Absolutely free PHP and MySQL website hosting

 Infinity Free .Great test environment that cost nothing. Unlimited hosting, completely free, no ads, any domain.

https://www.infinityfree.com

Add email alias via Atribute Editor in Active Directory

 In my case, in a mixed environment, I can't add an alias via Exchange online, and we don't have an exchange on promises.

AD Sync pushes the attributes from AD to 365 so... if you no longer have an on-prem Exchange server, that's fine... use Active Directory's attribute editor like you did before Exchange started allowing these aliases added directly in the EAC. Jump into your domain controller, open ADUC and open the user. Click the Attribute Editor and add your aliases there. 

Email address type update failed

Error:

Error executing request. An Azure Active Directory call was made to keep object in sync between Azure Active Directory and Exchange Online. However, it failed. Detailed error message: Unable to update the specified properties for on-premises mastered Directory Sync objects or objects currently undergoing migration. DualWrite (Graph) RequestId: 9ee1a32f-ae47-4171-ad6b-ed0a1956a05e The issue may be transient and please retry a couple of minutes later. If issue persists, please see exception members for more information.

To add an alias email we have to navigate to the attribute editor, if you can't see this tab, its probably because Advanced Fitures is not enabled.  You can do this by clicking on the View menu button, and in the drop-down, click on Advanced Features, which will put a tick next to it. Once enabled, you will see more folders in Active Directory appear.

Double-click on proxyAddresses and add in the address. You need to add SMTP: before the address,no spaces, for example, smtp:user@mycompany.com  

Forcing a sync or simply wait  

You can wait for autoreplication or force an Azure AD Sync. On the server where you have Azure AD connect installed, open up an elevated PowerShell window and type in the command below to force a sync:

Start-ADSyncSyncCycle -PolicyType Delta




Clever malvertising attack uses Punycode to look like KeePass’s official website

Another example for IT guys. Internal repositories for software installers offer increased security, control, efficiency, and cost optimization for organizations. They create a safer and more reliable software environment for employees, while also aiding in compliance efforts.

By Malwarebytes lab

Threat actors are known for impersonating popular brands in order to trick users. In a recent malvertising campaign, we observed a malicious Google ad for KeePass, the open-source password manager which was extremely deceiving. We previously reported on how brand impersonations are a common occurrence these days due to a feature known as tracking templates, but this attack used an additional layer of deception.

The malicious actors registered a copycat internationalized domain name that uses Punycode, a special character encoding, to masquerade as the real KeePass site. The difference between the two sites is visually so subtle it will undoubtedly fool many people.

We have reported this incident to Google but would like to warn users that the ad is still currently running.

A detailed article by Malwarebytes here: https://www.malwarebytes.com/blog/threat-intelligence/2023/10/clever-malvertising-attack-uses-punycode-to-look-like-legitimate-website

Enable archive mailboxes for all users whose archive mailbox isn't already enabled.

Well known issue, that you can solve easily by running simple command in powershell:

Get-Mailbox -Filter {ArchiveStatus -Eq "None" -AND RecipientTypeDetails -eq "UserMailbox"} | Enable-Mailbox -Archive

Done :)

Please notice , to be able to do so you have to Connect to Exchange Online PowerShell.

 

This is as well useful option to Enable auto-expanding archiving

 

 

Show all users, include local, in Windows login Screen

Windows 10 and 11

If the list of local users is not displayed on the computer logon screen, check the settings of the following local Group Policy options (use the gpedit.msc):

• Interactive Logon: Do not display last signed-in = Disabled (Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options);
• Enumerate local users on domain-joined computers = Enabled (Computer Configuration -> Administrative Templates -> System -> Logon)
• Do not enumerate connected users on domain-joined computer = Disabled/Not Configured (in the same GPO section)

 

 

How to find your Windows product key

 Type this command at the prompt:

wmic path softwareLicensingService get OA3xOriginalProductKey

 

  Type this command at the PowerShell:

 powershell "(Get-WmiObject -query 'select * from SoftwareLicensingService').OA3xOriginalProductKey"

 

 

 

 

Type regedit into the Windows 10 desktop search, and select the appropriate item in the results. Navigate to this key:

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform

 

 the BackupProductKeyDefault key will reveal a valid Windows key ( Windows 10)

Fix issues related to windows. SFC and DISM commands

 

Commands that I use at least once a week.

Perform SFC Scan and Repair Windows Image
-This process will perform scan for any corrupted system files or integrity violation and will attempt to repair it along with the Windows Image.

1. Open command prompt with administrator access
2. Type each command below and wait until scan is completed.

SFC /scannow
DISM /Online /Cleanup-Image /CheckHealth
DISM /Online /Cleanup-Image /ScanHealth
DISM /Online /Cleanup-Image /RestoreHealth 

 

Please see other article about Optimal Order for Running DISM and SFC