Archive for the ‘Uncategorized’ Category

March 19, 2014 Leave a comment

I have been struggling to get the download for Dell SUU 7.4 however I have found it, if you are also struggling try this


Categories: Uncategorized Tags:

My blog has adds

Oh my word, just noticed my blog now has adds, I think I am going to look at moving it, I don’t want adds Sad smile

Categories: Uncategorized

Family Shield from Open DNS

I have been using OpenDNS for years as my DNS provider for home and in some cases work. They have now released a new service aimed at parents and people who just want to have that extra piece of mind that someone else is filtering where their computers are going.

I can think of a few friends and family who could really use this service, how many times have i seen them with either pop-up’s, malware or viruses often they have no idea how they got infected, allot of my friends now have children, this is perfect for you.

So friends and family, please pop over to this site, signup for some free protection that does not require you to install anything on you machine, it will only require you to change you DNS settings to point to them instead of your current ISP. The best place to do this is on your router

Nath it won’t work for you as it blocks porn!!

Categories: Uncategorized

Issue with Home server and Passwords

So over the last few months I have had issues with shares on my Microsoft Home Server, when I logged into my client machine the Home Server shares were unavailable and I needed to authenticate to the home server.

I finally decided to resolve this, I noticed that the update password option on the Home Server client was not available which I thought was odd, I checked Microsoft’s Key Manager by running rundll32.exe keymgr.dll, KRShowKeyMgr from the Run menu which presented me with all my saved credentials but the one for home server was missing (very odd) I added the right credentials and now it is all working as it should and I have the update password option back.

Categories: Uncategorized Tags:

Free E-Book

April 16, 2010 Leave a comment

For those that are interested Microsoft Press are offering a free ebook for SQL 2008 R2


Microsoft Press : Free ebook: Introducing Microsoft SQL Server 2008 R2

Categories: Uncategorized

RBAC: How to allow users to change their Title and Department

March 29, 2010 7 comments

RBAC is a powerful tool, and one of the best things Microsoft implemented in Exchange 2010, It is only version 1 and as with most thing Microsoft version 1 takes a little getting used to 🙂 I think over time as Microsoft gets feedback from customers it will develop RBAC into something even more wonderful but more importantly easy to use and customize.

One of the requests I have seen more and more frequently is the ability to add extra fields in ECP so that a user or users can amend them, sounds straight forward but not always as we are limited to what’s available in the end user roles, however if your clever their are some potential work abounds. Below describes some simple steps that will give the ability for user/users to change the title or department


RBAC: How to allow users to change their Title and Department


This will allow an end user to amend their Title and Department through PowerShell

In order to allow user to modify these options, you need to create a custom RBAC role out of the Mail Recipients role.

We can determine what role we need to copy by running:

Get-ManagementroleEntry *\set-user -Parameters Department,title

The following creates a new management role called Mail Recipients Custom. For now, this role is exactly the same as the original MailRecipients role.

New-ManagementRole -Name "Mail Recipients Custom" -Parent "Mail Recipients"


To list the roles entries (cmdlets) of New Role:

Get-ManagementRole "Mail Recipients Custom" | fl *RoleEntries*

What we do now is remove all but one Entry from the role. PowerShell won’t let you remove all of the entries and for what we are doing leaving the get-user cmdlet in was a reasonable one to leave there. It is very important to note that if you want to do the set version of a cmdlet you should have the get version of the same cmdlet on the role. It is hard to modify what you can’t see!

Get-managementRoleEntry "Mail Recipients Custom\*" | where { $_.Name –ne "Get-User"} | Remove-ManagementRoleEntry


Now we add back the one set cmdlet that we want with only the parameters that we need.

Add-ManagementRoleEntry "Mail Recipients Custom\Set-User" -Parameters Title,Department


If this is just one user, you can directly assign to the user – usera. Alternatively, use *-RoleGroup and assign this to a group. Make sure set the write scope to Self so the user isn’t making changes for others.

New-ManagementRoleAssignment -Role "Mail Recipients Custom" -User usera -RecipientRelativeWriteScope Self


Enable remote PowerShell for the user

Set-User usera -RemotePowerShellEnabled $true


Connect Remote Exchange Management Shell to an Exchange Server

$cred = Get-Credential

$session = new-pssession -ConfigurationName Microsoft.Exchange -ConnectionUri http://<Server FQDN>/PowerShell/ -Credential $cred

Import-PSSession $session


Set-User <User> -Title <Title> -department <department>

Option 2

This will allow an end user to amend other users Title and Department through ECP the think here is that you might want to assign this to someone in HR or a team leader and not to general users as they will be able to change other users Title etc.

In order to allow user to modify these options, you need to create a custom RBAC role out of the Mail Recipients role.

We can determine what role we need to copy by running:

Get-ManagementroleEntry *\set-user -Parameters Department,title

The following creates a new management role called Mail Recipients Custom. For now, this role is exactly the same as the original MailRecipients role

New-ManagementRole -name "Mail Recipients Custom" -Parent "Mail Recipients"


Get-managementRoleEntry "Mail Recipients Custom\*" | where { $_.Name –ne "Set-User"} | Remove-ManagementRoleEntry


Set-ManagementRoleEntry "Mail Recipients Custom\Set-User" -Parameters Identity,Title,Department


Get-managementRoleEntry "Mail Recipients\Get-*" | Add-ManagementRoleEntry -Role "Mail Recipients Custom"


New-ManagementRoleAssignment -name "test" -Role "Mail Recipients Custom" -User e14testuser2


new-managementroleassignment -role "View-Only Recipients" –user e14testuser2



In Order to remove what you have just created you can run the below commands.

Remove-managementroleassignment –identity test

Remove-managementroleassignment –identity “view-only recipients-e14testuser2”

Remove-managementrole –identity “Mail recipients custom”

Categories: Uncategorized

Exchange 2010 – Create a custom role to enable user’s to manage distribution groups but not create them

October 21, 2009 Leave a comment

I love RBAC in Exchange2010, gone are the days of having to hack around AD to try and control what users could do or see. I remember talking to a security guy at one of the big 5 company’s about how they chop up AD to control what users/hosted companies could see and I was gob smacked how applications could run in this type of environment all together, it amazed me as we are not just talking about one product that needs to work with AD but many.

But it is new and with new things there is always a learning curve, I am not about to try teach you all about RBAC there are far better people then me who can do that, not only TechNet :). But I have seen a re-occurring question asking how to not only restrict end users from creating distribution groups (save that for another post) but also allow them to manage distribution groups , to do this follow the steps outlined below:


Create the new customized role:
new-managementrole -name:customizedRole -Parent MyDistributionGroups*

Remove the new-distributiongroup:
Remove-ManagementRoleEntry customizedRole\new-distributiongroup -Confirm:$false

Assign the new customized role to the policy to apply to all users in the tenant:
New-ManagementRoleAssignment -name:customizedRoleRA -Role:customizedRole –Policy $policy.identity

Remove the old role assignment on the policy:
$oldRA=Get-ManagementRoleAssignment -RoleAssignee $policy.identity -Role MyDistributionGroups*
Remove-ManagementRoleAssignment $oldra -confirm:$false

Categories: Uncategorized