perlabsrat

Using wevtutil al <FileName.evtx> worked for me. One thing I did not understand was the syntax of the [/l:<LocaleString>] I tried using: /l:409 /l:1033 and /l:en-us Since it worked without the need to specify that switch I am ok now but i am courious what the syntax of this switch is supposed to be..

Hello, I have been searching the web and cannot seem to find a good answer on this. I sort of understand the cause but need some help on the solution. I use the following command to export windows system logs. I want/need them to be in evtx format for later use. wevtutil epl system c:\SystemEvents.evtx The goal is to send them to other people which will not be viewing them on the same server. This of course cause the full event text to not be part of the exported log and the user will see something like this: The description for Event ID XXX from source Server Administrator cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: I was reading this page: http://technet.microsoft.com/en-us/library/cc749339%28WS.10%29.aspx and found this snip of info in it: I do not understand what location (or process) this statement is referring to. There is no LocaleMetaData folder anywhere on the server so I am assuming that I need to somehow create and export some additional data along with the evtx file for it to then re-merge back on the viewing system. Am I on the right track here and could someone tell me how to fully export the event log this with will full verbose messages? Thanks.

Yes that is the goal here. There are plenty of macro applications but I am looking for a way to simply replace this key stroke with another app. Thanks.

I have been searching here and on the web for a way to change the default action of pressing WIN+E. most "solutions" refer to using AutoHotkey and a slew of reg hacks that dont seem to work. Without using any 3rd party utilities does anyone know of a way to run say calc.exe when the user presses Win+E under win7 ? Thanks.

Right but even with /f used there are still times where the system will hang at that dialog. There are even times were i disconnect the RDP, then go to the remote system and logon and do a shutdown and with no RDP connection it still tells me that people may be connected. What i am trying to figure out is a way to bypass the check for existing connections. Thanks...

Hi, I use RDP on some XP machines and use shutdown.exe via a batch file on the remote system to either reboot or shutdown the systems. The problem i get some time is the action is halted by a dialog stating "other people are connected to this computer". Is there a reg hack or some other option to bypass if it prompts me? Thanks...

Does the xml need to be injected in the wim images or is this a file that gets dropped somewhere on the server?

None of the installs are unatended, I need the uesrs to go through the manual steps of performing the install for the type of work we are doing. I am just looking for a hack to bypass the need to authenticate on the pxe/wds server before picking what OS to install. Thanks.

I have a server running 2k8 and WDS so we can do PXE installs. I am wondering if there is a way to bypass the need for typing in the server name and a user/pass to logon. We do not need the security in our lab and I would like the server to be open to anyone who hits it. Currently we do the following steps: Step1: User boots server Step2: User hits F12 at 'Press f12 for network service' prompt Step3: User selects X86 or X64 depending on preference Step4: User chooses language, clicks NEXT and is then prompted for domain\user Idealy I would like to not be prompted for the domain\user but even if all they had to do was hit enter at this screen would work. Does anyone know if this is possible? Thanks...

I was wondering if there was a way after the os is installed and without using the gui to "ADD Features" that I could script an install of SNMP. I already have a reg file with the settings but I need to find a way to install the components as well with no user interaction. Does anyone have any idea on how to do this? Thanks.

Like this perhaps? Switch -HP[pwd] - encrypt both file data and headers -------------------------------------------------------------------------------- This switch is similar to -p[p], but switch -p encrypts only file data and leaves other information like file names visible. This switch encrypts all sensitive archive areas including file data, file names, sizes, attributes, comments and other blocks, so it provides a higher security level. Without a password it is impossible to view even the list of files in archive encrypted with -hp. Example add the file report.txt to the encrypted archive secret.rar using the password 'fGzq5yKw' WinRAR a -hpfGzq5yKw secret report.txt

Try Magic File Renamer - http://www.finebytes.com/mfr/ look up the function called "Replace List" then you can put each char in a txt file and have it replace the string(s) when found

Hello, I'm playing with XP Tablet PC and trying to use an sif in the i386 dir of cd1 to do an unattended install. The install works fine, all my settings are applied, however it will not prompt me for cd2 so I end up with a plain XP install with no tablet addons. I worked around this by re-inserting the cd1 and it let me do an upgrade inside windows. Then it did the disk prompt for cd2 but this is lame to have to do the install twice. Any tips on why the 2nd cd was not called for and what could be done?

Its been a while since my last post on this topic. I'm still searching for a firewall that will allow for this level of granularity when auto generating rules. I have looked into all the replies to this thread and each suggested firewall was lacking on one way or another. So if anyone else has any other suggestions i would appreciate the feedback...

I tried Clipboard Magic for a while but it kept crashing so I had to abandon it. Ill look at some of the others posted here and see what works best for me.

I do a lot of windows installs using a floppy and a winnt.sif answer file. In part of my configuration I automate the setup of SNMP like this: [sNMP] Contact_Name= My Name Location = MyComany Service = Physical, Applications, End-to-End, Datalink, Internet Community_Name = Public Traps = 127.0.0.1 Accept_CommunityName = Public:Read_Only, Private:Read_Write Any_Host = yes There are some times that I can not do the deployment via the sif file so I am looking for a way to script the same settings post install. Idealy if there were a tool that could just parse the sif file and apply the setting that would be cool but a simple vbs or some other solution would work just as well. Also this should be a stand alone script with no other file dependencies. Can anyone help to create such a script? Thanks..

My kids are constantly walking away from the computer and leaving it on all day long. This would be a great thing for me. If there is a link to download it from I would like to give it a try. Thanks.

can you post your solution, this is what im looking to do as well.

Could someone post examples of this here?

I know there are many apps out there to let you manually edit things like mtu and other tcp related settings. I was wondering if there are any that can automatically perform tweaks and come up with the best mix by doing its own bench marks of before and after. Can anyone recommend anything like this?

You may also want to look at an app called "Driver Genius Professional Edition 2007" It can make a backup of all the currently installed drivers in a system

Hi, I'm Chris Thornton, the ClipMate guy. Through the magic of the Googleplex, I heard your plea for help, and came to assist. I don't think you'll find anything as full-featured as ClipMate for free. But you may find a TrialPay offer that suits you, and then you can (sort of) get ClipMate for free. For example, if you've always been curious about BlockBuster online, or if you are thinking of switching your car insurance to Geico, or maybe you were going to buy the Josh Grobin CD for your mom. Those companies will buy ClipMate for you, if you complete their TrialPay offer. http://www.thornsoft.com/trialpay.htm It's simple - you buy something that you need anyway, that company buys ClipMate for you. It's kind of like getting a free toaster or umbrella, except the gift is much, much better. Or, just tell your boss that you really, really need ClipMate! The next time you're late on some assignment, tell him it's because you don't have the proper tools. At a staff meeting when he asks how the heck you can all deliver the next project on time, suggest ClipMate for everyone! We have volume discounts, and cheerfully accept purchase orders for $100 or more. unfortunately none of those offers are anything i could use - i know CM is worth it but in this case ill have to keep looking.

I have done a lot of searching on this topic and have not been able to find a working answer to this problem. I work in a lab where we constantly need to do clean installs of windows using only an OS CD and a floppy containing a copy of winnt.sif The problem I am currently trying to solve is that while I do want the drive to be reformatted I need the partition size to be controllable in the answer file and without the user having to supply any values. This needs to be a fire and forget process with no prompting. In the end, the goal is that the drive must contain unallocated free space after the install but no matter what I have tried the setup still tries to partition the drive as one large partition filling the drive. I have been experimenting with the ExtendOEMPartition and [DiskConfig] which I can not tell if DiskConfig is even supported inside a winnnt.sif file like this as I have read conflicting posts on this topic. So without making the floppy bootable and using a tool like diskpart/gdisk can anyone look at my winnt.sif and tell me how to modify it so that I end up with say a 20gb partition after the install and the remainder of the drive is unallocated free space? Thanks. ;SetupMgrTag [Data] ;AutoPartition=1 UnattendedInstall="Yes" MSDosInitiated="0" [Unattended] ; UnattendMode=FullUnattended ;UnattendMode=ProvideDefault; prompt user along the way DriverSigningPolicy=Ignore OemSkipEula=Yes OemPreinstall=No TargetPath=\WINNT2 ; Repartition = "Yes" ;FileSystem=* ;FileSystem=ConvertNTFS ;ExtendOemPartition=1; fill the drive ;ExtendOEMPartition = 10000; make the drive nnn MB in size ExtendOemPartition = 20000; this does not appear to work correctly NoWaitAfterTextMode=1 NoWaitAfterGUIMode=1 WaitForReboot= No UnattendSwitch= Yes [GuiRunOnce] b:\kickoff.cmd a:\kickoff.cmd [LicenseFilePrintData] AutoMode = PerServer AutoUsers = 10 [GuiUnattended] AdminPassword=password OEMSkipRegional=1 TimeZone=20 OemSkipWelcome=1 AutoLogon=Yes AutoLogonCount=99 [UserData] FullName=Myname OrgName=Mycompany ComputerName=* ProductKey= *******key goes here ******** [URL] Home_Page=http://www.google.com Search_Page=http://www.google.com [Display] BitsPerPel=32 Xresolution=1024 YResolution=768 Vrefresh=85 [Identification] JoinWorkgroup=workgroup [Networking] InstallDefaultComponents=No [Components] freecell=off hearts=off minesweeper=off solitaire=off pinball=off spider=off zonegames=off [NetOptionalComponents] ;Beacon = 0 ;DHCPServer = 0 ;DNS = 0 ;IAS = 0 ;ILS = 0 ;LPDSVC = 0 ;MacPrint = 0 ;MacSrv = 0 ;Netcm = 0 NetMonTools = 1 ;SimpTcp = 0 SNMP = 1 WBEMSNMP =1 [TapiLocation] Dialing=Tone AreaCode=512 [Branding] BrandIEUsingUnattended=Yes [Proxy] Proxy_Enable=0 Use_Same_Proxy=0 [NetAdapters] Adapter1=params.Adapter1 [params.Adapter1] INFID=* [NetClients] MS_MSClient=params.MS_MSClient [NetServices] MS_SERVER=params.MS_SERVER [NetProtocols] MS_TCPIP=params.MS_TCPIP [params.MS_TCPIP] DNS=No UseDomainNameDevolution=No EnableLMHosts=Yes AdapterSections=params.MS_TCPIP.Adapter1 [params.MS_TCPIP.Adapter1] SpecificTo=Adapter1 DHCP=Yes ;IPAddress=192.168.1.12 ;SubnetMask=255.255.255.0 ;DefaultGateway=192.168.1.1 ;DNSServerSearchOrder=24.93.35.62,24.93.40.63,24.93.40.62 WINS=No NetBIOSOptions=0 [SNMP] Contact_Name= Username Location = Our_Labs Service = Physical, Applications, End-to-End, Datalink, Internet Community_Name = Public Traps = 127.0.0.1 ;Send_Authentication = Yes Accept_CommunityName = Public:Read_Only, Private:Read_Write Any_Host = yes ;Limit_Host = server1.thesystemadministrator.com, server2.thesystemadministrator.com forum_Winnt.sif

I use clipmate at home but at work they will not pay for it so i am looking for a free solution with similar features. Can anyone make some recommendations to try out?

Are there any programs out there can can take a freshly restored xp image to a hard drive and regardless of the type of image used in the restore, perform the same actions like acronis universal restore when restoring the image to completely different hardware so that it will not BSOD once fixed? Thanks...