Some Notes on the Machines

All Mitel software names seem to start with that one word “Mitel”. So this:

( Get-WmiObject -Class Win32_Product | Where-Object{$_.Name -like 'Mitel*'} ) | ForEach-Object {
	& msiexec /x $_.IdentifyingNumber /quiet /qn /norestart 
}

appears to do the job nicely.

Always nice for recoverability in case of.

GUI on Server 2012:

https://blogs.technet.microsoft.com/canitpro/2014/04/30/step-by-step-enabling-active-directory-recycle-bin-in-windows-server-2012-r2/

Powershell:

Enable-ADOptionalFeature 'Recycle Bin Feature' -Scope ForestOrConfigurationSet -Target domain.local

This occurs when there is a version mismatch between the client and server of SSH. When it occurs, the client will give the list of available methods provided by the server, e.g.:

$ ssh root@1.2.3.4
Unable to negotiate with 1.2.3.4 port 22: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1

You’ll have to choose one. Here’s how:

ssh -oKexAlgorithms=diffie-hellman-group14-sha1 root@1.2.3.4

Best tool for this I’ve ever seen.

https://www.fosshub.com/Bulk-Crap-Uninstaller.html

If you see “BitLocker waiting for activation”, this is a situation needing careful action: the machine is in an unstable state, and is likely to bluescreen and/or misbehave in other ways unless handled well.

What has happened, is Microsoft’s BitLocker, embedded into Windows, has done at least some encryption of the hard drive, but has lost whatever tool it was that controlled the encryption, so it is not “activated” even though the encryption is in place at least to some extent. One of the tools known to do this, is McAfee Security, it is not unlikely that there are many others.

If you see this situation, don’t try to install or remove anything yet, don’t try diagnostics, just run this from administrative CMD:

manage-bde C: -off

Then, in Control Panel, in the Small Icons, you’ll notice BitLocker Drive Encryption. Please be aware that status reporting in this Control Panel area is not reliably informative. To know what is happening, run this:

manage-bde -status

Discovered by the excellent Yvonne Wynkoop.

Test if UDP ports are open to the Internet.

https://www.ipvoid.com/udp-port-scan/

Here’s the doc:

https://support.storagecraft.com/s/article/How-To-Exclude-Volumes-from-ShadowXafe-Agent-Based-backups?language=en_US

This:

https://www.winzipsystemtools.com/driver-updater.html

works very well indeed. It knows about drivers which aren’t covered by any of the several other good ones I keep up with. One driver install at a time is free of charge, $30 per machine for automatic.

Often we replace Outlook profiles or just OSTs, but there is a much different step. After making sure there are no Outlook.exe processes running, go to the user’s Windows AppData folder:

C:\Users\<username>\AppData

Look for Roaming\Microsoft\Outlook under there, and rename it to Outlook.OLD. Do the same for Local\Microsoft\Outlook if that’s there.

The results are likely to be different :-) You may possibly, also, not have to create a new Outlook profile after doing this. It seems to cause Outlook to replace files which are being corrupted relatively often. This also fixed some mystery IMAP behavior where sync was reported complete but did not bring in new email.

I don’t know when this began, but I just happened to see Task Manager on a server running QuickBooks, and it is very clearly running “SQL Anywhere Network Server (32 bit)”, which is some version of Sybase SQL Anywhere:

http://infocenter.sybase.com/help/topic/com.sybase.help.sqlanywhere.12.0.1/dbadmin/da-running.html

The last time I checked this, which was a while ago, it looked like a much more hidden version of Pervasive SQL. This may be a major change at the heart of QuickBooks, hopefully for the better. One does wonder if we could use those command-line options to advantage…