Tech for Techs

Recently this came up again. I wanted to add some further notes.

Error 8606
https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/replication-error-8606
or
https://abell2052.com/2018/10/23/how-to-fix-active-directory-replication-error

How to Change Active Directory Tombstone Lifetime Attribute?
https://www.itechguides.com/how-to-change-active-directory-tombstone-lifetime-attribute/

Tools:
Microsoft Lingering Object Liquidator (LoL)
https://www.microsoft.com/en-gb/download/details.aspx?id=56051

*** UPDATED Sept 3 2023 ***

PROBLEM:
Ubiquiti UniFi Controller as a Service in Windows?
Ubiquiti UniFi Controller as a Service in Windows 2016 / 2019 / 2022?
Ubiquiti UniFi Controller as a Service in windows and connect to Cloud Access?
Self-Hosted UniFi Network Server as a Windows Service (Advanced)

SOLUTION:
Setting up a new UniFi Network application as a service in Windows.

Requirements:
The latest versions of the UniFi Network application (7.5 +) requires Java 17.
https://adoptium.net/download
The latest versions of the UniFi Network application (7.3 +) requires Java 11.
https://adoptium.net/download/
Previous versions (7.2 -) use Java 8.
Install only the x64 Java release and only one version of Java.

1. If a previous UniFi Network application is running on the system, download a backup file and then close the launcher.

2. Download the latest UniFi Network application from the Download page and run the setup.

3. You will be prompted to install Java 11. Select the following options and download the x64 .msi file for Windows:

Package Type: JRE
Version: 11 / 17

If the JAVA_HOME variable is not set correctly, the service installation will not be successful.
If you are experiencing issues with the Java 11 installer or the variable, then remove the other/older Java versions that are present on the system.
4. Run the install, and set the Set JAVA_HOME variable to Will be installed on local hard drive.

CLI: Open an administrative Windows Command Prompt (CMD) window.

5. Change the directory to the location of UniFi installation.
cd "%UserProfile%\Ubiquiti UniFi\"
6. Once in the root of the UniFi folder, run the following command to install the service:
java -jar lib\ace.jar installsvc
7. Wait for the installation to complete, indicated by the Complete Installation log message.

8. Start the service with the command below:
java -jar lib\ace.jar startsvc
9. Open a browser and navigate to the application's IP address or https://localhost:8443.

Upgrading an existing UniFi Network application as a service
1. Download a backup file of the UniFi Network application.

CLI: Open an administrative Windows Command Prompt (CMD) window.

2. Change the directory to the location of UniFi installation.
cd "%UserProfile%\Ubiquiti UniFi\"
3. Once in the root of the UniFi folder, issue the following to uninstall the service:
java -jar lib\ace.jar uninstallsvc
4. Wait for the service uninstall process to complete.

5. Follow step 2 to 9 from the section above.

SOURCES:
Ubiuiti Help Site - Updated on Sept 4, 2023
https://help.ui.com/hc/en-us/articles/4416276882327-How-to-Set-Up-UniFi

*** UPDATED 2023 ***

PROBLEM:
Ubiquiti UniFi Controller as a Service in Windows?
Ubiquiti UniFi Controller as a Service in Windows 2016?
Ubiquiti UniFi Controller as a Service in windows and connect to Cloud Access?
Self-Hosted UniFi Network Server as a Windows Service (Advanced)

SOLUTION:
Setting up a new UniFi Network application as a service in Windows.

Requirements:
The latest versions of the UniFi Network application (7.3) requires Java 11.
Previous versions (7.2) use Java 8.
Install only the x64 Java release and only one version of Java.

1. If a previous UniFi Network application is running on the system, download a backup file and then close the launcher.

2. Download the latest UniFi Network application from the Download page and run the setup.

3. You will be prompted to install Java 11. Select the following options and download the x64 .msi file for Windows:

Package Type: JRE
Version: 11

If the JAVA_HOME variable is not set correctly, the service installation will not be successful.
If you are experiencing issues with the Java 11 installer or the variable, then remove the other/older Java versions that are present on the system.
4. Run the install, and set the Set JAVA_HOME variable to Will be installed on local hard drive.

CLI: Open an administrative Windows Command Prompt (CMD) window.

5. Change the directory to the location of UniFi installation.
cd "%UserProfile%\Ubiquiti UniFi\"
6. Once in the root of the UniFi folder, run the following command to install the service:
java -jar lib\ace.jar installsvc
7. Wait for the installation to complete, indicated by the Complete Installation log message.

8. Start the service with the command below:
java -jar lib\ace.jar startsvc
9. Open a browser and navigate to the application's IP address or https://localhost:8443.

Upgrading an existing UniFi Network application as a service
1. Download a backup file of the UniFi Network application.

CLI: Open an administrative Windows Command Prompt (CMD) window.

2. Change the directory to the location of UniFi installation.
cd "%UserProfile%\Ubiquiti UniFi\"
3. Once in the root of the UniFi folder, issue the following to uninstall the service:
java -jar lib\ace.jar uninstallsvc
4. Wait for the service uninstall process to complete.

5. Follow step 2 to 9 from the section above.

SOURCES:
Ubiuiti Help Site - Updated on May 15, 2023
https://help.ui.com/hc/en-us/articles/205144550-Self-Hosted-UniFi-Network-Server-as-a-Windows-Service-Advanced-

PROBLEM:
How to upgrade UniFi Controller on Windows?

SOLUTION:

• Download UniFi Controller software for Microsoft Windows https://ui.com/download/unifi.
• Check that the user you are logged into is the UniFi install profile.
• Go to "C:\Users\<Current User>\Ubiquiti UniFi", check that the installation folder is not under another profile.
• Open administrative command prompt.
• Run command: net stop UniFi.
• Install new version of UniFi.
• Start UniFi Controller from installer or start it using the startmenu icon.
• If the UniFi Controller App starts without issues, verify that its connecting to the portal.
• Close the UniFi Controller app.
• Run command: net start UniFi.
• Verify access to on portal (https://network.unifi.ui.com).

PROBLEM:
Server Error in '/owa' Application
ASSERT: HMACProvider.GetCertificates:protectionCertificates.Length<1
IIS/cert problem after July 2021

RESOLUTION:
1.) Create a new OAuth certificate by running the following command:
New-ExchangeCertificate -KeySize 2048 -PrivateKeyExportable $true -SubjectName "cn=Microsoft Exchange Server Auth Certificate" -FriendlyName "Microsoft Exchange Server Auth Certificate" -DomainName "contoso.com"

Note: Change the value of the DomainName parameter in the example (contoso.com) to the SMTP domain that's used in your organization.

2.) Set the new certificate for server authentication. To do this, run the following commands:
Set-AuthConfig -NewCertificateThumbprint <ThumbprintFromStep1> -NewCertificateEffectiveDate (Get-Date)
Set-AuthConfig -PublishCertificate
Set-AuthConfig -ClearPreviousCertificate

3.) Restart the Microsoft Exchange Service Host Service. This can be done by opening a command prompt with Admin privilege and running the following command.
iisreset

CREDITS:
https://docs.microsoft.com/en-us/exchange/troubleshoot/administration/cannot-access-owa-or-ecp-if-oauth-expired

https://docs.microsoft.com/en-us/previous-versions/office/exchange-server-2010/ff629372(v=exchg.141)?redirectedfrom=MSDN

https://www.reddit.com/r/exchangeserver/comments/ok1cjx/iiscert_problem_after_july_2021_patch_on_exchange/

PROBLEM:
How to Migrate a Relay Connector in Microsoft Exchange 2013 or 2016

SOLUTION:

* Step 1 and 2 can be skipped if you are not keeping the current IP for your relay connector *

1.)  Add a temporary IP address to the current or Old exchange server.
2.)  Run the following power shell command to migrate the connector and the remote IP Ranges.

New-ReceiveConnector "Relay Connector Name" -server SERVER_NAME2 -Bindings 192.168.0.102:25 -RemoteIPRanges (Get-ReceiveConnector "SERVER_NAME1\Relay Connector Name").RemoteIPRanges -TransportRole "FrontendTransport"

Note: IP (192.168.0.102 is a stand in for what you made the temporary IP. You will need to change it in the command.

3.)  On the old exchange server, remove the IP.
4.)  Add that IP to the new Exchange Server.
5.)  Assign the IP to the connector.
6.)  Remove temporary IP from new exchange.
7.)  Allow anonymous relay with the following PowerShell command:

Get-ReceiveConnector "Relay Connector Name" | Add-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "Ms-Exch-SMTP-Accept-Any-Recipient"

How to assign IP to connector?
1.)  Open "Exchange Admin Center" or open a browser on the exchange server and go to https://localhost/ecp/
2.)  Go to "Mail Flow" > "Recieve Connectors" > "Relay Connector Name" > Click on edit.
3.)  Go to Scoping > "*Network adapter bindings:" click add
4.)  Choose "Specify an IPv4 address" and type in the IP Address.
5.)  Click Save.

*** UPDATED 2019 ***

PROBLEM:

Ubiquiti UniFi Controller as a Service in Windows?
Ubiquiti UniFi Controller as a Service in Windows 2016?
Ubiquiti UniFi Controller as a Service in windows and connect to Cloud Access?

SOLUTION:

1.) Close any instances of the UniFi software on the computer. If you just installed the UniFi controller, make sure to open it once by using the icon on the desktop or within the start menu. Once it says "UniFi Controller (a.b.c) started." you can close the controller program. This is needed to generate some required files for the service to work.

2.) Uninstall any current versions of Java x86 or Java x64. Install Java 64bit, version 8 here:
https://www.java.com/en/download/manual.jsp

3.) Remove the Java environmental path if you previously had it from an old install of UniFi as a Service.

4.) Open the command prompt as an Administrator. For example, on Windows 10, right click on the Start Menu and choose "Command Prompt (Admin)".

5.) Change directory to the location of UniFi in your computer using the following command (exactly as it is here, no substituting needed):

cd "%UserProfile%\Ubiquiti UniFi\"

6.) Once in the root of the UniFi folder, issue the following (this installs the UniFi Controller service):

java -jar lib\ace.jar installsvc

** UPDATE ** Windows 2016, you will need to the entire path for java.exe
"C:\Program Files\Java\jre1.8.0_211\bin\java.exe" -jar lib\ace.jar installsvc

7.) Once you're at a new command prompt line, after it says "Complete Installation...", issue the following:

net start unifi

8.) Close the command prompt window either by entering the "exit" command, or clicking the X.

9.) There is no longer a controller applet, like that other window that popped up. To access the controller you need to open your browser and go to https://localhost:8443. Alternatively you can use the desired interface IP, or FQDN that is mapped to that host (in place of "localhost").

Note: You will need to use Oracle Java JRE 8, which you can download HERE. For the UniFi cloud service (unifi.ubnt.com) to work, you need to use x64 Java only (so choose Windows x64 Offline). You can use either x86 or x64 Java for UniFi, but if you use x86 you cannot use the unifi.ubnt.com cloud tie in.

When upgrading the service, first perform step 2 and 3, then run "net stop unifi" (without quotes) to stop the old the service. After the update is complete, run "net start unifi" (without quotes) to start the service for the updated controller instance.

PROBLEM:
After performing an Outlook migration from 2007 to 2013/2016, we had some users get the following error when opening Outlook 2013/2016

Outlook MAPI 1.0 Error

The time limit for logging on was reached while waiting for system resources. Try Again. MAPI 1.0 [000004C2]

When they went into Control Panel > Mail or Mail (32-bit) they got the same error...

SOLUTION:

The fix is to remove all Mail Profiles from the registry and then create a new Profile:

1. Stop all Outlook processes in Task Manager.
2. Open Regedit
3. Navigate to the following:
HKEY_CURRENT_USER > SOFTWARE > Microsoft > Office > 16.0 > Outlook > Profiles
4. Delete all Folders under the Profiles key:
Outlook Profile Regedit
5. Close Regedit
6. Open Control Panel and go to Mail or Mail (32-bit)
7. Create a new Profile

Now Outlook will work properly.

PROBLEM:

How to Install Cleanmgr.exe on Windows 2012 R2 with Update 1?

With the new update to Microsoft Windows 2012 R2 you can no longer copy the files out of WinSXS for Cleanmgr without recieving the following error.


SOLUTION:

1.) Go to https://github.com/hfiref0x/SXSEXP and download binary sxsexp64.exe
2.) Place file in C:\temp (if that folder doesn't exist create it first)
3.) Run the following commands from an Administrator CMD prompt

C:\temp\sxsexp64.exe "C:\Windows\WinSxS\amd64_microsoft-windows-cleanmgr.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b9cb6194b257cc63\cleanmgr.exe.mui" "%SystemRoot%\System32\en-US\cleanmgr.exe.mui"
C:\Temp\sxsexp64.exe "C:\Windows\WinSxS\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_6.1.7600.16385_none_c9392808773cd7da\cleanmgr.exe" "%SystemRoot%\System32\cleanmgr.exe"
(This will decompress the files from the WinSXS folder and into the proper directories)

4.) Launch Cleanmgr.exe or run cleanmgr in command prompt

_________________________________________________________________________________
Notes:

• cmd: cleanmgr /sageset: n (Allows you to save setting)
• cmd: cleanmgr /sagerun: n (Starts Cleanmgr.exe using the save settings of "N"

Attached:
sxsexp32.exe and sxsep64.exe Files from the GitHub website.

Credit goes to:
hfiref0x user on GitHub

Error

---

"The backup of the volume was stopped before the backup started running"

Expanded Error Description:
Failed. Creation of the shared protection point timed out. The shared protection point failed with error 0x81000101.




Reason & Resolution

---

This is caused by VSS taking longer than the default 10 minutes to create the required files. Updating the registry from the defaulted 10 to 20 minutes should resolve the problem.


Resolution Steps:

• Open Registry Editor
• Navigate to: HKLM>Software>Microsoft>WindowsNT>CurrentVersion>SPP
• Create a new "DWORD" named CreateTimeout
• Set the value of the new CreateTimeout DWORD to 12000000 and select the "Decimal" radio button.