 |
|
 |
Hidev's Knowledge base Questions listing.
To search for answers go to our kb category page
HERE
How to Configure an Authoritative Time Server in Windows 2000
|
| | Windows includes the W32Time Time service tool that is required by the Kerberos authentication protocol. The purpose of the Time service is to ensure that all computers that are running Windows 2000 or later in an organization use a common time. The Time service uses a hierarchical relationship that controls authority and does not permit loops to ensure appropriate common time usage.
Here is a quick fix... copy this into your command window: net time /setsntp: ntp2.usno.navy.mil
Windows-based computers use the following hierarchy by default:
- All client desktop computers nominate the authenticating domain controller as their in-bound time partner.
- All member servers follow the same process as client desktop computers.
- Domain controllers may nominate the primary domain controller (PDC) operations master as their in-bound time partner but may use a parent domain controller based on stratum numbering.
- All PDC operations masters follow the hierarchy of domains in the selection of their in-bound time partner.
Following this hierarchy, the PDC operations master at the root of the forest becomes authoritative for the organization, and you should configure the PDC operations master to gather the time from an external source. This is logged in the System event log on the computer as event ID 62. Administrators can configure the Time service on the PDC operations master at the root of the forest to recognize an external Simple Network Time Protocol (SNTP) time server as authoritative by using the following net time command, where server_list is the server list:
net time /setsntp: server_list
There are several SNTP time servers run by the U.S. Naval Observatory that are satisfactory for this function, for example:
- ntp2.usno.navy.mil at 192.5.41.209
- tock.usno.navy.mil at 192.5.41.41
After you set the SNTP time server as authoritative, run the following command on a computer other than the domain controller to reset the local computer's time against the authoritative time server:
net time /set
More information about the net time command is available at a command prompt if you type the following command:
net time /?
SNTP defaults to using User Datagram Protocol (UDP) port 123. If this port is not open to the Internet, you cannot synchronize your server to Internet SNTP servers.
NOTE : Administrators can also configure an internal time server as authoritative by using the net time command. If the administrator directs the command to the operations master, it may be necessary to reboot the server for the changes to take effect.
For additional information, see the following Microsoft white paper:
The Windows Time Service http://www.microsoft.com/windows2000/docs/wintimeserv.doc |
.net framework not working correctly in iis
|
| | From the command line, browse to the installation directory:
(%WinDir%\Microsoft.Net\Framework\v1.1.4322} and run "aspnet_regiis.exe -i". This will install the sundry ASP.Net files, and register it with IIS correctly.
Also copy the aspnet_client from the wwroot and place the copy in any other web root directory that you may be using.
|
Access 97 No License error
|
| | If you are trying to install Access 97 with Access 2000 or 2002 already installed you can get this error. Search for the font: Hatten.ttf move to another location(desktop). rename the .ttf to .old. or just delete. If you are in the Fonts folder you will not be able to change the TTF filename extension- You must move the Hatten file to another folder to change the name.
Re-instal Access 97 When you reinstall Access97 it will create a new Hatten.ttf in the Fonts folder, then you could delete the other file that you changed.
Open the program...all fixed. There is also a patch for this, however it only works with Windows 98! |
Add a Default Printer Using .VBS script
|
| | The Windows Printer Mapping on Terminal Service cannot automatically map a printer if the printer is not locally attached to an LPT, COM, or USB port.
To map network printers for use in Windows 2000 Terminal Services and Windows NT 4.0 Terminal Server, follow these steps: In the following script, replace PrinterDriver with the name of the driver you are adding and \\Server\Printer with the name of the shared printer and server:Set WshNetwork = CreateObject("WScript.Network") PrinterPath = "\\Server\Printer" PrinterDriver = "PrinterDriver" WshNetwork.AddWindowsPrinterConnection PrinterPath, PrinterDriver WshNetwork.SetDefaultPrinter "\\Server\Printer" Save and execute the script in a Visual Basic (VBS) file. NOTE: The parameter PrinterDriver must have the exact name of the driver as it appears in the left column of the Ntprint.inf file.
For example, if you want to install a Cannon Bubble-Jet BJ-230, then the line in the script should read PrinterDriver = "Canon Bubble-Jet BJ-230".
Excerpt from ntprint.inf: ++++++++++++++++++ "Canon Bubble-Jet BJ-230" = CNBJ230.GPD, CanonCanon_Bubble-JeFF70,Canon_Bubble-Jet_BJ-230 NOTE: Windows NT 4.0 Terminal Server does not have Windows Scripting Host by default. Windows Scripting Host must be installed first to execute the scripts.
To add a different printer for each user that logs on to Terminal Services, follow these steps: In the following script, replace PrinterDriver with the names of the drivers you are adding. Replace UsernameX with the name of the user, and add more sections as needed:Set WshNetwork = CreateObject("WScript.Network")
Select Case WshNetWork.UserName
Case "Username1" PrinterPath = "\\Server\Printer1" PrinterDriver = "PrinterDriver" WshNetwork.AddWindowsPrinterConnection PrinterPath, PrinterDriver
WshNetwork.SetDefaultPrinter "\\Server\Printer1" Case "Username2" PrinterPath = "\\Server\Printer2" PrinterDriver = "PrinterDriver" WshNetwork.AddWindowsPrinterConnection PrinterPath, PrinterDriver
WshNetwork.SetDefaultPrinter "\\Server\Printer1" End Select Set the script to run each time the user logs on to Terminal Services (use Logon Script or Group Policy) and end select. For more information on scripts, do one of the following: Click Windows Script Host, click Documentation, and then click either Whitepaper or Technical Paper to reach these documents:
White paper: Windows Script Host: A Universal Scripting Host for Scripting Languages
Technical paper: Windows Script Host Programmer's Reference Click the link below to view the following topic on the Microsoft Web site:
Microsoft Windows Script Technologies
http://www.msdn.microsoft.com/library/default.asp?url=/nhp/default.asp?contentid=28001169
if this link does not work go to microsoft.com click on support select knowledgebase select search by article ID number and type in the article ID # 263226 then hit go when it comes up with the above page then click on the link at the bottom titled "Microsoft Windows Script Technologies" which will take you to the msdn part of microsoft's website which will give further information
HERE IS INFORMATION ON A UTILITY SPECIFIC TO WINDOWS 2000
How to Add Printers with No User Interaction in Windows The information in this article applies to: Microsoft Windows 2000 Server Microsoft Windows 2000 Professional
This article was previously published under Q189105 SUMMARY Windows 2000 provides the ability to install a printer using a command line. This is particularly useful when you add or remove a printer from a group of users using a login script or a scheduled event.
Although Microsoft Windows NT 4.0 Zero Administration Kit (ZAK) contains tools such as Con2prt.exe, the Con2prt.exe tool provides the ability to add or delete only network printers. You can also modify and delete local printers using Windows 2000. The result is that an administrator can control all aspects of a user's ability to print by having users run a batch file or logon script.
NOTE: Using this command in a login script or a client-launched batch file requires the client computer to be running Windows 2000. Because the login script runs on the client computer, a Windows NT 4.0 client is unable to process the command.
In addition, these commands can be run from an administrator's workstation or from a server so that the printers are push-installed to the client computers without having to go to the actual computer. MORE INFORMATION The following examples list the most typical uses for the command.
NOTE: This command only runs on a Windows 2000 computer against a Windows 2000 or a Windows NT 4.0 server or workstation.
This example adds an Agfa printer driver and creates a logical printer on a computer named SERVER.
NOTE: Both lines can be placed in a batch file or typed after each other at a command prompt. These two lines are wrapped for readability. rundll32 printui.dll,PrintUIEntry /ia /c\\server /m "AGFA-AccuSet v52.3" /h "Intel" /v "Windows 2000" /f %windir%\inf\ntprint.inf
rundll32 printui.dll,PrintUIEntry /if /b "Test Printer" /c\\SERVER /f "%windir%\inf\ntprint.inf" /r "lpt1:" /m "AGFA-AccuSet v52.3"
This example deletes an AGFA printer on a computer named SERVER: rundll32 printui.dll,PrintUIEntry /dl /b "Test Printer" /c\\SERVER
For more information about the available switches, type /? after the command.
In addition, at a command prompt, type: rundll32 printui.dll,PrintUIEntry /?
The preceding command displays the entire list of usage switches with extensive examples for using this method.
NOTE: The following syntax is an example that works correctly as long as the Standard TCP/IP Ports are created. rundll32 printui.dll,PrintUIEntry /if /b "NORTH-US-SRTEST-TEST24-BOGUS" /f %windir%\inf\ntprint.inf /r "IP_157.57.50.98" /m "HP Laserjet 4000 Series PCL" /Z
If Standard TCP/IP Ports are not created, the following error dialog box may be experienced:
Printer User Interface Printer rundll command failed. Command: /if /b "NORTH-US-SRTEST-TEST24-BOGUS" /f %windir%\inf\ntprint.inf /r "IP_157.57.50.98" /m "HP Laserjet 4000 Series PCL" /Z. You either entered a printer name that was incorrect or the specified printer is no longer connected to the server. |
Alternate TCP/IP configuration
|
| | Laptop users often experience problems when moving between networks where DHCP servers aren't consistently used (e.g., moving between an office that uses DHCP to assign IP addresses and a home network that uses static IP addresses). If you configure your computer to use DHCP and no DHCP server is available, the machine will typically use an IP address in the range 169.254.0.1 to 169.254.255.254 with a subnet mask of 255.255.0.0.
The actual IP address will depend on what IP addresses other machines on the local subnet have selected (XP will perform a limited test to ensure the Windows TCP/IP component doesn't use an address already in use). Because the local TCP/IP stack assigns no WINS, DHCP, or gateway information, all IP communication is limited to machines in the local subnet.
XP lets you create an alternate IP configuration that you can use when your system can't find a DHCP server. This alternate configuration lets you specify an IP address, subnet, gateway, and the other typical network settings. To create this alternate IP configuration, perform the following steps:
Open the Network Connections applet - (go to Start, Programs, Accessories, Communications and click Network Connections). Right-click the network adapter for which you want to specify an alternate IP configuration, then click Properties. Select Internet Protocol (TCP/IP), then click Properties. Under the General tab, ensure that you've configured the connection to use DHCP. Select the Alternate Configuration tab, select "User configured," then fill in the static IP address details you want the connection to use when the system can't find a DHCP server.
If you are using a ststic address the 'Alternate Config' tab will not be shown! You must be using DHCP.
XP stores the custom connection configuration settings under: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\ registry subkeys
More on default settings
When Windows2000/XP is configured for TCP/IP "to Obtain an IP address automatically" via DHCP, it will first attempt to locate a DHCP-server (which can takes some time ). If no DHCP server is found on the network, it will use the build-in "Automatic Client Configuration" (sometimes referred to as APIPA ) to assign itself an IP-address in the address-range 169.254.x.x with Subnet- mask 255.255.0.0.
On a large network with a predefined address range, this is often not required, because it will make the trouble-shooting of networking problems more difficult when Windows2000 / XPtakes such an "initiative" on its own. It is possible to de-activate this feature. (The required changes in the registry are listed on the Microsoft Knowledge base articleQ244268):
You can deactivate the AutoIPgeneration for the complete computer using the Registry-key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters Add the following value to this key: "IPAutoconfigurationEnabled", Value type: REG_DWORD Value in hexadecimal: 0 (A value of 0 disables APIPA support on this computer) :
You can deactivate the AutoIPgeneration for just one or more network adapters:
You need to find a registry entry under: HKEY_LOCAL_MACHINE\system\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\<adapter>
Create a new DWORD-key "IPAutoconfigurationEnabled" with the value set to 0 :
When restarting now Windows2000/ XP and no DHCP-server is found on the network, no IP-address will be assigned:
in a Command-prompt window, run : ipconfig Windows 2000 IP Configuration Ethernet adapter Local Area Connection
Connection-specific DNS SUffix . : IP Address . . . . . . . . . . . . . . Subnet Mask . . . . . . . . . . . . Default Gateway 0.0.0.0 0.0.0.0
the IP-address "0.0.0.0" is invalid, it indicates that your system has no IP-address
How to identify the registry key for your network adapter ?
Check in the Properties of your Network configuration the EXACT name for your Network card, as listed under: Connect using :( select it by dragging and copy it to the clipboard)
Search now the Registry for that "Adapter Description", you need to find the "ClassGUID", a PCI-network card will be listed under HKEY_LOCAL_MACHINE\system\CurrentControlSet\Enum\PCI :
with the "ClassGUID", search in HKEY_LOCAL_MACHINE\system\CurrentControlSet\Control\Class\ for this class"
Check the sub-keys for the proper DriverDescription to match your network card. and look for the Key "NetCfgInstanceID", which is identical to your <adapter> number. if you have multiple matches showing the same DriverDescription, check under the sub-key "Linkage" for the "UpperBind" to be "TCPIP".
|
An error occurred attempting to create the Object Picker
|
| | This error can occur when either of the following registry keys is missing or corrupted:
HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}
HKEY_CLASSES_ROOT\LDAP The second key that is listed may be missing or corrupt or may not contain the value:
{228D9A81-C302-11cf-9AA4-00AA004A5691}
NOTE: If your registry keys contain values rather than being blank or missing, you should first back up the keys by using the Export Registry Key feature in Regedit.exe. You should then examine the entries for differences and merge them if you need to.
If the HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc} key is missing or damaged, add the following lines to a text file, rename it with a .reg extension, and then import it to your registry.
On a Windows 2000-based domain controller use the following text:
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}] @="ADs LDAP Pathname Descriptor Object"
[HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}\InprocServer32]@="activeds.dll" "ThreadingModel"="Both"
[HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}\ProgID] @="Pathname"
[HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}\TypeLib] @="{97d25db0-0363-11cf-abc4-02608c9e7553}"
[HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}\Version] @="0.0"
On a Windows 2000-based domain member computer use the following text:
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}] @="ADs Pathname Object"
[HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}\InprocServer32]@="activeds.dll" "ThreadingModel"="Both"
[HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}\ProgID] @="Pathname"
[HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}\TypeLib] @="{97d25db0-0363-11cf-abc4-02608c9e7553}"
[HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}\Version] @="0.0"
If the HKEY_CLASSES_ROOT\LDAP key is missing, or damaged, use the following text:
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\LDAP] @="URL:LDAP Protocol" "EditFlags"=hex:02,00,00,00 "URL Protocol"=""
[HKEY_CLASSES_ROOT\LDAP\Clsid] @="{228D9A81-C302-11cf-9AA4-00AA004A5691}"
[HKEY_CLASSES_ROOT\LDAP\shell]
[HKEY_CLASSES_ROOT\LDAP\shell\open]
[HKEY_CLASSES_ROOT\LDAP\shell\open\command] @="\"D:\\Program Files\\Outlook Express\\wab.exe\" /ldap:%1"
I have created these reg files in zip for easy download... see below.
|
Backup EXEC Service Account issues
|
| | Basically to be able to backup and restore individual Exchange Mailboxes the BackupEXEC Service account needs to be able to have access to all of those mailboxes via MAPI.. If you did not setup this service account during the initial install here is how to do it:
- Create the account in Active Directory Users and Computers. NOTE: The first five characters in the account name can not match that of any current/previous account or mailbox.
NOTE: DO NOT HIDE THIS ACCOUNT FROM EXCHANGE ADDRESS LISTS!
- Join the account to the Administrators group of the domain.
- Open up “Exchange System Manager“ and drill down to the Exchange Server that your mailbox is located on. Right click the server name, select properties and then click on the “Security“ tab. Add the account you just created and give it Full Control.
- Go into Control Panel and open up the Services app. Double click on all of your Backup EXEC services and have them logon as the service account you created. You will be told at some point during this that the machine is granting the service the right to logon as a service. Obviously this is exactly what you want :)
- Once you've done this re-start all the Backup EXEC services.
- Now open up the Domain Controller Security Policy console and drill down like this: Security Settings --> Local Policies --> User Rights Assignment. Double click “Log on locally“ and add the account you created in step 1.
- Now logoff and log back on with the account you created in step 1 and run Backup EXEC. In case you don't have an icon handy with this account the defalt for the EXE is:
C:\Program Files\VERITAS\Backup Exec\NT\bkupexec.exe
- Select the Backup Selections tab and you should be able to see all the mailboxes you wish to see.
|
Bios Beep Codes
|
| | Most PC's conduct Power On Self Tests prior to attempting to boot. Should there be a failure at this stage, you will hear a series of "beeps" which give an indication of the error. The following is a typical set of beep codes, used in AMI WinBios, which may or may not be correct for your particular machine - check your computer or motherboard manual for exact codes for your machine.
| Beeps |
Error Message |
| 1 |
Refresh Failure |
| 2 |
Parity Error |
| 3 |
Base 64K RAM Failure |
| 4 |
Timer Not Operational |
| 5 |
Processor Error |
| 6 |
Gate A20 Failure |
| 7 |
Processor Exception Interrupt Error |
| 8 |
Display Memory Read/Write Error |
| 9 |
ROM Checksum Error |
| 10 |
CMOS Shutdown Register Read/Write Error |
| 11 |
Cache Memory Bad | |
Boot Disks
|
| | How to Create a Bootable Disk for an NTFS or FAT Partition
This article was previously published under Microsoft Q119467
SUMMARYThis article describes how to create a Windows bootable(startup) disk to access a drive with a faulty boot sequence on an Intel-based computer.
Note The procedure for RISC-based computers is different and not documented in this article.
|
Change XP sp1 product Key
|
| | Use a WMI script that changes the volume licensing product key, and then deploy this script in a startup script. The sample ChangeVLKey2600.vbs script and the sample ChangeVLKeySP1 script that are described in this section use the new volume licensing key that you want to enter, in its five-part alphanumeric form, as a single argument. Microsoft recommends that you use the ChangeVLKey2600.vbs script on Windows XP-based computers that are not running SP1 and that you use the ChangeVLKeySP1.vbs script on Windows XP-based computers that are running SP1. These scripts perform the following functions:
They remove the hyphen characters (-) from the five-part alphanumeric product key. They create an instance of the win32_WindowsProductActivation class. They call the SetProductKey method with the new volume licensing product key.
You can create a batch file or a CMD file that uses either of the following sample scripts, together with the new product key as an argument, and either deploy it as part of a startup script or run it from the command line to change the product key on a single computer.
-----------> ' ' WMI Script - ChangeVLKey.vbs ' ' This script changes the product key on the computer ' '***************************************************************************
ON ERROR RESUME NEXT
if Wscript.arguments.count<1 then Wscript.echo "Script can't run without VolumeProductKey argument" Wscript.echo "Correct usage: Cscript ChangeVLKey.vbs ABCDE-FGHIJ-KLMNO-PRSTU-WYQZX" Wscript.quit end if
Dim VOL_PROD_KEY VOL_PROD_KEY = Wscript.arguments.Item(0) VOL_PROD_KEY = Replace(VOL_PROD_KEY,"-","") 'remove hyphens if any
for each Obj in GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf ("win32_WindowsProductActivation")
result = Obj.SetProductKey (VOL_PROD_KEY)
if err <> 0 then WScript.Echo Err.Description, "0x" & Hex(Err.Number) Err.Clear end if
Next
--------------|
ChangeVLKey2600.vbs
--------------> ' ' WMI Script - ChangeVLKey.vbs ' ' This script changes the product key on the computer ' '***************************************************************************
ON ERROR RESUME NEXT
if Wscript.arguments.count<1 then Wscript.echo "Script can't run without VolumeProductKey argument" Wscript.echo "Correct usage: Cscript ChangeVLKey.vbs ABCDE-FGHIJ-KLMNO-PRSTU-WYQZX" Wscript.quit end if
Dim VOL_PROD_KEY VOL_PROD_KEY = Wscript.arguments.Item(0) VOL_PROD_KEY = Replace(VOL_PROD_KEY,"-","") 'remove hyphens if any Dim WshShell Set WshShell = WScript.CreateObject("WScript.Shell") WshShell.RegDelete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WPAEvents\OOBETimer" 'delete OOBETimer registry value for each Obj in GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf ("win32_WindowsProductActivation")
result = Obj.SetProductKey (VOL_PROD_KEY)
if err <> 0 then WScript.Echo Err.Description, "0x" & Hex(Err.Number) Err.Clear end if
Next
--------------|
The following example describes how to use the ChangeVLKeySP1.vbs script from a command line:
Click Start, and then click Run.
In the Open box, type the following command, where ab123-456ab-ab789-876ab-ab123 is the new product key that you want to use, and then click OK:
c:\changevlkeysp1.vbs ab123-456ab-ab789-876ab-ab123 |
Check active connections from CMD
|
| | Go to Run:
Type: cmd (win2k and XP)
Type: command (95 and 98)
Type: netstat -ano |
Common Stop Messages and their meaning
|
| | List of the more common Stop Messages and their meaning
0x0000000A: IRQL_NOT_LESS_OR_EQUAL - Usually cause by bad driver or incompatible hardware/software. 0x00000012: TRAP_CAUSE_UNKNOWN - Indicates a trap from an unknown cause. Check the Microsoft Hardware Compatibility List to verify that the hardware and its drivers are compatible with Windows 2000. 0x0000001A: MEMORY_MANAGEMENT - Indicates a general memory management problem. If you are installing Windows 2000 for the first time, check the Windows 2000 system requirements, including the amount of RAM and disk space required to load the operating system. 0x0000001E: KMODE_EXCEPTION_NOT_HANDLED - Indicates that a kernel-mode exception was not handled. Usually, the exception address pinpoints the driver/function that caused the problem. 0x00000023: FAT_FILE_SYSTEM - Naturally caused by a FAT file system problem. If this is the first time you have booted after installing new hardware, remove the hardware and boot again. 0x00000024: NTFS_FILE_SYSTEM - A problem occurred within NTFS.SYS (the driver file that allows the system to read and write to NTFS file system drives.) There may be a physical problem with the disk, or an IRP may be corrupted. 0x0000002E: DATA_BUS_ERROR - Usually caused by defective RAM(on motherboard or video card). Also can be an indication of damamge to the hard drive due to a virus. 0x00000044: MULTIPLE_IRP_COMPLETE_REQUESTS - Most often caused by a hardware driver issue. 0x00000050: PAGE_FAULT_IN_NONPAGED_AREA - The requested data was not in memory. Caused by defective memory or incompatible software. Sometimes a hardware problem. 0x00000051: REGISTRY_ERROR - Pretty obvious that this is a registry issue. Usually a registry or configuration management issue. 0x00000058: FTDISK_INTERNAL_ERROR - Indicates an inconsistency between pages in the primary and secondary data caches. This is a fault-tolerant disk driver internal error. 0x0000005A: CRITICAL_SERVICE_FAILED - A critical service failed to initialize while starting the LastKnownGood control set. If this is the first time you have booted after installing new hardware, remove the hardware and boot again. 0x00000077: KERNEL_STACK_INPAGE_ERROR - Kernel data requested from the pagefile could not be found or read into memory. This message also may indicate disk hardware failure,data corruption, or virus. 0x0000007A: KERNEL_DATA_INPAGE_ERROR - Kernel data requested from the pagefile could not be found. Possibly due to incompatible disk or controller drivers, or hardware. 0x0000007B: INACCESSIBLE_BOOT_DEVICE - Caused by installing incorrect device drivers when installing or upgrading storage adapter hardware, or a virus. 0x0000008E: KERNEL_MODE_EXCEPTION_NOT_HANDLED - Almsot always caused by a hardware compatibility issue. 0x000000A5: ACPI_BIOS_ERROR - Errors in the ACPI BIOS. Nothing can be done at an operating system level to fix the problem. 0x000000B4: VIDEO_DRIVER_INIT_FAILURE - Video driver failed to initialize, video driver issue. 0x000000BE: ATTEMPTED_WRITE_TO_READONLY_MEMORY - Commonly occurs after installing a faulty device driver. To to correct the problem try disabling or removing the driver. 0x000000D1: DRIVER_IRQL_NOT_LESS_OR_EQUAL - The system attempted to access pageable memory using a kernel process IRQL that was too high. The most typical cause is a bad device driver. 0xC0000135: UNABLE TO LOCATE DLL - Windows attempted to load a DLL file and encountered an error condition. So of the possible causes are that the file is missing or damaged, or that the is Registry is corrupt. 0xC0000221: STATUS_IMAGE_CHECKSUM_MISMATCH - Possibly caused by driver problems, system file problems, disk corruption problems or faulty memory. There are many many other STOP ERROR Messages that can be recieved, this is only a short compilation of some |
Convert any files to word format
|
| | 'Extend the array boundries and add more entries and it should work ' HAVE FUN! Option Explicit Private extension(1) extension(0) = ".txt" Dim objArgs, argc, spellchk, objFSO, path, objFolder, filecollection, filename, objFile, i, ptr, wordin, wordfile, oDoc, myRange, stat, n, v Set objArgs = WScript.Arguments If objArgs.Count < 1 or objArgs.Count > 2 Then Call Script_Error End If Wscript.echo "Text File conversion tool" Wscript.echo "by James Lane" wscript.echo "" wscript.echo "Note: Formatting of files may be lost" wscript.echo "" argc = 0 spellchk = 0 Set objFSO = CreateObject("Scripting.FileSystemObject") Do While argc < CInt(objArgs.Count) Select Case objArgs(argc) Case "-s" spellchk = 1 Case Else If objFSO.FolderExists(objArgs(argc)) Then path = objArgs(argc) Else Wscript.Echo "Folder does not exist." Call Script_Error End If End Select argc = argc + 1 Loop Set objFolder = objFSO.GetFolder(path) Set filecollection = objFolder.Files For Each filename In filecollection Set objFile = objFSO.GetFile(filename) If objFile.Size > 0 Then Set objFile = objFSO.OpenTextFile(filename, 1) If ext(filename) Then wordin = objFile.ReadAll wscript.echo "File: " & filename wscript.echo "" wordfile = Left(filename, Len(filename) - 4) & ".doc" Call makeword(wordfile, wordin, spellchk) wscript.echo "" End If End If Next
Sub Script_Error WScript.Echo "" WScript.Echo "Converts txt files to word documents" WScript.Echo "" WScript.Echo "Usage: word.vbs [-s] folder" WScript.Echo "" WScript.Echo "Options : " WScript.Echo "" WScript.Echo " -s Runs a SpellCheck on the files as they are converted" WScript.Echo "" WScript.Quit End Sub
Sub makeword(file, content, spellchk) Set oDoc = CreateObject("Word.Document") oDoc.Content = content If spellchk = 1 Then oDoc.CheckSpelling oDoc.CheckGrammar Set myRange = oDoc.Content For Each stat In myRange.ReadabilityStatistics n = stat.Name v = stat.Value Wscript.Echo "" & n & " : " & v & "" Next End If oDoc.SaveAs file wscript.sleep 1000 oDoc.Close Set oDoc = Nothing End Sub
Function ext(filename) For i = 0 to (UBound(extension) - 1) ptr = InstrRev(filename, extension(i), -1, 1) - 1 If (ptr + Len(extension(i))) = Len(filename) Then ext = true Exit For Else ext = false End If Next End Function
The above converts txt files to word documents
Usage: word.vbs [-s] folder Options : -s Runs a SpellCheck on the files as they are converted
|
Create a Bootable Disk for an NTFS or FAT Partition
|
| | This article describes how to create a Windows bootable(startup) disk to access a drive with a faulty boot sequence on an Intel-based computer.
Note The procedure for RISC-based computers is different and not documented in this article.
|
Create XP system path
|
| | applies to Windows 2000, XP
1. Right-click on the My Computer icon. (Under Windows XP, the My Computer Icon may be located in the start menu.)
2. Choose Properties from the context menu.
(Alternatively, you can double-click on the System icon in the Control Panel)
4. Click the Advanced tab.
5. Click the Environment Variables button.
6. Add the target directory to the end of the Path using a semi-colon as a separator. For example, if you want to add the path to MATLAB/bin to your system, which is located at c:\roger\bin, you would enter the following at the end of the Path:
;c:\roger\bin
7. Restart your computer for your changes to take affect.
|
dial-up configuration
|
| | How to setup auto dial up to connect to ISP
To connect ISP automatically when run IE, open IE>Tools>Internet Options>Connection, check Always dial my default connection. |
Different Raid types with explanations
|
| | RAID (Redundant Array of Inexpensive Disks) is a method of combining multiple hard drives for data redundancy in case of a hard drive failure.
The different types of supported RAID configurations are:
RAID 0
RAID 0 uses a technique called data striping. Multiple hard drives are combined to make one large volume. RAID 0 can read and write faster than a non-RAID configuration, since it splits the data and accesses both drives in parallel. RAID 0 does not provide any data redundancy. RAID 0 requires at least two hard drives.
RAID 1
RAID 1 mirrors or duplicates the content of one drive onto another equally sized drive. Mirroring provides optimal data integrity and immediate access to your data if one drive fails. RAID 1 allows you to use only half of the available capacity of your NAS device. RAID 1 requires at least two hard drives and must consist of an even number of drives.
RAID 5
RAID 5 provides the best balance of data redundancy, performance and capacity. RAID 5 is the default RAID configuration for the Iomega® NAS. Like RAID 0, RAID 5 stripes all of the available drives into one large volume; however, the space equivalent to one of the hard drives will be used to store parity data. If one hard drive fails, your NAS will rebuild your data using the parity data. RAID 5 requires at least 3 hard drives. You may also use a RAID 5 configuration with hot spare, which reserves an additional hard drive that is swapped in immediately if a drive failure occurs. The total RAID capacity is the sum of all the hard drives minus the space of two drives. RAID 5 with hot spare requires at least 4 hard drives.
Non-RAID
In addition to RAID, you can also configure your NAS without using a RAID configuration. A non-RAID configuration, also referred to as JBOD (Just a Bunch Of Disks), does not allow any data redundancy and is slower than some RAID configurations.
|
Disable or Enable Local area Connection via script
|
| | Toggle LAN Connection script
Const ssfCONTROLS = 3
sConnectionName = "Local Area Connection"
sEnableVerb = "En&able" sDisableVerb = "Disa&ble"
set shellApp = createobject("shell.application") set oControlPanel = shellApp.Namespace(ssfCONTROLS)
set oNetConnections = nothing for each folderitem in oControlPanel.items if folderitem.name = "Network and Dial-up Connections" then set oNetConnections = folderitem.getfolder: exit for end if next
if oNetConnections is nothing then msgbox "Couldn't find 'Network and Dial-up Connections' folder" wscript.quit end if
set oLanConnection = nothing for each folderitem in oNetConnections.items if lcase(folderitem.name) = lcase(sConnectionName) then set oLanConnection = folderitem: exit for end if next
if oLanConnection is nothing then msgbox "Couldn't find '" & sConnectionName & "' item" wscript.quit end if
bEnabled = true set oEnableVerb = nothing set oDisableVerb = nothing s = "Verbs: " & vbcrlf for each verb in oLanConnection.verbs s = s & vbcrlf & verb.name if verb.name = sEnableVerb then set oEnableVerb = verb bEnabled = false end if if verb.name = sDisableVerb then set oDisableVerb = verb end if next
'debugging displays left just in case... ' 'msgbox s ': wscript.quit 'msgbox "Enabled: " & bEnabled ': wscript.quit
'not sure why, but invokeverb always seemed to work 'for enable but not disable. ' 'saving a reference to the appropriate verb object 'and calling the DoIt method always seems to work. ' if bEnabled then ' oLanConnection.invokeverb sDisableVerb oDisableVerb.DoIt else ' oLanConnection.invokeverb sEnableVerb oEnableVerb.DoIt end if
'adjust the sleep duration below as needed... ' 'if you let the oLanConnection go out of scope 'and be destroyed too soon, the action of the verb 'may not take... ' wscript.sleep 1000
Info:
To be 100% robust, you should enable inline error handling and explicitly test for "not implemented" and use an alterative approach of an enumerated search of the Folder's FolderItems collection (returned by the Items() method) looking for a FolderItem.Name match.
If you need the Folder interface rather that FolderItem, use the FolderItem.GetFolder property (yes, it is a property despite a method-like name;-). On the other hand, if you have a Folder interface and want its FolderItem interface, use the Folder.Self property. Note the Self was added as of Windows 2000.
|
Disable XP simplified sharing
|
| | By default, simple file sharing is enabled on a Windows XP-based computer if the computer is not a member of a domain. simple file sharing lets you easily share folders with everyone on your workgroup or network and make folders in your user profile private. However, if simple file sharing is enabled, you cannot prevent specific users and groups from gaining access to your shared folders. If you disable simple file sharing, you can allow specific users and groups to gain access to a shared folder.Those users must be logged on with the credentials of user profiles that you've granted access, in order to gain access to your shared folder.
If simple file sharing is enabled, you see the simple file sharing user interface rather than the classic Security and Sharing tabs. By default, this new user interface is implemented in Windows XP Home Edition and in Windows XP Professional if you are working in a workgroup. If you disable simple file sharing, the classic Security and Sharing tabs appear, and you can specify which users and groups have access to shared folders on your computer.
Note You can set security only on a partition that uses the NTFS file system. If you remove the Everyone group from the NTFS permissions, you cannot use the file or folder over the network.
How to disable simple file sharing
- Click Start, and then click My Computer.
- On the Tools menu, click Folder Options, and then click the View tab.
- In the Advanced Settings section, click to clear the Use simple file sharing (Recommended) check box.
- Click OK.
How to share a folder or a drive with other people
- Click Start, click My Computer, and then locate the folder or drive you want to share.
- Right-click the folder or drive, and then click Sharing and Security.
- On the Sharing tab, click Share this folder.
- To change the share name of the shared folder or drive, type a new name in the Share name box. The new name is what other people see when they connect to this shared folder or drive. The actual name of the folder or drive does not change.
- To add a comment about the shared folder or drive, type the text in the Comment box.
- To limit the number of people who can connect to the shared folder or drive at one time, click Allow under User limit, and then type the number of users.
- To set shared folder permissions on the shared folder or drive, click Permissions.
Note To share folders and drives, you must be logged on as a member of any one of the following groups:
- Administrators
- Server Operators
- Power Users
Troubleshooting
- The Sharing tab is not visible.
Try using the Services snap-in to start the Server service. To do so:
- Click Start, and then click Control Panel.
- Click Performance and Maintenance, click Administrative Tools, expand Services and Applications, and then double-click Services.
- Right-click the Server service, and then click Start.
- The folder is already shared.
Click New Share, and then type the new share name.
- You want to hide the shared folder.
To hide the shared folder, type $ as the last character of the share name. Other uses cannot see this shared folder when they search by using My Computer or Windows Explorer, but they can map to the shared folder.
- Other users occasionally cannot use your shared folder.
No more than 10 other people can connect to your computer at one time if you are using Windows XP Professional. In Windows XP Professional, the maximum user limit is 10, regardless of the number you type in the Allow box.
You can use the Shared Folders snap-in to create and manage shared folders, view a list of all the users who are connected to a shared folder over a network, disconnect one or all of them, view a list of files opened by remote users, and close one or all the open files. To start the Shared Folders snap-in:
- Click Start, and then right-click My Computer.
- Click Manage, and then click Shared Folders
KB: 307874 |
Display Legal Notices at Logon
|
| | Windows NT can display a message dialog box with the text of your choice when a user logs on. Many organizations use this message box to display a warning message that notifies users that they can be held legally liable if they attempt to use the computer without proper authorization. The absence of such a notice could be construed as an invitation, without restriction, to enter and browse the system. Consult with your attorney as to the best wording.
You can use the logon notice in special scenarios, such as when NT serves as an information kiosk. In this case, users might need instructions for supplying a user name and password for the appropriate account. This message dialog box could supply that information in addition to legal notices.
To display a legal notice on your NT system, use the Registry Editor to create or assign the following registry key values:
Hive: HKEY_LOCAL_MACHINE
Key: Software\Microsoft\WindowsNT\
Current Version\Winlogon
Name: LegalNoticeCaption
Data Type: REG_SZ
Value: Title shown on the logon notice dialog box
Hive: HKEY_LOCAL_MACHINE
Key: Software\Microsoft\WindowsNT\
Current Version\Winlogon
Name: LegalNoticeText
Data Type: REG_SZ
Value: Text shown in the logon notice dialog box |
Domain FAQ's
|
| | Cannot logon after removing the domain
I have a windows 2000 professional laptop workstation. I used to belong to a domain on my network, but I recently changed by network settings to belong to a workgroup. Once I restarted my machine, it won't let me log into windows 2000 at all! The error says wrong user name or domain. For some reason, I think it's trying to access the domain - even though I don't belong to it anymore. Even when I'm not connected to the network, I cannot log into windows 2000 at all. How can I get into windows 2000? How can I change this?!
A: After changing the domain to a workgroup, only the member of local administrators can logon the computer. the resolutions: 1. logon the local administrator to local computer and add the users. 2. If you don't have the administrator password, you may need your network administrator to help you.
Can't remove a computer from a domain
Symptom: When trying to move the computer off of the domain and into a workgroup the following error message is displayed, "The computer could not be removed from the domain <domain name>. The revision level is unknown."
Resolution: the problem is you may logon local administrator instead of domain administrator. Re-logon domain administrator.
Cannot find the WINS server.
SYMPTOMS: After you install the Windows Internet Name Service (WINS) component, you may not be able to gain access to the WINS database on the local WINS server. When you try to gain access to the WINS database, you may receive the following error message: "Cannot find the WINS server", "The WINS server you specified cannot be located", "The WINS server might be down, there might be network problems, or the WINS service might not be installed", and "The network path was not found".
RESOLUTION: When WINS Manager starts, it tries to contact the File Server service on the WINS server. Specifically, WINS Manager checks for NetBIOS suffix 20 on the WINS server. If File and Printer Sharing is disabled, it disables the File Server service and NetBIOS suffix. You must have File and Printer Sharing enabled to use WINS.
Cannot Add Windows 2000 Computer to Domain: The Network Path Was Not Found
SYMPTOMS: When trying to join a Win2K/XP computer to a domain, you receive the following error message: The following error occurred when attempting to join "domain name". The network path was not found.
RESOLUTION: 1) make sure you are using an correct IP for the DNS. 2) make sure you have correct DNS and WINS server on your network. 3) try to enable NetBIOS over TCP/IP on Win2K/XP if this is NT domain controller.
How to access different domain without changing the network settings
To use a laptop to access to different domain without changing the domain settings, logon local machine (instead of domain) using your domain logon ID that also are created on your local computer. If it is possible, you may create the same logon id and password on all domain so that you always are able to access the domain you are connecting to. Also you may want to create one batch file like logon.bat with domain logon ID and password to map network drives.
How to change the network information for a Domain Controller
When you try to change the network information to a domain comptroller, you find the Network ID and Properties buttons will not be available. The way to change the network information on a domain controller would be to demote the controller to a member server, change the necessary information, and then promote the server back to a domain controller.
How to check who is logging on a particular computer
If you would like to check who is logging on a particular PC in the (same subnet) network, you can use command nbtstat -a computername. That will show NetBIOS Remote Machine Name Table such as username, <03>, type and status.
How to map a network drive without logon the domain
If you have a laptop used at home and sometimes used in the office, you would like to map a network drive without logon the domain, you can create a batch file like that “net use h: \\ervername\sharename password /user:domainname\username".
How to synchronize the time on all the computers in a network
To synchronize the time on all the computers in a network, create a logon script and use net time command, for example, net time \\computername /set /yes.
How to switch network settings without reboot
As a network consultant, I work on different network every day and need to switch network settings such as IP and DNS accordingly. Fortunately, W2K/XP comes with a useful tool, netsh.exe, that can switch network settings quickly. To copy abc.com network settings, type command netsh -c interface dump >c:\abc.txt. The abc.com network settings will be saved at the root of the C drive. You can create as many network settings as I like. When you work at abc.com next time, you will load the settings by typing netsh -f abc.txt command and the abc.com network settings will take effect immediately.
How to verify if you are logged on to the domain and which server you are logging on
To verify if you are logging on to the domain and which server you are logging on, at a command prompt, type set, and then press ENTER. Look for the LOGONSERVER entry. If it is set to the name of your computer, you were logged on using cached domain credentials. If you are logging on the domain, the LOGONSERVER entry is set to one of the domain controllers.
How can I synchronize all computers' time in the network?
A: You as an Administrators can configure an internal time server as authoritative by using the net time command.
You can also configure the Time Service on the AD to recognize an external Simple Network Time Protocol (SNTP) time server as authoritative. Use the following net time command: net time /setsntp:server_list. Note: 1) The United States Naval Observatory runs several SNTP time servers that are satisfactory for this function, for example, ntp2.usno.navy.mil (at 192.5.41.209) and tock.usno.navy.mil (at 192.5.41.41). 2) that SNTP uses User Datagram Protocol (UDP) port 123. If this port is not open to the Internet, you cannot synchronize your server to Internet SNTP servers.
After you set the SNTP time server as authoritative, run the following command on computers other than the domain controller to reset the local computer's time against the authoritative time server: net time \\servername /set /yes.
How do I un-synchronize time on my domain network?
Q: I have an isolated Windows 2000/NT domain for I/O testing. I want to change TIME on one of my W2K server; however after approx. 30min. the TIME of this server was reset back to my domain time.
A: You can disable the 'Windows Time' service on the computer you don't want to update.
Mapping problem - persistent connection
After you changed net use I: \\serverA\shared to \\serverB\shared in your logon script, some windows 2000 machines are still mapping to \\serverA\shared. The reason is that net use /persistent:yes is default settings for NT and win2000/XP. You can disconnect the old mapping and re-logon. That will map to \\cbgntB\shared. Also you may want to use NET USE I: \\servername\folder /persistent:no so that next time when we change the mapping, it will automatically map to the new settings.
Problem with License Manager I have followed the instructions in Q153140 and Q194065 on how to reset License Manager information. Two days later, I am getting warnings in my Event Logs that my Windows Server is out of licenses. Its finding ghost users that have been deleted from my system for 3-4 years How do I really delete their licenses and make them stop coming back?
A: Many people have reported the same problem. You may want to disable the License Manager and manage the licenses manually.
Slow Network Performance Occurs while copying file to W2K Domain Control
A: Symptom: when copying files from a client computer to W2K domain controller, network performance is slower. You may notice this problem occurs only if you copy many small files but not copy a few large files. Resolution: 1) apply SP3 on the W2K domain controller; 2) edit the TcpDelAckTicks registry value to adjust the TCP delayed ACK timer (refer to MS Q321098).
Unable to logon domain or experience an extremely slow logon - Event ID: 1054
Symptoms: 1) clients cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted). 2) Group Policy processing aborted. 3) The clients may also experience an extremely slow logon.
Resolution:
1) Check you DHCP, WINS and DNS server settings and make sure they are working. 2) ipconfig /all on clients shows correct DNS and WINS. 3) If you do not use DHCP, you need to add DNS in the properties of TCP/IP. 4) if you have more than one NICs and one of them does not plug, disable it.
"The network path was not found" error
When attempting to join "domain name", you get this error "The network path was not found". This behavior can occur if you are using an incorrect Internet Protocol (IP) address for the Domain Name Service (DNS) server or have incorrected WINS settings. To resolve this behavior, make sure that the IP addresses of the DNS and WINS servers on your network are specified correctly in your TCP/IP settings.
Why W2K/XP clients logon so slower
1) Slow logon from W2K/XP to a win2000 domain usually indicates a DNS and WINS configuration issue. If DNS/WINS is configured uncorrected, XP will take longer time to search DNS/WINS and will be time out if it can't find the DNS/WINS. 2) Servers and clients have more than one protocols such as TCP/IP, NetBEUI and IPX. 3) If you have one unplugged and enable network adapter on the computer, you should disable it. |
Download IE6 and Install Later
|
| | First, download the IE6 SP1 setup program from HERE (500kb basic setup program. The full IE package might go as high as ~44mb depending upon your selection). This tip will let you customize the d/l parameters.
Go to the folder where you've placed the above file. Open a Command Prompt (CMD) in that folder, then run the following command in the CMD window:
ie6setup.exe /c:"ie6wzd.exe /d /s:""#E"
Note: Just copy and paste the above line. Don't try to be a wise guy. Copy the damn line! I've received quite a few feedbacks about the accuracy of this tip, and always they got the syntax wrong. Copy and paste! Oh, and yes, this tip works for IE 6 SP1 too, and so will older IE versions. Just replace the "6" in the previous line with a "5" and so on.
You can also choose to download all IE versions in one go. For example, if you choose to download the version for Win9X, the version for NT, the version for W2K, and the version for Win ME - all the files will go to one location - a folder named "Windows Update Setup Files" - and you can then burn this folder to a CD and use it to install IE on any OS version you want. |
Error: 678, 721, 691 and 777 after XP upgrade
|
| | When you try to establish a dial-up connection after you upgrade your computer to Microsoft Windows XP from Microsoft Windows 98, from Microsoft Windows 98 Second Edition, or from Microsoft Windows Millennium Edition (Me), you may receive an error message that is similar to one of the following:
Error 721: The remote computer is not responding. Error 678: The remote computer failed to respond. Error 691: Access was denied because the user name and/or password was invalid on the domain. Error 777: The connection attempt failed because the modem or other connecting device on the remote computer is out of order.
This issue may occur if the modem driver is not compatible with Windows XP. This issue has been reported to occur with Lucent Win modems that are included with the following Hewlett-Packard (HP) computers: HP Pavilion 6736 HP Pavilion 6745c HP Pavilion 7400 HP Pavilion 7800 HP Pavilion 7845 HP Pavilion 7850 HP Pavilion 7855 HP Pavilion 7940 HP Pavilion 8655 HP Pavilion 8756c HP Pavilion XT846 HP Pavilion XT856 HP Pavilion XT923
To resolve this issue, contact the hardware manufacturer to inquire about how to obtain and install the latest Windows XP-compatible driver for the modem. For more information about how to contact HP, visit the following HP Web site: http://welcome.hp.com/country/us/eng/software_drivers.htm Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information. For more information about how to contact Agere Systems (the manufacturer of the modem chipset) to inquire about a modem driver that is compatible with Windows XP, visit the following Agere Web site: http://www.agere.com/support
314455 "Error 691" error message when you try to connect to your ISP 308022 Resources for troubleshooting modem problems in Windows XP |
Exchange 2003 OWA error
|
| | There are three methods to resolve this problem.
Method 1: Correct or Add an SMTP Address to a User
- Start the Active Directory Users and Computers snap-in.
- Obtain properties of the user in question. (Users can exist in more than one Organizational Unit but, by default, they are created in the Users OU.)
- Click the E-mail Addresses tab.
- If you want to add an SMTP address to this user, click New, double-click SMTP Address, and then type an address that matches the Mailboxes For value noted from properties of the Exchange virtual directory.
- If you want to modify an existing SMTP address, click the address that you want to modify, click Edit, and type an address that matches the Mailboxes For value.
- Click OK twice.
There may be replication latency in the Active Directory before this user is able to log in to OWA.
NOTE: It is not important that the default (bold) SMTP address of a user match the Mailboxes For value; any of the SMTP address can match.
Method 2: Modify the SMTP Domain Serviced by the Exchange Virtual DirectoryIn the property sheet for the Exchange virtual directory, the Modify button is not available (appears dimmed). This is because the SMTP domain used by the Exchange virtual directory will always be the default SMTP domain assigned by the Default Recipient Policy.
To modify that default SMTP domain, follow these steps.
NOTE: These steps include restarting the Microsoft Exchange Information Store and its dependent services. While the Information Store is stopped, no clients can access e-mail.
- Start Exchange System Manager.
- Expand the Recipients container.
- Select the Recipient Policies object.
- In the right pane, locate the Default Policy and obtain the properties.
- Click the E-mail Addresses tab.
- Double-click the SMTP address. If there is more than one SMTP address listed, double-click the one in bold.
- Leave the "@" (at sign) at the beginning and type the SMTP domain you want in the Address field.
- Click OK twice.
- Start the Services snap-in.
- Select the Microsoft Exchange Information Store service.
- Click the Restart Service button on the Microsoft Management Console (MMC) toolbar. When prompted to restart dependent services, click Yes. The Mailboxes For value will be updated to use your new SMTP domain.
Method 3: Create Additional Virtual Directories for Additional SMTP DomainsNOTE: If the computer is a front-end/back-end solution, you must create the virtual directories on both the front-end servers and the back-end servers.
- Start Exchange System Manager.
- Locate the Servers/server name/Protocols/HTTP/Exchange Virtual Server folder.
- Right-click the Exchange Virtual Server, click New, and then click Virtual Directory.
- Type the name of the new virtual directory.
This name will appear in the URL used by clients to access this new virtual directory. For example, if you create a new virtual directory named companybmail, clients will have to access a URL similar to http://www.domain.com/companybmail/.
- To select an SMTP domain, click the Modify button, and then select an SMTP domain from the list.NOTE: This list is generated from all SMTP Address values in all recipient policies defined in your Exchange organization. You cannot supply an SMTP domain that does not appear in this list.
For more information about recipient policy management, please see the Exchange 2000 online help topic, "Managing Recipient Settings", and then click Managing Recipient Policies.
To customize authentication methods, click the Authentication button on the Access tab.
For more information about authentication methods, see the Microsoft Internet Information Server 5.0 Help topic "About Authentication," available at http://localhost/iishelp.
|
Exchange server 2003 sp1 issues
|
| | When you use the Microsoft Exchange Server 2003 version of the Microsoft Outlook Web Access (OWA) client, the Secure/Multipurpose Internet Mail Extension (S/MIME) control does not load after you download and install it from the OWA Options page. You experience the following symptoms:
| • |
If you click Options in the left pane, the E-mail Security area of the OWA Options page indicates that the S/MIME control is not installed. Only the Download button is available. You expect to see the Encrypt contents and attachments for outgoing messages check box and the Add a digital signature to outgoing messages check box. |
| • |
When you start a new e-mail message, you experience the following symptoms:
| • |
If you click Options, the E-mail Security section does not appear. You expect to see the Encrypt message contents and attachments and Add a digital signature to this message check boxes. |
| • |
The Encrypt message contents and attachments and Add a digital signature to this message buttons do not appear on the toolbar. | |
| • |
You cannot drag attachments to a Compose Message form. |
This problem occurs even though the files are correctly installed in the %Windir%\Downloaded Program Files folder and the following registry subkey is set correctly:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{b0f84fec-95ad-4f3e-8fc0-6bc1bbadbf0d}
This problem occurs when you run the OWA client on a Microsoft Windows XP Service Pack 2 (SP2)-based computer. The Exchange Server 2003 OWA client uses a particular function call to determine whether the S/MIME control is installed. Windows XP SP2 restricts the components that are supported by this function call. Therefore, OWA cannot detect that the S/MIME component is installed.
Download the fix below: |
Export DNS zones to new server
|
| | Below is the script to perform this task....
=======================>START
:: DNSdump
:: PURPOSE - Dumps local server's DNS service configuration and zone content. Once dumped, the content :: can be imported on any other Windows 2000/2003 based DNS server [includes cross OS dumps]
:: DNSdump V2.0 is INCOMPATIBLE with the current public release
:: Supports Windows 2000/2003 members or DCs including Active Directory integrated zones. Application :: partitions are supported
:: Requires Administrative credentials on local machine. If the DNS server is also a Domain Controller, :: Domain Administrative credemtials are required in order to export or import Active Directory integrated :: DNS zones
:: Active Directory integrated zones exported from the domain NC will be translated to the local domain :: NC in the event of a cross domain export/import. Further behavioral details documented in syntax help
@echo off setlocal ENABLEDELAYEDEXPANSION
:: Prepare the display echo.
:: Define environment set TOOLNAME=DNSdump set KNOWNPATH=25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,53,79,73,74,65,6d,33,\ set INSTALLROOT=%SystemRoot%\System32\DNS set DUMP=%~f2 set STDOUT=nul set STDERR=nul set WORKING=0 set ERROR= set domainDN= set domainDNS= set SUPPORTEDBUILDS=2195 3790
:: Check local server meets necessary requirements for successful operation
:: Derive operating system version and validate support for /f "tokens=3 delims=.]" %%v in ('ver') do set BUILD=%%v for %%s in (%SUPPORTEDBUILDS%) do ( if not "%%s"=="%BUILD%" ( if "!ERROR!"=="" set ERROR=1 ) else ( set ERROR=0 ) ) if not "%ERROR%"=="0" ( call :ERROR unsupported operating system version, build "%BUILD%" goto :END )
:: Check for sufficient arguments if "%2"=="" ( call :ERROR insufficient arguments call :SYNTAX goto :END )
:: Correct and/or report any errors in the dump directory argument set DUMP=%DUMP:"=% set TDUMP=%DUMP: =% if not "%TDUMP%"=="%DUMP%" ( call :ERROR dump path CANNOT contain spaces, "%DUMP%" goto :END )
:: Locate critical executables, error and terminate if not found for %%e in (net.exe findstr.exe ldifde.exe regedit.exe) do ( set where="%%~$PATH:e" if "!where!"=="""" ( call :ERROR critical executable, "%%e", could not be located goto :END ) ) :: Determine if DNS service is installed on local machine regedit /E:A "%TEMP%\DNS-Service.TMP" HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS if not exist "%TEMP%\DNS-Service.TMP" ( call :ERROR DNS service does not appear to be installed on "%COMPUTERNAME%" goto :END )
:: Check local credentials net user "%username%" | findstr /i "Administrators" 1>%STDOUT% 2>%STDERR% if errorlevel 1 ( net user "%username%" | findstr /i /c:"Domain Admins" 1>%STDOUT% 2>%STDERR% if errorlevel 1 ( call :ERROR security context is insufficient, administrative credentials required goto :END ) )
:: Determine if local machine is member or Domain Controller regedit /E:A "%TEMP%\DCorMember.TMP" "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions" if not exist "%TEMP%\DCorMember.TMP" ( call :ERROR unable to determine machine configuration [DC or member] goto :END ) for /f "tokens=2 delims==" %%t in ('type "%TEMP%\DCorMember.TMP" ^| findstr "ProductType"') do ( if /i "%%t"==""LanmanNT"" (set TYPE=DC) else (set TYPE=MEMBER) )
:: Get DNS domain name of local machine if "%TYPE%"=="DC" ( regedit /E:A "%TEMP%\NTDS-Service.TMP" HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters if not exist "%TEMP%\NTDS-Service.TMP" ( call :ERROR Directory Service configuration could not be determined goto :END ) for /f "tokens=1* delims==" %%s in ('type "%TEMP%\NTDS-Service.TMP" ^| findstr "sysvol"') do ( set SYSVOL=%%t set SYSVOL=!SYSVOL:\\=\! for /f "tokens=2 delims=>" %%d in ('dir !SYSVOL! /ad ^| findstr "JUNCTION"') do ( set domainDNS=%%d set domainDNS=!domainDNS: =! ) ) if "!domainDNS!"=="" ( call :ERROR Directory Service configuration could not be determined goto :END ) call :DERIVEDN "!domainDNS!" set domainDN=!partDN! )
:: Begin script body
:: Determine mode of operation if /i "%1"=="IMPORT" ( set MODE=IMPORT ) else ( if /i "%1"=="EXPORT" ( set MODE=EXPORT ) else ( call :ERROR invalid mode specified, "%1" call :SYNTAX goto :END ) )
:: React to derived mode and create/verify dump directory structure if "%MODE%"=="EXPORT" ( if exist "%DUMP%" ( call :ERROR dump directory already exists, "%DUMP%" goto :END ) else ( md "%DUMP%" 2>%STDERR% if errorlevel 1 ( call :ERROR unable to create dump directory, "%DUMP%" goto :END ) md "%DUMP%\InstallRoot" 2>%STDERR% if errorlevel 1 ( call :ERROR unable to create directory, "%DUMP%\InstallRoot" goto :END ) md "%DUMP%\Logs" 2>%STDERR% if errorlevel 1 ( call :ERROR unable to create log directory, "%DUMP%\Logs" goto :END ) ) ) else ( if not exist "%DUMP%" ( call :ERROR specified dump directory NOT found, "%DUMP%" goto :END ) )
:: Define custom DNS service installation root if supplied if not "%3"=="" ( set INSTALLROOT=%~f3 if not exist "%INSTALLROOT%" ( call :ERROR DNS installation root, "%INSTALLROOT%", is invalid goto :END ) ) else (
:: Query DNS service registry key for install root ... if non-standard, error for /f "delims=: tokens=2" %%i in ('type "%TEMP%\DNS-Service.TMP" ^| findstr /i "ImagePath"') do set ACTUALPATH=%%i if not "%KNOWNPATH%"=="!ACTUALPATH!" ( call :ERROR non-standard DNS installation root, specify zone file path set ERROR=2 goto :END ) if not exist %INSTALLROOT% ( md %INSTALLROOT% if errorlevel 1 ( call :ERROR unable to create DNS installation root, "%INSTALLROOT%" goto :END ) ) )
:: Export only the non locally critical DNS service registry keys to dump directory if "%MODE%"=="EXPORT" ( regedit /E:A "%DUMP%\DNS-Service-LegacyZones.REG" HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS\Zones regedit /E:A "%TEMP%\DNS-Service-Parameters.TMP" HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS\Parameters if not exist "%TEMP%\DNS-Service-Parameters.TMP" ( call :ERROR unable to retrieve DNS service configuration set ERROR=2 goto :END ) type "%TEMP%\DNS-Service-Parameters.TMP" | findstr /v /i "PreviousLocalHostname" >"%DUMP%\DNS-Service-Parameters.REG" if not exist "%DUMP%\DNS-Service-Parameters.REG" ( call :ERROR unable to retrieve DNS service configuration set ERROR=2 goto :END ) )
:: Set working directory and indicate state pushd "%DUMP%" 1>%STDOUT% 2>%STDERR% echo %TOOLNAME% - Ready to proceed, configuration as follows - echo. echo * Security context is "%USERDOMAIN%\%USERNAME%" echo * Mode of operation is "%MODE%"
if "%TYPE%"=="DC" ( echo * Domain Controller detected echo * Active Directory domain name is "%domainDNS%" set /p nul= * Active Directory integrated zones WILL be %MODE%ED <nul if "%BUILD%" GTR "2195" ( echo - NDNC's supported ) else ( echo - NDNC's NOT supported ) ) else ( echo * Non Domain Controller detected echo * Active Directory integrated zones UNAVAILABLE )
echo * DNS installation root is "%INSTALLROOT%" echo * %TOOLNAME% directory is "%DUMP%" echo. echo STATUS - Task progress ... echo.
:: Set WORKING to TRUE and jump to mode set WORKING=1 goto :%MODE%
:: Should never get here - FATAL ERROR call :ERROR a fatal unknown error occurred set ERROR=2 goto :END
:: Define procedures
:IMPORT
:: Check the import directory for valid dump configuration if not exist "%DUMP%\DNS-Service-Parameters.REG" ( call :ERROR unable to retrieve DNS service configuration goto :END ) if not exist "%DUMP%\DNS-Software.REG" ( echo - legacy "Zones" configuration detected ... LEGACY USED )
:: Stop the DNS service echo - stopping DNS service net stop dns 2>&1 | findstr /i /c:"not exist" 1>%STDOUT% 2>%STDERR% if not errorlevel 1 ( call :ERROR unable to stop DNS service )
:: Create .REG file to remove existing registry based DNS service configuration echo - removing existing DNS service configuration echo REGEDIT4>%TEMP%\KillKeys.REG echo.>>%TEMP%\KillKeys.REG echo [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters]>>%TEMP%\KillKeys.REG echo [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Zones]>>%TEMP%\KillKeys.REG
:: Execute the removal if exist %TEMP%\KillKeys.REG ( regedit /s %TEMP%\KillKeys.REG ) else ( call :ERROR existing configuration could NOT be removed )
:: Delete the temporary registry file del %TEMP%\KillKeys.REG 1>%STDOUT% 2>%STDERR%
:: Import the registry data echo - reconfiguring DNS service for %%r in ("%DUMP%\DNS-Service-Parameters.REG" "%DUMP%\DNS-Software.REG" "%DUMP%\DNS-Service-LegacyZones.REG") do ( if exist %%r ( regedit /s %%r ) else ( if not "%%r"==""%DUMP%\DNS-Service-LegacyZones.REG"" ( call :ERROR unable to reconfigure DNS service registry settings ) ) )
:: Restore the DNS config./zone files echo - restoring DNS service configuration files to "%INSTALLROOT%" xcopy "%DUMP%\InstallRoot\*.*" "%INSTALLROOT%" /h /y 1>%STDOUT% 2>%STDERR% if errorlevel 1 ( call :ERROR unable to export configuration files to "%INSTALLROOT%" goto :END )
:: Restore the Active Directory integrated zones :: Check the type (DC or member), if member skip, if DC import all files with extension .ADzones if "%TYPE%"=="DC" if exist "%DUMP%\*.ADzones" ( echo - importing Active Directory integrated DNS zones from; echo. for /f %%z in ('dir /b "%DUMP%\*.ADzones"') do ( set tmpPART=%%~nz if /i "!tmpPART:~0,9!"=="CN=System" ( call :NCIMPORT !tmpPART! ) else ( if not "%BUILD%" GTR "2195" ( echo * !tmpPART! echo - unsupported partition detected ... IGNORED set ERROR=1 ) else ( call :NCIMPORT !tmpPART! ) ) echo. ) )
:: Start the DNS service echo - restarting DNS service net start dns 2>&1 | findstr "invalid" 1>%STDOUT% 2>%STDERR% if not errorlevel 1 ( call :ERROR unable to start DNS service )
:: Determine level of success echo. if "%ERROR%"=="1" ( echo STATUS - Import partially completed ... ERRORS OCCURRED ) else ( echo STATUS - DNS service configuration completed )
goto :END
:: Handles export of DNS configuration and zone content :EXPORT
echo - exporting DNS service configuration
if not exist "%DUMP%\DNS-Service-Parameters.REG" ( call :ERROR unable to retrieve DNS service configuration goto :END )
:: Construct partition information echo "%domainDNS%">"%DUMP%\PartitionFQDN.DAT"
regedit /E:A "%DUMP%\DNS-Software.REG" "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DNS Server"
:: Alert user to legacy storage of zone configuration :: Else clause derives partitions in which zones exist and assumes domain NC as potential candidate if not exist "%DUMP%\DNS-Software.REG" ( echo - legacy "Zones" key located ... LEGACY CONFIGURATION USED ) else ( for /f "tokens=2 delims==" %%z in ('type "%DUMP%\DNS-Software.REG" ^| findstr "DirectoryPartition"') do ( echo %%z>>"%DUMP%\PartitionFQDN.DAT" ) )
:: Copy existing DNS install root echo - exporting DNS service file structure from "%INSTALLROOT%" copy "%INSTALLROOT%\*.*" "%DUMP%\InstallRoot" /y 1>%STDOUT% 2>%STDERR% if errorlevel 1 ( call :ERROR unable to backup DNS installation root, "%INSTALLROOT%" set ERROR=2 goto :END )
:: Exports Active Directory integrated zones if running on a DC :: Removes objectGUID references in order to permit import if "%TYPE%"=="DC" ( echo - exporting Active Directory integrated Zones from; echo. if not exist "%DUMP%\PartitionFQDN.DAT" ( call :ERROR unable to derive partitions containing DNS zones ) for /f "tokens=*" %%d in ('type "%DUMP%\PartitionFQDN.DAT"') do ( call :DERIVEDN %%d ldifde -s localhost -d "CN=MicrosoftDNS,!partDN!" -f "%DUMP%\!partDN!.ADtmpZones" -j "%DUMP%\Logs" | findstr /i /c:"No Entries found" 1>%STDOUT% 2>%STDERR% if not errorlevel 1 ( set ERROR=1 echo * !partDN! - UNHANDLED ERRORS ) else ( echo * !partDN! ) echo - preparing zones for import echo. type "%DUMP%\!partDN!.ADtmpZones" | findstr /v "objectGUID" >"%DUMP%\!partDN!.ADzones" del "%DUMP%\!partDN!.ADtmpZones" 2>%STDERR% call :LOGS %!partDN! ) )
:: Determine level of success echo. if not "%ERROR%"=="0" ( echo STATUS - Export partially completed ... ERRORS OCCURRED ) else ( echo STATUS - Export completed successfully ) goto :END
:: End script body
:: Define procedures and error/syntax routines
:: Receives a fully qualified domain name as argument 1 and converts it to a distinguished name :DERIVEDN set partDN=%* set partDN=%partDN:~1,-1% set partDN=.%partDN% set partDN=%partDN:.=,DC=% set partDN=%partDN:~1% if /i "%domainDN%"=="%partDN%" ( set partDN=CN=System,%partDN% ) goto :EOF
:: Import supplied naming context and handle logged output :NCIMPORT
:: Translate DN references for domain NC integrated zones such that a zone exported from a DC in one domain :: can be imported into the domain NC of a DC in another if /i "%tmpPART:~0,9%"=="CN=System" ( if not "%tmpPART:~10%"=="%domainDN%" ( set APPEND=-c %tmpPART:~10% %domainDN% set logDN=CN=System,%domainDN% ) else ( set APPEND= set logDN=%* ) ) else ( set APPEND= set logDN=%* )
ldifde -s localhost -i -k -f "%*.ADzones" -j "%DUMP%\Logs" %APPEND% | findstr /i "error" 1>%STDOUT% 2>%STDERR% if not errorlevel 1 ( echo * %* ... UNHANDLED ERRORS set ERROR=1 ) else ( echo * %* )
if not "%APPEND%"=="" ( echo - cross domain EXPORT/IMPORT detected, domain DN's translated echo ... "%tmpPART:~10%" to "%domainDN%" )
call :LOGS %logDN% goto :EOF
:: Rename logged entries for each partition exported or imported in order preserve each log :LOGS del "%DUMP%\Logs\*-%MODE%.LOG" 1>%STDOUT% 2>%STDERR% del "%DUMP%\Logs\*-%MODE%.ERR" 1>%STDOUT% 2>%STDERR% ren "%DUMP%\Logs\ldif.log" "[%*]-%MODE%.LOG" 1>%STDOUT% 2>%STDERR% ren "%DUMP%\Logs\ldif.err" "[%*]-%MODE%.ERR" 1>%STDOUT% 2>%STDERR% goto :EOF
:: Displays errors :ERROR if "%WORKING%"=="1" ( echo - FAILED ... %* ) else ( echo ERROR - %* ) set ERROR=1 goto :EOF
:: Provides assistance with syntax :SYNTAX echo. echo SYNTAX - %TOOLNAME% [IMPORT^|EXPORT] [dump directory] ^<optional install root^> echo. echo * [IMPORT] imports a %TOOLNAME% exported DNS service configuration echo * [EXPORT] exports the existing DNS service configuration echo * [dump directory] is a local, writable directory path echo * [install root] is the local absolute path used by the DNS service echo. echo * %TOOLNAME% requires - echo - administrative credentials echo - local execution on the DNS server echo - Microsoft Windows 2000/2003 server family, builds %SUPPORTEDBUILDS% echo. echo * %TOOLNAME% provides import and export of - echo - DNS service configuration echo - Active Directory integrated zones and zone configuration echo - standard zone files and zone configuration echo. echo * %TOOLNAME% feature notes - echo - existing Active Directory zones will NOT be overwritten during IMPORT echo - manually erase existing zones IF an authoritative import IS REQUIRED echo - ALL zone configuration options WILL be overwritten during IMPORT echo - non Active Directory integrated zones WILL be overwritten during IMPORT echo - existing DNS service configuration WILL be overwritten during IMPORT echo - DNS service WILL be restarted during IMPORT echo - detailed logs are preserved beneath the specified DUMP path goto :EOF
:END
:: Restore previous working directory popd
:: Clean up del "%TEMP%\DNS-Service.TMP" 1>%STDOUT% 2>%STDERR% del "%TEMP%\DNS-Service-Parameters.TMP" 1>%STDOUT% 2>%STDERR% del "%TEMP%\NTDS-Service.TMP" 1>%STDOUT% 2>%STDERR% del "%TEMP%\DCorMember.TMP" 1>%STDOUT% 2>%STDERR%
if "%ERROR%"=="2" ( if "%MODE%"=="EXPORT" ( del "%DUMP%\InstallRoot" /f /y 1>%STDOUT% 2>%STDERR% rd "%DUMP%\InstallRoot" 1>%STDOUT% 2>%STDERR% del "%DUMP%\Logs" /f /y 1>%STDOUT% 2>%STDERR% rd "%DUMP%\Logs" 1>%STDOUT% 2>%STDERR% del "%DUMP%" /f /q 1>%STDOUT% 2>%STDERR% rd "%DUMP%" 1>%STDOUT% 2>%STDERR% ) )
=======================>END |
Forgot your NT admin password?
|
| | This is a utility to (re)set the password of any user that has a valid (local) account on your NT system, by modifying the crypted password in the registrys SAM file. You do not need to know the old password to set a new one.
If you need to reset the DOMAIN admin password see the link below: Reset domain Password
It works offline, that is, you have to shutdown your computer and boot off a floppydisk or CD. The bootdisk includes stuff to access NTFS partitions and scripts to glue the whole thing together. Works with syskey (no need to turn it off, but you can if you have lost the key) Will detect and offer to unlock locked or disabled out user accounts!
NT stores it's user information including crypted versions of the passwords in a file called 'sam', usually found in \winnt\system32\config. This file is a part of the registry, in a binary format previously undocumented, and not easily accessible. But thanks to a German(?) named B.D, I've now made a program that understands the registry. As far as I know, Microsoft provides no way of changing the password if you cannot log in as someone with appropriate privileges, except restoring the registry files from the rescuefloppy.
- You don't forget passwords?
- You never get boxes to admin when someone quits suddenly?
- Your vendor delivers a preconfigured system to you, but never have "freak" accidents and lose the password they've set on it?
- If so, what are you doing reading this?? Go read propaganda from your favourite software vendor instead.
If you have the CD, all drivers are included. If you use the floppy, and you need the SCSI-drivers set, either prepare a floppy with the scsi-drivers .zip file unzipped (in \scsi), or put a selection of the drivers you need in the \scsi folder on the main floppy, there should be enough space for at least 4-5 drivers. In the latter case you don't need to carry around and swap floppies.
Overview Disk select, tell which disk contains the Windows system. Optionally you will have to load drivers. PATH select, where on the disk is the system? File select, which parts of registry to load, based on what you want to do. Password reset or other registry edit. Write back to disk (you will be asked) DON'T PANIC!! - Most questions can usually be answered with the default answer which is given in [brackets]. Just press enter/return to accept the default answer.
1. DISK SELECT Which disk contains your Windows system?
========================================================= . Step ONE: Select disk where the Windows installation is ========================================================= Disks: Disk /dev/ide/host0/bus0/target0/lun0/disc: 2147 MB, 2147483648 bytes NT partitions found: 1 : /dev/ide/host0/bus0/target0/lun0/part1 2043MB Boot
Please select partition by number or a = show all partitions, d = load new disk drivers l = relist NTFS/FAT partitions, q = quit Select: [1]
For most machines only one disk and parition is listed, if so, just go with selection 1 (default) Otherwise select partition If no disks or not all disks are shown, you may need to load disk drivers, for SCSI-controllers (or some IDE-raid controllers). Select d to go to the driver select menu. 2. HOW TO LOAD DRIVERS Skip this if it is not needed. Select: [1] d ==== DISK DRIVER / SCSI DRIVER select ==== You may now insert or swap to the SCSI-drivers floppy Press enter when done: Found 1 floppy drives Found only one floppy, using it.. Selected floppy #0 Mounting it.. Floppy selection done.. SCSI-drivers found on floppy:
1 BusLogic.o.gz 2 aic7xxx.o.gz 3 sym53c8xx.o.gz [ ... ]
SCSI driver selection: a - autoprobe for the driver (try all) s - swap driver floppy q - do not load more drivers or enter the number of the desired driver
SCSI driver select: [q]
Select a for auto-probe, it will try to load all drivers, and stop when one loads properly. Some drivers may need more driver modules, so you may have to redo the auto-probe several times. Or if you know what you want, just enter it's number or name. SCSI driver select: [q] a [ BusLogic.o.gz ] Using /tmp/scsi/BusLogic.o PCI: Found IRQ 11 for device 00:10.0
[.... lots of driver / card info ...]
scsi0: *** BusLogic BT-958 Initialized Successfully *** scsi0 : BusLogic BT-958 Vendor: FooInc Model: MegaDiskFoo Rev: 1.0 Type: Direct-Access ANSI SCSI revision: 02
[ ... ]
Attached scsi disk sda at scsi0, channel 0, id 0, lun 0 SCSI device sda: 8388608 512-byte hdwr sectors (4295 MB) Partition check: /dev/scsi/host0/bus0/target0/lun0: p1 Driver BusLogic.o.gz loaded and initialized.
You may then quit the selection with q or try for more drivers. When you quit, you will get back to the disk select (see above) and hopefully see more disks.
3. PATH AND FILE SELECT Where's the Windows system located? On the selected partition/disk, the main files for windows can theoretically be anywhere. And we must find the registry files to be able to edit them. There are however some usual places:
winnt35/system32/config - Windows NT 3.51 winnt/system32/config - Windows NT 4 and Windows 2000 windows/system32/config - Windows XP/2003 and often Windows 2000 upgraded from Windows 98 or earlier. These usual paths will be checked, and if found, they will be suggested as the default.
Selected 1 Mounting on /dev/ide/host0/bus0/target0/lun0/part1 NTFS volume version 3.1. Filesystem is: NTFS
========================================================= . Step TWO: Select PATH and registry files ========================================================= What is the path to the registry directory? (relative to windows disk) [windows/system32/config] : -r-------- 1 0 0 262144 Jan 12 18:01 SAM -r-------- 1 0 0 262144 Jan 12 18:01 SECURITY -r-------- 1 0 0 262144 Jan 12 18:01 default -r-------- 1 0 0 8912896 Jan 12 18:01 software -r-------- 1 0 0 2359296 Jan 12 18:01 system dr-x------ 1 0 0 4096 Sep 8 11:37 systemprofile -r-------- 1 0 0 262144 Sep 8 11:53 userdiff
Select which part of registry to load, use predefined choices or list the files with space as delimiter 1 - Password reset [sam system security] 2 - RecoveryConsole parameters [software] q - quit - return to previous [1] :
If the directory is correct, something like the above will be listed (it may vary a bit..) You may then choose some canned answers based on what you want to do. Password reset is the default, and most used. Option 2, RecoveryConsole is for setting 2 parameters that the Windows 2000 and newer RecoveryConsole (boot from CD, select Recovery and console mode) uses. One of the parameters allows RecoveryConsole to be run without it prompting for the admin password. If you do not know what RecoveryConsole is, don't bother. Or go search the net.. Or if you want to do manual edit of registry, select your hives to load. Enter all names on one line with space between. We select 1 to edit passwords..
4. PASSWORD RESET Everything is set and ready, let's roll!
========================================================= . Step THREE: Password or registry edit ========================================================= chntpw version 0.99.2 040105, (c) Petter N Hagen
[.. some file info here ..]
* SAM policy limits: Failed logins before lockout is: 0 Minimum password length : 0 Password history count : 0
<>========<> chntpw Main Interactive Menu <>========<>
Loaded hives:
1 - Edit user data and passwords 2 - Syskey status & change 3 - RecoveryConsole settings - - - 9 - Registry editor, now with full write support! q - Quit (you will be asked if there is something to save)
What to do? [1] -> 1
===== chntpw Edit User Info & Passwords ====
RID: 01f4, Username: RID: 01f5, Username: , *disabled or locked* RID: 03e8, Username: , *disabled or locked* RID: 03eb, Username: , *disabled or locked* RID: 03ea, Username: , *disabled or locked*
Select: ! - quit, . - list users, 0x - User with RID (hex) or simply enter the username to change: [Administrator]
Here you can enter the username you want to reset the password for. NOTE: It is case-sensitive, write it exact as listed (without the < and > of course)
Or if the name uses some characters that cannot be displayed, enter it's ID number (RID), like this: 0x1f4 would select administrator.
We select the default, which is administrator.
RID : 0500 [01f4] Username: Administrator fullname: comment : Built-in account for administering the computer/domain homedir :
Account bits: 0x0210 = [ ] Disabled | [ ] Homedir req. | [ ] Passwd not req. | [ ] Temp. duplicate | [X] Normal account | [ ] NMS account | [ ] Domain trust ac | [ ] Wks trust act. | [ ] Srv trust act | [X] Pwd don't expir | [ ] Auto lockout | [ ] (unknown 0x08) | [ ] (unknown 0x10) | [ ] (unknown 0x20) | [ ] (unknown 0x40) |
Failed login count: 0, while max tries is: 0 Total login count: 3
* = blank the password (This may work better than setting a new password!) Enter nothing to leave it unchanged Please enter new password: *
Some information is displayed. Also, if the account is locked, you will be asked if you wish to unlock it (not shown here)
We go for the blank password option (*) WHICH IS HIGLY RECOMMENDED over setting a new one.
Please enter new password: * Blanking password!
Do you really wish to change it? (y/n) [n] y Changed!
Select: ! - quit, . - list users, 0x - User with RID (hex) or simply enter the username to change: [Administrator] !
! brings us back to the main menu here.
<>========<> chntpw Main Interactive Menu <>========<>
Loaded hives:
1 - Edit user data and passwords 2 - Syskey status & change 3 - RecoveryConsole settings - - - 9 - Registry editor, now with full write support! q - Quit (you will be asked if there is something to save)
What to do? [1] -> q
5. WRITING OUT THE CHANGES Everything has been done, time to commit the changes.
Hives that have changed: # Name 0 - OK
========================================================= . Step FOUR: Writing back changes ========================================================= About to write file(s) back! Do it? [n] : y
THIS IS YOUR LAST CHANCE! If you answer y here there will be a write to disk!
Writing sam
NOTE: A disk fixup will now be done.. it may take some time
Mounting volume... OK
Processing of $MFT and $MFTMirr completed successfully.
NTFS volume version is 3.1.
Setting required flags on partition... OK
Going to empty the journal ($LogFile)... OK
NTFS partition /dev/ide/host0/bus0/target0/lun0/part1 was processed successfully. NOTE: Windows will run a diskcheck (chkdsk) on next boot. NOTE: this is to ensure disk intergity after the changes
***** EDIT COMPLETE *****
You can try again if it somehow failed, or you selected wrong New run? [n] : n
That was all. The disk fixup is only run on NTFS filesystems, and will force chkdsk next time windows boots.
Please answer n here and then reboot, CTRL-ALT-DEL. Remember to remove the floppy or CD.
What can go wrong? Lots of things can go wrong, but most faults won't damage your system. The most critical moment is when writing back the registry files to NTFS. Also, the file written back may be corrupt (from chntpw messing it up), preventing your NT system from booting properly. YOU HAVE BEEN WARNED! One indication of a corrupt SAM is that the Netlogon service will fail to start, which again means it's impossible to log in. Or it will simply just reboot forever.
Downloads ( SEE the file download links on this page for these files. bd040116.zip (~1.1MB) - Bootdisk image, date 040116 sc040116.zip (~1MB) - SCSI-drivers (040116) (only use newest drivers with newest bootdisk, this one works with bd040116) cd040116.zip (~2MB) - Bootable CD image with same version and drivers as floppies above.
NOTE THAT THE BOOTDISK CONTAINS CRYPTHOGRAPHIC CODE, and that it may be ILLEGAL to RE-EXPORT it from your country.
How to use the floppy The unzipped image (bdxxxxxx.bin) is a block-to-block representation of the actual floppy, and the file cannot simply be copied to the floppy. Special tools must be used to write it block by block.
Unzip the bd zip file to a folder of your choice. There should be 3 files: bdxxxxxx.bin (the floppy image) and rawrite2.exe (the image writing program), and install.bat which uses rawrite2 to write the .bin file to floppy. Insert a floppy in drive A: NOTE: It will lose all previous data! Run (doubleclick) install.bat and follow the on-screen instructions. Thanks to Christopher Geoghegan for the install.bat file (some of it ripped from memtest86 however) Or from unix:
dd if=bd??????.bin of=/dev/fd0 bs=18k
How to use the CD Unzipped, there should be an ISO image file (cd??????.iso). This can be burned to CD using whatever burner program you like, most support writing ISO-images. Often double-clikcing on it in explorer will pop up the program offering to write the image to CD. Once written the CD should only contain some files like "initrd.gz", "vmlinuz" and some others. If it contains the image file "cd??????.iso" you didn't burn the image but instead added the file to a CD. I cannot help with this, please consult you CD-software manual or friends.
The CD will boot with most BIOSes, see your manual on how to set it to boot from CD. Some will auto-boot when a CD is in the drive, some others will show a boot-menu when you press ESC or F10/F12 when it probes the disks, some may need to have the boot order adjusted in setup. |
Gathering News Headline Feeds using ASP
|
| | Soon everyone from major newspapers to individuals who just want to rant over the world wide web will be offering RSS (Rich Site Summary) feeds on the internet, free for the taking. With a simple ASP script and an xml style sheet, you can consolidate as many RSS feed as you want onto a single web page. That way, you can show the latest rantings of a friend or news headlines about your favorite subject, all in one place. This is called news consolidation (not related to the usenet news:// protocol).
RSS is an xml format for encoding information about news headlines. It is quickly becoming the standard method for sending headlines, and related things, across the world wide web. This popularity is primarily due to it's simplicity and the extraordinary growth in the popularity of web logs (daily personal rants published to the web).
RSS defines a number of xml tags suitable for storing news headlines. Here's some of the most important RSS xml tags;
<rss> <channel> <title>Name of the news feed.</title> <link>A url for the source website.</link> <description>A short description of the news feed.</description> <item> <title>Headline #1</title> <link>A url for the entire news article under headline #1.</link> <description>A short blurb about the news article under headline #1.</description> </item> </channel> </rss>
The <item> tag repeats for each news headline in the RSS feed.
ASP Script
Below are a ASP classic and a ASP.net script that load the remote RSS feed and displays it on the page. You can execute this script from an ASP database page containing the url of the RSS xml source or hard code the RSS feeds that you want to include on the page.
ASP Classic
The following ASP function loads the specified an RSS formatted xml file, loads a standard xsl style sheet and returns an HTML table. Place this script at the top of your ASP page;
<% Function getXML(sourceFile) dim styleFile dim source, style styleFile = Server.MapPath("news.xsl")
Dim xmlhttp Set xmlhttp = Server.CreateObject("Microsoft.XMLHTTP") xmlhttp.Open "GET", sourceFile, false xmlhttp.Send
set source = Server.CreateObject("Microsoft.XMLDOM") source.async = false source.loadxml(xmlhttp.ResponseText)
set style = Server.CreateObject("Microsoft.XMLDOM") style.async = false style.load(styleFile)
getXML = source.transformNode(style) set source = nothing set style = nothing End Function %> <html>
The following ASP script displays the specified RSS xml feed as a table on your ASP page. Place it on the page where you want the table to be displayed and change the URL in the getXML function call to point to your RSS xml source file.
<%= getXML("http://radio.weblogs.com/0106935/rss.xml") %>
ASP.net
The following ASP.net function loads the specified RSS formatted xml file into an xml document when the page loads. Place this script at the top of your ASP page and add the URL to the RSS xml source file in the getXML function call;
<script language="VB" runat="server"> Sub Page_Load (sender As Object, e As EventArgs) myXml.Document = getXML("http://radio.weblogs.com/0106935/rss.xml") End Sub
Function getXML(sourceFile As String) Dim myRequest As System.Net.WebRequest = System.Net.WebRequest.Create(sourceFile) Dim myResponse As System.Net.WebResponse = myRequest.GetResponse() Dim myReader As System.Xml.XmlTextReader = new System.Xml.XmlTextReader(myResponse.GetResponseStream()) Dim doc As System.Xml.XmlDocument = New System.Xml.XmlDocument() doc.Load(myReader) getXML = doc End Function
</script>
The following xml web server control displays the specified RSS xml feed as a table on your ASP page using the xsl style sheet in the TransformSource attribute (NOTE: the xsl source file must be in the server path of the ASP file, not a http: url). Place it on the page where you want the table to be displayed.
<asp:Xml id="myXml" TransformSource="news.xsl" runat="server" />
XSL Style Sheet
An RSS source is rendered as a HTML table on the ASP page using an xsl style sheet. Save this xsl as a text file called news.xsl in the same folder as your ASP page;
<?xml version="1.0" ?> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="xml" omit-xml-declaration="yes" indent="yes"/> <xsl:template match="*"> <table border="1" width="600" align="center"> <tr><td valign="top" align="center" class="title" bgcolor="silver" > <a> <xsl:attribute name="href"> <xsl:value-of select="*[local-name()='channel']/*[local-name()='link']"/> </xsl:attribute> <xsl:attribute name="target"> <xsl:text>top</xsl:text> </xsl:attribute> <xsl:value-of select="*[local-name()='channel']/*[local-name()='title']"/> </a> <xsl:text disable-output-escaping="yes"> </xsl:text> <xsl:value-of select="*[local-name()='channel']/*[local-name()='lastBuildDate']"/> </td></tr><tr><td valign="top" bgcolor="ghostwhite" class="headlines" > <ul> <xsl:for-each select="//*[local-name()='item']"> <li> <a> <xsl:attribute name="href"> <xsl:value-of select="*[local-name()='link']"/> </xsl:attribute> <xsl:attribute name="target"> <xsl:text>top</xsl:text> </xsl:attribute> <xsl:value-of select="*[local-name()='title']"/> </a> <xsl:value-of select="*[local-name()='description']" disable-output-escaping="yes"/> </li> </xsl:for-each> </ul> </td></tr> </table> </xsl:template> <xsl:template match="/"> <xsl:apply-templates/> </xsl:template> </xsl:stylesheet> |
Google XML Site map
|
| | Google .xml Site map
The Sitemap Protocol allows you to inform search engines about URLs on your websites that are available for crawling. In its simplest form, a Sitemap that uses the Sitemap Protocol is an XML file that lists URLs for a site. The protocol was written to be highly scalable so it can accommodate sites of any size. It also enables webmasters to include additional information about each URL (when it was last updated; how often it changes; how important it is in relation to other URLs in the site) so that search engines can more intelligently crawl the site.
Sitemaps are particularly beneficial when users can't reach all areas of a website through a browseable interface. (Generally, this is when users are unable to reach certain pages or regions of a site by following links). For example, any site where certain pages are only accessible via a search form would benefit from creating a Sitemap and submitting it to search engines.
This document describes the formats for Sitemap files and also explains where you should post your Sitemap files so that search engines can retrieve them.
Please note that the Sitemap Protocol supplements, but does not replace, the crawl-based mechanisms that search engines already use to discover URLs. By submitting a Sitemap (or Sitemaps) to a search engine, you will help that engine's crawlers to do a better job of crawling your site.
Using this protocol does not guarantee that your webpages will be included in search indexes. (Note that using this protocol will not influence the way your pages are ranked by Google.)
Create a text file using this template adding each web page as below. rename the file sitemap.xml upload to your site and notify Google of its address: https://www.google.com/webmasters/tools/siteoverview
Example site map:
<?xml version="1.0" encoding="UTF-8"?> <urlset xmlns="http://www.google.com/schemas/sitemap/0.84">
<url> <loc>http://www.example.com/</loc> <lastmod>2005-01-01</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> </url> <url> <loc>http://www.example.com/catalog?item=12&desc=vacation_hawaii</loc> <changefreq>weekly</changefreq> </url> <url> <loc>http://www.example.com/catalog?item=73&desc=vacation_new_zealand</loc> <lastmod>2004-12-23</lastmod> <changefreq>weekly</changefreq> </url> <url> <loc>http://www.example.com/catalog?item=74&desc=vacation_newfoundland</loc> <lastmod>2004-12-23T18:00:15+00:00</lastmod> <priority>0.3</priority> </url> <url> <loc>http://www.example.com/catalog?item=83&desc=vacation_usa</loc> <lastmod>2004-11-23</lastmod> </url> </urlset |
Group Policy Management Console: how to?
|
| | The Microsoft Group Policy Management Console (GPMC) with Service Pack 1 (SP1) unifies management of Group Policy across the enterprise. The GPMC consists of a MMC snap-in and a set of programmable interfaces for managing Group Policy.
GPMC simplifies the management of Group Policy by making it easier to understand, deploy, manage, and troubleshoot Group Policy implementations. GPMC also enables automation of Group Policy operations via scripting.
GPMC can be used to manage Windows Server 2003 as well as Windows 2000-based Group Policy implementations. Customers who have at least one valid license of Windows Server 2003 or Windows 2000 Server can obtain and use an unlimited number of copies of GPMC. Please see the End User License Agreement (EULA) provided with the GPMC software for details on licensing terms.
Key features delivered via GPMC include:
- A unified graphical user interface (GUI) that makes Group Policy much easier to use.
- Backup/restore of Group Policy objects (GPOs).
- Import/export and copy/paste of GPOs and Windows Management Instrumentation (WMI) filters.
- Simplified management of Group Policy–related security.
- HTML reporting for GPO settings and Resultant Set of Policy (RSoP) data.
- Scripting of Group Policy related tasks that are exposed within this tool (not scripting of settings within a GPO).
Prior to GPMC, administrators were required to use several Microsoft tools to manage Group Policy. GPMC integrates the existing Group Policy functionality exposed in these tools into a single, unified console, along with the new capabilities listed above.
- Click the Download link BELOW to start the download
Do one of the following:
-
- To start the installation immediately, click Open or Run this program from its current location.
- To copy the download to your computer for installation at a later time, click Save or Save this program to disk.
- To install the GPMC, run the gpmc.msi package. After you accept the End User License Agreement (EULA), all necessary files are installed to the “%Program Files%\GPMC” folder.
- Prior to starting and using the GPMC, please be sure to read the release notes RelNotes.rtf, which is located in the %Program Files%\GPMC" folder.
- After installation of the GPMC, you can open the snap-in using either of the following methods:
- You can open the pre-configured GPMC.msc file. To do this, click Start, click Run, type GPMC.msc and then choose OK. Alternatively, click the Group Policy Management shortcut in the Administrative Tools folder from the Control Panel.
- You can create a custom MMC console that contains the GPMC snap-in. To do this:
- Open MMC, by clicking Start, clicking Run, typing MMC, and then clicking OK.
- From the File menu, choose Add/Remove Snap-in, and then click Add.
- In the Add Standalone Snap-in dialog box, select Group Policy Management and click Add.
- Click Close, and then OK.
- GPMC includes several sample scripts. These are installed in the %ProgramFiles%\GPMC\Scripts folder. You should use cscript.exe to execute all of the sample scripts. For more details on scripts, see the ScriptingReadMe.rtf file in the scripts folder. For instructions and usage information for each script, run each script with the “/?” parameter.
|
Hotmail - Unable to poll for new messages error
|
| | In Outlook , click Accounts on the Tools menu. Click the Mail tab, click the Hotmail account, and then click Properties.
Click the Server tab, and then change the HTTP Server URL to the following Web address: http://oe.hotmail.com/secure/hmdata Click Apply, and then click OK.
MORE INFORMATION The original setting for the HTTP Server URL is:
http://services.msn.com/svcs/hotmail/httpmail.asp |
How do i configure a catalyst switch?
|
| |
The following procedure describes one way to configure a password for Telnet.
| Task |
Prompt |
Command |
|
Step 1 Attach a PC or workstation with emulation software to the switch console port. The data characteristics of the console port are 9600, 8, 1, no parity. When the command line appears, go to Step 2. |
|
|
|
Step 2 Enter privileged EXEC mode. |
switch>
|
enable |
|
Step 3 Enter configuration mode. |
switch#
|
configuration terminal |
|
Step 4 Enter the interface configuration mode for the Telnet interface. The 0 and 4 indicate that you are configuring all five possible Telnet sessions. |
switch(config)#
|
line vty 0 4 |
|
Step 5 Enter a password. |
switch(config)#
|
password password |
|
Step 6 Return to EXEC mode so that you can confirm the entry. |
switch(config)#
|
end |
|
Step 7 Display the running configuration. The password is listed under the command line vty 0 4. |
switch#
|
show running-config |
|
Step 8 As an option, save the running configuration to the startup configuration. |
switch#
|
write mem |
Broadcast-storm control blocks the forwarding of packets created by broadcast storms, the bursts of broadcast traffic that ports can sometimes generate. When you enable broadcast-storm control on a port, two parameters define the beginning and end of a broadcast storm. The threshold rising parameter determines when the forwarding of broadcast packets from the port is blocked. The threshold falling parameter determines when normal forwarding resumes. You can set the port to generate a trap when these thresholds are crossed (port storm-control trap), and you can disable the port during a broadcast storm (port storm-control filter).
Switch ports are referred to with the constant fastethernet and a module and port number. Fixed ports are module 0, and 1 and 2 refer to the Catalyst 2916M expansion slot ports. The following examples are valid ports:
fastethernet0/8 fa2/2 fa2/1
| Task |
Prompt |
Command |
|
Step 1 Enter privileged EXEC mode. |
switch>
|
enable |
|
Step 1 Enter global configuration mode. |
switch#
|
configure terminal |
|
Step 2 Enter interface configuration mode and define the interface to configure. |
switch(config)#
|
interface interface |
|
Step 3 Enter the port storm-control command and the two threshold parameters. |
switch(config-if)#
|
port storm-control threshold [rising number falling number] |
|
Step 4 Return to EXEC mode to verify the entry. |
switch(config-if)#
|
end |
|
Step 5 Verify that the parameters were entered correctly by using the show command. |
switch#
|
show port storm-control interface |
You can use the file system in Flash memory to copy files and to troubleshoot configuration problems. Use the dir flash: command to display the contents of Flash memory: Switch# dir flash:
Directory of flash:
2 -rwx 843947 Mar 01 1993 00:02:18 C2900XL-h-mz-112.8-SA
4 drwx 3776 Mar 01 1993 01:23:24 html
66 -rwx 130 Jan 01 1970 00:01:19 env_vars
68 -rwx 1296 Mar 01 1993 06:55:51 config.text
1728000 bytes total (456704 bytes free)
The file system uses a URL-based file specification. The following example uses the TFTP protocol to copy the file conffile.txt from the host arno to Catalyst 2900 Flash memory with the name bootfile: switch# copy tftp://arno/2900/conffile.txt flash:bootfile
You can enter the following parameters as part of a filename:
Enter the write memory command to save your configuration changes to nonvolatile random-access memory (NVRAM) so that they are not lost if there is a system reload or power outage. This example shows how to use this command to save your changes: switch# write mem
Building configuration...
It might take a minute or two to save the configuration to Flash NVRAM. After the configuration has been saved, the following appears: [OK]
switch#
After you have downloaded the new image files to your PC or workstation, you can use Telnet and the switch command-line interface ( CLI) to perform a TFTP transfer of the files to the switch. You can also connect a PC or workstation to the console port and transfer the files via XMODEM.
Because the switch Flash memory can hold only one software image file, you need to change the name of the current image file to the name of the new file you are copying. You then replace the old file with the new file when you copy it into Flash memory.
Follow these steps to upgrade the switch software by using a TFTP transfer:
Step 1 If your PC or workstation cannot act as a TFTP server, copy the files to a TFTP server to which you have access.
Step 2 Start a Telnet session on your PC or workstation, and display the switch CLI by entering the following command:
server% telnet switch_ip_address
Step 3 Enter EXEC mode:
switch> enable switch#
Step 4 Display the name of the current (default) image file. The following example shows the current name in italics:
switch# show boot BOOT path-list: flash:current_image Config file: flash:config.text Enable Break: 1 Manual Boot: no HELPER path-list: NVRAM/Config file buffer size: 32768
Step 5 Rename the current image file to the name of the new image. This does not affect the operation of the switch.
switch# rename flash:current_image flash:new_image Source filename [current_image]? Destination filename [new_image]?
Step 6 Display the contents of Flash memory to verify the renaming of the file:
switch# dir flash: Directory of flash: -rwx 910426 Mar 06 1993 23:47:28 new_image -rwx 4800 Mar 01 1993 00:04:14 html -rwx 159 Jan 01 1970 00:00:34 env_vars -rwx 1121 Mar 01 1993 18:46:01 config.text
Step 7 Enter terminal configuration mode:
switch# conf terminal Enter configuration commands, one per line. End with CNTL/Z.
Step 8 Change the name of the default image file:
switch(config)# boot system flash:new_image
Step 9 Verify that the name of the default image file is correct:
switch# show boot BOOT path-list: flash:new_image Config file: flash:config.text Enable Break: 1 Manual Boot: no HELPER path-list: NVRAM/Config file buffer size: 32768
Step 10 Use the name of the new image file when you copy it from the TFTP server to the Flash memory:
switch# copy tftp://server_ip_address//path/new_image.bin flash:new_image Source IP address or hostname [server_ip_address]? Source filename [path/filename.bin]? Destination filename [flash:new_image]? Loading /path/filename.bin from server_ip_address (via!) [OK - 843975 bytes]
Step 11 Enter the following command to copy the HTML file from the TFTP server to the switch Flash memory:
switch# tar /x tftp://server_ip_address//path/filename.tar flash:html
Loading /path/filename.tar from server_ip_address (via!) extracting advanced.gif (2648 bytes) extracting amber.gif (530 bytes)! extracting bar.gif (4156 bytes)! extracting cool.gif (530 bytes) extracting daytona.gif (1470 bytes) extracting duplgnd.gif (639 bytes)! . . .
Step 12 The new image file loads the next time you reset the switch. You can load the new software with the following command:
switch# reload System configuration has been modified. Save? [yes/no]:y Proceed with reload? [confirm]
Step 13 Press Return to confirm the reload. Your Telnet session ends when the switch resets.
This section describes the Cisco IOS command-mode structure. Each command mode supports specific Cisco IOS commands. For example, the interface type_number command is used only from global configuration mode.
The Catalyst 2900 series switches support the following command modes:
- User EXEC
- Privileged EXEC
- Global configuration
- Interface configuration
- Line configuration
Table 5-1 describes how to access each mode, the prompt you see in that mode, and how to exit the mode. The examples in the table use the host name switch.
You can use the question mark (?) and arrow keys to help you enter commands.
For a list of available commands in a command mode, enter a question mark: switch> ?
To complete a command, enter a few known characters followed by a tab (with no space): switch# sh conf<tab> switch#sh configuration
For a list of command variables, enter the command followed by a space and a question mark: switch> show ?
To redisplay a command you previously entered, press the up-arrow key. You can continue to press the up-arrow key for more commands.
Table 5-1: Command Modes Summary
| Modes |
Access Method |
Prompt |
Exit Method |
About This Mode1 |
|
User EXEC |
Begin a session with your switch. |
switch>
|
Enter the logout command or quit. |
Use this mode to:
- Change terminal settings
- Perform basic tests
- Display system information
|
|
Privileged EXEC |
Enter the enable command while in user EXEC mode. |
switch#
|
Enter the disable command to exit. |
Use this mode to verify commands you have entered. Access to this mode should be protected with a password. |
|
Global configuration |
Enter the configure command while in privileged EXEC mode. |
switch(config)#
|
To exit to privileged EXEC mode, enter the exit or end command, or press Ctrl-Z. |
Use this mode to configure parameters that apply to your switch as a whole. |
|
Interface configuration |
Enter the interface command (with a specific interface) while in the global configuration mode. |
switch(config-if)#
|
To exit to global configuration mode, enter the exit command. |
Use this mode to configure parameters for the Ethernet interfaces. |
|
Line configuration |
Specify a line with the line vty or line console command while in the global configuration mode. |
switch(config-line)#
|
To exit to global configuration mode, enter the exit command. |
Use this mode to configure parameters for the terminal line. |
1For any of the modes, you can see a comprehensive list of the available commands by entering a question mark (?) at the prompt.
|
Because many privileged EXEC commands are used to set operating parameters, you should password-protect these commands to prevent unauthorized use.
You use two commands to do this:
- enable secret password password (a very secure, encrypted password)
- enable password password (a less secure, unencrypted password)
You must enter an enable password to gain access to privileged EXEC mode.
For maximum security, the passwords should be different. If you enter the same password for both during the setup process, your switch prompts you to make them different.
An enable secret password can contain from 1 to 25 uppercase and lowercase alphanumeric characters. An enable password can contain any number of uppercase and lowercase alphanumeric characters. In both cases, a number cannot be the first character. Spaces are also valid password characters; for example, two words is a valid password. Leading spaces are ignored; trailing spaces are recognized.
If you lose or forget your enable password, refer to the "Troubleshooting" chapter for a recovery procedure.
You only have to enter enough characters for the switch to recognize the command as unique. This example shows how to enter the show configuration command: switch# show conf
The word no can be used to create a no form of a command. The no form of a command can be used:
- To reset a command to its default values.
- To reverse the action of a command. For example, the command no shutdown reverses the shutdown of an interface.
Table 5-2 lists some error messages that you might encounter while using the CLI to configure your switch.
Table 5-2: Common CLI Error Messages
| Error Message |
Meaning |
How to Get Help |
% Ambiguous command: "show
con"
|
You did not enter enough characters for your switch to recognize the command. |
Reenter the command followed by a question mark (?) with no space between the command and the question mark.
The possible keywords that you can enter with the command are displayed. |
% Incomplete command.
|
You did not enter all of the keywords or values required by this command. |
Reenter the command followed by a question mark (?) with no space between the command and the question mark. |
% Invalid input detected at
`^' marker.
|
You entered the command incorrectly. The caret (^) marks the point of the error. |
Enter a question mark (?) to display all of the commands that are available in this command mode. |
|
How to Install Dameware remote utils on 95/98/XP home
|
| | How to Install the DMRC Service Manually...
- Open your local DameWare Mini Remote Control installation folder.
Default folders: \Program Files\DameWare Development\DameWare NT Utilities or \Program Files\DameWare Development\DameWare Mini Remote Control
- Locate and copy the DWRCS.exe, DWRCK.dll, DWRCSET.dll and DWRCShell.dlx files to the remote machine.
For Windows NT/2000/Xp, place all files in the System32 folder. For Windows 95/98/Me place all files in the \Windows\System folder.
- At a command prompt on the remote machine execute the following command:
DWRCS -install
This will install the Mini Remote Client Agent as a service. You can also run the Client Agent as an application by simply executing the DWRCS.exe but when the computer reboots or if the user exits the application, the server will not be available. |
How to Manually Uninstall ACT!
|
| | Product(s): ACT! 5.0 - PC; ACT! 6.0 - PC; ACT! 2000 - PC; ACT! 3.0 - PC; ACT! 4.0 - PC Operating System(s):Windows 2000; Windows 95; Windows 98; Windows ME; Windows NT; Windows XP Home; Windows XP Pro
Note: If you have any ACT! add-ons installed, we recommend you uninstall those prior to uninstalling ACT!. Add-ons include the following items: ACT! Link 2.0 for Palm OS/ACT! PalmPilot Link ACT! Link for QuickBooks ACT! for Palm OS ACT! Link for Pocket PC ACT! Link for Peachtree
Caution: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure you modify only the keys specified. See the correct section below for your operating system:
Windows XP/2000/ME/98/95 Windows XP/2000/ME/98/95
Perform the following steps to back up the entire registry: Click the Windows Start button, then click Run. The Run dialog appears. Type regedit into the Open window, then click OK. The Registry Editor opens. Click the Registry menu, then click Export Registry File. (Windows XP users; click the File menu, then click Export) The Export Registry File dialog appears.
Establish the following settings in the Export Registry File dialog: Save In: Desktop File Name: Registry Backup Save as Type: Registration Files (*.reg) Export Range: All Click Save. Exit the Registry Editor. Verify that an icon labeled with the exact File name you entered is located on your Desktop. Caution: Do not double-click the registry backup.reg file on the desktop unless you intend to undo changes you've made after the backup was created and restore your current registry settings. .
After Changing the Registry After making changes to the registry, immediately verify that the results are what you expected. If the results were not what you expected and you want to restore the registry to its previous state, double-click the registry backup.reg file. If the results are accurate and no other issues are apparent, delete (or move) the registry backup.reg file. If you allow this file to remain on the desktop beyond the test period, you may accidentally restore the original registry settings.
Windows NT Windows NT Windows NT provides a variety of ways to back up the Windows NT registry. For more information about Windows NT backup methods, see articles Q126464 and Q122857 in the Microsoft Knowledge Base at http://support.microsoft.com/support
This simple method backs up the Windows NT registry files onto a floppy diskette: Click Start, then click Run. The Run dialog box appears. Enter RDISK /S, then click OK. The Saving Configuration window opens. When the process is finished, the Setup window opens. Click Yes to create an Emergency Repair Disk (ERD). Follow the on-screen prompts. When you are done, label the disk "Emergency Repair Disk" and include the current date. Locate the three Setup disks that came with your copy of Windows NT. Store them with the Emergency Repair Disk. When used with the Setup disks, the ERD can restore the backup even when Windows NT is not bootable.
Note: If you do not have the three Windows NT Setup Disks, you can make your own. For more information, see article Q131735 in the Microsoft Knowledge Base.
This process also makes a second backup of the current registry files in the \Windows\Repair folder on the hard drive. These files are compressed. This backup might not be accessible later if you cannot boot into Windows NT.
After Changing the Registry After making changes to the registry, immediately verify that the results are what you expected. If the results are not what you expected and you want to restore the registry to its previous state, boot with the first diskette of the three Windows NT Setup diskettes. When the computer has booted, click Repair, and choose Registry. You will have a choice for which parts of the registry to restore.
Remove ACT! from the Registry To remove the ACT! keys from the registry, please follow these steps: Click the Windows Start button, and then click Run. The Run dialog appears. Type regedit into the Open window, then click OK. The Registry Editor launches. For each of the keys in the list that follows: Browse to and select the key. Press the Delete key on your keyboard, and then click Yes to confirm. When all keys are deleted, exit the Registry Editor. Delete the following ACT! keys:
Note: There are different Registry Keys for each ACT! Version, be sure you are selecting the appropriate set of registry keys to delete. ACT! 6.0 HKEY_CLASSES_ROOT\ACT!.Application HKEY_CLASSES_ROOT\ACT!.Database HKEY_CLASSES_ROOT\ACT!.Document HKEY_CLASSES_ROOT\ACT!.Envelope.Template HKEY_CLASSES_ROOT\ACT!.Label.Template HKEY_CLASSES_ROOT\ACT!.Report HKEY_CLASSES_ROOT\ACT!.Report.Template HKEY_CLASSES_ROOT\ACT!.WP.Template HKEY_CLASSES_ROOT\Act.Word6Drv.1 HKEY_CLASSES_ROOT\ACT2000AgentEx.CoACT2000AgentEx. HKEY_CLASSES_ROOT\ACT30.APPOBJECT HKEY_CLASSES_ROOT\ActAbout.AboutDlg HKEY_CLASSES_ROOT\ActAbout.AboutDlg.1 HKEY_CLASSES_ROOT\ActEmail.aActEmailConn HKEY_CLASSES_ROOT\ActEmail.aActEmailConn.1 HKEY_CLASSES_ROOT\ACTEVENT.ActEventCtrl.1 HKEY_CLASSES_ROOT\ActiveActX.ActiveAct HKEY_CLASSES_ROOT\Actksn.ksn HKEY_CLASSES_ROOT\Actksn.ksn.1 HKEY_CLASSES_ROOT\actMHTML.MIMEHTML HKEY_CLASSES_ROOT\ActMsg.Session HKEY_CLASSES_ROOT\ACTOLE.APPOBJECT HKEY_CLASSES_ROOT\ACTOLE.AUXCMDS HKEY_CLASSES_ROOT\ACTOLE.DATABASE HKEY_CLASSES_ROOT\ActPicker.coActPicker HKEY_CLASSES_ROOT\ACTSRC.ACTEVENTSOURCE HKEY_CLASSES_ROOT\ActWP.Document HKEY_CLASSES_ROOT\ActWrite HKEY_CLASSES_ROOT\SideACT!.Document
HKEY_CURRENT_USER\Software\Act Email HKEY_CURRENT_USER\Software\Symantec\ACT! HKEY_CURRENT_USER\Software\Symantec\ACT! Alarms HKEY_CURRENT_USER\Software\Symantec\ACT! Word Processor
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\ACT! HKEY_LOCAL_MACHINE\SOFTWARE\Interact HKEY_LOCAL_MACHINE\SOFTWARE\Interact Commerce HKEY_LOCAL_MACHINE\SOFTWARE\Interact Commerce\ACT! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\act.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\actdiag.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ACT! HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\ACT!
HKEY_USERS\.DEFAULT\Software\Symantec\ACT! HKEY_USERS\.DEFAULT\Software\Symantec\ACT! Word Processor
ACT! 5.0 (2000), ACT! 4.x, ACT! 3.x, HKEY_CLASSES_ROOT\ACT!.Application HKEY_CLASSES_ROOT\ACT!.Database HKEY_CLASSES_ROOT\ACT!.Document HKEY_CLASSES_ROOT\ACT!.Email HKEY_CLASSES_ROOT\ACT!.Envelope.Template HKEY_CLASSES_ROOT\ACT!.Label.Template HKEY_CLASSES_ROOT\ACT!.Report HKEY_CLASSES_ROOT\ACT!.Report.Template HKEY_CLASSES_ROOT\ACT!.WP.Template HKEY_CLASSES_ROOT\Act.Word6Drv.1 HKEY_CLASSES_ROOT\ACT2000AgentEx.CoACT2000AgentEx. HKEY_CLASSES_ROOT\ACT30.APPOBJECT HKEY_CLASSES_ROOT\ACTEVENT.ActEventCtrl.1 HKEY_CLASSES_ROOT\ActWrite HKEY_CLASSES_ROOT\SideACT!.Document
HKEY_CURRENT_USER\Software\Symantec\ACT! HKEY_CURRENT_USER\Software\Symantec\ACT! Word Processor
HKEY_LOCAL_MACHINE\Software\Symantec\ACT HKEY_LOCAL_MACHINE\Software\Symantec\ACT! 4.0 for Windows HKEY_LOCAL_MACHINE\Software\Symantec\ACT!andWinFax HKEY_LOCAL_MACHINE\Software\Symantec\EMS32\ACT! HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ACT! 2000 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ACT!
HKEY_USERS\.DEFAULT\Software\Symantec\ACT! HKEY_USERS\.DEFAULT\Software\Symantec\ACT! Word Processor
Remove Leftover Files How you do this depends upon whether you intend to reinstall ACT!, and whether you have files or data you want to save.
If you do not intend to reinstall ACT!, and do not want to save any databases, files, templates, and so on, follow the instructions under the heading Removing All ACT! Files from the Computer. All files will be deleted, and all data will be lost. If you intend to reinstall, or you have databases or files that you want to save, follow the steps in the section titled Just removing ACT! Program Files.
Removing All ACT! Files from the Computer
Note: By following this process, ALL files concerning ACT! will be deleted and all data will be lost.
ACT! 6.0/5.0(2000) Remove these folders ACT! 6.0/5.0 - C:\Program Files\ACT! and My Documents\ACT. ACT! 2000/4.0 - C:\Program Files\Symantec\ACT and My Documents\ACT. Restart the computer
ACT! 4.x/3.x Remove the following folder:
C:\ACT
Restart the computer
Just Removing ACT! Program Files Open the \ACT folder. The default location for this is ACT! 6.0/5.0 - C:\Program Files\ACT ACT!2000\4.0 - C:\Program Files\Symantec\ACT In the right pane, select any files that are displayed. If you previously ran the uninstall program, there may be only a few files, or there may be many. Make sure that only files, not folders, in the \ACT parent folder are selected. Do not select (or remove) any of the yellow subfolders or their contents. Press the Delete key on you keyboard. Restart the computer.
|
How to Setup Internet Connection Sharing (ICS)
|
| | How to Setup Internet Connection Sharing (ICS)
Windows 2000 supports both Network Address Translation (NAT) and Internet Confection Shading (ICS) al1ow workgroup users to access to the Internet.. Windows 2000/XP Professional support only ICS. Internet Connection Sharing (ICS) enables a Windows (Win98SE, Win2K and XP) computer to share its Internet connection with computers on local area networks. The computer connecting directly to the Internet and shares its connection with the rest of the computers on the network called the ICS host. In addition, the ICS host provides DHCP to ICS clients. Client computers are protected because they cannot be seen from outside the network. Only the computer running ICS is seen from the public side.
We assume you have all computers physically connected, and the ICS host have two network connections: one (for example Internet in our case) for the Internet such as a dial-up (PPP or ISDN), cable modem, DSL, or other broadband Ethernet connection, and another one (LAN) , for the local area network.
Things you should know about ICS
1. When you enable Internet Connection Sharing, IP address of the Interne NIC in the ICS server is always 192.168.0.1. All clients will be assigned other IP addresses in the 192.168.0.x range. 2. You should not enable ICS on the computer as a domain controller, DHCP server, or DNS server. 3. To enable ICS, you must be logged on as a member of the Administrators 4. You may experience some problems if you use NetMeeting and VPN in your ICS network.
Enabling Host ICS - WinXP
To configure a WinXP ICS host, go to Start>Control Panel>Network Connation. Highline the Internet which connecting to a cable modem in our case. Under Network Tasks, click Change settings of this connection. On the Advanced tab, select the Allow other network users to connect through this computer's Internet connection check box.
Configuring ICS Client
To setup a win9x (in our case) as ICS client to access the internet, you need to do two things. network settings and internet option settings.
1. Network settings must be set Obtain IP Address Automatically - to do this, go to Network>Properties of TCP/IP. 2. The Internet browser should se set never dial a connection and no proxy server - go to Internet Options>Connection and LAN settings.
Can ping other computer and Internet but not default gateway IP
Symptoms: you are running ICS on XP and all networking computers can access the Internet. Problems: 1) you can't access the ICS host. 2) you can ping other networking computers and Internet IP but not ICS host. 3) when using tracert (public) ip, the default gateway, ICS, is time out. After passing the gateway, all IPs reply.
Resolutions: 1) disable ICF. 2) there is firewall running and you may need to disable.
Click for help Your feedback and contributions to this web site
"Cannot enable shared access" while setup ICS
SYMPTOMS: When you try to enable ICS on your Win2K/XP on a network, you may receive the following error message: "Cannot enable shared access." and "Error 783: Internet Connection Sharing cannot be enabled. RESOLUTION: When you enable ICS, your computer is assigned the 192.168.0.1 IP address, and if this address is already in use on another computer, the error message listed earlier in this article is generated. To work around this problem, disconnect the computer using the 192.168.0.1 IP address from the network, or change its IP address to something other than 192.168.0.1.
Can't access the Internet by name through the NAT enabled server
Symptom: you set up NAT on your Routing and Remote Access server. The users can connect to the Internet using IP addresses but not the web site name. How can you fix it?
Resolution: on the properties dialog box of the NAT server in the Routing and Remote Access console, check the Clients Using Domain Name System under the Name Resolution tab.
ICS dial-up runs automatically after another computer logon
Symptoms: after you setup ICS on an XP dial-up connects to the internet, the dial-up connects to the ISP automatically whenever a user logs on to another XP box on the network (without running IE).
Resolution: there are some applications such as MS messenger and Anti-Virus Live Update that may be trying to access the internet on boot. For this reason, by default the ICS connection will connect to the internet when there is any traffic from the network. To disable this feature, open the Network Connections folder and right-click on the connection that is shared. Click the advanced tab and uncheck the "Establish a dial-up connection whenever a computer on my network attempts to access the internet". If you make this change then you will have to connect to the internet manually from the ICS box so that others can use it.
ICS with a yellow exclamation point
SYMPTOMS: When you view the ICS Adapter in Device Manager, you may see a yellow exclamation point. This issue can occur if you do not run the ICS Setup wizard after you install Windows.
RESOLUTION: 1) To resolve this issue, run the ICS Setup wizard. To do this, go to the Connections properties, click Sharing. 2) If the ICS Adapter is not in Device Manager, you must reinstall ICS. To do this, go to Add/Remove Programs>Windows, uncheck Internet Tools first. After rebooting, recheck Internet Tools.
Client uses Static IP
Many people have a difficulty to make static IP client to work with ICS. The client and host can ping each other but not Internet. Since the client is assigned static IP so that it also need to be assigned the DNS. To do that, go to properties of TCP/IP>Advanced>DNS to add your ISP DNS.
ZoneAlarm Firewall Issue
If you are using ZoneAlarm Firewall, that may be the problem for the ICS. |
How to Use the Netsh.exe Tool & cmd line switches
|
| | Netsh.exe is a tool an administrator can use to configure and monitor Windows-based computers at a command prompt. With the Netsh.exe tool, you can direct the context commands you enter to the appropriate helper, and the helper then carries out the command. A helper is a Dynamic Link Library (.dll) file that extends the functionality of the Netsh.exe tool by providing configuration, monitoring, and support for one or more services, utilities, or protocols. The helper may also be used to extend other helpers.
You can use the Netsh.exe tool to perform the following tasks:
Configure interfaces. Configure routing protocols. Configure filters. Configure routes. Configure remote access behavior for Windows-based remote access routers that are running the Routing and Remote Access Server (RRAS) Service. Display the configuration of a currently running router on any computer. Use the scripting feature to run a collection of commands in batch mode against a specified router. The syntax for the Netsh.exe tool is:
netsh [-r router name] [-a AliasFile] [-c Context] [Command | -f ScriptFile]
To display a list of subcontexts and commands that can be used in a context, type the context name followed by a space and a ? at the netsh> command prompt. For example, to display a list of subcontext and commands that can be used in the /routing context, type routing ? at the netsh> command prompt, and then press ENTER.
Context strings are appended to the Netsh.exe tool command and are passed to an associated helper. The helper may have one or more entry points that map to contexts. Some of the contexts available in the Netsh.exe tool are:
Context Command: /dhcp Result: Changes to the Dynamic Host Configuration Protocol (DHCP) context.
Context Command: /ras Result: Changes to the Remote Access Server (RAS) context.
Context Command: /routing Result: Changes to the routing context.
Context Command: /wins Result: Changes to the Windows Internet Name Service (WINS) context.
Contexts may also nest within other contexts. For example, the following contexts operate within the netsh>ras context:
Context Command: /ip Result: Changes to the Internet Protocol (IP) context.
Context Command: /ipx Result: Changes to the Internetwork Packet Exchange (IPX) context.
Context Command: /netbeui Result: Changes to the NetBios Enhanced User Interface (NETBEUI) context.
The following subcontexts operate within the netsh>routing ip context:
Context Command: /autodhcp Result: Changes to the autodhcp subcontext.
Context Command: /dnsproxy Result: Changes to the dnsproxy subcontext.
Context Command: /igmp Result: Changes to the Internet Group Membership Protocol (IGMP) subcontext.
Context Command: /mib Result: Changes to the Management Information Base (MIB) subcontext.
Context Command: /nat Result: Changes to the Network Address Translation (NAT) subcontext.
Context Command: /ospf Result: Changes to the Open Shortest Path First (OSPF) subcontext.
Context Command: /relay Result: Changes to the relay subcontext.
Context Command: /rip Result: Changes to the Routing Information Protocol (RIP) subcontext.
Netsh.exe Commands The following additional commands can be used with the Netsh.exe tool:
NOTE: Optional parameters are shown in brackets ([ ]). Alternative entries are shown with a pipe (|) character between them.
Context Command: /? Result: Displays help.
Context Command: /abort Result: Discards any changes made in offline mode. No effect in online mode.
Context Command: /add helper DLL-name Result: Installs the helper .dll file in netsh.exe.
Context Command: /alias [alias-name] [string1] [string2 ...] Result: If /alias, lists all aliases. If /alias alias-name, displays the equivalent string. If /alias alias-name string1 string2 ..., sets alias-name to the specified strings.
Context Command: /bye Result: Exits the program.
Context Command: /commit Result: Commits any changes made in the offline mode to the router. No effect in the online mode.
Context Command: /delete helper .dll file name Result: Removes the helper .dll file from Netsh.exe.
Context Command: /dump -file name Result: Dumps or appends configuration to a text file.
Context Command: /exec script file name Result: Loads the script file and executes commands from it.
Context Command: /exit Result: Exits the program.
Context Command: /h Result: Displays help.
Context Command: /help Result: Displays help.
Context Command: /offline Result: Sets the current mode to offline. Any changes made in this mode are saved, but require a "commit" or "online" command to be set in the router.
Context Command: /online Result: Sets the current mode to online. Any changes in this mode are immediately reflected in the router.
Context Command: /popd Result: Pops a context from the stack.
Context Command: /pushd Result: Pushes current context onto the stack.
Context Command: /quit Result: Exits the program.
Context Command: /set mode [mode =] online | offline Result: Sets the current mode to online or offline.
Context Command: /show alias | helper | mode Result: If /show alias, lists all defined aliases. If /show helper, lists all top-level helpers. If /show mode, shows the current mode.
Context Command: /unalias alias name Result: Deletes the specified alias.
Helper Dynamic Link Libraries Files Available Routing & Remote Access IP Configuration - Ipmontr.dll Routing & Remote Access IPX Configuration - Ipxmontr.dll Interface - Ifmon.dll RAS - Rasmontr.dll DHCP - Dhcpmon.dll WINS - Winsmon.dll
Associated Registry Entries for Helper Dynamic Link Libraries Files HKEY_LOCAL_MACHINE/Software/Microsoft/NetSh/
REG_SZ: Ipmontr.dll REG_SZ: Ipxmontr.dll REG_SZ: Ifmon.dll REG_SZ: Rasmontr.dll REG_SZ: Dhcpmon.dll REG_SZ: Winsmon.dll
NOTE: If attempts to use Netsh dump - to dump configurations to a file does not work, try using the syntax: netsh dump >filename or path\filename, from a command line.
EXAMPLES....
To change a system from static IP addressing to dynamic DHCP-based addressing: Open a command prompt and enter the following command:
netsh interface ip set address "<connection name>" dhcp
where connection name is the name of the LAN adapter on which you're making the IP address configuration change. (By default, this adapter is called local area connection, but it might have a different name on machines with multiple LAN adapters or on machines that an administrator has manually renamed.) To make the reverse change that is, to change a connection or adapter from DHCP-configured addressing to static addressing enter the following command:
netsh interface ip set address "<connectiuon name>" static <IP_address> <netmask> <gateway> <metric>
Where ip_address is the static IP address you wish to assign to the connection, netmask is the subnet mask (e.g., 255.255.255.0) associated with the IP address, gateway is the default gateway (if any) on the local IP subnet, and metric is an optional numeric value (e.g., 1, 2) that defines the number of hops to the default gateway (if one exists).
For example, to change from DHCP-based addressing to the static IP address 10.1.1.2, mask 255.255.255.0, and gateway 10.1.1.1 (metric 1), you'd enter
netsh interface ip set address "local area connection" static 10.1.1.2 255.255.255.0 10.1.1.1 1
To change the IP address of a remote system on the network ad the required IP address in same command and then the same command can be made to run at the remote system by adding it to the scheduler of the remote system.
|
IE6 Repair
|
| | Start run - rundll32 setupwbv.dll,IE6Maintenance
To perform a download-only installation from the Internet:
1. On the following Internet Explorer download page, click the appropriate language version to download the Ie5setup.exe or Ie6setup.exe file:
http://www.microsoft.com/windows/ie/
2. Click Save to Disk (or Save), and then save the file in a folder on your computer.
3. Click Start, and then click Run.
4. Click Browse, browse to the folder in which you saved the Ie5setup.exe file or Ie6setup.exe file, click to highlight the file, and then click Open.
5. In the Open box, click at the end of the command, add a space, and then type the following command for Internet Explorer 5 or 6.
NOTE: Double quotation marks around the variable #e are required, because #e designates the source path, including executable, of the Ie5setup.exe or Ie6setup.exe as appropriate.
/c:"ieXwzd.exe /d /s:""#E"
For example, if you saved the IE setup file (Ie5setup.exe or Ie6setup.exe) file in the C:\Windows Update Setup Files folder, the command looks like:
"C:\Windows Update Setup Files\ie5setup.exe" /c:"ie5wzd.exe /d /s:""#E"
The following is an explanation of the command line switches used:
· /d - Downloads Internet Explorer for the current platform only. However, if you would like to download all platforms, you can use the /d:1 switch value to get all platforms. There are only two values for this switch, /d and /d:1.
· /s:""<#e>"" - Designates the source path of Ie5setup.exe. The ""<#e>"" value refers to the full path and name of the .exe file. Note that two pairs of double quotation marks must surround the path.
6. Press ENTER. Choose the appropriate items for the operating system.
NOTE: To download Internet Explorer to a network drive, you must map the network drive to a drive letter on your computer. You cannot download Internet Explorer to a Universal Naming Convention (UNC) path.
|
Install RAS Server
|
| | Installing RAS After NT Installation The steps you need to follow if you’re installing RAS after installing Windows NT Server on your computer are as follows:
- While logged on with administrator privileges, click the Start
Settings Control Panel option. Double-click the Modems choice.
- Follow the Modem Wizard through the modem detection process. When you complete modem installation, you should see a Modem Properties dialog box.
- While still logged on with administrator privileges, select the Start
Settings Control Panel option. Double-click the Network entry to start the Network Control Panel Appli-cation (NCPA).
- In the Network dialog box, click the Services tab. Then click Add.
- Under Network Services, select the Remote Access Service option and click OK.
- NCPA asks for the path to the system files on your Windows NT Server 4.0 CD-ROM. Insert the NT CD-ROM in your CD-ROM drive. Type the path and click Continue.
Type the drive letter of your CD-ROM and the subdirectory corresponding to your CPU platform.
- If RAS can’t detect your serial port, modem, or other RAS device, you’ll see the error message shown in Figure 6-1. If you see this message, click OK, then recheck the configuration and connection of your serial ports, modems, ISDN adapters, and so on. Then go back to Step 1. If you don’t see this message, go to Step 8.
- In the Add RAS Device dialog box, verify that your serial ports, modems, and other RAS devices are listed correctly. Then click OK.
If you need to install an additional modem, select the Install Modem option and follow the prompts. If you need to install an X.25 device, click the Install X.25 Pad entry and follow the prompts.
- In the Remote Access Setup dialog box, select the Configure option to establish how RAS will use the device.
- In the Configure Port Usage dialog box under Port Usage, choose either the Dial out only, Receive calls only, or Dial out and Receive calls options. Then click OK, as shown in Figure 6-2.
The default entry is Receive calls only. This is the correct setting for a typical RAS server. If you’re going to enable security callback of clients, you should select the Dial out and Receive calls option. Also, if you’re going to act as a RAS client from the RAS server computer, you can enable dial-out capability.
- In the Remote Access Setup dialog box, select the Network option to configure network protocols used by RAS.
- In the Network Configuration dialog box, under Server Settings, click to set or clear the check boxes associated with the network protocols that you’re planning to run on RAS clients (see Figure 6-3).
You can choose any or all of NetBEUI, IPX/SPX, or TCP/IP. Just be sure that you’re already running these protocols on the NT Server computer where you’re installing the RAS server.
- If you’ve selected NetBEUI, click the Configure entry next to NetBEUI. If you want to grant NetBEUI clients access to the RAS server only, and not to the entire network, select the This computer only option. Then click OK.
Otherwise, RAS clients running NetBEUI have access to nodes on the network running the NetBEUI protocol. Unless you have a specific reason for limiting access to just the RAS server, grant these clients access to the entire network.
- If you’ve selected TCP/IP, select the Configure entry next to TCP/IP (see Figure 6-4). If you want to grant TCP/IP clients access to the RAS server only, and not to the entire network, click the option for This computer only.
If you want to control the range of IP addresses assigned to RAS clients, select the Use static address pool option. Then type the range of IP addresses that the RAS server can assign and any IP address ranges to exclude from automatic assignment. Click OK.
- If you’ve selected IPX, click the Configure entry next to IPX. If you want to grant IPX clients access to the RAS server only, and not to the entire network, select the This computer only option. Then click OK.
- In the Network Configuration dialog box, click OK. In the Remote Access Setup dialog box, click Continue.
- NCPA again asks for the path to the system files on your Windows NT Server 4.0 CD-ROM. Verify that the NT CD-ROM is in your CD-ROM drive. Type the path and click Continue.
- Click Close. After configuration completes, restart your computer as prompted.
- Start the Remote Access Admin utility by selecting the Start
Programs Administrative Tools Remote Access Admin entry (see Figure 6-5).
- On the Users menu, click the Permissions check box. In the Remote Access Permissions dialog box (shown in Figure 6-6), select individual user accounts that are used on RAS clients and configure their dial-in and callback permissions. When you’re done, click OK.
Enabling PPTP PPTP is a feature in Windows NT Server 4.0 that enables you to create virtual private networks (VPNs) over the Internet. You can create a completely secure connection between remote client computers and your corporate network while running NetBEUI, TCP/IP, IPX, or any combination of these protocols. PPTP encapsulates and encrypts packets before sending them on the Internet. As a result, you can shift the burden of supporting modems or ISDN adapters to Internet Service Providers (ISPs) and save the money you’d have spent on long-distance dial-in charges.
To use PPTP, you must enable it for each network adapter that participates in PPTP connections. For a PPTP connection to succeed, both the RAS server and the client must have PPTP installed. Once you install PPTP on a specific network adapter, only PPTP packets get through this network adapter to your computer. Other packets are ignored. Thus, you typically want to have multiple network adapters in your server, and the one dedicated to PPTP connected to the Internet. The remaining adapters should be connected to your corporate network. Client computers running PPTP can then gain access to your corporate network through the dedicated adapter in your server.
Before enabling PPTP, you need to have the TCP/IP protocol already installed. Once you have TCP/IP installed, complete these steps to enable PPTP on your server:
- While logged on with administrator privileges, select the Start
Settings Control Panel option. Double-click the Network entry to start the Network Control Panel Application (NCPA).
- In the Network dialog box, click the Protocols tab. Select TCP/IP Protocol and click Properties.
- In the Microsoft TCP/IP Properties dialog box, click the IP Address tab. Then click Advanced.
- Select the adapter you want to participate in PPTP connections and click the Enable PPTP Filtering check box. When you’re done, click OK.
If you want more than one of your adapters to filter for PPTP packets, repeat this step for each of them.
- In the Microsoft TCP/IP Properties dialog box, click OK.
- Click Close and restart the computer as prompted.
|
Install the File Copy Tool for Terminal server
|
| | This article describes how to install the File Copy tool included with the Microsoft Windows 2000 Resource Kit. The File Copy tool adds file transfer functionality to the clipboard redirection feature in Microsoft Terminal Services. This tool can be used on client computers running Microsoft Windows for Workgroups, Microsoft Windows 95, Microsoft Windows 98, Microsoft Windows NT 4.0, and Windows 2000.
To make the File Copy tool work, you need to make changes on the Windows 2000 Server as well as each client.
Windows 2000 Server
- Install the Windows 2000 Resource Kit.
- Download and install "Rdpclip_hotfix.exe" from the following Microsoft Web site:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/hotfixes/rdpclip-o.asp
- Check the follow files and version numbers:
C:\Program Files\Resource Kit\rdpclip.exe 5.0.2205.1
C:\Program Files\Resource Kit\fxfr.dll 5.0.2064.1
C:\Program Files\Resource Kit\rdpdr.dll 5.0.2205.1
NOTE: The path that the reskit is installed in can vary.
- Open Regedt32, and then change the value data in the Name value from RDPCLIP to FXRDPCLP in the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\AddIns\Clip Redirector
- Change the value data in the Startup Programs value from RDPCLIP to FXRDPCLP in the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd NOTE: If you have installed Drive Share, change the value data in the Startup Programs value to RDPCLIP,DRMAPSRV.
- Rename the new Rdpclip.exe file (located in the resource kit folder) included in the Windows 2000 Resource Kit to Fxrdpclp.exe, and then copy the file to the Winnt\System32 folder.
- Copy the Fxfr.dll file (located in the resource kit folder) to the Winnt\System32 folder.
- Restart the computer.
For the Windows 95, Windows 98, Windows NT, or Windows 2000 Clients
- Copy the 32-bit Fxfr.dll file to the "Program Files\Terminal Services Client" folder.
- Rename the Rdpdr.dll file in the "Program Files\Terminal Services Client" folder to Rdpdr.pss.
- Copy the 32-bit Rdpdr.dll file to the "Program Files\Terminal Services Client" folder.
IMPORTANT: The files and instructions for installing Rdpclip.exe in this article only apply to the original Windows 2000 Terminal Services client. Do not use these instructions if you are using the Terminal Services client that ships as part of Service Pack 1 (also known as the Terminal Services Advanced client or TSAC) or the Remote Desktop Connection client that can be downloaded from the Web. Please contact Microsoft Product Support for further help.
REFERENCES
For additional information about Drive Share, click the article number below to view the article in the Microsoft Knowledge Base:
244725 Using Drive Share with Terminal Services
For additional information on the Windows 2000 Resource Kit, click the article number below to view the article in the Microsoft Knowledge Base:
257987 Windows 2000 Resource Kit Rdpclip Utility Is Missing Files
Windows 2000 Resource Kit and the URL has been changed to the following:
http://www.microsoft.com/windows2000/techinfo/reskit/default.asp
For additional information, click the article number below to view the article in the Microsoft Knowledge Base:
278139 Rdpclip and Drmapsrv Are Unsupported with Terminal Services Advanced Client
|
Internal Error 2755. 1632 setup fails
|
| | This problem occurs when the following conditions are all true:
You install on a Microsoft Windows NT 4.0 or Microsoft Windows 2000.
-and-
The WinNT folder is located on an NTFS partition.
-and-
You have a folder called Installer under the WinNT folder, and you do not have full access permissions to the Installer folder.
To resolve this problem, change the permissions on the Installer folder to:
Everyone - Read (RX) Administrators - FullControl SYSTEM - FullControl
The installer folder is a protected folder. To change perms you will have to go to: Windows Explorer - Tools - Folder Options - Select View. Un-check: Hide protected Operating System Files. The Installer folder is now visible under \Winnt
|
Internet Browser Troubleshooting
|
| | Can't run IE
Symptoms: when running IE, you may get the following errors:
- The Page Cannot Be Displayed.
- Cannot open the Internet site Web address. A connection with the server could not be established.
- The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.
- Cannot find server or DNS Error.
- An internal error occurred in Windows Internet extensions.
- DNS error and Web page cannot found
Resolutions:
1) Make sure you have loaded TCP/IP. If not, go to Control Panel>Network>Configuration>add>Protocol. 2) Verify network settings by using ping and ipconfig. If you can't ping 127.0.0.1, go to back to 1) or remove and re-install TCP/IP. If you can't ping the router ip, use ipconfig to make sure they are in the same subnet. If you can't ping outside ip or public ip, make sure the computer have correct default gateway. If you can ping public ip but not web site like yahoo.com, check the DNS settings. 3) Make sure the Use a Proxy Server check box is unchecked if you do not use a proxy server. To do this, go to IE>Tools>Internet Options>Connections>LAN Settings. 4) Disable or remove any software like Comet Cursor may cause IE problem. You can use msconfig to disable. 5) Make sure that there are no parental restrictions on the account after installing ICS with AOL. 6) If you can connect to the site using the IP but not the Fully Qualified Domain Name (FQDN) such as yahoo.com, check for entries in the Hosts file on the local computer, or rename it. 7) Check network properties and look for multiple instances of the TCP/IP protocol bound to the dial-up adapter. If multiple instances of the TCP/IP protocol are bound to the dial-up adapter, unbind the protocol so that only a single protocol (TCP/IP) is bound to the dial-up adapter. To do this, Network Neighborhood>Properties, click one of the TCP/IP dial-up adapter settings, click Remove, and then click OK. 8) Check for multiple instances of the Wsock32.dll, Winsock.dll, and Wsock.vxd files. Also check the dates and versions of these files. Rename any file that is not in the appropriate folder (Wsock32.dll and Wsock.vxd should be in the Windows\System folder, and Winsock.dll should be in the Windows folder). 9) Clean cookies and Internet Temp files. 10) You may want to logon another user if you are running w2k/xp. 11) You may want to use mscomfig disable some software such as Xupiter, Gator and Comet Cursor. Re-install IE or upgrade it. We may wan torename all Winsock.dll, Wsock.vxd and Wsock32.dll before the installation.
Can't retrieve e-mail from Hotmail through Outlook Express.
SYMPTOMS: When trying to retrieve e-mail messages from Hotmail through Outlook Express, you may receive the following error messages: "The server could not be found", "Unable to poll for new messages on your HTTP server. Account 'Hotmail', Server 'http://services.msn.com/svcs/hotmail/httpmail.asp', Protocol HTTPMail Server Response: 'Proxy Authentication Required' (The ISA Server requires authorization to fullfill the request. Access to the Web Proxy services is denied.)', Port 0, Secure(SSL): No, Error Number: 0x800CCC37", or "Unable to poll for new messages on your HTTP server. Account 'Hotmail', Server 'http://services.msn.com/svcs/hotmail/httpmail.asp', Protocol HTTPMail Server Response: 'Forbidden ( The ISA Server denies the specified Uniform Resource Locator (URL). )', Port 0, Secure(SSL): No, Error Number: 0x800CCC33"
Resolutions:: This issue occurs because Outlook Express might not be able to pass authentication credentials through ISA Server. 1. Add *.hotmail.com;*.msn.com into Exception under IE>Tools>Internet Options>Connection>LAN Settings>Proxy Settings>Advanced. 2. Use the firewall client and uncheck proxy settings under Internet Options 3. Configure the HTTP redirector filter to send to the requested Web server on the ISA server. To do this, go to ISA Management>Extensions>Application Filters>HTTP Redirector Filter>Options, check Send to requested Web server. 4. Configure protocol rules and site and content rules to apply to any request under ISA server. To do this, go to ISA Management>Access Policy>Site and Content Rules or Protocol Rules, double-click the appropriate policy and then click the Applies to tab, and then click Any Request. 5. If you are running a Windows 2000 Domain. you can force authentication by using the Windows credentials. To do this, go to AD Domains and Trusts, right click where it says "Active Directory Domains and Trusts" and choose properties. Add a new UPN suffix such as hotmail.com and msn.com. Then create a user with the same name and password as your hotmail account. Set the UPN for that account to the hotmail.com or msn.com UPN created in the previous step. Note: this would need to be done for every client that accesses hotmail. It is recommended that the rights of these accounts be restricted, perhaps placing them in a special group. If you are using user/group access restrictions in ISA, make sure these users are granted access. |
Internet Explorer errors
|
| | Internet Explorer Errors |
IP address conflicts DHCP
|
| | You should enable conflict detect which will prevent the DHCP server from giving out addresses that are already in use. You should then investigate the source of the IP conflicts. The server will not give out an address that it already has as leased in it's database. This is typically caused by a rouge DHCP server on your network.
To enable conflict detection, open the DHCP MMC. Right click on the DHCP server and choose properties. Click on the Advanced tab and set the "Conflict detection attempts" value to 3. To find out if there is a rouge DHCP server, setup a packet sniffer on your network at various locations and see if multiple DHCP servers respond to client DHCP requests. |
IP Config tool for XP
|
| | IP config is not included in Windows XP!
Look below and download the IP config tool for XP. The file is in .zip format. |
IP Conflicts with WIN 9x machines
|
| | You should enable conflict detect which will prevent the DHCP server from giving out addresses that are already in use. You should then investigate the source of the IP conflicts. The server will not give out an address that it already has as leased in it's database. This is typically caused by a rouge DHCP server on your network.
To enable conflict detection:
- Open the DHCP MMC.
- Right click on the DHCP server and choose properties.
- Click on the Advanced tab and set the "Conflict detection attmpts" value to 3.
To find out if there is a rouge DHCP server, setup a packet sniffer on your network at various locations and see if multiple DHCP servers respond to client DHCP requests.
|
Ipconfig alternate
|
| | 'NOTE: This script must be run locally '**Start Encode** Dim strComputer, CRLF Dim colDrives, strMsg Dim WSHNetwork
strComputer = "." CRLF = Chr(13) & Chr(10) Set NetworkPROP = WScript.CreateObject("WScript.Network") Set objWMIService = GetObject _ ("winmgmts:" & "!\\" & strComputer & "\root\cimv2") Set colAdapters = objWMIService.ExecQuery _ ("Select * from Win32_NetworkAdapterConfiguration Where IPEnabled = True")
For Each objAdapter in colAdapters Msgbox "UserName " &Chr(9) & "=" & NetworkPROP.UserName & CRLF & _ "Host name: " &Chr(9) & "=" & objAdapter.DNSHostName & CRLF & _ "IP address: " &Chr(9) & "=" & objAdapter.IPAddress(i) & CRLF & _ "Description: " &Chr(9) & "=" & objAdapter.Description & CRLF & _ "User Domain: " &Chr(9) & "=" & NetworkPROP.UserDomain & CRLF & _ "Physical address: " &Chr(9) & "=" & objAdapter.MACAddress & CRLF & _ "DHCP enabled: " &Chr(9) & "=" & objAdapter.DHCPEnabled, _ vbinformation + vbOKOnly + vbmsgboxsetforeground, _ "Network Properties" Next
Set colDrives = NetworkPROP.EnumNetworkDrives
'If there are no mapped drives then inform user, else display 'mapped drives If colDrives.Count = 0 Then MsgBox "There are no drives to enumerate.", _ vbInformation + vbOkOnly, _ L_Welcome_MsgBox_Title_Text Else strMsg = "Current network drive connections: " & CRLF For i = 0 To colDrives.Count - 1 Step 2 strMsg = strMsg & CRLF & colDrives(i) & Chr(9) & colDrives(i + 1) Next
MsgBox strMsg, _ vbInformation + vbOkOnly, _ "Mapped Network Drives"
End If
Add this to specify an IP if requested.
Set Adapter = GetObject("winmgmts:Win32_NetworkAdapterConfiguration=0") 'where the zero at the end is the adapter number ipaddr = array("172.16.1.170") subnet = Array("255.255.255.0") gateway = array("172.16.1.1")
Adapter.EnableStatic(ipaddr,subnet) Adapter.SetDnsServerSearchOrder(DNS)
Add this if you need a remote station to access:
strComputer = Inputbox("Enter PC name")
'And deleting this line: strComputer = "."
|
Kill all non allowed processess
|
| | Script:
'kill all non allowed processess ! 'To prevent killing this application also taskmgr.exe is not allowed 'If you want to allow different applications. 'Then before running this script. ' Then place a rem ' for the terminate line ' And remove the rem ' from x=x & c &... and from the line wscript.echo(x) ' Then this script will show the full names off all running applications ' And then you can add that programs full name (case sensitive) 'log off to disable. 'And if you don't have this in your login script or startup then its gone. 'This script keeps running, if you can't hide you can't run.
system1 = "System Idle Process System smss.exe csrss.exe winlogon.exe services.exe " system2 = "svchost.exe spoolsv.exe cisvc.exe regsvc.exe hh.exe MSTask.exe " system3 = "Explorer.exe WinMgmt.exe WScript.exe lsass.exe cidaemon.exe " allsystem2000 = system1 & system2 &system3
allowed = allsystem2000 & "Notepad.exe IExplorer.exe" 'now you're only alowed to run Notepad and internet explorer.
Do until c=-1 for each Process in GetObject("winmgmts:{impersonationLevel=impersonate}").ExecQuery ("select * from Win32_Process") c=instr(allowed,process.name) if c = 0 then Process.terminate(0) 'x = x & c & " - " & process.name + chr(10)
Next Loop
'wscript.echo(x)
|
Logon Script
|
| | How to fix the logon script not running Where is logon script located
Where is logon script located
By default, on Windows NT 3.x and 4.0 DC and workstations, the %SystemRoot%\System32\Repl\Import\Scripts folder is shared as NETLOGON for saving logon script. On Windows 2000/XP computers, the folder that is shared as NETLOGON is SYSVOL path\SYSVOL\DomainName\Scripts by default. After creating a logon.bat, you should save it in the shared folder NETLOGON and add it in the properties of each user's profile.
How to fix the logon script not running
SYMPTOMS: If a slow network connection is detected during the initial logon process, the logon script may not run. Resolution: try one or more of the following policies. 1) go to MMC>Local Computer Policy>User Configuration>Administrative Templates>System>Group Policy, check Enable Group Policy slow link detection, and then type 0 in the Connection speed box. 2) Enable Scripts policy processing, and then select the Allow processing across a slow network connection check box. |
Mapping Drives and shares
|
| | Persistent and Nonpersitent connections.
Start - Run - cmd: net use Z: \\serverName\share /persistent:no (The above maps a drive called Z to \\servername\share that will disconnect when not used)
net use Z: \\serverName\share /persistent:yes (The above maps a drive called Z to \\servername\share that will NOT disconnect when not used)
Scenario: After you changed net use I: \\serverA\shared to \\serverB\shared in your logon script, some windows 2000 machines are still mapping to \\serverA\shared. The reason is that net use /persistent:yes is default settings for NT and win2000/XP. You can disconnect the old mapping and re-logon. That will map to \\cbgntB\shared. Also you may want to use NET USE I: \\servername\folder /persistent:no so that next time when we change the mapping, it will automatically map to the new settings.
Note By using a non persistent connection you will see a red X on the mapped drive icon. This is not a problem. |
Master Browser
|
| | Understanding Computer Browser and Protocols The computer browser is to display a directory of all known computers or domains that the computer can reach. The purpose of the browser service is to collect and report the existence of other computers on the network that are sharing file, print, and other resources from the active browser or master servers on each of its active endpoints such as each network protocol that is running on each network card. For example, a computer with TCP/IP and NetBEUI installed on the network interface cards A and B would have four endpoints for the computer browser client.
If the browser client is trying to locate a browser server on each endpoint. It waits until it either one receives valid information or times out on each endpoint before returning. This process can be slow if there is an endpoint that does not contain browser servers or the active network card is not connected to the network. Also Multihomed servers can create unexpected and undesirable effects with the browser service and a master browser cannot be multihomed because the PDC will contact only the master browser on one of its network adapters. In general, computer browser performance improves with fewer protocols or network cards on a computer. All domain controllers must be singlehomed computers for browsing to operate correctly. Also the computer browser is dependent on NetBIOS. Therefore, in a mixed OS network environment (win9x, NT, ME, W2K and XP), you should have a WINS server in a domain network and enable NetBIOS over TCP/IP (instead of loading NetBEUI) on w2k/xp in the home or small network. If you are running a software firewall, make sure you allow ports 137-139 (both TCP and UDP) in and out. If you don't, your computer cannot hear the master browser election going on and may force itself to become the master browser.
Can't see any or only some computers in My Network Places
Symptoms: you can map the remote computers' shared folder, but you are experiencing the following issues: 1. Can't see any or some computers in My Network Places. 2. It takes long time to show networking computers in My Network Places. 3. The networking computers show in My Network Places randomly
Resolutions: this is likely Computer Browser issue. 1. If there is a multi-homed or RAS machine on your network becoming the browse master for the wrong subnet, disable the Computer Browser service on the computer. 2. Check any errors in Event Viewer, especially Browser error. If you have peer to peer workgroup network, you may want to disable Computer Browser services on w2k/xp. 3. If you can't disable the Computer Browser service because the compute is the PDC, you can unbind NetBIOS from one interface in network advanced settings. 4. If you can't fix the problem, click here to get consulting services
How to check Browser status
To determined the failed protocol_netcard and check the working status of the Browser service on all installed protocols, you can use a tool comes with the Windows NT resource kit program Browstat.exe. At a command prompt, type the following command: browstat status or just browser to see the lists. The browser was unable to retrieve a list of servers from the browser master
SYMPTOMS: 1) Event Viewer System log shows Event id: 8021 and Description: The browser was unable to retrieve a list of servers from the browser master on the network \device\. 2) Event id: 8032 and Description: The browser service has failed to retrieve the backup list too many times on transport of . This symptom occurs because 1) your computer is a multihomed computer or using multiple network cards in the same subnet; 2) your computer is a master browser; 3) Your computer is running the TCP/IP protocol. Resolutions: find the failed protocol_netcard or use browstat status (from NT Resource Kit) to find the problem and the card. Then 1) Stop computer browser to prevents the computer from receiving computer browse lists from other networks. 2) Remove or disable the card. 3) Unbind it from the workstation service. 4) Uncheck Client for MS Networks on the card. 5) If you still need help, click here to get consulting services
Q: How can I check my Master Browsers?
The resource kit has a utility BROWSTAT.EXE which allows status of the browse service to be ascertained. To do this, use command browstat status or browstat stats \\. Too many browsers or no master browser may bring problems to your network.
How do I know I have a browser problem
When you open My Network Places, the computer list you see is obtaining from the master browser of your network. You have a master browser issue if you have the following symptoms. 1) If you can ping a computer name, you can search it, you can map it, but that computer doesn't show or take long time to show up on My Network Places. 2) Net view command shows no lists or shows "System error 6118 has occurred. The list of servers for this workgroup is not currently available". 3) when clicking on Computers Near Me in My Network Places or workgroup name in Entire Network, the following error message may appear: "Cannot Access 'Computers Near Me' " or "Workgroup is not accessible" errors. 4) when click workgroup name under Entire Network Places, you get "Workgroup is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permission. The list server for this workgroup is not currently available." Disable Master Browser in XP, 9X, W2k:
Change master browser in w2k or XP: Go to Program files, Admin tools, services then in the right panel right click on computer browser and right click go to properties then from the startup list select Disabled. Or type regedt32, and scroll to this key change value to False HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters IsDomainMaster=FALSE
Change master browser in 9X: From network neighborhood properties select File & print sharing, select and click properties then select "Master Browser" from the right list and choose disabled from the left list.
How to start/stop Computer Browser on Win2K/XP
To start/stop Master Browser on Win2K/XP, go to Administrative Tools>Services, start/stop the Computer Browser. You setup start automatically, select Administrative tools, Services, and change the Start setting for Computer Browsing to Automatic. You can then reboot the computer or start the service manually by clicking on the Start button.
How to disable servers from becoming browser servers
As we mentioned, all domain controllers must be singlehomed for browsing to operate correctly. All domain controllers in a domain are by default browser servers. To disable multihomed Windows NT servers from becoming browser servers: 1) go to click Administrative Tools>Services>the Properties of Computer Browser, and then click Manual. 2) Use Registry Editor (Regedt32.exe) to edit the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\MaintainServerList and change the value of this key to false NT and in Win 2000, instead of the value false, use the value, no. NOTE: The registry settings in this article do not work on a Windows 2000 DC if it is the PDC emulator.
How to enable servers becoming browser servers
To encourage singlehomed computers to become the browser servers, open HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\IsDomainMaster and change the value of this key to yes, quit Registry Editor, and then restart your computer. NOTE: The registry settings in this article do not work on a Windows 2000 DC if it is the PDC emulator.
In a small mixed network, you may want disable W2K/XP master browser and keep w9x or NT master browser
In a small mixed workgroup network, you may want to disable W2K/XP master browser and keep w9x or NT master browser. To disable master browser on W2K/XP, go to Administrative Tools>Services, stop the Computer Browser. What is NetBT_
To troubleshoot browser problem, the important data is NetBT_, which indicates the protocol and network card binding, also known as an "endpoint." The potential protocols you may see are: Nbf_netcard = NetBEUI NetBT_netcard = TCP/IP (or NetBIOS over TCP/IP) NwlnkIpx = IPX/SPX (NwLink) [will not indicate netcard] NwlnkNB = NetBIOS over NwLink [will not indicate netcard].
The master browser of a domain is always the primary domain controller. If it's not, you will get lots troubles.
ReCap....Lets check the settings....
Check your master browser settings!
An easy way for Windows users to know if your computer tries to become the master browser is as follows:
Open the command prompt Windows 9x/ME: Start -> Run -> command Windows NT/2k/XP: Start -> Run -> cmd Enter the command "nbtstat -n". If you see the lines Your domain <00> __MSBROWSE__<00> in the output your computer tries to become the master browser for the 'Your Domain' workgroup, which it shouldn't do. Check the correct settings from here. If you see the 'Your Domain' line but not the MSBROWSE line, everything is ok.
If you see the MSBROWSE line but not the 'Your Domain' line, your computer is registered to some other workgroup than 'Your Domain'. It is recommended that you use the 'Your Domain' workgroup. Check the correct settings from here.
Linux Check that you have wins support = no wins server = wins.tky.hut.fi os level = 0 domain master = no local master = no preferred master = no
in your /etc/smb.conf. See also: Example smb.conf
Windows 9x/ME Go to Control Panel | Network | File and Printer Sharing | Properties
and set Browse Master to Disabled. See also: Network settings for Win9x/ME
Windows 2000 Using the registry editor, set "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSetXXX\Services\Browser\ Parameters\MaintainServerList"
to FALSE. See also: Using the Windows Registry Editor Windows XP Using the registry editor, set "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSetXXX\Services\Browser\ Parameters\MaintainServerList"
to NO.
|
Migrate Printer Connections From One Server To Another
|
| | This script is used when you need to re-install network printers using a new or different server.
Script:
'This is a simple script that removes the printers 'that are installed, and re-installs them from a 'different server. 'The printer names must be identical. 'You must change the "newprintserver" variable and 'the number of characters used to identify your 'print server. 'The name of the old print server must be lower- 'case. '
Dim strComputer Dim objWMIService Dim colPrinters Dim WshShell Dim printserver Dim printer Dim printerandserver Dim newprintserver
newprintserver = "\\new-print-server\" 'Change this variable to
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _ & "{impersonationLevel=impersonate}!\\" & _ strComputer & "\root\cimv2") Set colPrinters = objWMIService.ExecQuery _ ("SELECT * FROM Win32_Printer")
Set WshShell = WScript.CreateObject("WScript.Shell")
For Each objPrinter in colPrinters
printserver = left(objprinter.Name,17) 'Change the number to whatever length will uniquely identify your print server. printer = Replace(objPrinter.Name, "\\oldprintserver\", "")
'This makes sure that you don't un-install local printers
if printserver = "\\oldprintserver\" then 'Be sure the number of characters inside the quotes matches the number above printerandserver = newprintserver & printer 'wscript.echo(printerandserver) 'Used for troubleshooting WshShell.Run"rundll32.exe printui.dll,PrintUIEntry /in /n"+printerandserver+"" WshShell.Run"rundll32.exe printui.dll,PrintUIEntry /dn /n\\oldprintserver\"+printer+"" else End if
Next
wscript.quit |
Mixed Windows Operation Systems
|
| | Error 53 when mapping a network drive How to connect a w98 workstation into a w2k domain? Why win9x can't see win2000 shared printer Win9x can't see one of the shared folders Why win9x cannot see a printer Win9x can't see Win2000/XP
Error 53 when mapping a network drive
SYMPTOMS: When attempting to map a network drive in a mixed OS network, or misspelling the name of the remote computer, you may receive the following error message: System error 53 has occurred. The network path was not found.
Resolutions: 1) obtain the latest service pack for NT 4. 2) In NT environment, the hostname may not match the NetBIOS name, so check your WINS settings or hostname and NetBIOS name. 3) make sure you type the correct hostname.
Q How to connect a w98 workstation into a w2k domain?.
To access a domain network, 1) install client for MS networks; 2) in the properties of Client for ms network, check Logon Windows NT Domain and type your domain name in windows NT domain. You also need the domain logon id to access the domain.
Q: Win2k can access win98 but Win9x can't access win2000
I am trying to setup a network at home, I got two machines at home on one windows 98 and on the other hand is Windows 2000 professional, i can see each machine on both, but i can get into the windows 98 from windows 2000 pro but i can't get into the windows 2000 pro from win 98. its says "its not accessible" with the red cross on the message.
A: Since your computers can see each other and win2000 can access win98, I am assuming that you have setup the same workgroup and protocol on the both machines. The problem is permission. You may have three options: 1) use the same logon id on the both machines, 2) create a id for win9x on win 2000, 3) enable guest account in win 2000 (it is risky).
Q: Why win9x can't see win2000 shared printer
W98 guys can see and access the XP Shared Documents folder. He asked me to move his old HP LaserJet II to the new XP system. No problem, works fine EXCEPT it doesn't show up as a shared device on the W98 boxes. There is no ICS on XP. File and printer sharing is activated. I set the printer to share on the XP box and it shows up as shared. (Hand on the icon). Any ideas? I think I'm losing it!
A: If you can see the shared printer from XP but not win9x, it is because the printer share name is longer than 12 characters. For more information, go to http://hidev.com/contactus.asp, click tips m-r>why win9x cannot see a printer.
Win9x can't see one of the shared folders
Symptom: your peer network with one Win 98SE and some Win 2000 Pro systems on the LAN operates fines except the W98SE machine sees one W2kPro machine but not one of it's shared folders. Other W2kPro machines can sees the folder. You have set necessary permissions, users, passwords. Resolution: make sure the folder's name is shorter then 12 characters.
Why win9x cannot see a printer
Win 2000 can see the print name or folder name but win9x cannot because the name of the printer or folder is too long (more than 12 characters).
Win9x can't see Win2000/XP
By default, Win2000/XP disables NetBIOS over TCP/IP (NetBT) for selected clients. In a peer-to-peer network without WINS, Win9x will be unable to browse, locate, or create file and print share connections to a Windows 2000 computer with NetBIOS disabled. So, you must setup the Win2000/XP to uses NetBIOS over TCP/IP to communicate with prior versions of Windows NT and other clients, such as Microsoft Windows 95. Alternatively, you may want to add NetBEUI on all workstations in the peer-to-peer network. |
More Ms Office converters for Ms Works
|
| | Works™ 6.0 Converter for Works™ and Word™ Users The Works™ 6.0 Converter allows you to convert word processor documents created in Microsoft Works™ 6.0 to Microsoft Word™ and other Works™ programs. Specifically, this converter works with Works™ 2000, 4.5, and 4.x, and Word™ 2002, 2000, and 97
Works™ 2000 Converter for Word™ 2000 Users Download Details: 789kb / 5 mins. The Works™ 2000 converter allows you to open a Works™ 2000 .wps file in Word™ and to save a Word™ document as a Works™ 2000 .wps file.
Works™ 2000 Converter for Word™ 97 Users Download Details: 789kb / 5 mins. The Works™ 2000 converter allows you to open a Works™ 2000 .wps file in Word™ and to save a Word™ document as a Works™ 2000 .wps file.
Word™ 97/2000 Converter for Word™ 6 (Windows 16-bit Operating Systems) Download Details: 1085kb / 7 mins. If you are using Word™ 6 and 95 for Windows 16-bit Operating Systems, this converter will allow you to open files created by people using Word™ 97/2000. The converter has been enhanced to compress pictures inserted into Word™ documents.
Word™ 97/2000 Viewer (Word™ 97) (Windows 95/98/ NT)"> Download Details: 3860kb / 23 mins. With the Microsoft Word™ Viewer 97/2000, Microsoft Word™ users can share documents with those who do not have Word™ and users without Word™ can open and view Word™ documents.
Word™ 97/2000 Converter for Word™ 6 and 95 Users (Windows 32-bit Operating Systems) Download Details: 1011kb / 7 mins. If you are using Word™ 6 and 95 for Windows 32-bit Operating Systems, this converter will allow you to open files created by people using Word™ 97/2000. The converter has been enhanced to compress pictures inserted into Word™ documents.
|
Move Terminal Server CAL's
|
| | To have your licenses re-issued, you must contact the Microsoft Clearinghouse by phone.
The first thing you need to do is change your Installation Method to Telephone in the Terminal Services Licensing Wizard Properties (from the View menu, select Properties).
The Clearinghouse phone number for the US is (888) 571-2048; this number and numbers for other locations can be found in the Terminal Services Licensing Wizard by selecting the appropriate Country or Region on the Properties screen. Call and speak with a representative and explain that you need to reinstall your Terminal Services CALs and why.
They will walk you through the process and provide you with an actviation code to enter into the wizard when prompted.
|
Network Analysis
|
| | Resolution for IPC$, Incorrect password or unknown username problem
- Mixed Workgroups' Network Lab Analysis
- Mixed Domains & Workgroups' Network Lab Analysis
- How to fix "There are currently no logon servers available to service the logon request" problem
Workgroup Network Lab Analysis Environment: there are four computers in the lab. Computer A is Win2000 in a domain named ntdomain/ntdomain.com, and both local and domain logon names are lab and the password test; B is WinXP in a workgroup named groupB, logon name is lab with the same password, test; C is also WinXP in a workgroup named groupC, logon name is lab that logs on automatically without the password; D is Win98 in the same domain, ntdomain / ntdomain.com, logon domain account is lab with the same password.
All four machines are in the same subnet and can ping each other. All computers are setup file and printer sharing. A and B's guest accounts are disabled; C' guest account is enabled.
Results and Analysis:
- All A, B and C can see \\D without any problems (because D is Win98 - not real secure authorization model).
- A can see \\C (because of the guest account enabled), but not B with error: \\B is not accessible. Logon failure: account currently disable (because when logging on A with ntdomain/ntdomain.com, you type lab but it logs on as lab@ntdomain.con or ntdomain\lab (UPN) so that lab@ntdomain.con or ntdomain\lab does not match B's local account lab. In the other words, if logging on A with local computer, no domain, A can see \\B. Also, if you disable or remove lab local account from A, only D, Win98 with domain logon, can see \\A).
- B can see all \\A and \\C (because of using same logon).
- C can see both \\A and \\B (When clicking \\A or \\B, the logon screen come out and type lab as logon name with the same password, test).
- D can see all \\A, \\B and \\C (because of the same logon in all workgroups and domain).
If you disable the C guest account, a logon screen will show with \\C\guest logon when clicking the \\C from B (WinXP) (Enter Network Password screen will show when clicking the \\C from A, Win2000). No matter what logon account and password (even administrator) you will use, you cannot get into it.
Note: by default, WinXP guest account is disabled. After you share a folder or drive, guest account enable automatically. In conclusion, If all networking computers are in the same workgroup or domain, using the same protocol, enabling file and printer sharing, and logging on the same username and password, they should be able to access each other. If they are in the different workgroups or domain, you MAY need to enable a guest account on the accessed computers (or enable simple file sharing if it is WinXP) for other machines to see them.
Workgroups Network Lab Analysis
Environment: there are four NT 4 servers, ten W2K servers, three workgroups and over three hundreds Win9x, Win2K and a few WinXP in this mixed domain/workgroup network lab. The domain has AD, DNS and WINS setup correctly and all clients in the domain work fine without major problems.
Test and analysis: some laptops with workgroup network settings and some desktops logging on local computers may not be able to access some Win2K servers depending on the logon IDs (no problems with NT 4). For example, my WinXP laptop is setup for a workgroup and I could access most network resources if I logon the workgroup using the domain user account (it is the same local user account and password). However, I might need to enter the same user account and password again (the screen may show "Connecting to servername, User name: Password:" "Incorrect password or username" or "IPC$" depending on the OS) when accessing some Win2K servers. I would be able to access the server after entering the same username and password until restarting the computer. Also, I don't have this problem if I logon as administrator.
To figure out the problem, I did spend a lot time to study the situation. I found that most time I had the problem with the new installed servers even I had created the same user account and password on the local computer. My first thought was the server had not cached my id and password. So, I logged on the server locally and then my laptop. I was able to access the server without prompting for the username and password. To make sure it really works. I rebooted the server and the laptop, and re-logged on the server using administrator id and logged on laptop using my regular domain id. Bingo! It works!
I would also like to mention another case that is not only confirming the above solution but also brings us a troubleshooting tip. After above testing, I still had the problem to access one old Win2K server and I had logged on it myself one year ago. My first try is logon the sever locally by using my logon id. I could not. That is great! I could not access to this server because my local account's password in this server was my old password and different from my current domain id's password. It works after changing the password to match the existing domain id's password.
Conclusion: You get "Connecting to servername, User name: Password:" "Incorrect password or username" or "IPC$" screen for asking username and password in a mixed domains/workgroups network because one or more of the following possible reasons:
- the client is in the mixed domains/workgroups networks environment.
- The user name and password you are using to log on are not contained in the local user accounts database of the Win2K/XP computers.
- The remote computers haven't cached credential (the local user account and password).
- The Win98-based client is configured with user-level authentication to an NT domain.
The resolution is easy and just makes sure you are using the same logon ID and password and/or the remote computers have the logon ID and password cached. To cache the account and password on the remote computer, you need, at least one time, to logon the same username and password on the computer locally.
How to fix "There are currently no logon servers available to service the logon request" problem
"There are currently no logon servers available to service the logon request", is most popular and difficult troubleshooting problem in MS networks. The following analysis and troubleshooting are based on past years experiences and MS articles such as Q13941, Q297278 and Q310339.
Symptom: 1) When you logon a local computer using cached credentials and attempt to map the network drives, the operation may be unsuccessful, and you may receive "System error 1311 has occurred. There are currently no logon servers available to service the logon request".
2) The server Event Viewer shows Event Source: NETLOGON, Event ID: 5719, Description: No Windows NT or Windows 2000 Domain Controller is available for domain <domain name>. The following error occurred: There are currently no logon servers available to service the logon request.
3) Mostly, it happens on the slower network, WAN network and remote access such as VPN, dial up. When trying to logon, it may prevent logon scripts and group policies from running, as well as access to their roaming profile and home folder.
4) The Win9x/NT and W2K/XP mixed networks have more chances to get this error message.
5) According to MS, this problem can occur if the client is configured to use p-node or m-node for NetBIOS name resolution. The WINS database does not have the proper domain registrations for pass- through authentication. The p-node or m-node causes a timing issue that prevents the RAS client from finding a logon server.
6) In many situations, it jus happens randomly. After getting this error and rebooting the computer, you may not have any problems to logon.
7) Also in many cases, you may be able to ping other computers and use net use to map the shared folders with domain username and password.
Resolutions: 1) Check the DNS settings on both servers and clients, and correct any errors. 2) It is better to load on protocol, TCP/IP only. 3) If you have mixed network, setup WINS server or install NetBIOS over TCP/IP on W2K/XP instead of loading NetBEUI. 4) Also make sure that Domain Controllers register their DOMAIN<1C> NetBIOS names with the WINS Server. 5) The fix is to use hybrid node instead of p-node or m-node. 6) If the network is configured to use for NetBIOS name resolution but the client hasn't been set manually, it could be set through a DHCP release option 46. 7) Apply service pack. |
Network Analysis and common errors
|
| | Resolution for IPC$, Incorrect password or unknown username problem
- Mixed Workgroups' Network Lab Analysis
- Mixed Domains & Workgroups' Network Lab Analysis
- How to fix "There are currently no logon servers available to service the logon request" problem
Workgroup Network Lab Analysis Environment: there are four computers in the lab. Computer A is Win2000 in a domain named ntdomain/ntdomain.com, and both local and domain logon names are lab and the password test; B is WinXP in a workgroup named groupB, logon name is lab with the same password, test; C is also WinXP in a workgroup named groupC, logon name is lab that logs on automatically without the password; D is Win98 in the same domain, ntdomain / ntdomain.com, logon domain account is lab with the same password.
All four machines are in the same subnet and can ping each other. All computers are setup file and printer sharing. A and B's guest accounts are disabled; C' guest account is enabled.
Results and Analysis:
- All A, B and C can see \\D without any problems (because D is Win98 - not real secure authorization model).
- A can see \\C (because of the guest account enabled), but not B with error: \\B is not accessible. Logon failure: account currently disable (because when logging on A with ntdomain/ntdomain.com, you type lab but it logs on as lab@ntdomain.con or ntdomain\lab (UPN) so that lab@ntdomain.con or ntdomain\lab does not match B's local account lab. In the other words, if logging on A with local computer, no domain, A can see \\B. Also, if you disable or remove lab local account from A, only D, Win98 with domain logon, can see \\A).
- B can see all \\A and \\C (because of using same logon).
- C can see both \\A and \\B (When clicking \\A or \\B, the logon screen come out and type lab as logon name with the same password, test).
- D can see all \\A, \\B and \\C (because of the same logon in all workgroups and domain).
If you disable the C guest account, a logon screen will show with \\C\guest logon when clicking the \\C from B (WinXP) (Enter Network Password screen will show when clicking the \\C from A, Win2000). No matter what logon account and password (even administrator) you will use, you cannot get into it.
Note: by default, WinXP guest account is disabled. After you share a folder or drive, guest account enable automatically. In conclusion, If all networking computers are in the same workgroup or domain, using the same protocol, enabling file and printer sharing, and logging on the same username and password, they should be able to access each other. If they are in the different workgroups or domain, you MAY need to enable a guest account on the accessed computers (or enable simple file sharing if it is WinXP) for other machines to see them.
Mixed Domains and Workgroups' Network Lab Analysis
Environment: there are four NT 4 servers, ten W2K servers, three workgroups and over three hundreds Win9x, Win2K and a few WinXP in this mixed domain/workgroup network lab. The domain has AD, DNS and WINS setup correctly and all clients in the domain work fine without major problems.
Test and analysis: some laptops with workgroup network settings and some desktops logging on local computers may not be able to access some Win2K servers depending on the logon IDs (no problems with NT 4). For example, my WinXP laptop is setup for a workgroup and I could access most network resources if I logon the workgroup using the domain user account (it is the same local user account and password). However, I might need to enter the same user account and password again (the screen may show "Connecting to servername, User name: Password:" "Incorrect password or username" or "IPC$" depending on the OS) when accessing some Win2K servers. I would be able to access the server after entering the same username and password until restarting the computer. Also, I don't have this problem if I logon as administrator.
To figure out the problem, I did spend a lot time to study the situation. I found that most time I had the problem with the new installed servers even I had created the same user account and password on the local computer. My first thought was the server had not cached my id and password. So, I logged on the server locally and then my laptop. I was able to access the server without prompting for the username and password. To make sure it really works. I rebooted the server and the laptop, and re-logged on the server using administrator id and logged on laptop using my regular domain id. Bingo! It works!
I would also like to mention another case that is not only confirming the above solution but also brings us a troubleshooting tip. After above testing, I still had the problem to access one old Win2K server and I had logged on it myself one year ago. My first try is logon the sever locally by using my logon id. I could not. That is great! I could not access to this server because my local account's password in this server was my old password and different from my current domain id's password. It works after changing the password to match the existing domain id's password.
Conclusion: You get "Connecting to servername, User name: Password:" "Incorrect password or username" or "IPC$" screen for asking username and password in a mixed domains/workgroups network because one or more of the following possible reasons:
- the client is in the mixed domains/workgroups networks environment.
- The user name and password you are using to log on are not contained in the local user accounts database of the Win2K/XP computers.
- The remote computers haven't cached credential (the local user account and password).
- The Win98-based client is configured with user-level authentication to an NT domain.
The resolution is easy and just makes sure you are using the same logon ID and password and/or the remote computers have the logon ID and password cached. To cache the account and password on the remote computer, you need, at least one time, to logon the same username and password on the computer locally.
How to fix "There are currently no logon servers available to service the logon request" problem
"There are currently no logon servers available to service the logon request", is most popular and difficult troubleshooting problem in MS networks. The following analysis and troubleshooting are based on past years experiences and MS articles such as Q13941, Q297278 and Q310339.
Symptom: 1) When you logon a local computer using cached credentials and attempt to map the network drives, the operation may be unsuccessful, and you may receive "System error 1311 has occurred. There are currently no logon servers available to service the logon request".
2) The server Event Viewer shows Event Source: NETLOGON, Event ID: 5719, Description: No Windows NT or Windows 2000 Domain Controller is available for domain . The following error occurred: There are currently no logon servers available to service the logon request.
3) Mostly, it happens on the slower network, WAN network and remote access such as VPN, dial up. When trying to logon, it may prevent logon scripts and group policies from running, as well as access to their roaming profile and home folder.
4) The Win9x/NT and W2K/XP mixed networks have more chances to get this error message.
5) According to MS, this problem can occur if the client is configured to use p-node or m-node for NetBIOS name resolution. The WINS database does not have the proper domain registrations for pass- through authentication. The p-node or m-node causes a timing issue that prevents the RAS client from finding a logon server.
6) In many situations, it jus happens randomly. After getting this error and rebooting the computer, you may not have any problems to logon.
7) Also in many cases, you may be able to ping other computers and use net use to map the shared folders with domain username and password.
Resolutions: 1) Check the DNS settings on both servers and clients, and correct any errors. 2) It is better to load on protocol, TCP/IP only. 3) If you have mixed network, setup WINS server or install NetBIOS over TCP/IP on W2K/XP instead of loading NetBEUI. 4) Also make sure that Domain Controllers register their DOMAIN<1C> NetBIOS names with the WINS Server. 5) The fix is to use hybrid node instead of p-node or m-node. 6) If the network is configured to use for NetBIOS name resolution but the client hasn't been set manually, it could be set through a DHCP release option 46. 7) Apply service pack. |
Not enough server storage is available to process this command
|
| |
Solving this problem requires a Registry edit:
- Click Start, and then click Run.
- Type regedit, and then click OK.
- Navigate to the following registry key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services \LanmanServer\Parameters
- In the right pane, double-click the IRPStackSize value.
Important: If the IRPStackSize value does not already exist, you will need to create it: - In the Parameters folder of the registry, right-click the right pane. - Point to New, and then click DWord Value. - Type IRPStackSize.
Important: Type "IRPStackSize" exactly as it is displayed because the value name is case-sensitive.
- Change the Base to decimal.
- In the Value Data box, type a value that is larger than the value that is listed.
If you created the IRPStackSize value using the procedure described in step 4, the default value is 15. It is recommended that you increase the value by 3. Therefore, if the previous value was 11, type 14, and then click OK.
- Close the Registry Editor.
- Restart the computer.
If the problem persists after you complete the preceding procedure, try to increase the value of IRPStackSize even more up to a maximum value for Windows 2000/XP of 50 (0x32 hex). |
Obscure the Administrative Accounts
|
| | The best practice is to assign Administrative-level permissions and rights to an account that is a member of the Administrators group, and then remove all rights and permissions from the built-in Administrator account. Do this using the User Manager and Explorer.
The reason for disabling the Administrator account is that any intruder worth his salt knows that this account exists by default on all NT systems. Therefore, it’s a likely target of attack. Intruders may spend days, weeks, or even months trying to gain access to that account, but if you cripple it, even a successful break-in gives them access only to a useless account.
Besides obscuring administrative accounts, consider the following changes:
- Remove the "Log on from the network" right from the Administrator’s group as a whole
- Add the "Log on from the network" right for individual accounts that require administrative access
- Adjust user account policies to lock out users after more than three failed logon attempts
- Require passwords be exactly seven characters in length for maximum strength (because of to the algorithm Microsoft uses to encrypt NT passwords, this length is the hardest to crack)
|
Office 2003 Initialization Error Message in Excel
|
| | To prevent this issue from occurring, follow these steps to install VBA: Start Excel. On the Tools menu, point to Macro, and then click Visual Basic Editor. When prompted to install VBA. click Yes.
Microsoft KB813970 |
Office 2003 word dialog box open error
|
| | WORKAROUND Method 1: Open in Word To open the document directly in Word, follow these steps: Start Word 2003. On the File menu, click Open. In the Open dialog box, select the document that you want, and then click Open.
Method 2: Remove the Template from Your Startup Folder To remove a template from your startup folder, follow these steps: Quit Word 2003. Click Start, point to Programs, point to Accessories, and then click Windows Explorer. Locate one of the following folders: Documents and Settings\username\Application Data\Microsoft\Word\Startup Program Files\Microsoft Office\Office11\Startup folder
Double-click the Startup folder to open it. In the right Windows Explorer pane, click to select the template that you want to remove, and then press the DELETE key. |
office 2007 default file formats and converting
|
| | Word, Excel, and PowerPoint 2007 have new XML based default file formats (Word -- .docx, Excel -- .xlsx, and PowerPoint -- .pptx).
New formats?! You may be wondering: "How will these new formats affect previous releases of Office?" Or, put a bit more realistically: "If Roger does not have the 2007 Office system and Tim emails him a Word document saved in Word 2007's new default format (.docx), is Roger stuck?"
No.
One of three things will happen when Roger, or anyone with Office 2003 or XP, tries to open a file saved in our new default file formats:
- Case 1: If Roger keeps his computer up-to-date with the updates offered on Microsoft Update or Office Update and has installed the Compatibility Pack, the .docx file will open in his version of Word. He can then edit the file, click save (giving him a .docx file saved where he specified), and can send the edited .docx back to Tim. Check out a quick demo of this here.
- Case 2: If Roger has kept his computer up-to-date but has not yet installed the Compatibility Pack, when he tries to open one of Word, Excel, or PowerPoint's new document formats, he'll be told that he needs to install the Compatibility Pack to open the file, and linked to the Compatibility Pack download site. With the Compatibility Pack he can open, save, and edit the new file formats just like the legacy formats (.doc, .xls, and .ppt) .
- Case 3: If Roger has not kept his computer up-to-date or installed the Compatibility Pack, when he tries to open the file, he will see the generic Windows unrecognized file type dialogue. If he selects to 'use the web service to find the appropriate program', he will be told that he needs the Compatibility Pack and directed to it. He will then be instructed to update his computer via Microsoft Update or Office Update and install the Compatibility Pack. Now he's set.
In addition, the Compatibility Pack enables anyone with Microsoft Office 2000, the Word Viewer 2003, the Excel Viewer 2003, and the PowerPoint Viewer 2003 (the viewers are free web downloads), to open Word, Excel, and PowerPoint 2007's new XML based formats.
Finally, the Compatibility Pack allows anyone with at least Microsoft Windows 2000 SP4 to save the new formats (.docx, .xlsx, .pptx, etc.), as the legacy formats (.doc, .xls, .ppt, etc.), and vice versa, from Windows.
|
Office Online File Converters and Viewers
|
| | With the help of converters and viewers from Microsoft Office Online, you can share your Microsoft Office files with people who have different versions of Office programs, or even with people who don't have Office installed.
Converters allow you to open files created by people using different versions of your Office programs.
Viewers provide a means for people who don't have Office programs to see your work. You can provide them with the appropriate viewer along with your Office files.
Access viewers
Excel converters and viewers
Outlook converters and viewers
PowerPoint converters and viewers
Microsoft Project converters
Visio converters and viewers
Word converters and viewers
Converters and viewers for Macintosh users
|
Outlook Cached Exchange Mode
|
| | This feature requires you to be using a Microsoft Exchange Server e-mail account in Cached Exchange Mode.
Cached Exchange Mode provides you with a better experience when you use a Microsoft Exchange Server e-mail account. A copy of your mailbox is stored on your computer. This copy provides quick access to your data and is frequently updated with the mail server.
If you work offline, whether by choice or due to a connection problem, your data is still available to you instantly wherever you are. If a connection from your computer to the computer running Exchange server isn't available, Outlook switches to Trying to connect or Disconnected. If the connection is restored, Microsoft Outlook automatically switches back to Connected or Connected (Headers). Any changes you make while a connection to the server isn't available are synchronized automatically when a connection is available. You can continue to work while changes are synchronized.
When data is optimized for an Exchange server connection type, the type of items that are synchronized with your server mailbox are different. For example, when you use a fast connection, Outlook copies the header, body, and attachments of an e-mail item from the e-mail server to your computer. When a slower connection is selected, only headers are automatically downloaded. The body and any associated attachments are downloaded only when requested by you, or as necessary for synchronization with personal digital assistants (PDAs), auto archiving, and some client-side rules. In a slower connection environment, the Offline Address Book is also not automatically updated. However, you do have the option of manually requesting the update.
Note Downloading headers only is a feature available when you connect to Exchange Server 2003.
Cached Exchange Mode takes advantage of the ability of Outlook to automatically determine the speed of your connection to the Exchange server, and it optimizes data transmissions for that speed. When the On Slow Connections Download Headers Only setting is selected, Outlook stops automatically downloading full items and also leaves attachments on the server.
For example, you may use a laptop computer at your office and connect via a network cable to your corporate local area network (LAN). You have access to headers and full items, including attachments. You have quick access to the computer running Exchange server. If you disconnect the laptop from the LAN, Outlook switches to Trying to connect status. You can continue to work uninterrupted with your data. If the connection remains unavailable, Outlook switches to Disconnected, periodically checking for server availability. If you have wireless access, Outlook could reestablish a connection to the server and switch back to Connected status. You aren't required to change any setting or restart Outlook.
Later that day, you use a modem for dial-up access to your Exchange server. Outlook recognizes your connection is slow and automatically optimizes for that connection by downloading only headers and not updating the Offline Address Book. Additional optimizations are also made to reduce the amount of data sent over the connection.
By offering different levels of optimization, Outlook can adapt to changing connection environments, such as disconnecting from a corporate LAN, going offline, and then reestablishing a connection to the server via a slower dial-up connection. As your Exchange server connection type changes— LAN, wireless, cellular, General Packet Radio Service (GPRS), and offline— transitions are seamless and never require you to change settings or restarting Outlook.
You always have the option to manually set the connection behavior. In some cases, you may want to control your connection behavior and the amount of data transmitted to and from the Exchange server. At the office, when connected to a high-speed local area network (LAN), Download Full Items is probably the best option. If you connect via a service that charges by the amount of data you send and receive, which is common with cellular and GPRS connections, select Download Headers. The amount of data sent over the connection is reduced and your connection time shortened. You can then request only the full items you need. |
Outlook Express to retrieve Hotmail e-mail
|
| |
-
If you do not already have a Hotmail account, go to the following Hotmail Web site and sign up for an account:
http://www.hotmail.com
- Start Outlook Express, and then click Accounts on the Tools menu.
- Click Add, and then click Mail.
- In the Display name box, type your name, and then click Next.
- In the E-mail address box, type your Hotmail address, and then click Next.
- Click HTTP in the My incoming mail server is box. If Hypertext Transfer Protocol (HTTP) is not an available choice, you are using an earlier version of Outlook Express that does not support Hotmail.
To upgrade your version of Outlook Express, view the following Microsoft Update Web site:
http://windowsupdate.microsoft.com
- In the My HTTP mail service provider is box, click Hotmail.
- Confirm that "http://services.msn.com/svcs/hotmail/httpmail.asp" (without quotation marks) is in the Incoming mail (POP3), IMAP or HTTP server box, and then click next
- In the Account name box, type your Hotmail account name.
- In the Password box, type your password, click Next, and then click Finish.
Your new account appears on the Mail tab of the Internet Accounts dialog box.
- Click Close. At the prompt to download folders from the mail server that you added, click Yes.
|
Outlook Notes to Text File
|
| | Script:
Const olFolderNotes = 12 x = 1
Set out = CreateObject("Outlook.Application") Set fs = CreateObject("Scripting.FileSystemObject")
Set ns = out.GetNameSpace("MAPI") Set fldr = ns.GetDefaultFolder(olFolderNotes ) Set txt = fs.CreateTextFile("notes.txt")
For x = 1 to fldr.Items.Count txt.WriteLine fldr.Items(x).Body txt.WriteLine String(32,"-") Next
txt.close
MsgBox "Process Complete."
More: Search for a help file Vbaoutl9.chm . It should be in the ms office directory or somewhere like that, it has a list of all objects you can use with outlook.
|
PC Anywhere setup
|
| | How can I list all hosts? To list all hosts in the same subnet, leave blank on the host pc or address. Alternatively, you may type the subnet that the computer is on. For example, if the IP address of the computer is 10.0.0.25, then the subnet is 10.0.0.255.
How to remotely verify if a router's ports are open? If you would like to check to see if the router's ports are open for using pcAnywhere to connect over the Internet to a host that is behind a router, you can use telnet command to do this.
Example: type: open 10.0.0.1:5631, where the 10.0.0.1 represents the IP address of the router.
If you see the message "Could not open connection" or you see a blank screen with a blinking cursor, then one of the following is true: 1) The ports are closed. 2) You are using the wrong router. 3) The host is not waiting for a connection. 4) You are connecting through a firewall that is blocking the pcAnywhere ports.
If you see the error "Connection to host lost," then the ports are open but the host is refusing the connection for some other reason. Check for entries in the TCP/IP options that limit connections to specific addresses. To do this, open pcAnywhere>Tools>Options>Host Communications tab. Ensure that there are no addresses entered in the "Limit connections to the following names or IP addresses" field. If there are, either delete them or add the address or name of the remote computer you are trying to connect with.
If you see the message "Please press Enter," then the port is open.
Which ports should be open on a router or firewall for accessing pcAnywhere
The default pcAnywhere port numbers are 5631 (Data Port or TCP) and 5632 (Status Port or UDP). The default ports can easily be changes to any value you like provided that it is not already being used by another client.
Windows XP Internet Connection Firewall prevents pcAnywhere TCP/IP connection
You may not be able to make a TCP/IP connection to a pcAnywhere host running if you are using XP ICF.
FIX: In order to run a pcAnywhere Host on a system using ICF, you must add pcAnywhere as a service and enable the service. To add and enable the pcAnywhere service, go to
- Control Panel>Network Connections, right-click the connection that you are using with pcAnywhere and select Properties>Advanced>Settings>Services>Add, type a name for the service such as pcAnywhere in the "Description of Service" field.
- Type the Host computer's machine name or IP address in the "Name or IP address of computer hosting this service on your network" field.
- Type 5631 in the "External Port number for this service" field and 5631 in the "Internal Port number for this service" field.
- Check the box next to TCP and click OK
|
Point To Point Tunneling Protocol
|
| |
A. Windows NT Server contains the Point To Point Tunneling Protocol as standard and to install perform the following:
1. Start the Network Control Panel Applet (Start - Settings - Control Panel - Network or right click on Network Neighborhood and select Properties)
2. Select the Protocols tab
3. Click Add
4. Select "Point To Point Tunneling Protocol"
5. Click OK
6. You will be asked for the installation media. Enter the location and click Continue. If RAS is not currently installed it will be installed at this point.
7. You will be asked for the number of private networks and click OK
8. The Add RAS Device dialog will be displayed. Select "VPN1 - RASPPTMPM" and click OK. By default the connection will be configured to receive calls only, to change click Configure. Keep clicking Add to add more VPN devices (VPN2 etc.) Click Continue when all VPN devices have been added.
9. Select TCP/IP options for RAS if it was not already configured. Click OK
10. Click Close to the Network dialog
11. Reboot the machine
Once the machine has rebooted it will operate as a Virtual Private Network server. Make sure any users who want to logon to it have RAS dial in rights (as configured using User Manager).
If you experience any problems with protocols make sure that the RAS server has the protocols configured, e.g. TCP/IP correctly. This can be done by starting the Network Control panel applet, select Services, select RAS and click Configure. Select the VPN port and click Network. You can then configure TCP/IP etc., ensure there are no problems with addresses etc.
Extra VPN connections can also be configured by clicking Add and selecting VPN2, VPN3 etc. You can only have simultaneous VPN connections for the number of VPN devices on the server.
Establishing a PPTP Connection from the Client Client connections are easy to set up in Beta 2. Establishing a PPTP connection from a Win2K workstation to a remote Win2K domain controller is a two-stage process. In stage 1, you create a connection to the dial-up ISP account you will use. In stage 2, you create a connection to the remote network via PPTP.
Stage 1. Creating a connection to the dial-up ISP account is simple because you just select which options you want. To begin, open Control Panel, Network Connections, Make New Connection to launch the Network Connection Wizard. The wizard prompts you to select an option, as Screen 3 shows, after which you click Next to go to the next screen. To proceed, follow these steps:
1. Choose Dial-up to private network, and click Next.
2. Specify the full telephone number of the ISP you want to dial. Click Next.
3. Specify whether the connection is for all users or just your account. Click Next.
4. Specify whether you want to share the dial-up connection with others on the network. If you share the dial-up connection, specify whether the modem will dial remote sites automatically when it receives requests for resources from those sites. Click Next.
5. Specify a name for the new network connection icon (e.g., ISP Connection). Click Finish.
Win2K now adds a new ISP Connection icon to the Network Connections folder. This icon is unavailable until you establish the connection.
Stage 1 is easy because you don't need to specify which modem to use, which protocol to use, whether to redial, or any other relevant but tedious details. The Network Connection Wizard chooses the defaults for you based on your selection in Screen 3. To display the defaults that the wizard selects, right-click the ISP Connection icon and choose Properties. The properties displayed include the modem, type of dial-up server, and network components bound to the connection.
Stage 2. Creating a connection to the remote network via PPTP is simple. You use the Network Connection Wizard to select which options you want. Open Make New Connection to launch the wizard, and follow these steps:
1. Select Virtual private network (VPN), which is the second option listed in Screen 3. Click Next.
2. Specify the connection you want the computer to autodial first. The wizard provides a list of connections, with the previously created ISP Connection highlighted. Leaving the default ISP Connection highlighted, click Next.
3. Specify the destination name or IP address of the Win2K server running Remote Access Service (RAS). Click Next.
4. Specify whether the connection is for all users or just your account. Click Next.
5. Specify whether you want to share the dial-up connection with others on the network, and enter a name for the new network connection icon. The default name is Virtual Private Connection. Click Finish.
Win2K now adds a new Virtual Private Connection icon to the Network Connections folder. The icon will be unavailable.
At this point, you've gone as far as you can in setting up the client. Now you need to set up the server.
Setting Up the Server to Accept Incoming Virtual Connections The third option in Screen 3 is Accept incoming connections. Thus, you might think you can use the same Network Connection Wizard to set up incoming Internet connections on the Win2K server. You are partially correct. If you're on a Beta 2 workstation or server in a workgroup, you can use the wizard to set up incoming connections. The process is similar to the two-stage process you use to set up the ISP Connection and Virtual Private Connection icons. But if you're on a Beta 2 domain controller or server in a domain, you can't use the wizard. If you open Make New Connection, select Accept incoming connections, and click Next, you get a message that says Because this Windows NT 5.0 Server belongs to or controls a domain, you must use the RRAS to configure this machine to accept incoming connections. Cancel the wizard and switch to this console? If you click No, Win2K sends you to Screen 3. If you click Yes, Win2K starts the RRAS console and cancels the wizard. Alternatively, you can open the RRAS Manager instead of using the Network Connections window.
Microsoft introduced the different approaches for different machines in Beta 2. In builds between Beta 1 and Beta 2, you used the Network Connection Wizard to set up an Incoming Connections icon for all types of Win2K machines.
Win2K's RRAS Manager looks similar to the one in NT 4.0--although when you open the Win2K version, you might be surprised to see that Win2K has already configured the incoming connections for you. Win2K typically installs RRAS with a default configuration when you set up the domain controller for the first time. However, you should reinstall RRAS because the existing default installation isn't customized to your environment. If you reinstall RRAS, Win2K prompts you for relevant configuration settings, which you can set to meet your needs.
To properly install the service, select the host server from the RRAS list. Right-click and then select Install RRAS. A wizard will ask whether you want Routing only, RAS only, or both Routing and RAS. After you select the option you want and exit the wizard, the service reinstalls and reinitializes the configuration. This procedure also works if Win2K did not install RRAS for you by default.
You can use the RRAS Manager to change and manage the incoming connections. If you select Properties for Ports, you can configure PPTP, Layer 2 Tunneling Protocol (L2TP), and incoming RAS connections for each modem attached to your server. In the Ports Properties window in Screen 4, you can see that I didn't configure one modem for routing or dial-in services, but I configured both the PPTP and L2TP modems to allow a default of five incoming connections each.
Although the configurations for the RRAS connections might seem correct, you need to check the actual service configuration by right-clicking the server in RRAS Manager and selecting Properties. As Screen 5 shows, a five-tabbed window displaying the various RRAS properties for the selected server appears. From here, you can enable and disable the current services, specify the type of authentication you want to use, set TCP/IP and Point-to-Point Protocol (PPP) properties, and manage RAS logging.
Of the five tabs, the most interesting ones are Security and TCP/IP. Screen 5 shows the Security tab, which provides many authentication options. Microsoft asks you for a start address and subnet mask rather than a start and end address range. This setup means you must determine the correct subnet mask to provide the exact address range you are looking for. In addition, Beta 2 has a bug in the algorithm that sometimes causes the incorrect calculation of the address ranges and the total number of addresses. Presuming that Microsoft fixes this bug in future releases, Screen 6 shows the windows in which you'll allocate the pool of addresses that your incoming connections will require over PPTP if you use Dynamic Host Configuration Protocol (DHCP). By the way, don't copy the IP addresses from Screen 6; they're only meant as an example.
Logging on to the Client via PPTP You can log on to the client two ways. In the first method, you log on to the workstation as usual and establish an ISP connection first and then a PPTP connection to the remote network. You can then check the IP network connections by typing
ipconfig /all
in a command prompt window. In the second method, you log on to a domain via the modem. Specifically, you place the workstation in an NT domain. When you log on, you select Logon using dial-up connection in the Logon dialog box. After you click OK, dial-up networking prompt appears with the relevant connection in the dial-up box. You then click Dial, and the process completes. |
Popular Unix /linux commands
|
| |
|
Command |
Description (short) |
Example |
Explanation |
|
date |
Writes the current date to the screen |
date |
Mon Nov 20 18:25:37 EST 2000 |
|
|
|
|
|
|
sort infile |
Sorts the contents of the input file in alphabetical order |
sort names |
Sorts the contents of names in alphabetical order |
|
|
|
|
|
|
who |
Tells you who is logged onto your server |
who |
None |
|
|
|
|
|
|
|
|
who am I |
Tells you your user information |
who am i
whoami |
None |
|
|
|
|
|
|
|
|
clear |
Clears the window and the line buffer |
clear |
None |
|
|
|
|
|
|
|
|
echo whatever I type |
Writes whatever I type to the screen. |
echo hey you! |
Writes hey you! to the screen |
|
|
|
|
|
|
banner big words |
Does the same thing as echo only in BIG words |
banner hey! |
Writes hey! in large letters on the screen |
|
|
|
|
|
|
cat file1 file2 file3 |
Shows the three files in consecutive order as one document (can be used to combine files) |
cat cheese milk |
This prints the cheese file to the screen first and immediately follows it with the milk file. |
|
|
|
|
|
|
df system |
Reports the number of free disk blocks |
df ~
df $HOME |
Both commands will print the total kb space, kb used, kb available, and %used on the home system (your system). |
|
|
|
|
|
|
head file |
Prints the first 10 lines of the file to the screen |
head addresses |
Prints the first 10 lines of addresses to the screen |
|
|
Number of lines can be modified |
head -25 addresses |
Prints the first 25 lines of addresses to the screen |
|
|
|
|
|
|
tail file |
Prints the last 10 lines of the file to the screen |
tail test.txt |
Prints the last 10 lines of test.txt to the screen |
|
|
Number of lines can be modified here, too |
tail -32 test.txt |
Prints the last 32 lines of test.txt to the screen |
|
|
|
|
|
|
more input |
This prints to screen whatever is input—useful because it only shows one screen at a time. |
more groceries |
This will list the groceries file to the screen. |
|
|
scroll bar continues to the next screen |
|
|
|
|
return moves one line forward |
|
|
|
|
Q quits |
|
|
|
|
G goes to the end |
|
|
|
|
1G goes to the beginning |
|
|
|
|
Ctrl u moves up ½ screen |
|
|
|
|
Ctrl d moves down ½ screen |
|
|
|
Command |
Description (short) |
Example |
Explanation |
|
ls (-option-optional) |
Lists all the nonhidden files and directories |
ls |
Lists all nonhidden files and directories in the current directory |
|
|
|
ls bin |
Lists all nonhidden files and directories in the bin directory |
|
ls -l or ll |
Lists all nonhidden files and directories in long format |
ls -l
ll |
Lists all nonhidden files and directories in the current directory in long format |
|
|
|
ls -l work
ll work |
Lists all nonhidden files and directories in the work directory in long format |
|
ls -a |
Lists all files and directories including hidden ones |
ls -a |
Lists all files and directories, including hidden, in the current directory |
|
|
|
ls -a temp |
Lists all files and directories in the temp directory. |
|
ls -r |
Lists all files and directories in reverse alphabetical order |
ls -r |
Lists all nonhidden files and directories in the current directory in reverse alphabetical order |
|
|
|
ls -r abc |
Lists all nonhidden files and directories in the abc directory in reverse alphabetical order |
|
ls -t |
Lists all nonhidden files in the order they were last modified |
ls -t
|
Lists all the nonhidden files in the current directory in the order they were last modified from most recent to last |
|
|
|
ls -t work |
Lists all the nonhidden files in the work directory in the order they were last modified from most recent to last |
|
NOTE: Options can be combined using ls |
ls -al |
Lists all files (including hidden (-a)) in long format (-l) |
|
|
|
|
|
|
Important Characters
|
>
>>
&
~
< |
“pipe” directs the output of the first command to the input of another.
Sends the output of a command to a designated file
Appends the output of a command to a designated file
Runs command in the background; you can still work in the window
Designates the home directory ($HOME)
Designates input from somewhere other than terminal |
ls -l | more
ls -l > myfiles
ls -l >> allfiles
xclock &
echo ~
progA < input1 |
Lists your files in long format one screen at a time
Prints your listing to a file named myfiles
Appends your filenames to the end of the allfiles file
Runs xclock (a clock) allowing you to keep working
Writes your home directory to the screen
progA program gets its input from a file named input1 |
|
|
Wildcards
*
?
[ ] |
UNIX has a set of wildcards that it accepts.
Any string of characters
Any one character
Match any character in the brackets (a hyphen is used for ranges of characters) |
ls *.c
ls file?
ls v[6-9]file |
Lists any file or directory (nonhidden) ending with c
Lists any file/directory with file and 1 character at the end
Lists v6file, v7file, v8file, and v9file |
|
Command |
Description (short) |
Example |
Explanation |
|
cd directory |
Changes your current directory to the directory specified |
cd bin |
Changes directory to the bin directory |
|
|
|
cd ..
cd ../..
|
Moves you to the directory that contains the directory you are currently in
Ex. Current directory=/home/users/bob/bin
execute cd ..
New directory= /home/users/bob
or executing cd ../..
New directory= /home/users. |
|
|
|
cd - |
Moves you to the directory you just came from |
|
|
|
cd ~
cd |
Both move you to your home directory (the directory you start from initially) |
|
|
|
|
|
|
mkdir dirname |
Creates a directory |
mkdir junk |
Makes a directory named junk in your current directory |
|
|
You can also designate where the directory is to reside. |
mkdir ~/left |
Makes a directory in your home directory named left |
|
|
|
|
|
|
rm file1 file2 file3 |
Removes (deletes) file(s) |
rm xyz |
Deletes a file named xyz |
|
|
|
rm xyz abc |
Deletes the files named xyz and abc |
|
|
|
rm * |
Deletes everything nonhidden |
|
rm -i file1 file2 |
Prompts before deletion of files
*******USE -i AT FIRST******* |
rm -i * |
Prompts at each nonhidden file and lets you decide whether or not to delete it |
|
rm -f file1 file2 |
Forces deletion without prompt regardless of permissions |
rm -f program |
Removes the file program without regard to permissions, status, etc. |
|
rm -r directory
rm -R directory |
Remove a directory along with anything inside of it |
rm -r bin
rm -R bin |
Each of these will remove the bin directory and everything inside of it. |
|
rmdir directory |
Removes a directory like rm -r does if the directory is empty |
rmdir bin |
Removes the bin directory if it is empty |
|
****dangerous****
rm -fR name
rm -Rf name |
This combination will force the removal of any file and any directory including anything inside of it |
rm -Rf c_ya |
Forces removal without prompts of the c_ya directory and anything inside of it |
|
rm -Ri directory |
Deletes the contents of a directory and the directory if it is empty by prompting the user before each deletion |
rm -Ri rusure |
Deletes anything in the directory called rusure that you verify at the prompt, and if you remove everything in the directory, you will be prompted whether you want to remove the directory itself or not |
|
NOTE: Options can be combined using rm |
|
|
|
rmdir -p directory |
Removes a directory and any empty parent directories above it (-pi does the same thing but it prompts before each removal) |
rmdir -p /home/bin/dir1
|
Deletes the dir1 directory; if bin directory is empty, it is deleted, and if home directory is empty it is also deleted |
|
Command |
Description (short) |
Example |
Explanation |
|
cp file1 newname |
Copies a file (file1) and names the copy the new name (newname) |
cp old new |
Makes a copy of the file/directory named old and names the copy new, all within the current directory
NOTE: If you copy a file to a newfile name and newfile already exists, the newfile contents will be overwritten. |
|
|
|
cp file dir2/ |
Places a copy of file in dir2/ and it retains its original name |
|
|
|
cp ../dir1/* . |
Copies everything from the dir1 directory located just below where you currently are and places the copy “here” ( . ) in your current directory |
|
cp -p name target |
Preserves all permissions in the original to the target |
cp -p execut1 execut2 |
Copies execut1 executable file and calls the copy execut2, which also has executable permissions |
|
cp -R directory target |
Copies a directory and names the copy the new name (target) |
cp -R old/ junk/ |
Makes a copy of the directory named old and names the directory copy junk |
|
cp -f name target |
Forces existing pathnames to be destroyed before copying the file |
none |
No example or description needed |
|
mv initial final |
Renames files and directories |
mv temp script_1 |
Renames the file (or directory) temp to the name script_1 in the current directory |
|
|
Also moves files to other directories |
mv script.exe ~/bin |
Moves the script.exe file to the bin directory that is in the home (~) parent directory and it keeps its initial name |
|
|
You can do multiple moves. |
mv script_1 script.exe ~/bin |
Moves both script_1 and script.exe to the bin directory |
|
|
|
|
|
|
pwd |
Prints the current directory to the screen |
pwd |
May print something like “/home/bob” |
|
|
|
|
|
|
pr (option) filename |
Prints the specified file to the default printer (options are not required but can be combined in any order) |
pr userlist |
Prints the contents of userlist to the default printer |
|
pr +k filename |
Starts printing with page k |
pr +5 userlist |
Prints the contents of userlist starting with page 5 |
|
pr -k filename |
Prints in k columns |
pr -2 userlist |
Prints the contents of userlist in 2 columns |
|
pr -a filename |
Prints in multicolumns across the page (use with -k) |
pr -3a userlist1 |
Prints userlist in three columns across the page |
|
pr -d filename |
Prints in double space format |
pr -d userlist |
Prints userlist with double space format |
|
pr -h “header” filename |
Prints the file with a specified header rather than the filename |
pr -h “users” userlist |
Prints userlist with users as the header |
|
NOTE: Options can be combined using pr |
|
|
|
Command |
Description (short) |
Example |
Explanation |
|
lpconfig printer_id queue |
Configures remote printers to a local print queue |
lpconfig prntr1 bobprt |
Configures a printer named prntr1 to accept print requests from a local queue named bobprt |
|
lpconfig -r queue |
Removes the said queue from the local system |
lpconfig -r bobprt |
Removes bobprt queue from the local system if the person removing the queue is the owner or “root” |
|
lpconfig -d queue |
Makes the said queue the default queue |
lpconfig -d vpprnt |
Makes vpprnt the default print queue |
|
|
|
|
|
|
lpstat (-options) |
Prints printer status information to screen (options not required) |
lpstat |
Prints status of all requests made to the default printer by the current server |
|
lpstat -u“user1, user2” |
Prints the status of requests made by the specified users |
lpstat -u“bob” |
Prints status of all requests made by the user with the id bob |
|
lpstat s |
Prints the queues and the printers they print to |
none |
None |
|
lpstat -t |
Shows all print status information |
none |
None |
|
lpstat -d |
Shows the default printer for the lp command |
none |
None |
|
lpstat -r |
Lets you know if the line printer scheduler is running |
none |
None |
|
lp (-option) file(s) |
Like pr, this prints designated files on the connected printer(s) (options not required and options may be combined). |
lp junkfile |
Prints the file junkfile to the default printer in default one-sided, single-sided, single-spaced format |
|
lp -ddest file(s) |
Prints the file(s) to a specific destination |
lp -dbobsq zoom |
Sends the file zoom to the bobsq print queue to print |
|
lp -nnumber file(s) |
Allows user to designate the number of copies to be printed |
lp -n5 crash |
Prints five copies of crash in default settings |
|
lp -ttitle file(s) |
Places title on the banner page |
lp -tBobs cash |
Prints Bobs on the banner page of the file printout named cash |
|
lp -ooption file(s) |
Allows printer-specific options to be used (i.e., double-sided or two pages per side, etc.) |
lp -od output |
Prints the output file double-sided on the printout |
|
|
|
lp -obold output |
Prints output in bold print |
|
|
|
lp -ohalf output |
Divides the paper into two halves for printing output |
|
|
|
lp -oquarter output |
Prints four pages of output per side of paper |
|
|
|
lp -olandscape output |
Prints output in landscape orientation |
|
|
|
lp -oportrait output |
Prints output in portrait orientation |
|
NOTE: Options can be combined using lp |
|
|
|
|
|
|
|
|
cancel request_id |
Stops print jobs or removes them from the queue (request_ids are obtained using lpstat) |
cancel 5438 |
Stops the print job with the id 5438 whether it is printing or if it is sitting in the queue |
|
cancel -a printer |
Removes all print requests from the current user on the specified printer |
cancel -a bobsprt |
Removes all the requests from the current user to the printer named bobsprt |
|
cancel -u login_id |
Removes any print requests queued belonging to the user |
cancel -u bob |
Cancels all queued print requests for user bob |
|
Command |
Description (short) |
Example |
Explanation |
|
ps |
Shows certain information about active processes associated with the current terminal |
ps |
Shows a listing of process IDs, terminal identifier, cumulative execution time, and command name |
|
ps -e |
Shows information about all processes |
ps -e |
Shows a listing of process IDs, terminal identifiers, cumulative execution time, and command names for all processes |
|
ps -f |
Shows a full listing of information about the processes listed |
ps -f |
Shows UID (user or owner of the process), PID (process ID--use this number to kill it), PPID (process ID of the parent source), C (processor utilization for scheduling), STIME (start time of the process), TTY (controlling terminal for the process), TIME (cumulative time the process has run), and COMMAND (the command that started the process) |
|
ps -u user_id |
Shows all processes that are owned by the person with the pertinent user_id |
ps -u bob |
Shows all the processes that belong to the person with the userid bob |
|
ps -ef |
Shows all processes in a full listing |
ps -ef |
Shows all current processes in full listing |
|
|
|
|
|
|
kill process_id |
Stops the process with the said id |
kill 6969 |
Kills the process with PID 6969 |
|
kill -9 process_id |
Destroys the process with the said id |
kill -9 6969 |
PID # 6969 doesn’t have a chance here. |
|
|
|
|
|
|
grep string file |
Searches input file(s) for specified string and prints the line with matches |
grep mike letter |
Searches for the string mike in the file named letter and prints any line with mike in it to the screen |
|
grep -c string file |
Searches and prints only the number of matches to the screen |
grep -c hayes bankletter |
Searches the file bankletter for the string hayes and prints the number of matches to the screen |
|
grep -i string file |
Searches without regard to letter case |
grep -i hi file1 |
Searches file1 for hi, Hi, hI, and HI and prints all matches to the screen |
|
grep -n string file |
Prints to the screen preceded by the line number |
grep -n abc alpha |
Searches alpha for abc and prints the matches’ lines and line numbers to the screen |
|
grep -v string file |
All lines that do not match are printed |
grep -v lead pencils |
Prints all lines in pencils that do not contain the string lead |
|
grep -x string file |
Only exact matches are printed |
grep -x time meetings |
Prints only lines in meetings that match time exactly |
|
|
grep is useful when you use it in a | “pipe” |
ps -ef | grep bob |
Finds all processes in full listing and then prints only the ones that match the string bob to the screen |
|
|
You can also redirect its output to a file. |
grep -i jan b_days>mymonth |
Searches the file b_days for case-insensitive matches to jan and places the matching lines into a file called mymonth |
|
Command |
Description (short) |
Example |
Explanation |
|
vuepad filename |
Opens filename for editing/viewing in the vuepad editor |
none |
None |
|
|
|
|
|
|
vi filename |
Text editor that exists on every UNIX system in the world |
none |
None |
|
|
|
|
|
|
emacs filename |
Another text editor |
none |
None |
|
|
|
|
|
|
compress filename |
Compresses the file to save disk space. |
none |
None |
|
uncompress filename |
Expands a compressed file |
none |
None |
|
|
|
|
|
|
awk |
UNIX programming language |
none |
None |
|
|
|
|
|
|
eval `resize` |
Tells the target computer that you’ve resized the window during telnet |
none |
None |
|
|
|
|
|
|
chexp # filename |
Keeps the file(s) from expiring (being erased) on the target computer for # days |
chexp 365 nr* |
Keeps the target computer from deleting all files starting with nr for 1 year (365 days) |
|
|
|
chexp 4095 nr* |
Makes all files whose name starts with nr never expire or be deleted (infinite) |
|
|
|
|
|
|
qstat |
Displays the status of a process that has been submitted the Network Queuing System (basically a batch job) |
qstat |
Shows the status of the requests submitted by the invoker of the command—this will print request-name, request-id, the owner, relative request priority, and request state (is it running yet?) |
|
|
|
qstat -a |
Shows all requests |
|
|
|
qstat -l |
Shows requests in long format |
|
|
|
qstat -m |
Shows requests in medium-length format |
|
|
|
qstat -u bob |
Shows only requests belonging to the user bob |
|
|
|
qstat -x |
Queue header is shown in an extended format |
|
|
|
|
|
|
xterm
xterm -option
xterm +option |
Opens a new window (x-terminal) for you to work
-option sets the option
+option resets the option to default |
xterm |
This opens another window like the one you are currently working in.
USING XTERM WILL ELIMINATE A LOT OF DESKTOP CLUTTER. I STRONGLY SUGGEST YOU LEARN TO USE IT IN YOUR SCRIPTS. |
|
xterm -help |
Displays the xterm options |
xterm -help |
Shows the options available |
|
Command |
Description (short) |
Example |
(Explanation) |
|
xterm -e program |
Executes the listed program in the new xterm window—when the program is finished, the new xterm window goes away |
xterm -e myprog.exe |
This opens an xterm window and executes the program myprog.exe from that window so that you may still work in your present window. |
|
xterm -sb |
Opens an xterm that saves a set number of lines when they go off the top of the page and makes them accessible with a scroll bar |
xterm -sb |
Puts a scroll bar on the right side of the page for reviewing past lines in the window
NOTE: When clicking in the scroll bar, the left button scrolls down, the right scrolls up, and the middle snaps the scroll bar to the mouse position for dragging up and down. |
|
xterm -sl number |
Specifies the number of lines to be saved once they go off the top of the screen (default is 64) |
xterm -sl 1000 |
The xterm will save 1,000 lines of work once it has moved off the immediate viewing area; it can be accessed using the scroll bar. |
|
xterm -geom xxy+px+py |
This option allows you to specify the size x pixels by y pixels and placement position x by position y of the new window when it opens.
Position +0+0 is the top left-hand corner of the screen, and the bottom right is approx. +1200+1000 depending on your resolution.
Note: The size of the window takes precedence over position, so if you position it too close to the side of the screen, it will position at the edge with the correct size. |
xterm -geom 80x80+0+50
xterm -geom 10x35+300+500
xterm -geom 5x5+0+0 |
The first command will open a window 80 pixels wide by 80 pixels tall and position its top left-hand corner at 0 pixels to the right of the left edge and 50 pixels down from the top of the screen.
The second command will open a window 10 pixs wide by 35 pixs tall and position its top left-hand corner 300 pixs from the left edge and 500 pixs down from the top.
The third command will make a 5 by 5 window and position its top left-hand corner at the top left-hand corner of the screen.
xterm will not compromise size when positioning. |
|
xterm -title label |
Allows you to label your window’s top title bar |
xterm -title SCRIPTS |
Opens an xterm window with the title SCRIPTS (default is whatever follows the -e option) |
|
xterm -(areas) color |
Allows you to modify different colors in your xterm window |
xterm -bg white
xterm -bd huntergreen
xterm -fg red |
The first command sets the background color to white.
The second command sets the window border color to huntergreen.
The third command window sets the text color to red. |
|
xterm -fn font |
Sets the font in the new xterm window |
xterm -fn courr18 |
Sets the font to courr18 (default is fixed) |
|
xterm -iconic |
Starts the new xterm as an icon (double-click to maximize) |
xterm -iconic -title xyz |
Opens an xterm in iconic form with the title xyz |
|
NOTE: Options can be combined using xterm |
|
| |
PPTP through firewall
|
| | A. For PPTP VPN connections, you need to open TCP port 1723 for PPTP tunnel maintenance traffic and permit IP Type 47 Generic Routing Encapsulation (GRE) packets for PPTP tunnel data to pass to your RRAS server's IP address.
If the PPTP-based RRAS server is the calling router on router-to-router VPN connections (i.e., VPN-based LAN-to-LAN connections to another RRAS server), you need to create an input filter (i.e., inbound rule) on your firewall to open TCP port 1723 as a source port to your RRAS server.
For L2TP VPN connections, you need to open UDP port 500 for Internet Key Exchange (IKE) traffic and UDP port 1701 for L2TP traffic. If you restrict outbound traffic, be sure to open all these ports in that direction so that the VPN server can properly communicate with your remote VPN clients.
If VPN traffic is the only traffic you permit to your RRAS server, the best practice from a security standpoint is to deny all traffic except the types I listed in the previous paragraph. I also suggest that you place your RRAS server in a network demilitarized zone (DMZ) rather than on the internal LAN.
Chapter 9 of the Microsoft Windows 2000 Server Resource Kit's "Internetworking Guide" volume provides information about properly configuring firewalls for this situation and other VPN server scenarios. |
Quality of Service (QoS) on Cisco Catalyst switches
|
| |
The overall objective of QoS is to prioritize the voice/video traffic at the uplink port/router port so that those packets are not delayed. In order to achieve this objective, the following guidelines can be used:
|
COs/Port Priority |
Queue Selected |
|
0-3 |
Q1 (Lower priority) |
|
4-7 |
Q2 (Higher priority) |
-
Configure the PC ports as access ports. The default priority on a port is zero. If needed, you can explicitly configure the port by issuing the switchport priority default <0-3> command so that the traffic coming from those ports are queued in lower priority queue.
-
Configure ports which receive tagged low-priority traffic by issuing the switch priority override command and the switchport priority default <0-3> command so that this traffic is queued in low priority queue. The override option is available only on WS-X3524-PWR-XL and WS-X3548-XL with Cisco IOS® software version 12.0(5)XU and higher.
-
Configure the ports connected to Cisco IP phones for 802.1Q trunking so that the switch can act on the dot1q/p priority from the phones. As a result, the switch can queue these packets in the high priority queue. You can configure InterSwitch Link (ISL) trunks to Cisco devices/server Network Interface Cards (NICs), which support the encapsulation. The switch can act on the Class of Service (COs) value present in the ISL frame.
-
Configure the ports connected to Cisco IP phones with a PC attached to the secondary port by issuing the extended trust configuration switchport priority extend COs<0-3> command so that these frames are queued in the low priority queue.
-
Configure the ports connected to Cisco IP phones with another Cisco IP phone attached to the secondary port by issuing the extended trust configuration switchport priority extend trust command so that these packets are queued to the high priority queue as well.
-
Configure the ports connected to non-Cisco IP phones (which can not tag dot1p value) by issuing the switch priority default <4-7> command so that those frames are queued in the high priority queue. Remember that all traffic received on this port would be prioritized and hence avoid connecting PC or other data traffic devices on this port.
The exec mode show interface <interface> switchport command provides the current configuration on the port. This configuration can be used to verify whether you have configured the interface according to the requirement.
3548XL#show running-config interface FastEthernet 0/20
Building configuration...
Current configuration:
!
interface FastEthernet0/20
switchport trunk encapsulation dot1q
switchport mode trunk
switchport priority default 5
spanning-tree portfast
end
3548XL#show interfaces FastEthernet 0/20 switchport
Name: Fa0/20
Switchport: Enabled
Administrative mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: Disabled
Access Mode VLAN: 0 ((Inactive))
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: ALL
Trunking VLANs Active: 1-22,29,231,651
Pruning VLANs Enabled: 2-1001
Priority for untagged frames: 5
Override vlan tag priority: FALSE
Voice VLAN: none
Appliance trust: none
There is no command available which provides information on egress scheduling or queuing statistics. The scheduling, as explained earlier in this document, is priority scheduling. This means that if a packet exists in the Q2, it is scheduled ahead of any packet in Q1. To verify whether packets are being tagged as expected on a trunk egress port, you can use an inline sniffer to capture the frames coming from the egress port or capture the frame on the switch downstream.
|
Quickly Delete Print jobs and clear spooler
|
| | Check the spooler - you can clear jobs from the spooler by doing the following.
1) Start/Run/Net stop spooler - This stops the spooler subsystem 2) Start/Run/Spool - This will open an explorer window at <windows>\system32\spool 3) Open the printers folder in the above window 4) Delete anything present in this folder - this will delete any pending print jobs 5) Start/Run/Net start spooler - This will re-start the spooler subsystem
You can even create a batch file that will do this and stick it on your desktop or quick-launch bar. Just copy the text below into a new text file and name it something like fixspool.bat.
@echo off net stop spooler del %windir%\system32\spool\*.spl /Q del %windir%\system32\spool\*.shd /Q net start spooler |
RAS Error Codes
|
| | Troubleshooting VPN/PPP problem by using the log on VPN server Error 619 Error 624 Error 628 Error 629 Error 645 Error 649 Error 650 Error 678 Error 682 Error 691 Error 711 Error 720 Error 721 Error 733 Error 797 Error 800 Error 913 Error 930
Troubleshooting VPN/PPP problem by using the log on VPN server
MS windows event viewer and log are very useful tools in troubleshooting VPN/PPP. If you have a difficulty to access the VPN/RAS server, you may go to the event viewer of the VPN/RAS server to check any errors. Alternatively, you can go to %SystemRoot%\system32\LogFiles to view any possible causes. To enable the PPP log on w2k server, go to Routing and Remote Access Services (RRAS)>properties>Event Logging, Check the Enable Point-to-Point Protocol (PPP) logging box.
To enabling PPP Logging on a Computer Running Windows 2000 Professional Using Netsh.exe. To do this, at command prompt, type
netsh ras set tracing PPP enable
NOTE: The Netsh.exe utility is the only option to enable PPP logging in Win 2000 Pro. After you enable logging, the computer logs all PPP activity to the xxx.log file in the %SystemRoot%\LogFiles. Since PPP logging uses system resources and hard disk space, you should turn off it when you are finished troubleshooting.
Still need help, contact consultant Consult@hidev.com Your feedback and contributions to this web site
Error 619: The port was disconnected (or Error 645, Dial-Up Networking could not complete the connection to the server and Error 930, The authentication server did not respond to authentication requests in a timely fashion. The Event Viewer shows: Event id: 20073, Description: The following error occurred in the Point to Point Protocol module on port: port number, UserName: user name. The authentication server did not respond to authentication requests in a timely fashion). When using VPN to access a remote network, W2K clients mat get above errors but not win9x and ME clients. This issue occurs because the VPN server hasn't registered in Active Directory.
Resolution: 1) Add the VPN to the appropriate group. To do this, go to Active Directory Users and Computers>domain name>Users, double-click the RAS and IAS Servers security group. Select the members and add the VPN server to this group. 2) Type netsh ras add registeredserver at a command prompt (registeredserver is vpn server name), and then press ENTER.
Error 624: Cannot update the phonebook file.
Resolutions: 1) Make sure that RASPHONE.PBK is located in system32\RAS\. If so, rename the file to RASPHONE.OLD and run RASPHONE.EXE. If not, just run RASPHONE.EXE. 2) Uninstall and reinstall DUN/RAS.
Error 628: The port is disconnected. This is most likely a modem or phone line noise issue.
Resolutions: 1) make sure you have good phone line. 2) check the modem settings. Or you may want to try the following strings: AT&F1, ATZ&B0&C1&D2. 3) Install update >modem driver. 4) Reinstall the modem.
Error 629 - The port was disconnected by the remote machine (also re: error 913).
Check lists: 1) Make sure the username and password you have entered for the DUNS connection is correct. 2) Also make sure the phone number is correct. 3) if calling a server set for 128-bit encryption when you don't have 128-bit encryption installed on client. 4) if all the entries for RAS are not correct, you may get this error. This would include incorrect settings for the Basic, Server, Script, Security and X.25. 5) The settings for authentication and encryption on the security tab must match what your ISP requires. 6) if a new account logs on using PPTP and change password on first logon is enabled. 7) may be caused if the modem port speed is set below 19,200. 8) Can be caused by software or modem not being configured properly or being damaged
Error 645: Internal authentication error (also re: error 913), or Dial-Up Networking could not complete the connection to the server.
Resolutions: 1) uncheck require encrypted password under the Server Types tab. 2) Make sure you are entering your correct username and password when connecting. 3) >Uninstall and reinstall the Dial Up adapter. 4) Refer to error 619 resolution - add the vpn to the appropriate group.
Error 649. The account does not have permission to dial-in.
Resolution: 1) This error can occur if the user name is the same as the domain name. 2) This error can occur if the username is 'system'. 3) This error can occur if dialing in to a Windows NT Remote Access Server and your password has expired. 4) Make sure the user is allowed to dial-in. 5) Check PPTP filtering. For the test, disable PPTP filtering on the server (Net Stop RASPPTPF), and see if you can establish a non-filtered connection.
Error 650:The Remote Access server is not responding.
Resolution: 1) Proxy or firewall block like port 1723 and IP GRE 74. 2) Check the server type and uncheck most of them. 3) Make sure you type correct information in logon screen. 4) Check PPTP filtering. For the test, disable PPTP filtering on the server (Net Stop RASPPTPF), and see if you can establish a non-filtered connection.
Error 678: There was not answer.
Resolution: 1) you are dialing the wrong number. 2) make sure you have good connection. 3) If using VPN, make sure the port 1723 and IP Protocol 47 (GRE) are opened.
Error 682: When VPN clients try to remotely log on to your network, they may be denied access. Users may receive one of the following error messages: Error 628: The connection was closed, and see the Verifying Username and Password dialog box. This issue may occur if your VPN server is located behind a Linksys BEFSR41 router, Proxy or ISA.
Resolution: To resolve Linksys BEFSR41 router issue, update the firmware for your Linksys BEFSR41 router. To resolve Proxy or ISA issue, obtain the latest service pack for ISA Server 2000.
Error 691: Access denied because username and/or password is invalid on the domain.
Resolution: Verify the logon ID and password are correct. 2) Make sure the Include Windows logon domain check box is unchecked in the Options tab of the dial-up connection's Properties dialog box. 3) Make sure the dial-up connection's security option is correctly configured to use the Require secured password setting. 4) Delete all of the *.pwl files and reboot if you are using win9x. 5) Try another logon ID or create a new Logon ID because the profile may be damaged.
Error 711: When attempting to start the Routing and Remote Access Service, you may receive "The Routing and Remote Access service terminated with service-specific error 711" and Event ID: 7024 in the System Event log of the server shows. This behavior may occur because the Routing and Remote Access Service is unable to start if the Remote Access Connection Manager service, Remote Access Auto Connection Manager, and the Telephony service are disabled.
RESOLUTION: to resolve this behavior, you must use the Services Administrative tool to set the Startup Type of all the Remote Access Connection Manager service, Remote Access Auto Connection Manager, and the Telephony service to Manual.. After you have made these settings, you can restart the Routing and Remote Access Service.
Error 720: No PPP control protocols configured.
Resolution: 1) make sure both RAS server and client have the correct protocol setup. 2) make sure the NetBIOS interface has being installed and the NetBIOS binding has being enabled. The NetBIOS interface is required for establishing logical names and sessions on the network for Windows NT/9x/ME. Refer: MS Q123298.
Error 721: Remote PPP peer or computer is not responding. If you have tried many thing other people suggest like rebooting, reloading hardware and re-installing the VPN or dial in connection, you still get the same problem. I will suggest to check the router settings and make sure TCP Port 1723, IP Protocol 47 (GRE) are opened.
Error 733: the PPP control protocol for this network protocol is not available on the server.
Resolution: 1) Ensure that the TCP/IP protocol is installed on your RAS server and that the TCP/IP protocol is selected in the Server Settings of the Network Configuration option of the Remote Access Setup dialog. 2) If you have the "Use DHCP to assign remote TCP/IP client addresses" option selected for the TCP/IP protocol in the RAS Server Settings, then ensure that you have installed DHCP and that it is not disabled. 3) Ensure that all of the bindings for TCP/IP are enabled in the Bindings tab of the Network dialog of the Control Panel. Be sure to inspect the TCP/IP Protocol and WINS Client (TCP/IP) bindings for all adapters, all protocols, and all services. If the TCP/IP bindings are corrupt, you may have to reinstall TCP/IP and or RAS in order to clean up the bindings.
Error 797 - The modem could not be found.
Resolutions: 1. Rebooting the machine that may solve the problem. 2. Remove and then re-install the modem. 3. Check to see if there is an upgrade driver for your modem.
Error 800: Unable to establish the VPN connection. The VPN server may be un-reachable, or security parameters may not be configured properly for this connection.
Resolutions: 1) if you have firewall, open TCP Port 1723, IP Protocol 47 (GRE). 2) make sure you can reach the VPN server by using ping. 3) You may need to updated firmware on a router or firewall if other OS (win9x/nt/me/w2k) works except XP.
Error 913: A Remote Access Client attempted to connect over a port that was reserved for Routers only (also re: Error 629 and 645). The event viewer may also generate the following event:
Event ID: 20188 Source: RemoteAccess Description: The user username, attempting to connect on port, was disconnected because of the following reason: A Remote Access Client attempted to connect over a port that was reserved for Routers only.
Resolutions: 1) Enable Remote access connections. To do this, go to Routing and Remote Access administrative tool>Ports>Properties, click the appropriate port (L2TP, Modem, PPTP, LPT1, and so on), and then click Configure, and then check the Remote access connections (inbound only). 2) Double-click the "Incoming Connections" icon on network connections folder and make sure "Allow VPN Connections" is enabled.
|
Red X on mapped drives
|
| | Symptoms:
- There are three computers in the peer to peer workgroup with a Multi-user version of Peachtree. Two computers were just upgraded from ME to XP Home and third one runs ME. After this upgrade, XP #2 shows a red x on the mapped XP #1 peachw folder and can't run Peachtree unless you double-click red x marked peachw drive to active it.
- You may also experience saving issue too. Sometimes, when saving a file to a network drive with red x, you may get an error which says document not saved while is saving.
- You may have browser issue when opening My Network Places and can't see any or some computers. Or it takes long time to shows networking computers in My Network Places.
- Firewall and autodisconnect are not issues here because all firewall and autodisconenct are disabled.
Resolution:
- Make sure the is no browser problems (see: Browser issues)
- Create a logon batch file with non-persistent mapping.
More: You have mapped some network drives and checked the reconnect at logon, or your network uses logon script to map network drives. After rebooting, some network mapped drives may show with a red 'X'. If you click on the drive, it becomes active.
Net use /persistent:yes is default settings for NT and win2000/XP. This is why when you have mapped some network drives and check the reconnect at logon, or your network uses logon script to map network drives, the mapped network drives may show red Xs after rebooting. If you enable echo and pause the logon script or if using net use to map the same drive manually, you may get "System error 85 has occurred. The local device name is already in use." One thing you may want to try to avoid the red X is using net use /persistent:no, for example, net use i: \\servername\folder /persistent:no.
By default non persistent idle connections will be dropped after 15 minutes. To modify idle time, at a command prompt using net config server /autodisconnect: minutes. For example, to set the Autodisconnect value to 30 minutes, you would run the following command line: net config server /autodisconnect:30. If you would like to turn Autodisconnect off, do net config server /autodisconnect:-1.
|
Regional Settings in the registry
|
| | All Regional/International settings are stored in the registry as type REG_SZ value at HKEY_CURRENT_USER\Control Panel\International
iCountry Country code is the international telephone code, except for Canada, which is 2. The default is 1.
iCurrDigits Number digits displayed after the decimal separator. The default is 2.
iCurrency Determines how currency is displayed:
|
Value |
Meaning |
|
0 |
$2 |
|
1 |
2$ |
|
2 |
$ 2 |
|
3 |
2 $ |
iDate Determines how dates are displayed:
|
Value |
Meaning |
|
0 |
mm/dd/yy |
|
1 |
dd/mm/yy |
|
2 |
yy/mm/dd |
iDigits The number of digits displayed after the decimal separator in numbers. The default is 2.
iLZero Leading zeros are not displayed if 0 (default). A Leading zero is displayed if set to 1.
iMeasure Metric is 0, U.S. is 1
iNegCurr Determines the format for displaying negative numbers (default is 1):
|
Value |
Meaning |
|
0 |
($100.00) |
|
1 |
-$100.00 |
|
2 |
$-100.00 |
|
3 |
$100.00- |
|
4 |
(100.00$) |
|
5 |
-100.00$ |
|
6 |
100.00-$ |
|
7 |
100.00$- |
|
8 |
-100.00$ |
|
9 |
-$ 100.00 |
|
10 |
100.00 $- |
|
11 |
$ 100.00- |
|
12 |
$ -100.00 |
|
13 |
100.00- $ |
|
14 |
($100.00) |
|
15 |
(100.00 $) |
iTime Determines if the clock is 12 hours (0) or 24-hour (1).
iTLZero The default of 0 means hours may have single digits, a 1 pads to double digits.
Locale locale ID for spoken language. The default is U.S. English which is 00000409.
s1159 AM indicator for a 12 hour clock.
s2359 PM indicator for a 12 hour clock.
sCountry Country name. The default for U.S. English is United States.
sCurrency Currency symbol. The default for U.S. English is $.
sDate Date separator. The default for U.S. English is /.
sDecimal Decimal separator symbol. The default for U.S. English is the . (period).
sLanguage Language abbreviation: (U.S. English is ENU)
|
Value |
Meaning |
|
CSY |
Czech |
|
DAN |
Danish |
|
DEA |
German (Austrian) |
|
DES |
German (Swiss) |
|
DEU |
German |
|
ELL |
Greek |
|
ENA |
English (Australia) |
|
ENC |
English (Canada) |
|
ENG |
English (U.K.) |
|
ENI |
English (Irish) |
|
ENU |
English (U.S.) |
|
ENZ |
English (New Zealand) |
|
ESM |
Spanish (Mexican) |
|
ESN |
Modern Spanish |
|
ESP |
Castilian Spanish |
|
ETI |
Estonian |
|
FIN |
Finnish |
|
FRA |
French |
|
FRB |
French (Belgian) |
|
FRC |
French (Canadian) |
|
FRS |
French (Swiss) |
|
HUN |
Hungarian |
|
ISL |
Icelandic |
|
ITA |
Italian |
|
ITS |
Italian (Swiss) |
|
NLB |
Dutch (Belgian) |
|
NLD |
Dutch |
|
NON |
Norwegian (Nynorsk) |
|
NOR |
Norwegian (Bokmal) |
|
PLK |
Polish |
|
PTB |
Portuguese (Brazilian) |
|
PTG |
Portuguese |
|
RUS |
Russian |
|
SKY |
Slovak |
|
SVC |
Swedish |
|
SVE |
Swedish |
|
TRK |
Turkish |
sList List separator character. The default for U.S. English is , (comma).
sLongDate Long Date format:
|
Value |
Meaning |
|
dddd, MMMM dd, yyyy |
Wednesday, November 19, 1997 |
|
MMMM dd, yyyy |
November 19, 1997 |
|
dddd, dd MMMM, yyyy |
Wednesday, 19 November , 1997 |
|
dd MMMM, yyyy |
19 November , 1997 |
sShortDate Short date:
|
Value |
Meaning |
|
MM/dd/yy |
03/08/99 |
|
M/d/yy |
3/8/99 |
|
M/d/yyyy |
3/8/1999 |
|
MM/dd/yyyyy |
03/08/1999 |
|
yy/MM/dd |
99/03/08 |
|
dd-MM-yy |
08-Mar-99 |
sThousand Thousands separator. The default for U.S. English is , (comma).
sTime Time separator. The default for U.S. English is : (colon).
sTimeFormat The default is HH:mm:ss |
Remote Desktop RDP
|
| | Does XP DRC support multiple remote user sessions?
Yes if you have XP Pro with SP2 (beta). Also Windows 2000/2003 Server support multiple remote user sessions.
How to change the connection settings
To change your connection settings, (such as screen size, automatic logon information, mapping local drives and printers, and performance options), click Options before you connect.
How to enable Remote Desktop
To use Remote Desktop, you need a WinXP Pro as the host and a remote computer running Win9x or a more recent version of Windows as the client that must have the Remote Desktop Connection client software installed. To enable remote desktop, go to Control Panel>System>Remote, check Allow users to connect remotely to this computer.
How to enable remote access on an XP machine To enable remote access on an XP computer, go to the properties of my computer>remote, check Remote assistance if you want to send and invite to some one by msn or email, and check the Remote desktop to allow users remotely to access this computer. You may want to add users by clicking Select Remote Users if the user will use the different logon ID.
On the Windows XP CD, under \SUPPORT\TOOLS you'll find a file called MSRDPCLI.exe. This file contains the setup for the Terminal Client Software (Remote Desktop Connection, or MSTSC.exe) for Windows 9x/2000 computers. You can run this file to install the new terminal services client to perform Remote Control to your Windows XP Professional computers (And Windows terminal services servers) from Windows 95/98. Once installed you can find it under, Program files>> Accessories>> Communications.
please note XP can run only one session at a time, logging on remotely will cause the locally logged user to be logged out.
Q: How to fix "Remote Control of this computer is not allowed" error
A: The ability to control your computer remotely is disabled by default. To configure the computer for remote control. go to Control Panel>System>Remote>Remote Assistance>Advanced. Under Remote control, click to select the Allow this computer to be controlled remotely check box.
Q: How to fix the error "Remote Assistance connection could not be established because the remote host name could not be resolved"?
A: When you receive an invitation from an Internet user whose computer is behind a router or firewall, the IP sent to you is the private IP behind the router or firewall. So that you can't access the computer. To fix this issue, 1) use notepad to open the invitation to change the private ip to the public ip which may be the router or firewall's ip. 2) Use Windows Messenger to establish the Remote Assistance session.
How to install Remote Desktop Connection client
Remote Desktop Connection Software can be installed on any of the following operating systems: Windows 95, Windows 98 and 98 Second Edition, Windows Me, Windows NT® 4.0, or Windows 2000 to remotely connect to a computer running Windows XP Professional with Remote Desktop enabled and MS Terminal Server.
The Remote Desktop Connection software is pre-installed with Windows XP. To run it, click Start>All Programs>Accessories>Communications>Remote Desktop Connection. This software package can also be found on the Windows XP Professional and Windows XP Home Edition product CDs and can be installed on any supported Windows platform. To install from the CD, insert the disc into the target machine's CD-ROM drive, select Perform Additional Tasks, and then click Install Remote Desktop Connection. You can also down it from http://microsoft.com/windowsxp/pro/downloads/rdclientdl.asp.
How to shutdown RDC
By default, Disconnect is the only command that is listed on the Classic Start menu, and Log Off command is available if you use the standard Start menu. The Shutdown command is not available on the Start menu to shut down and restart, when you are using Remote Desktop. To shut down a remote computer when you are using Remote Desktop, press CTRL+ALT+END, and then click Shutdown. Or, use the shutdown command at a command prompt.
Q: How to use Windows Messenger to obtain Remote Assistance A: Run Remote Assistance, click Invite someone to help you. Under Use Windows Messenger, click the contact that you want to invite, and then click Invite this person.
Q: How to use Remote Assistance over the firewall?
A: Remote Assistance will work through any firewall when Port 3389 is opened. When using Windows Messenger, dynamic ports are used in the helper’s ticket. The helper’s computer uses the first available TCP port above 1024. When using the Windows Messenger method, the requestor makes the first attempt to establish a Remote Assistance session using the helper’s IP address and port number in the ticket. Reference Q306298 Explanation of the Windows Messenger Reverse Connection Process and Q301529 Supported Connection Scenarios for Remote Assistance for more information. Remote Assistance can also push through Windows XP Internet Connection Firewall (ICF) without enabling TCP Port numbers.
Remote Assistance Features
The Connection Status box, which includes the following information: The name of the assistant. Whether you are connected or disconnected. The assistant's privileges during this session. For example, Screen View Only. The Stop Control (ESC) button: Press the ESC key to stop the computer from being remotely controlled. The Send a File button: Click this button to initiate file transfers between the local and remote computer. The Start Talking button: Click this button to initiate voice chat with the remote assistant. The Settings button: Click this button to adjust quality settings according to the connection speed that you have. The Disconnect button: Click this button to terminate the Remote Assistance session. The Help button: Click this button to view Remote Assistance help. The Message Entry box: Use this box to type messages to the remote assistant in real time. Click the Send button, or press ENTER to send the message. The Chat History window: This window records the text messages typed between you and the remote assistant. The ability to control your computer remotely is disabled by default: Which port does Remote Desktop use
Remote Desktop uses port 3389.
Why I can't see my local drives even I enable it
Depending on the policies of your network, local drive mapping might be disabled for some or all remote connections. Automatic drive mapping is not available when you are connecting to a terminal server running Windows 2000 or earlier.
Q: Why am I unable to control another XP by using Remote Assistance?
To take over the control the remote XP computer, click the Take Control on the top right. If you can't take the control, make sure Allow helpers to remotely control the computer under Offer Remote Assistance Setting is enabled. By default, Offer Remote Assistance Settings is disabled. To do enable it, open Group Policy by running gpedit.msc. go to Local Computer Policy\Computer Configuration\Administrative Templates\System\Remote Assistance. The user who will be giving assistance must be a member of the Local Administrators Group on the receiving machine or you need to added as a Helper in the Offer Remote Assistance Group Policy Setting. To add User and Groups to Group Policy: Go to Offer Remote Assistance Group Policy, and in the Helpers area, click Show. Click Add and then enter the Domain\user account.
|
Reset Domain Admin Password
|
| | the very useful "Offline NT Password & Registry Editor boot disk" will only let you reset the password for the MACHINE Administrator account, not the DOMAIN Administrator account. As you probably know, on a Windows 2000 server which is an Active Directory controller, you CANNOT log into any machine-level account. Which means that resetting the MACHINE Administrator password is pretty much useless.
Or so it would seem. It turns out that "Directory Service Recovery Mode" uses the MACHINE-level accounts, since the whole point of this modem is that the AD control databases may be corrupted and you need a way to manually edit them (presumably using some high-priced third-party software package...)
I (John Simpson - DP) was able to reset the password on the DOMAIN Administrator account using the following procedure:
-
Use the Offline NT Password & Registry Editor disk to reset the MACHINE Administrator password to "no password".
-
Reboot, hit F8, and enter "Directory Service Recovery Mode". The machine will boot up as a standalone server without any Active Directory support.

-
When the login screen appears, hit CTRL-ALT-DEL and log in as "Administrator" with no password. This is the MACHINE Administrator account, and does not have the ability to modify anything specific involving the Active Directory information, although it can backup and restore the physical files which contain the AD databases.
-
Run "REGEDIT.EXE" (without the quotes). Navigate to
HKEY_USERS\.Default\Control Panel\Desktop
and change the following values:
SCRNSAVE.EXE - change from logon.scr to cmd.exe
ScreenSaveTimeout change from 900 to 15
-
Reboot normally. When the box appears asking you to hit CTRL-ALT-DEL to log in, just wait.

After 15-30 seconds you will see a command prompt appear (since that is the screensaver).
-
In the command prompt, type the following command:
C:\WINNT\system32>MMC DSA.MSC

This should bring up the management console where you can edit users' passwords, including the password for the Administrator account.

-
After resetting the Administrator password, exit the management console and type the command EXIT in the command prompt window.
-
Hit CTRL-ALT-DEL and log into the DOMAIN Administrator account using the new password!
Don't forget to undo the changes you made to the registry, or you will always have a command prompt with Domain Administrator rights appear whenever somebody logs out. |
Restore the Operating System to a Previous State in Windows XP
|
| | System Restore takes a "snapshot" of critical system files and some program files and stores this information as restore points. You can use these restore points to return Windows XP to a previous state.
If Windows XP Does Not Start
If Windows does not start, restart Windows by using the Last Known Good Configuration feature:
- Start the computer and then press the F8 key when Windows begins to start. The Windows Advanced Options menu appears.
- Use the ARROW keys to select Last Known Good Configuration (your most recent settings that worked), and then press ENTER.
- If a boot menu appears, use the ARROW keys to select Microsoft Windows XP, and then press ENTER. Windows XP restores the computer to the most recent restore point.
If Windows XP Does Start
- Log on to Windows as Administrator.
- Click Start, point to All Programs, point to Accessories, point to System Tools, and then click System Restore. System Restore starts.
- On the Welcome to System Restore page, click Restore my computer to an earlier time (if it is not already selected), and then click Next.
- On the Select a Restore Point page, click the most recent system checkpoint in the On this list, click a restore point list, and then click Next. A System Restore message may appear that lists configuration changes that System Restore will make. Click OK.
- On the Confirm Restore Point Selection page, click Next. System Restore restores the previous Windows XP configuration, and then restarts the computer.
- Log on to the computer as Administrator. The System Restore Restoration Complete page appears.
- Click OK.
Troubleshooting
You may inadvertently restore Windows XP to a previous configuration that you do not want. To undo the restoration:
- Log on to Windows as Administrator.
- Click Start, point to All Programs, point to Accessories, point to System Tools, and then click System Restore. System Restore starts.
- On the Welcome to System Restore page, click Undo my last restoration, and then click Next. A System Restore message may appear that lists configuration changes that System Restore will make. Click OK.
- On the Confirm Restoration Undo page, click Next. System Restore restores the original Windows XP configuration, and then restarts the computer.
- Log on to the computer as Administrator. The System Restore Undo Complete page appears.
- Click OK.
|
RPC over HTTP
|
| | To configure RPC over HTTP
In the Custom Installation Wizard, on the Specify Exchange Settings page, select Configure settings for a new Exchange Server connection or replace the settings in an existing Exchange Server connection. If you are defining a new Exchange server for users, enter a value or replaceable parameter in User name. For instance, you might specify =%UserName% to use the exact logon name for each user. This helps prevent user prompts when Outlook starts asking users to choose between several variations.
If you are defining a new Exchange server, for Exchange Server, enter the name of the Exchange server. You can skip steps 2 and 3 if you are configuring RPC over HTTP for existing Exchange users who are not moving to a new Exchange server.
Select the Connect to Exchange Mailbox using HTTP check box. Type the server name for the RPC over HTTP proxy server. Do not enter http:// or https:// as part of the name. The appropriate entry (http:// or https://) will be included automatically in the box after you enter the name, based on the authentication settings you choose.
Choose whether or not to reverse default behavior for how Outlook chooses which connection type to try to use first, LAN or RPC over HTTP. Select an authentication method. The default method is Password Authentication (NTLM).
Click OK to return to the Specify Exchange Settings page. Complete any other Outlook or Office configurations, then click Finish to create the transform that you can deploy to your users. |
RPC over HTTP authentication required!
|
| | Basic authentication
If you want to use Basic authentication, you must continue to type your user account credentials. There is no way for the client to submit your user name and password automatically. If you want to log on automatically, you must configure your Outlook profile to use NLTM authentication to your proxy server for Exchange.
Before you switch to using NTLM authentication, you must verify with your administrator that NTLM authentication is permitted or even possible in your environment. Many firewalls and proxy servers will prevent successful NLTM authentication, whereas Basic authentication will work successfully. See the More Information section for additional details.
Note The authentication mechanism that you configure in Outlook is used only for the HTTP session to your proxy server for Exchange. The actual authentication between Outlook and your Exchange server always uses NTLM.
To change the authentication mechanism on the Outlook client to NTLM, follow these steps:
- Start Outlook 2003.
- On the Tools menu, click E-mail Accounts.
- Click View or change existing e-mail accounts, and then click Next.
- Under Outlook processes e-mail for these accounts in the following order, click Microsoft Exchange Server, and then click Change.
- On the Exchange Server Settings page, click More Settings.
- Click the Connection tab.
- Click Exchange Proxy Settings.
- Under Proxy authentication settings, click NTLM Authentication in the Use this authentication when connecting to my proxy server for Exchange list.
- Click OK two times.
- Click OK again in response to the prompt that you must restart Outlook for the changes to take effect.
- Click Next, and then click Finish.
- Restart Outlook.
NTLM authentication
If your account is configured to use NTLM authentication and you are still prompted for your user name and password when you are logged on as the Windows account that has access to your Exchange mailbox, you must set the LmCompatibilityLevel on your client to a value of 2 or 3. To do this, follow these steps.
Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
- Click Start, click Run, type regedit in the Open box, and then press ENTER.
- Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\
- In the right pane, double-click lmcompatibilitylevel.
- In the Value data box, type a value of 2 or 3 that is appropriate for your environment, and then click OK.
- Quit Registry Editor.
- Restart your computer.
|
Running Batch files bases on O/S
|
| | Sample: windows 9x = normal mapping, windows 2k runs wscript.
IF "%OS%" == "Windows_NT" goto NT_OS rem Other than Windows NT goto WIN_95
:NT_OS wscript \\server\netlogon\logon.vbs goto END
:WIN_95 net use g: \\apps\apps net use h: /home goto END
:END |
Security
|
| | Can't enable guest account How Inheritance Affects File and Folder Permissions "Not accessible. You may not have permission to use this network resource" The Sharing tab is not visible Understand Allow and Deny permissions Why can't I have permission button while setup sharing on XP
Can't enable guest account
To enable guest account on w2k/xp, you must logon as administrator.
How Inheritance Affects File and Folder Permissions
After you set permissions on a parent folder, new files and subfolders that are created in the folder inherit these permissions. If you do not want the files and folders to inherit permissions, click This folder only in the Apply onto box when you set up special permissions for the parent folder. If you want to prevent only certain files or subfolders from inheriting permissions, right-click the file or subfolder, click Properties, click the Security tab, click Advanced, and then click to clear the Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here check box.
If the check boxes are not available, the file or folder has inherited permissions from the parent folder. There are three ways to make changes to inherited permissions:
- Make the changes to the parent folder so that the file or folder inherits the permissions.
- Click to select the opposite permission (Allow or Deny) to override the inherited permission.
- Click to clear the Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here check box. When you do this, you can make changes to the permissions or remove the user or group from the permissions list. However, the file or folder does not inherit permissions from the parent folder.
Not accessible. You may not have permission to use this network resource
Symptom: Your WinXP, in a peer-to-peer mixed network, may receive the following error when you double-click My Network Places/Computers Near Me: <Workgroup Name> is not accessible. You may not have permission to use this network resource. Resolution: 1) Enable NetBIOS over TCP/IP on one or more computers in the workgroup. To do that, go to properties of Local Area Connection>properties of Internet Protocol (TCP/IP)>General> Advanced>WINS, check Enable NetBIOS over TCP/IP (If you have a DHCP-assigned IP address, select Use NetBIOS setting from the DHCP server ). 2) Make sure the Computer Browser service is started.
The Sharing tab is not visible
The sharing tab is not visible if you are logged on to a machine with an account that does not have adequate rights.
Understand Allow and Deny permissions
A: 1) Allow permissions are cumulative, so a user's permissions are determined by the cumulative effect of all of the groups to which the user belongs. 2) Deny permissions override Allow permissions. Use caution when you apply Deny permissions.
Why can't I have permission button while setup sharing on XP
The reason you can't see the permission is because the XP simple file sharing is enabled. To disable simple file sharing, go to windows explorer>tools>folder options>view, uncheck use simple file sharing. Just remember that, after disabling simple file sharing, some users may have difficulty to access the sharing folders. |
See what port a specific device is on...
|
| | Script:
@ECHO Off GOTO :MAIN
Reason: This script was created due to a need to know what port a specific device is on. (None of the "BIG NAME" network analyser tools/devices offer this functionality out of the box.)
Description: This Script will create a table listing "IP,MAC,SWITCH,PORT" for each device that is connected to the layer2 switces listed in the "DeviceList.txt" input file. (see "Input File" below) I have a DTS package that uploads the file into SQL then it is queried from a web page.
For creating file from the layer3 switch snmputil walk <ip-address> pswd .1.3.6.1.2.1.4.22.1.2
For creating files from layer2 switches snmputil walk <ip-address> public .1.3.6.1.2.1.17.4.3.1.1 snmputil walk <ip-address> public .1.3.6.1.2.1.17.4.3.1.2
Required OS: Windows 2000 or better. Required Files: SNMPUTIL.EXE and MIB files from Windows NT4 Reskit DeviceList.txt - see below MUNGE.EXE - from the Windows NT4 Reskit MUNGE.MUN - lists all the junk that must be removed from "working files" create a file named "munge.mun" and paste the following lines into the file. "Variable = .17.4.3.1.1.0." "" "Value = String " "" "<0x" "" ">" "" "Variable = .17.4.3.1.2.0." "" "Value = Integer32 " "" "End of MIB subtree." "" "Variable = ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaPhysAddress." "" "end. " "" " " "" Input file: "DeviceList.txt" File structure is as follows 3rd and 4th octet of the switch IP address,uplink port (or 0 for layer3 switch) 26.5,25 | | | | | |__ Unlink port on device ( value 0 for layer 3 devices) | |___ 4th octet |___ 3rd octet
example: 150.2,25 150.2,0 29.1,0 29.5,1 ... List all layer2 and layer3 switches.
NOTE: Table that is created will only contain info for the devices connected to the layer2 &nbs
| | |