Saturday, 16 January 2010

○ Restarting server shares service for network folders

Different network shares can exist in a server environment. If you happened to restart one of your main server that had shared network folders active and not anymore, you have to restart the corresponding services.

To check what resources are being shared on the server type at the command prompt:

"net share"

To see a list of your previously shared network folders on the server open regedit and go to:

SYSTEM\CurrentControlSet\Services\LanmanServer\Shares

These are the folders you need to reshare again right?

If so all you have to do is to restart these share services you need to restart the "Server" service along with this service dependencys.

Solved. Hope this helps
 If you need additional help read this:

Tuesday, 12 January 2010

○ Renaming User accounts in AD and changing Documents and Settings Folder

Yes, this is from microsoft, it is just so I won't forget i know i can easily find this on my corner :D

Reference: http://support.microsoft.com/kb/236621/en-us

Identify the user's profile path. There are two methods to identify the profile path. Either by user path settings or user SID. The user SID method is preferred.




User SID method



Use the GETSID tool from the Windows Server Resource Kit to obtain the SID. Use syntax similar to the following example:



GETSID \\SERVER1 UserName \\SERVER1 UserName



Once you obtain the SID, use Regedit.exe or Regedt32.exe to select the user's SID under the following registry key:



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
 
 
Some Other SID Tools i Like:
 
user2sid
sidtouser
 
:)

Saturday, 12 December 2009

○ Opening Google.com in new tab "about:tabs" automatically in IE8

I have been *not* using this feature for a long time. Everytime i pressed the "new tab" button i would always write www.google.com as a starting point. Not anymore, now it's automatic, you just have to:

1. Open Tools -> Internet Options:




2. Push Tab Settings and define new tab settings:



Done. (Not much of a challenge tough :P)

Saturday, 28 November 2009

○ Windows DLL files Checker


To perform a windows DLL files test for integrity to see if they are intact and in their original versions there is a good native tool called SFC that only system administrators can perform:

This will check to see wether your currently being used DLL files are trust worthy and/or match those on the DLL Cache folder. I have a progress percentage indicator as you can see in this screenshot but some operating systems like XP/W2k/2003 end the verification and do not report anything back when it finishes. So, it's good to see that Microsoft gave this another step up.

Thanks for reading

○ Removing HD1.exe Virus

Hello, i decided to write something about this because i found the information available at this time.

This virus from what i have been seing recently spreads mostly from USB pens, on operative systems that have the Autorun Feature turned on for USB Removable devices.

It starts by:

1- writing a file named autorun.inf on your USB pendrive with the following content:

[autorun]
OPeN=rEcYClEr\sEtUp32.exe
IcON=%wIndIr%\sYstEm32\ShElL32.DlL,7
ACtION=Open USB
sHeLl\OpEN=oPEn
sHeLl\OpEN\cOMMaND=ReCyClER\sEtUp.exe
sHeLl\OpEN\deFaULt=1

It then writes the following registry key:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Taskman"="C:\RECYCLER\S-{Numbers}\hd1.exe"

or

"Taskman"="E:\\hd1.exe"

depending from where did you run the virus file setup32.exe


{Numbers} represent the security ID's present on your machine. You may have more than one if more than one user has logged in at least once, so you may have more than one hd1.exe file.


To manually remove the virus:

1. You have to delete that "taskman" entry on the registry.
2. Manualy delete hd1.exe files from c:\RECYCLER folder.
2a. You can use at the command prompt from within RECYCLER folder: "dir /s /a hd1.exe" to see how many hd1.exe you have
2b. You can use attrib command to remove -S -H -R from hd1.exe/Desktop.ini files before deleting.
2c. You may have to terminate explore.exe process under task manager to successfully delete this file. If you still can't even after using attrib you have to use Windows Recovery Console, or any other bootable disk with full ntfs support tools, for instance, Hiren's Boot Tools.


I do not think there are any dll files altered with this virus after my tests. But checking windows dll files for integrity to see if they are in they are intact and in their original versions is a good idea afterwords.

Direct Link to this article

Thanks for reading

Saturday, 14 November 2009

○ IVT_Virtual_0000 Driver



If you have this device hanging on your device manager waiting for a driver, probably you instaled IVT BlueSoleil on your computer without installing the native Bluetooth drivers from the manufacturer first. Or, the IVT version you have is not compatible with your windows version.
I came across this issue and what i did to solve it was to:

1. Download the latest trial version, right now it's IVT_BlueSoleil_6.4.275.0 which is Windows7 compatible.
2. Extract contents of the ZIP File to a folder
3. Extract all the CAB files BlueSo~1.cab, BlueSo~2.cab, etc, using a capable application like winrar.

After you have extracted the CAB Files you should see some .inf files, one of them is for the Bluetooth PAN Network Adapter .

4. Device Manager -> Unkown Device IVT_Virtual_0000 -> Update Driver -> Point to folder where you extracted the CAB Files.

And you are done:




edit:
This was not tested on Windows 7 64bit Platforms

○ Unknown device ACPI\ITE8707\4&2D46162D&0 on ASUS C90s



Another struggle for a unknown device. Funny thing is when i had XP i did not detect it, neither with vista, but windows 7 did.

Finally discovered that this unknown device corresponds to ITECIR Infrared Receiver

You have to download ite_ir_5.03_vista32-64 driver for it to install, here are 2 screenshots:





And voila

Thanks for reading, i hope this helps.

Monday, 9 November 2009

○ How to view Windows Registry in DOS Mode


This makes a usefull feature when all you have is a command line and want to sneak in the windows registry. You will have to have a PATH variable defined to the reg.exe file or direct access however otherwise it won't run.

The usage is:

REG Operation /?

Examples:

REG QUERY /?
REG ADD /?
REG DELETE /?
REG COPY /?
REG SAVE /?
REG RESTORE /?
REG LOAD /?
REG UNLOAD /?
REG COMPARE /?
REG EXPORT /?
REG IMPORT /?
REG FLAGS /?

You can even add or delete keys, of course, you will have to have the proper access control entry rights on any given hive. For more on ACE's

Be cautious about messing around in the registry. Even performin a query, if the key values are to extensive the output can be something like:



This reminds me of beeping outputs in the old days when using Type command on some file. Ouch

Saturday, 7 November 2009

○ Intel 845GE Graphics Driver for Windows Vista/7


Ufff, i was installing a version of Windows Seven on my brother's computer, but Windows 7 did not detected /installed the proper drivers so i had to search for an alternative. The Standard VGA Graphics Adapter it gave me, could not go over 1024x1280 resolutions. I needed higher resolutions as i have a capable monitor of 1920x1200. Drivers were definitely not helping me.

After hours spent, i finally found this which almost did the trick (and you will see why it is almost). Don't know if it is true, but it seems the native graphics driver ( or Standard VGA Graphics Adapter ) from Windows is very close to
Intel(R) Graphics Controller 6.14.10.3722 . This is a driver for W2k but it works on Windows Seven. Going trough the setup.exe (double clicking the executable application) obviously is not the way to go. What you need to do is to go to Control Panel -> System -> Device Manager and Update drivers for your current listed Display Adapter selecting the .inf file.

So:

1- Download Intel(R) Graphics Controller 6.14.10.3722 for 845GE

2- Install from the ".inf", trough the device manager.

3- Restart, check configurations

You may get errors (like i did) but simply restarting a trying again should do the trick. (It did for me anyway)

In the end you will be able to see at the device manager:




Now as for the "almost" . The maximum setting it gives me is 1920x1200 x 16 bits when i was looking for 1920x1200 x 32 bits...

But as im not much of a player it's fine by him.


Saturday, 31 October 2009

○ Garmin 1390 GPS Diagnose Diagnostics "hack" trick





Well, this is not actually a hack, it is just a trick. Here's the main screen:




If you tap the upper right Battery Icon for 5 seconds this interesting menu will pop up:


Here you have a secret diagnostics page. You can test ROM, RAM, monitor temperature levels, USB cable detections, battery level, etc...Press next and you have further options:


I Pressed Start Test, but it's a background test, does not show you anything else other than the results show at this page. Here you have an interesting "More" button that shows you info on your current Garmin Software Inventory. It's interesting to see how some were removed:





You can even test for dead sub-pixels. I found out i had a dead sub-pixel on the lower right corner. But completely unnoticeable otherwise.




Here you can test the current voice you have set on your GPS among other things:


Finally this one is interesting, you can check information regarding the sattellites you have gathered. 3 GPS are the minimum to gather your location, but in my case, more than 3 GPS work working, giving me more accuracy:


Of course, there were numbers were it's now painted in green. :)




Thursday, 29 October 2009

○ Can't remove network printer connection? Forcing removal / uninstall

If you are having problems removing a printer from the Printers folder, this may be the answer for you:

When you add a network printer connection to your computer, the printer's shared name is placed on your printers folder as well.

When you try to remove this connection later on, the computer will communicate with the server to check if that printer still exists ( don't ask why) but, even if both printer connections are pointing to the same TCP/IP address, if the printers name do not match for confirmation, it won't delete, telling you something like "No longer connected to server"

To successfully remove this printer given that there is a mismatch with the printers connection name you have to first rename the connection, follow these steps to do it:

1. Start
2. Run
3. regedit.exe
4. Go to hive HKEY_CURRENT_USER\Printers\Connections

Unless you can't have access to regedit, you do not need special permissions to edit the lines as you are editing your own user hive ( HKEY_CURRENT_USER) . I advise you however not to mess with anything else if you don't know for sure that it is safe.

5. Rename the printer's name to match the one on the server

6. You should now be able to delete the printer connection.


I hope this helps someone as i struggled a couple of hours to find a solution but not even google helped me right away, so here's my contribution.



Monday, 26 October 2009

Installing Wavelink Studio Client

For those who are not easily familiared with activesync and Windows mobile or Pocket PC with Windows CE operating, it might not be just plain simple to install an application to it like we do in windows. ActiveSync helps to transfer content to some degree. But i found that different applications may have different installation "quircks" and for this particular installation, you have to:

1 - Connect your device to the dock cradle
2 - Download Wavelink Avalanche and install it for your platform (If it's a pocket PC then, PPC 2003)
3 - Only then you install Wavelink Studio Client
4- And last, copy Hosts configuration files.

2 hours on this one..


Saturday, 25 July 2009

○ MAIL FORWARD vs MAIL ALIAS

These two can confusing but they are actually to different things and very easy to understand
Independentely if the mail received on a mailbox is to be send internally (to another internal mailbox) or externally (to a mailbox from another domain) Mail Forward
is the correct choice if you want to send everything from the original mailbox to another mailbox

MAIL ALIAS is for instance if you have the mailbox crice@domain.com and create an alias named condulezarice@domain.com or ConduRice@domain.com every message sent to either of the two
will end up in crice@domain.com

It's a matter of directioning, if you have a coworker@domain.com and a administrator@domain.com you will want to make a MAIL FORWARD from coworker@domain.com to administrator@domain.com, otherwise, if you use a MAIL ALIAS, any email sent to administrator@domain.com will end up in coworker@domain.com . Definitely not desirable.

So, in sum:

MAIL FORWARD from box1 to box2 when box2 is to receive contents of box1 but not the other way around.

MAIL ALIAS box1 with box2 when received mailed on either of the two will end up in both mailbox's