A few people have emailed asking why Windows Server 2008 does not reply to pings (and how to enable it).

It doesn’t by default. No official reason why, but it probably has something to do with POD (Ping of Death) and Ping Flooding. Commonly used in Denial of Service attacks, POD is when a target server is sent an unusually large ICMP packet. For Ping flooding, if the target server is set to respond to pings, it may become bogged down and unable to effectively respond to other requests such as HTTP and FTP. Denial of Service attacks usually require a coordinated effort among multiple computers to halt a server - but it happens, and often!

To enable pings on the public profile (ie. over the Internet), go to Administrative Tools -> Firewall with Advanced Security -> Inbound Rules and find “File and Printer Sharing (Echo Request – ICMPv4-In)” -> Right-click and select “Enable.”

You can also open up the command prompt and type:

or type the following to disable the setting:

For Windows Server 2008 R2, type:

(No Ratings Yet)

No Comments |  Print This Post |

I find adding common tasks to the shell menu a great timesaver when I am running between stations. It is also easier to direct users to simply “right-click” on something rather than walk them through a maze of menus…or even have them find the “run” box.

1. Click Start -> type “regedit” in the Search command box.
2. Navigate to HKEY_CLASSES_ROOT\Drive\shell.
3. Right-click on “shell” and select New -> Key. Name it “runas” and set the default value to “Defragment”.
4. Right-click on “runas” and select New -> Key. Name it “command” and set the default value to “defrag %1 -v“.
5. If you ever wish to remove this functionality, just delete the “runas” key.

You can also paste the following into Notepad and save it as: RightClickDefragment.reg or you can download the zipped RightClickDefragment.reg here. Double-click on the .reg file and click “yes” when asked to enter it into the registry.

(No Ratings Yet)

No Comments |  Print This Post |

Although this particular problem has been around for some time, I am surprised at how many times I am asked about the solution. Many programs use an HTML help system that requires Internet Explorer and ActiveX to run (CHM – Compiled HTML Help). After security updates 896358 and 890175, some HTML content outside of the “local machine” zone was disabled. This would affect many network based programs or programs that connect to an outside server for HELP files. When accessing the Help system, an error saying “Page Cannot Be Displayed” would show up. Luckily the fix is easy.

In Notepad, copy and paste the code you need and name it “htmlhelpfix.reg” Then double-click on the file and click “YES” when it asks if you want to enter it into the registry.

Enable Local Machine, Local Intranet and Trusted Site Zones to display ActiveX HTML Help. This is the most commonly referred to fix – this is probably the one you want. You can also download the zipped htmlhelpfix.reg file here.

Enable Local Machine Zones to display ActiveX HTML Help. This is the default entry, you can use it to reset.

Enable Local Machine and Local Intranet Zones to display ActiveX HTML Help.

Enable Local Machine, Local Intranet, Trusted Site and Internet Zones to display ActiveX HTML Help.

Enable Local Machine, Local Intranet, Trusted Site, Internet and Restricted Zones to display ActiveX HTML Help. NOT RECOMMENDED!

(No Ratings Yet)

No Comments |  Print This Post |

The Windows Recovery Console is required to fix many startup issues caused by malware, viruses, and corrupt system files. The Recovery Console can be booted from the Windows Setup disc, but many machines (including Netbooks) do not have CD drives or easy access to the Windows Setup disc.

Below are the instructions to install the Recovery Console on any Windows XP machine as a boot list option. You will no longer need physical access to the Windows Setup disc (except to install initially) when things go wrong.

• Insert the Windows XP setup disc.
• Click Start -> Run and type: “%windir%\i386\winnt32.exe /cmdcons“
• Click YES on the Windows Setup box to install the Recovery Console.

• Setup will attempt to connect to the Internet to update any setup files from the disc. Press ESC to interrupt the setup and use the files on the disc only.
• Once the Recovery Console is installed a confirmation box will pop up. Click OK.

Some Windows XP passwords will not be recognized by the Recovery Console. To remove the password requirement, modify the following registry key:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Setup\RecoveryConsole
• Set the DWORD SecurityLevel value to 1.

(No Ratings Yet)

No Comments |  Print This Post |

The PC-OFF.BAT virus loads a shutdown script when logging onto Windows XP. A few seconds after logging in, Windows will shutdown. This also affects safe mode. The countdown timer is set to only a few seconds, not allowing the user to enter “shutdown – a” in the run box. You may not even see the emergency shutdown dialog before you are automatically shutdown.

In order to remove the files, you’ll need the Windows XP CD. Other options include putting the hard drive into another computer, or using a LiveCD (BartPE or Linux) to remove the files.

Remove the files from your hard drive using the Windows XP CD

1. Insert the Windows XP disc into the CDROM. You may need to adjust your BIOS settings to boot the CDROM first.
2. When the “Welcome to Setup” screen appears, press “R.”
3. Select the installation you wish to access (there should be only one option for most systems).
4. Enter the administrator password when asked.
5. Once at the Recovery Prompt, press ENTER after typing the following command: chdir c:\windows
6. Press ENTER after typing the following command: del bar311.exe
7. Press ENTER after typing the following command: del password_viewer.exe
8. Press ENTER after typing the following command: del photo.zip.exe
9. Press ENTER after typing the following command: del pc-off.bat
10. Press ENTER after typing the following command: exit
11. Remove the Windows XP disc and restart your computer.

Once pc-off.bat is removed from the Windows directory, you’ll be able to logon to Windows without it shutting down immediately. There are still remnants left over in the registry though – best to clean those up.

1. Go to Start -> Run and type “regedit” and press ENTER.
2. Go to HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon and find the key: “Userinit=C:\WINDOWS\system32\userinit.exe,xxxxxx.exe” where xxxxxx.exe is bar311.exe, photo.zip.exe or password_viewer.exe.
3. Delete bar311.exe, photo.zip.exe or password_viewer.exe from the key, but be sure to leave userinit.exe! If you delete that, you will be unable to logon to Windows.
4. Go to HKEY_CURRENT_USER \software\microsoft\windows\currentversion\explorer\advanced and set the following key values: “Hidden=dword:00000001 (1)” “HideFileExt=Dword:00000000 (0)” “ShowSupperHidden=Dword:00000001 (1)”
5. Go to HKEY_CURRENT_USER \software\microsoft\Command Processor and find the key: “autorun=c:\windows\pc-off.bat” and remove “c:\windows\pc-off.bat”

(No Ratings Yet)

No Comments |  Print This Post |