Google Apps Gmail - Delegated Account Not Included in Reply-To-All

I'm writing this post because I could not find any documentation on Google's support/help pages (this page will hopefully be updated at some point) and this took me way too long to figure out after originally thinking it was a bug (Google Support insists it is not a bug).

In our scenario, we have a shared account that we use for our accounting team. Each user has been added to the account using the Gmail Settings -> Accounts tab -> "Grant access to your account" option inside of the shared account. Users will log into their own account, click their name/avatar at the top right of Gmail, and then click the shared account to open the shared account in a new tab.

They also have the ability to send as the account using the Gmail Settings -> Accounts tab -> "Send mail as" option inside of the shared account.

We noticed that when users were replying to emails inside of the shared account, if one or more of the delegated accounts were in the TO or CC field they would not be included in the Reply-To-All. All other addresses would be added, but the delegated accounts were silently stripped out.

The fix is to do one of the following:

• Remove the user from Gmail Settings -> Accounts tab -> "Send mail as" inside of the shared account.
• Edit the Gmail Settings -> Accounts tab -> "Send mail as" option and uncheck "Treat as an Alias" inside of the shared account.

Quickbooks Enterprise via Remote Desktop - Internet Security Levels Are Set Too High

We still run an old school NT4 domain using Samba 3. We are replacing a domain member server running Windows Server 2003 with one running Windows Server 2012 R2. Our users connect to the server via Remote Desktop. The users run Quickbooks Enterprise 15 in the remote desktop session. The users are not local administrators and by default, users starting the QBES application receive the following error:

 

The users are not administrators and are not able to make changes to their security settings by clicking the "Make Changes" button. We need to make system-wide changes to get our server/users working properly.

First, we need to disable Internet Explorer Enhanced Security Configuration. To do this, login to the server as an administrator, start Server Manager, select Local Server. In the right-pane/right-column, click "On" next to "IE Enhanced Security Configuration".

 In the new window, select "Off' for both Administrators and Users.

Click "OK" to save.

I have seen some reports that this single changes fixed it for some users. This was not the case for me. My guess is that the users that only had to make this change had local administrator privileges.

Next,  make the following registry changes via an administrator account to make system-wide Internet security changes to the server.

This registry value will force all users to only user the security settings that have been set in HKEY_LOCAL_MACHINE, rather then unique settings for each user.

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings]

"Security_HKLM_only "=dword:00000001

For QBES, we need to make changes to the Internet security zone. The  "Internet" zone is zone 3. I set both MinLevel and CurrentLevel to 11000, which is "Medium" security.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]

"CurrentLevel"=dword:00011000

"MinLevel"=dword:00011000

If you prefer other security settings, see this page (https://support.microsoft.com/en-us/kb/182569) for details.

This support page (https://support.microsoft.com/en-us/kb/833633) from Microsoft is where I found a lot of helpful information.

Netgear GS728TP Web Interface Issues

I just purchased a Netgear GS728TP switch for our new office. We have a Netgear FS728TP switch that has been rock solid for years, so I went with them again. The hardware seems to be solid and the switch is very quiet (especially for one with 24 PoE ports).

One problem: poor browser support.

The web interface does not work in the latest version of Chrome (43), Firefox (38) or Internet Explorer (11). The web interface will load and prompts me for the password. Once I enter, it continues to a new page...but doesn't load the content. I can't see or change any settings.

I finally got it to load by using a computer with Internet Explorer 8 (I believe I had to enable Compatibility View). After logging in with the same process as above, the web interface loaded properly and I was able to make changes. I connected via  few different systems. On other with IE8, everything worked properly...but the VLAN Membership page would never load properly. I found a page on Netgear's website talking about browser compatibility issues with certain firmwares. They suggested installing an old browser (Opera 18, Netscape 9, Firefox 3.5.6). I tried all three browsers, but none of these would load the VLAN page properly.

Ninite Pro Chrome Update Error

We use Ninite Pro to keep applications updated on our workstations (Windows 7 x64). We have a script that runs weekly to update a select group of applications. One user was reporting that Chrome randomly disappeared from their system. This coincided with the day that the script was running. The first time we thought it was odd and reinstalled Chrome, but it happened a few more times. After digging around, we noticed that if we tried to reinstall Chrome by downloading the installer it would work...but if we tried via Ninite, it would fail with this error:

• Chrome : Install failed - Could not verify installation (1), 1603 - 3227

After lots of searching (without finding much) and having this happen a few more times, we finally found a solution in the Microsoft Fix it Program Install and Uninstall Troubleshooter (https://support.microsoft.com/en-us/mats/program_install_and_uninstall). This is what worked for us:

• First, uninstall Google Chrome from"Programs and Features" in Control Panel
• After downloading, run the tool.
• Click "Detect problems and let me select the fixes to apply"
• Click "Installing"
• Select  "Google Chrome" from the list
• Follow prompts to uninstall the program and/or fix issues.

Menus Missing After Installing SPSS 23 x64

There is a bug in SPSS 23 64-bit's originally released installer, if you install using a command like...

MSIEXEC.EXE /i "\SPSS64\IBM SPSS Statistics 23.msi" /qb COMPANYNAME="xxx" /norestart

...and don't include an "AUTHCODE" parameter.

You will be allowed to install SPSS and license using the License Authorization Wizard, but when you start SPSS you will only see the "File", "View" & "Custom" menus.

To fix:

• Edit C:\Program Files\IBM\SPSS\Statistics\23\spssprod.inf
• Edit the line with "DaemonHost=" to be "DaemonHost=no-net"
• Restart SPSS and things will work normally.

OpenVPN Silent Install/Update & Kaseya Procedure

Due to the Heartbleed and more recent MITM vulnerabilies, we have needed to upgrade all of our OpenVPN clients to the latest version as quickly as possible. We are running Kaseya Virtual System Administrator (VSA), although any of these commands could be run via the command line or another tool.

You can download the latest version of OpenVPN here. There are 32-bit & 64-bit versions available.

I found details about command line/silent installation here. I chose to use the following switches:

openvpn-install-2.3.4-I002-x86_64.exe /SELECT_SHORTCUTS=0 /SELECT_OPENVPN=1 /SELECT_SERVICE=1 /SELECT_TAP=1 /SELECT_OPENVPNGUI=0 /SELECT_ASSOCIATIONS=1 /SELECT_OPENSSL_UTILITIES=0 /SELECT_EASYRSA=0 /SELECT_PATH=1 /SELECT_OPENSSLDLLS=1 /SELECT_LZODLLS=1 /SELECT_PKCS11DLLS=1 /S" 

One issue that I had was that OpenVPN makes you "trust" "OpenVPN Technologies, Inc" when installing the OpenVPN TAP adapter. If I hadn't previously "trusted" OpenVPN when installing a previous version, the command line script would fail. To get around this, our script will install install the certificate via the command line before starting the OpenVPN installer.

 

Download a copy of openvpn.cer here.

You can install the certificate using this command:

certutil -addstore "TrustedPublisher" openvpn.cer

My organization is running OpenVPN as a service. If you are not, you can ignore all of the commands related to the OpenVPN service.

Here are procedures that you can import into Kaseya. Make sure to upload the installer you wish to use to the VSASharedFiles section before running the script (In Kaseya VSA 6.5: Agent Procedures -> Installer Wizards -> Application Deploy). If the installer you are using is not version 2.3.4-I002, you will need to edit the procedure.

• 32-bit Procedure OpenVPN 2.3.4 x86.xml
• 64-bit Procedure OpenVPN 2.3.4 x64.xml

In short, here is what the procedures will do:

• Copy openvpn.cer to the system's temp folder
  (Kaseya)
• Copy OpenVPN installer to the system's temp folder
  (Kaseya)
• Run certutil to install the openvpn.cer certificate
  (certutil -addstore "TrustedPublisher" openvpn.cer)
• Stop the OpenVPN Service
  (net stop "openvpn service")
• Kill openvpn.exe & openvpnserv.exe, just to be safe
  (taskkill /IM openvpn.exe, taskkill /IM openvpnserv.exe)
• Run the OpenVPN installer with appropriate switches
  (openvpn-install-2.3.4-I002-x86_64.exe /SELECT_SHORTCUTS=0 /SELECT_OPENVPN=1 /SELECT_SERVICE=1 /SELECT_TAP=1 /SELECT_OPENVPNGUI=0 /SELECT_ASSOCIATIONS=1 /SELECT_OPENSSL_UTILITIES=0 /SELECT_EASYRSA=0 /SELECT_PATH=1 /SELECT_OPENSSLDLLS=1 /SELECT_LZODLLS=1 /SELECT_PKCS11DLLS=1 /S")
• Change service settings to start automatically
  (sc config openvpnservice start= auto)
• Start the OpenVPN Service
  (net start "openvpn service"

Microsoft Excel, U.S. Dollar ($) Symbol & U.K. Computer

One of my UK users was trying to work with an Excel file that contained cell with values in US Dollars ($). Things appeared to be working normally until they tried to use formulas. Rather than calculating normally, it would only output "0".

After closer inspection, we figured out that because the computer's region was set to "English (United Kingdom)" it was not treating the "$" symbol as currency. It was treating is as text, resulting in broken formulas. I assumed I could simply select and format these cells as "Currency", "$ English (U.S.)", but that doesn't change anything.

Here is the workaround that we came up with (to replicate, you must set region to UK):

• Create an Excel file with dollar values and a formula that will sum the cells. You can see that they are being treated as text, since they are aligned to the left and the formula result is "0".
  
• Select the cells with the dollar values.
• Press Control-F to open the "Find & Replace" feature.
• Click the "Replace" tab
• In "Find what" enter "$" and in "Replace with" make sure it is blank. 
• Click "Replace All"
  
• The formula will now calculate properly, but we need this to display as currency.
• Select the cells.
  
• Right-click and select "Format Cells..."
• Click "Currency" on the left. In the right pane, select "Symbol", "$ English (U.S.)".
• Click OK
• Values will now display properly with US dollar symbol and the formula calculates properly!
  

Kaseya Antivirus: "Your license will expire in X days"

Over the past year, we have had the issue of Kaseya Antivirus (KAV) displaying "Your license will expire in X days" even though the Kaseya administrator interface shows the license as valid on numerous systems. Our fix has always been to uninstall, reboot, reinstall, reboot. It works, but it is time-consuming and the user can't use their system. Thankfully, Kaseya addressed this and has an easier way to fix:

http://community.kaseya.com/kb/w/wiki/877.why-do-kav-endpoints-show-a-different-license-expiration-than-shown-in-the-kav-ui.aspx

Update 7/9/2013: Because of a recent increase in the incidence of endpoints displaying the "License will expire in 'x' days" message, an update to  KAV 1.4 has been released that adds a "Fix Kaspersky Key" button to the KAV UI that will delete the currently assigned rolling Kaspersky key(s), and reapply both the initial and update key currently available on the VSA.

Contractually, we cannot completely disable the license expiration pop-up, and because of the licensing schema outlined above, the license expiration information is only available on the local endpoint, we do not have the means to gather the local endpoint license expiration for reporting to the VSA and/or KAV module.

ASUS Vivotab Smart Charging Issue

We just ordered a few dozen ASUS Vivotab Smart tablets running Windows 8 (full, not RT) to run some offline surveys. I'm going to try to post any quirky issues I come across, as I haven't been able to find much about them when searching.

The first thing I noticed is that if the battery is extremely low on the tablet, it will not start. Even if you connect a power cord, you must wait a bit for the system to start up. When the battery is low and you press the power button for a few seconds to start...it will flash orange 3 times. Once it has enough battery, it is able to start normally. These charge very slowly, so if you are at 0% battery...you might be charging for a while before it will start.

Can't export from SSI Web CAPI - "An error occured while getting..."

I'm trying to run Sawtooth SSI Web CAPI 3.0.2 for field administrators on a Windows 8 tablet. The software appears to install normally and I can run surveys. After completing a survey, I try to use the "Get Copy of Data..." button, but receive an error:

An error occured while getting
c:\users\username\Desktop\surveyname_data.csv
Please make sure the server is started (using menu item File | SSI Web CAPI Module Settings)
and try getting the data again.

After downgrading to SSI Web CAPI 3.0, I was able to export the data properly. I found the download here: http://sawtooth-software-ssi-web-capi-module.software.informer.com/3.0/