Tuesday, May 30, 2017

Trend Micro Worry Free client systems are unresponsive after Windows 10 defender update on 5/2017 - KB890830

Since this is a Windows Defender update it cannot be easily rolled back. User experience slowness that makes the PC appear to be not working as even the simplest tasks take significant amounts of time to complete. It is like your PC is working but at 1% of its speed.

The problem is that Windows Defender update severely conflicts with Trend Micro Worry Free Agents using a local management server. The Worry Free Saas product appears unaffected by the issue. Trend Micro support is aware of the problem and working on a fix to Microsoft’s update. In the meantime the temporary fix is to disable Windows Defender active scanning following the steps below.

Note: You can uninstall Trend Worry Free Agent however then you are leaving your systems vulnerable. Using the server console to remove the Trend agent will not work effectively and you will have to manually remove the agent on each system which could take 30 minutes or more per system due to the performance issues.

Caution: it’s the registry you break it you bought it…  

On the impacted Windows 10 workstations open regedit:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender

New, click DWORD (32-bit) value and then name it as DisableAntiSpyware.

Set Value at 1 and restart the system

That will disable Windows defender and should keep it from restarting itself and stop the conflict with Trend Agent.

Reboot the system and test

Note: this can be done as well via GPO to stop further deployment issues. however it will take a significant amount of time on systems already effected.

Trend Micro Agents should work fine in normal mode with real time scanning enabled once this fix is deployed. If you have not already I would recommend installing Trend Worry Free 9 Service Pack 3 as well.

Wednesday, March 1, 2017

365 One Drive Business Setting up Synchronization

Create a separate One Drive “Cloud Administrator” account and assign a 365 license to the account.

From the file server open Http://portal.office.com and log on using the Cloud Administrator account

Once logged on select One Drive as shown below:

clip_image002

Once it sets up your One Drive you can select “Your OneDrive is ready”

clip_image004

In the OneDrive Menu select Sync as shown below:

clip_image006

Click Allow this website to open an app:

clip_image008

It will pop up the following “Getting Ready to sync…” if nothing happens or if you get prompted that you need an app. Then it does not have the proper version already on the system you may have to click on “Get the latest version of OneDrive as:

clip_image010

You should then see the following to enter in your Cloud Admin account and sign in:

clip_image012

You will get prompted with a password logon for Office 365 which will require that same account Sign in.

Then you will see the following which we will redirect to the folder we want to sync by selecting “Change Location”

clip_image014

In this case I will go to the D:\ServerFolders\Company Share and select that folder. Now here is the interesting part it will not sync the “Company” Folder it will create it’s own subfolder.

clip_image016

It will then revert back to the “This is your OneDrive folder” screen to which you click “Next” as shown below:

clip_image017

Check Sync all files and folders and note the path it created and select Next as shown below:

clip_image019

Your OneDrive is now ready for you to open:

clip_image021

Now If you go to the local path you will see the following:

clip_image023

Anything in that OneDrive… folder will be automatically synchronized.

Note: the Green checkmark means the data is syncing to the cloud OneDrive

If you right click on the OneDrive cloud icon in the bottom right corner of you system you will see the following options including View Online:

clip_image025

After you select “View online” and enter in the credentials you will see the data is matching in both locations. Here is a populated example of what the OneDrive will look like:

clip_image027

Note: I would suggest you keep your files within subfolders of the OneDrive share to make permissions administration easier to maintain.

Note: You cannot have a directory called “Forms” in your OneDrive folder structure or it will not synchronize it. “Forms” directory is reserved for OneDrive configuration

Note: If you change the password of this account you will have to change it in the configuration to keep sync enabled. (see “Settings” 2 images above)

Caution: Local permissions and Cloud permissions are maintained separately in most cases. See blog on permissions here: http://koppihle3.blogspot.com/2017/03/365-one-drive-business-share-permissions.html

365 One Drive Business Share Permissions

Create a separate One Drive “Cloud Administrator” account and assign a 365 license to the account and setup the One Drive Share sync. Once that is done to edit cloud permissions:

From the file server open Http://portal.office.com and log on using the “Cloud Administrator” account

Once logged on select One Drive as shown below:

image

It will open your One Drive Business share:

clip_image004

To change permissions, select the check box to the left of the file or folder as shown below:

clip_image006

Right Click and select Details as shown below:

clip_image008

You will notice on the right side the file details scroll down to “Sharing” as shown below:

clip_image010

That will expand to show you the file or folder permissions from there you can add people, stop sharing to that person, or revise read/write permissions as shown below:

clip_image012

CAUTION: These are One Drive share permissions ONLY this will not impact your share permissions internally on the file share those permissions should be modified as well.

Note: I would recommend using folders and not have files in the root directory of your synced folder. That will make permissions administration editing easier.

The users will then see the data on their 365 accounts by going to the “Shared with me” folder as shown below:

clip_image014

Veeam backup fails with “Virtual Disk is not a multiple of” error

Depending on what other backup, build, or restoration solutions you have in place you may see a “virtual disk is not a multiple of…” error when backing up with Veeam.

The error sounds quite ominous like a major disk issue on the host. The good news is it ends up it is a quick fix on the VM using the GUI interface.

Open up the VM settings and resize the virtual drive from the weird size such as 79.435346435 GB to 80GB and the same for the secondary or other disks for example 250.45346324GB to 251GB. Then access the VM and expanded the drives via the OS.

If it is already a “normal” drive size try going up another drive size for example 80GB to 81GB and expand the drive in the OS.

Then test the backup job.

Credit: Veeam KB article https://www.veeam.com/kb1848

Thunderbird to Office Migration

There are several tools out there to migrate your email from Thunderbird to PST that you can then import into Office. Many of them are pay per license. I would stay clear of the freeware version. One pay version that I am familiar with is:

http://www.thunderbirdtooutlook.com/description/

It does a decent job of exporting/importing.

Note: In the case of my imports there was a lot of malware hidden in the old Thunderbird email that my Antivirus found and quarantined as it was exporting. So I would recommend you make sure your Antivirus is online and up to date.

Importing contacts however from Thunderbird can be time consuming due to the fact that Thunderbird and Office use different headers for the categories. Once I exported from Thunderbird to a CSV file I edit it with excel and changed the headers to match what Office is expecting. That avoids manually mapping during the import process. I was then able to cut and paste the header to all the exports and import them into Office seamlessly. Here is the header I used you can cut and paste into as the first line of you CSV. hopefully they work for you:

Note: You will be overwriting the first line of the csv with this so please make a backup copy first.

First Name,Last Name,Display Name,Nickname,E-mail Address,Secondary Email,Screen Name,Business Phone,Home Phone,Fax Number,Pager Number,Mobile Phone,Home Street,Home Street 2,Home City,Home State,Home Postal Code,Home Country,Business Street,Business Street 2,Business City,Business State,Business Postal Code,Business Country,Job Title,Department,Company,Web Page 1,Web Page 2,Birth Year,Birth Month,Birth Day,Custom 1,Custom 2,Custom 3,Custom 4,Notes

Caution: If the import is done incorrectly you can import a bunch of junk into your contact list so I would recommend importing “offline” to make sure it is all good before connecting online. Worse case you wipe that local email profile and start over.

“you break it you bought it…”