Messages

[(CONVERT WINDOWS SERVER 2022 EVALUATION TO STANDARD)]

(CONVERT WINDOWS SERVER 2022 EVALUATION TO STANDARD)

1. Open an elevated command prompt and run the command: slmgr.vbs /ipk <retail key>
2. After the key is installed, run the command to activate Windows: slmgr.vbs /ato
3. Reboot the server and check if it is now running the retail version of Windows Server Standard 2022.

This will reset your icon cache, and repair icons not showing up properly on the windows taskbar.

ie4uinit.exe -show
taskkill /IM explorer.exe /F
DEL /A /Q "%localappdata%\IconCache.db"
DEL /A /F /Q "%localappdata%\Microsoft\Windows\Explorer\iconcache*"
explorer.exe

[HOW TO MANUALLY UPDATE POLYCOM PHONES, USING YOUR OWN TFTP SERVER]

LAST UPDATED: 09-20-2024

HOW TO MANUALLY UPDATE POLYCOM PHONES, USING YOUR OWN TFTP SERVER
- If your Poly phone is unable to get updates from 8x8, because the software is out of date, and you can't get it to update for the life of you?  It took me 2 days to figure the below steps that allowed me to update the phone to the latest firmware. 
- These instructions are for using a TFTP server on a Micrsoft Windows OS.
- You will need the admin password to the 8x8 phone. 
- The below is for the Poly VVX 500 phone.  Make firmware name changes for your respected model.

1.) Create a folder at the root of your C: called "TFTP-Root".


2.) Download and install PumpKIN TFTP Server. https://kin.klever.net/pumpkin/
3.) Open PumpKIN TFTP Server app, and make sure the "Server is running" check mark is checked.  If not, and the port is in use, don't proceed further.  You must fix this before proceeding.  I had Solarwinds TFTP server installed and running as a service, and was using UDP port 69, for example.  I uninstalled Solarwinds TFTP, and PumpKIN loaded with the server check mark just fine, after that. 


4.) Click "Options" in PumpKIN. Add the TFTP Filesystem root path "C:\TFTP-Root".  Make sure "allow access to subdirectories" is checked. Change radio button options to "Give all" and "Take all". Click OK..


5.) Go to Polycom and download the split firmware for your model. This is what your phone will update to.
https://downloads.polycom.com/voice/voip/uc_sw_releases_matrix.html


6.) Download and extract the 000000000000.cfg-master.zip contents to your C:\TFTP-root folder. 
Source Notes (in case the above link dissapears): https://github.com/greiginsydney/000000000000.cfg/tree/master


7.) Open customisations.cfg in notepad and make sure, or change, the Device Update options to "1", and save.  If you download our .zip file, it will already be set this way, and you can skip this step.


8.) Factory reset the phone, so you can change the provisioning server to TFTP.  Boot the phone and press "Cancel", and hold down keys 1-3-5 at the same time (while it is counting down).  You should get a password screen.  Type in the MAC address of the phone, and factoryt reset the phone.  You can follow these instructions, if you are having trouble.
https://emak.tech/support/polycom-factory-reset-without-password/. 

9.) Once phone is rebooted.  Go to settings, status, network, TCPIP to get the IP of the phone. Login and change the provisioning server.  Change the provisioning server Type to TFTP.  Change the Server Address to the IP address of you TFTP server windows pc. 


10.) Save the settings and Reboot the phone, or power cycle via POE.  PumpKIN will make noises and show logs when the phone connects and boots.  Check the PumpKIN logs and make sure the correct sip.ld file is uploading. Mine gave me a 3111-44500-001.sip.ld file not found error. So I copied the respected file in the C:\TFTP-Root folder.  Rebooted the phone.. and I could see the PumpKIN logs showing the phone downloaded it. Note.. The phone boots to the application screen, and waits about 10 seconds, and reboots to start the update. Photos of the process below.



11.) Set a new password on the phone. New default password is 456.  I set my new password to 123.


12.) The phone is updated, once you see "Provisioning Successful". We don't need to provision from TFTP anymore. Exit Pumkin TFTP from your workstation. We now need to provision from your VOIP SIP provider now.


13.) Factory Reset the Phone.  The downloaded github .cfg configuration files (in the C:\TFTP-Root folder) has something in it to disable the web gui via IP, configures as skype, etc.  I am not sure what else it configured, so I just factory reset the phone to be safe.  On the phone itself, go to settings, advanced, typed in the admin password, Administrative Settings, 5 Rest to Defaults, 5 Reset to Factory.

14.) Set a new password for the phone again when it is done factoy resetting. Again, default is 456.  I set my new password to 123.


15.) Provision your phone like you normally would now.  Put in the 8x8 provisioning server via the web ip, save, and the phone should auto reboot. Once it boots up it should contact the provisioning server and will provision.
IMPORTANT NOTE: Make sure you login to 8x8 and deactivate the phone from the User, before you try and activate it again. 
We use 8x8. Here is the link for 8x8 provisiong servers. 
8x8 instructions: https://support-portal.8x8.com/helpcenter/viewArticle.html?d=e7a73331-46d8-439b-9403-7a19cd53ac07
HTTPS
pccfg.8x8.com/polycomuc/



16.) AGAIN. IMPORTANT NOTE: Make sure you login to 8x8 and deactivate the phone from the User, before you try and activate it again, or you may get this error.  If you are.. just Deactive the phone from the user.  Reboot the phone, and activate it again.

[(PRINTER)]

LAST UPDATED: 12-15-2021

(PRINTER)
Lexmark CS720DE Color Laser Printer = 40C9100
Amazon: $886.50
Ingram: $831.81

(TONER)
BLACK HIGH YIELD TONER CARTRIDGE FOR CS720 = 74C1HK0
Amazon: $273.26
Ingram: $256.63

CYAN TONER CARTRIDGE FOR CS720 = 74C1SC0
Amazon: $168.44
Ingram: $157.56

YELLOW TONER CARTRIDGE FOR CS720 = 74C1SY0
Amazon: $169.99
Ingram: $157.56

MAGENTA TONER CARTRIDGE FOR CS720 = 74C1SM0
Amazon: $168.94
Ingram: $157.56

LEXMARK WASTE TONER BOTTLE FOR CS720 = 74C0W00
Lexmark:
Ingram: $20.68

(IMAGING UNIT)
BLACK IMAGING UNIT FOR CS720 = 74C0ZK0
Amazon: $77.43
Ingram: $57.04

(PAPER TRAYS)
LEXMARK 550 SHEET TRAY FOR CS720 = 40C2100
Amazon: $276.74
Ingram: $276.59

(FUSER)
CS720, CS725, CX725 Fuser 110-120V, Type 00 - 41X0252

(FUSER MAINTENANCE KIT)
CS72x fuser maintenance kit, type 00, 110 - 41X0554

(TRANSFER MODULE)
CS720, CS725, CX725 Transfer Belt Maintenance Unit - 40X9929

[How to run classic Control Panel - Devices and Printers in Windows 11]

How to run classic Control Panel - Devices and Printers in Windows 11

1. win+r to open run box.
2. type in or run
shell:::{A8A91A66-3A7D-4424-8D24-04E180695C7A}
or
%windir%\explorer.exe shell:::{A8A91A66-3A7D-4424-8D24-04E180695C7A}

[1. VIEW JUNCTION]

Rub in a command prompt

1. VIEW JUNCTION
DIR /AL

2. CONVERT JUNCTION OR SYMBOLIC LINK TO AN EMPTY FOLDER
fsutil reparsepoint delete %foldername%

3. DELETE THE EMPTY / NORMAL FOLDER
rmdir /s /q %foldername%

[(HOW TO UPGRADE WINDOWS 11 HOME TO PRO USING AN OEM LICENSE)]

(HOW TO UPGRADE WINDOWS 11 HOME TO PRO USING AN OEM LICENSE)
1. Disconnect from the internet.
2. Change the product key to VK7JG-NPHTM-C97JM-9MPGT-3V66T
3. Reconnect internet during auto reboot.
4. After the reboot, confirm upgraded to an "unlicensed / inactive" version of Pro.
4. Change and activate using the Windows 10/11 Pro OEM product key.
5. Confirm activated.

Sonicwall SonicOS 7 - Security Service Bundle Differences



Source: sonicos-7-0-and-services-datasheet.pdf

[(PORTALS)]

(PORTALS)
admin.microsoft.com //365 admin
portal.azure.com //azure services
myaccount.microsoft.com //user
intune.microsoft.com //device
security.microsoft.com //defender
purview.microsoft.com //compliance

(MFA POLICIES)
Configure MFA policies
https://portal.azure.com/#view/Microsoft_AAD_ConditionalAccess/ConditionalAccessBlade/~/Policies

(SIGN IN LOGS)
Check User Sign-In and MFA policy compliance
https://portal.azure.com/#view/Microsoft_AAD_ConditionalAccess/ConditionalAccessBlade/~/signInLogs

(COMPLIANCE MANAGER)
Shore up all compliance issues to meet the regulations.
https://compliance.microsoft.com/compliancemanager?viewid=overview

(BITLOCKER)
POLICIES: https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/DevicesMenu/~/configurationProfiles
REPORT: https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/DevicesMonitorMenu/~/encryptionReport

(INTUNE)
ALL DEVICES: https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/DevicesMenu/~/mDMDevicesPreview

(SECURITY, THREAT AND EMAIL POLICIES)
Threat Policy: https://security.microsoft.com/threatpolicy
Phishing Attack Simulation: https://security.microsoft.com/attacksimulator

(LICENSING)
https://m365maps.com/

(PRICING CALCULATOR)
https://azure.microsoft.com/en-in/pricing/calculator/

1.) Take ownership of the "NGC" folder located at C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\
2.) Open CMD as administrator and run
icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc /T /Q /C /RESET
3.) Open Settings, Accounts, Sign-In Options, PIN (Windows Hello), and create.

["HKCU\Software\Microsoft\Win]

(MANUALLY RESET FOLDER PATHS)
"HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders"


(DROPBOX HIDDEN FEATURES)
1. Click the Dropbox icon in your menu bar or system tray.
2. Tap the Settings icon in the top right of the window, then choose Preferences....
3. Please select the Account tab, then press the Option/Alt (Mac), or press the Alt + H keys (Windows) to show more options.
4. Click the Fix Permissions button to correct it. You will get the success message: Dropbox successfully repaired the permissions in your Dropbox.

[(PRINTER)]

(PRINTER)
SMALL Lexmark Color C3426dw Laser Printer
Part #: 40N9310

(TONER - NORMAL)
1.5K - C3210K0 - Black - $74.99 amazon
1.5K - C3210C0 - Cyan - $85.99 amazon
1.5K - C3210M0 - Magenta - $85.99 amazon
1.5K - C3210Y0 - Yellow - $85.99 amazon
1.5K - ALL COLORS - $289.09 - amazon

(TONER - HIGH YIELD)
4.5K - C341XK0 - Black - $118.99 amazon
4.5K - C341XC0 - Cyan - $188.99 amazon
4.5K - C341XM0 - Magenta - $188.99 amazon
4.5K - C341XY0 - Yellow - $188.99 amazon

(WASTE TONER BOTTLE)
15K - 20N0W00 - Waste Container - $17.99 amazon

(TRAY)
250-Sheet Tray - 40N4250 - $140.84

(PRINTER STAND)
Adjustable Stand - 40C2300 - $362.39

Firewall Exclusion for new HP 2023 Activate Pairing Code Printers
us1.api.ws-hp.com

Sonicwall GEN 7 Setup Wizard
https://192.168.168.168/sonicui/7/m/mgmt/system/setupWizard

[- MANDATORY MUST DO FIRST -]

LAST UPDATED: 04-18-2024

- MANDATORY MUST DO FIRST -

(ENABLE GOOGLE APIS FOR MIGRATION)
1. Create a project via Microsoft Migration Wizard
2. https://console.cloud.google.com
3. Choose project from top dropdown. Mine was projectnamemrhn for example.
4. APIs & Services - Library
5. Search for and enable the below
    Gmail API
    Google Calendar API
    Google People API
    Contacts API
    Admin SDK API



- ALTERNATIVE SOLUTIONS THAT MAY HELP BELOW -

(HOW TO SOLVE - SERVICE ACCOUNT KEY CREATION IS DISABLED)
SOURCE: https://stackoverflow.com/questions/78161775/organisational-policy-permissions-google-cloud-for-microsoft-migration

With a Workspace super admin, login to https://console.cloud.google.com.

Make sure you're working in the root org.

- Select IAM and admin.
- In IAM on left-hand menu, edit permissions for organization.
- Add Organization Policy Administrator and save.
- Go to Organization policies in left-hand menu.
- Search for 'Disable service account key creation'.
- Edit policy, set Enforcement to Off and save.
- Change workspace from root org to the project the 365 wizard created. Mine was called projectnamempij.
- In IAM and admin, go to Service accounts in left-hand menu.
- In the 3 dots menu besides the service account, select Manage keys.
- When in service account, Add key -> Create new key.
- The json file is created and downloaded.
- Create a new endpoint in Exchange Online and use the downloaded json



Office 365 Migration Wizard - Google Workspace (GSUITE) to Office 365

(GOOGLE PREP)
1.) Go to https://console.developers.google.com/
2.) Expand the hamburger menu in the upper left-hand corner.
3.) Navigate to Select IAM & Admin > Manage Resources
5.) Select the organization resource.  i.e. cognetic.com
6.) In the right-hand pane, under the Permissions tab, select "Add Principal".
Enter your Google Migration admin email login.
7.) Add roles: Project Creator and Create Service Accounts.
8.) Select Save.
9.) Wait approx 15 minutes for permissions to update.

(OFFICE 365 PREP)
1.) Start the Office 365 Migration Wizard
2.) Login with Google admin email account above.
3.) Export the .json file and save.
4.) Pause this Office365 wizard, and grant the newly created client ID permission to Google, per the below steps.

(GRANT NEWLY CREATE PROJECT CLIENT ID PERMISSIONS)
1.) admin.google.com
2.) Security > Access and data control > API Controls
3.) In the Domain wide delegation pane, select Manage Domain Wide Delegation.
4.) Click Add new.
5.) In the Client ID field, enter the service account's Client ID from the Office365 exported .json file.
6.) In the OAuth scopes (comma-delimited) field, enter the below list of scopes
https://mail.google.com/https://www.googleapis.com/auth/contactshttps://www.googleapis.com/auth/calendarhttps://www.googleapis.com/auth/gmail.settings.sharing
7.) Grant APIs via APIs & Services > Library
Note: Make sure you have the Office 365 project selected in the project dropdown at the top.
- Gmail API
- Google Calendar API
- Contacts API
- Google People API
8.) Wait approx 15 minutes for permissions to update.
9.) Return to the Office365 Migration Wizard.

(OFFICE 365 MIGRATION WIZARD - CONTINUTED)
1.) Import CSV file of users to migrate (see attached sample .csv).
2.) Complete the wizard


(MIGRATION STATUS OPTIONS)
Stop migration: Stop the migration of mailboxes. After the batch is stopped, the status is changed to Stopped.
Resume migration: Resume the running of a migration batch that was paused and has a status of Stopped. If there are errors for a migration batch, you can restart it with this command, and Microsoft 365 or Office 365 will attempt to migrate the mailboxes that failed.
Edit Batch: Edit an existing migration batch. You can change the finalization semantics of batches that support finalization. You can also change the migration endpoint used for the migration batch.
Approve Migration Batch: For a batch scored as Poor, approving the migration allows you to complete all migrations in the batch with a score of Perfect, Good, or Investigate, but will not approve any migration in the batch with a score of Poor. If the migration fails with a grade of Poor, you cannot force the migration to succeed.
Finalize Migration Batch: Each mailbox in the migration batch runs a final incremental synchronization. Configures the user's Microsoft Outlook profile to point to the new target domain. Converts the source mailbox to a mail-enabled user in the source domain.
Delete: Delete a migration batch after you verify that all mailboxes in the migration batch have been successfully migrated. Verify also that mail is being routed directly to cloud-based mailboxes after you've configured your MX record to point to Microsoft 365 or Office 365. When you delete a migration batch, Microsoft 365 or Office 365 cleans up any records related to the migration batch and removes it from the list.

- -
Sources:
https://developers.google.com/identity/protocols/oauth2/service-account#delegatingauthority