Author: Bob Lin

You may use Powershell. Here is how.

1. Set-ExecutionPolicy unrestricted -scope currentuser.
2. $UserCredential = Get-Credential
3. $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection
4. Import-PSSession $Session -DisableNameChecking
5. Get-MailboxolderPermission “Email Address”
6. Get-MailboxFolderPermission
7. Add-MailboxFolderPermission -Identity “resource Email”:\calendar -User “Your Email Adress” -Accessrights Editor

This is the example and result.

PS C:\Users\blin> Set-ExecutionPolicy unrestricted -scope currentuser Execution Policy Change The execution policy helps protect you from scripts that you do not trust. Changing the execution policy might expose you to the security risks described in the about_Execution_Policies help topic at https:/go.microsoft.com/fwlink/?LinkID=135170. Do you want to change the execution policy? [Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is “N”): y

PS C:\Users\blin> $UserCredential = Get-Credential

cmdlet Get-Credential at command pipeline position 1 Supply values for the following parameters: Credential

PS C:\Users\blin> $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection

PS C:\Users\blin> Import-PSSession $Session -DisableNameChecking

ModuleType Version Name ExportedCommands ———- ——- —- —————- Script 1.0 tmp_4uncrkjn.uv3 {Add-AvailabilityAddressSpace, Add-DistributionGroupMember…

PS C:\Users\blin> Get-MailboxFolderPermission boardroom@chicagotech.net FolderName User AccessRights SharingPermissionFlags ———- —- ———— ———————- Top of Informatio… Default {None} Top of Informatio… Anonymous {None}

PS C:\Users\blin> Add-MailboxFolderPermission -Identity boardroom@chicagotech.net -User “blin@chicagotech.net” -Accessrights Editor

FolderName User AccessRights SharingPermissionFlags ———- —- ———— ———————- Top of Informatio… Bob Lin {Editor}

PS C:\Users\blin> Get-MailboxFolderPermission

cmdlet Get-MailboxFolderPermission at command pipeline position 1 Supply values for the following parameters: Identity: boardroom@Chicagotech.net FolderName User AccessRights SharingPermissionFlags ———- —- ———— ———————- Top of Informatio… Default {None} Top of Informatio… Anonymous {None} Top of Informatio… Bob Lin {Editor}

PS C:\Users\blin> Get-DistributionGroupMember cmdlet Get-DistributionGroupMember at command pipeline position 1 Supply values for the following parameters: Identity: AllEmployees@chicagotech.net Name RecipientType —- ————- blin                  UserMailbox

……..

PS C:\Users\blin> Get-DistributionGroupMember “AllEmployees@chicagotech.net” | export-csv c:\temp\list.csv

PS C:\Users\blin> Import-csv c:\temp\list.csv | %{Add-MailboxFolderPermission -identity boardroom@chicagotech.net:\calendar -user $_.PrimarySMTPAddress -Accessrights Editor} FolderName

User AccessRights SharingPermissionFlags ———- —- ———— ———————- Calendar Doug Simon {Editor}

You might have noticed that pressing the F8 or the SHIFT + F8 keys on your keyboard to enter Safe Mode no longer work in Windows 10. Here are some ways to run Safe Mode in Windows 10.

1. Use bcdedit Command. Boot Windows 10 setup DVD or Install media. Select “Repair your computer”. When asked what option you prefer, choose Troubleshoot. On the “Advanced options” screen, click or tap “Command Prompt”. Type the command: bcdedit /set {default} safeboot minimal. Press Enter on your keyboard and, after a moment, it tells you that “The operation completed successfully.” Or you can try this command: bcdedit /set {default} bootmenupolicy legacy. Now, restart your computer and press F8 when starting.
2. Use “Startup Settings” in Windows 10 installation DVD or USB recovery drive. Boot from Windows 10 installation DVD or USB recovery drive. Go to “Advanced options -> Startup Settings -> Restart.”.
3. Interrupt the normal boot process of Windows 10 three times. If Windows 10 fails to boot normally three times over, the fourth time it enters by default in an Automatic Repair mode. Using this mode, you can boot into Safe Mode.

1. Run services.msc. Disable Windows update and Windows Update Medic Services by navigating to Windows Update, and Windows Update Medic Services. then disable them.
2. Change the Setting of the Group Policy Editor. Run gpedit.msc. Go to Computer Configuration > Administrative Templates > Windows Components > Windows Update. Double-click Configure Automatic Updates. Select Disabled in Configured Automatic Updates on the left, and click Apply and OK to disable the Windows automatic update feature.
3. Disable Windows update by using Registry. Run Change the way of Windows 10 Updates Using Registry. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows. Right-click the Windows (folder) key, select New, and then click Key. Name the new key WindowsUpdate and press Enter. Right-click the newly created key, select new, and click Key. Name the new key AU and press Enter. Inside the newly created key, right-click on the right side, select New, and click on DWORD (32-bit) Value.  Name the new key AUOptions and press Enter. Double-click the newly created key and change its value to 2. It’s for “Notify for download and notify for install”. Click OK. Close the Registry to complete the task.
4. Never check for updates settings.

Q: How do I check Windows 10 License information license, Production key channel, Activation ID, Application ID?

Chicagotech.net: run slmgr.vbs /dlv, for example as shown.

Q: Where and how to check last logon in Microsoft Active Directory?

Chicagotech.net: With Active Directory Users and Computers open, double click on the user. Click on Attribute Editor. If you don’t see Attribute Editor, make sure Advanced Feature in View is check. Navigate to Last Logon, you should have last logon info.

Q: How do you reboot or shutdown Palo Alto Firewall?

Chicagotech.net: Go to Device>Setup>Operations. Under Device Operations, you have options to reboot or shutdown the device.

Q: How do you export and import Palo Alto Firewall configuration?

Chicagotech.net:

1. To exported PA firewall configuration, you need to save named configuration by going to Device>Setup>Operation. Click on Save Named Configuration and enter the file name with .xml.

2. To export it, under Configuration Management, click on Exported named configuration snapshot. Select the saved name configuration in step 1.

Or From the CLI:
> scp export configuration [tab for command help]
For example,
> scp export configuration from 2014-09-22_CurrentConfig.xml to username@scpserver/PanConfigs

Note: A single ‘/’ specified after the username@scpserver denotes a path that begins in that user’s home directory. Using ‘//’ means a path that starts at the root of the file system.

3. To Import: From the GUI, go to Device > Setup > Operations and click Import named configuration snapshot and enter the Exported name configuration file.

This can also be done from the CLI:
For example:
> scp import configuration username@scpserver/PanConfigs/2014-09-22_CurrentConfig.xml

4. Load an imported configuration.

From the GUI, go to  Device > Setup > Operations and click Load named configuration snapshot. When the configuration has been selected, click OK and commit the configuration.

This can also be done from the CLI, for example:
> configure
# load config from 2014-09-22_CurrentConfig.xml
# commit
# exit
>

Note: 1. Make sure both firewall are running the same version of the software.

2. If they are not, some configuration may not work

3. Some hardware settings may not change, for example Ip address and S/N.

Q: We setup 4 Cisco ASA site to site VPNs. How can I check the status of these VPN?

Chicagotech.net: With Cisco ASDM running, go to Monitor>VPN>VPN Statistics>Sessions. Make sure the Filter by is IPSec site-to-site and All sessions. You should see all site to site VPN. If not, refresh it.

A: We are using office and Azure MFA.  How do I MFA authentication in Office 365/Azure?

Chicagotech.net: MFA is managed by Azure. Login Azure admin account. Go to Azure Active Directory>Users. Double click on the user, you should have option to modify the Authentication Contact as shown below screenshot.

For users, the can change it by themselves. Please follow this step by step video:

A: I need to change the Authentication phone number. How do I do that in Azure?

Chicagotech.net: Login azure admin account. Go to Azure Active Directory>Users. Double click on the user, you should have option to modify the Authentication Contact as shown below screenshot.