Friday, December 28, 2007

Uninstall Trend Micro Officescan Client

Here's the post that helped me: http://www.computing.net/security/wwwboard/forum/20289.html

It worked for me using the Corporate Edition Version 8.

For reference, here's a copy:

To remove / reset the uninstall password for Trend Micro OfficeScan

Edit Ofcscan.ini file. (Do a search.)

On Windows.95/98/XP machines it is usually in C:\Windows\Ofcscan.ini

On Windows.NT/2K machines it is usually in C:\WINNT\Ofcscan.ini

Open the Ofcscan.ini file using notepad search for the [INI_CLIENT_SECTION]

Find the line reading Uninstall_Pwd= and type a # at the beginning of the line to comment it out.

Insert a new line saying Uninstall_Pwd=70

Save the Ofcscan.ini file and retry the uninstall. When it prompts you for a password, enter a '1'.

Tuesday, December 11, 2007

Word 2007 connecting to printer

I have been corrupting Word documents of all types, having Word "recover from serious errors", and generally having to reboot my PC more than ever since installing Office 2007.

From a quick google of Word 2007 "connecting to printer", I am not alone. Although most posts reference running Windows Vista as well, I personally have already reverted to XP again.

Without much research as to why, I can tell you setting my default printer to Microsoft XPS Document Writer now allows Word 2007 to open faster than 2003, from what I remember.

For those who really need help, click Start | Printers and Faxes, right click Microsoft XPS Document Writer, and then click Set as default printer.

Fortunately, I really like the XPS Document Writer, and I typically telecommute. For those of you wired to a LAN and suffering with now having to flip between printers, let me know if you find a solution.

Thanks!

Tuesday, October 02, 2007

Cisco CME Call Waiting and Overlay DNs

If you are using overlay DNs on Cisco CME with an "o" to indicate "overlay", you will lose call waiting tones for the second call through the handset.

You need to use a "c" instead.

For example:

ephone 6
video
username "myuser" password 12345
mac-address 0000.1111.2222
paging-dn 1
type 7911
button 1c7,29

The line "button 1c7,29" directs calls to DN 7 and 29 to the first button on this phone, and allows for call waiting tones. The line "button 1o7,29" also directs calls for 7 and 29 to this phone, but with only a visual display.

The CME GUI seems to set it to "o" by default when picking overlay.

Friday, August 31, 2007

CME transfer directly to CUE voicemail

See link above and regurgitation below.

Create ephone-dn 123, then ephone-dn 5... and forward it to voicemail.

Set E.164 address under Users as 5123.

Dial 5123 and you get 123s voicemail greeting.

Sunday, August 26, 2007

CUE dial by name duplications

By default, the dial-by-name function in a Cisco CUE aef script will not announce users if there are more than 3 duplicates.

For example, if there are 4 "Smith"s in your user list and someone dials "SMI" in your auto attendant dial by name option, they will hear "Continue to dial the name". They will need to dial the complete "SMITH" last name and at least a digit of the first, narrowing the name duplications to 3 or less before CUE gives them a list to choose from.

This is not too much of a problem unless the company is run by the "Smiegenburgerskis", and 4 of them work there.

See the "Name To User" control properties, under your dial-by-name tree in CUE Editor. You can raise the "Announce when number of matches less than:" value to a maximum of 6.

This way, a user dials "SMI" and is given a list of the 5 or less matches.

Friday, August 17, 2007

XP Professional old school folder security

See the link to MS KB article 290403.

If you are accustomed to the Win2000 style folder security tabs via Explorer right clicks, check out the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa forceguest value.

I have been using the "simple" XP Pro sharing and security tab at home for ages. This provides easy access to file shares between my home desktop and work laptop.

Recently I discovered I needed to provide my daughter with modify rights to a Program Files sub folder. Sharing it, and then tailoring network access to it seems crazy, but thats what the "simple" interface allows.

On XP Pro, to access the "classic" security options, change HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\forceguest from 1 to 0.

Wednesday, July 04, 2007

CUCME CallManager Express 4.1 GUI

Commonly you are presented with a broken administration page at https://your CME server/ccme.html. You can find guides at Cisco.com or even your local CME html help page on troubleshooting setting up your HTTP server and authentication correctly, and how to copy the GUI components correctly.

If all else fails, check your ephone dn users. If you show run and find, for example:

ephone 1
video
username "user4900" password 4900
mac-address 001A.E2BC.6830
paging-dn 1
type 7961
button 1:5

I suggest you remove all the usernames with no username "user4900" password 4900, etc. and the re add them using username username4900 password 4900.

I ran into this using the QCT with:
C2800NM-SPSERVICESK9-M
Software Version 12.4(11)XJ2 / CME 4.1(0)
Feature Package IP|FIREWALL|VOICE|PLUS|SSH
GUI Version 4.1.0.1 (Compatible with IOS 12.4(11)XJ)

I can only assume QCT inserts an extra quote or something that breaks the GUI javascript. TAC has a similar report of having quotes in directory names under telephony-services, but not re: ephone names.

Incidentally, after adding them again, the names still have quotes surrounding them, but the GUI works.

Thursday, May 24, 2007

Shortcut to RDP client missing in Windows XP

You can download the Windows RDP client free from Microsoft's website at http://www.microsoft.com/windowsxp/downloads/tools/rdclientdl.mspx. Unfortunately, if you have the client installed but merely lost your shortcut, the install will fail.

Try Start, Run, MSTSC and Ok. If it's installed, it will run.

If you want to recreate the shortcut, the executable is MSTSC.EXE, normally found in C:\\Windows\System32.

Friday, March 09, 2007

Cisco 7920, a WLC 4404, and WPA

Let's assume you want to deploy 7920 phones on a Cisco "light-weight" wireless network and don't want to deploy a RADIUS or ACS server to authenticate users against. You know WEP is broken, so what do you do?

Use WPA. Notice I didin't say WPA2?

First, get yourself a copy of the latest version of "Cisco Wireless IP Phone 7920 Administration Guide for Cisco CallManager". Make sure it's the latest.

Or...

Using the 7920 Configuration Utility, set the WPA Pre-shared key to your favorite cryptic value. The ASCII field only requires 8 characters, so it's easy for testing. Set the Authentication Type to AKM.

In WLC on your voice WLAN (you do have a seperate one, right?), set Layer 2 Security to WPA1+WPA2. Under WPA1+WPA2 Parameters, check only the WPA1 Policy, only TKIP , set the Auth Key Mgmt to PSK, the PSK format to ascii, and type your favorite cryptic value.

Export your phone configuration, and watch the authentication magic.

Saturday, February 10, 2007

Access Gnome on Fedora 6 via VNC on reboot.

So I was hoping to use a spare PC as a test bed for some open source apps. I was looking to eliminate any questions as to where a configuration problem might lie and since I didn't have any schedule in mind, I figured I would install Fedora 6, as opposed to running a live CD or a VMWare image.
Without a KVM handy, and not wanting to pile another keyboard / mouse / monitor combo on my desk, I imagined I would run it headless and use VNC or an equivalent for control.

How to access a GNOME desktop on a PC running Fedora Core 6 via VNC without a user logging on locally.

1. Add a user "Joe".
2. Edit /etc/sysconfig/vncservers.

Add:
VNCSERVERS="1:joe"
VNCSERVERARGS[1]="-geometry 1024x768 -depth 24"
This will start an instance of vncserver using display 1, with joe as the user, at a 1024x768 resolution and a 24 bit color depth.

3. Run vncpasswd as Joe to set the vnc password.
4. As root, restart vnc by service vncserver restart.
5. As root, get vnc to start on boot by chkconfig vncserver on.
6. Edit /joe/.vnc/xstartup to include only:

unset SESSION_MANAGER
exec /usr/bin/gnome-session


Run vncviewer from another host, and connect to hostname:5901. You must use the port number 5900 + whatever display number you've indicated in the vncservers file above. You will be running a Gnome desktop as Joe. The user at the Fedora PC will be looking at a user login screen.

Monday, January 29, 2007

MCS-7825 won't copy OS 2000.4.3(a) image

See bug at: http://www.cisco.com/pcgi-bin/Support/Bugtool/onebug.pl?bugid=CSCse49574

Apparently, Cisco doesn't know why it happens to some and not to others and there is no way to prevent running into it. When attempting to load OS 2000.4.3(a) on a supported MCS-7825-H2 or the like, everything will proceed until the image is copied o the disk(s). The copy will fail and you'll have to begin the process again.

You can simply keep retrying (it may take a dozen attempts) and ultimately it will work, or follow the steps on the link re: trashing the RAID array. If that doesn't work:

"If perform all of the above steps and this has not resolved the issue, I have also seen it resolved by performing a System Erase from the HP SmartStart CD menu options (when booted from), prior to installing. If you do not have a SmartStart CD, you may be able to perform a similar action in the BIOS menu (F9 on boot-up) to Erase NVRAM/Boot Disk in the Advanced Options sub-menu. "

Nice.

Tuesday, January 23, 2007

Cisco 1841 and HWIC-AP-G-A

Although the Cisco.com website indicates all K9 IOS versions support the HWIC-AP-G-A, you must still use the T-train versions. Last success was using c1841-adventerprisek9-mz.124-2.T2.bin, verses new and improved but not supportive version c1841-advipservicesk9-mz.124-12.bin.

During boot you'll see UNKNOWN CARD in slot X if not supported.

Tuesday, January 16, 2007

Cisco LWAP 1131 and 4404 WLAN Controller

If you follow the quick setup guide for the 4404, you are really basically on target. Enter some IP addresses for your interfaces, DHCP server, Radius, etc., verify you have the appropriate layer 2 or 3 connectivity to your APs, plug them in and you've got yourself a nice wireless network.

  1. If you are using 1131 APs, you'll likely need to upgrade the 4404 code.
  2. Set the time on the 4404 correctly!!!!

I've heard the time is important in training, saw documentation about it, and of course forget to check it everytime.

My experience is that you can stare at your configs all day and while nothing appears out of line, your APs won't find an AP-Manager and will happily keep rebooting forever.

Ugh.