Отключаем Recieve Window Auto-Tuning в Windows 7/Server 2008

посмотреть настройки

netsh interface tcp show global

отключить

netsh int ip set global autotuninglevel disabled

сертификат для Kaspersky Security 8.0 (самоподписанный)

ключ .klmsui.key
запрос
openssl req -new -key .klmsui.key -out klmsui.csr
сертификат
openssl x509 -req -days 365 -in klmsui.csr -signkey .klmsui.key -out .klmsui.crt

service httpd restart

Удаление хранилища

/opt/kaspersky/klms/bin/klms-control --backup --query --mass-remove

/opt/kaspersky/klms/bin/klms-control -b --query --mass-remove --limit 6000

/opt/kaspersky/klms/bin/klms-control --backup --statistics
/opt/kaspersky/klms/bin/klms-control --backup –-remove --rule-id 3

Opportunistic Locking and Read Caching on Microsoft Windows Networks

Disabling Oplocks on Windows Client PCs
To disable oplocks on a Windows client PC (a Windows PC that accesses an embedded database table hosted on another PC), change or add the following Registry values:

• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MRXSmb\Parameters OplocksDisabled = 1

Disabling Oplocks on Windows Servers
To disable oplocks on a Windows server (a Windows PC that hosts an embedded database table accessed from another PC), change or add the following Registry values:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters EnableOplocks = 0

Disabling Oplocks on SMB2 and SMB3
Oplocks cannot be turned off for SMB2 and SMB3. You can disable SMB2 and SMB3 themselves, how to do so is documented by Microsoft in Knowledge Base article 2696547.
According to that article, SMB2 and SMB3 can be disabled on Windows operating systems that support these.
To disable SMB2 and SMB3 on a Windows Vista, 7, 8, Server 2008 or Server 2012 PC hosting embedded database tables, change or add the following Registry value:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters SMB2 = 0

Once SMB2 and SMB3 are disabled, SMB1 should be re-enabled to be used again and the methods described above applied to disable oplocks for SMB1.
To re-enable SMB1 on a Windows Vista, 7, 8, Server 2008 or Server 2012 PC hosting embedded database tables, change or add the following Registry value:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters SMB1 = 1

источник

На клиенте
So, for troubleshooting purposes, mostly in an environment that has mixes operating systems, you might want to consider disabling SMB 2.0. You need to do so on both the “client” and the “server” operating systems. To disable SMB 2.0 for Windows Vista or Windows Server 2008 systems that are the “client” systems run the following commands:

sc config lanmanworkstation depend= bowser/mrxsmb10/nsi sc config mrxsmb20 start= disabled

1 2	sc config lanmanworkstation depend= bowser/mrxsmb10/nsi sc config mrxsmb20 start= disabled

Note there’s an extra ” ” (space) after the “=” sign.
To enable back SMB 2.0 for Windows Vista or Windows Server 2008 systems that are the “client” systems run the following commands:

sc config lanmanworkstation depend= bowser/mrxsmb10/mrxsmb20/nsi sc config mrxsmb20 start= auto

1 2	sc config lanmanworkstation depend= bowser/mrxsmb10/mrxsmb20/nsi sc config mrxsmb20 start= auto

Again, note there’s an extra ” ” (space) after the “=” sign.

источник

Включить и Выключить Интерфейс на CISCO

Простые примеры того, как поднимать и тушить интерфейсы на устройствах CISCO с помощью команд shutdown и no shutdown.

Включить Интерфейс на CISCO

Выполните следующие команды для включения интерфейса на свиче или роутере CISCO :


# enable
# configure terminal
(config)# interface FastEthernet 0/1
(config-subif)# no shutdown
(config-subif)# end
# write

Для отображения статуса интерфейса, выполните 'show interfaces status' :
# show interfaces FastEthernet 0/1 status
Port Name Status Vlan Duplex Speed Type
Fa0/1 connected 15 full 100 10/100BaseTX

Выключить Интерфейс на CISCO

Выполните следующие команды для выключения интерфейса на свиче или роутере CISCO :
# enable
# configure terminal
(config)# interface FastEthernet 0/1
(config-subif)# shutdown
(config-subif)# end
# write

Для отображения статуса интерфейса, выполните 'show interfaces status' :
# show interfaces FastEthernet 0/1 status
Port Name Status Vlan Duplex Speed Type
Fa0/1 disabled 15 full 100 10/100BaseTX

ссылка

KeePass

1) Советы по настройке и оптимизации работы менеджера паролей KeePass

2) Советы по настройке и оптимизации работы менеджера паролей KeePass

плагины

Импорт из FF  плагин -  Firefox-KeePass-Importer 

Интеграция с FF - 

 

 

VMWARE vCenter 5.1 просрочен пароль admin@System-Domain

Cause:

 This issue occurs when the Admin@system-domain password has expired, the default is 365 days.

Подключится к базе через  SQL Server Management Studio Express

To connect to the vCenter Server database using SQL Server Management Studio Express:

1. Start  SQL Server Management Studio Express.
2. If the Connect to Server dialog does not appear, click File > Connect Object Explorer.
3. Enter .\VIM_SQLEXP in the Server Name field.
   
   Note: The default instance name is VIM_SQLEXP .
   
   
4. Click Connect.

 

Resolution:

To resolve this issue, increase the MAX_LIFE_SEC column in the dbo.IMS_AUTHN_PASSWORD_POLICY table.
To increase the MAX_LIFE_SEC column:.

1. Stop the SSO service.
2. Login to SQL Management Studio.
3. Go to the RSA database.
4.  Expand the Tables and highlight the dbo.IMS_AUTHN_PASSWORD_POLICY table.
5. Right click and choose Edit Top 200 Rows.
6. Scroll over to the MAX_LIFE_SEC column. The default setting is 31536000seconds (365 days).
7. Increase this value (for example, 32400000, this equals 375 days).
8. Restart the SSO service.
9. Once the service has started login to the Web Client with admin@system-domain:
10. Navigate to Administration > Configuration.
11. Click the Policies tab.
12. Click Edit.
13. Change maximum lifetime to 0 (never expire) or increase the value (in days) if required.

---

Reference: Logging in to the Web Client using admin@system-domain fails with the error: associated users password is expired. 

PowerShell скрипты, примеры

Импорт из CSV-файла TechNet

PS >  gc F:\importcsv.csv
UPN;SamA;Name;City;Department;Title;Email;Ou;Tel;organiz
vsherbachenko@cb.npo;vsherbachenko;Щербаченко В.П;Химки;968;Ведущий специалист ОАО;vpshch@cb.npo;cb.npo/dep/968;28-50;Н
ПО
PS >  Import-Csv F:\importcsv.csv -Delimiter ";"


UPN        : vsherbachenko@cb.npo
SamA       : vsherbachenko
Name       : Щербаченко В.П
City       : Химки
Department : 968
Title      : Ведущий специалист ОАО
Email      : vpshch@cb.npo
Ou         : cb.npo/dep/968
Tel        : 28-50
organiz    : НПО

Powershell Добавить пользователей из списка в группу Active Directory

Import-module ActiveDirectory
$GroupName = MyUsersGroup
Import-CSV "C:\Scripts\Users.csv" | % { Add-ADGroupMember -Identity $GroupName -Member $_.UserName }