How to Change FreePBX ARI Password

Issue:

On the FreePBX dashboard, you are getting a security warning that says “Action Required: Change ARI Username/Password”.

Solution:

  • From within FreePBX, go to Settings > Advance Settings
  • Set “Display Readonly Settings” and “Override Readonly Settings” to “YES” then submit.
  • If the red Apply button appears, click it to apply changes.
  • Find the “ARI Username” on the settings page.
  • Change both the username and the password to values of your choosing, and then click Submit (and Apply if necessary).
  • Now the security warning should disappear from the Dashboard.

How to Transfer Active Directory FSMO Roles Using Ntdsutil

Introduction

In an Active Directory (AD) environment, the FSMO roles are critical for the proper functioning and maintenance of the domain. When you introduce a new domain controller into an existing domain or need to move these roles to another domain controller, there are several methods you can use to accomplish this. In my experience, the easiest method is to use the ntdsutil program for this taks. Here is a step-by-step guide on how to do that.

Prerequisites

You must have a new domain controller already installed and joined to the domain.
You should be logged in with an account that is a member of the Domain Admins group or Enterprise Admins group.

Step 1: Open Command Prompt with Administrative Privileges

To start the process, open a Command Prompt with administrative privileges on the domain controller to which you want to transfer the FSMO roles.

Step 2: Accessing ntdsutil

Ntdsutil is a command-line tool designed for managing Active Directory. To access it, follow these steps:

Type ntdsutil in the Command Prompt and press Enter.
Type roles and press Enter.
Type connections and press Enter.

Step 3: Connect to the Domain Controller

Now, you need to connect to the domain controller you want to transfer the FSMO roles to:

Type connect to server <NewDomainControllerName> and press Enter.
(Replace <NewDomainControllerName> with the actual name of the new domain controller.)

Type q and press Enter to return to the previous menu

Step 4: Transferring FSMO Roles

With the connection established to the new domain controller, you can now proceed to transfer the FSMO roles. There are five FSMO roles, and we will transfer them one by one. Run each of the following commands, pressing ENTER after each one, and clicking to confirm each one when prompted:

transfer schema master
transfer naming master
transfer rid master
transfer pdc
transfer infrastructure master

Step 5: Verifying FSMO Role Transfer

After transferring all the roles, you can verify the transfer to ensure it was successful. To do this:

Type q and press Enter to exit the FSMO role management.
Type q again and press Enter to exit ntdsutil.

Step 6: Confirm that the roles have been transferred

Now, let’s confirm that the new domain controller has become the owner of the transferred FSMO roles:

Open a Command Prompt with administrative privileges on the new domain controller.
Type netdom query fsmo and press Enter.
This command will display the current FSMO role owners, and you should see the new domain controller listed as the owner for each role.

FreePBX: How to send emails through Office365

If you’ve tried to configure the FreePBX phone system to send emails through a Office365 account, you probably ran into a few roadblocks. There are a number of ways to work around these issues, but this post describes the method I have found to be the easiest.

First, identify an existing Office365 account that will be used to relay the email messages, or create a new one for that purpose. For example purposes, we’ll assume this account has an email address of johndoe@example.com.

Under Admin >System Admin > Email Setup, set the following options:

  • SMTP Server: Use External SMTP Server
  • My Hostname: leave as default (blank is fine)
  • My Origin: leave as default
  • My Domain: leave as default
  • Provider: Office 365
  • Username: johndoe@example.com
  • Password: (enter the password for the email account)

Under Settings > Voicemail Admin > Settings > Email Config, set Server Email option to johndoe@example.com.
Note: this step may or may not be required. The system doesn’t seem to actually honor this setting. If it did, the following steps would not be necessary.

Add these lines to the end of the file /etc/postfix/generic. This is not accessible from the GUI, so you’ll need to do it from the command line. I usually sign in using Putty or WinSCP so you can just modify the text to suit you and then past it in.

root johndoe@example.com
root@localhost johndoe@example.com
root@localhost.localdomain johndoe@example.com
root@freepbx johndoe@example.com
root@freepbx.localdomain johndoe@example.com
asterisk johndoe@example.com
asterisk@localhost johndoe@example.com
asterisk@localhost.localdomain johndoe@example.com
asterisk@freepbx johndoe@example.com
asterisk@freepbx.localdomain johndoe@example.com
vm@asterisk johndoe@example.com

Add the following to the end of the file /etc/postfix/main.cf
smtp_generic_maps = hash:/etc/postfix/generic

Then run these two commands:
postmap /etc/postfix/generic
service postfix restart

That’s it! The FreePBX system now be able to send emails.

 

What laptop should I buy in May 2021

Note: please check the date of this post. If it is more than a month or two old, check my main blog page to see if I’ve posted more recent recommendations.

One of the most common questions I get from customers and friends is, what laptop should I purchase? Since the answers are usually the same for everyone, here are my recommendations. But before I dive into the specs, there are a few important points to mention:

First, this article is for those looking for a Windows laptop. There is nothing wrong with purchasing an Apple product, but I don’t have experience with them and cannot give good purchase advice. The other option when purchasing a laptop is a Chromebook, which runs Google’s Chrome OS. If you intend to use your laptop only for email and web browsing, a Chromebook may be a good choice that can save you money. Just keep in mind you cannot install Windows software on a Chromebook.

Secondly, keep in mind that this article is aimed at a typical user that is not doing anything too demanding. If you’re looking to do a lot of gaming, computer aided designing (CAD), or video editing; you will probably want something that exceeds the specs mentioned below.

Touchscreens

Some buyers incorrectly assume that all new laptops come with touchscreens. That is not the case. Many models do not have touchscreens, and many computer users see no practical use for a touchscreen on a laptop. If you want a touch screen, just be sure you look for that as you shop. If it isn’t mentioned in the specs, it probably doesn’t have one.

Optical drives (DVD and CD)

Most new laptops do not come with optical drives. If you need that, make sure you pay close attention to that as you shop. You can also purchase an external DVD drive that plugs in to the USB port if you need one occasionally.

Brands

I always encourage customers to stick with popular brands and models. That way, if you need to get it repaired there is a greater chance of parts availability.  I prefer HP, Dell, and Lenovo in no particular order. Among those three brands, I just look for the best prices and features.  Acer is another popular brand that I’ve seen a few more problems with. In some cases you can get an Acer for cheaper than the other brands, but if there is not a significant savings, I’d stay away. I have little experience with other brands such as Asus or Samsung, so I cannot offer a solid opinion on those.

Solid State Drive

The days of computers having a crash-prone hard drive spinning at 7200 rpm inside are going away. Instead, most new computers come with an SSD or Solid State Drive for storage, which are much faster. But you need to be careful, because there are still some computers that sell with a mechanical (spinning) hard drive. If it doesn’t specifically state that it has an SSD or Solid State Drive, it probably doesn’t have one, and you should not buy it.

Microsoft Office (Word, Excel, etc)

I still get people who assume that Windows includes licensed versions of Word and Excel. Windows does not include those programs, and this is true regardless of whether you get Windows 10 Home or Windows 10 Pro. All you’ll normally get are trial versions. If you want to continue to use them, you’ll have to pay extra for them. You can either pay Microsoft a subscription fee to use them (Office 365 or Microsoft 365), or you can make a one-time purchase. Some computer sellers (Dell, for example) let you purchase Microsoft Office with the computer, but the fact remains that it is a separate product and will cost you extra. Many users (myself included) find that LibreOffice.org, a free alternative to Microsoft office, suits their needs just fine.

The Details

Here are the specs you should look for:

  • Processor: An Intel i5 or better, or an AMD Ryzen 5 or better. If you’re trying to get something very inexpensive and don’t mind it being a little slower, you can probably get by with an Intel i3 or AMD Ryzen 3.
  • RAM: At least 8 GB. If you can find one with 12 or 16 GB in your price range, go for that instead.
  • Storage: At least 250 GB, and again, make sure it is an SSD. If you’re going to be working with video or tons of photos (like 10s of thousands of photos), you may want 512 GB instead.
  • Windows 10. Obviously, most computers some with Windows, but make sure it says so. Also, if you are using the computer in a business, keep in mind that you will likely need Windows 10 Pro. If you get one that just says “Windows 10” or “Windows 10 Home”, you’ll need to pay $99 after the fact to upgrade it to Pro. If you’re a home user or a business user that doesn’t have a server, you can probably get by with the Home version.

Links

Below are some links to some good laptop deals on Amazon. Keep in mind that the prices are subject to change, so I’ve listed the prices and specs beside the links so you can determine if something has changed with the Amazon listing after these links were posted. These links are affiliate links, so I may earn a commission when you purchase one of these. You can also find good deals at retails stores. Just take along a printed copy of the specs above to help you make the right choice.

Lenovo – i5 – 8 GB RAM – 256 GB SSD – $557.99
https://amzn.to/2SwxNWE

Lenovo – i5 – 12 GB RAM – 256 GB SSD – $588.49
https://amzn.to/3d3jrVq

HP – Ryzen 5 – 8 GB RAM – 512 GB SSD – $606.35
https://amzn.to/3wIwFP9

HP – Ryzen 5 – 12 GB RAM – 256 GB SSD – $629.90
https://amzn.to/3uDy2g6

 

What laptop should I buy in April 2021?

Note: please check the date of this post. If it is more than a month or two old, check my main blog page to see if I’ve posted more recent recommendations.

One of the most common questions I get from customers and friends is, what laptop should I purchase? Since the answers are usually the same for everyone, here are my recommendations. But before I dive into the specs, there are a few important points to mention:

First, this article is for those looking for a Windows laptop. There is nothing wrong with purchasing an Apple product, but I don’t have experience with them and cannot give good purchase advice. The other option when purchasing a laptop is a Chromebook, which runs Google’s Chrome OS. If you intend to use your laptop only for email and web browsing, a Chromebook may be a good choice that can save you some money. Just keep in mind you cannot install Windows software on a Chromebook.

Secondly, keep in mind that this article is aimed at a typical user that is not doing anything too demanding. If you’re looking for a gaming computer to help you waste your time, don’t read any further. Find somebody who actually plays computer games to see what kind of computer you should get. Also, if you do a lot of computer aided designing (CAD) or video editing, you will probably want something that exceeds the specs mentioned below.

Touchscreens

Some people incorrectly assume that all new laptops come with touchscreens. That is not the case. Many models do not have touchscreens, and many computer users see no practical use for a touchscreen on a laptop. If you want a touch screen, just be sure you look for that as you shop. If it isn’t mentioned in the specs, it probably doesn’t have one.

Optical drives (DVD and CD)

Most new laptops do not come with optical drives. If you need that, make sure you pay close attention to that as you shop. You can also purchase an external DVD drive that plugs in to the USB port if you need one occasionally.

Brands

I always encourage customers to stick with popular brands and models. That way, if you need to get it repaired there is a greater chance of parts availability.  I prefer HP, Dell, and Lenovo in no particular order. Among those three brands, I just look for the best prices and features.  Acer is another popular brand that I’ve seen a few more problems with. In some cases you can get an Acer for cheaper than the other brands, but if there is not a significant savings, I’d stay away. I have little experience with other brands such as Asus or Samsung, so I cannot offer a solid opinion on those.

Solid State Drive

The days of computers having a crash-prone hard drive spinning at 7200 rpm inside are going away. Instead, most new computers come with an SSD or Solid State Drive for storage, which are much faster. But you need to be careful, because there are still some computers that sell with a mechanical (spinning) hard drive. If it doesn’t specifically state that it has an SSD or Solid State Drive, it probably doesn’t have one, and you should not buy it.

Microsoft Office (Word, Excel, etc)

I still get people who assume that Windows includes licensed versions of Word and Excel. Windows does not include those programs, and this is true regardless of whether you get Windows 10 Home or Windows 10 Pro. All you’ll normally get are trial versions. If you want to continue to use them, you’ll have to pay extra for them. You can either pay Microsoft a subscription fee to use them (Office 365 or Microsoft 365), or you can make a one-time purchase. Some computer sellers (Dell, for example) let you purchase Microsoft Office with the computer, but the fact remains that it is a separate product and will cost you extra. Many users (myself included) find that LibreOffice.org, a free alternative to Microsoft office, suits their needs just fine.

The Details

Here are the specs you should look for:

  • Processor: An Intel i5 or better, or an AMD Ryzen 5 or better. If you’re trying to get something very inexpensive and don’t mind it being a little slower, you can probably get by with an Intel i3 or AMD Ryzen 3.
  • RAM: At least 8 GB. If you can find one with 12 or 16 GB in your price range, go for that instead.
  • Storage: At least 250 GB, and again, make sure it is an SSD. If you’re going to be working with video or tons of photos (like 10s of thousands of photos), you may want 512 GB instead.
  • Windows 10. Obviously, most computers some with Windows, but make sure it says so. Also, if you are using the computer in a business, keep in mind that you will likely need Windows 10 Pro. If you get one that just says “Windows 10” or “Windows 10 Home”, you’ll need to pay $99 after the fact to upgrade it to Pro. If you’re a home user or a business user that doesn’t have a server, you can probably get by with the Home version.

Links

Below are some links to some good laptop deals on Amazon. Keep in mind that the prices are subject to change, so I’ve listed the prices and specs beside the links so you can determine if something has changed with the Amazon listing after these links were posted. These links are affiliate links, so I may earn a commission when you purchase one of these.

Dell – Ryzen 5 – 8 GB RAM – 256 GB SSD – $499.98
https://amzn.to/3dJFYWs

HP – i5 – 8 GB RAM – 256 GB SSD – $571.99
https://amzn.to/3t8S5Ti

Lenovo – i5 – 12 GB RAM – 256 GB SSD – $573.80
https://amzn.to/3d3jrVq

HP – Ryzen 5 – 8 GB RAM – 512 GB SSD – $599.93
https://amzn.to/3wIwFP9

HP – Ryzen 5 – 12 GB RAM – 256 GB SSD – $614.99
https://amzn.to/3uDy2g6

 

How to disable the lock screen in Windows 10

The following registry patch will disable the lock screen in Windows 10. After applying this patch, your computer will boot directly to the sign-in prompt. The download is a ZIP file, so you’ll need to extract it before you can merge the .reg file into your registry.  This file comes without warranty – use at your own risk.  If you want to disable the background image on the sign-in screen, I’ve created a post about that as well.

Download: Win10_DisableLockScreen.zip

How to remove the sign-in background image in Windows 10

The following registry patch will remove the background image from the Windows 10 sign-in screen. The download is a ZIP file, so you’ll need to extract it before you can merge the .reg file into your registry.  This file comes without warranty – use at your own risk.  If you want to disable the lock screen (the screen that displays before the sign-in screen), I’ve created a post about that as well.

Download: Win10_DisableLoginBackground.zip

 

Registry Tweak: Display standard desktop icons in Windows 10

The following reg file will cause the standard desktop icons to be displayed in Windows 10.  These icons include This PC, Network, Control Panel, and the user’s home folder. You can also configure these icons to display in the Themes settings, but  sometimes when you’re signed in as a domain administrator, you are not able to access those settings. The download is a ZIP file, so you’ll need to extract it before you can merge the .reg file into your registry.  This file comes without warranty – use at your own risk.

Download: Win10_Add_All_Std_Desktop_Icons.zip

Note:  In most cases after applying the registry patch, you must press F5 to refresh the desktop before the icons will appear.  In rare cases a computer restart is required before they show up.

Windows 10: How to fix Error Code 0x800F081F when installing .NET Framework 3.5

Problem

When you select to install .NET Framework in the Windows Features list in the Control Panel, it does not complete. After asking if you’d like to use Windows Update, it then gives you an error code 0x800F081F

Solution

  • Insert Windows 10 installation CD or mount the ISO
  • Open an administrator command prompt
  • Type the following command (substitute correct drive letter)
    Dism /online /enable-feature /featurename:NetFx3 /All /Source:D:\sources\sxs /LimitAccess

Getting USB Drive Redirection to work with LTSP, xFreeRDP, and Windows Server 2012 R2

Problem

You’re using LTSP (Linux Terminal Server Project) and xFreeRDP to allow computers to boot from the network and connect to a server running Windows Server 2012 R2.  You add the parameters in LTS.CONF to allow USB redirection, but you still cannot get the USB drives to show up.

Solution

In my experience, these are the two steps that are often missed:

Step #1: Enable sound redirection

When using LTSP to connect to a server running Windows Server 2012 or later, you MUST enable sound redirection first, or USB direction will not work. This step isn’t necessary in Windows server 2008.

For example, instead of using the following line in LTS.CONF:

           SCREEN_07 = "xfreerdp -f --no-nla --ignore-certificate --plugin rdpdr --data disk:usbdisk:/media/root --
           192.168.11.22

Use this one:

           SCREEN_07 = "xfreerdp -f --no-nla --ignore-certificate --plugin rdpsnd --data alsa -- --plugin rdpdr
           --data disk:usbdisk:/media/root -- 291.168.11.22

Obviously, you’ll want replace the IP at the end of the lines above with the IP of your own terminal server. Keep in mind that if you’re using a newer version of xFreeRDP, the format of the options may be different. There have been changes made in the later versions. More information can be found here

Step #2: Set the policy on the server

You also need to be sure you have the ‘Do not allow drive redirection’ policy disabled on the Windows terminal server. This setting is found in the group policy editor at:

Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

Once you take care of these two items, you’re typically good to go!