Saturday, January 27, 2018

blogger now support https for custom domain name

blogger now support https encrypt for custom domain

all i need to do is , login to administration panel of blogger , enable costom domain in settings , basic

ignore the warning , custom domain don't support https , just save and wait for some time

back to settings , basic, once blogger is ready to enable this function , select yes in https availability and https redirect , save settings 

wait for some time when blogger to generate ssl certificate from let's encrypt , the free ssl certificate and https blog , it's done

the ssl certificate is only valid for 3 months , but it's ok  

windows server 2012 r2 kb4057903 issue and workaround

on january of 2018 , kb4057903 was released from microsoft , it is for windows server 2012r2 virtual machine guest os

if exchange 2013 or exchange 2016 was installed on windows server 2012 r2 virtual machine guest os , and try to install kb4057903 , there will be an issue
installation of kb4057903 will be fail , and when windows update ask to restart , system won't be start , and get stuck in "preparing to configure windows , do not trun off computer" screen for a long long time
when virtual machine guest os is ready to login , virtual netwrok is fail to load , there will be no any network connection

the only workaround is login into virtual machine
send control + alt + delete function key to virtual machine
start task manager
start new task from menu
type msconfig to start system configuration
on boot tab , select safe boot and click ok to reboot virtual machine guest os to safe mode

on safe mode , login with administrator account
from administrative tools menu , find services and catch screen shot for exchange services , so i know which services should start on system boot
scroll down to find msexchange service and disable all exchange service
execute msconfig command to start system configuration again , on boot tab , unckeck safe boot , and click ok to reboot virtual machine

login into virtual machine , try to install kb4057903 again , reboot virtual machine
virtual network connection should working well
from administrative tools menu , find services
check screen shot i just got and restore all exchange services state
reboot virtual machine , every thing should be working well

check this link for more information

Monday, August 22, 2016

simple note for exchange 2013 cu upgrade

1. download exchange 2013 cu from microsoft and extract
2. upgrade windows ad schema
    setup.exe /PrepareSchema /IAcceptExchangeServerLicenseTerms
    setup.exe /PrepareAD /IAcceptExchangeServerLicenseTerms
    setup.exe /PrepareDomain /IAcceptExchangeServerLicenseTerms
3. upgrade cu on front end server & reboot
4. upgrade cu on dag server
    move-activemailboxdatabase -server notupgradenow
    suspend db replication on ecp
    upgrade cu & reboot
5. resume db replication on ecp
6. move-activemailboxdatabase -server notupgrade now
    suspend db replication on ecp
    upgrade cu & reboot
7. resume db replication on ecp


Friday, July 29, 2016

plugins for fedora Linux to play mp3 music and mp4 video

fedora linux don't have official repo for multimedia plugins due to license issue
so , i need to install plugins form 3rd party repo

su -c 'dnf install$(rpm -E %fedora).noarch.rpm$(rpm -E %fedora).noarch.rpm'

dnf install gstreamer{1,}-{ffmpeg,libav,plugins-{good,ugly,bad{,-free,-nonfree}}} --setopt=strict=0

dnf install gstreamer{1,}-{plugin-crystalhd,ffmpeg,plugins-{good,ugly,bad{,-free,-nonfree,-freeworld,-extras}{,-extras}}} libmpg123 lame-libs --setopt=strict=0

Friday, May 27, 2016

arch linux installation for hp envy 13 2016 (efi mode)

I got a new laptop , hp envy 13 2016 with efi mode , here is how to install arch linux

01. hold f10 , and press power button to boot into bios , and disable secure boot , save and reboot
02. download arch linux system iso from
03. create bootable usb disk with rufus (for windows) or dd (for linux)
04. boot with usb disk
05. connect to wifi with wifi-menu
06. delete everything on disk with gdisk /dev/sda (x,z,y,y)
07. create disk partition with cgdisk /dev/sda
08. what I need is sda1 for boot (1024mb) , sda2 for swap (8GB) , sda3 for /
09. create boot and change hex code to EF00 , name it boot
10. create swap and change hex code to 8200 , name it swap
11. create / and name it root , write to disk , save and quit
12. mkfs.fat -F32 /dev/sda1
13. mkswap /dev/sda2 , swapon /dev/sda2
14. mkfs.ext4 /dev/sda3
15. mount /dev/sda3 /mnt
16. mkdir /mnt/boot/
17. mount /dev/sda1 /mnt/boot
18. edit mirrorlist and keep taiwan mirror site only with nano /etc/pacman.d/mirrorlist
19. install base system with pacstrap -i /mnt base base-devel
20. generate fstab for new system with genfstab -U -p /mnt >> /mnt/etc/fstab
21. edit fstab and add options for swap , /dev/sda2 none swap defaults,discard 0 0
22. arch-chroot /mnt
23. nano /etc/locale.gen and uncommented en_US.UTF-8
24. generate locale with locale-gen
25. setup language setting with echo LANG=en_US.UTF-8 > /etc/locale.conf
26. setup timezone with tzselect
27. link time zone file with ln -s /usr/share/zoneinfo/Asia/Taipei /etc/localtime
28. sync time with hwclock --systohc --utc
29. setup hostname with echo arch > /etc/hostname
30. regenerate initramfs image with mkinitcpio -p linux
31. install bootloader with bootctl install
32. find disk uuid for / with blkid -s PARTUUID -o value /dev/sda3
33. install intel ucode , libnl , wpa_supplicant with pacman -S intel-ucode libnl wpa_supplicant dialog
34. create bootloader entry with nano /boot/loader/entries/arch.conf
35. add these configuration to /boot/loader/entries/arch.conf
      title Arch Linux
      linux /vmlinuz-linux
      initrd /intel-ucode.img
      initrd /initramfs-linux.img
      options root=PARTUUID=result from setp 32 rw
36. exit arch chroot with exit
37. umount all with umount /mnt/boot , umount /mnt
38. reboot and it's done

Thursday, March 24, 2016

有加入windows ad domain的windows 7 , windows 8.1的電腦封鎖windows 10升級通知

首先呢,ad domain內必須先有wsus server,ad domain版本要2008 r2以上,pc當然都要先加入網域

確認windows 7 , windows 8.1的電腦不能有裝kb3035583
透過wsus派送kb3065987 (windows 7 , windows server 2008 r2適用) , kb3065988(windows 8.1 , windows server 2012r2適用)

電腦設定,原則,系統管理範本,windows元件,windows update
修改Turn off the upgrade to the latest version of Windows through Windows Update,改成已啟用

最後在wsus上將windows 7 , windows 8.1升級到windows 10相關的kb都拒絕
這樣加入網域的電腦就不會出現升級到windows 10的相關通知了

至於沒有加入網域的那些,也是有辦法不升級到windows 10
Subkey: HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
DWORD value: DisableOSUpgrade = 1
Subkey: HKLM\Software\Policies\Microsoft\Windows\Gwx
DWORD value: DisableGwx = 1

Wednesday, March 23, 2016

高解析度螢幕透過遠端桌面連線至windows server時,字體過小問題

現在的筆電螢幕解析度越來越高了,而這會造成使用高解析度筆電透過遠端桌面連線至windows server時顯示的字體非常小,難以閱讀的問題

windows server 2008 r2需要安裝kb2726399,只是要自己手動上微軟網站填email才會收到下載連結

windows server 2012 r2就是登入之後按滑鼠右鍵,選擇螢幕解析度,之後修改字形顯示比例設定,在登出,之後重新登入系統就可以看到字體明顯變大了