[null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://2.bp.blogspot.com/-3leNjhjckiw/XAbd0ajfOPI/AAAAAAAAC2I/LLO1EGTn8-gn_hEypFvYU0Zg14N7WbiTgCLcBGAs/s320/vbo-365-proxy.jpg", "src": "https://2.bp.blogspot.com/-3leNjhjckiw/XAbd0ajfOPI/AAAAAAAAC2I/LLO1EGTn8-gn_hEypFvYU0Zg14N7WbiTgCLcBGAs/s320/vbo-365-proxy.jpg", "formatted_filename": "vbo proxy", "rendered_width": 320, "rendered_height": 86}, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://1.bp.blogspot.com/-yMOX6tCaUTg/XAbf6ev-sYI/AAAAAAAAC2w/p06aKlGwmNYQkhZYoXuKoCWftUvZUXcfACLcBGAs/s320/vbo-365-backup-repo-policy.jpg", "src": "https://1.bp.blogspot.com/-yMOX6tCaUTg/XAbf6ev-sYI/AAAAAAAAC2w/p06aKlGwmNYQkhZYoXuKoCWftUvZUXcfACLcBGAs/s320/vbo-365-backup-repo-policy.jpg", "formatted_filename": "vbo backup repo policy", "rendered_width": 320, "rendered_height": 187}, null, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://3.bp.blogspot.com/-ukdNfHOc_98/XAbi32bLmFI/AAAAAAAAC3A/oBwheSqhwPI7PJtEJyxAvxRrGwV7gSu8gCLcBGAs/s320/vbo365-create-backup-job-1.jpg", "src": "https://3.bp.blogspot.com/-ukdNfHOc_98/XAbi32bLmFI/AAAAAAAAC3A/oBwheSqhwPI7PJtEJyxAvxRrGwV7gSu8gCLcBGAs/s320/vbo365-create-backup-job-1.jpg", "formatted_filename": "vbo create backup job", "rendered_width": 320, "rendered_height": 229}, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://4.bp.blogspot.com/-zPsw5Qe3MKk/XAbjajSfJYI/AAAAAAAAC3Q/f4lRlzZDNw0OKjNav8yDHBuPavIlPfl4QCLcBGAs/s320/vbo365-create-backup-job-2.jpg", "src": "https://4.bp.blogspot.com/-zPsw5Qe3MKk/XAbjajSfJYI/AAAAAAAAC3Q/f4lRlzZDNw0OKjNav8yDHBuPavIlPfl4QCLcBGAs/s320/vbo365-create-backup-job-2.jpg", "formatted_filename": "vbo create backup job", "rendered_width": 320, "rendered_height": 229}, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://3.bp.blogspot.com/-UfUcUNQx8Nk/XAbjiGIj-GI/AAAAAAAAC3U/TdC5f3ZUUwoTYACuPwEbxp7GL1AuYmalACLcBGAs/s320/vbo365-create-backup-job-3.jpg", "src": "https://3.bp.blogspot.com/-UfUcUNQx8Nk/XAbjiGIj-GI/AAAAAAAAC3U/TdC5f3ZUUwoTYACuPwEbxp7GL1AuYmalACLcBGAs/s320/vbo365-create-backup-job-3.jpg", "formatted_filename": "vbo create backup job", "rendered_width": 320, "rendered_height": 229}, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://4.bp.blogspot.com/-f4yYZzwCUFs/XAbjqYgFgDI/AAAAAAAAC3Y/syv4b501U0IvlAyzGrfeofZCD9Zq3BEdQCLcBGAs/s320/vbo365-create-backup-job-4.jpg", "src": "https://4.bp.blogspot.com/-f4yYZzwCUFs/XAbjqYgFgDI/AAAAAAAAC3Y/syv4b501U0IvlAyzGrfeofZCD9Zq3BEdQCLcBGAs/s320/vbo365-create-backup-job-4.jpg", "formatted_filename": "vbo create backup job", "rendered_width": 320, "rendered_height": 229}, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://2.bp.blogspot.com/-_mOSt1buO1Y/XAbjzUEEObI/AAAAAAAAC3c/36Rz4aTgyPwHXLwMnTpem7VZBcBqKhC4wCLcBGAs/s320/vbo365-create-backup-job-5.jpg", "src": "https://2.bp.blogspot.com/-_mOSt1buO1Y/XAbjzUEEObI/AAAAAAAAC3c/36Rz4aTgyPwHXLwMnTpem7VZBcBqKhC4wCLcBGAs/s320/vbo365-create-backup-job-5.jpg", "formatted_filename": "vbo create backup job", "rendered_width": 320, "rendered_height": 229}, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://3.bp.blogspot.com/-v_HraguRoGs/XAbj9NG67fI/AAAAAAAAC3k/kgXRymr37dIkfN1JTAmYgBsGm3x7MIevACLcBGAs/s320/vbo365-create-backup-job-6.jpg", "src": "https://3.bp.blogspot.com/-v_HraguRoGs/XAbj9NG67fI/AAAAAAAAC3k/kgXRymr37dIkfN1JTAmYgBsGm3x7MIevACLcBGAs/s320/vbo365-create-backup-job-6.jpg", "formatted_filename": "vbo create backup job", "rendered_width": 320, "rendered_height": 229}, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://1.bp.blogspot.com/-lcvkWGZexYc/XAbl19gNvrI/AAAAAAAAC30/5igssPvIJ18qtNiwtjK17wvd0wlsQ1ALwCLcBGAs/s320/vbo365-exchange-explorer.jpg", "src": "https://1.bp.blogspot.com/-lcvkWGZexYc/XAbl19gNvrI/AAAAAAAAC30/5igssPvIJ18qtNiwtjK17wvd0wlsQ1ALwCLcBGAs/s320/vbo365-exchange-explorer.jpg", "formatted_filename": "vbo exchange explorer", "rendered_width": 320, "rendered_height": 168}, null, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://3.bp.blogspot.com/-7XKeqIMXqJ8/W_0EQL6XmFI/AAAAAAAAC1g/J1S9Zp_JpIYtKBjXXv4TQXNFJIy-K6aEgCLcBGAs/s320/yastw-sofware-manager.jpg", "src": "https://3.bp.blogspot.com/-7XKeqIMXqJ8/W_0EQL6XmFI/AAAAAAAAC1g/J1S9Zp_JpIYtKBjXXv4TQXNFJIy-K6aEgCLcBGAs/s320/yastw-sofware-manager.jpg", "formatted_filename": "yastw sofware manager", "rendered_width": 320, "rendered_height": 191}, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://3.bp.blogspot.com/-9l-UMCelTc4/W_0FxlOVaFI/AAAAAAAAC1s/gCHQYuZv4VAtKL_2BQzQzLgHmc6Xzf5YACLcBGAs/s320/check-xrdp-service-definition-firewall.jpg", "src": "https://3.bp.blogspot.com/-9l-UMCelTc4/W_0FxlOVaFI/AAAAAAAAC1s/gCHQYuZv4VAtKL_2BQzQzLgHmc6Xzf5YACLcBGAs/s320/check-xrdp-service-definition-firewall.jpg", "formatted_filename": "check xrdp service definition firewall", "rendered_width": 320, "rendered_height": 62}, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://4.bp.blogspot.com/-DcY0QDJzOQE/W_0HUPOAn5I/AAAAAAAAC14/gtJ3ZJhTUggEUbdFfBRbOX2Xn_TPb_eUwCLcBGAs/s320/rdp-to-sles.jpg", "src": "https://4.bp.blogspot.com/-DcY0QDJzOQE/W_0HUPOAn5I/AAAAAAAAC14/gtJ3ZJhTUggEUbdFfBRbOX2Xn_TPb_eUwCLcBGAs/s320/rdp-to-sles.jpg", "formatted_filename": "rdp to sles", "rendered_width": 260, "rendered_height": 320}, null, null, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://4.bp.blogspot.com/-5IuekUMUNjk/W5gNzwA65pI/AAAAAAAAC0A/cV6vsVOz1TMCtbeW8uW7PVY94TTLMYCgwCLcBGAs/s320/esxcli-software-acceptance-level-community-supported.jpg", "src": "https://4.bp.blogspot.com/-5IuekUMUNjk/W5gNzwA65pI/AAAAAAAAC0A/cV6vsVOz1TMCtbeW8uW7PVY94TTLMYCgwCLcBGAs/s320/esxcli-software-acceptance-level-community-supported.jpg", "formatted_filename": "esxcli software acceptance level community supported", "rendered_width": 320, "rendered_height": 30}, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://1.bp.blogspot.com/-eSzmKSw0vi0/W5gQIBQoMUI/AAAAAAAAC0M/8QGkFFkCaIwaBzJ9Y0wAV2Lipw3__-onQCLcBGAs/s320/vm-options-secure-boot.jpg", "src": "https://1.bp.blogspot.com/-eSzmKSw0vi0/W5gQIBQoMUI/AAAAAAAAC0M/8QGkFFkCaIwaBzJ9Y0wAV2Lipw3__-onQCLcBGAs/s320/vm-options-secure-boot.jpg", "formatted_filename": "vm options secure boot", "rendered_width": 320, "rendered_height": 276}, null, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://2.bp.blogspot.com/-Dw_qT5_aAHM/W5AsVy-Jz6I/AAAAAAAACzc/tLPt0W7SjFYHKFLsMcUHqfnSHQ-Q1zcaACLcBGAs/s320/vbo365-diagram.jpg", "src": "https://2.bp.blogspot.com/-Dw_qT5_aAHM/W5AsVy-Jz6I/AAAAAAAACzc/tLPt0W7SjFYHKFLsMcUHqfnSHQ-Q1zcaACLcBGAs/s320/vbo365-diagram.jpg", "formatted_filename": "vbo diagram", "rendered_width": 320, "rendered_height": 223}, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://3.bp.blogspot.com/-qMsjr8AbYgA/W5A2gJqOPhI/AAAAAAAACzo/b8isx6WPl5oVjo-A0cg7fYamLdxhwy7twCLcBGAs/s320/display-vbo-services.jpg", "src": "https://3.bp.blogspot.com/-qMsjr8AbYgA/W5A2gJqOPhI/AAAAAAAACzo/b8isx6WPl5oVjo-A0cg7fYamLdxhwy7twCLcBGAs/s320/display-vbo-services.jpg", "formatted_filename": "display vbo services", "rendered_width": 320, "rendered_height": 263}, null, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://1.bp.blogspot.com/-wdEgnbQdeIo/W3gbHWEUMeI/AAAAAAAACxg/IkIR92uzd2krtqiZM0uAbODLY_1COXMHwCLcBGAs/s320/PowerCLI%2Bupdate%2BvSphere%2BISO%2Bwith%2Bdrivers.jpg", "src": "https://1.bp.blogspot.com/-wdEgnbQdeIo/W3gbHWEUMeI/AAAAAAAACxg/IkIR92uzd2krtqiZM0uAbODLY_1COXMHwCLcBGAs/s320/PowerCLI%2Bupdate%2BvSphere%2BISO%2Bwith%2Bdrivers.jpg", "formatted_filename": "PowerCLI Bupdate BvSphere BISO Bwith Bdrivers", "rendered_width": 320, "rendered_height": 188}, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "https://4.bp.blogspot.com/-mN4chmP7SMQ/W3gb_9mAWII/AAAAAAAACxo/u7g1agLZIjEErLAn2DiJAo6_hfYajCIpACLcBGAs/s320/2018-08-17_10-09-51-Rufus%2B3.1.1320%2B%2528Portable%2529.jpg", "src": "https://4.bp.blogspot.com/-mN4chmP7SMQ/W3gb_9mAWII/AAAAAAAACxo/u7g1agLZIjEErLAn2DiJAo6_hfYajCIpACLcBGAs/s320/2018-08-17_10-09-51-Rufus%2B3.1.1320%2B%2528Portable%2529.jpg", "formatted_filename": "Rufus B", "rendered_width": 248, "rendered_height": 320}, null, null, null, {"document_url": "https://www.sysadminstories.com/", "unformatted_src": "//4.bp.blogspot.com/-hlS4lT4rg1A/W2QZzH81BKI/AAAAAAAACxE/CPEgtUYBU-8w5JL_buxOxpO5hnjcOtBpgCK4BGAYYCw/s250/vexpert_small.png", "src": "http://4.bp.blogspot.com/-hlS4lT4rg1A/W2QZzH81BKI/AAAAAAAACxE/CPEgtUYBU-8w5JL_buxOxpO5hnjcOtBpgCK4BGAYYCw/s250/vexpert_small.png", "formatted_filename": "vexpert small", "rendered_width": 160, "rendered_height": 108}, null, null, null, null, null, null, null, null, null, null, null]

Configure Veeam Backup for Microsoft Office 365

In the previous post, we've gone through the steps to install VBO365 on a Windows Core VM. Now we'll look at configuration.

After installation, a default backup proxy and default backup repository are created on the server. Proxies are responsible for handling backup traffic from Office 365 to repository and restore traffic from repository to Veeam explorers. For small deployments the same server (management server) can be used as proxy and repo server. However it is recommended to use external proxies and repositories. One very important aspect of the repository is that it defines the retention policy. This means that all backup jobs pointing to one repository will get the retention defined at that repository level. More important, in VBO365 retention policy is defined as the number of years/days since the object has been changed. In the case of a 3 year retention policy, only e-mail that have been touched in the past 3 years will be backed up. In case all emails are required for a certain mailbox, keep forever policy can be selected.

Next we will add the O365 organization that we want to backup Once the organization has been added, we can create backup jobs. Although it is possible to backup everything in one job, it is recommended to create separate backup jobs for Exchange, SharePoint , Archive and OneDrive and point them to different repositories.

Next we'll create a backup job for emails of only 4 users in the organization. Start the wizard and give the job a name: Select the users you want to backup: Select the items to backup for the users (by default All, we'll select only e-mails): Add exclusions (in our case not required): Choose the proxy and repository (remember the repo sets the retention):\ Confirm the job execution schedule: The job will be created and stopped. Right click on it and start to backup.

Once the backup finishes, you can right click on the job and open Exchange explorer Posted by razz at 10:39 PM No comments: 
Enable RDP in SLES 12 Next, enable xrdp service and start it: 

Save the changes and restart the firewall service: Posted by razz at 11:00 AM No comments: Labels: firewall, linux, RDP, SLES, xrdp

Friday, September 21, 2018

VCP 6.5 Delta Exam experience

The dreadful reminder of imminent VCP expiration came again. I had already decided to take the VCP delta exam called 2V0-622, without actually doing it. But this time I was prepared. Having happily paid exam fee (using my VMUG Advantage discount), I was waiting for the day to come. It came and passed pretty fast and I did pass the exam.

Must admit I was a bit scared, but it is a delta exam and if you are using the technology on a daily basis then you can't have a lot of surprises. It didn't seem to be a difficult exam to take. Maybe having delivered the ICM 6.5 a few times in my life, had helped. However, I would like to point out several aspects about how I prepared for the exam:

For all of you thinking about  taking the exam, good luck!

Posted by razz at 1:06 PM No comments: Saturday, September 15, 2018

Secure Boot and Acceptance Levels of Hosts and VIBs

Acceptance levels of VIB  provide an information on the amount of certification the software package has undergone. There are four levels of acceptance for VIBs:

Why is this interesting for us? Mostly because of the relationship between secure boot and the acceptance level. Secure boot does not allow to set the acceptance level to CommunitySuported. This makes perfect sens, why would you want to install a VIB that is created by someone outside the trusted partner program. Two answers come to mind: home labs and testing.

With secure boot enabled (which is default for VMs created with UEFI in vSphere 6.5 U1) you will notice the following behavior when trying to set the acceptance level: In order to be able to set the desired acceptance level, you should disable secure boot. If it's a physical server, then you need to do this in UEFI. For VMs, it can be done at VM level, but still needs a power off and then select the VM and edit settings. On VM Options tab, under Boot Options you will find the setting for Secure Boot. If you are connecting to vSphere 6.5, use web client since HTML one does not show the option.

Posted by razz at 3:30 PM No comments: Labels: acceptance level, Secure Boot, VIB, vSphere

Wednesday, September 5, 2018

Installing Veeam Backup for Microsoft Office 365 on Windows Server 2016 Core

Windows Server 2016 Core is a minimal installation that has a smaller footprint which translates to a smaller attack surface. Having security in mind, it make perfect sense to use Core for deploying server components on it.

Veeam Backup for Microsoft Office 365 (VBO365) allows to back up and recover Microsoft Office 365 and on-premises Exchange and SharePoint organizations data containing Microsoft Exchange items, Microsoft SharePoint items, and OneDrive documents.

VBO365 is made of several components:

Since VBO365 is modular and since it needs Internet access, it can be installed on separate machines. In our case, we'll install server and PowerShell extension on a Windows Server 2016 Core situated in DMZ and the console and explorers on the admin workstation in the management area. Repository space will be provisioned on the local disk of VBO365. First, we start by deploying a virtual machine with Windows Server 2016 Core installed on it. The VM is deployed from a template created previously. To create the template do the follwing:
For a step-by-step guide, you may look at this blog post

Remember that Core installation is minimal and restrictive. Hence you would need to enable remote administration and file sharing. This can be done either by using netsh commands or PowerShell.



Once the VM has been installed and configured, convert it to a template. Create a customization specification in vCenter Server and deploy a VM from the template. Before powering on the new VM, resources as demanded by VBO - in a very strict lab environment you could start with 2 vCPU and 4 GB of RAM.

It's now time to install VBO365. The distribution package is made of 3 msi files:
Since we will install separately the server and the explorers, we need to transfer only server msi file. Copy the file to a share on the virtual machine. Then logon to the server and in cmd prompt change location to where the installer has been copied. To install VBO365 server from command line, run the following command:

This will install only server (BR_OFFICE365) and PowerShell extension (PS_OFFICE365). The install will not show any prompt (/qn) and it will log everything to vbo365.log file in the same folder with the install file.

During installation monitor the log file. Once the install is completed successfully, you will see the following lines at the end of the file:

We need to do two more tasks before moving to installation on admin workstation:

To check the services are running, type the following command in PowerShell:

You should see the following output: If any service is not running, you may enable and start it:

To enable firewall ports for the 3 services, run the following:

It's time to logon to admin workstation where console and explorers will be installed. Transfer all 3 msi files to admin workstation, open a command prompt, change folder to msi path and run the following commands one by one (not all at the same time):

We are ready to connect to VBO365 and start configuring it. But this, in the next post.

UPDATE 2018/12/4

Updating VBO365 from command line. Latest VBO patch comes in the form of msp file. To update VBO installation you would simply need to copy the file on the server and run the following command:

You can view the log after the install. Remote proxies can be upgraded from the console.
Posted by razz at 11:12 PM No comments: Labels: Core, Exchange, Office 365, PowerShell, SharePoint, Veeam, Veeam Backup for Microsoft Office 365, Windows Server 2016

Saturday, August 18, 2018

Adding Realtek 8111 driver to vSphere 6.7 image

While reinstalling home lab with vSphere 6.7, I was remembered (the hard way) that my on-board NIC is based on Realtek 8111 chipset which is not included in the default vSphere installation media.

I had to go accept the challenge of finding the drivers and creating a new bootable vSphere ISO. Nothing I haven't done before, but since it is not often I've decided to make it a blog post.

First I needed to find the drivers. Using a bit of google foo I found the blog of a long time vExpert (thank you) which has also a collection of drivers. I've downloaded the net55-r8168 offline bundle . From VMware site I've downloaded offline bundle for vSphere 6.7. Placed both of them in the same folder and opened a PowerCLI prompt.

First, create a new software depot using the two bundles:

Next, create a new image profile: see what profiles exist, clone one and change its acceptance level to "community" (because the driver I am about to load is community signed):

Add the driver to image profile:

Lastly, generate the vSphere 6.7 ISO containing the driver:

In one picture, it looks like this: One more step is needed. Since we have the ISO, we just need to write on a bootable USB. To do this, I've downloaded Rufus, portable version. Run the software, select destination a USB stick (it will be overwritten so better not having any useful data on it), selected the source my new ISO and pressed start. If during the creation of the bootable stick you are asked to update menu.c32, press YES. After it finishes I've plugged the stick in my physical box and happily installed ESXi.

File download test reached 800 Mbps, a normal value keeping in mind the connectivity between my laptop and the ESXi host.

Posted by razz at 4:19 PM 6 comments: Labels: driver, ISO, PowerCLI, Realtek, vSphere 6.7


vExpert Program "You're in!"

I have the bad habit of waking up and immediately reading e-mails on my phone. This time I was in for a great surprise that put a smile on my face. I got accepted to vExpert program.

I consider it to be both an honor and a responsibility. I know my blogging is not as frequent as I wish to. And together with VMUG co-leaders we are striving to make VMUG meetings fun and interesting. The only thing I can do is to keep on giving back to community and make it better each time and hoping to see more and more people at VMUG Romania meetings.

So, thank you for this amazing ride (so far). And a special thanks to Constantin Ghioc (Titi) and Jorge de la Cruz for determining me to apply to the program.

My profile on vExpert Directory is here .
Posted by razz at 12:55 PM No comments: Labels: vExpert
Location: Bucharest, Romania