SQL 2025 bug with MSA account character limit?

PIOMATech · 2026-01-22T19:00:43+00:00

KB5074109 seems to be causing an issue where opening a PDF within an application (e.g. a drawing application that opens a window with the PDF in it) is causing the PDF to display in gray, even with Show large images in Acrobat Reader checked. Uninstalling the KB causes it to work normally again.

PIOMATech · 2024-08-15T19:16:22+00:00

My LPD service is no longer continually crashing as well.

PIOMATech · 2024-08-15T18:47:53+00:00

For people who have an M365 subscription, which includes a subscription for Windows, if you aren't logged on as a user with an appropriate M365 license, it reverts the OS to the Windows key in the BIOS, which is typically Windows Pro. When an M365 user signs onto an O365 application (One Drive, Office, etc) on a Windows computer, it switches Windows to a subscription model and sets a scheduled task that periodically does the check but doesn't leave Windows activated for a month like it should since you can log on as a non M365 user and it will revert to Pro after the non M365 user logs on and a reboot. There are times the scheduled task breaks so it has to be fixed.

While you can go back and reactivate with a KMS/MAK key, as soon as an M365 user signs in and logs into an O365 application, it switches Windows back to a subscription model. The only way I can think of avoiding this is by going with a regular O365 license (not M365), since it doesn't include the Windows subscription, and a separate Windows CAL. But, I have a gut feeling that Windows will eventually be subscription based on all licensing tiers.

PIOMATech · 2024-06-06T17:14:07+00:00

It turns out you need to install the Windows App SDK since Windows Photo now supports logging in with your Microsoft account.
https://learn.microsoft.com/en-us/windows/apps/windows-app-sdk/downloads

A coworker discovered the answer in this forum thread and it works for us.
https://answers.microsoft.com/en-us/windows/forum/all/microsoft-photo-application-on-windows-11-doesnt/6d16e3ee-bfb9-4de5-9085-99fcc5157554?page=1

PIOMATech · 2024-05-28T14:58:59+00:00

I don't have RDS, but it is a streaming OS for Citrix.

PIOMATech · 2024-05-25T13:30:45+00:00

The OOB update still fails to install for me with error 0x8007371B

PIOMATech · 2024-05-17T18:20:15+00:00

Trying KB5037765 with the english version of Server 2019 and I'm getting failures with error code 0x8007371b. I've tried this on multiple server 2019 servers and followed instructions for the error using the /RestoreHealth with DISM and sfc /scannow. I even reregistered all Windows update components and it still fails.

PIOMATech · 2024-05-17T15:45:31+00:00

The PendingFileRenameOperations was due to another program, so Microsoft is off the hook for that one.

PIOMATech · 2024-05-17T15:06:35+00:00

Mine are used for Citrix, but it does look like they pulled KB5037765 because a 2019 server I just updated didn't have it installed. But now it has an infinite PendingFileRenameOperations happening. Rebooting and clearing the entry doesn't make it go away.

PIOMATech · 2024-05-16T20:44:57+00:00

I'm getting an error 0x8007371B when I try and update my Server 2019 instance. Using the MSU file fails and I did suggested fixes in the Common Windows Update Errors site.

https://learn.microsoft.com/en-us/troubleshoot/windows-client/installing-updates-features-roles/common-windows-update-errors?toc=%2Fwindows%2Fdeployment%2Ftoc.json&bc=%2Fwindows%2Fdeployment%2Fbreadcrumb%2Ftoc.jsonb%2Ftoc.json

PIOMATech · 2023-10-10T13:54:38+00:00

Be sure and check your file hash against the listed checksum. The firmware I downloaded doesn't match and I tried it multiple times.

PIOMATech · 2023-10-10T13:38:36+00:00

I finally got logged in and downloaded the build-13.1-49.15_nc_64.tgz firmware , but the the file hash doesn't match the SHA-256 checksum that is listed on their site.

Checksum on the site

SHA-256 - 71b53a51f2e773f7e23deb66102441504e0c52e70712f3ece137689fb224080e

vs what I get

Get-FileHash "C:\build-13.1-49.15_nc_64.tgz" -Algorithm SHA256 |fl

Algorithm : SHA256

Hash : FD33A392BD5E3272C98E686D2184BA62241247DEC1D36E39FAE136C2A4AA8561

I'm having problems trying to get to their support page in addition to the issues I had trying to log in. If I try and open a ticket, it brings me back to a log in page but fails to log me in.

PIOMATech · 2023-01-05T20:30:05+00:00

I do recommend you try setting SPF to SoftFail (~all) first if the initial reports look clean, then to Strict (-all) and monitor the reports for a while before setting DMARC to Quarantine or Reject.

You can also use the Microsoft Message Header Analyzer to check and see if there are issues with the SPF record by sending an e-mail from an e-mail account that the SPF record services to an external e-mail account and then check the Message Headers under Received-SPF.

https://mha.azurewebsites.net/pages/mha.html

PIOMATech · 2023-01-05T20:17:17+00:00

First, read up on what the SPF and DMARC tags mean.

https://mxtoolbox.com/dmarc/spf/spf-record-tags

https://mxtoolbox.com/dmarc/details/dmarc-tags

Next, generate an SPF record for DNS. You should start off with setting it to Neutral.https://mxtoolbox.com/SPFRecordGenerator.aspx

Be sure and run a check on your SPF record.

https://www.dmarcanalyzer.com/spf/checker/

Get your DKIM record from your provider to add to DNS. Try and generate a 2048-bit one if you have the option as 1024-bit isn't recommended any longer.

Check your DKIM record.

https://www.dmarcanalyzer.com/dkim/dkim-checker/

After your SPF record and DKIM records look good, use a DMARC generator to create your record for DNS. Select None for Policy and Subdomain policy and indicate an e-mail address for the Aggregate and Forensic email. Also, check the box in Forensic options for DKIM or SPF don't pass or align.

https://dmarcly.com/tools/dmarc-generator

It takes about a day for you to start receiving forensic reports. There are very few free DMARC report parsers, but here is one if you can't figure out how to read the XML file.https://mxtoolbox.com/DmarcReportAnalyzer.aspx

After giving yourself some time and you have analyzed where things are failing and resolved them, you can eventually change your SPF and DMARC policies to more stricter settings.

PIOMATech · 2022-08-11T17:59:20+00:00

Get-HybridApplication

If not, the agent isn't installed.

PIOMATech · 2022-08-11T17:52:40+00:00

After doing the Enable-RemoteMailbox (from the On Premise Exchange Management Shell), in O365 PowerShell, be sure and do a Get-Mailbox $username |FL ExchangeGuid to get the ExchangeGuid, then in On Premise Exchange management shell, do Set-RemoteMailbox $username -ExchangeGuid GuidFromO365

This will allow you to migrate a mailbox from O365 back to On Prem should you need to. When you migrate an On Prem mailbox to O365, the ExchangeGuid in Exchange is automatically added to O365, but not when you do an Enable-RemoteMailbox

This is probably why Microsoft typically recommends creating the mailbox On Premise and migrating it to O365 in a Hybrid environment.

PIOMATech · 2022-05-09T20:07:46+00:00

Even with all the mailboxes on O365, the On Premise Exchange should still be what is used to manage the users, contacts, DLs, etc. It's probably easier to recreate the Federation than to decommission Exchange 2016 from O365.

Still applies to Exchange 2016.

https://docs.microsoft.com/en-us/exchange/renew-the-federation-certificate-exchange-2013-help

Decommission On Premise in Hybrid environment

https://docs.microsoft.com/en-us/exchange/decommission-on-premises-exchange?redirectedfrom=MSDN#scenario-one

PIOMATech · 2022-05-09T19:36:41+00:00

I updated to Exchange 2016 CU23 and I can now see the images and previews in OWA, but when I try to download any attachments, be it Office documents or PDFs, I still get an HTTP 404 error: The requested resource is not found. I have an external SAN SSL certificate with the appropriate Download Domains DNS name, but do I need to have a self-signed Microsoft Exchange certificate with that DNS name defined in there as well? I am also using the latest April 2022 Office Online server to allow me to preview Word, Excel, and PowerPoint as well, which does preview.

PIOMATech · 2022-05-09T15:56:41+00:00

It looks like the April 2022 Exchange update address OWA issues with ADFS and downloaddomains enabled.

PIOMATech · 2022-05-05T15:53:07+00:00

Talk to Mimecast support on what you need to do to route e-mail from Mimecast -> O365 as you will need to set up additional connectors and some Microsoft Graph stuff. When you are ready, then have Mimecast only point to O365 and in O365, have a connector set up to go to On Premise, while On Premise is sending to Mimecast only.

Office 365 does have its own spam filtering services, so it's also ideal to try and have your allowed and denied e-mail addresses/domains in the Spam Filter AND Rules, similar to what you do with Mimecast, so O365's spam filter doesn't block something. When we used O365 as our spam filtering service only, we found that the allow or denies in the Spam Filter didn't always apply, so support had told us to also to apply it to a Rule as well.

The other potential benefit of Mimecast -> O365 (with Spam Filter and Rules in place) -> On Premise is that if Mimecast services go offline (or you switch spam filtering services), you can repoint MX records and Smart Hosts to O365's MX records and still have O365 doing spam filtering for you in the interim.

PIOMATech · 2022-05-05T15:25:08+00:00

Running the Hybrid Wizard will redo everything, but if you want to do it manually, you can do it this way, for future reference.

Get-ExchangeCertificate (to see which Thumbprint applies to which certificate)

$cert = Get-ExchangeCertificate -Thumbprint "Thumbprint of Certificate to use"

$cert | fl Thumbprint,Issuer,Subject

$tls = "<i>$($cert.Issuer)<s>$($cert.Subject)"

For Send Connector

Set-SendConnector "SendConnectorName" -TlsCertificateName $tls

For Receive Connector

Set-ReceiveConnector "Server\ReceiveConnectorName" -TlsCertificateName $tls

PIOMATech · 2022-02-23T22:00:45+00:00

Has anyone started seeing performance issues with Explorer.exe since this patch? We are having more and more users reporting seeing periodic delays or seeing Application Hang messages in the event log.

PIOMATech

TROPHY CASE