Archive from July, 2004
Jul 31, 2004 - General    1 Comment

How do I disable MSN Messenger using group policies?

Q. How do I disable MSN Messenger using group policies? – Brian Cunliffe

To use group policy to remove messenger. First go to Start – Run – type “gpedit.msc”
Then drill down to :
– Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows Messenger(Set both items to Enabled)
This will disable it for you.

You can also use the registry (Start – run – regedit) to achieve similar results.
Drill down to:

PreventRun=1 Will prevent MSN Messenger from running
PreventAutoRun=1 Will prevent MSN from popping up automatically.
Set/create both these DWORD entries to 1 to disable MSN Messenger.

Jul 24, 2004 - General    1 Comment

How can I stop users from connecting to Windows Update?

Windows Update is great for getting the latest fixes; however, you probably want to control change roll-outs, so it’s a good idea to stop users from connecting directly to Windows Update. You can do so via a Group Policy:

Start the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in (Start, Programs, Administrative Tools, Active Directory Users and Computers).
Right-click the container of the users (a site/domain or organizational unit–OU), and select Properties.
Go to the Group Policy tab.
Select the policy and click Edit.
Expand User Configuration, Administrative Templates, Start Menu & Taskbar.
Double-click “Disable and remove links to Windows Update.”
Set this policy to Enabled and click OK.

Jul 24, 2004 - General, Windows XP    1 Comment

What is the difference between Windows XP Professional Edition and Windows XP Home Edition?

Backup—XP Pro has the standard Win2K backup program; XP Home has no backup program.
Dynamic Disks—XP Pro supports dynamic disks; XP Home doesn’t.
IIS—XP Pro includes IIS; XP Home doesn’t.
Encrypted File System (EFS)—EFS debuted in Win2K and lets you encrypt files on an NTFS partition, a very useful feature for mobile machines. XP Pro includes EFS; XP Home doesn’t.
Multiple Monitors—XP Pro supports up to nine monitors; XP Home supports only one monitor (Windows Me/Win98 supported multiple monitors).
Multiprocessor—XP Pro supports up to two processors; XP Home supports only one (as did Windows Me/Win98).
Remote Assistance—Both editions support Remote Assistance, which lets someone from a Help desk connect to the client desktop to troubleshoot problems.
Remote Desktop—XP Pro adds to Remote Assistance by letting any machine running a Terminal Services client run one Terminal Services session against an XP Pro machine.
Domain Membership—XP Pro systems can be domain members; XP Home systems can’t, but they can access domain resources.
Group Policy—XP Pro supports group policies; XP Home doesn’t.
IntelliMirror—XP Pro supports IntelliMirror, which includes Microsoft Remote Installation Services (RIS), software deployment, and user setting management; XP Home doesn’t support IntelliMirror.
Upgrade from Windows Me/Win98—Both XP Pro and XP Home support this upgrade.
Upgrade from Win2K/NT—Only XP Pro supports this upgrade.
64-bit Support—Only XP Pro will have a 64-bit version that supports the Itanium systems.
Network Support—XP Pro includes support for Network Monitor, SNMP, IP Security (IPSec), and the Client Services for NetWare (CSNW); XP Home doesn’t.

Jul 22, 2004 - General, Windows 2000    No Comments

How can I change the Recovery Console administrator password on a domain controller

When you use the Recovery Console (RC), the system uses the account passwords in the local SAM file. But if a system is a domain controller (DC), it doesn’t use the local SAM file, so changing the Administrator password changes the Active Directory (AD) account and not the local SAM password. To modify the SAM password, perform the following steps:

Shut down the DC on which you want to change the password.
Restart the computer. When the system displays the selection menu during the restart process, press F8 to view advanced startup options.
Select Directory Service Restore Mode.
After you successfully log on, to change the local Administrator password, at a command prompt, type the following command:

net user administrator *

Restart the computer.

If you don’t know the password, you can demote the DC to a regular server, change the password, then promote the system to a DC. You can also copy the SAM in the %SystemRoot%Repair folder to the %SystemRoot%System32Config folder.

How can I use the registry to configure Group Policy update times?

You usually configure Group Policy update times under the Computer ConfigurationAdministrative TemplatesSystemGroup Policy and the User ConfigurationAdministrative TemplatesSystemGroup Policy branches; however, you can also directly set the registry to configure Group Policy update times by performing the following steps:

Start regedit.exe.
Go to HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsSystem to set Computer refresh. Or, alternatively, go to HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsSystem to set User refresh.
Create a DWORD value with a name of GroupPolicyRefreshTime, and set it to a number between 0 and 648000 minutes.
Create a DWORD value with a name of GroupPolicyRefreshTimeOffset, and set it to a number between 0 and 1440 minutes. (You specify an offset value to prevent many clients from trying to refresh at the same time.)
Close regedit.

Jul 20, 2004 - General    No Comments

How do I activate Windows XP from the command line?

Windows XP will typically remind you to activate the product (most users will have 30 days to activate XP after installation). To activate XP manually, you can use the Start menu shortcut in the System Tools Accessories folder. At the command prompt, type

oobe/msoobe /a
In case you’re wondering, msoobe stands for “Microsoft Out of Box Experience.”

Jul 20, 2004 - General    No Comments

Why, when I try to install a service pack in Windows 2000, does my machine complain about the Print Spooler service?

When you install a service pack, the installer activates the Print Spooler service if it’s not already running. However, if you’ve disabled the start-up type for this service, the service will fail to start and the computer will display the following error message:

Cannot install the Service Pack.
The Print Spooler service is not started.

To resolve this problem, perform the following steps to set the service start-up type to manual:
Start the Microsoft Management Console (MMC) Computer Management snap-in (go to Start, Programs, Administrative Tools, and click Computer Management).
Select the Services and Applications branch.
Select Services.
Right-click Print Spooler, and select Properties.
Under the “Startup type:” setting, select Manual.
Click OK.

Jul 20, 2004 - General, Windows 2000    No Comments

Why do I receive an error message in Win2K that says my password must be at least 18770 characters?

This error occurs when you’re running Windows 2000 Service Pack 1 (SP1) and you connect to an MIT realm and select Change Password from the Security dialog box (Ctrl+Alt+Del). (An MIT realm is a Kerberos realm used for authentication in the same way that Win2K uses Kerberos 5 for authentication.) The full error you’ll receive is

“Your password must be at least 18770 characters and cannot repeat any of your previous 30689 passwords. Please type a different password. Type a password that meets these requirements in both text boxes.”

To correct this problem, contact Microsoft Support Services and request an updated msgina.dll file (version 5.0.2195.3351 or later).

How can I let users search, but not browse, Active Directory (AD)?

You can use either a policy setting or the registry to configure AD for browsing. To use the policy setting method, perform the following steps:

Open Group Policy with the Group Policy Editor (GPE).
Navigate to User Configurations, Administrative Templates, Desktop, AD.
Double-click “Hide Active Directory folder.”
Select the Policy tab.
Click Enabled, and click OK.
Close the policy.

To use the registry to complete the same task, perform the following steps:

Start the registry editor (e.g., regedit.exe).
Navigate to HKEY_CURRENT_USERSOFTWAREPoliciesMicrosoft.
If the Windows key doesn’t exist, click Edit, New, Key to create the key.
Look for “Directory UI” under the Windows key, and if it doesn’t exist, click Edit, New, Key to create the key.
From the Edit menu, select New-DWORD Value.
Enter a name of HideDirectoryFolder, and press Enter.
Double-click the new value, set it to 1, and click OK.
Close the registry editor.

Related Posts Plugin for WordPress, Blogger...