我的學習手記 A technical geek blog: October 2015

Tuesday, October 27, 2015

Reference Network design to enhance network security to Home network

Of course, this is network design only

You still need to regular patch your device (e.g. install hotfix, upgrade firmware), disable any unnecessary remote access, change default username and password……..

Reference:

https://www.hkcert.org/my_url/en/blog/15073101

https://www.hkcert.org/my_url/en/blog/15052903

http://www.cybersecurity.hk/images/20150213_3.pdf

IBM Server related tools now become or replace by Lenovo Server tools

More countries released Tossup (Now added UK and Australia)

Tossup release in the UK and Australia now. It’s not every country now, but it making progress. There are also added a bunch of new features…..

Sunday, October 25, 2015

One-hand mode on Windows 10 Mobile Insider Preview (Build 10572)

Long press the “Start” button, it will come up.

The half screen will be use only on Nokia Lumia 525.

Wednesday, October 21, 2015

Hidden the InfoExpress Dynamic NAC agent icon for user (Windows 7)

Icacls "c:\program files\cybergatekeeper agent\cgav.exe" /inheritance:

Icacls "c:\program files\cybergatekeeper agent\cgav.exe" /remove:g builtin\users

Icacls "c:\program files\cybergatekeeper agent\cgav.exe" /grant:r builtin\users:R

Serviceability Update for Windows Thin PC

After install Windows Thin PC (WinTPC) is a stripped down version of Windows 7 for legacy PCs (built from a Windows Embedded Standard 7 base), you better to install the Serviceability Update for Windows Thin PC (http://www.microsoft.com/en-us/download/details.aspx?id=40306)

Reboot the PC and done.

Sunday, October 18, 2015

IIS setting for open a url to access local drive or network UNC path

1. Add .url to the available MIME types in your web server.

Step 1: IIS open the site, choose MIME Types

Step 2: Click “Add”

Step 3: Add MIME Type

File name Extension= .url
MIME type: application/internet-shortcut

2. The .url file is a text file formatted as follows (again, this can be dynamically generated).

File Contents:

And save this file to .url (e.g. install.url)

3. Provide a link to the script that generates the .url file, or to the file itself.

If you've simply uploaded a .url file to your server, add the following to your HTML:

<a href="Install.url">Installation source files</a>

Reference:

http://stackoverflow.com/questions/5246292/open-local-folder-from-link

How to allow Windows 7 to save RDP password and also remote to Windows Server 2008 or above server?

1. On your Windows 7 client, click Start, input gpedit.msc in search bar, press Enter.

2. Navigate to Computer Configuration\Administrative Templates\System\Credentials Delegation.

3. On the right pane, double click “Allow Saved Credentials with NTLM-only Server Authentication”.

4. Click Enable. In the Show contents dialog box, click Add, type the name of remote computer(server) in this format: TERMSRV/*, then click OK.

5. On Server, go to Computer Configuration\Policies\Administrative Templates\Windows Components\Terminal Services\Remote Desktop Connection Client

Prompt for credentials on the client computer – Disabled
Do not allow passwords to be saved – Disabled

6. Run “gpupdate /force” on both side (Server and client)

Reference:

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_26363489.html

http://www.remkoweijnen.nl/blog/2007/10/18/how-rdp-passwords-are-encrypted/

http://www.nirsoft.net/utils/remote_desktop_password.html

http://www.oxid.it/ca_um/topics/remote_desktop_password_decoder.htm

http://superuser.com/questions/307776/are-saved-remote-desktop-credentials-secure-on-the-local-machine

https://naveensnayak.wordpress.com/2011/08/17/windows-7-remote-desktop-connection-save-credentials-not-working/

https://social.technet.microsoft.com/Forums/windows/en-US/475ec46d-aafe-4040-a345-3dbcffeb9345/remote-desktop-wont-remember-credentials-on-windows-7

http://answers.microsoft.com/en-us/windows/forum/windows_7-security/remote-desktop-connection-not-using-saved/13a17d84-b008-4767-95fb-b891e9e6bc66?auth=1

http://superuser.com/questions/604483/windows-7-remote-desktop-connection-save-credentials-not-working

All non-domain user and computer to access file share on domain member server

1. Enable the "Guest" account on that domain member server which is hosting and sharing those files and folder (e.g. File Server)

2. then grant the "Everyone" group on the share folder “security” permission (NTFS permission) and share permissions

“Security” Permission (NTFS Permission)

Share Permissions:

Reference:

http://serverfault.com/questions/51635/how-can-an-unauthenticated-user-access-a-windows-share

Friday, October 16, 2015

Windows Phone Recovery Tool mandatory upgrade to Windows Device Recovery Tool

When you try to run Windows Phone Recovery Tool, you will receive a pop up and there are explain screen said Windows Phone Recovery Tool to Windows Device Recovery Tool.

After you click “OK”, then just follow the wizard, it will upgrade to Windows Recovery Tool 3.0.1

Once, the upgrade complete, you will able to connect to your Windows Phone again.

Thursday, October 15, 2015

Using Windows XP in Windows 10 by using Hyper-V client

1. Use the Windows command prompt to enable the hyper-v client on Windows 10

At the Windows command prompt (using administrator credentials), enter the following:

dism /online /enable-feature /featurename:Microsoft-Hyper-V -All

NOTE: You must restart your computer to complete the Hyper-V installation. Depending on your computer manufacturer, you may have to pause a few seconds before restarting, for the required changes to take effect. If you use a laptop, you may have to remove the battery before restarting. After restarting the computer, you can use Hyper-V Manager or Windows PowerShell to create and manage VMs. You can also use VM Console to connect to VMs remotely.

For more detail, please reference: Using Windows 10 Client Hyper-V

http://www.microsoft.com/en-us/download/details.aspx?id=48128

2. Download Windows XP Mode

http://www.microsoft.com/en-hk/download/details.aspx?id=8002

3. Then use 7-Zip or another archive tool to open the WindowsXPMode_en-us.exe file as an archive. Within that archive, find the “sources” file within it

4. Inside the "sources", there are file "xpm", extract it again

5. Inside the folder "xpm", there are file "VirtualXPVHD"

6. Rename the "VirtualXPVHD" to "VirtualXPVHD.vhd"

7. Open the "Hyper-V manager"

8. Go to Actions, click "Virtual Switch Manager.."

9. Select "Internet" and "Create Virtual Switch"

10. Select your "External network" connection and NIC card.

11. Create a new virtual machine

12. Select "Generation 1"

13. Select the connection you create for external connection

14. Select "attach a virtual hard disk later"

15. Select the VM which is you just create, go to setting and select "IDE Controller 0", select "Hard disk", then "Add".

16. Click "Broswe.." and select the vhd file "VirtualXPVHD.vhd"

17. Select the VM. connect and turn on the VM. Then connect the Windows XP post setup follow the wizard.

18. Ignore those unknown hardware during the post setup first.

19. You will see the Windows XP after the configuration complete.

20. Down the “vmguest.iso” to install the "Integration Services" for Windows XP or copy this ISO file from a Windows 2012 R2 machine which is enable Hyper-V. (The “vmguest.iso” under C:\Windows\System32)

https://onedrive.live.com/?id=4A4A4C07841B3A54%21107000&cid=4A4A4C07841B3A54&group=0&parId=root&authkey=%21AK1o_X3qu143-rw&action=locate

21. Mount the “vmguest.iso” to install “Integration Services”