Install Let’s Encrypt certificate on Microsoft Exchange

Download the ACME client for windows here:

https://www.win-acme.com

then unzip it into a directory, e.g. C:\win-acme and change into that directory. then paste the following command (but make sure to change the needed parameters before executing):

.\wacs.exe --source manual --host "mail.example.com,autodiscover.example.com" --certificatestore My --acl-fullcontrol "network service,administrators" --installation "iis,script" --installationsiteid 1 --script "./Scripts/ImportExchange.v2.ps1" --scriptparameters "'{CertThumbprint}' 'IIS,SMTP,IMAP,POP' 1 '{CacheFile}' '{CachePassword}' '{CertFriendlyName}'"

In this example we want a certificate for mail.example.com and autodiscover.example.com for the services IIS, SMTP, IMAP and POP. Important note for Hybrid Exchange configurations (synced to Office 365): you should use 0 instead of 1 in the --scriptparameters, which translates to the LeaveOldExchangeCerts input of the sample script.

More infos about this: https://www.win-acme.com/manual/advanced-use/examples/exchange

Microsoft september patch printing issues

After installing latest server patch on Windows Server 2012R2 and 2016, clients were unable to print to network printers due to some protocol changes done. If you encounter 0x0000007b or 0x0000011b error while trying to print and you do not want to uninstall the latest patch here a workaround:

Go and open regedit and look for

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\

Then create a new DWORD value:

RpcAuthnLevelPrivacyEnabled=0

last go to services and restart the print spooler. Done, printing should work again.