Installing Forefront TMG 2010 Service Packs

q: I need to install Forefront Threat Management Gateway 2010 and get it to the most recent version 7.0.9193.500. What is the quickest path?
a: We've determined the minimal path to installing and updating to that version is:

1. Install the base TMG Product
1. Run the Prep Tool
2. Run the Installation Wizard
3. Ver: 7.0.7734.100
4. Don't run the Management Wizard when prompted
2. Install TMG 2010 Service Pack 1
1. TMG-KB981324-AMD64-ENU.msp
2. Ver: 7.0.8108.200
3. Install SoftwareUpdate Service Pack 1 Update 1
1. TMG-KB2288910-amd64-ENU.exe
2. Ver: 7.0.9027.400
4. Install TMG 2010 Service Pack 2
1. TMG-KB2555840-amd64-ENU.exe
2. Ver: 7.0.9193.500
5. Then run the Forefront TMG Management Interface to configure the product or attach it to an array.

TMG 2010 SP1 Setup cannot modify or create the registry entry

q: While installing Forefront Threat Management Gateway TMG 2010 Service Pack 1 (SP1) TMG-KB981324-AMD64-ENU.msp we encountered this alert/error "Error: Setup cannot modify or create the registry entry System\CurrentControlSet\Service\Tcpip\Parameters" Then it threw the error "Setup was unable to configure TCP settings. As a result, Setup cannot continue."

a: Simple solution, MSP files don't have the context menu to Run as administrator like EXE files do.  So we need to be elevated before we run the MSP.

1. Click Start - type CMD (but don't hit enter)
2. When cmd.exe shows up in the results list, right click on it
3.  
4. Click "Run as administrator" / Click Yes if prompted by User Account Control
5. From here navigate to the folder where your MSP file is stored, let's say D:\Download\TMG_2010_SP1
6. Execute the MSP file by simply hitting tab, until the name is displayed or typing the name into the prompt.
7. TMG-KB981324-AMD64-ENU.msp

SideBySide - Windows Live Toolbar

Issues: EventID 59: Activation context generation failed for "c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll".Error in manifest or policy file "c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll" on line 2. Invalid Xml syntax.

EventID 35: Activation context generation failed for "c:\program files (x86)\windows live\photo gallery\MovieMaker.Exe".Error in manifest or policy file "c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" on line 8. Component identity found in manifest does not match the identity of the component requested. Reference is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1". Definition is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Please use sxstrace.exe for detailed diagnosis.

Solution: While searching "Activation context generation failed for "c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll"" We're taken to a Microsoft page saying it was associated to the Windows Live toolbar and that "no action is needed".  Well, we don't use that toolbar, so to remove it:

1. Go to add/remove programs (appwiz.cpl)
2. Select "Windows Live Essentials" / then "uninstall/change"
3. Select (X) Uninstall / Click Continue
4. Then check "Windows Live Toolbar " / Click Continue
5. This leaves the other great Windows Live Essentials application installed and simply removes the toolbar.

Hide the Google People Widget Sidebar

q: How can you hide Google's People Widget and it's sidebar container?
a: Well this one is a two parter:
Part one - Disable People Widget:

1. Within Gmail go to settings
2. On the General Tab, scroll down to People Widget and set it to (X) Hide the people widget
3. However, you'll notice it's sidebar is still there.

Part two - Disable/Hide the sidebar (only works for Google Chrome)

1. Open Chrome, visit the extension site for Minimalist:
2. https://chrome.google.com/webstore/detail/bmihblnpomgpjkfddepdpdafhhepdbek/details
3. Click (+ Add to Chrome) / Click Install when prompted
4. Visit your google mail site
5. Click on the M icon in the toolbar in the upper right / Click Dashboard
6. Under Minimalist for Gmail / Click Enable / Then click Options
7. On the "Main" tab at the top, Check the box next to "Hide Sidebar"
8. Click Save Changes at the Top Right
9. Open an email now & notice all the screen real estate you have gained.

Shoretel Caller ID is Unknown for Mobile Cell Phones

q: we have an issue where forwarded calls and outbound calls to mobile phones from our ShoreTel SG-220T1A phone switch showed up as 'UNKNOWN' and it didn't even list the phone number.
a: The company that installed the phone system along with AT&T just threw up their hands.  We thought it was related to a Caller ID issue.  However, a short google search found this Very Helpful post: http://www.shoretelforums.com/forums/administrators/1811-inbound-outbound-caller-id-2.html - They provide clear instructions where you insert a ;2E in the Custom Trunk Group Dialing Rules.  A quick call to some cell phones proved this to work and has resolved that issue.

1. You will need to enter Support Mode in Director
2. To do this BEFORE YOU LOG INTO SHOREWARE DIRECTOR
3. Press and hold the CTRL and Shift Key / Click on the U in User Name of the Log in, in Director
4. You will see a Red Support Entry Mode appear under the User name and Password
5. Log in normally to Director
6. Click on Trunks on the left, then click on Trunk Groups
7. Click on the name of your Trunk Group
8. Then scroll all the way to the bottom of the page where you see the last button is "Trunk Group Dialing Rules:  Custom"  Click Edit
9. Type    ;2E     into this field, click save.
10. Perform a test call in amazement.

WMSVC Web Management Service on Server 2008

q: During the continued configuration of Microsoft's ARR, we tried to start the WMSVC service and got this error:  IISWMSVC_STARTUP_UNABLE_TO_READ_CERTIFICATE

Unable to read the certificate with thumbprint '********'.  Please make sure the SSL certificate exists and that is correctly configured in the Management Service page.

Process:WMSvc
User=NT AUTHORITY\LOCAL SERVICE

a: This was an easy fix.

1. Open IIS (Internet Information Services Manager),
2. Click on the Server Name on the left
3. In the middle pane, scroll down to the bottom, double-click "Management Service"

1. Check the box to (X) Enable remote connections
2. On the SSL certificate field, simply use the dropdown to select the default certificate already on the system
3. In the right pane | click Apply
4. In the right pane | click Start
4. That fixes it

TCP Port 8172 on Server 2008

q: While configuring ARR (Microsoft's Application Request Routing Service) the application requires connection to Server Farm members over tcp port 8172.  Using the command "netstat -ano | find ":8172" we confirmed the server farm members were not already listening on port 8172.
a: We discovered port 8172 is associated with WMSVC the "Web Management Service".

iConcept Wireless Keyboard New Batteries

Q: A customer called today with an iConcept Wireless keyboard. They had recently changed the batteries and could no longer connect to the computer.
A: It was as easy as unplugging the USB dongle and with the new batteries in the keyboard and the keyboard nearby, plug the USB dongle back in.  After a few moments the keyboard started working again.
Ref: http://www.sakar.com/images/resources/download-manual/62150N.pdf

Recover an Accidentally Closed Tab in Chrome

Q: I just closed a tab in Chrome and didn't want to, what do I do?
A: To quickly recover a recently closed tab in Chrome, simply hit "Ctrl+Shift+T"

Recover Deleted Public Folder from Exchange 2003

Q: Customer contacted us to say that a public folder with over 1,000 items had vanished.
A: We were able to recover it as a deleted item using Outlook.

1. Open Outlook
2. Navigate to Public Folders
3. Click the parent folder deleted folder
4. Click Tools, "Recover Deleted Items" 
5. 
6. It showed the folder that had been deleted.
7.  
8. Select the folder, click the second icon in the toolbar "Recover Selected Items"

We found this link on Google and it has a much more details explanation of Exchange settings etc.