Comparing AADConnect Rules or How Do I Tell What Changed?

As the rule base generated by AADConnect has gotten larger and larger and a simple configuration setting change can generate multiple rules, it has become a challenge to keep track of what is going on. So when the configuration changes or there is a version upgrade, how does one tell what changed? This is not as important in a “standard” configuration but if the “standard” rules are changed by disabling rules, copying and modifying rules, or adding new rules, it is important to be aware how an upgrade handles those modifications.

Continue reading ‘Comparing AADConnect Rules or How Do I Tell What Changed?’

Exchange 2013 Cumulative Update 22 Posts Itself as CU20.

This is very strange.   The install is clearly CU22.   The setup file says it is version ‘15.0.1473.3’.   The GUI says the it’s CU22:

Continue reading ‘Exchange 2013 Cumulative Update 22 Posts Itself as CU20.’

Exchange 2010 Rollup 26 Fails with 1603 Error

Continue reading ‘Exchange 2010 Rollup 26 Fails with 1603 Error’

Creating Certificate Requests Using the Certificate Snap-in — Pitfalls and Ladders

There have been a number of changes to the security certificate world lately. Validity periods have shrunk from 5 years to 3 years and now to 2 years. SHA256 has taken over the world. Wildcard certificates have gone from risky to accepted and supported in many scenarios.  All this means we are all rekeying and deploying certificate’s a lot more. Just to make it more fun, there are more options involved. So, it is best to make the task as error free and quick as possible.

Continue reading ‘Creating Certificate Requests Using the Certificate Snap-in — Pitfalls and Ladders’

Changing a Certificate Key Type from Signature to Exchange

Switching a certificate from ‘Signature’ to ‘Exchange’, or the reverse, is fairly easy. Just use the certutil utility.

Continue reading ‘Changing a Certificate Key Type from Signature to Exchange’