BYOD – Manage company data using Office 365 Mobile Management feature (Without third party application)

BYOD – Manage company data using Office 365 Mobile Management option (Without third party application).

Applicable to : Windows 8,8.1, 10 Mobile devices, Android, IOS smart phones.

Pre-requisites : Office 365 Enterprise tenant subscription.

Scenario: – Now a day’s most of the companies are offering BYOD (Bring Your Own Device) feature to employees, where they can configure the company email accounts on their own smart phones,

In this scenario, I will be guiding you how to put restrictions on those smartphones where company email account is configured, Restrictions means (Disabling the screenshots, Disable copy/paste.

Follow below steps to achieve the requirement.

Login to Office 365 Admin center and click on Mobile Management option.

1

Click on Mobile Device security policies and access rules,

Before creating policies, enable user for BYOD option, (Create a security group and add user to that group)

In my example, I have created a “Screenshot_Block_Sec Grp” Security group and added user to this group.  Click on new policy

2

Give appropriate policy name (Based on their roles you can restrict the rights)

3

4

Select appropriate option based on your company requirement,

5

In this scenario, I am selecting Block Screen capture (it will restrict users to take the screenshots on that device).

Add the Security group which you have created for this policy, I have added Screenshot Block security group, and added user to this group. Click on Add and Close,

6

Verify the rules and click Finish to Enable the rule.

7

If user already enrolled device, They will get Pop-up like “Your administrator has updated the policy”

If prompts, type password and proceed,

For new enrollment,

Windows Phone

Go to Settings –> Add Workplace or School Account under Email and Accounts (Win 10 Device) or Work Access

8

For Windows 8 / 8.1 Settings –> Workplace –> Click on Enroll –-> Provide Valid email ID,

9

10

11

12

Now your account is enrolled with MDM successfully, It may take some time to affect all policies.

Now this will prompt you to type your password, enter the valid password and click on Next

Once verification is done, it will take few minutes to sync the applied policies, If your device not configured with password, It will prompt you to set the password,

13

Also you can see that, Screenshot is disabled by company policy.

14

For some policies, you may get pop-up for Restart the mobile, and policies will apply after restart.

15

If User lost the device, Admin can wipe / partial wipe the device remotely.

Select the appropriate device, and click on Full Wipe ( This will be set to factory restore setting), Selective Wipe (This will erase company data and it will not erase any of your personal data).

16

If you forgot or mobile locks with bad password, Admin can Reset the password and which can be used for unlocking the device.

Hope this article is useful to explore few features of Office 365.

 

Posted in AD, General, Manjunath Sullad, Mobile, Server, Windows | Tagged , , , , , , , , , , , , | Leave a comment

Unable to install MSU hotfix, Microsoft Update Standalone Package (MSU)

Scenario : You might faced the issue with installing recommended MSU hotfix, During installation you might get error like ” The Update is not applicable to your Computer”.

Unable to install MSU patches

Error during Installation.

I have followed below steps to fix the issue,

Using MSU package some of the hotfix will not install (You will get error during installation), We need to extract the “cab” file from MSU package, then you can install the “cab” files for respective hotfix.

Below example will show you, How to extract CAB file from MSU package and how to install the cab file hotfix.
Applicable to : Windows Server 2003,2008, 2012 Series / Win7,8.1, Win 10.

1. Download and save required MSU file from Microsoft site.

2. run below command from elevated command prompt to expand the MSU package, (In my example I am extracting KB3133431 , Which is saved on C:\Temp)

expand _f:* “C:\Temp\KB3133431.msu” C:\Temp\KB3133431

(Extracting KB3133431.msu files to C:\Temp\KB3133431 folder)

Expand
3. Now these files are extracted to C:\Temp\KB3133431

Extracted Cab and Supporting files

4. To install .CAB file. Run from elevated command prompt.

Syntax : DISM.exe /Online /Add-Package /PackagePath:Path_Of_The_cab_file.cab
Ex : DISM.exe /Online /Add-Package /PackagePath:c:\Temp\KB3133431\KB3133431.cab

Installation results will be displayed on same window.

That’s it..!! Verify installed hot fix / patch from Update history.

Posted in General, Manjunath Sullad, Server, Windows | Tagged , , , , | 1 Comment

How can I find / create short path for Windows folders (Directories)

How can I find / create short path for Windows folders (Directories).

Problem / Issue : Some of the applications wont install due to space in the folder path (Eg : Program Files) or it will not install of solder path has ” ” or Installation path is too long to install.
Solution : By default Windows has feature to Crete short path for folders to resolve these type of issues.

To check the this feature is enabled or disabled.
Run below command in administrative command prompt.

                                        fsutil 8dot3name query

8dot3name status

If you get response like “Registry state is 0” then its enabled.
If you get response like “Registry state is 1” then its disabled.

To enable this feature (Reboot not required) – Run from Admin command prompt
                                            fsutil behavior set disable8dot3 0

Enable to create Shortpath

To disable this feature (Reboot not required) – Run from Admin command prompt
                                    fsutil behavior set disable8dot3 1

Disable to create Shortpath
To view the existing Short path names on drive /forlders

Open command prompt and go to the directory which you want to know the short path.

type :                                                      dir /x

This command will show the existing short paths.

View existing shortpaths
To create new short path for folder,

(In this example I am creating short name for c:\Temp folder)

Syntax :              fsutil file setshortname <Path> <Shortname>

Ex :                           fsutil file setshortname c:\temp tp

<Short name for Temp folder is TP>

New short path

to verify the the created short path

dir /x

 

Hope this blog will help you to resolve installation error due to short-name is not configuring.

Posted in Desktop, General, Manjunath Sullad, Server, Windows | Tagged , , , , , , , , , , | 7 Comments

Unable to install SQL 2008 on Windows Server 2012 Failover Cluster

Unable to install SQL 2008 on Windows Server 2012 Failover Cluster.

Scenario : If you are trying to configure SQL 2008 Cluster on Windows 2012 / 2012 R2 Clusters, You may get below errors during installation.

SQL Error 1

SQL Error 1

SQL Error 2

SQL Error 2

SQL Error 3

SQL Error 3

If you refer the Event logs / Cluster Logs / SQL Installation logs, You might get below logs for troubleshooting.

Event Logs :
The system failed to register pointer (PTR) resource records (RRs) for network adapter
with settings, Event ID : 8013, 1014

Note : ipconfig /registerdns will fail if you try to update manually, But it will fails with above event ID’s.

Cluster Logs :
Cluster network name resource ‘Cluster Name’ failed registration of one or more associated DNS name(s) for the following reason:
The handle is invalid. Ensure that the network adapters associated with dependent IP address resources are configured with at least one accessible DNS server.

Cluster network name resource ‘Cluster Name’ encountered an error logging on to the domain. The reason for the failure was:
‘Unable to logon to the computer object CNONAME$’. The error code was ‘1073741717’.
Ensure that a domain controller is accessible to this node within the configured domain.

Cluster network name resource ‘CLUSTER RESOURCE’ failed registration of one or more associated DNS name(s) for the following reason:
The handle is invalid. Ensure that the network adapters associated with dependent IP address resources are configured with at least one accessible DNS server.

SQL Installation Logs :

Cluster_IsOnline
Verifies that the cluster service is online. Failed The SQL Server failover cluster services is not online, or the cluster cannot be accessed from one of its nodes. To continue, determine why the cluster is not online and rerun Setup. Do not rerun the rule because the rule cannot detect a cluster environment.

Cluster_SharedDiskFacet
Checks whether the cluster on a computer has at least one shared disk available. Failed The cluster on this computer does not have a shared disk available. To continue, at least one shared disk must be available.

Cluster_VerifyForErrors
Checks if the cluster has been verified and if there are any errors or failures reported in the verification report. Failed The cluster either has not been verified or there are errors or failures in the verification report. Refer to KB953748 or SQL Server Books Online for more information.

 

Resolution :   Simple PowerShell command fixed my issue, Finally able to install SQL 2008 on Server 2012 R2.

(Run PowerShell in Administrator mode)

Install-WindowsFeature -Name RSAT-Clustering-AutomationServer

 

Posted in General, Manjunath Sullad, Server, Windows | Tagged , , , , , , , , , , , , , , , , | 1 Comment

Nano Server.!!

All about Microsoft’s Nano Server !
http://goo.gl/Wjuw98
http://goo.gl/1bvnek
http://goo.gl/O4GdQj

Posted in General, Manjunath Sullad, Server, VMWare, Windows | Tagged , , , , | Leave a comment

Free..!! Microsoft Technology E-Books

Good News…!!!

Here is the link to learn and download free E-Books from Microsoft for all MS products adn Technologies. 🙂

Short URL : http://tinyurl.com/oh8kejr

http://blogs.msdn.com/b/mssmallbiz/archive/2015/07/07/i-m-giving-away-millions-of-free-microsoft-ebooks-again-including-windows-10-windows-8-1-windows-8-windows-7-office-2013-office-365-sharepoint-2013-dynamics-crm-powershell-exchange-server-lync-2013-system-center-azure-clo.aspx

Happy Learning. !

Posted in General, Manjunath Sullad, Server, Uncategorized, Windows | Tagged , , , , , | Leave a comment

Identify NTFS Partition creation date

Identify NTFS Partition / Drive creation date
Applicable to : Windows servers / Windows client operating systems.
If you would like to know, When your partion drive has been created on Windows servers,
Simple metod is to look for folder called “System Volume Information” on drive.
If you used third-party tool like Veritas Storage foundation, You can get the required details from Veritas logs.
Windows Explorer, Open disk (Ex : D:\), Check “System Volume Information” when this folder has been created,
If you are unable to view this folder, You need to enable Hide files and folders (Uncheck Hide Protecting Operating system files) Apply  OK.
Posted in Desktop, General, Manjunath Sullad, Server, Windows | Tagged , , , | Leave a comment