Hacker - Truecrypt alternatives

You should be aware that TrueCrypt development was no longer maintained/updated  since 2014.

http://www.alessandromazzanti.com/2013/08/usb-create-usb-encrypted-with-truecrypt.html

Several security bugs have been not resolved.

You fan review this article about some alternatives that I summarize them in this article too.

https://www.comparitech.com/blog/information-security/truecrypt-is-discoutinued-try-these-free-alternatives/,.

Here they are Truecrypt alternatives (from my side I use, normally, 2. and 7. options):

1. VeraCrypt You can find a full list of improvements and corrections that VeraCrypt made on TrueCrypt here. It is open source and free.
2. Bitlocker no encrypted containers ability and not open source.
3. DiskCryptor supports encryption of external devices including hard drives, USB drives, CDs, and DVDs
4. CipherShed
5. FileVault 2 Apple’s answer to Bitlocker, no encrypted containers ability and not open source.
6. LUKS
7. SafeHouse Explorer – 3.01 Portable

About other blog articles about bitlocker you can review this link:

http://www.alessandromazzanti.com/search/label/Bitlocker

Tips - How to enable Lync feature on outlook 201x

If you need to schedule meeting giving direct web lync meetings you can proceed to enable this feature on outlook 201x following this article:

And so you will have this feature enabled.

https://support.microsoft.com/en-us/kb/2718391

Tips - Enabling Communications Diagnostics in KEPServerEX V5

If you need to enable Kepware communication diagnostic feature here is an interesting article that show how to proceed to relative activation for diagnostic purpose:

https://www.kepware.com/en-us/support/resource-library/connectivity-guides/enabling-communications-diagnostics-in-kepserverex/

Sophos - How to reinstall if when old version is unable to be uninstalled

If you have problems to uninstall old sophos version or sophos with problems you can follow these steps:

1. Uninstall any relation to Sophos AutoUpdate, Sophos Remote Management System and "Sophos Diagnostic Utility"
2. If uninstallation ask for binaries you give him this path
   
   C:\ProgramData\Sophos\AutoUpdate\Cache\sau\sophos autoupdate.msi
   
   C:\Program Files\Sophos\AutoUpdate\sau\Sophos AutoUpdate.msi
3. If net stop "sophos AutoUpdate Service"
4. Stop any Sophs services
5. Stop "almon.exe" process
6. Delete this register key HKLM\Software\Sophos
7. Start --> cmd
   sc delete savonaccesscontrol
   sc delete savonaccessfilter
   sc delete skmscan 
   sc delete savadminservice 
   sc delete savonaccess
8. net stop "sophos AutoUpdate Service"
9. sc delete "sophos AutoUpdate Service"
10. If you get error 1060 (service is not installed) you can not consider it
11. Create .reg file like in appendix
12. Delete this folders:
    C:\Program Files (x86)\Sophos\
13. Restart Server (in my case it was not necessary)
14. Reinstall Anvitivus

In case of less sophos services and differs from policies errors I followed this procedure

1.      On server/client you need to stop all sophos services (10 or 11)
2.      You must copy and overwrite all binaries from these paths:

\\xxxxxxx\SophosUpdate\CIDs\S005\SAVSCFXP

To  C:\Program Files (x86)\Sophos\AutoUpdate

3.      Reinstall AV from standard path as usually: 

\\xxxxxx\SophosUpdate\CIDs\S005\ 

APPENDIX

Windows Registry Editor Version 5.00

;Removes Basic MSI info for SAU.

;x86
;SAU 2
[-HKEY_CLASSES_ROOT\Installer\Features\BE814C515767eb242B3B829125AD10D4]
[-HKEY_CLASSES_ROOT\Installer\Products\BE814C515767eb242B3B829125AD10D4]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\BE814C515767eb242B3B829125AD10D4]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BE814C515767eb242B3B829125AD10D4]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15C418EB-7675-42be-B2B3-281952DA014D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BE814C515767eb242B3B829125AD10D4]

;SAU 3
[-HKEY_CLASSES_ROOT\Installer\Features\F132429DD20DB0E45B11CCA4E0E35D74]
[-HKEY_CLASSES_ROOT\Installer\Products\F132429DD20DB0E45B11CCA4E0E35D74]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\F132429DD20DB0E45B11CCA4E0E35D74]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F132429DD20DB0E45B11CCA4E0E35D74]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D924231F-D02D-4E0B-B511-CC4A0E3ED547}
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F132429DD20DB0E45B11CCA4E0E35D74]


;SAU 4
[-HKEY_CLASSES_ROOT\Installer\Features\C0A62DC795B948E45BEE3B682B7FAA61]
[-HKEY_CLASSES_ROOT\Installer\Products\C0A62DC795B948E45BEE3B682B7FAA61]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\C0A62DC795B948E45BEE3B682B7FAA61]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\C0A62DC795B948E45BEE3B682B7FAA61]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7CD26A0C-9B59-4E84-B5EE-B386B2F7AA16}
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C0A62DC795B948E45BEE3B682B7FAA61]

;SAU 5
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BCF53039-A7FC-4C79-A3E3-437AE28FD918}]
[-HKEY_CLASSES_ROOT\Installer\Features\93035FCBCF7A97C43A3E34A72EF89D81]
[-HKEY_CLASSES_ROOT\Installer\Products\93035FCBCF7A97C43A3E34A72EF89D81]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\93035FCBCF7A97C43A3E34A72EF89D81]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\93035FCBCF7A97C43A3E34A72EF89D81]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93035FCBCF7A97C43A3E34A72EF89D81]

;x64
;SAU 2
[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15C418EB-7675-42be-B2B3-281952DA014D}]
;SAU 3
[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D924231F-D02D-4E0B-B511-CC4A0E3ED547}]
;SAU 4
[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7CD26A0C-9B59-4E84-B5EE-B386B2F7AA16}]
;SAU 5
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BCF53039-A7FC-4C79-A3E3-437AE28FD918}]

;common
[-HKEY_CLASSES_ROOT\Installer\UpgradeCodes\0D6888B32A8929940ACA98A3DEBB94B4]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\0D6888B32A8929940ACA98A3DEBB94B4]

Scripting - Chaining script commands

Syntax Result
comando1 & comando2 execute comando1 and then comando2

comando1 && comando2 execute comando2 only if command 1 was succesfully

comando1 || comando2 execute comando2 only if command 1 was not succesfully

(comando1 & comando2) && (comando3)

(comando1 & comando2) || (comando3)

http://www.andreabeggi.net/2005/10/19/concatenazione-e-shell-dei-comandi/

Microsoft - Azure and Veeam Connect

Remote backup services is possible with integrated solutions Veeam and Microsoft. 

Backup remote second copy is a best practice in the sector: to protect the data you must have a copy on a different site from the production. 

You can do that through integration between Backup & Replication Veeam and Microsoft Azure.

Here is an interesting Webminar and a deeper article:

VCC for Service Providers

Azure e Veeam Cloud Connect Webminar

Firewall - Extending the ISA Firewall’s SSL Tunnel Port Range

This article:

http://www.isaserver.org/articles-tutorials/articles/2004tunnelportrange.html

Show us exactly how to create a tunneling to SSL port 1443. 

Microsoft - Azure and Veeam Connect

Remote backup services is possible with integrated solutions Veeam and Microsoft. 

Backup remote second copy is a best practice in the sector: to protect the data you must have a copy on a different site from the production. 

You can do that through integration between Backup & Replication Veeam and Microsoft Azure.

Here is an interesting Webminar and a deeper article:

VCC for Service Providers

Azure e Veeam Cloud Connect Webminar

Graphics - Change DPI of Image

Change the DPI of your image with this free online tool. Enter your desired DPI, upload your image file and your image will be adjusted instantly.

http://convert.town/image-dpi

Extra IT - PQE Trial Period Succesfully Outmoded

Some months ago I changed company.

I would like sincerely thank my new company (PQE)for trust given to me since the beginning and during this period.

Some days ago I got confirm that my trial period was successfully outmoded.

I would like to "thank" too whom, in precedent company, worked hard to put me in condition that the only possible option was to change company ASAP.

Thanks to this situation  I finally found the courage to change company.

So this situation confirm assumption that, every difficulty, can be often an opportunity like in my case.

<=========>

Thought of the day/Pensiero del giorno

http://www.abeautifulmind.it/2016/06/pensiero-del-giorno.html

<================>

If you agree with precedent sentences you could evaluate to click "like button" on this linkedin shared article:

www.linkedin.com/hp/update/6210920326289723392

Exchange 2003 - Fixing "backOfficeStorage" MBX is not accessible Error When Opening OWA Folders

On exchange 2003 if you get this error.



After Installing Microsoft Exchange Server 2003 on a Windows Server 2003, OWA was not working, After checking the ISS Manager folder structure, I got the following error when trying to open the Exchange directory.

You can follow this article to solve.

https://ittutorials.net/microsoft/exchange-2003/fixing-backofficestorage-mbx-is-not-accessible-error-when-opening-owa-folders/

Vmware - Snapshot manager was empty but locally there was more vmdk

During these days a faced following problem.

On vmware there was a VM that had various vmdk files that was indicating more snapshot available.

Searching on vSphere client there was not possibility to revert to them ore delete old snapshots.

Solution was to create a new snapshot and then delete it immediately.

Following this procedure all old snapshot was succesfully deleted.

Here is original Vmware article:

Committing snapshots when there are no snapshot entries in the Snapshot Manager (1002310)

https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1002310

Tips - Sfc /scannow coping CD rom binaries to different path

If you need to execute repair O.S. command:

sfc /scannow 

you need to copy cdrom binaries to different path (with XP/2003 you need to copy i386 folder to c:)

To give the ability that sfc command will search for local binaries on different path you need to change register settings:

HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Setup \ SourcePath.

Scripting - How to install Teamviewer silently

TeamViewer MSI could be used to deploy TeamViewer via Group Policy (GPO) in an Active Directory domain. 

TeamViewer MSI is only available with a Corporate license.

Installation string: “TeamViewer_.exe” /S

Uninstallation String: “%ProgramFiles(x86)%\Teamviewer\uninstall” /S

Wsus - How to move Wsus internal database to a different drive on Windows 2012

If you are planning to move Wsus internal database on your windows 2012 Server you can take note about procedure merging these two articles.

Summarizing you need to:

• install SQL Management 2012 Express Studio, 
• detach Database, 
• move database to new drive 
• reattach it

Move or Delete a WSUS 4 Windows Internal Database (WID) on Windows 

http://systemspecialist.net/2013/05/15/move-or-delete-a-wsus-4-windows-internal-database-wid-on-windows-server-2012/

The Windows Server Essentials and Small Business Server Blog

https://blogs.technet.microsoft.com/sbs/2009/09/23/how-to-move-wsus-content-and-database-files-to-a-different-volume/


If you are getting this error during SQL Management console:


Microsoft SQL Server 2012 Release Candidate 0 Setup
The following error has occurred:
Error while enabling Windows feature: NetFx3, Error Code: -2146498298, Please try enabling
Windows feature: NetFx3 from Windows management tools and then run setup again. For more

information on how to enable Windows features, see http://go.microsoft.com/fwlink/?linkid=227143

Start --> CMD --> Run As administrator:

dism /online /enable-feature /featurename:netfx3 /all /source:d:\sources\sxs

(consider to insert CD rom Drive to give 2012 server to find binaries)

Otherwise you can review these articles:

http://www.sqlcoffee.com/troubleshooting101.htm

https://garvis.ca/2013/01/04/installing-netfx3-on-windows-server-2012/

Extra IT - White Radio with Dj Dawit and Hip Hop Music

Today I would like to mention a non IT news related to a Radio series about Hip Hop:

http://www.whiteradio.it/?view=programmi&See=37-dope-flow-con-dj-dawit

================================

Dj Dawit at White Radio about best Hip Hop Music.

[update 2017.03.27]

Here it is podcast too:

http://www.whiteradio.it/?view=programmi&See=37-dope-flow-con-dj-dawit

HyperV 2012 - Cluster Lan card settings

There is an interesting windowserver.it that well explain how to configure HyperV 2012 cluster lan card.

Hyper-V: Configurare le Reti in un Cluster

http://www.windowserver.it/2014/10/hyper-v-configurare-le-reti-in-un-cluster/

Windows Server 2012 Hyper-V Best Practices (In Easy Checklist Form)

https://blogs.technet.microsoft.com/askpfeplat/2013/03/10/windows-server-2012-hyper-v-best-practices-in-easy-checklist-form/

Network - How to backup Fortigate 80D/92D configuration

If you need to backup Fortigate configuration you need to logon with browser on standard console and then follow these two screenshots:

https://lakkireddymadhu.wordpress.com/2012/08/21/fortigate-firewall-configuration-backup-and-restore-procedure-firmware-v4-0/

Scripting - How to unlock an account automatically with .vbs and task scheduler

If you have lockout problems on a single AD account and, temporary, you want to unlock it (from security purpose it is not an excellent choice) you can schedule a task that execute this .vbs (that can be enhanced to check if user is really lockout and write a log file too)

Set objUser = GetObject _
    ("LDAP://cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,dc=com")

objUser.IsAccountLocked = False
objUser.SetInfo

Here is a script where take more user information to be merged with precedent script:

On Error Resume Next

strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
    & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")

Set colItems = objWMIService.ExecQuery _
    ("Select * from Win32_UserAccount Where LocalAccount = True")

For Each objItem in colItems
    Wscript.Echo "Account Type: " & objItem.AccountType
    Wscript.Echo "Caption: " & objItem.Caption
    Wscript.Echo "Description: " & objItem.Description
    Wscript.Echo "Disabled: " & objItem.Disabled
    Wscript.Echo "Domain: " & objItem.Domain
    Wscript.Echo "Full Name: " & objItem.FullName
    Wscript.Echo "Local Account: " & objItem.LocalAccount
    Wscript.Echo "Lockout: " & objItem.Lockout
    Wscript.Echo "Name: " & objItem.Name
    Wscript.Echo "Password Changeable: " & objItem.PasswordChangeable
    Wscript.Echo "Password Expires: " & objItem.PasswordExpires
    Wscript.Echo "Password Required: " & objItem.PasswordRequired
    Wscript.Echo "SID: " & objItem.SID
    Wscript.Echo "SID Type: " & objItem.SIDType
    Wscript.Echo "Status: " & objItem.Status
    Wscript.Echo
Next

More information on lockout AD events and monitoring tool can be found searching inside blog about this article:

AD - Lockout events on domain controller

Windows 7 - Problem Steps Recorder free windows tool psr.exe

There is an interesting Windows 7 tool called Problem Steps Recorder.

It’s intended for users that need to capture step by step actions and screenshots to illustrate a problem. 

If you create a lot of documents with screenshots or you need to document a procedure, this tool can save you a lot of time.

start --> psr.exe

After that you start recording and you press pause key, in that case you can highlight monitor section (like Windows snipped tool)  and you will acquire a monitor rectangle.

In that case after clicking on Add comment button you could add any suitable comment text.

Consider that if you need to acquire programs screenshots that was launched ad administrative rights it would be better to execute psr.exe with more permissions.

Consider that this tool acquire up to 25 screenshots, if you need to increase this value you need to click on settings:

When you will stop acquiring you will save a .mht file

This file will be viewable on your browser.

Here is an examplificative youtube video:

Snip Tip

You may have noticed I captured the Start menu in one of my screenshots.  This trick is outlined in the Snipping tool help. To capture a menu: Start the tool; Press Esc; Display the menu; Press Ctrl+Prnt Scrn and then use the snipping tool to capture the menu.

Software - FotoJet

I found this graphic tool, FotoJet on this website:

https://www.fotojet.com/

It is an all-in-one graphic tool for photo editing, graphic design and photo collages. 

Its 4.0 version is online now. 70+ overlays and 40+ frames are newly added. 

At the same time, users can also use color splash and selective filter.

FotoJet offers numerous photo editing tools such as crop, resize, rotate, straighten, exposure, sharpen, dehaze, vignette, tilt shift, and has dozens of templates for collages, posters, photo cards, Instagram posts, Facebook cover photos, YouTube banners, etc. 

You can try it on precedent link: https://www.fotojet.com.

Hope you find it helpful and kindly review it at your convenience. It would be a great fit for your readers to create awesome photo artworks.

Consider that editing can be done on line and, upgrading to pro version, there are other interesting feature improvements.

TV - Chromecast and view your mobile device/pc desktop in HDMI to your television and NetFlix

There is a interesting Hardware device that must be connected, using HDMI port, to your monitor/television.

Meanwhile with a proper app installed on your pc/mobile phone you can transmit your desktop to monitor/television.

Hardware device is quite cheap ( 40 Euro).

More information can be found here:

https://www.google.com/intl/en_en/chromecast/tv/chromecast/learn/

This hardware device it would be a first step.

The second step that I would like to highlight is to subscribe NetFlix to search and view tons of films and tv series for 10 Euro per Months. (HD and Ultra HD)

Here they are options available, in my opinion ChromeCast with NetFlix could be very useful but I need to proceed to relative purchase to have a 100% feedback.

https://www.netflix.com/it-en/

Hacker - How to disable history in Chrome without using hidden browsing mode

I was searching about settings in google chrome to disable history saving.

I was surprised that is not implemented. (only manual deletion)

So, i searched on internet and I found that, to avoid hidden browsing mode but having cookies saved the only solution is to search for history file here:

C:\Users\username\AppData\Local\Google\Chrome\User Data\Default\history putting it in read only mode


http://www.geekissimo.com/2011/02/06/chrome-come-disabilitare-salvataggio-siti-cronologia-senza-modalita-incognito/

Active Directory - AD Explorer and LdapAdmin

If you search inside relative blog form (sysinternal keyword) you can find tools available about that.

At the same time Sysinternal utilities are available through web address too since a lot of years ago.

https://live.sysinternals.com/

There are, in any case, two interesting tools that are useful to browse Active Directory and to gain more information/edit:

Active Directory Explorer 

https://technet.microsoft.com/en-us/sysinternals/adexplorer.aspx



LdapAdmin

http://ldapadmin.org/

Antivirus - Sophos Antivirus Deployments errors and required services

If you are facing this issue

After attempting to protect an endpoint computer with Sophos Endpoint Security and Control from the central console the deployment failed.

There are several error codes that can be shown in the console (errors covered in separate articles are linked in the table below).

0000002e	0000002f	80070005
80070002	80070035	80070043
800704f1	000000f6

There are several error messages that can follow the error code. Example:

• Could not start installation program on the computer. The network path was not found.
• The installation did not start. The computer may have been shut down, renamed or disconnected, or a required service may not be running. It may be running Windows XP Home or Windows Vista, or Windows 2008.
• The installation could not be started. The computer may need additional configuration before installation.
• The installation could not be started: Access is denied. The computer may need additional configuration before installation. See knowledgebase article 29287.
• The installation could not be started: The network name cannot be found.

Cause

The common causes of these deployment errors are:

• The endpoint computer is switched off or not currently joined to the network.
• The operating system of the remote computer is not supported.
• The operating system of the remote computer is Windows 8+ in a workgroup environment.
• There is a firewall blocking the installation process.
• A required endpoint service (Task Scheduler, Remote Registry, Windows Installer) is not started or able to start.
• The central share cannot be accessed.
• There is a mismatch in DNS where a new DHCP address is registered against the old name and the forward zone cannot update the record.

You can solve following Sophos Official KB29287:

https://community.sophos.com/kb/en-us/29287

Powershell - Cannot be loaded because the execution of scripts is disabled on this system

If you get this error executing powershell script .ps1 you need to:

Launch this command to see actual settings:

Get-executionpolicy

If you get Restricted you need to launch this command:

Set-ExecutionPolicy Unrestricted

For security reason it should be done rollback to this setting:

Set-ExecutionPolicy Restricted

Sophos - How to create a standalone or custom installer package

Here is an interesting article that explain how to create a standard Sophos Package:

The tool will allow you to do the following:

• Create both managed and unmanaged packages.
• Set a primary and secondary update location, which can include a secondary location of Sophos.
• Include exported preconfigured policies.
• Builds a compressed self-extracting and installing package executable.

https://community.sophos.com/kb/de-de/67504

Vmware 6.0 - “Deprecated VMFS volume(s) found on the host” error in ESXi hosts (2109735)

SYMPTONS:

ESXi 6.0 hosts without any VMFS volumes or unmounted datastores report the warning:

Deprecated VMFS volume(s) found on the host. Please consider upgrading volume(s) to the latest version

Note: For additional symptoms and log entries, see the Additional Information section.

RESOLUTION AND WORKAROUND

This issue is resolved in vCenter Server 6.0 Update 2, available at VMware Downloads.

To work around this issue if you do not want to upgrade, restart the management agents on the impacted hosts. For more

 

Note: Restarting management agents does not impact the virtual machine power state. Also, you need not reboot the ESXi host.

More details on Vmware article:

https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2109735

Exchange 201x- No existing PublicFolder matches the identity '\'

On exchange server going on Public Folder snapin we got this error:

No existing 'PublicFolder' matches the following Identity: '\'. Make sure that you specified the correct 'PublicFolder' Identity and that you have the necessary permissions to view 'PublicFolder'.

The solution was got in this way

--------------------

Open ADSIEdit and connect to the Configuration context

Open Databases node

CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SxxxT),CN=Administrative Groups,CN=[ORG],CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=[DOMAIN],DC=[TLD]

Open the Properties of an Exchange 2010 database

View the distinguishedName property and copy the value to clipboard

Example: CN=E14MBXDB01,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SxxxT),CN=Administrative Groups,CN=[ORG],CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=[DOMAIN],DC=[TLD]

Close the Properties window and open the Servers node

CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SxxxT),CN=Administrative Groups,CN=[ORG],CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=[DOMAIN],DC=[TLD]

sotto pfex1

CN=PFDB1,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SxxxT),CN=Administrative Groups,CN=PIPPO,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=pippo,DC=com

FOR DB-PBLCF03

CN=DB-PBLCF03,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SXXXT),CN=Administrative Groups,CN=PIPPO,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=pippo,DC=com

Expand the first Exchange 2010 server and open the Properties of the Microsoft System Attendant node

Ensure that the view is not filtered to Show only attributes that have values

Edit the homeMDB attribute and paste the distinguished name of the mailbox database copied in step 4

Apply the changes and close the properties window

Open the Properties windows of the Microsoft MTA of the same Exchange

View the distinguishedName property and copy the value to clipboard

Example: CN=Microsoft MTA,CN=E14MBXSRV01,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23XXXLT),CN=Administrative Groups,CN=[ORG],CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=[DOMAIN],DC=[TLD]

sotto pfex1 Microsoft MTA

CN=Microsoft MTA,CN=XXXXX-EX,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SXXXT),CN=Administrative Groups,CN=PIPPO,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=PIPPO,DC=com

Open the properties of the Microsoft System Attendant node for a second modification

Ensure that the view is not filtered to Show only attributes that have values

Edit the homeMTA attribute and paste the distinguished name of the mailbox database copied in step 10

Apply the changes and close the properties window

Repeat steps 4 to 13 for each Exchange 2010 server in your environment.

•  Wait for Active Directory replication and retry to access the public folders using Get-PublicFolder in an Exchange Server 2007 Management Shell.
  
•  It might be required to restart the Exchange 2007 Information Store and System Attendant service of the Exchange 2007 server in question

Use an administrative PowerShell

Noi copiamo questo in homemdb

CN=PFDB1,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SXXXT),CN=Administrative Groups,CN=PIPPO,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=PIPPO,DC=com

More articles:

No existing PublicFolder matches the identity '\'

http://www.exchangelog.info/2012/04/no-existing-publicfolder-matches.html

Scripts for Public Folder Replica Management in Exchange 2010

https://www.msdigest.net/2010/10/scripts-for-public-folder-replica-management-in-exchange-2010/

How To Easily Add Public Folder Replicas To Exchange 2010

https://blogs.technet.microsoft.com/rmilne/2015/11/27/how-to-easily-add-public-folder-replicas-to-exchange-2010/

Move Public Folders All replica to Exchange 2010 Server PS Script

http://smtp25.blogspot.it/2011/08/move-public-folders-all-replica-to.html

Exchange Server 2010 to 2013 Migration – Removing Legacy Servers

http://exchangeserverpro.com/exchange-server-2010-2013-migration-removing-legacy-servers/

Public Folders–Moving form Exchange 2003 to Exchange 2010

http://kelvinchiggs.blogspot.it/2011/01/public-foldersmoving-form-exchange-2003.html

Show and move “hidden” Arbitration mailboxes in Exchange Server 2010

https://msundis.wordpress.com/2010/03/29/show-and-move-hidden-arbitration-mailboxes-in-exchange-server-2010/

Uninstalling Exchange Server 2010

http://www.careexchange.in/uninstalling-exchange-server-2010/

Decommission Exchange 2010 Database Availability Group

https://supertekboy.com/2014/09/23/decommission-exchange-2010-database-availability-group/

Decommissioning Exchange 2010 DAG

https://eightwone.com/2013/02/05/decommissioning-exchange-2010-dag-to-single-servers/