NickShertzer.com

Open System Preferences and Network

Click the lock if not unlocked and click the + to add new

Change:

Interface to VPN

VPN Type to PPTP

Service Name: MCGB

Enter Server Address: mail.mcgb.com

Account Name: yourusername

Check “Show VPN status menu bar”

Click Authentication Settings

Enter office password

Click OK and Apply

Click VPN in status bar and “Connect MCGB VPN”

Open Safari and click “Safari > Preferences”

Choose the “Autofill” tab and CHECK “User names and passwords”

Navigate to https://mail.mcgb.com/exchange

Install Trusted Root Certificate

a. Click “Show Certificate”

b. Check “Always trust “server.domain.local” when connecting to “mail.server.tld”

c. Expand “Trust” section and choose drop down for “Always Trust” for everything.

d. Enter system password when challenged.

Login to OWA using mcgb\username and office password.

Choose “YES” to prompt “Would you like to save this password?”

Drag and drop address bar to desktop to create shortcut.

You’re backing up your data the wrong way:

http://lifehacker.com/5405775/youre-backing-up-your-data-the-wrong-way

HotImage your hard drive with DriveImage XML:

http://lifehacker.com/326086/hot-image-your-pcs-hard-drive-with-driveimage-xml

Various Driver Backup Programs:

http://lifehacker.com/224599/download-of-the-day-driver-collector-windows

http://lifehacker.com/5102344/driverbackup2-copies-your-system-drivers

http://lifehacker.com/399097/double-driver-backs-up-your-systems-drivers

The great thing about UltrVNC is that it lets me set up a d/l executable that is executed by the end user and therefore, bypasses any firewall port forwarding settings on the client end.  THe server end needs PORT 5900 forwarded to the machine running “Ultra VNC Viewer (Listen Mode)”.

The full Download for UVNC is here: http://www.uvnc.com/download/index.html

And the app that makes all of my remote support magic happen is Ultra VNC Single Click: http://www.uvnc.com/addons/singleclick.html

The office hardwood is in and after procrastinating for a long time, the server is back up and running! Welcome back to nickshertzer.com

I recently had to pay for incident support to get my BES 4.1.6 SP7 back up and running and talking to my company’s 8 or 9 blackberry handhelds. Here are the steps I took:
1. Determine service account error by checking BES Log file

• c:\Program Files\Research in Motion\Logs\SERVERNAME_MAGT_01_DATE_0001.txt
• Saw error 5302

2. Export RIM registry key

• regedit
• HKCU\Software\Research in Motion\  Export key

3. Create new Blackberry Admin user account in AD “BESAdmin”

4. AD > DOMAIN.local properties > Security tab

• Add new user account “BESAdmin”
• set “Send As” permission
• verify inheritance to bbery user accounts
• force if neccessary (advanced security settings for individual user accounts > Allow inheritable permissions CHECKED)

5. Exchange System Manager set Delegate Control

• right click top level and Delegate Control
• Add new user account “BESAdmin” as “Exchange View Only Administrator”
• First Administrative Group > Right Click Properties > Security Tab > Change BESAdmin to add “Administer Information Store” , “Receive As” , & “Send As”

6. Local Security Settings (of blackberry server)

• Local Policies > User Rights Assignments
• add BESAdmin account to “Allow Log on Locally” and “Log on as a service”

7. Set new BESAdmin account as local administrator to BES server

• Computer Management > Users and Groups > Administrator Group
• Add domain\BESAdmin

8. Log on as new account BESAdmin

9. Services.msc > Change “Log on As” to new BESAdmin for all Blackberry services (minus BB Attachment service - that stays as “Local System”)

10. Import HKCU RIM key exported in Step 2

11. Recreate MAPI profile (may need bbery services started to do this…)

• open “Blackberry Service Configuration”
• Server tab > Edit Mapi
• Enter information of Exchange Server, and new BESAdmin account
• Apply > OK > OK
• open “Blackberry Manager” and create MAPI profile again using same settings

12. Start BB services or restart server.  Verify handheld communication with server.