Tuesday 15 March 2016

Comparison of VMXNet3 vs. E1000E


I'm a big fan of VMWare and we utilise their products heavily day to day. I found the following post whilst looking for some detailed information on the various virtual network adapters available.

The results are fascinating and have prompted me to rethink existing adapter selection, as well as future.

Credit to Rickard Nobel for the post - 

http://rickardnobel.se/vmxnet3-vs-e1000e-and-e1000-part-1/

Pushing Lync phone updates to a test device


As we look to move away from SHA-1 internally, there is a need to once again update our Lync Phone edition devices, this time with the December 2015 phone edition cumulative update that provides support for SHA-2 based certificates ( https://support.microsoft.com/en-us/kb/3108721 )


The process is very simple to implement, though you'll need some patience...



First of all, you'll need to bring your updates into your Lync environment. You can't do this via the GUI so you'll need to jump into the Lync Management Shell.


The cmdlet you want is Import-CsDeviceUpdate (Technet page here)


The parameters you'll want to use are -identity , used to point the cmdlet to your pool and -FileName to point to your extracted UCUpdates.cab


Something like...


       

            Import-CsDeviceUpdate -Identity service:WebServer:lync.dshu.local -FileName C:\Updates\UCUpdates.cab

       
 
The cmdlet will take a few seconds to complete but once done, the updates should be visible within the Lync Server Control Panel > Clients > Device Update. Devices should now show a Pending Version


You can also confirm the import was successful by accessing the Lync File Share and looking inside the Device Update Store -


\\localhost\lyncshare\1-WebServices-1\DeviceUpdateStore\UCPhone\POLYCOM\CX600\Rev-6\ENU\4.0.7577.4487\CPE


Now that your updates are imported, you can configure your test device..




  1. Open the Lync Server Control Panel
  2. Go to Clients > Test Device
  3. New > Global / Site Test Device
  4. Give the device a name that makes sense and then add the phone’s MAC address or serial number in the "Unique identifier" field
  5. Now wait...or...
The theory goes that the device will check to see if there are updates available within a minute of going idle. Once this timer is hit, the device will wait for a further 10minutes before beginning the installation - the idea being that the device is truly idle and can be updated without impacting upon a user. However, if you reboot the phone it will sign itself back in (assuming it was signed in), lock and immediately start your inactivity timer.

Logs can be found in C:\inetpub\logs\LogFiles\W3SVC and will give you an idea as to what is going on throughout the process. 


The key to having your device update as quickly as possible is to leave it alone - resist the temptation to touch it!


FYI - Updates do not need to be approved to be installed by test devices

Tuesday 1 March 2016

Deploying a Powershell script via SCCM 2012


Create your package as normal, in my example I created a package that will house all of my PS scripts. Make sure it's distributed to all of your DPs / Dist groups.

Once created, setup your package with the following program for each script - 

       

            powershell.exe -executionpolicy Bypass -nologo -noninteractive -file .\SomeScript.ps1

       
 

Et voilĂ !

PerfC Vaccination for ExPetr/Petya/NotPetya Wiper

This is a script I've written to 'vaccinate' our domain against the ExPetr/Petya/NotPetya Wiper. In short, it finds all comput...