[You Want to Change Your Username?]

Could you rename my account to Ulaiphur?

Thanks!

[Corrent order to slipstream updates?]

Hello! I'm trying to create an updated XP SP3 x86 image with all the updates since SP3. I need some help on figuring out the order to install updates downloaded from WUD.
What I have so far is:

1. Download all updates via WUD using the list from

2. Slipstream WMP11 via WMP11 integrator
3. Slipstream IE8 via nlite
4. Slipstream all updates from folders: Security Updates, Non-Security Updates, WMP 11 Updates
5. Slipstream AHCI/SATA 3rd party drivers using DPs_Base MassStorage pack

Now, for the questions...

a) Is the order above correct?
b) Does WMP11 integrator works for XP x64? It outputs an error.

Thank you.

[WinNTSetup v5.3.4]

There's a bug that crashes WinNTSetup if you click on the VHD button. To reproduce do the following: click the Tweaks button and then click VHD and the error is universal windows installer has stopped working.
I'm using Windows 8.1 x64 if it matters.

Also, congrats for the new version.

[Remove all custom drivers and reiinstall windows default drivers]

I have a windows 7 computer in which I've used a driver installer application to update all drivers. Now, this program crippled the default usb drivers, and generic mouse and keyboard. Uninstall from device manager did not work, as after restart it still installed the custom driver.

Using sysprep.exe /generalize worked, it removed all drivers but also removed specific computer related elements like hostname, users and some settings. I'm looking for a sollution similar to sysprep, but something that will only remove the drivers and leave applications and settings alone.

What would be the best way to remove all custom drivers and reinstall windows default drivers?

[WinNTSetup v5.3.4]

I have a question, sorry if it's a lame one: I created a VHD and want to setup Windows 7 on it. I'm not interested in booting from it --just extract the files. WinNTSetup insists that I select a Boot Drive and will not allow to select the VHD as Boot drive. Is there any way to get passed this? All I want is to extract all WIM files to a vhd.

Also, I think I found a bug:

After the creation of VHD through WinNTSetup, and clicking again on the VHD>> menu, it displays: Universal Windows Installer stopped working.

[WinNTSetup v5.3.4]

Nevermind, it works fine with -Source:

Thanks

[WinNTSetup v5.3.4]

You really thought of everything --that's how all coders should be. Great job (again)!

Is there any way of doing this by cmd? Load the iso and set the image index?

[WinNTSetup v5.3.4]

I'm using WinNTSetup in a WinPE environment. I don't think I can use IMDISK.

[WinNTSetup v5.3.4]

JFX

Maybe you could research a way to use an .iso as the wim input format. WinNTSetup will then only extract the install.wim from the .iso to a temporary location. This would be usefull for me as I have, at the moment, both ISO files and .WIM files so it takes double the space to keep them.

I am aware that I can extract the .ISO files and then use the full path on WinNTSetup but by doing so it also changes the checksum of the ISO and I don't want that.

[Repair Windows by Imagex /APPLY]

I'd like to discuss this topic further.

Quote

It depends on the contents of the WIM file you are using.

Say it's the same .wim used to install the windows.

Quote

If it contains registry hives (as a system image would) then they will overwrite.

No, I'm talking about everything else EXCEPT the registry hives. In this case, all of the user settings would be saved, right?

[Repair Windows by Imagex /APPLY]

Is an imagex /apply operation the same as a Windows DVD Repair operation? Say we have a system with many corrupted files, HDD issues. Would the imagex /apply be able to fix it? Everything will get overwritten obviously but the user registry hives will remain intact, correct? I'm assuming some if not all user application will no longer work but windows would be fully repaired.

Has anyone tried this? Is this a better way than windows repair?

Thank you

[Cryptovirus defenses?]

Quote

on Win7 Pro I'm trying SRP (Software Restriction Policies) whitelisting, but it isn't perfect as various programs and setups still need to execute files in Appdata or Temp folders. Also, this wouldn't block anything disguised as a valid installer.

The Software Restriction policies really mess up your system. Any new install you make will be broken if those policies aren't whitelisted. Not to mention programs that are actually run from APPDATA, like jDownloader, and WUD. You might say, put the executables under whitelist but it will be getting tedious once you will have 10 apps you need to whitelist -- this is not a sollution.

Quote

are there some permission settings that could block a program trying to encrypt user folders or entire drives?
(without limiting normal usage too much!)

Short answer: no.

This is because whatever access you have on those drives/folders/files, your malware application will also have because it is run under your user account. Thus, there are two options:

• one way would be to store your files on an HDD with encryption (programs like TrueCrypt). With this no writing or reading can be performed without entering your password for the drive.
• or make a complete backup of your system using software like Acronis TrueImage and make a weekly backup. Store the backup on an external HDD, and never keep it plugged in to your system. Then IF you get infected, just boot up the CD and restore the image from the backup. It'll format all the partition and re-create your data.

[WinNTSetup v5.3.4]

I make a new XP iso every month (with latest POS updates, using OnePiece DXUPAC-made addons etc).

I always put a winnt.sif in the i386 folder (in case I ever need to install if from CD, which I haven't done for months).

 

I only use this iso with WinNTSetup (boot from PESE usb, mount iso), using command line winnt.sif selection.

I never have any problems with this, the winnt.sif from the command line is always used.

Yes, but is winnt.sif in i386 the same with the one you use in your batch?

In my cause, the one from i386 is very different from the one I use through WinNTSetup

[WinNTSetup v5.3.4]

1.

Here's an example of a deployment day:

• open winntsetup.exe, load 7-admin.ini for virtual machine testing
• setup finished, take HDD
• insert new HDD for windows 10 deployment
• same instance of winntsetup.exe, load 10-user.ini which contains image, unattend and OEM paths different than the 7-admin.ini

 

If I do this 10 times a day, should I do it manually? I'm the only one who requested because I am the only one that actually uses it every day, and some times more than once a day.

 

 

2.

Passing on to another issue...

I think something is wrong withour XP deployment. If I already have a winNT.sif in XPDir\i386\, and trying to add an external winNT.sif or winNT.txt, the result is strange and unstable. Sometimes it applies the file in i386, otherwise the external one. I've tried it 3 times, and it is the same. It only worked when there is no winNT.sif in i386.

If this is a normal behaviour, a suggestion might be to exclude the file in i386 if an external one is applied.

 

Can anyone confirm?

 

 

3.

Also, I would like to say that your application is the best and does not need any kind of change. Some points to look out for, and my humble two cents:

• always make it compatible with WinPE, cause that is where it will be used the most. All of them, because on some computers, the latest PE does not work, so try to maintain a PE2 (Windows Vista) To PE10 and beyond
• make available the same options in the .ini configuration as well as in the command-line. Sometimes it is easier to work with .ini rather than batch, and other way around
• Be on the lookout for bloated stuff, keep it small, keep it simple, and focus on deployment only. Not other functions

[Sysprep Image with NetFramework]

If I enable/install netframework in Windows 7, and then execute sysprep, will it be active when I install the image? Or must I enable it again through the Prgrams and features applet?

 

Thank you

[WinNTSetup v5.3.4]

JFX, would please help by implementing these:

 

 

1. Please add the option of preselecting the image inside the .wim file. I missed to installations today because the executable kept deploying 7 Ultimate instead of 7 Professional.

 

 

2. Please add the option in the .ini config file to set the OEM folder. Image and unattend file already exist.

Source=UnattendedFile=

3. Also, the SourceDir, UnattendDir and OEMDir do not work. When set in the default WinNTSetup.ini, the programs starts with the last opened folder, and NOT the one set in WinNTSetup.ini .

 

SourceDir=.\ImagesUnattendDir=.\UnattendOEMDir=.\OEM

4. Make any setting in the config file override the current application setting. For instance, if the application launches with:

SourceDir=.\Images

 

And I load an ini file with SourceDir=.\TestImages, the application will be overwritten with the value in the loaded ini file. I have already requested this so I would humbly request the reason why you do not want to implement it. It is not hard, it will not cause any harm the code, so what is the issue?

[WinNTSetup v5.3.4]

Thanks for help. Turns out I was using the bootmgr entry code. 

I executed bootsect /nt52 and it worked ok.

[WinNTSetup v5.3.4]

I don't remember exactly if I saw your error codes before, but are you sure you included both text-mode and windows SATA drivers in your source?

 

 

I've used DriverPacks Base tool with the following settings:

Iijected DP_MassStorage_wnt5_x86-32_1209.7z using Method 2, GUIRunOnce

 

Isn't that enough?

[WinNTSetup v5.3.4]

Has anyone managed to install XP using WinNTSetup? Whenever I try it, on the first boot it says

Cannot find the file C:\Windows\System32\Winload.exe

0xc000000f

 

So, WinNTSetup install it correctly but I do not know what the error means. The file is there and I've tried vanilla XP and also XP with injected sata drivers.

Any tips?

[How to force UAC prompt when UAC is disabled]

How can I force windows to ask me for administrator credentials when UAC is disabled?

 

I have a sistem in which UAC is disabled but some programs require that UAC prompt in order to work properly. And with UAC disabled, Run as administrator is useless.

 

Also, i cannot access the UAC settings when it is disabled.

[RunAsSPC alternative?]

You change it every month because there is such a policy, and such a policy exists in your organization due to some security concerns, which are most probably the same reasons why your users are not given the Admin password or an Admin level account on their machines and why you are currently using runasspc and why your intended modification to the way it works should not even been thought of.

The persons that worked on the policy did not take into account all of the requirements of the ip support team. Sometimes there are issues with the policy that block all access to the machines, including us, the company that deployed the policy. And when that happens, the stupid people that work in support must figure out ways to get out of the policy, because if you call your boss, or boss's boss, they will say figure it out, instead of actually calling up the person that deployed the security measure to fix it. This is the real world and you should stop trying to make me look like a fool.

 

 

Of course, it is trivial to put together a (say) Auto-It doing what you *want* (and I believe there are several examples available), but it is not, really not a good idea^[1].

 

So, you can automate via (say) batch the creation of the N .spc files but you cannot automate their distribution in "multiple folders"?

I will try to create the scripts and see what I'll come up with.

 

 

For the time being I was wondering if you could help me on a specific error in RunAsSPC. It says

Error 5: Access is denied

[RunAsSPC alternative?]

You do understand the REASON why RunAsSpc uses the current approach and not the one you are suggesting, right? 

 

Of course I know. But I need this to work as per my example. 

 

Why do you change the password every month?

 

Because I work as an admin with a windows domain. And our passwords expire every month, including admins.

 

Wouldn't it be easy to automate the creation of the N .spc files you *need* monthly?  

 

I would but I have many applications. Even if I created the script, it'll have to update the spc scripts in multiple folders.

 

 

What about an alternate way? Isn't there some program in windows that accepts password hashes or some other easier way than this?

[RunAsSPC alternative?]

Sorry for not being clear on my requirements.

 

I want to be able to give someone an application, that allows that person to install it without admin privileges. For this pupose I have used RunAsSPC as follows:

pushd %~dp0RunAsSpc.exe /cryptfile:"TeamViewer.spc"

I have configured the .spc file with my admin credentials and the path to the teamviewer installer.

It works fine but it is tedious to change the password every month on it. Especially when I use about 10 of these .spc files for different applications.

 

I was thinking if there was a program that will allow me to just store the password in an encrypted file, and use that file to run any application, similar to the following example:

runasspc.exe /cryptfile:"MyAdminPassword.spc" C:\Windows\Notedpad.exerunasspc.exe /cryptfile:"MyAdminPassword.spc" .\TeamviewerSetup.exerunasspc.exe /cryptfile:"MyAdminPassword.spc" .\FirefoxSetup.exe

It would be then very easy to update the password, and credentials if necessary because it will be only 1 file and not 10 or 20.

 

[RunAsSPC alternative?]

So there is no other alternative to this?

[Winlogon script that executes login screen]

OK, so basically I will need to create a user account as autologin, from that user account run the .hta script above and the do it's thing.

 

The only problem with this is that a user is free to bypass the script and get into windows. Even if the script is launched full screen, If i press alt+tab or windows key it allows me to the the entire OS. I just want the users to be able to use just this script.