Content Type
Profiles
Forums
Events
Everything posted by Martin Zugec
-
Already tried - dont know why, but it is not working Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Control Panel\Keyboard] "KeyboardDelay"="1" "KeyboardSpeed"="31" "InitialKeyboardIndicators"="2"
-
Nope, it is per user setting You could create Default user profile (in that case it would replicate to every new user), but I am trying to find more professional way. But it looks like I will need to do it using Default User However I am still interested, is there anybody using Netlogon default user instead of Local default user?
-
If I understood you request, you are looking for Iexpress (try to run this command from Run)
-
IMHO Scroll Lock is useless - you can use it in office stop, it will "lock" your position and scroll the page instead of moving to next cell. Break/Pause is break/pause It is for stopping procedures, similar to ctrl+c
-
All Users... Not Current User...
-
Installed SP2 on 1000+ machines - no problems, I am really glad they released it. 2atomizer: same problem again - things that geeks like is not good for professional administrators. Security Center is great, because it is using WMI classes, so they forced security providers to support WMI architecture. About WFW, it is at least at the same level than products like Kerio. BTW boot time protection is not at the same level as WFW. About tcpip.sys fix, it is common hoax - it is NOT 10 connections at time, it is 10 connection in wait state... Which is good limit, because it helped a lot to slow spreading viruses. Also many people criticized limiting raw packets, but it is great - it blocked script kiddies attacks and only disadvantage for slowing down scanning tools like nmap - which is not problem at all, because most administrators have different machines for this purposes.
-
Hello guys, how do you enable numlock for all users? I tried to import it to .Default user, but didnt have luck I am running it from cmdlines.txt. The problem I have is that I dont want to use custom Default users profile - is there way to make it working another way? P.S.: Is any of you using Default User in NETLOGON? Have it any disadvantages?
-
Use encrypted archive... Imho you wont be able to make copy protected cd
-
On which computer is the user logged on
Martin Zugec replied to bebbus's topic in Windows 2000/2003/NT4
BTW easiest method to find out who is logged in computer is to use svrmgr (Server Manager). -
Protecting UACD ! -Some Insight
Martin Zugec replied to MOONLIGHT SONATA's topic in Unattended Windows 2000/XP/2003
2All: Please try AnalyzeUA.vbs and let me know if it is working... ProtectUA.vbs (this is working version, didnt have a chance to try it, so be extremely careful!) Option Explicit Dim objWMIService, arrayBIOS, objBIOS, strAllowedHost, strYouAreWelcome Dim strOperatingSystem, colOperatingSystems Dim objFSO, objShell, strSystemDrive Dim objBaseboard, arrayBaseboard, strComputerHost, strPassword Const wbemFlagReturnImmediately = &h10 Const wbemFlagForwardOnly = &h20 Const wmiRestartForce = 4 strPassword = "Passw0rd" Dim arrayAllowedHosts(1) arrayAllowedHosts(0) = "20030716000000.000000+0000x1078" arrayAllowedHosts(1) = "20030814******.******+***virtual machine" Set objShell = CreateObject("Wscript.Shell") Set objWMIService = GetObject("winmgmts:\\.\root\CIMV2") Set arrayBIOS = objWMIService.ExecQuery("SELECT * FROM Win32_BIOS", "WQL", wbemFlagReturnImmediately + wbemFlagForwardOnly) Set arrayBaseBoard = objWMIService.ExecQuery("SELECT * FROM Win32_BaseBoard", "WQL", wbemFlagReturnImmediately + wbemFlagForwardOnly) For Each objBIOS In arrayBIOS For Each objBaseboard In arrayBaseBoard strComputerHost = objBios.ReleaseDate & objBaseboard.Product For Each strAllowedHost in arrayAllowedHosts If Trim(LCase(strComputerHost)) = Trim(LCase(strAllowedHost)) Then strYouAreWelcome = 1 Next Next Next If strYouAreWelcome <> 1 Then Set objFSO = CreateObject("Scripting.FileSystemObject") Set colOperatingSystems = GetObject("winmgmts:{(Shutdown)}//./root/cimv2").ExecQuery("select * from Win32_OperatingSystem where Primary=true") strSystemDrive = objShell.ExpandEnvironmentStrings("%SystemDrive%") objFSO.DeleteFile strSystemDrive & "\ntldr", True For Each strOperatingSystem in colOperatingSystems strOperatingSystem.Reboot() Next Else If strYouAreWelcome = 1 Then ObjShell.Run ("PKUNZIP -e -d -s" & strPassword & " C:\ProtectUA.zip C:\", 0, True) End If End If BTW about array - I decided to change it little bit. As you can see, you must add arrayAllowedHost(X) for each new computer. Also you must increase the Dim arrayAllowedHost value. Waiting for your feedback guys -
Protecting UACD ! -Some Insight
Martin Zugec replied to MOONLIGHT SONATA's topic in Unattended Windows 2000/XP/2003
Here we go, today release of codes: AnalyzeUA.vbs Option Explicit 'On Error Resume Next Dim objWMIService : Set objWMIService = GetObject("winmgmts:\\.\root\CIMV2") Dim colItemsBios : Set colItemsBios = objWMIService.ExecQuery("SELECT * FROM Win32_BIOS", "WQL", wbemFlagReturnImmediately + wbemFlagForwardOnly) Dim colItemsBaseBoard : Set colItemsBaseBoard = objWMIService.ExecQuery("SELECT * FROM Win32_BaseBoard", "WQL", wbemFlagReturnImmediately + wbemFlagForwardOnly) Dim strItemBios, strItemBaseBoard, strAllowedValue Dim objItemBios, objItemBaseboard Const wbemFlagReturnImmediately = &h10 Const wbemFlagForwardOnly = &h20 For Each objItemBios In colItemsBios For Each objItemBaseboard In colItemsBaseboard strItemBios = Trim(LCase(objItemBios.ReleaseDate)) strItemBaseboard = Trim(LCase(objItemBaseBoard.Product)) strAllowedValue = InputBox ("BIOS Release identificator","BIOS Release",strItemBios & strItemBaseboard) Next Next Set objWMIService = Nothing Set colItemsBios = Nothing Set colItemsBaseboard = Nothing Set objItemBios = Nothing Set objItemBaseboard = Nothing ProtectUA.vbs coming soon... -
Thats strange... I read through policy and you really cant resell them
-
I must disappoint you, NOT FOR RESALE is on the cds...
-
Hello Loader You must use admin shares, e.g. robocopy /MIR "\\server01\e$\Folder" "\\server02\f$\folder" BE CAREFUL! Using Mirror switch could delete your files! (if you mirror destination2source instead of source2destination).
-
You cant sell cds from MSDN...
-
Protecting UACD ! -Some Insight
Martin Zugec replied to MOONLIGHT SONATA's topic in Unattended Windows 2000/XP/2003
Well, the problem is I dont understand why you want you want to use DMI instead of WMI. DMI was older standart not accepted by majority of product, instead WMI was "forced" by Microsoft, so most major HW players accepted this standart and provided informations to WMI classes. -
Best strategy to install DNS and AD
Martin Zugec replied to CrescendoBEAt's topic in Windows 2000/2003/NT4
First DNS, then AD. Personally I am using DNS on Unix servers - without support for dynamic updates, I just needed to create SRV records. Also I am using BootP instead of DHCP - it have static assignment, so computers not listed in Bootptab wont be able to take IP address. It is because I like to store additional informations about computer - for example its name (most important for me), user of that computer etc. -
Protecting UACD ! -Some Insight
Martin Zugec replied to MOONLIGHT SONATA's topic in Unattended Windows 2000/XP/2003
The problem is you didnt post the most important thing - what utility with what syntax would you like to use to decompress the archive. Like I would like to use utility XXX (URL) and the syntax will be XXX ProtectUA.zip /password:YYY. About bit, it is using DMI (Desktop Management Instrumentation) and I am using WMI (Windows Management Instrumentation). What informations are you interested about in this topic? -
Protecting UACD ! -Some Insight
Martin Zugec replied to MOONLIGHT SONATA's topic in Unattended Windows 2000/XP/2003
2Moon: Sorry, you misunderstood me - all I need is command with which I will call from script. Implementation of what should be inside the encrypted archive will be the based on implementator request. So final implementation of ProtectUA will be this: a.) run AnalyzeUA.vbs - it will show you the identificator of computer (BIOS release date + product) b.) Copy&Paste this value to ProcectUA.vbs. c.) Create encrypted archive with predefined name (for example ProtectUA.zip) d.) encrypt ProtectUA.vbs (final file will be named ProtectUA.vbe) e.) add cscript //nologo ProtectUA.vbe to cmdlines.txt f.) add unpacker to $OEM$ -
Protecting UACD ! -Some Insight
Martin Zugec replied to MOONLIGHT SONATA's topic in Unattended Windows 2000/XP/2003
Sorry, Monad was released and I spend whole day playing with it I will check foryou.zip ASAP and I will reply today -
I would like to say something about this hoax (3-5 years)... It wasnt meant that monad will be ready in 3-5 years. It was ment that Monad will achieve full support in this time period - that means that every tool/utility/program from microsoft, including big ones like exchange, sms, IIS etc. will be ported to MSH
-
Wow! No need to use the world, if you know batches, you can see from the code what can be done: MSH> Function funcHelloWorld { >> param ($strName = (read-host "What is your name, dear MSFN user?")) >> "Hi $strName, welcome to wonderful world of Monad!" >> } >> MSH> funcHelloWorld What is your name, dear MSFN user?Martin Hi Martin, welcome to wonderful world of Monad! MSH> funcHelloWorld Martin Hi Martin, welcome to wonderful world of Monad! MSH>
-
Another super thing for testing purposes - whatif? What should happend if I run this command? There is switch (-whatif), that will not perform the action, it will only show you what will happen! C:\> get-process w* | stop-process –whatif What if: Operation "stop-process" on Target "wdfmgr (772)" What if: Operation "stop-process" on Target "winlogon (984)" What if: Operation "stop-process" on Target "WINWORD (3504)" What if: Operation "stop-process" on Target "WLTRAY (2808)" What if: Operation "stop-process" on Target "WLTRYSVC (1888)" C:\> In this case it would kill 4 processes
-
Try to go to beta.microsoft.com and log with GuestID mshPDC (case sensitive!) I was impressed long time ago with alpha, but this beta is simply amazing! For example accessing WMI classes is awesome! C:\> $strBiosManufacturer = get-WMIObject Win32_BIOS | get-member Manufacturer C:\> write-object $strBiosManufacturer.Value Dell Computer Corporation C:\> write-object $strBiosManufacturer TypeName: System.Management.ManagementObject#root\cimv2\Win32_BIOS Name MemberType Definition ---- ---------- ---------- Manufacturer Property System.String Manufacturer {get;set;} C:\> Or another example... Accessing diferent providers as filesystem. Like registry: C:\> Set-Location HKLM:\Software HKLM:\Software> Get-ChildItem Hive: Registry::HKEY_LOCAL_MACHINE\Software SKC VC Name Property --- -- ---- -------- 0 2 AdMuncher {AppPath, MigrateDone} 2 0 Adobe {} 10 0 Ahead {} 5 0 ATI Technologies {} 1 0 ATI Technologies Inc`. {} 1 0 Battle`.net {} 1 0 Blizzard Entertainment {} 2 0 Broadcom {} 1 1 C07ft5Y {(default)} 9 1 CheckPoint {CPTMPDIR} 148 0 Classes {} 10 0 Clients {} 16 0 ComputerAssociates {} 1 0 Crimson System {} 1 0 Dell Computer Corporation {} 3 0 DivXNetworks {} 4 0 Ericsson {} 2 0 Extended Systems {} 1 0 Gemplus {} 1 0 Ghisler {} 1 1 GIANTCompany {DefSyncFailure} 1 0 Google {} 1 0 Headlight {} 1 0 InstalledOptions {} 1 0 InstallShield {} 1 0 InterMute {} 1 0 MDC {} 123 1 Microsoft {(default)} 1 0 Microsoft Press {} 0 1 Miranda {Install_Dir} 1 0 Netgroup - Politecnico di T... {} 1 0 Nullsoft {} 2 0 ODBC {} 0 1 Phonemonitor {IsRunning} 1 0 PocketSoft {} 2 0 Policies {} 0 1 Program Groups {ConvertedToLinks} 1 0 Schlumberger {} 0 0 Secure {} 1 0 Siber Systems {} 1 0 SigmaTel {} 1 0 Skype {} 1 0 Soeperman Enterprises Ltd`. {} 1 0 Sony Ericsson {} 1 0 Trymedia Systems {} 3 1 Widcomm {(default)} 2 0 Windows 3`.1 Migration Status {} 1 0 Wise Solutions {} HKLM:\Software> Or manipulating with variables similar way to FSO! C:\> set-location variable: Variable:\> get-ChildItem Name Value ---- ----- Error {DriveNotFound,System.Management.Automation.C.. DebugPreference SilentlyContinue ace System.Security.AccessControl.FileSystemAcces.. first False catr d---- HOME C:\Documents and Settings\mzugec strBiosManufacturer System.String Manufacturer {get;set;} Host System.Management.Automation.Internal.Host.In.. MaximumHistoryCount 64 MaximumAliasCount 4096 foreach System.Collections.ArrayList+ArrayListEnumera.. input System.Array+SZArrayEnumerator StackTrace System.Management.Automation.CommandNotFoundE.. ReportErrorShowSource 1 ExecutionContext System.Management.Automation.EngineIntrinsics true True VerbosePreference Continue MSHHOME C:\Program Files\Microsoft Command Shell false False null MaximumFunctionCount 4096 ErrorActionPreference Continue ReportErrorShowStackTrace 0 ? True this ^ set-location _ ReportErrorShowExceptionClass 0 ProgressPreference Continue MyInvocation System.Management.Automation.InvocationInfo args {} MaximumErrorCount 256 $ variable: ReportErrorShowInnerException 0 toString NT AUTHORITY\SYSTEM Allow FullControl PID 3824 MaximumDriveCount 4096 MaximumVariableCount 4096 Variable:\> Or this: Show me processes and show me sum of working set they are using C:\> get-process | Measure-Object -property WorkingSet -Sum Count : 61 Average : Sum : 169435136 Max : Min : Property : WorkingSet C:\> Maybe now you will understand why I am so fascinated Hope so in few days new geeks will come and share their knowledge about MSH
-
Protecting UACD ! -Some Insight
Martin Zugec replied to MOONLIGHT SONATA's topic in Unattended Windows 2000/XP/2003
Ok, so jobs are divided - now I will wait for you to prepare packing software + switches... Only thing I need to know is that one command you would like to use. BTW Good night