Microsoft products

• System Center Essentials 2010Lite version of System Center Configuration Manager 2007 and other System Center products
• System Center Configuration Manager
  • Formerly: Systems Management Server (SMS) upto 2003 R2
  • Migrating from Systems Management Server
• Systems Management Server (SMS)
  • Learning
    • TechNet Virtual Lab: Managing Security Updates with SMS 2003

Technet / MVP

• TechNet – Harold Wong’s Blog Site

SAN Storage

• HP StorageWorks 4000 Enterprise Virtual Array

Hardware

• Microsoft: Advanced format (4K) disk compatibility updateCommand to check physical sector size since Vista: fsutil fsinfo ntfsinfo [drive letter]
• Microsoft HD Audio UAA Driver problem for Windows XP SP3
  • Fix to the “HD Audio Bus Driver Failed to load: 0xE0000227〃 & “Realtek High Definition Audio driver install has failed” ErrorsFirst disable and uninstall “Microsoft UAA HD bus driver", then reinstall the Audio driver. Tested this works.
  • Fix to Windows XP SP3 and Microsoft HD Audio UAA Problems (Update 3)
  • Download UAA problem patch
  • Another fix to UAA problem
• IBM DeskstarThe 75GXP and 60GXP has well known high failure rate problem, should be avoided
• IBM NetVista desktop support
• Line-Interactive UPS
• PFC Power Supply
• Microsoft explaination on HPET setting in BIOS
• List of supported USB printer on ASUS Wireless AP with USB
• F5 products

Microsoft Office

• Excel 2003 Office File Validation (OFV) opens workbooks slower across the network
  (Affected by MS11-021 update), 30s to 3mins open a file acorss network in Excel 2003

Windows

• Prining
  • Bruce Sanderson – What to do when installing Additional Drivers on the print server doesn’t work
  • techarena forum: setting up print server to work with 32-bit clients
  • TechNet Win2008R2: Deploy Printer Connections via Group Policy
  • TechNet: Deploy printers by using Group Policy (Win2k3 R2)
    • Windows Server 2003 R2 Administration Tools Pack (x86)
    • Windows Server 2003 R2 Administration Tools Pack (x64)
    • use PushPrinterConnection.exe to deploy printers, the function is similar to PrintUI.dll, but it auto search the GPO for the deployed printers. This tool is available in 2008R2’s Windows folder sub-folder path.
  • Troubleshooting printer installation error
    • PushPrinterConnection.exe does not work for XP if Point&Print restriction is not disabled, or the server name is not FQDN (NetBIOS name will not work)
• Roaming User Profiles
  • TechNet Win2003: Group Policy Recommendations for Roaming User Profiles
  • TechNet Win2003: Security Considerations when Configuring Roaming User Profiles
  • Microsoft-Windows-Folder Redirection Error 502. CSC database locked by another user
  • Group Policy Center: Best Practice: Roaming Profiles and Folder Redirection (a.k.a. User State Virtualization)
  • TechNet Win2008R2: Folder Redirection Overview
  • i-Techtalk: Configuring Folder Redirection in Windows Server 2008 (Very Pratical)
• Folder Redirection
  • TechNet Forum: GP error with folder redirections (ids 107, 1504, 1509, 1085)
  • TechNet Win2003: How Folder Redirection Extension Works
• Group Policy
  • Enable Group Policy Debugging on Windows 7
  • GP Preferences Client Side Extensions have released
    • KB943729: GP CSE for WinXP 32bit
• User Migration
  • Wikipedia: User State Migration Tool
  • M.U.S.T. – Move User’s Stuff Tool (GUI for USMT4 for Win7)
• User Management
  • Grant Access Right for adding computers into a domain
    • India Techarena Forum discussion
    • KB932455: Error message when non-administrator users who have been delegated control try to join computers to a Windows Server 2003-based or a Windows Server 2008-based domain controller: “Access is denied"
    • KB243327: Default limit to number of workstations a user can join to the domain
  • rlmueller.net: All AD user attributes list in Excel
  • KB305144: How to use the UserAccountControl flags to manipulate user account properties
  • CP: VBScript for Setting File Permissions with CACLSContain vbscript example to create folder and use cacls to set ACL
  • Delete user profile on Windows 7 domain computer

    1. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
    
    2.Under ProfileList navigate to binary key like this:
    S-1-5-21-3656904587-1668747452-4095529-500
    
    3.On the right =side under ProfileImagePath you'll see the username and profile path
    delete the desired user's profile key

  • KB230738: How to re-initialize the offline files cache and database (WinXP)
  • KB942974: Format Offline Files Cache CSC database in Vista/Win7Add: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CSC\Parameters\FormatDatabase = 1 (Dwords 32bit), then reboot the machienCorruption of CSC database, usually by same username but different user SID, can affect folder redirection in Win7
• reco-net – many Windows Server best practice articles
  • The 12 Mighty Chores of Active Directory Administration in Depth
• Set MTU for Windows 7

  To see what interfaces you have on your computer, type
  netsh interface ipv4 show subinterfaces
  
  To change the MTU, type
  netsh interface ipv4 set subinterface "Local Area Connection" mtu=nnnn store=persistent

• Microsoft Online Webcast Seminars in Cantonese
• Automatically Backup Your Windows Vista Registry Daily Using ERUNTSpecial config to use Scheduled Tasks to run ERUNT at startup
• “Enable advanced Performance" option for SATA harddisks
  • Windows will ignore flush cache commands to harddisksCompletely rely on harddisk itself to write cache data to disk? When power lost data corruption could occur.
  • Description of the hard disk cacheThis option re-enable a bug Windows 3.11 that ignore all the flush write command as cached write, danger to database applications
  • Windows Confidential – The Power of BugsExplain history of this Windows 3.11 bug
  • StorageReview forum on “Enable Advanced Performance"Standard IDE controllers don’t support the command to bypass write caching, behavior is already same as enable the Advanced Performance?
  • StorageReview article: XP SCSI problems
• sysprep
  • http://support.microsoft.com/kb/309283Explain the dll needed for each HAL in Windows XP and Windows Server 2003
  • Imaging machines using different HALs w/sysprepUsing UpdateUPHAL option in sysprep
  • SysPrep in Depth – Part 3 – SysPrep.inf and HAL’sCopy DLL may not needed if already include SP2
• WindowsR XP File Association Fixes by Doug KnoxA bunch of registry fixes to Windows XP for fixing corrupted registry caused by virus or malwares
• “Windows cannot access the specified device" error when running EXE filesTry to reset Internet Explorer security settings
• Changing Schema Master FSMO role:

  1. At the target server. goto C:\windows\system32, run: regsvr32 schmmgmt.dll
  2. Access to the "Active Directory Schema" from MMC
  3. Right Click the root node and select Operations Master, then do the change

• How to disable Internet Explorer Enhanced Security Configuration (IE ESC) in Windows Server 2008/2003For 2008, goto Server Manager, under Security, click: Configure IE ESC
• HOWTO Sysprep in Windows Server 2008Simply run: c:\Windows\System32\sysprep\sysprep.exe, choose OOBE and reboot
• Wikipedia: Features removed from Windows Vista

  Main differences:
  - NTLDR boot loader is replaced by BOOTMGR boot loader
  - Install to ACPI system only
  - Install to NTFS partition only
  - Due to security concerns, system services can no longer natively interact with console
  - Messenger and Alerter services are removed
  - Windows Mail is a lot less feature than Outlook Express
  - Netmeeting, HyperTerminal are removed
  - The NetBEUI protocol is no longer supported
  - telnet is not installed by default
  - No DirectSound/DirectSound3D, Audio is completely in software
  - UPS service monitor UPS via COM port is no longer available
  - Windows Vista Backup is a lot less feature than ntbackup
  (Can hack to use the ntbackup from WinXP)
  - WordPad don't support DOC format
  - Animated GIF, WMF/EMF support is removed from Windows Photo Gallery
  - Fax support by Windows Fax and Scan is only at Business/Enterprise/Ultimate edition
  - HLP format not supported
  - Video capture support from Analog device / Webcam is removed

• Enable AHCI after Vista is installedHKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Msahci: Edit the Start key and change its value to 0
• Windows XP Services Guide
• Changing Windows XP CD between Retail/VOL/OEM by modify setupp.iniChange the pid value to:

  Retail = 51882335
  Volume License = 51883270
  OEM = 82503OEM

• Using the Connection Manager Administrator Kit (CMAK) to STREAMLINE VPN Client ConfigurationWindows XP only
• Steps to reinstall ASP.NET 2.0

  1. Open a command prompt
  Stop IIS: iisreset /stop
  2. Change to the .NET Framework 2.0 root directory:
  C:\windows\Microsoft.Net\Framework\v2.0.50727
  3. Reinstall ASP.NET 2.0 by using the following command:
  aspnet_regiis -i
  4. Start IIS again after it has been run:
  iisreset /start
  5. You will see ASP.NET 2.0 in the IIS's Web Service Extensions

• Run OpenVPN with Windows Vista / Windows 7
  1. have to add your current user full-control to: openvpn/config
  2. run the openvpn-gui as administrator (to enable the add route command properly)
  3. have to add 1 more openvpn virtual adapter if need to have more than 1 openvpn connection at the same time
  4. config file does not need to specify tun/tap device name, the driver will get available virtual adapter automatically
• Howto allow upgrade from Windows 7 RC to Windows 7 RTM1. Copy the DVD files into a USB key2. Edit the file: sources\cversion.ini

  3. Change the value: MinClient to 7000

  4. Run setup.exe from the Windows 7 RC machine to perform the in-place upgrade

• HOWTO unlimit rearm a Windows Vista machine1. Use regeditFor Vista, goto: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SL

  For Windows 7, goto: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform

  2. Edit DWORD: SkipRearm, set to 1

  3. Run at an elevated Command Prompt (Run As Admin): slmgr -rearm

  4. Reboot (After reboot, the SkipRearm value will reset to 0)

• Fix Vista/Windows 7 cannot install Unsigned Driver problemRun: bcdedit -set loadoptions DDISABLE_INTEGRITY_CHECKS (Seems not work for Windows 7 x64)
• Driver Signature Enforcement Overrider 1.3bTool use to fix unsigned driver problem in Windows Vista/Windows 7
• HOWTO Install ATI Tray Tool (ATT) with Windows 7 x64
  ATI Tray Tool need ATI Catalyst Driver to work!
• Sources/ei.cfg control Windows 7 install versionRemove it will allow to install any of the versions
• Windows XP: network share does not prompt for alternate credentials (no solution)
• Windows XP no password prompt at workgroup network share (no solution)
• To disable auto login network share folders in Windows XP SP2+1. Use: control userpasswords2, to manually save a server password for a user, instead of wait network to prompt for username & password(not work) 2. In “Local Security Policy" management console open “Local Policies > Security Options" on your left.

  You will see a Policy list to your right. Browse to the Policy “Network access: Do not allow storage of credentials or .NET Passports for network authentication". Double click it, select Enabled, click Apply and then OK.

• HOWTO create a Windows 7 All-In-One DVDInclude all x86/x64, Retail/Enterprise editions

Linux

• PPPoE Server problem
  • ppp 2.4.4 conflict with syslogIf syslog is running it will caused PPPoE server not working, appeared in Fedora 7
  • ppp 2.4.3 confict with syslogSame in FC6, pppoe server work with 2.4.2. Fixed in 2.4.4-6 at Fedora 9
• Linux disk performance
  • A three-pronged attack on performance
  • Linus suggest use relatime or noatime on filesystemrelatime does not work at CentOS 5.3 (mount 2.13-0.50) but work in Debian (2.13.1.1)
• AD Integration
  • Fedora 8: Adding Linux to Active Directoryusing the authconfig-gtk tool to setup winbind
  • Unite your Linux with Active DirectoryA bit complex
  • Fedora 6 LDAP / Kerberos Auth to Active Directory on Windows Server 2003 R2
  • Similar article at Fedora Forum
• Disable or Force fsck on bootDisable: change the value to 0 at the end of /etc/fstabForce (seems not work): #tune2fs -c 0 -i 0d /dev/xxxx

  Default: #tune2fs -c 22 -i 6m /dev/xxxx

• Force fsck on next boot# shutdown -rF nowOnly affect filesystems marked 1 at the end of /etc/fstab

Windows Server Cluster

• Failover Cluster Step-by-Step Guide: Configuring a Two-Node File Server Failover Cluster
• Setup Majority Node Set (MNS) with only 2 nodes
• Update for Windows Server 2003 (KB921181)Add “File Share Witness" and “Configurable Cluster Heartbeats" to Cluster Service for Windows Server 2003 Service Pack 1, this hotfix already included in Windows Server 2003 SP2
• Exchange 2007 CCR (Cluster Continuous Replication)

Internet

• “Exe file has been blocked by your firewall" error when download EXE file from InternetPossible turned on “Block EXE Component" at a Netscreen firewall on the network
• HKIX Switching Statistics

AntiVirus

• Dennis Technology Lab complete report for AntiVirus products vs MSE [PDF]
• Microsoft Security Essentials vs. Kaspersky, Nod32, BitDefender, Symantec, McAfee(2009, may not accurate)MSE 56% vs NOD32 60% vs Kaspersky 64% vs AVIRA 74%
• How to Manually Update Eset NOD32 Offline

Rescue CD/USB Key

• Turning normal USB pendrive into a faked bootable USB-CDROMMethod to allow you to use your Ultimate Boot CD into a USB Key
• HOWTO remove ‘Press any key to boot from CD’ from Windows boot CD/DVD(Remove bootfix.bin file from the boot CD ISO and burn a new bootable CD)

Multi-Boot

• How to dual boot Vista and XP (with Vista installed first)

Useful Utilities

• USBDeviewView all installed/connected USB devices on your system
• ShellMenuViewManage the Context Menu entries
• TestDiskOpen Source partition recovery tool
• Parted MagicFree Re-Partitioning Tools