You can't get your Cisco ASA to work with CenturyLink's GPON DSL product on a cisco ASA 5506

So CenturyLink has a new product called GPON.  It is delivered via a DSL modem connected to an Adtran TA324 which is connected via Fiber to their backbone.  The service utilized PPPOE however I couldn't make this work to save my life.

Turns out, you have to tage VLAN 201.  On an ASA 5506 / 5512 this is how you do it-

interface GigabitEthernet1/2
 description Connection to Clink GPON DSL
 no nameif
 no security-level
 no ip address
!
interface GigabitEthernet1/2.201
 vlan 201
 nameif outside
 security-level 0
 pppoe client vpdn group Qwest
 ip address pppoe setroute

You have one user who continuously gets "Outlook cannot log on. Verify you are connected to the network and using the proper server and mailbox name." with Exchange 2013

You have one user who continuously gets "Outlook cannot log on.  Verify you are connected to the network and using the proper server and mailbox name." with Exchange 2013.  Blowing away their outlook or even machine profile doesn't resolve it.



On the Exchange server, restart the Microsoft Exchange RPC Client Access service.

How to easily find where an AD Object or User is located and what it's Distinguished Name is

I'm often asked how to easily find an AD object or how to find it's ldap distinguished name.  It's easy.  Just run-

dsquery user –name account_name

How to check attachment limits in Exchange

get-transportconfig | ft maxsendsize, maxreceivesize 
get-receiveconnector | ft name, maxmessagesize 
get-sendconnector | ft name, maxmessagesize 
get-mailbox Administrator |ft Name, Maxsendsize, maxreceivesize

How to add a user to a Public Folder including all Subfolders in Exchange 2010 / 2013

Get-PublicFolder –Identity “\Public Folder” –Recurse | Add-PublicFolderClientPermission –User UserName –AccessRights PublishingAuthor


To remove a user from all public folders-

Remove-PublicFolderClientPermission -Identity "\" -User UserName

Cisco Anyconnect does not work after upgrading to 9.4 or 9.5.

The issue is that 9.4 and above which requires configuring custom ciphers in order to user third party CA certs for Anyconnect.  

ssl cipher tlsv1.2 custom "AES256-SHA:AES128-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DES-CBC3-SHA:DES-CBC-SHA:RC4-SHA:RC4-MD5"

Here’s the 9.4 release notes that detail the issue - http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/release/notes/asarn94.html

How to get a list of the last time users changed passwords and if they are set for their passwords to never expire.

Open PowerShell, type-

 get-aduser -filter * -properties passwordlastset, passwordneverexpires |ft Name, passwordlastset, Passwordneverexpires

To Export to CSV-
Get-ADUser -filter * -properties passwordlastset, passwordneverexpires | sort-object name | select-object Name, passwordlastset, passwordneverexpires | Export-csv -path c:tempuser-password-info-20131119.csv


For enabled only-
get-aduser -filter 'enabled -eq $true'  -properties passwordlastset, passwordneverexpires |ft Name, passwordlastset, Passwordneverexpires

To see an accounts creation date-

Get-ADUser <UserName> -Properties whenCreated | Format-List Name,whenCreated