Josh's IT-Blog

Create site-to-site VPN with FortiGate to Microsoft Azure

Burkard Josh 14. September 2013 0

I know, it is an unsupported configuration to create a site-to-site VPN to Microsoft Azure with a FortiGate firewall. But a FortiGate device is what i have and only to run some test’s I don’t want to buy some of this expensive supported firewalls.

I tried a lot of configurations, but nothings seams to run with Azure and my Fortigate firewall. So this week, I started a new try with this problem and after a few test’s I was successfully.

First I detected, that there is a new Option in Windows Azure, I never saw before: Dynamic Routing GateWay. After trying the old option Static Routing Gateway, I tried the new one and was successfully. The differences between dynamic and static routing gateways are described here. read more

WordPress Plugin: Sandbox Mirror

Burkard Josh 16. August 2013 0

I created a new plugin for mirroring a WordPress site to a test site: Sandbox Mirror.

Currently it’s in beta status and not available for download. if you are interested to test it, please contact me.

recover deleted Bitlocker Recovery Informations

Burkard Josh 17. July 2013 0

Today I had a request from a first-level-admin which need the Bitlocker Recovery Password for a already deleted computer object. Here is what I came up with:

$compname = "ComputerName"
$SearchRoot = "CN=Deleted Objects,DC=domain,DC=local"

$recoverykeys = Get-QADObject -Tombstone -Recycled -Type "msFVE-RecoveryInformation" -SizeLimit 0 -Includedproperties msFVE-RecoveryPassword -SearchRoot $SearchRoot | ? {$_.lastknownparent -like "*$compname*"} | select msFVE-RecoveryPassword

$recoverykeys

1

2

3

4

5

6

$compname = "ComputerName"

$SearchRoot = "CN=Deleted Objects,DC=domain,DC=local"

$recoverykeys = Get-QADObject -Tombstone -Recycled -Type "msFVE-RecoveryInformation" -SizeLimit 0 -Includedproperties msFVE-RecoveryPassword -SearchRoot $SearchRoot | ? {$_.lastknownparent -like "*$compname*"} | select msFVE-RecoveryPassword

$recoverykeys

Please note that you need to be a Domain Admin (or equivalent) to be able to read the Deleted Objects Container. The tombstones will have a lifetime, after their expiration, you can’t access anymore to the recovery passwords.

add domain groups to vSphere ESXi 5 with PowerCLI

Burkard Josh 28. June 2013 0

With PowerCLI, you can add AD authentication to a single managed ESXi Host. For this you need to add your ESXi-Host to the AD (line 9) and then add permissions (line 11):

$VMHost        = "hostname.domain.local"
$HostPW        = "yxz"
$DomainAdmin   = "DomainAdmin"
$DomainPW      = "yxz"
$ADGroup       = "domain\DomainGroup"
$Domain        = "domain.local"

Add-PSSnapin VMware.VimAutomation.Core

Connect-VIServer $VMHost –User root –Password $HostPW
Get-VMHostAuthentication -VMHost $VMHost | Set-VMHostAuthentication -Domain $Domain -Username $DomainAdmin -Password $DomainPW -JoinDomain -Confirm:$false

Get-VMHost $VMHost | New-VIPermission -Principal $ADGroup -Role "Admin"

Disconnect-VIServer $VMHost -Confirm:$false

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

$VMHost = "hostname.domain.local"

$HostPW = "yxz"

$DomainAdmin = "DomainAdmin"

$DomainPW = "yxz"

$ADGroup = "domain\DomainGroup"

$Domain = "domain.local"

Add-PSSnapin VMware.VimAutomation.Core

Connect-VIServer $VMHost –User root –Password $HostPW

Get-VMHostAuthentication -VMHost $VMHost | Set-VMHostAuthentication -Domain $Domain -Username $DomainAdmin -Password $DomainPW -JoinDomain -Confirm:$false

Get-VMHost $VMHost | New-VIPermission -Principal $ADGroup -Role "Admin"

Disconnect-VIServer $VMHost -Confirm:$false

sometimes line 11 will fail, then you have to wait for domain replication and repeat it.

List VMTools Status with vCheck

Burkard Josh 25. February 2013 0

i like vCheck to daily report my virtual environment status. But a lot of our guest systems are not in my responsibility, so the VM Tools are not uptodate or aren’t installed.

i wroted this plugin for vCheck:

$Title = "VMs by VM Tools status"
$Header = "VMs by VM Tools status : $($VMToolsVersions.count)"
$Comments = "The following Operating Systems are in use in this vCenter."
$Display = "Table"
$Author = "Josh Burkard"
$Version = 1.0

# Start of Settings
# —- VM Guest OS Pivot Table —-

$VMTools = get-vm | % { get-view $_.ID } | select Name, @{ Name="hostName"; Expression={$_.guest.hostName}}, @{ Name="ToolsStatus"; Expression={$_.guest.toolsstatus}}, @{ Name="ToolsVersion"; Expression={$_.config.tools.toolsVersion}} | sort-object ToolsVersion

$VMToolsVersions = $VMTools | Where { $_.ToolsStatus -ne "toolsOk" } | sort ToolsVersion -desc

If (($VMToolsVersions | Measure-Object).count -gt 0 -or $ShowAllHeaders) 
{
	$MyReport += Get-CustomHeader "VMs by VM Tools status : $($VMToolsVersions.count)" "The following VM Tools Status are not OK or old."
	$MyReport += Get-HTMLTable $VMToolsVersions
	$MyReport += Get-CustomHeaderClose
}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

$Title = "VMs by VM Tools status"

$Header = "VMs by VM Tools status : $($VMToolsVersions.count)"

$Comments = "The following Operating Systems are in use in this vCenter."

$Display = "Table"

$Author = "Josh Burkard"

$Version = 1.0

# Start of Settings

# —- VM Guest OS Pivot Table —-

$VMTools = get-vm | % { get-view $_.ID } | select Name, @{ Name="hostName"; Expression={$_.guest.hostName}}, @{ Name="ToolsStatus"; Expression={$_.guest.toolsstatus}}, @{ Name="ToolsVersion"; Expression={$_.config.tools.toolsVersion}} | sort-object ToolsVersion

$VMToolsVersions = $VMTools | Where { $_.ToolsStatus -ne "toolsOk" } | sort ToolsVersion -desc

If (($VMToolsVersions | Measure-Object).count -gt 0 -or $ShowAllHeaders)

{

$MyReport += Get-CustomHeader "VMs by VM Tools status : $($VMToolsVersions.count)" "The following VM Tools Status are not OK or old."

$MyReport += Get-HTMLTable $VMToolsVersions

$MyReport += Get-CustomHeaderClose

}

Proxy autoconfiguration with WPAD.dat and multiple network adapters

Burkard Josh 9. January 2013 0

If you use a proxy server in your company, you would like to automatically configure your clients using a WPAD.dat-file. If you use the myIpAddress()-function, this function will returns the ip address from one active network adapter, maybe from the wrong one. This function couldn’t determine, which network adapter would made the connection to your proxy server. In this case you couldn’t connect to the internet, cause the WPAD.dat file returns the wrong result.

There is no automatic metric inside the WPAD.dat to detect, which adapter is the active adapter, nearest to your proxy server. You need to set the ip metric manualy on each network adapter: read more

auto-update Antivirus Essential for Synology NAS behind proxy

Burkard Josh 7. December 2012 0

Since DSM 4.1 you can configure proxy service at the Control Panel – Network:

but if you have installed the AntiVirus Essential package, it wouldn’t use this settings to update it’s virus definitions and will fail:

To configure autoupdate for the virus definitions behind a proxy server, you need to configure some settings manualy:

activate ssh on your NAS:

connect to your NAS by SSH and login as root (not as admin!)

create a new script:

vi /var/packages/AntiVirus/target/bin/synoavupdate

1	vi /var/packages/AntiVirus/target/bin/synoavupdate

change vi to the insert mode by press key i, then insert this lines: read more

network calculations in Excel 2010

Burkard Josh 18. November 2012 0

i need often to calculate network addresses, subnet-masks/bits, Hosts and more. For this i wrote this script Network.bas, which you can implement in your Excel file or your Default template book.xltm:

i implemented this functions:

NetworkCalculate
- Add or subract from an IP-Address:
NetworkBitsToSubnetmask
NetworkBroadCastAddress
NetworkClientHighestAddress
NetworkClientLowestAddress
NetworkClientRange
NetworkSubnetAddress
NetworkSubnetMaskToBits
NetworkBitsToSubnetMask

add second default route to Synology NAS

Burkard Josh 15. November 2012 0

Shortly i need to connect a Synology NAS to two separated networks. At default you can only define one Gateway for your Synology NAS. To define a second route, do this steps:

Activate SSH access to your Synology NAS:

configure first LAN interface:

configure second LAN interface:

configure default gateway:

Connect to NAS by ssh and configure the second route:

after configuring this, you can disable ssh access again.

force a vbscript to run in CSCRIPT

Burkard Josh 28. September 2012 0

There are several valid reasons to demand that a vbscript runs in CSCRIPT instead of WSCRIPT, like for example to allow the use of Standard Input or to prevent a separate popup for each Wscript.Echo line.

The following code can be copied and pasted at the top of your own scripts to force them to run in CSCRIPT:

If (right(Ucase(WScript.FullName),11)="WSCRIPT.EXE") Then
    Dim WshShell,args,objArgs,I
    Set WshShell = CreateObject("WScript.Shell")
    args=""
    If Wscript.Arguments.Count &gt; 0 Then
        Set objArgs = WScript.Arguments
        For I = 0 to objArgs.Count - 1
            args = args &amp; " " &amp; objArgs(I)
        Next
    End If
    Set objDebug = WshShell.Exec ( "cscript.exe /NoLogo """ &amp; Wscript.ScriptFullName &amp; """" &amp; args )

    ' Wait until the script exits
    Do While objDebug.Status = 0
        WScript.Sleep 100
    Loop

    ' Exit with CSCRIPT's return code
    WScript.Quit objDebug.ExitCode
End If

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

If (right(Ucase(WScript.FullName),11)="WSCRIPT.EXE") Then

Dim WshShell,args,objArgs,I

Set WshShell = CreateObject("WScript.Shell")

args=""

If Wscript.Arguments.Count > 0 Then

Set objArgs = WScript.Arguments

For I = 0 to objArgs.Count - 1

args = args & " " & objArgs(I)

Set objDebug = WshShell.Exec ( "cscript.exe /NoLogo """ & Wscript.ScriptFullName & """" & args )

' Wait until the script exits

Do While objDebug.Status = 0

WScript.Sleep 100

Loop

' Exit with CSCRIPT's return code

WScript.Quit objDebug.ExitCode

End If

The code may look more complicated than necessary, that’s because it returns CSCRIPT‘s return code to the WSCRIPT engine, just in case this return code is monitored by the program that started the script in WSCRIPT. read more

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this: