years of providing robust file service hosted on a NetApp filer, we’ve decided to migrate our services to native Windows File Services. We have encountered several issues with the interaction of newer Windows client operating systems and NetApp’s third-party implementation of CIFS and SMB2. We did meet with some staff from various units [...]]]></description>
			<content:encoded><![CDATA[<p>After seven years of providing robust file service hosted on a NetApp filer, we’ve decided to migrate our services to native Windows File Services. We have encountered several issues with the interaction of newer Windows client operating systems and NetApp’s third-party implementation of CIFS and SMB2.</p>
<p>We did meet with some staff from various units on campus to discuss the current state of file services, especially the current pain points, and outlined our current plans. The main themes that emerged from our discussion were as follows:</p>
<ol>
<ol>
<li>Make the service simpler
<ol style="list-style-type: lower-alpha">
<li>H: drive is just confusing; merge it with My Documents
<li>The duplicated folders within user profile directory (e.g. c:\users\netid) create lots of confusion. Any way to address this? </li>
</ol>
<li>Provide more options (increments) for home directory quotas
<li>Provide notification to departments regarding storage usage and quotas</li>
</ol>
</ol>
<p>We are currently prototyping a new design for our Campus File Services — dare I call it CFSv2 — hosted in a Windows Server 2008 R2 Failover Cluster. It’s still early in the process, but the design look promising.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.uvm.edu/~gcd/2011/07/prototyping-windows-file-services/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to catch a phish</title>
		<link>http://www.uvm.edu/~gcd/2011/03/how-to-catch-a-phish/</link>
		<comments>http://www.uvm.edu/~gcd/2011/03/how-to-catch-a-phish/#comments</comments>
		<pubDate>Wed, 23 Mar 2011 19:13:25 +0000</pubDate>
		<dc:creator>Geoff</dc:creator>
				<category><![CDATA[Guides]]></category>
		<category><![CDATA[Posts]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">https://www.uvm.edu/~gcd/2011/03/how-to-catch-a-phish/</guid>
		<description><![CDATA[I’ve received several phishing attempts, recently, this time masquerading as mail from Twitter. I thought I’d share how I recognized this as an attack. Many list members already know this stuff, but I thought I’d share since we still see folks responding to these kinds of attacks. 1. Unexpected Before I even looked at the [...]]]></description>
			<content:encoded><![CDATA[<p>I’ve received several phishing attempts, recently, this time masquerading as mail from Twitter. I thought I’d share how I recognized this as an attack. Many list members already know this stuff, but I thought I’d share since we still see folks responding to these kinds of attacks.</p>
<p><b></b></p>
<p><b>1. Unexpected</b></p>
<p>Before I even looked at the content of the message, I was suspicious because I don’t have any twitter stuff associated with my UVM email. I could have deleted the message then and, if I was using twitter, logged into my twitter account directly to see if something was going on.</p>
<p>But I wondered how the message was crafted, so I opened it <i>with awareness</i>.</p>
<p><b></b></p>
<p><b>2. False link</b></p>
<p>A false link is shows a web address in the message, but the link that is attached to it is different. Below, my mail program shows that the link will actually send me to pachitanglangbarcelona.com.</p>
<p><a href="http://www.uvm.edu/~gcd/files/2011/03/twitter-scam-ol.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="twitter-scam-ol" border="0" alt="twitter-scam-ol" src="http://www.uvm.edu/~gcd/files/2011/03/twitter-scam-ol_thumb.png" width="504" height="229" /></a></p>
<p><span id="more-427"></span>
<p>Thunderbird actually throws a warning about the suspicious nature of the message. Also, when I hover my mouse pointer over the link, the real address is displayed in the status bar on the bottom of the Window.</p>
<p><a href="http://www.uvm.edu/~gcd/files/2011/03/twitter-scam-tb.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="twitter-scam-tb" border="0" alt="twitter-scam-tb" src="http://www.uvm.edu/~gcd/files/2011/03/twitter-scam-tb_thumb.png" width="504" height="348" /></a></p>
<p>&#160;</p>
<p>Webmail shows a warning, and my web browser displays the real link address at the bottom of the screen.</p>
<p><a href="http://www.uvm.edu/~gcd/files/2011/03/twitter-scam-wm.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="twitter-scam-wm" border="0" alt="twitter-scam-wm" src="http://www.uvm.edu/~gcd/files/2011/03/twitter-scam-wm_thumb.png" width="504" height="171" /></a></p>
<p>&#160;</p>
<p>That’s enough for me to hear <a href="http://youtu.be/dddAi8FF3F4">Admiral Ackbar</a> in the back of my head.</p>
<p><b></b></p>
<p><b>3. Strange headers</b></p>
<p>If you look at the full header information, you can see some interesting details about the email message. Here are some of the headers from the message above:</p>
<p>Return-Path: &lt;hedrick@chipotle.com&gt;    <br />Received: from warthog.uvm.edu (warthog.uvm.edu [132.198.101.92])     <br />&#160;&#160;&#160; by penguin1.uvm.edu (8.13.7/8.13.7) with ESMTP id p2M6r9Qj004516     <br />&#160;&#160;&#160; for &lt;gcd@pobox.uvm.edu&gt;; Tue, 22 Mar 2011 02:53:09 -0400     <br />Received: from <strong><font color="#c0504d">s15339449.onlinehome-server.info</font></strong> (s15339449.onlinehome-server.info [87.106.10.20])     <br />&#160;&#160;&#160; by <strong><font color="#006600">warthog.uvm.edu</font></strong> (8.14.4/8.14.4) with SMTP id p2M6r7vT022753     <br />&#160;&#160;&#160; for &lt;geoff.duke@uvm.edu&gt;; Tue, 22 Mar 2011 02:53:08 -0400     <br /><font color="#c0504d">Received: by <strong>mx005.twitter.com</strong> (Postfix, from userid 1181305386)       <br />&#160;&#160;&#160;&#160;&#160;&#160;&#160; id 026EA983D3C; Tue, 22 Mar 2011 07:24:17 +0000 (UTC)</font>     <br />X-Mailer: MIME-tools 5.427 (Entity 5.427)     <br />From: &quot;Twitter&quot; &lt;twitter-notify-geoff.duke=uvm.edu@postmaster.twitter.com&gt;     <br />Subject: You have notifications pending     <br />To: geoff.duke@uvm.edu</p>
<p>Looking at the <i>Received:</i> headers, we should see an entry for each email server that handled the message from origin to destination. I note that the first Received header (bottom one) is missing the <i>from</i> phrase that’s part of the others. So even though it says <b><font color="#c0504d">mx005.twitter.com</font></b>, it’s a crudely forged entry, but makes for a good example.</p>
<p>Also, in the second (middle) Received header, I see that UVM’s server <b><font color="#006600">warthog</font></b> actually got the message from a computer called <b><font color="#c0504d">s15339449.onlinehome-server.info</font></b>. That’s not twitter. And what’s with the Return-Path address, hedrick@chipotle.com? More junk.</p>
<p>I hope this is helpful info. Here are a few links with more info:</p>
<p><a href="http://en.wikipedia.org/wiki/Phishing">http://en.wikipedia.org/wiki/Phishing</a></p>
<p><a href="http://www.microsoft.com/security/online-privacy/phishing-scams.aspx">http://www.microsoft.com/security/online-privacy/phishing-scams.aspx</a></p>
<p>Let me know what you think.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.uvm.edu/~gcd/2011/03/how-to-catch-a-phish/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>What&#8217;s my IP Address?</title>
		<link>http://www.uvm.edu/~gcd/2011/01/whats-my-ip-address/</link>
		<comments>http://www.uvm.edu/~gcd/2011/01/whats-my-ip-address/#comments</comments>
		<pubDate>Wed, 19 Jan 2011 23:05:10 +0000</pubDate>
		<dc:creator>Geoff</dc:creator>
				<category><![CDATA[Posts]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[Windows7]]></category>

		<guid isPermaLink="false">https://www.uvm.edu/~gcd/2011/01/whats-my-ip-address/</guid>
		<description><![CDATA[It’s one of the first questions that we ask clients when we’re helping diagnose a problem with a network resource. There are several different ways to determine your IP address. There’s even a website, whatsmyip.org which will show you what Internet servers think your IP address is. In this post, I describe how to determine [...]]]></description>
			<content:encoded><![CDATA[<p>It’s one of the first questions that we ask clients when we’re helping diagnose a problem with a network resource. There are several different ways to determine your IP address. There’s even a website, <a href="http://www.whatsmyip.org/" target="_blank">whatsmyip.org</a> which will show you what Internet servers think your IP address is. </p>
<p>In this post, I describe how to determine your IP address(es) on Windows 7 using the control panel. You can also use the <a href="http://technet.microsoft.com/en-us/library/dd197434(WS.10).aspx" target="_blank">ipconfig command-line tool</a>, but if you know about that tool, you probably don’t need me to tell you about it.</p>
<h4>Network and Sharing Center</h4>
<p>One of my favorite aspects of Windows 7 is the <a href="http://windows.microsoft.com/en-US/windows7/products/features/windows-search" target="_blank">search feature in the start menu</a>. As you type a search term, Windows will show you matching programs and documents. </p>
<p>As a case in point, you can type <em>Network</em> in the Start Menu search box, and click the <em>Network and Sharing Center</em> control panel item in the search result.</p>
<p><a href="http://www.uvm.edu/~gcd/files/2011/01/win7-netcpl-0-annotated.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="win7-netcpl-0-annotated" border="0" alt="win7-netcpl-0-annotated" src="http://www.uvm.edu/~gcd/files/2011/01/win7-netcpl-0-annotated_thumb.png" width="415" height="545"></a></p>
<p>Alternatively, you can open <em>Control Panel</em>, then <em>Network and Internet</em>, and then click the <em>Network and Sharing Center</em> item. </p>
<p> <span id="more-417"></span>
<p>Once this Control Panel applet is open, you should see a list of your network connections in the middle-right of the Window. The image below shows that my laptop has two active connections, Local Area Connection (an Ethernet cable plugged into my laptop), and Wireless Network Connection (using the UVM wifi network).</p>
<p><a href="http://www.uvm.edu/~gcd/files/2011/01/win7-netcpl-1-annotated.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="win7-netcpl-1-annotated" border="0" alt="win7-netcpl-1-annotated" src="http://www.uvm.edu/~gcd/files/2011/01/win7-netcpl-1-annotated_thumb.png" width="504" height="337"></a></p>
<p>&nbsp;</p>
<p>If you click on one of the connections, a status window will open. While this does list some useful information, you need to click the <em>details</em> button to get to the IP address information.</p>
<p><a href="http://www.uvm.edu/~gcd/files/2011/01/win7-netcpl-2-annotated.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="win7-netcpl-2-annotated" border="0" alt="win7-netcpl-2-annotated" src="http://www.uvm.edu/~gcd/files/2011/01/win7-netcpl-2-annotated_thumb.png" width="381" height="460"></a></p>
<p>&nbsp;</p>
<p>The <em>Network Connection Details</em> window list all the information relating to the IP configuration of the system. I’ve highlighted a few of the commonly important details in the image below.</p>
<p><a href="http://www.uvm.edu/~gcd/files/2011/01/win7-netcpl-3-annotated.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="win7-netcpl-3-annotated" border="0" alt="win7-netcpl-3-annotated" src="http://www.uvm.edu/~gcd/files/2011/01/win7-netcpl-3-annotated_thumb.png" width="380" height="448"></a></p>
<p>What isn’t obvious is that you can hit <strong>Control-C</strong> on your keyboard to copy the info in this window as text, which you then can paste into an email or other document.</p>
<p>I hope this helps you get the information you need to solve your networking problems.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.uvm.edu/~gcd/2011/01/whats-my-ip-address/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Edit a meeting you can&#8217;t see</title>
		<link>http://www.uvm.edu/~gcd/2011/01/edit-a-meeting-you-cant-see/</link>
		<comments>http://www.uvm.edu/~gcd/2011/01/edit-a-meeting-you-cant-see/#comments</comments>
		<pubDate>Fri, 14 Jan 2011 16:40:14 +0000</pubDate>
		<dc:creator>Geoff</dc:creator>
				<category><![CDATA[Posts]]></category>
		<category><![CDATA[Oracle Calendar]]></category>
		<category><![CDATA[Troubleshooting]]></category>

		<guid isPermaLink="false">https://www.uvm.edu/~gcd/2011/01/edit-a-meeting-you-cant-see/</guid>
		<description><![CDATA[The situation: I’m working in Oracle Calendar as a person’s designate, managing his calendar on his behalf. We’ll call him Sam. I create a meeting for Sam with some other attendees. Later, I remove Sam from the meeting rather than deleting it. Perhaps the other still want to meet but didn’t want to create a [...]]]></description>
			<content:encoded><![CDATA[<h5>The situation: </h5>
<p>I’m working in <a href="http://www.uvm.edu/it/calendar/">Oracle Calendar</a> as a person’s designate, managing his calendar on his behalf. We’ll call him Sam. I create a meeting for Sam with some other attendees. Later, I remove Sam from the meeting rather than deleting it. Perhaps the other still want to meet but didn’t want to create a new meeting. Later still, those folks decide they want to reschedule the meeting.</p>
<h5>The problem:</h5>
<p>If a person isn’t listed as an attendee, then that meeting doesn’t appear in their calendar. However, in Oracle Calendar, only the person who created the meeting can edit it or delete it. This person is listed in the details of the meeting as <em>Proposed by</em>.</p>
<p>So Sam owns the meeting, but it isn’t displayed on his agenda for me to manage it. How do I edit or delete a meeting I can’t see?</p>
<h5>The solution:</h5>
<p>I need the <em>In-tray</em> Window in Oracle Calendar. This window is something that most people ignore or disable, but it will display the calendar entries you’ve sent out, including once that you aren’t attending. In addition, if I’ve been granted rights to work as someone’s designate, there’s a folder for their entries in my In-tray as well.</p>
<p>In this screenshot, I’m looking at a meeting that I created as Sam’s designate and from which I then removed his as an attendee. If the meeting isn’t recent, you may need to adjust the display options (Tools – Options – In-tray – Sent out) to allow you see the particular event.</p>
<p><a href="http://www.uvm.edu/~gcd/files/2011/01/OracleCalendar-InTray-AsDesignate.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="OracleCalendar-InTray-AsDesignate" border="0" alt="OracleCalendar-InTray-AsDesignate" src="http://www.uvm.edu/~gcd/files/2011/01/OracleCalendar-InTray-AsDesignate_thumb.png" width="494" height="227" /></a></p>
<p>Another work-around would be to have Sam open the calendar of one of the attendees, find the meeting and edit or delete it. But since I can get to it via the In-tray, I don’t need to bother Sam at all.</p>
<p>I hope this is helpful.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.uvm.edu/~gcd/2011/01/edit-a-meeting-you-cant-see/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Microsoft Office Troubleshooting</title>
		<link>http://www.uvm.edu/~gcd/2010/12/microsoft-office-troubleshooting/</link>
		<comments>http://www.uvm.edu/~gcd/2010/12/microsoft-office-troubleshooting/#comments</comments>
		<pubDate>Fri, 10 Dec 2010 14:21:34 +0000</pubDate>
		<dc:creator>Geoff</dc:creator>
				<category><![CDATA[Guides]]></category>
		<category><![CDATA[Posts]]></category>
		<category><![CDATA[Office2007]]></category>
		<category><![CDATA[Office2010]]></category>
		<category><![CDATA[Troubleshooting]]></category>

		<guid isPermaLink="false">https://www.uvm.edu/~gcd/2010/12/microsoft-office-troubleshooting-2/</guid>
		<description><![CDATA[Recently, I was asked to talk with our Help Line staff about strategies for troubleshooting problems with Microsoft Office. I spent some time addressing the activation issues relating specifically Office 2010, which I wrote up in a separate post. The most important point I want to make about general Office troubleshooting is that reinstalling office [...]]]></description>
			<content:encoded><![CDATA[<p>Recently, I was asked to talk with our Help Line staff about strategies for troubleshooting problems with Microsoft Office. I spent some time addressing the activation issues relating specifically Office 2010, which I wrote up in a <a href="http://www.uvm.edu/~gcd/2010/12/troubleshooting-office-2010-activation/">separate post</a>.</p>
<p>The most important point I want to make about general Office troubleshooting is that <strong>reinstalling office will rarely fix a problem</strong>. Office will kick-off a repair operation automatically if it detects problems with core Office files. Application, heal thyself. </p>
<p>More importantly, a repair operation or uninstall/reinstall process will refresh Office program components, but it won’t touch templates, user and system specific registry information, and add-ins that are the most frequent cause of problems.</p>
<h2>Safe mode</h2>
<p>The first step in troubleshooting should be to start the application in safe mode. Most versions of Office applications support a <em><a href="http://office.microsoft.com/en-us/excel-help/work-with-office-safe-modes-HP010354300.aspx?CTT=1" target="_blank">safe mode</a></em>, which doesn’t load templates, registry info, and add-ins. This step quickly determines whether the problem lies with Office itself or elsewhere.</p>
<p>Invoking Office safe mode is as easy as adding the command-line parameter /safe. Usually, I open the Run window (WindowsKey+R), and type the name of the office executable and add the <strong>/safe</strong> parameter. If you don’t know the executable name, you can find it with the browse button, and then add the parameter at the end:</p>
<p><a href="http://www.uvm.edu/~gcd/files/2010/12/office14-safemode-run1.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="office14-safemode-run" border="0" alt="office14-safemode-run" src="http://www.uvm.edu/~gcd/files/2010/12/office14-safemode-run_thumb1.png" width="419" height="215" /></a></p>
<p>If the app doesn’t start, then you probably do need to perform a <em>Repair</em> installation. If the application starts successfully (sometimes without opening a document in safe mode), then you know that the core office files are fine, and a reinstall isn’t likely to help.</p>
<h2></h2>
<p>  <span id="more-395"></span><br />
<h2>Figuring out what’s wrong</h2>
<p>While is safe mode, you can look at the application options to see what templates and add-ins are installed, and currently disables. In Office 2007, there’s the Office button, and in 2010, the File menu. From this menu, select <strong>Options</strong>. </p>
<p><a href="http://www.uvm.edu/~gcd/files/2010/12/office14-safemode-filemenu1.png"><img style="background-image: none; border-right-width: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px" title="office14-safemode-filemenu" border="0" alt="office14-safemode-filemenu" src="http://www.uvm.edu/~gcd/files/2010/12/office14-safemode-filemenu_thumb1.png" width="450" height="464" /></a></p>
<p>Look at the list of add-ins and templates to see if there’s anything that isn’t part of Office. I would attempt to disable them and then see if the application starts without safe mode.</p>
<p>If you aren’t able to determine the culprit, Microsoft provides step-by-step troubleshooting guides to Office startup problems. They are thorough, but should identify and resolve the problem. </p>
<ul>
<li><a href="http://support.microsoft.com/kb/921541/en-us">How to troubleshoot problems that occur when you start or use Word 2010, Word 2007, Word 2003, or Word 2002</a></li>
<li><a href="http://support.microsoft.com/kb/919196">How to troubleshoot Excel 2007 startup problems</a></li>
<li><a href="http://support.microsoft.com/fixit/">Microsoft’s Fix it Solution Center</a></li>
</ul>
<p>I hope that you find these tips helpful. Good hunting!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.uvm.edu/~gcd/2010/12/microsoft-office-troubleshooting/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Troubleshooting Office 2010 Activation</title>
		<link>http://www.uvm.edu/~gcd/2010/12/troubleshooting-office-2010-activation/</link>
		<comments>http://www.uvm.edu/~gcd/2010/12/troubleshooting-office-2010-activation/#comments</comments>
		<pubDate>Tue, 07 Dec 2010 16:18:08 +0000</pubDate>
		<dc:creator>Geoff</dc:creator>
				<category><![CDATA[Guides]]></category>
		<category><![CDATA[Posts]]></category>
		<category><![CDATA[Activation]]></category>
		<category><![CDATA[Office2010]]></category>
		<category><![CDATA[Troubleshooting]]></category>

		<guid isPermaLink="false">https://www.uvm.edu/~gcd/?p=380</guid>
		<description><![CDATA[Microsoft Office 2010 volume license edition use the Volume License 2.0 mechanisms to manage activation. Office 2010 will activate against our campus Key Management Service (KMS), without user intervention, in a manner similar to Windows Vista and Windows 7. Occasionally, the activation process doesn’t work. Problems are usually related to network communication with the KMS. [...]]]></description>
			<content:encoded><![CDATA[<p>Microsoft Office 2010 volume license edition use the Volume License 2.0 mechanisms to manage activation. Office 2010 will activate against our campus Key Management Service (KMS), without user intervention, in a manner similar to Windows Vista and Windows 7.</p>
<p>Occasionally, the activation process doesn’t work. Problems are usually related to network communication with the KMS. Below are some steps to identify and resolve problems that might occur during activation.</p>
<h2>Gather Information.</h2>
<p>Gathering data is essential to fixing problems. If you ask me (or other IT staff) for help with Office 2010 activation, the first thing I will ask from you is the output of the commands in the steps below.</p>
<p>There are a few steps that will make it easy to collect all the output of your troubleshooting steps.</p>
<ul>
<li>Open an elevated Command Prompt (Run As Administrator)
<li>Change the Properties of the command prompt window to increase the Screen Buffer height to, say, 3000 lines. This will prevent you losing earlier steps as the lines scroll off the screen.
<li>Run cscript /h:cscript, which changes the default script host to cscript, so that output will go to the command prompt instead of a pop-up dialog box.</li>
</ul>
<p>When you are ready to copy the text from the command prompt, right-click the title bar of the window, select Edit &gt; Select All, and then Control-C to Copy the text to the clipboard. Then you can paste the text to any place you want; a webmail message, a footprint entry, or a text file in notepad.</p>
<p><span id="more-380"></span>
<p>On to gathering information. Several of the following step use the ospp.vbs script, which is located in the C:\program files\Microsoft Office\Office14 directory (or Program Files (x86) for 32-bit office installed on 64-bit Windows).</p>
<p>1. Run <strong>ospp.vbs /dstatus</strong> to show the current Office 2010 activation status</p>
<p>An example of a successfully activated installation of Office 2010:</p>
<pre class="brush: plain; gutter: false; highlight: [10,13]; title: ; notranslate">
C:\Program Files\Microsoft Office\Office14&gt;ospp.vbs /dstatus
Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.&lt;/p&gt;

---Processing--------------------------
---------------------------------------
SKU ID: 6f327760-8c5c-417c-9b61-836a98287e0c
LICENSE NAME: Office 14, OfficeProPlus-KMS_Client edition
LICENSE DESCRIPTION: Office 14, VOLUME_KMSCLIENT channel
LICENSE STATUS:  ---LICENSED---
ERROR CODE: 0 as licensed
Last 5 characters of installed product key: H3GVB
REMAINING GRACE: 176 days  (253443 minute(s) before expiring)
---------------------------------------
---------------------------------------
---Exiting-----------------------------
</pre>
<p>Note the remaining grace days. An activation is good for 180 days (six months). Office will renew the activation every seven days, bumping the remain grace days back to 180.</p>
<p>Office 2010’s license status before activation looks like this:</p>
<pre class="brush: plain; gutter: false; highlight: [8,10,15]; title: ; notranslate">
C:\&gt;&quot;Program Files\Microsoft Office\Office14\OSPP.VBS&quot; /dstatus
Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.

---Processing--------------------------
---------------------------------------
SKU ID: 6f327760-8c5c-417c-9b61-836a98287e0c
LICENSE NAME: Office 14, OfficeProPlus-KMS_Client edition
LICENSE DESCRIPTION: Office 14, VOLUME_KMSCLIENT channel
LICENSE STATUS: ---OOB_GRACE---
ERROR CODE: 0x4004F00C
ERROR DESCRIPTION: The Software Licensing Service reported that the application
is running within the valid grace period.
Last 5 characters of installed product key: H3GVB
REMAINING GRACE: 20 days  (29077 minute(s) before expiring)
---------------------------------------
---------------------------------------
---Exiting-----------------------------
</pre>
<p>The Out-Of-Box (OOB) grace period is 30 days. We can tell that this installation is the correct version of Office (“Office 14, COLUME_KMSCLIENT channel”). The next step is to determine whether there’s a problem with communications between this system and the KMS server.</p>
<p>2. Run <strong>ipconfig /all</strong> to collect information about the current network configuration</p>
<pre class="brush: plain; gutter: false; highlight: [11,20]; title: ; notranslate">
C:\&gt;ipconfig /all
[...]
Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . : localdomain
   Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
   Physical Address. . . . . . . . . : 00-0C-29-9C-67-CE
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::102c:2249:dac0:46e%11(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.81.134(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Friday, December 10, 2010 10:15:36 AM
   Lease Expires . . . . . . . . . . : Friday, December 10, 2010 10:45:34 AM
   Default Gateway . . . . . . . . . : 192.168.81.2
   DHCP Server . . . . . . . . . . . : 192.168.81.254
   DHCPv6 IAID . . . . . . . . . . . : 234884137
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-85-C5-C0-00-0C-29-06-6D-3B

   DNS Servers . . . . . . . . . . . : 192.168.81.2
   Primary WINS Server . . . . . . . : 192.168.81.2
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 9:
[...]
</pre>
<p>Communication with the KMS is restricted to the UVM networks, including Wifi and VPN. As you review the network configuration, look for nonstandard IP addresses and DNS servers. In particular, some NAT configurations interfere with activation.</p>
<p>3. Run this DNS query to make sure the system can locate the KMS.</p>
<pre class="brush: plain; gutter: false; title: ; notranslate">c:\nslookup -q=srv _vlmcs._tcp</pre>
<p>(Note the space between srv and _vlmcs)</p>
<p>4. Run <strong>ping kms1.campus.ad.uvm.edu</strong></p>
<pre class="brush: plain; gutter: false; title: ; notranslate">
C:\&gt;ping kms1.campus.ad.uvm.edu
Pinging kms1.campus.ad.uvm.edu [132.198.102.40] with 32 bytes of data:
Reply from 132.198.102.40: bytes=32 time=2ms TTL=127
Reply from 132.198.102.40: bytes=32 time=3ms TTL=127
Reply from 132.198.102.40: bytes=32 time=6ms TTL=127
Reply from 132.198.102.40: bytes=32 time=4ms TTL=127

Ping statistics for 132.198.102.40:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 2ms, Maximum = 6ms, Average = 3ms
</pre>
<p>5. Run <strong>ospp.vbs /act</strong> to trigger office activation.</p>
<pre class="brush: plain; gutter: false; highlight: [12,13,14,15]; title: ; notranslate">
C:\&gt;&quot;Program Files\Microsoft Office\Office14&quot;\ospp /act
Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.

---Processing--------------------------
---------------------------------------
Installed product key detected - attempting to activate the following product:
SKU ID: 6f327760-8c5c-417c-9b61-836a98287e0c
LICENSE NAME: Office 14, OfficeProPlus-KMS_Client edition
LICENSE DESCRIPTION: Office 14, VOLUME_KMSCLIENT channel
Last 5 characters of installed product key: H3GVB
ERROR CODE: 0xC004F074
ERROR DESCRIPTION: The Software Licensing Service reported that the computer cou
ld not be activated. No Key Management Service (KMS) could be contacted. Please
see the Application Event Log for additional information.
To view the activation event history run: cscript OSPP.VBS /dhistorykms
---------------------------------------
---------------------------------------
---Exiting-----------------------------
</pre>
<p>It will either activate successfully, or return an error code. This information needs to be included in requests for assistance. Sometimes, the output will include a description of error code; other times, it will tell you to run another command to get the verbose description.</p>
<p>At this point, if you’ve ruled-out network communications issues and still there are errors, we ask that you create a footprint and include all the output from the commands above.</p>
<p>References:</p>
<p>Troubleshoot volume activation for Office 2010<br /><a href="http://technet.microsoft.com/en-us/library/ee624355.aspx">http://technet.microsoft.com/en-us/library/ee624355.aspx</a>
<p>Tools to configure client computers in Office 2010<br /><a href="http://technet.microsoft.com/en-us/library/ee624350.aspx">http://technet.microsoft.com/en-us/library/ee624350.aspx</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.uvm.edu/~gcd/2010/12/troubleshooting-office-2010-activation/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
	</channel>
</rss>

