RSSAmplifier

Blog

Hidden Obelisk

Real-world solutions for system administrators

hiddenobelisk.comRSS feed ↗10 posts

Latest posts

Kerberos SSO across a trust broke after patching. The updates were not the cause

Two Active Directory domains with a trust between them. User accounts and workstations live in one of them, an internal web service lives in the other. Throughout this article I call them the user domain and the service domain, and cat full-post.md

Exchange 2016: Recovering a Single Mailbox from an EDB Backup Using a Recovery Database

The Problem A shared mailbox used by several departments turned up almost empty. The owner opened it in OWA and found two messages where there used to be months of correspondence. Nobody admitted to deleting anything, and the deleted item cat full-post.md

Exchange OWA Inline Images Disappeared After May 2026: Root Cause and Fix

Last updated: May 20, 2026 ⚠️ Update May 20, 2026: If images are broken in classic Outlook desktop (not OWA) — this is a separate Microsoft bug introduced in build 19929.20164+, unrelated to EEMS. See the Outlook Desktop Bug section cat full-post.md

Exchange 2016 CU Upgrade Fails: Fixing Virtual Directory Errors Step by Step

The Problem You are upgrading Exchange 2016 to CU23 and the installer keeps failing at Mailbox role: Client Access service with errors like these: Or: Every time you fix one error and re-run Setup, it fails on a different virtual cat full-post.md

Exchange 2016 OWA HTTP 500 After Auth Certificate Expiry: Complete Recovery Guide

The Problem One morning users start complaining they cannot access OWA. Outlook shows Trying to connect… and never connects. You open the browser and see: Or worse: an ERR_TOO_MANY_REDIRECTS loop that never stops. You RDP into the server. All Exchange cat full-post.md

DeepSeek V3.2 on CPU: Fixing the “Missing Opening Tag” Glitch

I hit a weird bug: the model’s thinking process starts correctly, but llama.cpp seems to eat the opening think> tag. You only get the closing /think> at the very end. Because of this, Open WebUI fails to collapse the reasoning cat full-post.md

Client Push Failures: A Log-Driven Troubleshooting Guide for ConfigMgr

When a Client Push fails, the console rarely tells you why. It aggregates status, masks transport-layer rejections, and leaves you guessing. If you’re still relying on high-level compliance states or waiting for a retry cycle, you’re adding noise to an cat full-post.md

Exchange 2016: Mapping Secondary Mailboxes in OWA (Classic UI)

⚠️ Exchange 2016 reached End of Support on October 14, 2024. This guide covers legacy on-prem scenarios. For modern environments, review Exchange Online mailbox delegation and OWA365 unified inbox features. Admins frequently run into the same user complaint: Outlook desktop cat full-post.md

Detecting Portable and Unauthorized Software with PowerShell and GPO

In most enterprise environments, software inventory is treated as a solved problem. Tools like Microsoft Endpoint Configuration Manager (MECM/SCCM), Intune, or even basic registry parsing are deployed, tuned, and assumed to provide complete visibility. But inventory tools only report what cat full-post.md

Deploy Trusted Root Certificates via GPO (Step-by-Step Guide)

When working in a Windows domain you will eventually face a situation where all machines need to trust a specific certificate. This can be an internal PKI a proxy with SSL inspection or internal services using custom TLS certificates. Installing cat full-post.md