|
|
Vista security feature makes dual booting difficult.
Security features introduced in Windows Vista will make setting up PCs to boot in either Linux or Windows far more difficult, according to security guru Bruce Schneier.
Not only that, it seems that it would make it far more difficult to recover data from a corrupted install of windows - or better yet...recover from a lost password!
Hopefully side by side installs of Vista will still be a method for recovering data.
Posted By: Steve Wiseman on Friday, April 28, 2006
Check out our utilities for windows
Disable USB Drives
Update 1/18/2007 09:23 PM EST - Some changes in windows have made this article out of date. Check out our new article on the subject to learn how to disable USB flash drives
Once in a while I have a friend, or customer that needs to keep people from using the USB ports to copy data off of a system.
It is easy to lock a machine down, disable the floppy, and cdrom in the bios. Many times when you try to disable USB - it disables it entirely.
This can be a real pain on newer laptops or systems that don't even have a PS2 interface for the mouse or keyboard.
There is a simple registry change that will keep the USB storage drivers from starting when the system boots. Keeps people from walking up to a PC and copying data off with a USB key, but allows you to keep your scanner, keyboard, and mouse working.
As always - back your system up before messing around in the registry.
Just open regedit and browse to this key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
Notice the value 'Start'
Switch this value to 4, and USB storage devices are disabled.
Switch this value to 3, and USB storage devices are enabled.
For those of you that don't feel like messing around in the registry -
We wrote a program to do it for you
Find it in our Downloads Page
Posted By: Steve Wiseman on Thursday, April 27, 2006
Check out our utilities for windows
1978 Picture of Bill Gates & Company
A friend of mine sent me this very cool picture of Microsoft from around 1978:
If you can guess which one is Bill, you get a prize - just kidding ;)
Posted By: Steve Wiseman on Wednesday, April 26, 2006
Check out our utilities for windows
Hide shared folders - based on users access level
There is something that has always annoyed me about the way windows shares are displayed to a user - they get to see all of them!
Yes I know about putting a $ after the share, such as c$, or admin$, but what about those shares that the president of the company wants to have - and doesn't want his employees to even know that they exist?
Finally Microsoft has put out a utility to fix this. It is called "Access-based Enumeration". It is only available for Windows 2003 SP1
The offical download page is located here:
Microsoft Access-Based Enumeration
Once you start the install, you get asked a simple question:
If you select all, then access based enumeration will be enabled for all current shares on the system - otherwise you will need to set them each individually.
Once the install is finished, a new tab appears when looking at the properties of a share:
Thats all there is! You can either turn it on or off.
Too bad they don't have this type of functionality for 2000, or 2003 without SP!
Posted By: Steve Wiseman on Monday, April 24, 2006
Check out our utilities for windows
Run Internet Explorer in a secure sandbox
It seems that there is a new vulnerability found in Internet Explorer every day.
This stems from the fact that it was designed to allow ActiveX controls to install just about anything on your PC.
Even with the most robust antivirus programs installed on your computer, you are still at risk of getting bad software installed on your system.
There are a few remedies:
1. Get off the Internet totally and go outside and ride your bike
2. Dump Internet Explorer, and start using FireFox all the time
3. Only login as a user that does not have administrative, or Power User rights.
These alternatives can be really painful. Especially if you have users that need administrative rights for many of the applications they use. In the same vein, FireFox is not always the solution either - there are still too many sites that do not support it (Bastards).
I have come up with a compromise. It provides you the protection of a limited user account, but the ability to only run Internet Explorer in this sandbox. That way other applications that you know and trust suffer no ill consequences.
Let me start out by saying this will not keep all of the baddies out there from getting on your pc. When your hands are tied and you need administrative access, and must run IE - this is a decent compromise.
Here is how it works: It creates a shortcut to our reduced permissions application. This app in turn launches IE with the Power User, and Administrators groups removed from the process. Actually, the program that will execute anything with reduced permissions, but it is streamlined for IE.
First, download it from our downloads section
(No spyware, or other crap included - complete freeware goodness)
If you execute it without any command line options you will get an automatic installer. It will create a 'secure' shortcut to Internet Explorer on your desktop:
If you want to run other programs this way, just create a shortcut to the ReducedPermissions.exe with the first argument the full path of the exe.
Lets take it for a test drive. Logged in as administrator, I surf to the Windows Update website:
It works the way it should - it lets me start running windows updates.
Now I do the same after launching IE with my 'Secure' icon
It's hard to read, but you can tell from the big red X that Internet explorer cannot run windows updates because it is lacking the sufficient privileges.
This is just one more step you can take to protect yourself while using IE.
Oh yea...and BTW - IE 7 has this type of functionality built in.
Let me know how it works for you.
Update:
It seems after some unspecified Microsoft update - IE refuses to run with reduced permissions! Currently it only seems to affect Windows 2003 - I Will post an update here if we find a way around it
Posted By: Steve Wiseman on Monday, April 24, 2006
Check out our utilities for windows
Microsoft to re-release problematic patch
The patch MS06-015 which validates shell extensions has caused quite a number of problems with HP, and NVidia software. A number of my friends that do IT support have told me about the large number of computers they have seen affected by this problem.
Microsoft has indicates that they will be releasing an update to this patch soon. But if you have had problems right clicking on the desktop (Windows freezes up). You may want to consider using this temp fix from MS:
(Please backup your registry and system before making any registry changes!! - Make a mistake and your machine wont boot again)
1. Log on to the computer by using an account that has administrative credentials.
2. Click Start, click Run, type regedit, and then click OK.
3. Locate and then right-click the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
4. Point to New, and then click DWORD Value.
5. For Microsoft Windows 2000-based computers, type the following:
{A4DF5659-0801-4A60-9607-1C48695EFDA9} {000214E6-0000-0000-C000-000000000046}
For Microsoft Windows XP-based or Microsoft Windows Server 2003-based computers, type the following:
{A4DF5659-0801-4A60-9607-1C48695EFDA9} {000214E6-0000-0000-C000-000000000046} 0x401
6. Right-click the value that you just created, and then set the Value data to 1
7. Exit Registry Editor.
8. Use Task Manager to close the Verclsid.exe program or to restart the computer.
Posted By: Steve Wiseman on Friday, April 21, 2006
Check out our utilities for windows
Top 5 Free Anti-Virus products
It has been years since I have had a virus on my machine. I usually browse as a non-administrator and I am very careful about what websites I visit. My friends are not so lucky. I had to clean off some nasty viruii last week for a friend of mine. I decided to do my homework and find free anti-virus products.
Here are the top 5 that I found:
1. AVG 7.1 - My personal favorite. Finds viruses that big boys sometimes miss
2. AntiVir - Little known anti-virus product that includes anti-spyware
3. Avast! - Free antivirus - no frills
4. F-Prot - Nice free version for Linux users
5. BitDefender - Free antivirus for Windows and Linux.
Another program I like is the McAfee Stinger tool - It looks for list of the most common viruses on a system, and runs even on the most comprimised computers. In a future article I will release a freeware application I have developed that will let you run it remotely on your LAN - still needs to be cleaned up so it will remain private for now.
Posted By: Steve Wiseman on Tuesday, April 18, 2006
Check out our utilities for windows
Windows keyboard shortcuts you never knew existed!
When you get to hang out with other experienced computer professionals you start to realize how many things you do not know. I have been working with Windows since 3.0 came out, and I still find something new all of the time. For example, I was sitting behind one of my tech friends and he was using alt-esc to tab through windows in the order they were opened - I never even knew this existed. I set out to get a comprehensive list of all the shortcuts. Here is what I have found so far:
Update (5/02/06): A few more I missed:
Correction from Tyler: Windows Button + Pause, not Windows Button + Break brings up the system properties.
From Edward @ Intel - Shift+F10 brings up the context menu
From Aaron @ TNT Software - While in a display pane (such as when viewing an Event Log, or any MMC snap-in), Ctrl+ autosizes each column to the maximum width of data in each column.
From David Jameson: Ctrl + Shift + Esc - Brings up the task manager
Email me if I have missed any others!
CTRL and A Selects all the items in the active window.
CTRL and C Copies the item or items to the Clipboard and can be pasted using CTRL and V.
CTRL and F Displays the Find all files dialog box.
CTRL and G Displays the Go to folder dialog box.
CTRL and N Displays the New dialog box.
CTRL and O Displays the Open dialog box.
CTRL and P Displays the Print dialog box.
CTRL and S Displays the Save dialog box.
CTRL and V Pastes the copied item or items from the Clipboard.
CTRL and X Cuts the item or items selected to the Clipboard.
CTRL and Z Undoes the last action.
CTRL and F4 Closes the active document window.
CTRL while dragging an item Copy the selected item
CTRL+SHIFT with arrow keys Highlight a block of text
CTRL+F4 Close the active document
CTRL+ESC Display the Start menu
CTRL and F6 Opens the next document window in the active application.
ALT+ENTER View the properties for the selected item
ALT+F4 Close the active item, or quit the active program
ALT+SPACEBAR Open the shortcut menu for the active window
ALT+TAB Switch between the open items
ALT+ESC Cycle through items in the order that they had been opened
F1 key Gives help on the active window or selected item.
F2 key Rename the selected item
F3 key Search for a file or a folder
F4 key Display the Address bar list in My Computer or Windows Explorer
F5 key Update the active window
F6 key Cycle through the screen elements in a window or on the desktop
F10 key Activate the menu bar in the active program
Windows Logo Display or hide the Start menu
Windows Logo+PAUSE Display the System Properties dialog box
Windows Logo+D Display the desktop
Windows Logo+M Minimize all of the windows
Windows Logo+SHIFT+M Restore the minimized windows
Windows Logo+E Open My Computer
Windows Logo+F Search for a file or a folder
CTRL+Windows Logo+F Search for computers
Windows Logo+F1 Display Windows Help
Windows Logo+ L Lock the keyboard
Windows Logo+R Open the Run dialog box
Windows Logo+U Open Utility Manager
TAB Move forward through the options
SHIFT+TAB Move backward through the options
CTRL+TAB Move forward through the tabs
CTRL+SHIFT+TAB Move backward through the tabs
ALT+Underlined letter Perform the corresponding command or select the corresponding option
ENTER Perform the command for the active option or button
SPACEBAR Select or clear the check box if the active option is a check box
F1 key Display Help
F4 key Display the items in the active list
Arrow keys Select a button if the active option is a group of option buttons
BACKSPACE Open a folder one level up if a folder is selected in the Save As or Open dialog box
END Display the bottom of the active window
HOME Display the top of the active window
NUM LOCK+Asterisk sign (*) Display all of the subfolders that are under the selected folder
NUM LOCK+Plus sign (+) Display the contents of the selected folder
NUM LOCK+Minus sign (-) Collapse the selected folder
LEFT ARROW Collapse the current selection if it is expanded, or select the parent folder
RIGHT ARROW Display the current selection if it is collapsed, or select the first subfolder
Posted By: Steve Wiseman on Monday, April 17, 2006
Check out our utilities for windows
Remove those stinkin "help balloons"
I don't know about you, but those little bubbles that Microsoft displays to inform you about 'important' things are starting to drive me crazy.
'You have unused icons on your desktop'
'You have updates waiting to be loaded'
'What the hell you looking down here for?'
etc etc
I am just tired of it, and I know a quick way to fix it. There is a Microsoft KB article dedicated to this subject:
http://support.microsoft.com/default.aspx?scid=kb;en-us;307729
The short of it is - you can disable these balloons by changing this registry key:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
To 0
(You might need to create this DWORD value if it does not already exist)
If you don't feel like playing around in the registry, we have written a little
program that will do it for you:
http://www.intelliadmin.com/blog/BalloonRemover.exe (Spyware and adware free)
Posted By: Steve Wiseman on Friday, April 14, 2006
Check out our utilities for windows
Script XP System restore points
The system restore tool that is bundled within Windows XP is priceless. Numerous times I have helped myself or others get their system back to a working state by restoring to a previous image. To restore to a previous state just click on Start -> All Programs -> Accessories -> System Tools -> System Restore
Clicking on next you will see a calendar. The days that are available will be in bold:
This is the problem. Many times the day you really need is never there.
We have a short and sweet script that you can put into the system scheduler, or in the users login script that will force the creation of a system restore point without anything displayed to the user:
CreateRestorePoint.vbs
Posted By: Steve Wiseman on Thursday, April 13, 2006
Check out our utilities for windows
Microsoft to require all 64 bit drivers to be signed
Microsoft, in its attempt to battle the rootkit problem in the 64 bit version of windows, is requiring all drivers to be digitally signed.
This single move will destroy the availability of any free device drivers. Individual developers are unlikely to obtain the $500 certificate needed to sign a driver.
It does make things more difficult for root-kit developers, but at the same time it opens the door to Linux and Apple. This will force developers learning their trade to pick either Apple, or Linux for initial driver development. Over time this could give them a significant advantage - especially Apple
Posted By: Steve Wiseman on Thursday, April 13, 2006
Check out our utilities for windows
Display serial number of your Windows XP, or 2003 install
Sometimes Windows gets so cloged up you just have to call it quits and reformat the entire hard drive. Starting from scratch is nice since you know all of the baddy spyware, trojans, and rootkits are not going to lurk in the background and come back to haunt you a few days later.
The biggest problem I have when I do this is I can never find the OEM sticker on the machine. If you have never seen one, these OEM stickers are required by Microsoft to be put on a machine when windows is installed at the factory - that way you will always have a serial number when you reload the machine. More often than not, the user tears it off or it is a white box special.
There is a great utility with a cool name - The Magic Jelly Bean Key Finder
It works on XP, and 2003. It will quickly find and display the current serial number for the system it is run on.
Just launch the application and it will instantly show you your serial number:
Now, my serial is blured out for obvious reasons.
Just another one of those apps to add to your toolbox
Download it from http://www.magicaljellybean.com/
Posted By: Steve Wiseman on Tuesday, April 11, 2006
Check out our utilities for windows
Fix the broken search feature in Windows XP & 2003
Quietly, Microsoft changed the way its search feature within windows works. In windows 95, 98, ME, NT and 2000 you could search for text within any file on the system. Without notice XP, and 2003 now only search 'registered' file types. There are only a handful of these types.
Microsoft does not make it clear they are only searching certain file extensions. It can really throw you off the track when you are looking for a certain string within a file.
For example. If I was looking for the string 'purchase' within all files that matched *.* windows would skip all file extensions that it does not recognize.
A simple registry change can be made to bring XP, and 2003 search back the way it was:
Under HKEY_LOCAL_MACHINE:
SYSTEM\CurrentControlSet\Control\ContentIndex\FilterFilesWithUnknownExtensions
Set the above value to 1
It will treat unknown extensions as text files. After a reboot the change will take effect.
Now when you search for a string within the files that match the wildcard of *.* it will actually search all files it finds - Imagine that!
Posted By: Steve Wiseman on Tuesday, April 11, 2006
Check out our utilities for windows
Updating Windows XP Product Key
Many times when I start working at a new customer I find a few copies of XP that have a pirated serial number, or the same number used over and over.
Right from the start I make sure the customer purchases the proper licensing from Microsoft - It only takes one call from an angry employee to cause the company a world of grief.
In these situations it is nice to change the machine to a valid serial number without having to totally re-install the operating system.
Microsoft has provided two scripts for updating a Windows XP serial number. One for XP with SP1, and one without.
Serial Change script for XP: XPChangeSerial.vbs
Serial Change script for XP w/sp1 or greater: XPChangeSerialSP1.vbs
Simply save the script file to a convient location, and call it from the command line using the new serial number:
XPChangeSerial.vbs xxxxx-xxxxx-xxxxx-xxxxx-xxxxx
You can then check if the serial number has been changed, and is valid by calling this at the command line:
%systemroot%\system32\oobe\msoobe.exe /a
The activation wizard should load and tell you your copy of windows has already been activated.
It pays to have a valid serial number on all of your machines - in more ways than just keeping the BSA happy. It is getting difficult to download anything from Microsoft without a valid serial number.
Posted By: Steve Wiseman on Sunday, April 09, 2006
Check out our utilities for windows
|
 |
