Wednesday, February 25, 2009

Service Pack Uninstalls

I did not find this out myself, but I thought I would post it as a reminder. If you have a Service Pack install that blue screens your PC, it can be repaired! Pop in a windows CD, and enter recovery mode by pressing "R". At that time, you select which Windows installation you want to repair. Select your installation, then enter in the Windows password. At this point, type "cd\$ntservicepackuninstall\spuninst" and hit enter. Then type in "batch spuninst.txt", wait for it to finish, and then reboot the machine. You SHOULD at this point have a functioning machine.

Security advisory 967940

On February 24, 2009 Microsoft released a security bulletin that repairs the autorun functionality. If you go to: http://support.microsoft.com/kb/967715 you can find all the information regarding this patch. I have autorun disabled, and whenever I would insert the Windows XP SP2 CD and double click on the CD drive, it would autorun. I tried this functionality after installing the patch, and this is no longer the case. The CD drive brings up Explorer instead of starting the SP2 Autorun.

Monitoring Active Directory Changes

Monitoring Active Directory changes is important so that we make sure no unauthorized changes are made. SOX, GLBA and HIPAA auditors all require some type of Active Directory monitoring so that unauthorized changes are not being made. At the same time, during this period of economic downturn, companies are also looking at ways they can save money. Many of these Active Directory monitoring tools can be very expendive, which is why I am testing out Netwrix. Netwrix offers a freeware or commercial version of AD monitoring. It is very easy to download and configure. The website is located at:

http://www.netwrix.com/active_directory_change_reporting_freeware.html

You can also view a sample report on their website. Check it out...

Monday, May 5, 2008

Windows Deployment Toolkit 2008

After downloading the MSI for Windows Deployment Toolkit, run the MSI doing a basic install (next, accept, next, finish). Once this is done, you will see a program on your start menu that looks like this:




Close all Config Manager Windows, and click on the ConfigMgr Integration. If you are on the server, it will automatically populate the Site server name, and the site code. If not, go ahead and enter this information in. Click Finish, and the install should be complete. Go ahead and load up the Config Manager console again. Edit a task sequence, and you will see an MDT section under "Add" with some extra goodies!

Windows Deployment Toolkit 2008

If you are doing deployments within SCCM, the Windows Deployment Toolkit 2008 gives you many more options within your task sequences. You can do things such as Install Language Packs, Install Roles and Features, Configure ADDS, DNS, DHCP, and install updates. You can download this for both 32 and 64 bit operating systems. The website is:

http://www.microsoft.com/downloads/details.aspx?FamilyID=3bd8561f-77ac-4400-a0c1-fe871c461a89&displaylang=en

The next post will give detail instructions on how to install this...