Windows Firewall tips

You can't stop the service for Windows 7, you can however from a command line stop the firewall portion of the service. From a command line run: netsh advfirewall set allprofiles state off For Windows XP run: net stop SharedAccess and edit the registry key to stop the service from running: HKLM\System\CurrentControlSet\Services\SharedAccess change start to 4.

Import email PST to exchange 2010

Only works with SP1 and up!!! Open powershell New-ManagementRoleAssignment –Role “Mailbox Import Export” –User UserAccount Place PST file in folder and share out, Exchange Trusted Subsystem must have read/write permissions to the folder. Next run the import command: New-MailboxImportRequest –Mailbox Usermailbox–FilePath \\full unc path to share\PST file name

Setup anonymous relay, exchange 2010

Open exchange manager, go to server configuration, hub transport, add new receive connector. Name it relay, in the next window remove the ip settings and add the server ip address, the next window add the devices you want to allow relay from. Once the connector is created, open the connector and choose permission groups and select anonymous. Then you need to run a command from the shell: Get-ReceiveConnector "Relay" | Add-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "Ms-Exch-SMTP-Accept-Any-Recipient" thats it.

Even easier way for a new self signed cert!

On the SBS server run MMC.EXE and add the snap-in for Certificates and for certificate templates. For the certificate console you will be asked what you will be managing the certs for, select Computer Account. In the next window select local computer. In the MMC select cert. templates and find Web Server, right click the web server template and select properties then the security tab. Add the local computer to the list of users permissions and select Enroll as a right. Click on Certificates (Local Computer) and open “Personal – Certificates” Right click on certificates and request a new cert. Select next twice and choose web server and click on the blue words indicating more information is neeeded. Subject name box, select common name and enter the value as : remote/mail. yourdomain .com and add it. In the second box select DNS and enter the other names the cert should have: domain.com remote/mail.domain.com internaldomain.local autodiscover.domain.com servername. Select Ok and enroll. Open IIS and go to default web site bindings, select HTTPS and Edit and select your new cert. If you not sure which cert you want to use, select it then choose view.