Friday, 10 December 2010

Network Auto-Disconnect

Windows has a network auto-disconnect function that will do an OSI Layer 1 disconnect after 15min, to save power presumably. This can cause problems with certain applications, namely Outlook in some cases - that will start doing some strange things and will return to normal only after restarting the program.

A solution is to disable this feature by running the following in an administrator cmd session.

net config server /autodisconnect:-1


To make it permanent we need to edit the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters
There should be a dword named "autodisconnect"
Set the value to 0xFFFFFFFF

Source URL: http://www.windowsitpro.com/article/john-savills-windows-faqs/how-do-i-configure-lan-autodisconnect-.aspx


Thursday, 9 December 2010

Trend WFBS v7.0

The latest version of Trend has a couple of issues, namely it no longer supports Windows 2000 (This could be an issue if your site is still 2000 based) and the client agent does not upgrade properly on SBS 2003 servers.

After running the upgrade - the client agent is not installed properly and is not running on the server.

First make sure the latest critical patch is applied:
http://downloadcenter.trendmicro.com/index.php?clk=tbl&clkval=1815&regs=AUS&lang_loc=4#fragment-1831

Next we need to remove all traces of the client agent from the server using the removal tool:
ftp://transfer:data@techsupport.trendmicro-europe.com/WFBS/7.0/SA%20uninstall%20-%207.0.1343.zip

Now we should be able to install the latest client on the server without any further problems using the "\\Servername\ofcscan\autopcc.exe" method.


Source URL: http://community.trendmicro.com/t5/Business-Security-Forum/WFBS-7-0-installati-on-error-on-SBS-2003-servers/td-p/18164/page/6

Trend WFBS Download: http://downloadcenter.trendmicro.com/index.php?regs=AUS&clk=result_page&clkval=drop_list&catid=8&prodid=39

Trend WFBS Cleanup

Here is a tool that can be used to clean up the Trend WBFS Security Server.

http://esupport.trendmicro.com/0/Worry-Free-Business-Security-Standard-Advanced-Disk-Cleaner.aspx?print=true

Wednesday, 8 December 2010

PrintUI DLL - Automatically configure printer settings

You can use the printui.dll method to add/remove printers from users profiles quietly like this:

To add a printer run:
rundll32 printui.dll,PrintUIEntry /in /q /n "\\Servername\Printer Share"

and to remove an existing one run:
rundll32 printui.dll,PrintUIEntry /dn /q /n "\\Servername\Printer Share"

These can be added to logon scripts, etc.

Source URL: http://www.computerperformance.co.uk/Logon/logon_printer_computer.htm

N-Computing Troubleshooting II

Ensure that Windows Updates are disabled on the vSpace server.
Found that KB981957 (Windows 7 x86) caused the vSpace server to malfunction and terminals cannot connect. You should be able to uninstall this update and restart the server to get it going again.

Monday, 6 December 2010

N-Computing Troubleshooting

Running N-Computing 5 x L-130 terminals using a Windows 7 (32bit) PC as a server using vSpace 5.1.3.12. The system has Trend WFBS client agent installed and is a part of an SBS 2008 domain and has some end-user applications installed.

System appears to stop functioning every few month due to Trend or Windows updates that seem to break the system. This is due to the fact that the system is probably not fully Windows compatible or certified and appears that certain Windows updates overwrites critical files and settings.

Here are a few tips I have gathered while troubleshooting and resolving problems with this system:

1. Do not DISABLE the windows firewall. You can turn it off or configure exceptions that will allow the terminals to connect to the server without restriction -
This will prevent the vSpace services from starting properly. It is also a good idea to allocate static IP addresses to the terminals.

2. Ensure EVERYONE is assigned the "Allow log on through Remote Desktop Services" right. This is accessed through the gpedit.msc and is a local Computer Policy.

3. Configure Anti-Virus exceptions for the vSpace services and executables. Otherwise the services won't start.

4. Make sure the logon settings for the vSpace services are set to "Local System account" and check the "Allow service to interact with desktop" is checked.

Support for N-Computing can be difficult to obtain but you can start with making sure you have the latest version of the vSpace server.
http://www.ncomputing.com/softwaredownload

There is a Knowledge Base located at http://www.ncomputing.com/kb/ and a forum here http://www.ncomputing.com/forum.



 

Tuesday, 30 November 2010

Loopback GPOs

To apply user policies to specific computers:

Source URL: http://poweredbyapathy.com/loopback-gpos-applying-user-policies-to-specific-computers/

LEAP Documents 2003 - MS Word integration

After installing the Leap Documents 2003 Client you may encounter some errors when you attempt to open Word documents that are part of Matters.

These relate to an incompatibility with Leap and a particular windows update - this is resolved by applying a fix which can be downloaded from the Leap website - under "Leap Tools" >  KBLD1051 Reg Fix.zip.
Once that has been applied, the next time Leap runs it will install a patch that will undo the effects of the offending update.
Close and re-open Leap again and Click "Help" > "About" > Click "Rebuild All". This will replace all Office add-ins and macros, etc.

We also need to make sure the Trust and Add-in settings are correct for Word
1. Close Leap.
2. Go into Word Options > Trust Center > Trust Center Settings... > Select Enable all macros
3. Word Options > Add-Ins > Make sure the Leap plugin is not disabled.

That should sort the problems out - this is relevant for Leap Documents v6.3.279.


GPO Errors - Event ID 1058 and 1030

If you see a stack of 1058 and 1030 Userenv errors in the Application log on servers - run through these troubleshooting steps to resolve:

Source URL: http://support.microsoft.com/kb/887303

You will probably need the Resource Kit and Support Tools installed to run some of these checks.

Tuesday, 23 November 2010

SBS 2008 Console and integration with WSUS

SBS 2008 uses WSUS 3.0 as its backend for the Windows Small Business Server (Windows SBS) Update Services component. The Updates section on the SBS Console is a wrapper for the WSUS system and relies on a set configuration within WSUS and GPOs - if you make changes to WSUS outside of the SBS Console the SBS Update Services will deactivate ustil the configuration is returned to its former state and may lead to unexpected behaviour.

The required settings are detailed at http://blogs.technet.com/b/sbs/archive/2009/06/23/update-services-in-sbs-2008.aspx

Wednesday, 27 October 2010

MYOB AE - Error 'Environment Error 1. Database has not been successfully converted'


Summary
  The following information is only of relevance if you use Contacts or Viztopia with Compliance Integration to access AE Tax. The error message 'Environment Error 1. Database has not been successfully converted' may appear when opening Contacts. This error indicates the data files are in a prior version in relation to your program files.
  Detail
 

When opening Contacts, Configuration, Viztopia Client Compliance or Viztopia Compliance Management, the following error message may be displayed:

Environment Error 1

Database has not been successfully converted. Please contact your System Administrator and quote this number.

Found version 42 [PDTSYS] Require version 43.

The error indicates the data files are in an earlier version to your program files. This indicates that the database has not been upgraded to the latest installed release or service pack version,

OR

You are using a desktop shortcut that is pointing to an old program location.

To resolve this issue you need to:

First check if any shortcuts to Contacts or Configuration on your Desktop open old, invalid, copies of the MYOB AE software. If they do, the please delete these shortcuts.

If this is not the case, then you will need to re-convert the database and reinstall the upgrade (for cases where this procedure has not completed successfully).

Steps:

1.      Locate the Program Directory;

2.      Re-convert the Databases;

3.      Reinstall the Integrated Release (if it was interrupted by the error 'Environment Error 1').

How to locate the bin folder, ie the Profiles program directory

Note: The following instructions do not apply to Terminal Server sites. For Terminal Server users, the required ceedata.ini file is located in the path:
C:\Documents and Settings\{username}\WINDOWS

1.      At the Windows Desktop, click Start and select Run.
The Run window appears.

2.      Type ceedata.ini in the Open field and click OK.
The ceedata.ini window appears.

3.      Note the PROGRAM_DIR directory (e.g. S:\MYOB\bin) and the CHOME directory (e.g. S:\Data\).

Note: Please make sure that you DO NOT have a UNC path for either the PROGRAM_DIR or CHOME directories, eg \\servername\sharename in the ceedata.ini file. If a UNC path is present for either directory, this MUST be replaced by the absolute path, eg S:\MYOB\bin and then your changes must be saved via the menu path File > Save.

4.      From the File menu, select Exit.

How to re-convert the database

1.      Open Windows Explorer, and browse to the Profiles program directory identified above, eg S:\MYOB\bin.

2.      Double-click on the file DatabaseSetup.exe to start the Database Upgrade. Select the required database(s) (start with the database stated in CHOME path), and step through the upgrade wizard. It is recommended that you select to convert just one database at a time at this stage.

3.      If the Database conversion wizard does not open, then there may be a licensing issue which can be corrected by running the Register.bat file. This file is also located in the Profiles bin folder. You should be able to step through this wizard by accepting the current details.
The Select Components window is displayed.

5.      Click Next.
The Register Solution 6 Software window appears.

6.      Enter the Registration Code provided by MYOB and click Finish.
The message "Your registration code has been accepted" appears.

7.      Click OK.
The system may take a few minutes to process.

Note: If you get any errors during steps 2 to 5, please submit a support request quoting article number 13652 with the details of the error.

How to run the Application Finder

Note: If during the conversion of the database, a message states that the database is locked, please follow the instructions below to find the user that has it open, otherwise skip this section.

1.      From DataSafe, click Support Tools.
The MYOB Database Utilities window appears.

2.      Select Application Finder from the Utility drop-down list and then click Run Now.
The Application Finder window appears.

3.      Note the programs running and shut down all applications, except for DataSafe which is denoted by the 'backup.exe' record in the Application column.

4.      Click Refresh.
Only DataSafe which is denoted by the 'backup.exe' record in the Application column should be displayed.

5.      Click Close.
The DataSafe Utilities window appears.

6.      Click OK.
The Windows Desktop appears.

To confirm that the database has been upgraded correctly, please open Contacts (it will open if the installation failed). Close it again and reinstall the Integrated Release if the installation has not been completed successfully.

MYOB AE - "Error: The user profile could not be written. "

If you continue with the existing workpath, the error 'Cannot login without a valid workpath.' occurs and you are then returned to the System Services login gate. Changing the workpath in the field provided, returns the error, 'This location is read only'. The errors will then continue preventing access to System Release for that user.

This error is due to an existing corruption in the ds6op050 file. This file contains information relating to users':

·         Customized toolbars;

·         Navigation favourites; and

·         Window sizes.

To correct this issue the ds6op050 will need to be renamed.

Renaming the ds6op050 file

1.      Double-click the My Computer icon and navigate to the drive on which your Sol64 folder is located.
The contents of the drive appears.

2.      Double-click the Sol64 folder.
The contents of the Sol64 folder appear.

3.      Right-click the ds6op050 file and select Rename.
The file name changes to edit mode.

4.      Rename the file to ds6op050.old and press ENTER.
The change to the file name is saved.

Open System Release in the usual method and access is now possible.

Customised toolbars and navigation favourites will then need to be manually recreated.

Monday, 11 October 2010

Configure Access to Entire Exchange 2007 Mailbox Database

Source URL:
http://technet.microsoft.com/en-us/library/bb310792%28EXCHG.80%29.aspx

* In the Exchange Management Shell, use the following command to
allow access to all mailboxes on a given mailbox store:
Add-ADPermission -identity "mailbox database" -user
"serviceaccount" -ExtendedRights Receive-As

* In the Exchange Management Shell, use the following command to
allow access to an individual mailbox:
Add-MailboxPermission -identity "user" -user "serviceaccount"
-AccessRights FullAccess

To do the same for Public Folders:

*To add AllExtendedRights permissions for the user Chris to access
the public folder named Marketing, run the following command:
Add-PublicFolderAdministrativePermission -Identity "\Marketing"
-User "Chris" -AccessRights AllExtendedRights -Inheritance SelfAndChildren

Tuesday, 17 August 2010

SBS 2008 Monitoring Database Maintenance

If you find that the SBSMONITORING instance of SQL Server is using up more than its fair share of resources (1.5GB+ RAM) and the
"SBSMonitoring.mdf" and "SBSMonitoring_log.LDF" files are over 4GB in size you need to run a maintenance script on the database and then shrink it.

SQL Server Express supports a maximum data file size of 4GB - once this limit is reached the SBS monitoring stops working.

To resolve this download this sql script:
http://cid-d5fe25afb6c3615f.skydrive.live.com/self.aspx/.Public/updateSBSMonitoring.sql

Run this script using:
Sqlcmd -S %computername%\SBSMonitoring -E  -i c:\path\to\updateSBSMonitoring.sql

If this runs successfully you should see:
Changed database context to 'SBSMonitoring'
(1 rows affected)

This can take a while to process (45min on a large database)

This will ensure that the database will contain no more than 90 days worth of data.

Source URL: http://blogs.technet.com/b/sbs/archive/2009/07/14/sbs-2008-console-may-take-too-long-to-display-alerts-and-security-statuses-display-not-available-or-crash.aspx

Next we need to shrink the database size:

Run the "SQL server management studio express
Ensure that "SERVERNAME\SBSMONITORING" is selected and "Windows Authentication" is used and click "Connect"
Expand Databases and find the SBSMonitoring, right click it and choose Tasks -> Shrink -> Database

This will run for a while (20min) after which the database size should reduce to a much smaller size (about 300MB or so in some cases)

Source URL: http://www.eggheadcafe.com/software/aspnet/35793646/sbs-monitoring-4gb-2008-now-what.aspx

Monday, 16 August 2010

Copy TS client license

Source URL: http://support.microsoft.com/kb/323597


If we have a broken Terminal Server that cannot issue client licenses - causing RDP connection errors for new client PCs.

Export the "HKEY_LOCAL_MACHINE\Software\Microsoft\MSLicensing" key from a working machine on the network and import it onto the new client PC. This should resolve the RDP certificate issue and allow the client to connect.

NOTE: The real solution would be to resolve the TS Licensing issue - Restore the TS Licensing or re-activate the server using the TS CALs, etc.

Enable Quicklaunch toolbar and Clock for Terminal Server users


To enable the clock and Quicklaunch bar we need to make sure the following GPO are set as follows:

User Configuration > Administrative Templates > Start Menu and Taskbar
DISABLE: Do not display any custom toolbars in the taskbar (This allows the user to activate the QL bar and others if needed - does not turn it on)
DISABLE: Hide the notification area
ENABLE: Prevent changes to Taskbar and Start Menu Settings
DISABLE: Remove Clock from the system notification area (This setting allows user to turn the clock on - does not actually turn it on)

Right, from a GPO point of view the user should be able to see the QL bar and clock. However you may find that neither the clock nor the QL bar is displayed. To force them to be displayed we need to do the following:

Export the following registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StuckRects2

You'll see a "Settings" value, which contains something like this:
28 00 00 00 ff ff ff ff 02 00 00 00 03 00 00 00 6d 00 00 00 20 00 00 00 00 00 00 00 e0 03 00 00 00 05 00 00 00 04 00 00

The nineth pair of digits determines the Taskbar properties. Possible values are:
Always on top = 0x02
Auto hide = 0x01
Show small icons in Start menu = 0x04
Hide clock = 0x08

Combine the properties you want and set the byte. For example:
Always on top + Show small icons + Show clock = 06
Always on top + Show small icons + Hide clock = 0e

Note that the changes do not take effect immediately, you have to restart Explorer, or logoff and logon again to see the changes.

I set it to 02 (Allways on top)

Save this to a .reg file in NETLOGON

Next for the QL bar:

Logon to admin and make sure the QL bar is active
Export the following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop

to another .reg file in NETLOGON

Next we need to create a user LOGOFF script GPO and link it to the relevant user accounts. The script should push the required registry settings on logoff (we need explorer to be closed for the settings to remain as explorer updates these keys on closing and reads them only at startup)

The script should "regedit /s file.reg" the reg files created above this will add the keys silently.

The settings should apply the next time on user logon after the script as run.






Thursday, 29 July 2010

Users running IE8 under TS cannot change Security Levels for the Internet Zone

 
Problem is that normal users have the Internet Zone security level set to High - this cannot be changed. This can cause problems when running certain applications (e.g. Quickbooks). This even overrides a GPO enforcement.
 
Copy this to a reg file and import at logon:
This will restore ability of users to modify Securtiy Level of Internet Zone.
Windows Registry Editor Version 5.00  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings] "User Agent"="Mozilla/4.0 (compatible; MSIE 8.0; Win32)" "IE5_UA_Backup_Flag"="5.0" "NoNetAutodial"=dword:00000000 "MigrateProxy"=dword:00000001 "EnableNegotiate"=dword:00000001 "EmailName"="IEUser@" "AutoConfigProxy"="wininet.dll" "MimeExclusionListForCache"="multipart/mixed multipart/x-mixed-replace multipart/x-byteranges " "WarnOnPost"=hex:01,00,00,00 "UseSchannelDirectly"=hex:01,00,00,00 "EnableHttp1_1"=dword:00000001 "UrlEncoding"=dword:00000000 "SecureProtocols"=dword:000000a0 "PrivDiscUiShown"=dword:00000001 "PrivacyAdvanced"=dword:00000000 "ZonesSecurityUpgrade"=hex:87,56,41,0d,78,2c,ca,01 "DisableCachingOfSSLPages"=dword:00000000 "WarnonZoneCrossing"=dword:00000000 "ProxyEnable"=dword:00000000 "IEHardenIENoWarn"=dword:00000000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0]  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache] "Signature"="Client UrlCache MMF Ver 5.2"  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content] "PerUserItem"=dword:00000001 "CachePrefix"="" "CacheLimit"=dword:00200052  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies] "PerUserItem"=dword:00000001 "CachePrefix"="Cookie:" "CacheLimit"=dword:00002000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache]  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat] "CachePath"=hex(2):25,00,55,00,53,00,45,00,52,00,50,00,52,00,4f,00,46,00,49,00,\   4c,00,45,00,25,00,5c,00,4c,00,6f,00,63,00,61,00,6c,00,20,00,53,00,65,00,74,\   00,74,00,69,00,6e,00,67,00,73,00,5c,00,41,00,70,00,70,00,6c,00,69,00,63,00,\   61,00,74,00,69,00,6f,00,6e,00,20,00,44,00,61,00,74,00,61,00,5c,00,4d,00,69,\   00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,5c,00,46,00,65,00,65,00,64,00,\   73,00,20,00,43,00,61,00,63,00,68,00,65,00,00,00 "CachePrefix"="feedplat:" "CacheLimit"=dword:00002000 "CacheOptions"=dword:00000000 "CacheRepair"=dword:00000000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld] "CachePath"=hex(2):25,00,55,00,53,00,45,00,52,00,50,00,52,00,4f,00,46,00,49,00,\   4c,00,45,00,25,00,5c,00,49,00,45,00,54,00,6c,00,64,00,43,00,61,00,63,00,68,\   00,65,00,00,00 "CachePrefix"="ietld:" "CacheLimit"=dword:00002000 "CacheOptions"=dword:00000009 "CacheRepair"=dword:00000000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012009090320090904] "CachePath"=hex(2):25,00,55,00,53,00,45,00,52,00,50,00,52,00,4f,00,46,00,49,00,\   4c,00,45,00,25,00,5c,00,4c,00,6f,00,63,00,61,00,6c,00,20,00,53,00,65,00,74,\   00,74,00,69,00,6e,00,67,00,73,00,5c,00,48,00,69,00,73,00,74,00,6f,00,72,00,\   79,00,5c,00,48,00,69,00,73,00,74,00,6f,00,72,00,79,00,2e,00,49,00,45,00,35,\   00,5c,00,4d,00,53,00,48,00,69,00,73,00,74,00,30,00,31,00,32,00,30,00,30,00,\   39,00,30,00,39,00,30,00,33,00,32,00,30,00,30,00,39,00,30,00,39,00,30,00,34,\   00,00,00 "CachePrefix"=":2009090320090904: " "CacheLimit"=dword:00002000 "CacheOptions"=dword:0000000b "CacheRepair"=dword:00000000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:] "CachePath"=hex(2):25,00,55,00,53,00,45,00,52,00,50,00,52,00,4f,00,46,00,49,00,\   4c,00,45,00,25,00,5c,00,50,00,72,00,69,00,76,00,61,00,63,00,49,00,45,00,00,\   00 "CachePrefix"="PrivacIE:" "CacheLimit"=dword:00000400 "CacheOptions"=dword:00000009 "CacheRepair"=dword:00000000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History] "PerUserItem"=dword:00000001 "CachePrefix"="Visited:" "CacheLimit"=dword:00002000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent]  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform]  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache] "Persistent"=dword:00000001  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Content] "CacheLimit"=dword:00200052  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Cookies] "CacheLimit"=dword:00002000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\History] "CacheLimit"=dword:00002000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections] "DefaultConnectionSettings"=hex:46,00,00,00,04,00,00,00,01,00,00,00,00,00,00,\   00,00,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,e0,10,58,19,78,2c,ca,01,\   00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,02,00,00,00,c0,a8,64,24,00,\   00,00,00,00,00,00,00,2b,30,30,9d,00,00,61,80,00,00,00,00,68,00,74,00,74,00,\   70,00,3a,00,2f,00,2f,00,67,00,6f,00,2e,00,6d,00,69,00,63,00,72,00,6f,00,73,\   00,6f,00,66,00,74,00,2e,00,63,00,6f,00,6d,00,2f,00,66,00,77,00,6c,00,69,00,\   6e,00,6b,00,2f,00,3f,00,4c,00,69,00,6e,00,6b,00,49,00,64,00,3d,00,36,00,39,\   00,31,00,35,00,37,00,00,00,00,00,00,00,00,00,33,00,00,00 "SavedLegacySettings"=hex:46,00,00,00,78,04,00,00,01,00,00,00,00,00,00,00,00,\   00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,e0,10,58,19,78,2c,ca,01,00,00,\   00,00,00,00,00,00,00,00,00,00,01,00,00,00,02,00,00,00,c0,a8,64,24,00,00,00,\   00,00,00,00,00,2b,30,30,9d,00,00,61,80,00,00,00,00,68,00,74,00,74,00,70,00,\   3a,00,2f,00,2f,00,67,00,6f,00,2e,00,6d,00,69,00,63,00,72,00,6f,00,73,00,6f,\   00,66,00,74,00,2e,00,63,00,6f,00,6d,00,2f,00,66,00,77,00,6c,00,69,00,6e,00,\   6b,00,2f,00,3f,00,4c,00,69,00,6e,00,6b,00,49,00,64,00,3d,00,36,00,39,00,31,\   00,35,00,37,00,00,00,00,00,00,00,00,00,33,00,00,00  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones]  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0] @="" "DisplayName"="My Computer" "PMDisplayName"="My Computer [Protected Mode]" "Description"="Your computer" "Icon"="explorer.exe#0100" "LowIcon"="inetcpl.cpl#005422" "CurrentLevel"=dword:00000000 "Flags"=dword:00000021 "1200"=dword:00000003 "1400"=dword:00000001  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1] @="" "DisplayName"="Local intranet" "PMDisplayName"="Local intranet [Protected Mode]" "Description"="This zone contains all Web sites that are on your organization's intranet." "Icon"="shell32.dll#0018" "LowIcon"="inetcpl.cpl#005423" "CurrentLevel"=dword:00000000 "Flags"=dword:00000143 "1200"=dword:00000003 "1400"=dword:00000001  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2] @="" "DisplayName"="Trusted sites" "PMDisplayName"="Trusted sites [Protected Mode]" "Description"="This zone contains Web sites that you trust not to damage your computer or data." "Icon"="inetcpl.cpl#00004480" "LowIcon"="inetcpl.cpl#005424" "CurrentLevel"=dword:00000000 "Flags"=dword:00000021 "1200"=dword:00000003 "1400"=dword:00000001  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3] @="" "DisplayName"="Internet" "PMDisplayName"="Internet [Protected Mode]" "Description"="This zone contains all Web sites you haven't placed in other zones" "Icon"="inetcpl.cpl#001313" "LowIcon"="inetcpl.cpl#005425" "CurrentLevel"=dword:00000000 "Flags"=dword:00000021 "1200"=dword:00000003 "1400"=dword:00000001  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4] @="" "DisplayName"="Restricted sites" "PMDisplayName"="Restricted sites [Protected Mode]" "Description"="This zone contains Web sites that could potentially damage your computer or data." "Icon"="inetcpl.cpl#00004481" "LowIcon"="inetcpl.cpl#005426" "CurrentLevel"=dword:00000000 "Flags"=dword:00000021 "1200"=dword:00000003 "1400"=dword:00000003  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P]  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History]  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Passport] @=""  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Passport\DAMap] @=""  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\TemplatePolicies]  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\TemplatePolicies\High] "1400"=dword:00000003  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap] "UNCAsIntranet"=dword:00000000 "AutoDetect"=dword:00000001 @="" "IEHarden"=dword:00000000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains] @=""  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains]  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\microsoft.com]  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\microsoft.com\*.update] "http"=dword:00000002 "https"=dword:00000002  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\msn.com]  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\msn.com\runonce] "http"=dword:00000002  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults] @="" "http"=dword:00000003 "https"=dword:00000003 "ftp"=dword:00000003 "file"=dword:00000003 "@ivt"=dword:00000001 "shell"=dword:00000000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges] @=""  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones] @="" "SecuritySafe"=dword:00000001  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] "2001"=dword:00000003 "2004"=dword:00000003 @="" "DisplayName"="My Computer" "PMDisplayName"="My Computer [Protected Mode]" "Description"="Your computer" "Icon"="explorer.exe#0100" "LowIcon"="inetcpl.cpl#005422" "CurrentLevel"=dword:00000000 "Flags"=dword:00000021 "1200"=dword:00000000 "1400"=dword:00000000 "2007"=dword:00000003  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] "2001"=dword:00000000 "2004"=dword:00000000 @="" "DisplayName"="Local intranet" "PMDisplayName"="Local intranet [Protected Mode]" "Description"="This zone contains all Web sites that are on your organization's intranet." "Icon"="shell32.dll#0018" "LowIcon"="inetcpl.cpl#005423" "CurrentLevel"=dword:00010500 "Flags"=dword:00000143 "1200"=dword:00000000 "1400"=dword:00000000 "2500"=dword:00000003 "2007"=dword:00010000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] "2001"=dword:00000000 "2004"=dword:00000000 @="" "DisplayName"="Trusted sites" "PMDisplayName"="Trusted sites [Protected Mode]" "Description"="This zone contains Web sites that you trust not to damage your computer or data." "Icon"="inetcpl.cpl#00004480" "LowIcon"="inetcpl.cpl#005424" "CurrentLevel"=dword:00011000 "Flags"=dword:00000047 "1200"=dword:00000000 "1400"=dword:00000000 "1001"=dword:00000001 "1004"=dword:00000003 "1201"=dword:00000003 "1206"=dword:00000003 "1402"=dword:00000000 "1405"=dword:00000000 "1406"=dword:00000003 "1407"=dword:00000001 "1601"=dword:00000000 "1604"=dword:00000000 "1605"=dword:00000000 "1606"=dword:00000000 "1607"=dword:00000003 "1608"=dword:00000000 "1609"=dword:00000001 "1800"=dword:00000001 "1802"=dword:00000000 "1803"=dword:00000000 "1804"=dword:00000001 "1806"=dword:00000001 "1809"=dword:00000000 "1A00"=dword:00020000 "1A02"=dword:00000000 "1A03"=dword:00000000 "1A04"=dword:00000003 "1A05"=dword:00000001 "1A06"=dword:00000000 "1C00"=dword:00010000 "1E05"=dword:00020000 "2100"=dword:00000000 "2101"=dword:00000000 "2102"=dword:00000003 "2200"=dword:00000003 "2201"=dword:00000003 "2300"=dword:00000001 "2000"=dword:00000000 "1207"=dword:00000000 "1208"=dword:00000000 "1209"=dword:00000003 "120A"=dword:00000003 "1408"=dword:00000000 "160A"=dword:00000000 "2103"=dword:00000000 "2104"=dword:00000000 "2105"=dword:00000000 "2301"=dword:00000000 "2400"=dword:00000000 "2401"=dword:00000000 "2402"=dword:00000000 "2600"=dword:00000000 "2007"=dword:00010000 "120B"=dword:00000000 "1409"=dword:00000000 "2005"=dword:00000000 "2106"=dword:00000000 "2700"=dword:00000000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] "2001"=dword:00000000 "2004"=dword:00000000 "{AEBA21FA-782A-4A90-978D-B72164C80120}"=hex:1a,37,61,59,23,52,35,0c,7a,5f,20,\   17,2f,1e,1a,19,0e,2b,01,73,1e,28,1a,04,1b,0c,3b,c2,21,27,53,0d,36,05,2c,05,\   04,3d,4f,3a,4a,44,33,3a,0a,06,12,68,53,7c,20,13,35,5d,4c,10,27,01,56,7a,2d,\   3f,38,4f,79,0f,16,26,75,53,1c,31,00,56,7a,3e,32,24,4f,79,1b,00,33,71,4d,23,\   32,29,7c,6a,35,31,34,40,72,3b,01,2e,5d,4c,2a,07,15,48,72,38,12,00,56,7a,3e,\   16,3c,71,4d,24,33,35,7c,72,35,0e,3c,1a,41,44,19,0f,31,3a,56,7a,2e,3e,31,0c,\   7c,6a,10,27,0c,05,5d,4c,39,19,12,15,61,54,2e,00,33,32,40,52,03,25,1f,05,5d,\   4c,2c,0c,0a,15,61,54,1a,26,1f,05,5d,4c,10,21,1d,1b,71,4d,3b,24,3a,21,6d,72,\   24,16,3c,32,40,72,21,0f,3a,1a,41,44,1b,1e,01,01,71,4d,32,23,30,27,6d,4d,1f,\   28,10,3c,56,7a,2f,2e,32,16,7c,6a,3a,12,3b,28,75,53,0b,3f,12,01,71,4d,23,32,\   29,27,75,53,12,30,32,1e,4f,79,12,38,17,01,71,4d,30,3e,37,27,6d,72,38,12,3f,\   04,41,44,0a,0e,32,28,49,5f,1c,24,0b,1b,36,21,41,7b,5b,24,39,31,7c,6a,2b,0e,\   25,75,53,1a,2e,26,41,72,34,16,26,71,4d,30,30,3a,7c,6a,07,33,1a,56,7a,3a,00,\   33,71,4d,23,32,29,7c,6a,1a,26,1a,40,52,24,3f,1a,6d,4d,1c,22,28,75,53,13,25,\   20,41,44,0a,0e,32,75,53,08,07,20,71,4d,10,27,0d,05,5d,4c,24,1a,1e,1b,71,4d,\   3f,20,3f,21,6d,4d,10,27,0c,05,5d,4c,39,19,12,3a,56,7a,3a,20,2c,0c,7c,6a,3e,\   0c,37,07,75,53,12,30,32,3a,56,7a,25,2d,23,0c,7c,6a,2b,08,21,3a,56,7a,22,3a,\   32,3a,56,72,24,1e,26,1a,41,44,07,1f,03,1b,75,53,1c,31,01,01,71,4d,32,23,30,\   27,6d,72,34,1e,30,04,41,44,1b,1e,3b,28,49,5f,07,33,12,1b,5d,4c,35,0b,0a,1f,\   75,53,0b,00,34,28,40,72,3b,01,2d,04,41,44,01,05,34,28,40,52,22,36,04,34,48,\   72,38,12,3f,04,41,44,0a,0e,1f,01,71,4d,24,33,35,27,06,1c,68,53,49,14,21,01,\   40,52,10,27,0d,40,52,2c,29,05,6d,4d,1f,28,05,56,7a,2f,2e,32,75,53,07,33,12,\   40,52,3f,3a,19,6d,72,20,00,34,71,4d,1a,26,1a,40,52,24,3f,1a,6d,72,35,08,38,\   5d,4c,2d,01,18,48,7a,27,23,1f,56,7a,3b,2f,3f,4f,79,08,39,01,1b,71,72,33,1f,\   39,3a,56,7a,2e,3e,31,0c,7c,72,35,0e,3f,1a,41,44,0a,0a,35,3a,56,7a,3a,20,2c,\   0c,7c,6a,03,25,1f,05,5d,4c,2c,0c,0a,15,61,54,27,05,34,32,40,52,10,21,09,05,\   5d,4c,2d,01,18,15,61,54,07,37,17,05,5d,4c,1c,24,03,1b,71,4d,30,30,3b,27,6d,\   72,33,17,3f,28,40,72,34,1e,30,04,41,44,1b,1e,00,01,71,4d,2f,2c,2c,27,6d,4d,\   0b,26,3f,3c,56,7a,3a,20,23,16,7c,6a,35,05,33,28,75,53,12,30,17,01,71,4d,30,\   3e,37,27,75,53,13,25,20,1e,4f,79,1f,29,1f,01,71,4d,24,33,35,27,06,21,41,7b,\   5b,3d,24,37,7c,6a,2b,0e,25,40,72,33,1f,39,5d,72,34,1e,30,5d,4c,2a,0d,18,48,\   7a,27,12,3b,71,4d,23,32,12,56,72,20,0c,2e,5d,4c,2c,0c,0a,75,53,1a,26,1f,40,\   72,35,08,38,5d,4c,2d,01,18,75,53,0f,21,27,41,44,07,1f,3e,61,54,3d,06,22,32,\   40,52,2c,29,05,32,48,72,34,1e,05,1b,71,4d,10,27,0c,05,5d,4c,39,19,1a,1b,71,\   4d,23,32,24,21,6d,4d,03,25,1f,05,5d,4c,2c,0c,0a,3a,56,7a,25,2d,23,0c,7c,6a,\   2b,08,21,07,75,53,13,25,20,3a,56,7a,3e,3e,3b,0c,7c,6a,3f,0f,23,3a,56,7a,2f,\   2e,3d,3c,56,72,33,1f,39,04,41,44,1a,0e,05,01,75,53,1c,31,00,01,71,4d,2f,2c,\   2c,27,6d,72,20,0c,2d,04,41,44,06,18,2a,28,49,5f,1a,26,1a,1b,5d,4c,2c,0c,0f,\   1f,75,53,1c,1c,3e,28,40,72,38,12,3f,04,41,44,0a,16,3c,28,40,52,3e,39,06,34,\   21,21,41,7b,5b,23,27,3c,7c,6a,17,37,17,40,52,32,24,05,6d,4d,0e,21,2c,75,53,\   0b,31,31,75,53,08,3e,21,41,44,07,1e,3c,61,54,17,37,17,05,5d,4c,00,33,1e,1b,\   71,4d,2e,39,3b,21,6d,72,20,06,32,32,40,72,21,0f,3c,1a,41,44,1a,0e,1f,01,71,\   4d,20,2c,30,27,6d,4d,0e,21,2c,3c,56,7a,3a,2e,2d,16,7c,6a,3f,07,22,28,6e,02,\   68,4a,7c,21,09,26,5d,4c,29,1d,1f,56,7a,3f,32,38,4f,79,1e,30,01,56,7a,3a,2e,\   2d,4f,79,14,07,22,71,4d,24,30,3b,7c,6a,2a,1e,2f,07,75,53,0c,2d,26,3a,56,7a,\   31,25,3d,0c,7c,6a,3e,0e,35,3a,56,7a,3b,2f,3d,3a,56,72,34,1e,26,04,41,44,0b,\   0a,1e,01,75,53,0e,38,01,01,71,4d,23,30,2b,27,6d,72,21,0f,3c,04,28,1b,67,6b,\   5f,00,22,10,75,53,1f,21,27,41,44,0b,0a,31,75,53,0e,1d,22,71,4d,03,27,1d,40,\   52,3e,39,08,75,53,08,31,21,41,44,1a,0e,32,3a,56,7a,3f,32,38,0c,7c,6a,06,3e,\   0d,05,5d,4c,35,0d,09,15,61,54,29,07,22,32,40,52,17,37,17,1b,5d,4c,3a,19,16,\   1f,61,54,06,3e,0d,1b,5d,4c,03,27,11,01,71,4d,24,33,3b,27,06,21,41,73,41,11,\   25,1d,56,7a,2e,3e,3b,4f,79,18,12,3f,71,4d,2e,39,3b,7c,6a,3e,0e,35,40,72,21,\   0f,3c,5d,4c,36,0d,19,48,72,34,1e,1f,1b,71,4d,00,33,16,05,5d,4c,38,04,01,1b,\   71,4d,23,30,2b,21,6d,4d,1c,24,0d,05,5d,4c,29,1d,17,3c,56,7a,3f,32,38,16,7c,\   6a,39,09,25,09,75,53,0b,31,31,3c,56,7a,3b,2f,3d,16,15,39,5f,7b,42,03,38,02,\   40,20,2c,1e,4f,37,41,7b,5b,23,27,3c,7c,14,07,22,6e,14,68,4a,7c,20,13,35,5d,\   30,37,08,06,37,41,7b,5b,23,27,3c,7c,1b,39,1d,30,02,7c,50,68,3a,3b,34,4f,1b,\   1e,3b,6e,14,68,73,41,0b,22,0a,56,12,30,32,28,09,67,73,41,0b,22,2a,41,2c,0c,\   0f,21,37,41,7b,5b,23,27,3c,7c,08,1c,3e,66,0e,44,4f,56,06,13,05,61,27,23,1f,\   4f,3f,5b,53,7c,20,13,35,5d,3e,39,06,06,0a,68,53,7c,21,09,26,5d,32,12,3f,6e,\   14,68,4a,44,3e,37,02,6d,1c,24,01,4f,3f,5b,73,41,08,38,27,41,38,04,19,6e,14,\   68,4a,44,3e,37,02,6d,3e,0e,35,3b,37,41,7b,5b,24,39,31,7c,08,39,00,4f,3f,7c,\   50,68,3b,1d,3c,71,25,2d,2c,20,3a,7c,50,68,3b,25,3b,4f,01,1d,2a,6e,14,68,4a,\   44,3e,37,02,6d,10,21,09,29,1f,5e,45,67,14,30,07,49,12,16,3c,66,0e,44,73,41,\   08,38,27,41,36,0a,1b,21,3f,42,73,41,10,3b,2d,41,00,33,1e,4f,3f,5b,53,5e,2e,\   07,1d,75,21,07,22,66,0e,7c,50,68,23,24,31,4f,0d,15,01,4f,3f,5b,53,5e,2e,07,\   1d,48,0b,18,3c,6e,14,68,4a,44,26,36,0c,6d,2b,06,25,66,37,41,7b,5b,14,21,01,\   40,3a,31,24,15,37,41,7b,5b,3c,3e,3f,7c,12,38,17,4f,3f,5b,53,5e,2e,07,1d,75,\   35,08,38,36,03,56,76,74,37,08,19,40,07,37,17,29,1f,7c,50,68,23,24,31,4f,07,\   1f,3e,16,17,7c,50,68,20,3a,39,75,25,12,3f,66,0e,44,4f,56,1c,12,1d,56,1c,24,\   0d,29,37,41,7b,5b,3d,24,37,7c,1e,1d,22,66,0e,44,4f,56,1c,12,30,61,23,13,11,\   4f,3f,5b,53,5e,2f,01,15,48,10,27,0c,6e,14,68,4a,7c,36,12,38,5d,24,3f,19,6e,\   14,68,4a,44,21,2c,04,6d,35,05,34,66,0e,44,4f,56,1c,12,1d,56,1c,3b,25,28,09,\   67,6b,5f,01,2c,28,75,24,1e,26,36,37,41,7b,5b,3d,24,37,7c,14,3a,0b,30,37,41,\   7b,5b,36,0c,7c "1A10"=dword:00000001 "{A8A88C49-5EB2-4990-A1A2-0876022C854F}"=hex:1a,37,61,59,23,52,35,0c,7a,5f,20,\   17,2f,1e,1a,19,0e,2b,01,73,1e,28,1a,04,1b,0c,3b,c2,21,2d,53,49,07,25,0f,29,\   01,7c,50,68,3a,3b,34,4f,79,08,39,0d,49,72,33,1f,39,5d,4c,17,37,05,56,7a,2f,\   2e,32,4f,79,1f,12,3b,75,53,0b,3f,12,56,7a,3a,20,23,4f,79,12,05,33,71,4d,3a,\   31,29,7c,6a,2b,08,21,40,72,38,12,3f,5d,4c,39,1d,17,48,72,21,0f,03,56,7a,2f,\   06,22,32,40,52,2c,29,05,3a,56,7a,2e,3e,31,0c,7c,6a,2b,06,25,32,40,52,33,24,\   01,32,75,53,0b,3f,32,04,4f,79,1b,3b,1f,0c,40,72,3b,01,2d,1a,75,53,12,30,3f,\   04,4f,79,08,3f,09,0c,75,53,13,25,20,04,75,53,07,37,17,05,5d,4c,36,0a,1b,3a,\   56,72,35,0e,3c,3c,56,7a,2d,3f,38,16,7c,6a,17,37,01,1b,5d,4c,2a,0d,18,1f,61,\   54,12,12,3b,28,40,52,3f,3a,19,34,48,72,20,0c,17,01,71,4d,1a,26,1a,1b,5d,4c,\   2c,0c,17,01,71,4d,30,3e,37,27,6d,4d,1b,3b,0c,1b,5d,4c,39,1d,17,3c,56,7a,3b,\   2f,3f,16,15,39,5f,7b,42,29,1d,3c,71,4d,30,06,22,71,4d,32,23,30,7c,6a,2a,1e,\   19,75,53,1c,31,20,41,72,24,12,3b,71,4d,23,32,24,7c,6a,03,25,17,56,7a,25,05,\   33,71,4d,3a,31,29,7c,6a,10,21,09,40,52,27,2c,0b,6d,4d,0f,28,2a,75,53,08,3e,\   23,41,44,1b,1e,3c,3a,56,7a,12,34,16,05,75,53,1f,21,2d,04,4f,79,10,27,0c,05,\   5d,4c,39,19,12,15,75,53,0b,3f,32,04,4f,79,1b,00,34,32,40,52,24,3f,19,32,48,\   7a,2c,10,17,1b,71,4d,30,1c,3e,32,40,52,27,2c,0b,32,48,7a,27,16,3c,32,40,52,\   3e,07,20,3a,56,7a,2f,2e,3d,16,7c,6a,12,34,1e,01,71,4d,17,37,01,1b,5d,4c,2a,\   0d,18,3c,56,7a,3e,32,24,16,7c,6a,3e,0c,34,09,75,53,0b,3f,3f,1e,4f,79,12,38,\   12,01,71,72,3b,01,2e,3c,56,7a,2f,24,39,16,7c,72,38,12,3f,04,41,44,0a,0e,32,\   3c,56,7a,3b,2f,3f,16,15,39,7c,50,68,23,24,31,4f,79,08,39,0d,49,5f,12,34,16,\   40,52,17,37,01,40,52,22,38,0b,6d,4d,0f,34,1a,56,7a,3a,20,2c,75,53,03,25,1f,\   40,52,24,3f,19,6d,72,3b,05,34,71,4d,10,21,09,40,52,27,2c,0b,6d,72,24,1e,26,\   5d,4c,36,0a,1b,48,7a,36,13,01,1b,71,4d,32,23,30,21,6d,4d,17,37,01,3a,56,7a,\   2f,06,25,32,40,52,33,24,01,3a,56,7a,3a,20,2c,0c,7c,6a,3e,00,34,32,40,52,24,\   3f,19,32,75,53,12,30,3f,04,4f,79,08,3f,09,0c,40,72,38,12,3f,1a,75,53,0f,21,\   27,04,4f,79,14,3a,0b,0c,75,53,1c,31,21,1e,75,53,12,34,16,1b,5d,4c,29,1d,1d,\   3c,56,72,35,0e,3f,3c,56,7a,3e,32,24,16,7c,6a,03,25,1a,1b,5d,4c,35,0b,0f,1f,\   61,54,27,05,33,28,40,52,24,3f,1a,34,48,72,35,08,1d,01,71,4d,1b,3b,0c,1b,5d,\   4c,39,1d,1f,01,71,4d,24,33,35,27,06,1c,7c,50,68,20,3a,39,4f,79,08,06,22,71,\   4d,32,23,30,7c,6a,2a,1e,19,40,72,35,0e,3f,5d,72,24,1a,25,5d,4c,35,0b,0a,48,\   7a,23,00,34,71,4d,3a,31,12,56,72,3b,01,2e,5d,4c,2a,07,15,75,53,1b,3b,0c,40,\   72,24,1e,26,5d,4c,36,0a,1b,75,53,1c,31,21,04,4f,79,0a,2a,06,0c,40,72,34,1e,\   30,1a,41,44,1b,1e,3b,3a,56,7a,07,33,12,05,75,53,0b,3f,32,04,4f,79,03,25,1f,\   05,5d,4c,2c,0c,0a,15,75,53,12,30,3f,04,4f,79,08,1c,3e,32,40,52,27,2c,0b,32,\   48,7a,27,23,1f,1b,71,4d,24,07,20,32,40,52,22,38,08,34,48,7a,34,17,3f,28,40,\   52,23,16,26,3c,56,7a,2f,2e,32,16,7c,6a,07,33,1a,01,71,4d,03,25,1a,1b,5d,4c,\   35,0b,0f,3c,56,7a,25,2d,2c,16,7c,6a,35,31,37,09,75,53,1c,3b,25,1e,4f,79,13,\   35,00,01,71,72,24,1e,26,3c,56,7a,3b,2f,3f,16,15,21,41,7b,5b,23,27,3c,7c,6a,\   2a,16,3c,71,4d,20,2c,30,7c,6a,06,3e,0d,40,52,3f,38,18,6d,4d,08,27,2c,75,53,\   08,31,21,75,53,1f,21,27,04,4f,79,18,2d,06,0c,75,53,0e,38,21,04,75,53,03,27,\   1d,05,5d,4c,36,0a,19,3a,56,72,34,1e,26,3c,56,7a,3f,32,38,16,7c,6a,06,3e,0d,\   1b,5d,4c,35,0d,09,1f,61,54,29,07,22,28,29,01,5e,45,67,14,30,1f,56,7a,17,37,\   17,40,72,25,1a,39,5d,4c,38,04,01,56,7a,3a,2e,2d,4f,79,14,3a,01,56,7a,3b,2e,\   3d,4f,79,0f,16,3c,32,40,52,32,24,05,32,48,7a,18,28,01,1b,71,4d,23,06,32,32,\   40,52,3e,39,08,32,48,7a,37,16,3c,28,40,52,32,12,3f,3c,56,7a,31,25,3d,16,7c,\   6a,03,27,11,01,71,4d,1c,24,0d,1b,36,1d,56,76,74,14,21,01,40,52,23,28,02,6d,\   4d,0c,34,2b,75,53,0e,38,21,41,44,06,1e,2c,75,53,08,07,22,71,4d,1c,27,0d,40,\   52,23,28,02,3a,56,7a,3f,32,38,0c,7c,6a,39,1d,22,32,40,52,3f,38,18,32,75,53,\   08,3e,21,04,4f,79,0f,29,07,02,40,72,25,1a,39,04,75,53,0e,38,21,1e,4f,79,1b,\   39,1d,02,75,53,08,3e,21,1e,6e,02,7c,50,68,20,3a,39,4f,79,0f,16,3c,75,53,0c,\   2d,1e,56,7a,31,25,3d,4f,79,1b,06,32,71,4d,24,33,3b,7c,6a,3f,0e,25,40,72,34,\   1e,26,1a,41,44,0b,0a,31,3a,56,7a,06,3e,0d,05,75,53,0b,31,31,04,4f,79,1c,24,\   0d,05,5d,4c,29,1d,17,1f,75,53,0c,2d,26,1e,4f,79,1e,1d,22,28,40,52,3f,38,18,\   34,48,7a,22,12,01,01,66,1c,44,73,41,0b,22,2a,41,3a,19,16,21,2d,42,73,41,0b,\   22,2a,41,1c,24,01,4f,2d,5b,53,5e,35,1e,22,75,27,1d,22,66,1c,7c,50,68,3a,3b,\   34,4f,06,1e,11,4f,2d,5b,53,5e,35,1e,22,48,1c,18,2d,6e,02,68,4a,44,3f,2d,31,\   6d,35,05,33,66,21,41,7b,5b,03,38,02,40,3a,31,29,15,21,41,7b,5b,23,27,3c,7c,\   08,3f,1d,4f,2d,5b,53,5e,35,1e,22,75,24,1e,26,36,1d,56,76,74,3e,03,1c,40,1c,\   24,0b,29,01,7c,50,68,3b,25,3b,4f,0b,0a,31,16,05,7c,50,68,3b,25,3b,75,21,07,\   22,66,1c,44,4f,56,07,15,1f,56,06,3e,0d,29,21,41,7b,5b,24,39,31,7c,1b,06,32,\   66,1c,44,4f,56,07,15,32,61,36,13,00,4f,2d,5b,53,5e,36,04,17,48,1a,26,1a,6e,\   02,68,4a,7c,21,09,26,5d,24,3f,1a,6e,02,68,4a,44,3e,37,02,6d,2b,1c,3e,66,1c,\   44,4f,56,07,15,1f,56,0f,21,27,28,1b,67,6b,5f,08,21,2a,75,21,0f,3a,36,21,41,\   7b,5b,3c,3e,3f,7c,18,2d,06,30,21,41,7b,5b,3c,3e,05,56,1c,24,0d,29,01,5e,45,\   67,0c,1c,26,75,27,09,3c,6e,02,68,4a,44,26,36,0c,6d,03,27,1d,29,01,5e,45,67,\   0c,3f,31,49,3d,06,25,66,1c,44,4f,56,1f,14,38,75,3b,01,12,4f,2d,5b,73,41,10,\   3b,2d,41,2c,0c,17,4f,2d,5b,53,5e,2e,07,1d,48,10,21,09,29,01,5e,45,67,0c,1c,\   26,71,3e,3e,3b,20,28,74,4e,68,2a,29,05,56,08,3e,23,6e,02,68,4a,44,21,2c,04,\   6d,3b,1a,20,6e,02,68,4a,44,21,1a,3e,75,21,0f,3c,36,1d,56,76,74,15,3b,1d,56,\   0e,38,01,4f,2d,5b,53,5e,2f,01,15,75,20,0e,2c,36,1d,56,76,74,28,02,21,40,10,\   27,0c,29,01,5e,45,67,0d,35,1d,56,12,05,33,66,1c,7c,50,68,20,3a,39,4f,01,05,\   34,66,1c,44,4f,56,1c,12,30,75,35,08,38,36,1d,56,76,74,15,3b,09,40,2f,20,31,\   15,39,5f,7b,42,20,1a,3e,71,3b,2f,03,4f,2d,5b,53,5e,20,39,74 @="" "DisplayName"="Internet" "PMDisplayName"="Internet [Protected Mode]" "Description"="This zone contains all Web sites you haven't placed in other zones" "Icon"="inetcpl.cpl#001313" "LowIcon"="inetcpl.cpl#005425" "CurrentLevel"=dword:00011500 "Flags"=dword:00000001 "1200"=dword:00000000 "1400"=dword:00000000 "1001"=dword:00000001 "1004"=dword:00000003 "1201"=dword:00000003 "1206"=dword:00000003 "1207"=dword:00000003 "1208"=dword:00000003 "1209"=dword:00000003 "120A"=dword:00000003 "1402"=dword:00000000 "1405"=dword:00000000 "1406"=dword:00000003 "1407"=dword:00000001 "1408"=dword:00000003 "1601"=dword:00000000 "1604"=dword:00000000 "1605"=dword:00000000 "1606"=dword:00000000 "1607"=dword:00000003 "1608"=dword:00000000 "1609"=dword:00000001 "160A"=dword:00000003 "1800"=dword:00000001 "1802"=dword:00000000 "1803"=dword:00000000 "1804"=dword:00000001 "1806"=dword:00000001 "1809"=dword:00000000 "1A00"=dword:00020000 "1A02"=dword:00000000 "1A03"=dword:00000000 "1A04"=dword:00000003 "1A05"=dword:00000001 "1A06"=dword:00000000 "1C00"=dword:00010000 "1E05"=dword:00020000 "2000"=dword:00000000 "2100"=dword:00000000 "2101"=dword:00000000 "2102"=dword:00000003 "2103"=dword:00000003 "2104"=dword:00000003 "2105"=dword:00000003 "2200"=dword:00000003 "2201"=dword:00000003 "2300"=dword:00000001 "2301"=dword:00000000 "2400"=dword:00000000 "2401"=dword:00000000 "2402"=dword:00000000 "2600"=dword:00000000 "2007"=dword:00010000 "120B"=dword:00000003 "1409"=dword:00000000 "2005"=dword:00000003 "2106"=dword:00000000 "2700"=dword:00000000  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] "2001"=dword:00000003 "2004"=dword:00000003 "1400"=dword:00000003 "1C00"=dword:00000000 "{AEBA21FA-782A-4A90-978D-B72164C80120}"=hex:1a,37,61,59,23,52,35,0c,7a,5f,20,\   17,2f,1e,1a,19,0e,2b,01,73,13,37,13,12,14,1a,15,39 "1A10"=dword:00000003 "{A8A88C49-5EB2-4990-A1A2-0876022C854F}"=hex:1a,37,61,59,23,52,35,0c,7a,5f,20,\   17,2f,1e,1a,19,0e,2b,01,73,13,37,13,12,14,1a,15,39 @="" "DisplayName"="Restricted sites" "PMDisplayName"="Restricted sites [Protected Mode]" "Description"="This zone contains Web sites that could potentially damage your computer or data." "Icon"="inetcpl.cpl#00004481" "LowIcon"="inetcpl.cpl#005426" "CurrentLevel"=dword:00012000 "Flags"=dword:00000003 "1200"=dword:00000003 "2007"=dword:00000003 

Wednesday, 28 July 2010

Make an Acronis ABR 10 Bootable CD with Custom Drivers

 
Make sure you have applied the Universal Restore key and install the UR components before step 2...
Also make sure you use a non-OEM Win-XP CD (NFR or Retail are ok)
Disable all AV and preferably run from a XP machine (Vista\7 seems to permanently lock certain files interfering with build process)
 
--------------------------------------

You can use Acronis Plug-in for WinPE to build BartPE

Introduction

BartPE is software that allows you to boot into Windows-like environment from media. The main advantage is that it uses Windows drivers and has Windows-like graphical user interface.

Acronis Plug-in for WinPE is available in Acronis Backup & Recovery 10 and can be used to build BartPE.

Solution

(!) If you have Acronis Backup & Recovery 10 Build 11345, please see Acronis Backup & Recovery 10 Build 11345: Backup from BartPE Media Fails with "Failed to enumerate temporary file name. Error code: 267." for correct instructions.

  1. Install Acronis WinPE Media Builder (Build 11133 or lower) from the Acronis Backup & Recovery 10 setup file;
  2. Go to the following folder:

    Windows 32 bit: \Program Files\Acronis\BootableComponents\WinPE
    Windows 64 bit: \Program Files (x86)\Acronis\BootableComponents\WinPE

    and run the export_license.bat script. It will check for available licenses and enable the proper components such as Acronis Universal Restore and/or Deduplication in the plug-in. Running the export_license.bat script will also create acronis.inf file so you can use the plug-in with PE Builder;

  3. Download the Bart PE builder;
  4. Copy the contents of \Program Files\Acronis\WinPE\WinPE (check the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Acronis\WinPE\Settings\WinPE for the plug-in location) to the %BartPE folder%\plugins\Acronis;
  5. Insert your Windows distribution CD if you do not have a copy of Windows installation files on the HDD;
  6. Start the Bart PE builder;
  7. Specify the path to the Windows installation files or Windows distribution CD;
  8. Click Plugins and check whether the Acronis plug-in is enabled. Enable if disabled;
  9. Specify the output folder and the full path to the resulting ISO file including the file name or the media to create;
  10. Build the BartPE;
  11. Burn the ISO to CD or DVD (if this has not been done yet) or copy to a flash drive.

Once the machine boots into the Bart PE and you configure the network connection, select Go -> System -> Storage -> Acronis True Image to start.

(!) If the media does not boot, see Acronis Backup & Recovery 10: Acronis Bootable Media Created with WinPE 1.6 or BartPE Fails to Start.

Adding drivers

BartPE supports adding two types of drivers: storage drivers and network drivers. For instructions on how to add drivers please refer to http://www.nu2.nu/pebuilder/help/english/drivers.htm

There is also an option to add storage drivers (for RAID or SCSI devices) during BartPE boot-up. (You need to press F6 and point to the diskette with the drivers). Common storage drivers are available at http://nu2.nu/pebuilder/drivers/.

Monday, 26 July 2010

Windows update troubleshooting

Source URL: http://www.wsus.info/index.php?showtopic=7406

Basically we need to stop the "Automatic Updates" service - then clear out the "c:\windows\softwaredistribution\" folder - then restart PC and try again.

Friday, 11 June 2010

Map Window Shared Drive in Apple OS-X

Source URL:
http://www.technipages.com/how-to-map-network-drive-in-mac-os-x.html

Scroll down to the comments - this is where the real meat is :)


-------

1) Map a drive to the share.
2) Run "Sytem Preferences"
3) Select "Accounts"
4)Select the User you want to change by double clicking
5) Click on "Login Items"
6) Drag your share over to the Login Items pane. That will add it.
7) Close "System Preferences".

http://www.mac-forums.com/forums/switcher-hangout/42164-automatically-mount-samba-share.html

-------

Double click on your network drive in finder.
Click on your computer name (don't see your computer name?
Finder->Preferences -> under "General" check "Network Shares")
Drag the network drive to the bottom of the list on the sidebar under
the devices category.

That will allow you to save files to your network DRIVE from within
applications.

Alternately, if you want to access a specific FOLDER on your network
drive, then drag that folder in the same window to the places category
on the sidebar, and it will then show up on save/open application windows.

Friday, 21 May 2010

Perflib Errors

If you see a whole stack - every 5 minutes - of Perflib errors (ID:
1023) in the Application Event Log.
This is basically telling you that the Performance Counters for some
services have been corrupted.

The solution may be to re-install the applications (or replace the
related DLL) or to remove the Performance Counters for those services
entirely:

http://support.microsoft.com/kb/247226

here is another couple of references:

http://ferventcoder.com/archive/2008/08/10/possible-performance-counter-corruption-or-performance-counters-are-just-disabled.aspx

http://blogs.microsoft.nl/blogs/tonykrijnen/archive/2007/01/26/9958.aspx

Wednesday, 19 May 2010

Disable SBS 2003 EULA Monitoring

Original link: http://forums.speedguide.net/showthread.php?t=173731
Pafts original post drew me to this thread after a google search.
----------------

I also didn't want to have to bother with this crap that my legitimate
copy of Windows SBS couldn't run unless it was a DC. As it happens, we
already had a second licence of SBS and simple wanted to re-use a
currently un-used licence of SBS to implement a webserver, but without
all the bloat that the SBS install affords.

The first thing I did was to install the server normally, the first
chance you get to cancel the install of SBS bloat is when Windows starts
for the first time after install, I seized my opportunity.

What I didn't see however was the quite frankly ridiculous scenario
whereby Microsoft had decided to force restart the server every hour and
NET SEND spam the network "this server doesn't comply with licensing
requirements" across the entire network. Microsoft can stick that.

Anyway, like I said it was Pafts post that brought me here to the forum,
and I've found a slightly more elegant solution to this problem rather
than just aggressively killing the process until Windows gives up trying
to start it again, and I'd like to share it in the hope that Google will
re-index and pick it up for others to use. You may have noticed this
service cannot be disabled via the MMC snap-in.

My search term on google was: how to stop the SBCore service

Anyway, down to business…
- Tools you'll need – Process Explorer from www.sysInternals.com
<http://www.sysInternals.com>

As you probably know, you have a service called SBCore or "SBS Core
Services", which executes the following process:
C:\WINDOWS\system32\sbscrexe.exe

If you kill it, it just restarts – and if you try and stop it you are
told Access Denied.

If you fire up Process Explorer, you can select the process and Suspend
it, now we can start to disable the thing.

Run RegEdit32.exe and expand the nodes until you reach the following
hive / key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SBCore

Right click this, hit permissions and give the "Administrators" group on
the local machine full access ( don't forget to replace permissions on
child nodes ). F5 in regedit and you'll see all of the values and data
under this key.

Select the "Start" DWORD and change it from 2 to 4 – this basically sets
the service to the "Disabled" state as far as the MMC services snap-in
(and windows for that matter) is concerned.

Next, adjust the permissions on the file
C:\WINDOWS\system32\sbscrexe.exe so that EVERYONE account is denied any
sort of access to this file.

Then go back to process explorer, and kill the sbscrexe.exe process, if
it doesn't restart – congratulations!

Load up the services MMC snap-in and you should find that "SBS Core
Services" is stopped and marked as Disabled.

Regards,

Tuesday, 13 April 2010

SMB error: Not Enough Server Storage Is Available to Process This Command

This appears to happen after installing the newer Acronis Home products.
 
Set the IRPStackSize parameter to the max value of 50 (32H)
 
Restart PCs - should be working.

Thursday, 4 February 2010

CA-Cert SSL Certificate Renewal Process - IIS7

When you logon to CACert to renew the server certificate - it will renew the certificate and will expire in 6 months time. If you try to renew the existing certificate with this one on IIS7 it fails with the following error:
 
CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x08009310b (ASN: 267)
 
You can then use the IIS7 wizard to generate a renewal CSR to submit to the CA. However CACert does not support this type of CSR.
 
Your only option is to first generate a new CSR for the existing domain from IIS7 then submit it to CACert. This will return a valid certificate that can be imported into IIS using the Complete CSR wizard. You will will now have two seemingly identical certificates. The old one can be removed - you will have to update the bindings for the affected websites to use the new certificate. You will also have two identical certificates in CACert - the older one can be revoked.

Wednesday, 20 January 2010

Permissions required to edit Office documents

The problem lies with the way Office handles ediiting. When a document is opened in editing mode - it creates a temporary file - when you save your changes it overwrites the existing file with the temp file - then when you exit Office it removes the temp file. Office is designed like this for fault tolerance as the temp edit file is updated every minute or so that way you can recover your work after a system crash. This is why the user needs Modify permissions on the Folder the files reside in when edits are made. Otherwise you will get "Access Denied: errors.

Friday, 8 January 2010

Exchange 2007 services not starting

If you find that after restarting a server running Exchange 2007 - some critical services are not starting automatically and you have to manually start the Information Store and others - it could be a service startup dependency issue.
 
This is the dependency list for Exchange 2007 that starts up without any problem:
 
AD Topology
Depends on:
    NTDS (AD Domain Services)
 
The following need to start after AD Topology:
Anti-Spam
Edge Sync
File Distribution
IMAP 4
Mail Submission
Mailbox Assistants
POP3
Replication Service
Search Indexer
Service Host
System Attendant
Transport
Transport Log Service
 
Information Store
Depends on:
    System Attendant
    RPC
    Server
    Workstation
    Windows Event Log
 
System Attendant
Depends on:
    RPC
    Server
    Workstation
    Windows Event Log
 
Monitoring
Does not depend on anything
 
If this is setup as above the Exchange should startup normally. If problems still persist you could have a GPO that calls a script that starts the troublesome services manually.

Change Service Dependencies - Windows

Use the Services MSC to view dependencies. If any need changing - fire up regedit
 
Go to : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<Service name>
 
To create a new dependency, select the subkey representing the service you want to delay, click Edit, and then click Add Value. Create a new value name "DependOnService" (without the quotation marks) with a data type of REG_MULTI_SZ, and then click OK. When the Data dialog box appears, type the name or names of the services that you prefer to start before this service with one entry for each line, and then click OK.
 

Wednesday, 6 January 2010

Linux Adventures

I needed to reload my laptop as the Vista installation was becoming a
little heavy handed - and it was using up all but 1.5GB of the partition
it was installed on. The Windows partition was, in my opinion, big
enough to use as a system partition - between system restore (easily
fixed) and WinSxS - which irreversibly enlarged the Windows directory to
over 35GB!
I then decided I would give Linux a go... Excitingly there are like
20-30 linux distributions to choose from. To simplify things there are a
few main (parent) distributions that most of the others are based on -
Redhat, Debian, Gentoo, Suse, etc.
I have tried the Redhat based Fedora Core and the Debian based Ubuntu
before, without much joy. I thought I'd give the new FC 12 a go (maybe
things have changed since FC 8), but nothing seemed to work - WIFI,
Audio, etc. Everything seemed to be an uphill battle so I just gave up.
Next I purchased a Linux enthusiast magazine that had a DVD that
contained a few lightweight "Live CD" distributions. One of these was
Antix, based on Mepis, which is based on Debian. I was pretty skeptical
about it initially, but thought I'd give it a go anyway. Amazingly
EVERYTHING seemed to work out of the box - unlike FC :-)
This is more like it.

I had a couple of objectives in mind:

1. Simple Wireless networking. Works out the box!
2. A usable GUI - the default is a lightweight window manager called
IceWM. Pretty basic, but functional. I opted to upgrade this to KDE 4.
3. Need to access SMB shares on the NAS. A bit of prodding and A for Away.
4. Need to print to the Brother printer attached to my main Windows 7
desktop.
5. Not completely comfortable with being totally without Windows - I
wanted a way to run Windows on the laptop if I needed to. Dual booting
is a pain - so decided to install VirtualBox, then installed XP into the
VM. Very Good.
6. I already use Thunderbird with Lightning backed onto my Gmail account
for Email & Calender and RSS functions. IceDove a re-branded Thunderbird
works a treat - Lightning and Google Calendar extensions work fine.
7. Firefox is the browser of choice as I'm not a fan of the Konqueror
browser. IceWeasel is the re-branded version. I also like the Chrome
browser - there is a Linux beta available. I'll give that a go.
8. For an Office package - I've opted to give the OpenOffice Suite a go
- seems to be mature, stable and compatible. I could install MS Office
onto the XP VM if I really need it.

All in all I'm the happiest that ever I've been with Linux on the desktop.

Honestly it did take a few days of fiddling around and head banging to
get everything up and running, but all came good in the end.