Category Archives: Windows

Windows: Export EventLog from command line

(Copy pasted from:

Windows has a builtin command line utility to deal with Eventlogs: wevtutil

Some examples.

List all registered Eventlogs
D:> wevtutil el

Export the System EventLog to a file
D:> wevtutil epl System c:\%Computername%_System_log.evtx

Export the Application EventLog to a file
D:> wevtutil epl Application c:\%Computername%_Application_log.evtx

Or the Remote Desktop EventLog to a file
D:> wevtutil epl Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational c:\%Computername%_rdp_log.evtx

Search the last 100 Entries in Application EventLog for an Event with ID 1704 as Text
D:> wevtutil qe Application /q:”Event/System/EventID=1704″ /c:100 /f:text

(%Computername% will be replaced by the name of your computer in exported files name)

Leave a comment

Posted by on September 7, 2021 in Windows


Excel Remove some letters from a cell and extract some values from the rest.

In a specific situation where you want to remove the certain number of characters from a cell, and you want to take a part of the number out. You can use this formula.

Example: I have a cell with this value 0107856985652HJKG. I need to remove the first three values, then take the next 10 characters out.

010 7856985652 HJKG


If my value wan in cell A1 the formula will look like this ==>


Leave a comment

Posted by on August 17, 2021 in excel, Windows


HP Server Windows 2019 ROK bios lock error [Solution]

This error happened when I tried to install Win server 2019 ROK on an HP server(vmware esxi). This happens when the vm does not see the motherboard.

Solution: Download the vmx file for your vm. add the following line and then upload. thats all.

SMBIOS.reflectHost= "TRUE"
Leave a comment

Posted by on May 19, 2021 in Windows


Open sections of Control Panel from CMD

  • Accessibility Options control windows+R > access.cpl
  • System properties, Add domain, change name windows + R > sysdm.cpl
  • Add/Remove Programs windows + R > appwiz.cpl
  • Display Properties windows+R> desk.cpl
  • Date/Time Properties w+R> timedate.cpl
  • Fonts Folder WQ+R> fonts
  • Network properties W+R > ncpa.cpl
  • Regional Settings control intl.cpl

Internet Properties            windows+R > inetcpl.cpl
Joystick Properties            windows+R > joy.cpl
Keyboard Properties            windows+R > main.cpl keyboard
Microsoft Exchange             windows+R > mlcfg32.cpl
   (or Windows Messaging)
Microsoft Mail Post Office     windows+R > wgpocpl.cpl
Modem Properties               windows+R > modem.cpl
Mouse Properties               windows+R > main.cpl
Multimedia Properties          windows+R > mmsys.cpl
Network Properties             windows+R > netcpl.cpl
                               NOTE: In Windows NT 4.0, Network
                               properties is Ncpa.cpl, not Netcpl.cpl
Password Properties            control password.cpl
PC Card                        control main.cpl pc card (PCMCIA)
Power Management (Windows 95)  control main.cpl power
Power Management (Windows 98)  control powercfg.cpl
Printers Folder                control printers

Scanners and Cameras           control sticpl.cpl
Sound Properties               control mmsys.cpl sounds
System Properties              control sysdm.cpl
Leave a comment

Posted by on January 30, 2021 in Windows


Messages sent from a shared mailbox aren’t saved to the Sent Items folder of the shared mailbox in Outlook

Copy pasted for future reference from Microsoft docs website.

Assume that you’re using Microsoft Outlook 2010 or a later version, and you’ve been delegated permission to send email messages as another user or on behalf of another user from a shared mailbox. However, when you send a message as another user or on behalf of the user, the sent message isn’t saved to the Sent Items folder of the shared mailbox. Instead, it’s saved to the Sent Items folder of your mailbox.

In Office 365, shared mailboxes don’t require a license and can’t be added to Outlook as an independent mailbox. You can’t sign in to a shared mailbox. Instead, you sign in to your own mailbox, and then you open the shared mailbox. When you send or reply to a new message from the shared mailbox, Outlook automatically sends or replies from the sender’s account. Therefore, messages are stored in the Sent Items folder of the sender’s mailbox.

Method 1: Configure the mailbox to save a copy of the message to the Sent Items folder of the shared mailbox in Exchange Online or in on-premises Exchange Server

Exchange Online in Office 365 or Exchange Server 2013 Cumulative Update 9 or later update

Cumulative Update 9 for Exchange Server 2013 introduced a new feature that lets administrators configure the Sent Items folder to which a message is copied. For more information, see Exchange Blog – Want more control over Sent Items when using shared mailboxes?

Using Exchange PowerShell, for emails Sent As the shared mailbox, run the following cmdlet:PowerShellCopy

set-mailbox <mailbox name> -MessageCopyForSentAsEnabled $True

Using Exchange PowerShell, for emails Sent On Behalf of the shared mailbox, run the following cmdlet:PowerShellCopy

set-mailbox <mailbox name> -MessageCopyForSendOnBehalfEnabled $True

Exchange Server 2010 Service Pack 2 Update Rollup 4 or later update

Update Rollup 4 for Exchange Server 2010 Service Pack 2 introduced a new Exchange PowerShell cmdlet to configure the Sent Items folder to which a message is copied. Because this new feature is handled by the server that’s running Exchange Server, Outlook can be configured in online mode or cached Exchange mode. However, this feature works only if the Outlook DelegateSentItemsStyleregistry (Method 2 below) value is disabled.

For more information about the Set-MailboxSentItemsConfiguration cmdlet, see the following Microsoft Knowledge Base article:

2632409 Messages sent by using the “Send As” and “Send on behalf” permissions are only copied to the Sent Items folder of the sender in an Exchange Server 2010 environment


The MessageCopyForSentAsEnabled and MessageCopyForSendOnBehalfEnabled settings are not supported if the user mailbox and shared mailbox are located in different environments (cloud and on-premises). The settings are supported only if both mailboxes are in the same environment (cloud or on-premises).

Method 2: Set the DelegateSentItemsStyle registry value on the Outlook client


Outlook must be configured to run in cached mode for this option to work correctly. For more information, see the following Microsoft Knowledge Base article:

2703723 Email remains in the Outbox when you use the DelegateSentItemsStyle registry value

If you’re running Outlook 2010, install the Outlook 2010 hotfix package that’s dated December 14, 2010. Then, follow these steps.

For more information about this hotfix package, see the following Microsoft Knowledge Base article:

2459115 Description of the Outlook 2010 hotfix package (outlook-x-none.msp): December 14, 2010


If you’re running Outlook 2013 or a later version, you don’t have to install any hotfix.

  1. Click Start, click Run, type regedit, and then click OK.
  2. Locate and then click the following registry subkey:HKEY_CURRENT_USER\Software\Microsoft\Office\x.0\Outlook\Preferences NoteThe x.0 placeholder represents your version of Office (16.0 = Office 2016, 15.0 = Office 2013, 14.0 = Office 2010).
  3. On the Edit menu, point to New, and then click DWORD Value.
  4. Type DelegateSentItemsStyle, and then press Enter.
  5. Right-click DelegateSentItemsStyle, and then click Modify.
  6. In the Value data box, type 1, and then click OK.
  7. Exit Registry Editor.

Leave a comment

Posted by on January 12, 2021 in Windows


enable darkmode on windows 10 trial


Create new directory under themes “Personalize”
add a new dword(32)
set the value to zero

Open personalize directory if present
change the value of the dword – AppUseLightTheme
set the value to zero. by default it will be zero.

Leave a comment

Posted by on January 12, 2021 in Windows


Office 365 Shared Mailbox – Deleting User

When we need to delete a user in Microsoft 365, There is an option to make the mailbox into a shared mailbox. You will not be able to login to that mailbox anymore, instead after converting the user mailbox to a shared mailbox, you can delegate another user with permission to that shared mail box.

optional step: When we delete a mailbox, by default the alias of that mailbox is deleted. If you want to delete the email address of the user (ie., we need to change the current mail address to an alias. And make the current Microsoft default alias ( as the primary email.
select user==> account tab ==> click on “manage username and email” ==> under aliases click on the 3dot menu ==> select “change to primary email” (this will make Microsoft default alias to primary email address).

To delete a user:

  1. select user from active users list ==> click on delete
  2. Tick “email aliases will be removed”
  3. Tick “Give another user access to access to <user>’s email.”
  4. click on “required:Give email access to another user”
  5. Assign another user to the mailbox.
  6. Click on Delete user.
  7. Select create a new display name , and set a Display name for the shared mailbox.
  8. if you don’t want to send automatic replies. Untick send automatic replies dialogue.
  9. Click on transfer ownership.
  10. click on assign and convert.

Leave a comment

Posted by on January 12, 2021 in Windows


Change numbers to Arabic in excel.

  1. Select the area of the cells that you need to change
  2. Press Ctrl+1 using keybard
  3. Go to Customes and type this code: [$-2000000]#,##0.00
  4. This will give you comma seperate and 2 decimals

[$-2000000]#,##0.00 this will make numbers separated by comma and 2 decimal points.

[$-2000000]0 this will just convert the numbers to Arabic. No decimal and no commas.

Leave a comment

Posted by on January 10, 2021 in Windows


Reset DVR admin password

If you forget the password of DVR, (in my case it was a xmeye DVR – boot splash image = HD iDVR) there is a way to reset it using a super password.

Open DVR and enter wrong password until you get the error “User locked” then download the following app from google play store : CCTV Password Hack.

  • Open the app and select “DVR/NVR password reset”
  • Then select your DVR brand (in my case: xmeye).
  • scroll down, there are two options one is 8 digit code and the other is date method. choose the date method
  • Enter the captcha code
  • Enter the current date shown in DVR, then click generate code.
  • Use the code as admin password.
  • DVR will automatically restart and all user profiles will be cleared.
  • Open with default password (blank)
  • Configure profiles as you need.

Above file is an ISO file. Inside the ISO there is a RAR file. Password for RAR file is : 123

Leave a comment

Posted by on November 26, 2020 in Windows


Tags: , , , , , ,

Outlook.exe.log file in the %Temp% folder consumes too much disk space

My outlook data-file had some problems, so I downloaded a recovery repair application from Microsoft website. I don’t remember the name of the app, it was used for troubleshooting the data-file problem. After running the app, even though the problem was not solved it asked if want to send some log files. I said okay.

That was a mistake, from next day onward my C drive space got reduced super fast. When I analysed the file size with TreeSize application, I found that there is a 98 GB log file on %temp% folder related to outlook. Wow!!

C:\Users\<user name>\AppData\Local\Temp. in this location. I deleted the log file, now my system storage is returned. But next day this file appeared again. So how to solve this problem.

After some research i found the following solution. To resolve this issue, follow these steps:

  1. Exit Outlook.
  2. Open a Run dialog box. To do this, use one of the following methods, as appropriate for your situation:
    • Windows 10, Windows 8.1 and Windows 8: Press Windows Key + R.
    • Windows 7 or Windows Vista: Click Start, and then click Run.
  3. Type regedit.exe, and then click OK.
  4. Locate and then click the following subkey:HKEY_CURRENT_USER\Software\Microsoft\Office\x.0\Common\Debug

    Note The x.0 placeholder represents your version of Office (16.0 = Outlook 2016, Outlook for Office 365 and Outlook 2019, 15.0 = Outlook 2013, 14.0 = Outlook 2010, 12.0 = Outlook 2007).
  5. Right-click TCOTrace, and then click Delete.
  6. When you are prompted to confirm the deletion, click Yes.
  7. On the File menu, click Exit to exit Registry Editor.
  8. Delete the Outlook.exe.log file from the %Temp% folder if you are not working with a Microsoft support engineer on an issue.
Leave a comment

Posted by on July 16, 2020 in Windows