之前為了想把手機畫面直接投影到電視上，買了Terzomen AirLink，快要1900元。
最近又買了小米盒子3，比較一下差別。
Terzomen AirLink
優點:不用特別設定，接上去就可以用了。
缺點:居然只支援apple的產品，android的手機/平板都不支援。
接在手機那端的連結器看久還蠻燙的。
單純就是無線傳輸影像的功能，一定要搭配手機或電腦用。
比較貴。
優點:apple跟android的設備都支援手機投影。
不需要手機也有一些串流app可以看片。
比較便宜。
缺點:一開始設定有點難用。
需要有wifi。
相比之下，配合自己使用的環境，用小米盒子就夠了。
outlook 郵件清單，除了寄件人，主旨，時間之類的，還會在下一行顯示部分的郵件內容，
讓整個郵件清單看起來很雜。
可以在檢視的功能表中，在訊息預覽裡面，選擇關閉，就不會顯示那一行郵件內容了。
 |
In the Outlook mail list, in addition to the sender, subject, and time, part of the email content is also displayed on the next line,
which makes the entire mail list look cluttered.
You can go to the View tab and, under Message Preview, select Off to stop showing that line of email content.
同一個M365帳號，在兩台電腦上都設定的outlook，但設定的底色不同，結果兩台電腦上的outlook底色都會一直亂跳。
是因為outlook設定，有一個"將我的outlook設定儲存在雲端中"被打勾了，所以兩台電腦的outlook設定會互相影響，只要把這個設定取消就恢復正常了。
The same M365 account was configured in Outlook on two different computers, but each had a different theme color. As a result, the background color in Outlook kept switching back and forth on both computers.
This happened because the Outlook setting "Store my Outlook settings in the cloud" was enabled, causing the settings on one computer to affect the other. Simply unchecking this option resolved the issue.
在WINDOWS2019下載windows 的更新檔要進行安裝，但執行後都沒任何反應，或是要等很久才會跳出smart screnn的警告視窗。
這是因為系統設定中，有做安全性控管，設成警告。
只要先把它調成關閉，重新登入一次系統，這時後在點選安裝，視窗就會正常跳出，讓我們點進下一步進行安裝。
有一份excel編輯到一半時當掉了，重開啟啟後，裡面完全沒任何東西，沒任何頁籤。
所以就用修復的方式再開啟一次，但還是沒效，想說沒救了。
結果就查了一下excel沒有任何頁籤，沒想到還真的有這個設定，去檢視裡面，取消隱藏頁籤，檔案裡的資料就全部出現，恢復正常了。
偶爾都會遇到ad帳號一直被鎖的問題，就要去查明原因，下面就列出清查的方式。
事情準備 : dc主機上相關log功能一定要開。
1. 在gpo->domain controllers policy裡，要啟用下列三個稽核功能，這樣在事件檢視器裡的安全性事件裡，才能找到登入失敗的相關訊息。
We occasionally encounter issues where an AD account keeps getting locked, and we need to investigate the cause. Below are the steps for troubleshooting.
Preparation:
Make sure the relevant logging features are enabled on the domain controller (DC).
In GPO -> Domain Controllers Policy, enable the following three audit policies. This will allow you to find failed login information under the Security events in Event Viewer.
Also in GPO -> Domain Controllers Policy, enable NTLM auditing. This helps you locate more accurate failed login details under the NTLM section in Event Viewer.
Configure alerts to notify relevant personnel via email when an account lockout log is generated. This ensures you're aware when an account is repeatedly getting locked.
Troubleshooting Process:
When you discover that a certain account keeps getting locked:
First, check the Security event logs for event IDs 4625, 4771, and 4776. If you can find the source IP there, locate the corresponding computer and take action.
If the source computer cannot be identified in the Security logs, check the NTLM logs. These also show the source machine involved in the failed login.
A recent unusual case:
An account from domain A was being locked, but the NTLM log showed that the secure channel name was a domain controller from trusted domain B. However, the workstation name shown could not be found in domain B and kept changing.
In this case, we checked the NTLM logs on the domain controller in domain B. The secure channel name in the logs pointed to a computer within the domain.
We later found that this computer was running a public-facing service, and there were some abnormal external connection attempts. After shutting down the service, the account lockout issue was resolved.
如果要查詢m365 office 帳號在哪一台設備啟用了，就要先進到Microsoft 365 admin center。
在"作用中的使用者"，點選該帳號，左邊會出現相關資訊，在最下面就有一個"檢視 Microsoft 365 啟用"。
裡面就會顯示在哪些裝置上啟用了這個帳號。
利用Next Terminal， 遠端連線到其他台windows電腦時，按某些鍵時，並不會出現正確的字，會變成其他快捷鍵功能。譬如說按下t，會跳出檔案總管之類的。
這時後就是把那台windows重開機，就會正常了。
最近Fortigate 升級firmware後，某些win7在使用sslvpn連線都會出現 mismatch in the TLS version的錯誤。
After upgrading the Fortigate firmware, we observed that some Windows 7 systems encountered a "mismatch in the TLS version" error when attempting to connect via SSL VPN.
We verified that all TLS-related options were enabled under Internet Options, but the issue persisted.
Upon further investigation, we discovered that the problem was caused by missing Windows Updates on the affected Windows 7 machines.
However, we were unable to determine exactly which specific update resolved the issue, as we did not test each update individually. Instead, after applying all pending Windows Updates, the SSL VPN connection was successfully established.
照著下列這編要做PYTHON發訊息到telegram(https://vocus.cc/article/67ca97aefd8978000187e654)，
結果出訊錯誤訊自 "{'ok': False, 'error_code': 400, 'description': 'Bad Request: chat not found'}"
原來是你要先在telegram搜尋到自己剛建立的bot，傳個訊息給它，才可以用python發訊息給它。
主機在意外當機後，有一個備份工作一直無法正常運作，會出現下列錯誤
錯誤碼： [32:399] 描述： Deduplication Database (DDB) access path [D:\xxx_dedup]
on MediaAgent [commvault] is offline for Storage Policy Copy [VMBackup_Policy / xxx ].
Offline Reason: The active DDB of current storage policy copy is not available to use. 請啟動重複數據刪除DB重建作業。
查了一下原廠網站說明，我們就是因為ddb程序意外中斷的關係造成這個問題。
對照下面的解決方法，我們必預要手動執行復原 Deduplication Database的工作 。
方法就是從"儲存資源"->"DeDup引擎"，找到執行失敗的策略，去"所有工作"，裡面有個"復原存放區"，執行這個工作。
The original ESXi was an HP-specific version of 6.5. To install a newer Windows Server OS vm, an ESXi upgrade is required.
Since ESXi no longer offers a free version, the latest version was downloaded from HP’s official website:
HP ESXi Download.
The upgrade is fast, taking less than 15 minutes. However, one important thing to note is that after upgrading, the previous ESXi 6.5 free license will no longer work. When logging into the ESXi web console, it will indicate that the current version is a 60-day trial.
To resolve this, simply enter a free ESXi 7.0 license key to activate it. This key is not brand-specific and works for any ESXi 7.0 installation.
用週選做covered call，遇到這種一直殺的盤，沒適時停損，愈賠愈多，最後受不了，心態扛不住昨晚才停損，停損後就往上噴了.....
前幾個月賺的都沒了還倒賠，做期權，紀律真的太重要了。
在ad環境中，每個使用者帳號可以設定電腦加入網域10次，如果要查這個帳號剩次數可以用，可以用下列這個powershell，它會顯示已經使用幾次，下圖就是某帳號已用掉3次，還剩7次。
$UserName = "account" # 替換為你的帳號名稱
$UserSID = (Get-ADUser $UserName).SID
Get-ADComputer -Filter * -Property ms-DS-CreatorSID | Where-Object { $_.'ms-DS-CreatorSID' -eq $UserSID } | Measure-Object
在iis上設定了一個新的站台後，卻無法啟動，錯誤訊息是"程序無法存取檔案，因為檔案正由另一個程序使用。(發生例外狀況於HRESULT:0x80070020)"
看是要把站台改port，會把其他佔用port的程序關閉即可。
After setting up a new site on IIS, it fails to start with the error message:
"The process cannot access the file because it is being used by another process. (Exception from HRESULT: 0x80070020)"
This issue occurs because the port assigned to the site is already in use by another process. You can use TCPView to check which process is occupying the port.
To resolve this, you can either change the site's port or terminate the process that is using the port.
因為某些win11電腦透過wsus安裝累績更新時，都會顯示"正在下載 0%"，放了好幾個小時也都沒動，所以打算先把更新檔(msu檔)下載到wsus一個共用資料夾，用gpo派送，讓這些電腦一開始登入後，就開始直接用batch檔來安裝，batch檔也是放在wsus共用資料夾。
安裝指令是"wusa.exe "\\wsus_server\offline_install\11\kb5050021.msu" /quiet /norestart"
結果執行失敗，在事件檢視器裡找到下列錯誤: Windows 更新 "KB5050021：Windows 安全性更新" 無法安裝，因為發生錯誤 2149842953 "" (命令列: "wusa.exe "\\wsus_server\offline_install\11\kb5050021.msu" /quiet /norestart")
後來就把batch檔先複製到本機，msu檔一樣是在wsus裡，然後執行本機上的安裝batch檔，就成功安裝了。
Due to some Windows 11 computers showing "Downloading 0%" when installing cumulative updates via WSUS, even after being left for several hours with no progress, I decided to download the update file (MSU file) to a shared folder on the WSUS server. Then, I used GPO to distribute it so that these computers would start running a batch file to install the update directly upon login. The batch file is also stored in the WSUS shared folder.
The installation command used is:
wusa.exe "\\wsus_server\offline_install\11\kb5050021.msu" /quiet /norestart
However, the execution failed. In the Event Viewer, I found the following error:
"Windows update 'KB5050021: Windows Security Update' could not be installed because of error 2149842953"
(Command line: wusa.exe "\\wsus_server\offline_install\11\kb5050021.msu" /quiet /norestart)
Later, I tried copying the batch file to the local machine while keeping the MSU file in the WSUS shared folder. After executing the batch file locally, the installation succeeded.
一台新的win11筆電開機後，進入初始設定，過程中一定要求一定要連上外部網路，連不上的話就會卡在這一步，沒辦法略過。
解決方法就是 按下Shift+F10，就會跳出指令視窗，接著輸入這個指令 oobe\bypassnro
然後系統就會重開始，又回到進入初始設定，過程中連上外部網路這一個階段，就會多了一個略過的按鈕可以點選，繼續後面的設定。
When setting up a new Windows 11 laptop for the first time, during the initial setup process, you're required to connect to an external network. If you're unable to connect, the setup will be stuck at this step without an option to skip it.
To solve this issue, press Shift + F10, which will open the command prompt. Then, enter the following command: oobe\bypassnro.
The system will restart and return to the initial setup process. At the stage where it asks you to connect to an external network, there will now be a "Skip" button, allowing you to bypass this step and continue with the rest of the setup.
永豐證券質押三檔股票，利率2.6%，六個月要到期了，就在LINE上問了營業員怎麼展延，利率多少，是不是就照官網上公告的。
營業員查了一下，展延的話，利率變3.3%，比官網上公佈的差不多，確定要的話，他就會打來錄音確認我要展延，會在電話中說明展延的一些細節。
因為質押的數量不多，也沒看到有其他利率便宜很多的，就決定展延了。
平均起來還不到3%，還可以接受。
wsus 時間久了，資料愈來愈多，執行伺服器清理精靈，也清不了什麼東西。
這時就要把之前核准過，但已經被取代的老舊更新，通通設定拒絕，然後才執行伺服器清理精靈，才能清掉那些用不到的更新，清出磁碟空間。
Over time, WSUS accumulates more and more data, and running the Server Cleanup Wizard doesn’t effectively clean up much.
At this point, you need to set previously approved but superseded updates to "Declined." Then, run the Server Cleanup Wizard again to remove those unnecessary updates and free up disk space.
重灌好的win11中文版，馬上改成英文版，語言套件安裝都很順利。
但切換別的帳號時，一樣還是中文版，需要重新安裝，可是這時語言套件這個項目一直顯示擱置中，沒辦法裝成功。
後來查了一下才發現，是windows defender搞的鬼，因為一開始改好英文版，有順便執行windows update，有更新的windows defender，之後別的帳號登入就沒辦法安裝語言套件。
這時就是把防火牆通通關閉，然後新增一個機碼，HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\ 底下新增一個dword32位值，名稱是"DisableAntiSpyware"，值設成1，然後重開機。
再進行一次語言套件安裝，就成功了。
After reinstalling Windows 11 in Chinese, I immediately switched it to English. The language pack installation went smoothly.
However, when switching to another user account, the interface was still in Chinese, and I had to reinstall the language pack. At this point, the language pack installation kept showing as "Pending" and couldn’t be completed successfully.
After some investigation, I discovered that the issue was caused by Windows Defender. Initially, after switching to English, I also ran Windows Update, which included updates for Windows Defender. Afterward, other user accounts couldn’t install the language pack.
To fix this, I disabled the firewall completely and added a registry key under:HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\
I created a new 32-bit DWORD value named "DisableAntiSpyware" and set its value to 1, then restarted the computer.
Once I did this, I was able to successfully install the language pack.
使用Microsoft 365 商務標準版 (不含 Teams) 的outlook，雖然沒有teams授權，但發送會議通知時，預設會自動產生一個eams會議連結。
若把該連結刪除，換上其他teams帳號產生的會議連結上去，就會無法傳送，跳出下列錯誤"無法傳送此邀請。因為文中的teams會議詳細資料與此會議不同。您希望我們修正會議邀請嗎?"。
解決方法:
到outlook選項中的行事曆，裡面的行事曆選項，把"新增線上會議室所有會議"打勾取消。
之後在建立會議時，就不會自動產生teams連結，會議裡就可以放入別的teams帳號建立的連結了。
