Update: I’ve added several additional parts to this tool since it was originally released, including some debug logging, an Azure credential check to ensure that your identity is part of Global Admins, additional cloud endpoint checks, and a more thorough system inventory.… [ Continue reading ]
Implementing Geo-filtering with IIS
This week, I had an interesting issue to resolve–one of my customers previously hosting their architecture on-premises was utilizing geo-filtering services provided by their ISP. These geofiltering services were provided at the network layer, so filtered requests never reached the environment.… [ Continue reading ]
Update to the Office 365 Proxy PAC Tool
I have updated the Office 365 Proxy PAC tool to allow selection of the US Department of Defense XML feed for proxy bypass configurations.
You can see previous updates for the tool:
Update to the Office 365 Proxy PAC tool
Updates to Office 365 Proxy PAC Generator
And of course, the updated tool is available on the TechNet Gallery, with a couple of other bugfixes that some people reported (invalid characters/smart quotes appeared in some versions of the file, which have been corrected): https://gallery.technet.microsoft.com/Office-365-Proxy-Pac-60fb28f7… [ Continue reading ]
Update to the Office 365 Proxy PAC tool
The people have spoken.
I’ve updated the tool with a couple of features:
- Include the Skype for Business IP ranges in the proxy bypass list, since there are occasions that it is necessary.
- Added an option for *all* IP ranges in the XML feed for selected products to be added to the proxy bypass list
- Added an option for *only* IP ranges in the XML feed for selected products to be added to the proxy bypass list
- Added an option to export the IP ranges for selected products to a separate text file.
Updates to Office 365 Proxy PAC Generator
I wrote the original Proxy PAC tool for a customer almost a year ago, and since have added a lot of new functionality. Rather than updating my previous blog posts about it, I thought I would start a fresh thread. If you want some background on how Proxy PAC files work and how to distribute them to your users via GPO or WPAD, I would suggest taking a look at my posts dealing with those topics:
- Office 365 PAC File – https://bhr.62e.myftpupload.com/2015/11/16/office-365-pac-file/
Deploying the Office 365 Proxy PAC to manage your users
Several months ago, I released a tool (the Office 365 Proxy Pac Gen) to generate a Proxy Automatic Configuration file that can be used to bypass local proxy servers for Office 365 services. I also wrote a blog (Office 365 PAC file) on using the tool.… [ Continue reading ]
Office 365 PAC File
When we talk about Office 365 services with our customers, a lot of the discussion revolves around the networking components. While we generally have a “good idea” of networking, we’re not experts in your technology and will frequently tell you to go talk to your vendors. … [ Continue reading ]
Moving wireless network profiles between computers
Ran into an interesting customer issue regarding connecting to a wireless network. For whatever reason, this laptop can’t see the wireless network (though others in the office can). This laptop can connect to other WiFi networks without issue.
My laptop, for example, was able to connect without issue. … [ Continue reading ]
FTP file copy to a Cisco ASA
Tonight, I found myself having to copy the AnyConnect binaries from one ASA 5505 to another without a device on-LAN to TFTP to. I did, however, have a public FTP server that could use to move the data around.
This feature seems to be relatively un-discussed, so here is the syntax.… [ Continue reading ]
Fun with PIX, Part Deux : PIX Password Recovery
After getting my PIX to boot in my previous post, I decided to run through the password recovery procedures.
Requirements
- PIX recovery images (available from either the Cisco site individually or here in one ZIP file)
- PIX firewall software version
- TFTP server software (I used the TFTP server included in the PacketTrap pt360 Suite in this exercise)
- Terminal Emulator (I typically use PuTTY)
Steps
- Connect Ethernet 0 on the PIX to your local LAN.
Fun with PIX, Part I : Clearing the CMOS to Raise It From the Dead
When meeting with a potential customer the other day, she mentioned that she had a running PIX with an unknown password.
I thought I’d refresh my PIX skills and decided to bust out an old PIX 506E we had sitting in the office.… [ Continue reading ]
Active Sync Error 85010014 OTA with Exchange 2003
Recently, we renumbered a client’s network to reduce broadcast traffic and introduced two new redundant internet connections. Everything seemed fine in the initial testing, and we all went home.
The next day, when we were sifting through the fallout tickets, there was a recurring theme–Windows Mobile devices were no longer synchronizing.… [ Continue reading ]
Erratic or Negative Ping Times in Hyper-V Guests
A customer approached me with a some puzzling issues. They noticed a bunch of 1053 and 1054 Userenv errors in their event logs on their virtual machines. 1053 and 1054 error messages have very similar wording:
1053 – Windows cannot determine the user or computer name.… [ Continue reading ]
Dell DRAC Virtual Media Plugin Problems
Symptoms
- Trying to access the “Virtual Media” section of a DRAC console
- Client is Windows 2008
- When accessing “Virtual Media,” get prompted to accept ActiveX control; accept, and get redirected to login page
Solution
- Open Internet Explorer, Tools > Internet Options; select Intranet, and select “Automatically detect Intranet network”

- Open %systemroot%\system32\drivers\etc\hosts.
If I Could Turn Back Win32Time
For anyone who manages an Active Directory environment, you’ve undoubtedly come to understand the need for keeping time in sync. In short, you won’t be able to log in if the local computer time has more than 5 minutes difference than the logon server.… [ Continue reading ]
