Tech Support People

Deploy Google Chrome via GPO

2011-12-21T23:00:00.000-08:00

Google Chrome Download from this site

https://www.google.com/chrome/eula.html?msi=true

then deploy this msi file to GPO

Prevent Multiple Logins via Group Policy in Server 2008

2011-12-21T22:06:00.000-08:00

The below loing.bat file is given to userlogin script GPMC

If Exist \\server\logons\%username%.txt Goto notlogon

Echo %username% logged in from %computername% > \\server\logons\%username%.txt

Echo %username% logged in from %computername% > \\server\logons\%computername%.txt

Goto end

:notlogon

Logoff

:end

The below logout.bat file is given to user logout script GPMC

Listing 2: Logout.bat

If Not Exist \\rafetpc\logons\%computername%.txt goto notlogon

Del \\server\logons\%username%.txt

Del \\server\logons\%computername%.txt

Goto end

:notlogon

Logoff

:end

Limit Login script for Windows Server 2008

2011-12-20T22:06:00.000-08:00

net use Y: \\newton\%username%$

if errorlevel 1 goto logoff

goto continue

:logoff

net send localhost "You are logged in elsewhere. Please log off a the other terminal before trying again."

logoff

:continue

setx homedrive "Y:"

setx homepath "\"

save the above lines to bat file use GPO login script file.

updated script if Y drive already exists

if exist Y:\ goto continue
:logoff
net send localhost "You are logged in elsewhere. Please log off a the other terminal before trying again."
logoff
exit
:continue
setx homedrive "Y:"
setx homepath "\"
exit

How to assign local admin rights to domain user

2011-12-09T00:42:00.000-08:00

To use Group Policy to grant local administrative privileges to a domain account, complete the following steps:

On the domain controller, go to Administrative Tools > Active Directory Users and Computers (you must be running with Domain Administrator privileges).
Right-click on the Organizational Unit (OU) upon which you want to apply the Group Policy. Click Properties.
The Group Policy Properties panel is displayed. Select the Group Policy tab and click New to create a new Group Policy.
Designate a name for the new Group Policy. Select the new Group Policy and click Edit.
The Group Policy Object Editor panel is displayed. Go to New Group Policy Object > Computer Configuration > Windows Settings > Security Settings > Restricted Groups. Right-click on Restricted Groups. Click Add Group.
For example, name the new group "Administrators." Under "Properties", add the user "Administrator","Domain Admin" and the domain accounts or groups upon which you want the Group Policy in effect for. For example, you can add "yourdomain\Local Administrator group". Click OK.
Add these user rights to the domain account:
- Act as part of the operating system
- Log on as a service
In the Group Policy Object Editor, go to New Group Policy Object > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignments. In the right pane, select "Log on as a service" and double-click. Add the domain user for whom you are granting the user right for and click OK. Repeat this step for "Act as part of the operating system."
The group policy is now enforced for the Organizational Unit to include the domain accounts and groups specified under the local Administrators group on each computer in the Organizational Unit. In addition, the domain user has been granted the necessary rights. To verify this, log into a domain computer and open the Computer Management console. Select Groups, double-click on the Administrators group, and verify the membership of the domain users.

Add computer to Domain - Delegate control user rights

2011-11-24T01:37:00.000-08:00

1. Click Start, click Run, type dsa.msc, and then click OK.
2. In the task pane, expand the domain node.
3. Locate and right-click the OU that you want to modify, and then click
Delegate Control.
4. In the Delegation of Control Wizard, click Next.
5. Click Add to add a specific user (that user must be a member of Account operator group)or a specific group to the Selected users
and groups list, and then click Next.
6. In the Tasks to Delegate page, click Create a custom task to delegate,
and then click Next.
7. Click Only the following objects in the folder, and then from the list,
click to select the following check boxes: . Computer objects
. Create selected objects in this folder
. Delete selected objects in this folder

8. Click Next.
9. In the Permissions list, click to select the following check boxes:. Reset
Password
. Validated write to DNS host name
. Read and write Account Restrictions
. Validated write to service principal name

10. Click Next, and then click Finish.
11. Close the "Active Directory Users and Computers" MMC snap-in.

How to delete an Organizational Unit (OU) in Windows Server 2008 Active Directory?

2011-11-24T01:21:00.001-08:00

Windows Server 2008 active directory has accidental deletion protections feature that would not allow you as an Administrator to delete Active Directory Object by right clicking and deleting. If you leave the “Protect object from accidental deletion” check box checked when you create the object, you will have to disable that feature before you can delete the object.

To disable accidental deletion protection feature, follow this step:

1. Open up Active Directory Users and Computers through the Server Manger or Administrative Tools.

2. In the Active Directory Users & Computers console. Click on View from the menu bar and then click on Advanced Features.

3. Right click the object to delete and click on Properties.

4. In the object properties console, click on the Object tab.

5. Uncheck the “Protect object from accidental deletion” and click ok.

6. You can now delete the object by right clicking and clicking on delete.

Run turbo C in Dosbox full screen

2011-11-20T21:36:00.000-08:00

Open the config file

prog.files ----> dosbox----> options----->dosbox optons

full screen values

--------------------------

fullscreen=true

fulldouble=false

fullresolution=1440*900

windowresolution=1440*900

output=overlay

autolock=true

sensitivity=100

waitonerror=true

priority=higher,normal

mapperfile=mapper-0.74.map

usescancodes=true

-----------------------------------------

[autoexec]

# Lines in this section will be run at startup.

# You can put your MOUNT lines here.

mount c c:\

cd tc\bin

User name creation Windows Server 2008

2011-11-20T21:27:00.000-08:00

set xfold=F:\Labs\Firstyearlab

set xname=%1

net user %xname% new@123 /add

md %xfold%\%xname%

rmtshare \\servername\%xname%$=%xfold%\%xname% /USERS:1 /GRANT Administrator:F /GRANT %xname%:C

echo Y |cacls %xfold%\%xname% /E /R Everyone /P Administrator:F %xname%:C

save the above line to create a bat file "netuser.bat"

repeated user creation use the following line
for %%i in (1 2 3 4 5 6 7 8 9 ) do netuser ebinet0%%i
for %%i in (10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60) do netuser ebinet%%i

Error 403 Forbidden with phpmyadmin and WAMP Server

2011-10-12T21:09:00.000-07:00

Error 403
-----
Forbidden
You do not have permission to access / on this server.

Edit the Apache configuration file httpd.conf and find the lines
"# onlineoffline tag - don't remove"

Order deny, allow
Deny from all
Allow from 127.0.0.1

by these lines to change

Order allow, deny
Allow from all

how to save flash files from websites

2011-03-15T22:54:00.000-07:00

1.Download firefox and install it
2.Install addon for flasgot and restart the firebox browser.
3. Just go to your download flash website right click and select flashgot and save the concerned flash files.

Your version of the Siebel High Interactivity Framework for IE, required for use of this Siebel application, may not be current. In order to download.

2011-02-23T22:05:00.000-08:00

While opening Siebel Client, keep pressing "Ctrl" button on the keyboard and observe the difference. This time I didn't get the prompt message and automatically it prompt with the message of installing the SHIF and I clicked on Install and everything worked fine after that..... no issues.

How to Disable WinHTTP Web Proxy Auto-Discovery

2011-02-17T20:29:00.000-08:00

Type services.msc in run command

Locate "WinHTTP Web Proxy Auto-Discovery Service" in the list in the center window. The list includes the services available on the local computer and is in alphabetical order.

Right-click on "WinHTTP Web Proxy Auto-Discovery Service," and select "Properties" from the pop-up menu. This opens the service's Properties window.

Go to the "General" tab, and under "Service Status," click on the "Stop" button. Click on "Apply." This stops the service within the current Windows session.

Click on the "Startup Type" combo box, select "Disabled," and click on "OK" to keep the service from starting automatically when you start Windows.

How to setup network in toshiba estudio

2011-02-16T05:30:00.000-08:00

In order to set IP address, make sure printer kit/NIC is installed. Plugged network cable, Press Program button--> Initial Setup-->Network-->TCP/IP to configure IP address. Once finish, back to Network-->Complete to save the settings.

Media Player Firefox Plugin Windows Server 2003 / 2008

2011-02-08T00:17:00.000-08:00

Media Player Firefox Plugin for Windows Server 2003 / 2008 is downloaded from

http://www.megaupload.com/?d=EH6IK54T

Windows installer cannot be accessed

2011-01-23T22:42:00.000-08:00

Reinstall the Windows Installer
To reinstall the Windows Installer, rename the damaged Windows Installer files, and then reinstall the Windows Installer. To do this, follow these steps:

1. Click Start, click Run, type cmd in the Open text box, and then click OK.
2. Type cd %windir%\system32, and then press ENTER.
3. Type attrib -r -s -h dllcache, and then press ENTER.
4. Type ren msi.dll msi.old, and then press ENTER.
5. Type ren msiexec.exe msiexec.old, and then press ENTER.
6. Type ren msihnd.dll msihnd.old, and then press ENTER.
7. Type exit, and then press ENTER.
8. At the command prompt, type exit, and then press ENTER.
9. Click Start, and then click Turn off computer or Shut Down.
10. Select the Restart option, and then click OK, or click Restart.
11. Log on to the computer.
12. Download and install the latest version of the Windows Installer. For more information about

how to obtain the Windows Installer, click the following article number to view the article in the Microsoft Knowledge Base:
893803 (http://support.microsoft.com/kb/893803/ ) Windows Installer 3.1 v2 (3.1.4000.2435) is available
13. Click Start, and then click Turn off computer or Shut Down.
14. Select the Restart option, and then click OK, or click Restart.

Log on to the computer.
Click Start, click Run, type msiexec /regserver in the Open text box, and then click OK.

Thanks Microsoft

Ms office 2003 sp3 slipstreaming

2011-01-04T21:25:00.000-08:00

1. Insert the Office System (2003) CD into your drive, from the "Start" button select "Run" and type

d:\setup.exe /a

This is going to start the install process of Office 2003. You'll be presented with the option of where you want the files to go (I chose "C:\Office2003"), and you'll be asked to enter your CD key.

After entering the CD key, you'll be presented with the End User License Agreement. Accept it then continue.

It's going to appear to be installing, but in fact your files are being copied over to your hard drive.

The completion window will pop up and the entire Office 2003 CD is now copied to your hard drive.

2. Extract the Service Pack files

office2003SP3-KB923618-FullFile-ENU.exe /t:c:\Office2003SP3 /c

All the office2003Sp3 files are copied to c:\office2003sp3 folder

then

Start the "Run" command from your "Start" menu again. Enter the following command:

msiexec /p c:\Office2003SP3\MAINSP3.msp /a c:\Office2003\PRO11.MSI shortfilenames=true /qb

office sp3 is updated to folder c:\office2003.

office 2007 compatibility pack Deploying via Group Policy

2011-01-04T01:12:00.000-08:00

First, download fileformatconverters.exe from Microsoft Website

create one blank directory name temp
then extract using the command

fileformatconverters.exe /extract:c:\temp\

Copy the files O12Conv.CAB and O12Conv.MSI to a shared folder on your server.

then goto the desired deploying ou and select group policy create new group policy.

Expand out the Computers Configuration and select the Software Settings > Software Installation.
Right-click in the right hand pane and select New > Package.
Browse to the package on the file share you are going to use and select the O12Conv.MSI

Once you have pressed OK you will find the package in your GPO.

How to Check Office 2010 Activation Status

2010-10-18T03:11:00.000-07:00

1 Open an administrative level command prompt.

2 Change directory to the Office14 folder at the following location by typing the following command, and hit Enter to execute:

cd \Program Files\Microsoft Office\Office14

Note: For user installing 32-bit (x86) edition of Office 2010 on 64-bit (x64) Windows OS, type the following command instead, and hit Enter to execute:

cd \Program Files(x86)\Microsoft Office\Office14
3 Then, type the following command, and hit Enter to execute:

cscript ospp.vbs /dstatus

4 The LICENSE NAME and/or LICENSE DESCRIPTION gives the license type for Office 2010, while LICENSE STATUS shows activation status of Office 2010.

Install Office 2003 Service Pack 3 through GPO

2010-02-10T20:41:00.000-08:00

Download Office SP3 (Office2003SP3-KB923618-FullFile-ENU.exe) from Microsoft.

Create a temp folder for store extracted file on C:\temp. Extract the file to temp folder by run this command in the command line mode:

“Office2003SP3-KB923618-FullFile-ENU.exe /c /t:C:\temp /q”.

Now you can see the extracted files on temp folder. MAINSP3.msp is the main Office service pack 3. OWC11SP3.msp and OWC102003SP3.msp are web components service pack 3 for Office XP and Office 2003 respestively.

You can install Office Service Pack 3 by execute one of these commands below.

* Install with NO user interface. When it finishes install the service pack 3, the computer will be force to restart automatically.

“msiexec /p C:\temp\MAINSP3.msp /qn”
Command to install Office SP3 with restart after installation
* Install with NO user interface and force not to restart after finish install the service pack 3.

“msiexec /p C:\temp\MAINSP3.msp /qn /norestart”
Command to install Office SP3 with no restart after installation

If you have to install on many computers, you can put the command in the Group Policy Object (GPO) in logon script and also move the service pack files (.msp) to share folder so that the file can be executed by others.

* For example, I move MAINSP3.msp to \\BKKPDC01\temp which is share folder.

# Then I add logon script in Domain Group Policy with this command
Script Name: msiexec
Parameters: /p \\bkkpdc01\temp\MAINSP3.msp /np /norestart
to silent install Office SP3 silently with no restart after complete installation. Now when user logon to Windows with user on domain, the script will be executed automatically.

Note: This is only example If you need install this SP3 through GPO, you need to consider network performance issue. For instance, when many users are logon simulteneously, they also get the service pack file at the same time which can cause load on your network. You can solve this problem by not release this script to all users at the time.

Use Group Policy to disable USB, CD-ROM, Floppy Disk

2010-01-07T04:44:00.000-08:00

Import this administrative template into Group Policy as a .adm file.

CLASS MACHINE
CATEGORY !!category
CATEGORY !!categoryname
POLICY !!policynameusb
KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
EXPLAIN !!explaintextusb
PART !!labeltextusb DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamecd
KEYNAME "SYSTEM\CurrentControlSet\Services\Cdrom"
EXPLAIN !!explaintextcd
PART !!labeltextcd DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 1 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynameflpy
KEYNAME "SYSTEM\CurrentControlSet\Services\Flpydisk"
EXPLAIN !!explaintextflpy
PART !!labeltextflpy DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamels120
KEYNAME "SYSTEM\CurrentControlSet\Services\Sfloppy"
EXPLAIN !!explaintextls120
PART !!labeltextls120 DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
END CATEGORY

[strings]
category="Custom Policy Settings"
categoryname="Restrict Drives"
policynameusb="Disable USB"
policynamecd="Disable CD-ROM"
policynameflpy="Disable Floppy"
policynamels120="Disable High Capacity Floppy"
explaintextusb="Disables the computers USB ports by disabling the usbstor.sys driver"
explaintextcd="Disables the computers CD-ROM Drive by disabling the cdrom.sys driver"
explaintextflpy="Disables the computers Floppy Drive by disabling the flpydisk.sys driver"
explaintextls120="Disables the computers High Capacity Floppy Drive by disabling the sfloppy.sys driver"
labeltextusb="Disable USB Ports"
labeltextcd="Disable CD-ROM Drive"
labeltextflpy="Disable Floppy Drive"
labeltextls120="Disable High Capacity Floppy Drive"
Enabled="Enabled"
Disabled="Disabled"

Thanks Microsoft

Restore Icons to the Desktop

2009-12-16T03:59:00.000-08:00

In Microsoft Windows XP Home Edition and Professional, the new Start menu is enabled by default. When the new Start menu is enabled, the My Computer, My Documents, and My Network Places icons are removed from the desktop. To restore these icons, follow these steps:

1. Right-click the desktop and click Properties.
2. Click the Desktop tab.
3. Click Customize desktop.
4. Click the General tab, and then click the icons that you want to place on the desktop.
5. Click OK.

Thanks Microsoft.

How to set path using bat file

2009-12-13T22:30:00.000-08:00

Type the below command in notepad and save the file to .bat file extenstion.

cmd /k "set path=%path%;"c:\Program Files\Java\jdk1.5.0\bin"&&z:"

Time synchronization between server and client

2009-12-08T03:04:00.000-08:00

The following command is used for time synchronization between server and client.

This command is used in client computer.

w32tm /resync /computer:computername or domainname /nowait /soft

avoid anonymous connections using Group Policy Objects

2009-12-01T02:28:00.000-08:00

To protect your Windows XP and Server 2003 computers, go to the same node within a GPO, but configure the following GPO settings: Microsoft has relied on anonymous connections to allow computers and services to establish open communications with other computers. These anonymous connections are not secure, however. Attackers exploit anonymous connections left open on Windows computers to access essential security-related information. With Group Policy Objects (GPOs), you can protect your Windows computers to restrict the anonymous connections.

What you are protecting

Once an attacker has made an anonymous connection to your computer, gaining access to much of the security-related information is easy. An attacker can gather the following information with an anonymous connection:

List of users from your computer, including Active Directory
List of groups from your computer, including Active Directory
Security identifiers (SIDs) for user accounts
User accounts for SIDs
List of shares from your computer
Account policies from your computer
NetBIOS name from your computer
Domain name associated with your computer
List of domains that your domain trusts

Protection-level updates are here

To protect against anonymous connections and enumeration of essential security information, you should use Group Policy Objects. Microsoft changed the level of protection for the Windows 2000 and Windows XP/2003 environments.

Network access: Allow anonymous SID/Name translation. This protects against tools that can grab the SID based on a name or vice-versa. You should set this to "Disabled."
Network access: Let Everyone permissions apply to anonymous users. This protects against an anonymous connection accessing all resources that the Everyone group is configured to access. You should set this to "Disabled."
Network access: Do not allow anonymous enumeration of storage area management (SAM) accounts. This protects against enumerating the list of users and groups in the SAM directory (or Active Directory). You should set this to "Enabled."
Network access: Do not allow anonymous enumeration of SAM accounts and shares. This protects against listing users and groups from the SAM directory, as well as the list of shares for the computer. You should set this to "Enabled."

IE Content Advisor to block all Internet access

2009-11-23T19:47:00.000-08:00

This is an old trick that was documented on the Microsoft website for Windows 95 – Windows 2000 but seems to have disappeared since. Here’s a basic retelling of the procedure to block all Internet access and allow only approved sites using the FREE content advisor found in Internet Explorer.

1. Copy the following text into Notepad and save it as “noaccess.rat” in the Windows\system32\ directory (or another directory of your choice). Be sure that the file extension is .rat and not .txt.
((PICS-version 1.0)
(rating-system “http://www.microsoft.com”)
(rating-service “http://www.microsoft.com”)
(name “Noaccess”)
(description “This file will block all sites.”)

(category
(transmit-as “m”)
(name “Yes”)
(label
(name “Level 0: No Setting”)
(description “No Setting”)
(value 0))
(label
(name “Level 1: No Setting”)
(description “No Setting”)
(value 1))))

2. In the “Control Panel” double-click on “Internet Options” and click on the “Content” tab. If in Internet Explorer, click on “Tools” and “Internet Options” and click on the “Content” tab.
3. Click “Enable.”
4. Inside the “General” tab click on “Rating System.”
5. Remove all entries and click “Add.” Add “noaccess.rat” from the Windows\system32\ directory.

Content Advisor Block Internet

6. Click on the “Approved Sites” tab and add all the websites you wish to allow access to.

content advisor configuration throw GPO

2009-11-23T02:00:00.000-08:00

The following describes the process of enabling the Internet Explorer
Content Advisor as a "white list" in a Group Policy Object (GPO) for Windows
XP PCs. Note: White list refers to blocking all internet access except for
selected sites (deny all, except).

1. Microsoft Active Directory (AD) does not have an option to simply
enable the Content Advisor. Instead, they use a model of importing settings
from the computer on which the AD Group Policy Object is being edited and
allowing you to configure those settings. So the first thing to do is to
enable the Content Advisor on the editing machine. If this is not done then
the Content Advisor configuration will be propagated out to the client
machines but the Content Advisor itself will not be enabled (turned on).

* Once the rest of this process has been completed, the Content
Advisor may be disabled on the editing machine with no effect to the clients
as just the importing of the settings is needed.

* Remember to enable the Content Advisor on the editing machine in
the future if changes are to be made to the Active Directory Group Policy
Object Content Advisor configuration to avoid inadvertently disabling the
Content Advisor on the target PCs.
1. Open IE and go to: Tools -> Internet Options

2. On the Content tab, under Content Advisor at the top, click the
button labeled "Enable". You will be prompted for the local machine Admin
password. Once this is done the button label changes to "Disable", thus
confirming that the Content Advisor has been turned on.

3. Click "OK" to exit Internet Options and close out of Internet
Explorer.

2. To make the "deny all", on BOTH the user PC and on the machine that
will be editing the Group Policy Object (again the importing) in
C:\WINDOWS\system32 create a text file named "noaccess.rat".

3. Use an editor to add the following:

((PICS-version 1.0)
(rating-system "http://www.microsoft.com")
(rating-service "http://www.microsoft.com")
(name "Noaccess")
(description "This file will block all sites.")
(category
(transmit-as "m")
(name "Yes")
(label
(name "Level 0: No Setting")
(description "No Setting")
(value 0) )
(label
(name "Level 1: No Setting")
(description "No Setting")
(value 1) ) ))

4. Save and Exit.

5. Open Group Policy Management (editing machine).

6. Locate the GPO in which you want to enable the Content Advisor.

7. Right click the object and select "Edit...".

8. In the now opened Group Policy Object Editor go to: User Configuration
-> Windows Settings -> Internet Explorer Maintenance -> Security

9. Double click on "Security Zones and Content Ratings"

10. Under "Content Ratings" click the radio button labeled "Import the
current Content Ratings settings" (the aforementioned importing step).

11. Click the button labeled "Modify Settings".

12. Enter the supervisor password and click "OK".

13. On the Ratings tab select the Noaccess category (this is the file that
was created earlier).

14. On the Approved Sites tab enter the list of approved sites, one at a
time, while selecting "Always" as "Never" was taken care of with the
noaccess.rat file.

* The wildcard * (asterisk) can be used to denote pages in a site
(eg. http://www.case.edu* for all of http://www.case.edu)

* Supposedly, the Content Advisor treats http requests as simply
www (eg. http://www.case.edu is treated as www.case.edu) but it's probably a
good idea to be as specific as possible to avoid confusion. Especially when
secure http (https) is a possibility.

* It may be a good idea to include the default homepage as
Internet Explorer may throw an error if the default homepage is content
restricted. This can be set with the Group Policy Object Editor. Go to: User
Configuration -> Windows Settings -> Internet Explorer Maintenance -> URLs.
Double click "Important URLs" and then check the box labled "Customize Home
page URL" and enter the desired site (eg. http://www.case.edu or about:blank
for a blank page).

15. On the General tab uncheck the box under User options labeled "Users
can see websites that have no rating".

* The other option is up to you as to whether to allow for an
Admin override prompt when blocked content is encountered.

16. On the Advanced tab remove any ratings bureaus.

17. Click OK twice and exit out of the Group Policy Object Editor

18. For the policy to take effect on a user's PC, the best thing to do
would be to simply reboot the PC. You can also type "gpupdate /Force" at the
command line with Admin privileges.

* The PC has to be in the Organizational Unit (OU) to which the
GPO applies.

19. Don't forget to test BEFORE deployment. Even after. And later on...

----
If you’re using IE7, please try to install the following hotfix.

The Internet Explorer Maintenance Group Policy settings for the Content Advisor do not work on client computers that have Internet Explorer 7 installed
http://support.microsoft.com/kb/950065

Also, to block website, it’s suggested to use other policy or method, such as Proxy, Firewall settings to block them completely. They are better choice than Content Advisor for this purpose.

Error message when you try to set an IP address on a network adapter

2009-11-06T00:00:00.000-08:00

A network adapter with the same IP address is in the registry but is hidden in Device Manager. This can occur when you move a network card from one PCI slot to another PCI slot.

Method 1

Click Start, click Run, type cmd.exe, and then press ENTER.
Type set devmgr_show_nonpresent_devices=1, and then press ENTER.
Type Start DEVMGMT.MSC, and then press ENTER.
Click View, and then click Show Hidden Devices.
Expand the Network Adapters tree.
Right-click the dimmed network adapter, and then click Uninstall.

Back to the top

Method 2

The DevCon utility is a command-line utility that acts as an alternative to Device Manager. When you use DevCon, you can enable, disable, restart, update, remove, and query individual devices or groups of devices. To use DevCon, follow these steps:

Download the DevCon tool by clicking the following article number to view the article in the Microsoft Knowledge Base:
311272 (http://support.microsoft.com/kb/311272/ ) The DevCon command-line utility functions as an alternative to Device Manager
Unpack the 32-bit or 64-bit DevCon tool binary to a local folder.
Click Start, click Run, then type cmd and press ENTER.
Type CD:\path_to_binaries to navigate to the devcon.exe is located.
Use the following syntax to find installed network adapters:
devcon findall =net or
devcon listclass net
Note In the output of the previous commands, there is a line for the ghosted network adapter that is similar to the following:
PCI\VEN_10B7&DEV_9200&SUBSYS_00D81028&REV_78\4&19FD8D60&0&58F0: 3Com 3C920 Integrated Fast Ethernet Controller (3C905C-TX Compatible)
Remove the ghosted device by typing the following syntax:
devcon -r remove "@PCI\VEN_10B7&DEV_9200&SUBSYS_00D81028&REV_78\4&19FD8D60&0&58F0"

thanks Microsoft

How to disable USB device Via group policy

2009-09-22T23:50:00.000-07:00

Errors occurred while Windows was synchronizing your data

2009-09-09T02:11:00.000-07:00

I found the easiest way was to disable offline
files through the domain group policy. However since its only one
machine thats got the problem I'd say its probably best to disable
offline files through the local group policy:

1. Start > Run > 'mmc'
2. File > Add/Remove Snap-in > Add > Group Policy > OK.
3. In the GP window; Comp Config > Admin Template > Network > Offline
Files.
Disable 'Allow or Disable use of offline files feature'

You may also want to disable 'Do not auto make redirected folders...'
in User Config > Admin Temp > Network > Offline Files.

PushPrinterConnections.exe file to startup or logon scripts

2009-08-04T01:48:00.000-07:00

To add the PushPrinterConnections.exe file to startup or logon scripts

Open the GPMC.
In the GPMC console tree, navigate to the domain or organizational unit (OU) that stores the computer or user accounts where you want to deploy the PushPrinterConections.exe utility.
Right-click the GPO that contains the printer connections that you want to deploy using Group Policy, and then click Edit.
Navigate to one of the following locations:
- If the printer connections are deployed per-computer, go to Computer Configuration, Policies, Windows Settings, Scripts (Startup/Shutdown).
- If the printer connections are deployed per-user, go to User Configuration, Policies, Windows Settings, Scripts (Logon/Logoff).
Right-click Startup or Logon, and then click Properties.
In the Startup Properties or Logon Properties dialog box, click Show Files. The Startup or Logon window appears.
Copy the PushPrinterConnections.exe file from the %WINDIR%\System32 folder to the Startup or Logon window. This adds the utility to the GPO, where it will replicate to the other domain controllers with the Group Policy settings.
In the Startup Properties or Logon Properties dialog box, click Add. The Add Script dialog box appears.
In the Script Name box, type: PushPrinterConnections.exe
To enable logging on client computers running Windows Server 2003, Windows XP, or Windows 2000, in the Script Parameters box, type: –log

Log files are written to %WINDIR%\temp\ppcMachine.log (for per-computer connections) and to %temp%\ppcUser.log (for per-user connections) on the computer where the policy is applied.
In the Add Script dialog box, click OK.
In the Startup Properties or Logon Properties dialog box, click OK.
Use GPMC to link the GPO to other OUs or domains to which you want to deploy the PushPrinterConnections.exe utility.

Thanks Microsoft Corporation

no more connections can be made to this remote computer at this time

2009-07-15T03:07:00.000-07:00

Solution

1. Click Start, click Run, type regedit, and then click OK.
2. Locate and then click to select the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lanmanserver\Parameters
3. On the Edit menu, point to New, and then click DWORD Value.
4. Type MaxMpxCt, and then press ENTER.
5. Right-click MaxMpxCt, and then click Modify.
6. In the Value data box, type the desired value, and then click OK.

Note You can set the number of concurrent SMB commands to a value that is between 10 and 255. The default value is 10. In Microsoft Windows Server 2003, you can set the number of concurrent SMB commands to a maximum value of 65,535.
7. Close Registry Editor.

Default XP Professional conncurrent connection is 15.

Thanks Microsoft

your current security settings do not allow you to download from this location

2009-06-03T02:13:00.000-07:00

1. Start Internet Explorer
2. Click Tools, and then click Internet Options.
3. In the Internet Options click the Security tab.
4. Click Local intranet, and then click Custom Level.
5. Under Reset Custom Settings, click Medium in the Reset to list.
6. Click OK two times.

same above settings to Internet Security tab.

AutoUpdate time with EPO

2009-05-27T22:40:00.000-07:00

If you look at the console on your own machine, you'll see that 'AutoUpdate' does not have '(managed)' in front of it. that's because it isn't actually managed from ePO - It's built-in to each local installation of VirusScan.

It's time can be changed by the local user, but there's a better way if you want to manage when updates occur from ePO....

Within the User Interface policies is a checkbox: 'Disable default Autoupdate task schedule'. if you check this box, when policies are applied, the local AutoUpdate task is disabled (it can't be removed from the list). However you must also setup your own update tasks, and schedule them.

(I suggest you do this first and make sure they are working before disabling the default AutoUpdate)

You can have greater control this way, so that (for example) you can check for DAT updates each hour, Engine updates (via a seperate task) each day, patches once a week and so on....

hope that helps.

double click the drive not opening

2008-11-20T21:36:00.000-08:00

Hi Verify first whether your system is affected by "TROJAN" or any other viruses
If "YES" Remove the smae by using "ANTIVIRUS" S/W (Preferably AVG !!)

Go to C:\Windows (O.K how to open C or C:\Windows is your questions ..Correct !! MAy be try to right click and use open with option..and select C:\Windows\Explorer.exe OR system may open show openwith window..click on browse and select c:\windows\explorer.exe)

Open REGEDIT file
Find "MOUNTPOINTS2" using Ctrl + F
Delete the same
Repeat the process unless all the "MOUNTPOINTS2" are deleted

Now your system will be OK. (reveied these inputs from thsi forum only)=Thanks to the member

Can't open drive d:\ with duoble click

2008-11-03T00:56:00.000-08:00

c:\> attrib -r -s -h autorun.inf
c:\> del autorun.inf
d:\> attrib -r -s -h autorun.inf
d:\> del autorun.inf
restart the pc
And here's the best and easyest suggestion of what Manmeet wrote(it worked for me!):

1Open Start >> Run and type regsvr32 /i shell32.dll
2. press ok
3. You will see a message DllRegisterServer and DllInstall in shell32.dll succeeded
4. restart the pc

0x8024402C or 0x8024502D error

2008-07-04T03:42:00.000-07:00

The 0x8024402C or 0x8024502D error codes typically occur because an incorrect character exists in the proxy override settings
To resolve these errors, remove characters from the proxy exception list, and then clear the proxy cache. To do this, follow these steps:
1. Open Internet Explorer.
2. On the Tools menu, click Internet Options.
3. Click the Connections tab, click LAN Settings, and then click Advance.
4. Delete any entry in the Exceptions section.
5. Quit Internet Explorer.
6. Click Start, click Run, type cmd, and then click OK.
7. Type the following commands. Press ENTER after each command. • proxycfg -d
• net stop wuauserv
• net start wuauserv

Error 0x80080008

2008-07-01T23:46:00.000-07:00

DnldMgr FATAL: DM:CBitsJob::SetCallbackHandler: SetNotifyInterface failed with 0x80080008.

"%Windir%\WindowsUpdate.log" shows - AU AU Restart required

Restart the service and forced update detection and the error is gone.

DnldMgr Download manager restoring 2 downloads
Agent * Succeeded to load 2 persisted download calls
DnldMgr Retrieved 2 persisted download jobs
DnldMgr * Restored download job.

The computer succesfully updated.

Error 0xC800021F

2008-07-01T23:43:00.000-07:00

It looks like the client datastore failed to initialize.

1. Open a CMD prompt on the client.
2. Type "net stop wuauserv" (without quotes) .
3. Type "cd %Windir%\SoftwareDistribution".
4. Type "RD /s /q Datastore" (this will remove the client datastore).
5. Type "net start wuauserv" (without quotes) .
6. Type "wuauclt /detectnow" then check %Windir%\WindowsUpdate.log if it is successful.

OR, just stop the Automatic Updates Service and delete "%Windir%\SoftwareDistribution\DataStore" folder and start Automatic Updates Service and force the update detection (wuauclt /detectnow)

Error 0x80004002

2008-07-01T23:35:00.000-07:00

You see the following errors in "%Windir%\WindowsUpdate.log".

FATAL: Failed to get session from datastore, error = 0x80004002
FATAL: Failed to Unserialize from data store, error = 0x80004002
WARNING: Exit code = 0x80004002
WARNING: InitAUComponents Failed, will restart AU in 30 mins, error = 0x80004002
DnldMgr FATAL: DM:CAgentDownloadManager::CheckAllCallDownloadStates: GetSession failed with 0x80004002.

1. If you have a proxy server -

Stop Automatic Update Service - "Net stop wuauserv".
Run the following command: "proxycfg.exe -u".
Start Automatic Update Service - "Net start wuauserv".
Force update detection and see if that works.
2. Re-create the Datastore -

Stop Automatic Update Service - "Net stop wuauserv".
Rename/delete "%Windir%\SoftwareDistribution" folder.
Start Automatic Update Service - "Net start wuauserv".
Force update detection and see if that works.
3. Try to force install WUA.

Download WUA WindowsUpdateAgent20-x86.exe from http://go.microsoft.com/fwlink/?LinkId=43264.
and run the following command: "WindowsUpdateAgent20-x86.exe /wuforce".

VerifyWUServerURL() failed with hr=0x800710dd

2008-06-26T03:14:00.000-07:00

Check in the IIS Manager to see what authentication type is enabled on the directories that are part of the WSUS Server. Windows Integrated Authentication needs to be enabled on the "SimpleAuthWebService", "Content", "ClientWebService", "ReportingWebService" and the "SelfUpdate" folders. After correcting this, all my clients are making successful connections and downloading approved updates, as well as reporting to the server that the client exists and is using the Windows Server Update Services server.

Time sync between server and client

2008-05-12T00:56:00.000-07:00

Time Sync between server and workstation following commands
are used

w32tm /config /update
w32tm /resync

Start and Stop using time service using

net stop w32time && net start w32time

Tme server in Windows Server 2003

2008-05-12T00:54:00.000-07:00

Time service to use an internal hardware clock

To configure the PDC master without using an external time source, change the announce flag on the PDC master. The PDC master is the server that holds the forest root PDC master role for the domain. This configuration forces the PDC master to announce itself as a reliable time source and uses the built-in complementary metal oxide semiconductor (CMOS) clock. To configure the PDC master by using an internal hardware clock, follow these steps:1. Click Start, click Run, type regedit, and then click OK.
2. Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\AnnounceFlags
3. In the right pane, right-click AnnounceFlags, and then click Modify.
4. In Edit DWORD Value, type A in the Value data box, and then click OK.
5. Quit Registry Editor.
6. At the command prompt, type the following command to restart the Windows Time service, and then press ENTER:
net stop w32time && net start w32time

Find duplicate entries in excel

2008-05-07T07:00:00.000-07:00

Go to excel -->tools -->macro - visual basic editor then paste the below code and run..

Sub FindDups ()
'
' NOTE: You must select the first cell in the column and
' make sure that the column is sorted before running this macro
'
ScreenUpdating = False
FirstItem = ActiveCell.Value
SecondItem = ActiveCell.Offset(1, 0).Value
Offsetcount = 1
Do While ActiveCell <> ""
If FirstItem = SecondItem Then
ActiveCell.Offset(Offsetcount,0).Interior.Color = RGB(255,0,0)
Offsetcount = Offsetcount + 1
SecondItem = ActiveCell.Offset(Offsetcount, 0).Value
Else
ActiveCell.Offset(Offsetcount, 0).Select
FirstItem = ActiveCell.Value
SecondItem = ActiveCell.Offset(1,0).Value
Offsetcount = 1
End If
Loop
ScreenUpdating = True
End Sub

error number: 0x800c0133” Outlook Express

2008-05-03T07:19:00.000-07:00

When you try to send or receive messages using Outlook Express, you may receive error message as below.

"An unknown error has occurred. Account: 'Example', Server: 'example.mail.domain.com', Protocol: POP3, Port: 110, Secure (SSL): No, Error Number: 0x800C0133 "

SYMPTOMS

All the mail disappear
Unable to download emails
E-mail message could not be sent.
CAUSE

This behavior can occur if the Folders.dbx file is missing, damaged, or using the read-only attribute. Usually it will happen at inbox.dbx.

To remedy

Try to restart the computer, if the problem persists, please follow the following steps.

Rename

the Inbox.dbx file:

Go to “Tools” > “Options” > “Maintenance” tab > Click “Store Folder”. It will reveal the location of your Outlook Express files.
Close Outlook Express, goto the location mentioned above. You may copy the location and paste it in the “Start” > “Run” and click “Ok”.
Rename “inbox.dbx” to “oldinbox.dbx” or name that you prefer.
Restart the Outlook Express, This creates a new inbox.dbx file automatically.

Recovery old emails

You may recover back the old emails by try the following, if they are not corrupt or damage.

In Outlook Express, right click on the local folders icon in the folder list.
Click on New Folder, named it to “Old Inbox”.
Search for oldinbox.dbx.
The old emails should be inside the oldinbox.dbx right now.

Disable USB Drive using Group Policy

2008-04-30T06:19:00.000-07:00

usb.bat file contain
regedit /s \\slche\systemrestore$\usb.reg

usb.reg file contain

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]
"Start"=dword:00000004

usb.bat is put in logon scipt in computer policy
rsb.reg file is placed in \\slche\systemrestore$\usb.reg

Create scheduled restore point in Windows XP

2008-04-30T06:13:00.000-07:00

Restore.bat file contain
at 3:40pm \\bslch\systemrestore$\a.vbs

a.vbs file contain
Set IRP = getobject("winmgmts:\\.\root\default:Systemrestore" )
MYRP = IRP.createrestorepoint ("IT Helpdesk Restore Point", 0, 100)

put the restore.bat file in logon script in computer policy.
a.vbs file is copied into "\\bslch\systemrestore$" this location.

How to enable firewall in Windows XP

2008-04-24T23:37:00.000-07:00

netsh firewall set opmode mode=ENABLE
netsh firewall set service type=FILEANDPRINT mode=ENABLE

Map Network drive using Vbscript

2008-04-18T21:25:00.000-07:00

' save this contents to MapNetwork.vbs
Option Explicit
Dim objNetwork
Dim strDriveLetter, strRemotePath
strDriveLetter = "J:"
strRemotePath = "\\10.90.2.3\e$"

Set objNetwork = CreateObject("WScript.Network")

objNetwork.MapNetworkDrive strDriveLetter, strRemotePath
WScript.Quit

Block Messenger Service

2008-04-12T06:34:00.001-07:00

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger]
Value Name: Start
Data Type: REG_DWORD (DWORD Value)
Value Data: (2 = automatic, 3 = enabled, 4 = disabled)

Disable Task Manager

2008-04-12T06:32:00.001-07:00

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name: DisableTaskMgr
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = disable Task Manager)

Disable the Right Click on the Desktop

2008-04-12T06:29:00.000-07:00

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoViewContextMenu
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

Force Windows to Use the Classic Desktop

2008-04-12T06:28:00.000-07:00

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: ClassicShell
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = Default, 1 = Classic Desktop)

Remove My Documents from the Desktop

2008-04-12T06:27:00.001-07:00

This setting is used to remove the My Documents folder from the Windows desktop.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\
CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\ShellFolder]
Value Name: Attributes
Data Type: REG_DWORD (DWORD Value)
Value Data: (0xf0500174 = Hidden, 0xf0400174 = Default)

Disable Desktop Cleanup Wizard Windows XP

2008-04-12T06:24:00.000-07:00

By default Windows will run the Desktop Cleanup Wizard every 60 days to remove unused desktop items and shortcuts. This setting will disable it from running automatically.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\
Desktop\CleanupWiz]
Value Name: NoRun
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = enabled, 1= disable wizard)

How to View and delete scheduled job tasks

2008-04-07T06:20:00.001-07:00

at command prompt

View scheduled jobs

at \\computername

Delete scheduled jobs

type
at \\computername /delete /y

Map network Drive

2008-04-07T06:18:00.000-07:00

net use \\server\share password /USER:domain\username

/P means persistent.

This means reconnect the share at the next logon.

But for that to work with a password you will also need to save the credentials.

So try this ...

NET USE Z: \\192.168.2.43\mercury password /USER:domain\username /SAVECRED /PERSISENT:YES

Replace password, domain and username with appropriate values ...

NET USE Z: \\192.168.2.43\mercury MrBlobby /USER:BBC\NoelEdmonds /SAVECRED /PERSISENT:YES

Example:

net use h: \\computername\c$ /u:domainname\username "Pasword"

Delete net drive using this command

net use * /delete /y

Disable USB drive

2008-04-07T06:12:00.000-07:00

copy the below three lines and paste this file to usb.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]
"Start"=dword:00000004

then run this file or create a batch file

regedit /s \\sbslchedc01\systemrestore$\usb.reg

PsExec

2008-04-07T06:07:00.001-07:00

PsExec executes a program on a remote system, where remotely executed console applications execute interactively.

psexec @computername.txt -e -u administrator -P password -realtime -c ocxreg.bat

computername.txt contain computer name or ip address..

schedule a restore point

2008-04-07T06:05:00.000-07:00

Paste the following two lines of code into notepad. Then save the file with restore.vbs extention, e.g. save it as something like 'restorepoint.vbs'

Set IRP = getobject ("winmgmts:\\.\root\default:Systemrestore" )

MYRP = IRP.createrestorepoint ("Tamilchild Restore Point", 0, 100)

with that done, run the file manually, then open system restore and verify the restore point was created ok.

Now you can use scheduled tasks in the normal way to create a restore point as you wish. Needless to say, the account you schedule this to run under will need to be an admin account.

Change file name with date extention

2008-04-07T02:43:00.000-07:00

Create a batch file save this contents. It works good.

ren "C:\Program Files\Syslogd\Logs\SyslogCatchAll.txt" SyslogCatchAll%date:~4,2%-%date:~7,2%-%date:~10%.txt

Gateway address, IP Address, DNS

2008-04-04T07:58:00.000-07:00

Add gateway address
Type the command in cmd
netsh interface ip delete addres "local area connection" gateway=10.90.102.6

netsh interface ip set address name="local area connection" gateway=10.90.102.6 gwmetric=default

netsh interface ip add address "local area connection" gateway=10.90.103.6 gwmetric=automatic

Delete DNS

Delete particular Dns using this command

netsh interface ip delete dns "local area connection" 10.90.2.2

Delete all dns using this command..

netsh interface ip delete dns "Local Area Connection" all

using command prompt..

netsh interface ip add dns "local area connection" 10.90.2.2 index=2

ok..

Add Ip address

Simply type this command in cmd..

Netsh interface ip add address "local area connection" 10.90.30.2 255.255.254.0

OK..

Shutdown the Remote PC

2008-04-04T07:57:00.001-07:00

The following command is used for remote pc shutdown

shutdown -m \\computername(or Ipaddress) -s -f -t 00

-m Remote machine

-s Shutdown

-t time duration

To enable or disable the Remote Desktop exception

2008-04-04T07:53:00.000-07:00

Using the command prompt

To enable or disable the Remote Desktop exception

• Type the following at the command prompt, and press ENTER:

netsh firewall set service type = remotedesktop mode =

mode

Substitute values for the placeholder in italics. The following table lists possible values for the placeholder.

Placeholder Possible Values Description
mode

enable, disable

Specifies whether to enable or disable the exception.

If you get an "Access Denied" message when you run a command, you do not have administrative rights to configure Windows Firewall. If you get an "Ok" message but the command does not take effect, the setting might be managed by Group Policy

Delete cached copies of roaming profiles

2008-04-04T07:51:00.001-07:00

Using Group Policy to delete cached copies of roaming profiles

This article discusses how you can use Group Policy to delete locally cached copies of roaming profiles.

MORE INFORMATION
If you enable Group Policy, any local copy of a user's roaming profile is deleted when the user logs off. However, the roaming profile still remains on the network server that stores it.

You can configure a Group Policy Object (GPO) to perform the preceding behavior by performing the following steps:
1. Edit the GPO that you want to modify.
2. Locate the following section: Computer Configuration \ Administrative Templates \ System \ User Profiles.
3. Double-click Delete cached copies of roaming profiles (the Group Policy setting).
4. Click Enabled.

NOTE: The preceding steps involve a computer configuration setting. When Group Policy is applied to a container, such as an organizational unit, it can apply to all computers in that organizational unit and not necessarily to all users in that organizational unit. For example, if a user in the organizational unit that has this policy, logs on to a computer that is in another organizational unit that does not have this policy, a copy of the roaming profile can remain on the computer. Once this policy is applied to a computer it applies to all users that use that computer.

Enable or Disable the File and Printer Sharing

2008-04-04T07:34:00.000-07:00

Using the command prompt

To enable or disable the File and Printer Sharing exception

• Type the following at the command prompt, and press ENTER:

netsh firewall set service type = fileandprint mode = mode

mode
enable, disable

Specifies whether to enable or disable the exception.

If you get an "Access Denied" message when you run a command, you do not have administrative rights to configure Windows Firewall. If you get an "Ok" message but the command does not take effect, the setting might be managed by Group Policy.

Uninstalling using McAfee Consumer Product Removal

2008-04-04T07:29:00.000-07:00

Download the removal tool from http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe.

Click Save and save the file to any folder on the computer.

Navigate to the folder where the file is saved.
Double-click MCPR.exe.

Click Run. A Command Line window will be displayed, and then close automatically. Wait for a second Command Line window to be displayed. (Do not double-click MCPR.exe again.) The program will begin the cleanup.

Observe the installation, which could take several minutes. The following message will be displayed in the Command Line window:

The machine must reboot to complete the un-installation. Reboot now? [y.n]

Press Y on the keyboard.
Wait for the computer to restart.

All McAfee products are now removed from your computer.

McAfee Common Framework returned error ffffffdf@3

2008-04-04T07:27:00.001-07:00

When updating McAfee Virus Scan Enterprise 8.0i manually I get the error message "Failed to initialize common updater subsystem, Make sure the McAfee Framework Services is running, McAfee Common Framework returned error ffffffdf@3". What do I do?

You will need to Re-Register the OLE32.DLL to Re-Populate the Registry. To do this please do the following:-

Click Start, then Run, and in the Open text box type:

Regsvr32.exe %Windir%\System32\Ole32.dll

A RegSvr32 popup message states: DllRegisterServer in C:\WINNT\System32\ole32.dll succeeded.

Click OK.

Send Keys Representation

2008-04-04T07:22:00.000-07:00

Key SendKeys Representation

BACKSPACE {BACKSPACE}, {BS}, or {BKSP}
BREAK {BREAK}
CAPS LOCK {CAPSLOCK}
DEL or DELETE {DELETE} or {DEL}
DOWN ARROW {DOWN}
END {END}
ENTER {ENTER} or ~
ESC {ESC}
HELP {HELP}
HOME {HOME}
INS or INSERT {INSERT} or {INS}
LEFT ARROW {LEFT}
NUM LOCK {NUMLOCK}
PAGE DOWN {PGDN}
PAGE UP {PGUP}
PRINT SCREEN {PRTSC}
RIGHT ARROW {RIGHT}
SCROLL LOCK {SCROLLLOCK}
TAB {TAB}
UP ARROW {UP}
SHIFT +
CONTROL ^
ALT %
BACKSPACE {BACKSPACE}, {BS}, or {BKSP}

How to Configure Automatic Updates

2008-04-04T07:17:00.000-07:00

Configuring Automatic Updates by using Group Policy

The easiest way to configure automatic updates is through the group policy, in environments where this is possible. If group policies (AD) are not available, you can use the registry file which has to be deployed to every machine. This registry file, or group policy template if you're using Active Directory, enables advanced features available with the new WSUS client.

In order to configure client machines using group policy it is necessary to load the latest version of the wuau.adm administrative template. This template is available on Windows 2003 servers or Windows XP machines with Service Pack 2 installed. By default it is stored in C:\WINDOWS\Inf directory.

Configuring automatic updates in a non-AD environment

There are three ways of configuring automatic updates in non-Active Directory environments:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]

; Define WSUS update server and the status server
"WUServer"="http://msupdate.auckland.ac.nz/"
"WUStatusServer"="http://msupdate.auckland.ac.nz"

; Users in the Users security group are not allowed to approve or
; disapprove changes (change this to 00000001 if you want them to be
; able to approve changes)
"ElevateNonAdmins"=dword:00000000

; Define client target group – important for reports
"TargetGroup"="ITSS"
; This option has to be 1 if client-side targeting is enabled.
"TargetGroupEnabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]

"UseWUServer"=dword:00000001

; Logged users can choose if they want to restart the computer
"NoAutoRebootWithLoggedOnUsers"=dword:00000001

; Enable automatic updates (1 for disable)
"NoAutoUpdate"=dword:00000000

; Following options are available:
; 2 – notify before download
; 3 – automatic download and notify of installation
; 4 – automatic download and scheduled installation
; 5 – automatic updates required, but end users can configure them
"AUOptions"=dword:00000004

; Every day is scheduled (0, otherwise days defined from Sunday – 1, to
; Saturday – 7)
"ScheduledInstallDay"=dword:00000000

; Time of day to install updates – 10 AM (0a in hexadecimal)
"ScheduledInstallTime"=dword:0000000a

; Silently install minor updates
"AutoInstallMinorUpdates"=dword:00000001

; Detection frequency in hours – every 20 hours (14 in hexadecimal)
"DetectionFrequency"=dword:00000014
"DetectionFrequencyEnabled"=dword:00000001

; Time between prompting again for a scheduled restart – 30 minutes (1e
; in hexadecimal)
"RebootRelaunchTimeout"=dword:0000001e
"RebootRelaunchTimeoutEnabled"=dword:00000001

; Warning time after installing updates with a deadline or scheduled
; updates – 15 minutes
"RebootWarningTimeout"=dword:0000000f
"RebootWarningTimeoutEnabled"=dword:00000001

; Time that the WSUS client will wait at startup before applying
; updates from a missed scheduled installation time. This applies only
; to scheduled installations.
"RescheduleWaitTime"=dword:0000001e
"RescheduleWaitTimeEnabled"=dword:00000001

WSUS 2.0 Updation Errors

2008-04-04T07:12:00.000-07:00

WSUS 2.0 Updation Errors

The following events are occured while updating wsus 2.0 to wsus 3.0

Event Type: Error
Event Source: Windows Server Update Services
Event Category: Web Services
Event ID: 12012
Description:
The API Remoting Web Service is not working.

Event Type: Error
Event Source: Windows Server Update Services
Event Category: Web Services
Event ID: 12032
Description:
The Server Synchronization Web Service is not working.

Event Type: Error
Event Source: Windows Server Update Services
Event Category: Web Services
Event ID: 12022
Description:
The Client Web Service is not working.

Event Type: Error
Event Source: Windows Server Update Services
Event Category: Web Services
Event ID: 12042
Description:
The SimpleAuth Web Service is not working.

Event Type: Error
Event Source: Windows Server Update Services
Event Category: Web Services
Event ID: 12052
Description:
The DSS Authentication Web Service is not working.

Answer:

Upgrading from WSUS 2.0 to WSUS 3.0 requires the re-entry of the authentication credentials on the proxy configuration page of the WSUS Administration Console after completing the upgrade.

Reconnect to WSUS

2008-04-04T07:03:00.000-07:00

Reconnect the Wsus...
you need to delete the identification info from the registry and reboot the PC in order for it to report properly. Here is the relevant information:

HKLM\Software\Microsoft\Windows\CurrentVersion\Windowsupdate
Delete the following entries, if present:
AccountDomainSID
SusClientID
PingID

Reboot.

The appropriate entries will be recreated when the PC reconnects to WUS.

Run application without User intervention

2008-04-04T06:21:00.000-07:00

Suppose you want to run hyperterminal via command mode without user intervention.

The following vbs script is very useful for you..

' openhyper.vbs
' Example VBScript Run Notepad and use SendKeys
' -----------------------------------------------------'
' Developed by S.Murugan
Option Explicit
Dim objShell, Racey, intCount
Set objShell = CreateObject("WScript.Shell")
objShell.Run "hypertrm new.ht"
Wscript.Sleep 1500
Racey = 1000
intCount=0

objShell.SendKeys "%T"
WScript.Sleep 1500
objShell.SendKeys "C"
WScript.Sleep 1500
objShell.SendKeys "{TAB}"
WScript.Sleep 1500
objShell.SendKeys "{TAB}"
WScript.Sleep 1500
objShell.SendKeys "{ENTER}"

WScript.Quit
' End of Example SendKeys VBScript

Updated file

' hyperopen.vbs
' Example VBScript Run Notepad and use SendKeys
' -----------------------------------------------------'
Option Explicit
Dim objShell, Racey, intCount
Set objShell = CreateObject("WScript.Shell")
objShell.Run "hypertrm new.ht"
Wscript.Sleep 1500
Racey = 1000
intCount=0

objShell.SendKeys "%T"
WScript.Sleep 1500
objShell.SendKeys "C"
WScript.Sleep 1500
objShell.SendKeys "C:\Documents and Settings\murugans\Desktop\capture.txt"
WScript.Sleep 1500
objShell.SendKeys "{TAB}"
WScript.Sleep 1500
objShell.SendKeys "{TAB}"
WScript.Sleep 1500
objShell.SendKeys "{ENTER}"

WScript.Quit
' End of Example SendKeys VBScript

' stop the application new
' Example VBScript Run Notepad and use SendKeys
' -----------------------------------------------------'
Dim objshell
Set objShell = CreateObject("WScript.Shell")
While objShell.AppActivate("new") <> True
WScript.Sleep 500
Wend
WScript.Sleep 100
objShell.SendKeys "{ENTER}"

objShell.SendKeys "%F"
WScript.Sleep 1500
objShell.SendKeys "x"
WScript.Sleep 1500
objShell.SendKeys "{ENTER}"

WScript.Quit
' End of Example SendKeys VBScript

WSUS 3.0 Client not report to server

2008-03-28T04:22:00.000-07:00

IF you have facing the problem like the log shows

2008-03-28 12:10:24:947 1152 274 AU ## START ## AU: Search for updates
2008-03-28 12:10:24:947 1152 274 AU #########
2008-03-28 12:10:24:947 1152 274 AU <<## SUBMITTED ## AU: Search for updates [CallId = {C98707A2-D7AF-4D38-A4D5-BAA0482F53E3}]
2008-03-28 12:10:24:947 1152 864 Agent *************
2008-03-28 12:10:24:947 1152 864 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2008-03-28 12:10:24:947 1152 864 Agent *********
2008-03-28 12:10:24:947 1152 864 Agent * Online = Yes; Ignore download priority = No
2008-03-28 12:10:24:947 1152 864 Agent * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
2008-03-28 12:10:24:947 1152 864 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2008-03-28 12:10:24:947 1152 864 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
2008-03-28 12:10:24:963 1152 864 Misc Microsoft signed: Yes
2008-03-28 12:10:24:979 1152 864 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
2008-03-28 12:10:24:994 1152 864 Misc Microsoft signed: Yes
2008-03-28 12:10:25:010 1152 864 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.cab:
2008-03-28 12:10:25:025 1152 864 Misc Microsoft signed: Yes
2008-03-28 12:10:25:025 1152 864 Setup *********** Setup: Checking whether self-update is required ***********
2008-03-28 12:10:25:025 1152 864 Setup * Inf file: C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.inf
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\cdm.dll: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\wuapi.dll: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\wuaueng.dll: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\wucltui.dll: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.1.6001.65\wups.dll: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.1.6001.65\wups2.dll: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup Update NOT required for C:\WINDOWS\system32\wuweb.dll: target version = 7.1.6001.65, required version = 7.1.6001.65
2008-03-28 12:10:25:041 1152 864 Setup * IsUpdateRequired = No
2008-03-28 12:10:26:709 1152 864 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2008-03-28 12:10:26:709 1152 864 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://sbslche-epo/ClientWebService/client.asmx
2008-03-28 12:10:26:974 1152 864 PT WARNING: Cached cookie has expired or new PID is available
2008-03-28 12:10:26:974 1152 864 PT Initializing simple targeting cookie, clientId = 822799aa-75a6-425a-908f-4556747e5551, target group = , DNS name = sbslche-pc0483.sbslche.com
2008-03-28 12:10:26:974 1152 864 PT Server URL = http://sbslche-epo/SimpleAuthWebService/SimpleAuth.asmx
2008-03-28 12:10:26:974 1152 864 PT WARNING: GetAuthorizationCookie failure, error = 0x80244017, soap client error = 10, soap error code = 0, HTTP status code = 401
2008-03-28 12:10:26:974 1152 864 PT WARNING: Failed to initialize Simple Targeting Cookie: 0x80244017
2008-03-28 12:10:26:974 1152 864 PT WARNING: PopulateAuthCookies failed: 0x80244017
2008-03-28 12:10:26:974 1152 864 PT WARNING: RefreshCookie failed: 0x80244017
2008-03-28 12:10:26:974 1152 864 PT WARNING: RefreshPTState failed: 0x80244017
2008-03-28 12:10:26:974 1152 864 PT WARNING: Sync of Updates: 0x80244017
2008-03-28 12:10:26:974 1152 864 PT WARNING: SyncServerUpdatesInternal failed: 0x80244017
2008-03-28 12:10:26:974 1152 864 Agent * WARNING: Failed to synchronize, error = 0x80244017
2008-03-28 12:10:26:974 1152 864 Agent * WARNING: Exit code = 0x80244017
2008-03-28 12:10:26:974 1152 864 Agent *********
2008-03-28 12:10:26:974 1152 864 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2008-03-28 12:10:26:974 1152 864 Agent *************

Answer:

Just add IUSR_MachineName to users group and restart the IIS.
More help Pls vist: Microsoft

Block automatic updates from IE6 to IE7

2008-03-26T06:03:00.001-07:00

1. Start regedit.exe

2. Create the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Setup\7.0

3. Click the Edit menu and select New and then DWORD value.

4. Name this new DWORD: DoNotAllowIE70

5. Set the value of this DWORD to a value of 1.

You can also download Microsoft's IE7 Blocker Toolkit as another option.

Bulk Users Import to Active Directory

2008-03-20T05:48:00.000-07:00

Bulk Users creation to windows 2003 domain.
Create one excel file name is user5.xls.

Type fill givenname and sn filed. Also change your ou and domain name.

Save as the excel file to users5.csv file

Delete unwanted field of emp.code.

Finally save this file user5.csv

goto domain command prompt type

c:\csvde -i -f user5.csv

After that all users are imported to active directory. Next step is enable the account and Passoword using the following script.

' start script
' PwdLastSet.vbs
' Example VBScript to FORCE a user's password change
' Author Ulrich P amended by Guy Thomas
' Version 2.0 - October 17th 2004
' ---------------------------------------------------------'
Option Explicit
Dim objOU, objUser, objRootDSE
Dim strContainer, strLastUser, strDNSDomain, strPassword
Dim intCounter, intAccValue, intPwdValue

Set objRootDSE = GetObject("LDAP://RootDSE")
strDNSDomain = objRootDSE.Get("DefaultNamingContext")
intAccValue = 544
intPwdValue = 0

' --------------------------------------------------------'
' Important change OU= to reflect your domain
' --------------------------------------------------------'

strContainer = "OU=Test, "
strPassword = "P@ssw0rd"
' -------------------------------------------------------'
' Makes the user change P@ssw0rd at first logon
' -------------------------------------------------------'

strContainer = strContainer & strDNSDomain

set objOU =GetObject("LDAP://" & strContainer )
intCounter = 0
For each objUser in objOU
If objUser.class="user" then
objUser.SetPassword strPassword
objUser.SetInfo

objUser.Put "pwdLastSet", intPwdValue
objUser.SetInfo

objUser.Put "userAccountControl", intAccValue
objUser.SetInfo
intCounter = intCounter +1
strLastUser = objUser.Get ("name")
End if
next

WScript.Echo strPassword & " is Password. UserAccountValue = " _
& intAccValue
WScript.Quit

' End of Script

copy and paste this script to PwdLastSet.vbs and run this file.

If you want excel file, csv file and script file

Excel file
Csv file
script file

Fell free leave some comments....

Using Group Policy to delete cached copies of roaming profiles

2008-02-21T23:10:00.000-08:00

If you enable Group Policy, any local copy of a user's roaming profile is deleted when the user logs off. However, the roaming profile still remains on the network server that stores it.

You can configure a Group Policy Object (GPO) to perform the preceding behavior by performing the following steps:

1. Edit the GPO that you want to modify.
2. Locate the following section: Computer Configuration \ Administrative Templates \ System \ User Profiles.
3. Double-click Delete cached copies of roaming profiles (the Group Policy setting).
4. Click Enabled.

NOTE: The preceding steps involve a computer configuration setting. When Group Policy is applied to a container, such as an organizational unit, it can apply to all computers in that organizational unit and not necessarily to all users in that organizational unit. For example, if a user in the organizational unit that has this policy, logs on to a computer that is in another organizational unit that does not have this policy, a copy of the roaming profile can remain on the computer. Once this policy is applied to a computer it applies to all users that use that computer.

Delete cached copies of roaming profiles

2008-02-21T23:04:00.000-08:00