WIN7無法使用FORTI SSLVPN -5029

 最近Fortigate 升級firmware後，某些win7在使用sslvpn連線都會出現 mismatch in the TLS version的錯誤。

有到網際網路選項裡，確確TLS裡面的選項 都有打勾了，還是連不到。

後來才發現是win7的有一些windows update沒安裝造成的。但不確定是哪一支更新，因為沒有一支一支測試，就是全部都裝上，就沒問題了。

After upgrading the Fortigate firmware, we observed that some Windows 7 systems encountered a "mismatch in the TLS version" error when attempting to connect via SSL VPN.

We verified that all TLS-related options were enabled under Internet Options, but the issue persisted.
Upon further investigation, we discovered that the problem was caused by missing Windows Updates on the affected Windows 7 machines.
However, we were unable to determine exactly which specific update resolved the issue, as we did not test each update individually. Instead, after applying all pending Windows Updates, the SSL VPN connection was successfully established.

PYTHON發訊息到telegram

 照著下列這編要做PYTHON發訊息到telegram(https://vocus.cc/article/67ca97aefd8978000187e654)，

結果出訊錯誤訊自 "{'ok': False, 'error_code': 400, 'description': 'Bad Request: chat not found'}"

原來是你要先在telegram搜尋到自己剛建立的bot，傳個訊息給它，才可以用python發訊息給它。

COMMVAULT備份工作失敗-錯誤碼： [32:399]

主機在意外當機後，有一個備份工作一直無法正常運作，會出現下列錯誤

錯誤碼： [32:399] 描述： Deduplication Database (DDB) access path [D:\xxx_dedup]

 on MediaAgent [commvault] is offline for Storage Policy Copy [VMBackup_Policy / xxx ]. 

Offline Reason: The active DDB of current storage policy copy is not available to use. 請啟動重複數據刪除DB重建作業。

查了一下原廠網站說明，我們就是因為ddb程序意外中斷的關係造成這個問題。

對照下面的解決方法，我們必預要手動執行復原 Deduplication Database的工作 。

方法就是從"儲存資源"->"DeDup引擎"，找到執行失敗的策略，去"所有工作"，裡面有個"復原存放區"，執行這個工作。

HP ESXI 6.5 升級7.0 U3

原本的ESXI是HP專用6.5版，為了安裝比較新的win server os，要升級ESXI。

目前ESXI已無免費版，所以是去HP的官網下載裡面最新版本的ESXI(https://support.broadcom.com/c/portal/login?formDate=1742174666301&saveLastPath=false&redirect=%2Fgroup%2Fecx%2Fproductfiles%3FsubFamily%3DVMware%2520vSphere%26displayGroup%3DVMware%2520vSphere%2520-%2520Enterprise%2520Plus%26release%3D7.0%26os%3D%26servicePk%3D202621%26language%3DEN&idpEntityId=https%3A%2F%2Faccess.broadcom.com%2Fdefault)

升級方式

1.先把iso做成開機usb，插上server。

2.server重開機，讀取usb。

3.在安裝選項的地方，選擇升級esxi。

4.安裝完成重開機。

時間很快，不到15分鐘就好了，但有一個地方要注意的事，升級後，之前使用的6.5免費版授權序號就不能用了，登入esxi web console時，就會提示目前是60天試用版。

這時只要在輸入7.0免費版的esxi序號啟動就行了，這個序號沒有分是不是用在某一廠牌伺服器專用的esxi，只要是7.0都通用。

The original ESXi was an HP-specific version of 6.5. To install a newer Windows Server OS vm, an ESXi upgrade is required.

Since ESXi no longer offers a free version, the latest version was downloaded from HP’s official website:
HP ESXi Download.

Upgrade Process:

1. Create a bootable USB from the ISO and plug it into the server.
2. Reboot the server and boot from the USB.
3. In the installation options, select "Upgrade ESXi."
4. After installation, reboot the server.

The upgrade is fast, taking less than 15 minutes. However, one important thing to note is that after upgrading, the previous ESXi 6.5 free license will no longer work. When logging into the ESXi web console, it will indicate that the current version is a 60-day trial.

To resolve this, simply enter a free ESXi 7.0 license key to activate it. This key is not brand-specific and works for any ESXi 7.0 installation.

Covered Call賠賠賠

用週選做covered call，遇到這種一直殺的盤，沒適時停損，愈賠愈多，最後受不了，心態扛不住昨晚才停損，停損後就往上噴了.....

前幾個月賺的都沒了還倒賠，做期權，紀律真的太重要了。

查詢使用者帳號可以設定電腦加入網域次數

在ad環境中，每個使用者帳號可以設定電腦加入網域10次，如果要查這個帳號剩次數可以用，可以用下列這個powershell，它會顯示已經使用幾次，下圖就是某帳號已用掉3次，還剩7次。

$UserName = "account"  # 替換為你的帳號名稱

$UserSID = (Get-ADUser $UserName).SID

Get-ADComputer -Filter * -Property ms-DS-CreatorSID | Where-Object { $_.'ms-DS-CreatorSID' -eq $UserSID } | Measure-Object

IIS 站台啟動失敗-程序無法存取檔案，因為檔案正由另一個程序使用。(發生例外狀況於HRESULT:0x80070020)

 在iis上設定了一個新的站台後，卻無法啟動，錯誤訊息是"程序無法存取檔案，因為檔案正由另一個程序使用。(發生例外狀況於HRESULT:0x80070020)"

這是因為站台上設定的port已經被別的程序使用了，可以用tcpview去確認被什麼程序給佔用了。

看是要把站台改port，會把其他佔用port的程序關閉即可。

After setting up a new site on IIS, it fails to start with the error message:

"The process cannot access the file because it is being used by another process. (Exception from HRESULT: 0x80070020)"

This issue occurs because the port assigned to the site is already in use by another process. You can use TCPView to check which process is occupying the port.

To resolve this, you can either change the site's port or terminate the process that is using the port.

透過batch安裝msu更新檔失敗-Windows 安全性更新" 無法安裝，因為發生錯誤 2149842953 "

 因為某些win11電腦透過wsus安裝累績更新時，都會顯示"正在下載 0%"，放了好幾個小時也都沒動，所以打算先把更新檔(msu檔)下載到wsus一個共用資料夾，用gpo派送，讓這些電腦一開始登入後，就開始直接用batch檔來安裝，batch檔也是放在wsus共用資料夾。

安裝指令是"wusa.exe  "\\wsus_server\offline_install\11\kb5050021.msu" /quiet /norestart"

結果執行失敗，在事件檢視器裡找到下列錯誤: Windows 更新 "KB5050021：Windows 安全性更新" 無法安裝，因為發生錯誤 2149842953 "" (命令列: "wusa.exe  "\\wsus_server\offline_install\11\kb5050021.msu" /quiet /norestart")

後來就把batch檔先複製到本機，msu檔一樣是在wsus裡，然後執行本機上的安裝batch檔，就成功安裝了。

Due to some Windows 11 computers showing "Downloading 0%" when installing cumulative updates via WSUS, even after being left for several hours with no progress, I decided to download the update file (MSU file) to a shared folder on the WSUS server. Then, I used GPO to distribute it so that these computers would start running a batch file to install the update directly upon login. The batch file is also stored in the WSUS shared folder.

The installation command used is:

wusa.exe "\\wsus_server\offline_install\11\kb5050021.msu" /quiet /norestart

However, the execution failed. In the Event Viewer, I found the following error:

"Windows update 'KB5050021: Windows Security Update' could not be installed because of error 2149842953"

(Command line: wusa.exe "\\wsus_server\offline_install\11\kb5050021.msu" /quiet /norestart)

Later, I tried copying the batch file to the local machine while keeping the MSU file in the WSUS shared folder. After executing the batch file locally, the installation succeeded.

win11第一次設定 一定要有網路嗎

  一台新的win11筆電開機後，進入初始設定，過程中一定要求一定要連上外部網路，連不上的話就會卡在這一步，沒辦法略過。

解決方法就是 按下Shift+F10，就會跳出指令視窗，接著輸入這個指令 oobe\bypassnro

然後系統就會重開始，又回到進入初始設定，過程中連上外部網路這一個階段，就會多了一個略過的按鈕可以點選，繼續後面的設定。

When setting up a new Windows 11 laptop for the first time, during the initial setup process, you're required to connect to an external network. If you're unable to connect, the setup will be stuck at this step without an option to skip it.

To solve this issue, press Shift + F10, which will open the command prompt. Then, enter the following command: oobe\bypassnro.

The system will restart and return to the initial setup process. At the stage where it asks you to connect to an external network, there will now be a "Skip" button, allowing you to bypass this step and continue with the rest of the setup.

永豐證券質押第一次展延

 永豐證券質押三檔股票，利率2.6%，六個月要到期了，就在LINE上問了營業員怎麼展延，利率多少，是不是就照官網上公告的。

營業員查了一下，展延的話，利率變3.3%，比官網上公佈的差不多，確定要的話，他就會打來錄音確認我要展延，會在電話中說明展延的一些細節。

因為質押的數量不多，也沒看到有其他利率便宜很多的，就決定展延了。

平均起來還不到3%，還可以接受。

wsus 清除空間

  wsus 時間久了，資料愈來愈多，執行伺服器清理精靈，也清不了什麼東西。

這時就要把之前核准過，但已經被取代的老舊更新，通通設定拒絕，然後才執行伺服器清理精靈，才能清掉那些用不到的更新，清出磁碟空間。

Over time, WSUS accumulates more and more data, and running the Server Cleanup Wizard doesn’t effectively clean up much.

At this point, you need to set previously approved but superseded updates to "Declined." Then, run the Server Cleanup Wizard again to remove those unnecessary updates and free up disk space.

win11 安裝語言套件 擱置中

  重灌好的win11中文版，馬上改成英文版，語言套件安裝都很順利。

但切換別的帳號時，一樣還是中文版，需要重新安裝，可是這時語言套件這個項目一直顯示擱置中，沒辦法裝成功。

後來查了一下才發現，是windows defender搞的鬼，因為一開始改好英文版，有順便執行windows update，有更新的windows defender，之後別的帳號登入就沒辦法安裝語言套件。

這時就是把防火牆通通關閉，然後新增一個機碼，HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\ 底下新增一個dword32位值，名稱是"DisableAntiSpyware"，值設成1，然後重開機。

再進行一次語言套件安裝，就成功了。

After reinstalling Windows 11 in Chinese, I immediately switched it to English. The language pack installation went smoothly.

However, when switching to another user account, the interface was still in Chinese, and I had to reinstall the language pack. At this point, the language pack installation kept showing as "Pending" and couldn’t be completed successfully.

After some investigation, I discovered that the issue was caused by Windows Defender. Initially, after switching to English, I also ran Windows Update, which included updates for Windows Defender. Afterward, other user accounts couldn’t install the language pack.

To fix this, I disabled the firewall completely and added a registry key under:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\
I created a new 32-bit DWORD value named "DisableAntiSpyware" and set its value to 1, then restarted the computer.

Once I did this, I was able to successfully install the language pack.

Microsoft 365 商務標準版 (不含 Teams) outlook問題-無法傳送此邀請。因為文中的teams會議詳細資料與此會議不同。

 

使用Microsoft 365 商務標準版 (不含 Teams) 的outlook，雖然沒有teams授權，但發送會議通知時，預設會自動產生一個eams會議連結。

若把該連結刪除，換上其他teams帳號產生的會議連結上去，就會無法傳送，跳出下列錯誤"無法傳送此邀請。因為文中的teams會議詳細資料與此會議不同。您希望我們修正會議邀請嗎?"。

解決方法:

到outlook選項中的行事曆，裡面的行事曆選項，把"新增線上會議室所有會議"打勾取消。

之後在建立會議時，就不會自動產生teams連結，會議裡就可以放入別的teams帳號建立的連結了。