Hi All,
Here is how to deploy the Internet Favorites link with GPO.
1.) Create new GPO Name (Internet Favorites Link)
2.) Right click the Internet Favorites Link and click on Edit.
3.) Go to (User Configuration --> Policies--> Internet Explorer Maintanance -->URLs--> Favorites and Links)
4.) Check on (Place Favorites and links at the top of the list in the order specified below) and (Only delete the favorites created by the administrator). Add the URL link, which you would like to get it from Client computer.
5.)Add the user into the Security Filtering setting.
6.) Only Enable User Configuration Setting.
7.) When all the configuration is finish, Go to the user that you add into the Security Filtering Group and run gpupdate /force command.
8.) After that run gpresult and check the GPO is apply into the user computer or not.
9.) If the GPO is apply, try to log off and log in.
10.) Open the Internet Explorer, Now you can see URL in the Favorites.
This is how to configure Internet Favorites Link. Hope you all understand what I mentions. If you have any question about this you can send email to (itman4872@gmail.com).
Thanks for your times.
Myo
Monday, July 23, 2012
How to deploy Restricted Groups with GPO?
Today I gonna show you how to configure restricted groups.
1.) Create new GPO name (Restricted Groups).
2.) Right click Restricted Groups and go to this computer setting path (Computer Configuration --> Policies--> Windows Settings--> Security Settings--> Restricted Groups)
3.) Right click Restricted Groups and choose Add Group
4.) Choose the Group Name (example: Administrator...etc..)
5.) Then you see Configure Membership for Administrators
6.) Within Members of this group--> click Add and type the name you want to add for this group, after that click OK.
7.) Now you see the member the name into the members of this group.
8.) Click OK.
9.) In the Security Filtering setting add the computer name you want to deploy this policy.
10.) When all this finish go to the computer, that you add it in Security Filtering group and run (gpupdate /force) command.
11.) After that run gpresult command and check GPO is apply or not.
12.) If the GPO is apply Log off and Log in.
13.) Then right click (My Computer) and click on Manage.
14.) Expand Local Users and Groups --> choose Groups--> Double click Administrators group. Now you can see the name within the members.
This is how to configure Restricted groups in GPO. Hope you all understand what I mention.
Myo
1.) Create new GPO name (Restricted Groups).
2.) Right click Restricted Groups and go to this computer setting path (Computer Configuration --> Policies--> Windows Settings--> Security Settings--> Restricted Groups)
3.) Right click Restricted Groups and choose Add Group
4.) Choose the Group Name (example: Administrator...etc..)
5.) Then you see Configure Membership for Administrators
6.) Within Members of this group--> click Add and type the name you want to add for this group, after that click OK.
7.) Now you see the member the name into the members of this group.
8.) Click OK.
9.) In the Security Filtering setting add the computer name you want to deploy this policy.
10.) When all this finish go to the computer, that you add it in Security Filtering group and run (gpupdate /force) command.
11.) After that run gpresult command and check GPO is apply or not.
12.) If the GPO is apply Log off and Log in.
13.) Then right click (My Computer) and click on Manage.
14.) Expand Local Users and Groups --> choose Groups--> Double click Administrators group. Now you can see the name within the members.
This is how to configure Restricted groups in GPO. Hope you all understand what I mention.
Myo
Saturday, July 21, 2012
How to open Default Application File open with GPO?
Sometimes very easy step is difficult to me. Here is step how to deploy.
In this lesson I gonna show you .txt file is default open with wordpad file. And deploy user with gpo.
1.) Create new GPO name (example: BlaBla)
2.) Leave the GPO and go to regedit. Go to this path (HKEY_CURRENT_USER-->Software-->Windows-->Explorer-->FileExts-->.txt key)
3.) Right click in .txt and choose New --> String Value
4.) Then you can see (New Value #1) from the right side.
5.) Give the name to be (Application)
6.)After you name the string to be Application, then right click the Application string value and click Modify.
7.) Add value date to be wordpad.exe and click OK to close.
8.) When all this finish, Right click the .txt key file and Export into C drive or D drive.
9.) Put this reg file into the user logon script of gpo. add user into security filtering setting.
OK...That it.This is how to deploy default application file open with GPO.
Myo
In this lesson I gonna show you .txt file is default open with wordpad file. And deploy user with gpo.
1.) Create new GPO name (example: BlaBla)
2.) Leave the GPO and go to regedit. Go to this path (HKEY_CURRENT_USER-->Software-->Windows-->Explorer-->FileExts-->.txt key)
3.) Right click in .txt and choose New --> String Value
4.) Then you can see (New Value #1) from the right side.
5.) Give the name to be (Application)
6.)After you name the string to be Application, then right click the Application string value and click Modify.
7.) Add value date to be wordpad.exe and click OK to close.
8.) When all this finish, Right click the .txt key file and Export into C drive or D drive.
9.) Put this reg file into the user logon script of gpo. add user into security filtering setting.
OK...That it.This is how to deploy default application file open with GPO.
Myo
Wallpaper not show in End User (GPO issue)
1 week ago, I have got inform by ITSupport. He told me that one of his windows 7 laptop did not get the wallpaper that I deploy with GPO. So I told him to do this step.
1.) Go to command prompt - Run (GPUPDATE /FORCE) command
2.) Then Run (GPRESULT /R) and check the policy name is apply the laptop or not.
3.) If the GPO is apply, Go to the Regedit, then check on this path (HKEY_CURRENT_USER-->Control Panel --> Desktop)
4.) Within the desktop, Right panel you can see Wallpaper. add the path into the value name of Wallpaper (Note: The value name must be C:\Windows\blabla.jpg
5.) After that put picture into that path C:\Windows\ and restart the laptop.
Then you can see the wallpaper after Windows restart.
Please note: This is fastest way to solved the wallpaper problem. Sometimes, GPO is take time to effect into the user.You can do this step to saved your wallpaper file into the local drive and assign your registry to get file from local drive.
Myo
1.) Go to command prompt - Run (GPUPDATE /FORCE) command
2.) Then Run (GPRESULT /R) and check the policy name is apply the laptop or not.
3.) If the GPO is apply, Go to the Regedit, then check on this path (HKEY_CURRENT_USER-->Control Panel --> Desktop)
4.) Within the desktop, Right panel you can see Wallpaper. add the path into the value name of Wallpaper (Note: The value name must be C:\Windows\blabla.jpg
5.) After that put picture into that path C:\Windows\ and restart the laptop.
Then you can see the wallpaper after Windows restart.
Please note: This is fastest way to solved the wallpaper problem. Sometimes, GPO is take time to effect into the user.You can do this step to saved your wallpaper file into the local drive and assign your registry to get file from local drive.
Myo
Access Denied issue when you logon to W2K8 server
Hi All
This week I have met this issue from my office. I search from the net and I saw one of the articles. The articles say that it can fix it by registry. So I try that solution and it works. Here is the issue screen-shot and step below.
Access Denied issue
.jpg)
.jpg)
This week I have met this issue from my office. I search from the net and I saw one of the articles. The articles say that it can fix it by registry. So I try that solution and it works. Here is the issue screen-shot and step below.
Access Denied issue
Step
1.) Type Regedit
2.) Go to (HKEY_LOCAL_MACHINE--> SYSTEM-->CurrentControlSet-->Control-->Services--> TermService)
Then you can see just like screen-shot below-
.jpg)
3.) ObjectName is LocalSystem. That why you cannot logon to the W2K8 server. You have to changed it just like screen-shot below-
.jpg)
Change the ObjectName to be (NT Authority \NetworkService) and restart your W2K8 server. After restart the server the issue is gone. I can logon to the W2K8 server successfully.
Myo
Tuesday, June 5, 2012
How to check AD Replication in Windows 2008?
AD Replication is critical issue in large environments. Here is command to check AD Replication.
1. net share servername (Check SYSVOL and NETLOGON is replicate to the server, Note: It is important)
2. repadmin /showreps servername
3. dcdiag /test:Replications
After that Go to the Active Directory Sites and Services --> Expand Server --> Right Click NTDS Settings --> All Tasks --> Check Replication Topology
Note: Check Replication Topology because It will show you the server, your server is replicate from.
You can also check your Replication partner within NTDS settings.
Myo
1. net share servername (Check SYSVOL and NETLOGON is replicate to the server, Note: It is important)
2. repadmin /showreps servername
3. dcdiag /test:Replications
After that Go to the Active Directory Sites and Services --> Expand Server --> Right Click NTDS Settings --> All Tasks --> Check Replication Topology
Note: Check Replication Topology because It will show you the server, your server is replicate from.
You can also check your Replication partner within NTDS settings.
Myo
Account Locked Out Issue
In Large Domain Environments, Account Locked Out issue is big issue. Because It make user to automatically locked out after 15 or 20 minutes.
When Account Locked out happen?
1. User is change the new password after 30 or 60 days. (Example: Company Policy)
2. Using Mobile Device (example: password not synchronize immediately)
3. One of the Computer is having a virus and attack to another good computer, log-in as Bad Password.
How to fix this Account Locked Out Issue?
Go to this below Microsoft Website and Download Account Locked Out. From my environment, This tools is help me alot.
Account Locked Out Checking Tools From Microsoft
Here is logo of Account Locked Out Tools
If you have any question about this please let me know.
Myo
When Account Locked out happen?
1. User is change the new password after 30 or 60 days. (Example: Company Policy)
2. Using Mobile Device (example: password not synchronize immediately)
3. One of the Computer is having a virus and attack to another good computer, log-in as Bad Password.
How to fix this Account Locked Out Issue?
Go to this below Microsoft Website and Download Account Locked Out. From my environment, This tools is help me alot.
Account Locked Out Checking Tools From Microsoft
Here is logo of Account Locked Out Tools
If you have any question about this please let me know.
Myo
How To Configure Power Saving Policy in Windows XP?
This is way to make Power Saving Policy in Windows XP Environment. If you have any question about this, You can send email.
1. Create 2 GPO Policy. Power Saving Policy for Win XP need 2 Policy. 1 for Computer setting and another one for User Setting. (Example: Test-Power_Saving_Policy (Computer Setting) and Test-Power_Saving_Policy (User Setting)
2. Create .bat file script for User Setting. You can create .bat file script just like this example below
Example:
\\servername\netlogon\powercfg.exe /change "always on" /monitor-timeout-ac 3
\\servername\netlogon\powercfg.exe /change "always on" /monitor-timeout-dc 3
above this script must be apply it to User Setting of Logon.
3. For the Computer Setting Policy, you have to set 2 permission for Registry and 1 permission for File System.
Go to Computer setting --> Open Windows settings --> Expand Security settings--> and then you can see
Registry and File System.
Right Click Registry --> Choose Add Key --> Select this 2 file need to add in Registry.
Machine\Software\Microsoft\Windows\Current Version\Control Folder\PowerCfg
Users\.Default\Control Panel\PowerCfg
When you add this above registry, there a security permission prompted and request you to add User Name and Computer Name. Add User Name and Computer Name, after that set then to full control permission for this User and Computer.
For the File System Setting, You have to Right Click File System --> Add File. Then choose powercfg.cpl
%SystemRoot%\System32\powercfg.cpl
When you add this above registry, there a security permission prompted and request you to add User Name and Computer Name. Add User Name and Computer Name, after that set then to Deny permission for this User and Computer.
Note: I have set deny powercfg.cpl because I don't allow end user to change Power Setting.
So That All. This is how to configure Power Saving setting in Windows XP Environment.
Myo
1. Create 2 GPO Policy. Power Saving Policy for Win XP need 2 Policy. 1 for Computer setting and another one for User Setting. (Example: Test-Power_Saving_Policy (Computer Setting) and Test-Power_Saving_Policy (User Setting)
2. Create .bat file script for User Setting. You can create .bat file script just like this example below
Example:
\\servername\netlogon\powercfg.exe /change "always on" /monitor-timeout-ac 3
\\servername\netlogon\powercfg.exe /change "always on" /monitor-timeout-dc 3
above this script must be apply it to User Setting of Logon.
3. For the Computer Setting Policy, you have to set 2 permission for Registry and 1 permission for File System.
Go to Computer setting --> Open Windows settings --> Expand Security settings--> and then you can see
Registry and File System.
Right Click Registry --> Choose Add Key --> Select this 2 file need to add in Registry.
Machine\Software\Microsoft\Windows\Current Version\Control Folder\PowerCfg
Users\.Default\Control Panel\PowerCfg
When you add this above registry, there a security permission prompted and request you to add User Name and Computer Name. Add User Name and Computer Name, after that set then to full control permission for this User and Computer.
For the File System Setting, You have to Right Click File System --> Add File. Then choose powercfg.cpl
%SystemRoot%\System32\powercfg.cpl
When you add this above registry, there a security permission prompted and request you to add User Name and Computer Name. Add User Name and Computer Name, after that set then to Deny permission for this User and Computer.
Note: I have set deny powercfg.cpl because I don't allow end user to change Power Setting.
So That All. This is how to configure Power Saving setting in Windows XP Environment.
Myo
Saturday, July 16, 2011
How to backup the Group Policy Object?
Back Up Group Policy Object
1). Open the Group Policy Management Console
2). Expand your domain
3).Right click the Group Policy Object and select the Back Up all Tab
Restore Group Policy Object
1). Open the action tab
2). Select the Manage Backups
3). Go to the location of your Group Policy
4). Select the Group Policy Object to be restore
1). Open the Group Policy Management Console
2). Expand your domain
3).Right click the Group Policy Object and select the Back Up all Tab
Restore Group Policy Object
1). Open the action tab
2). Select the Manage Backups
3). Go to the location of your Group Policy
4). Select the Group Policy Object to be restore
Friday, July 15, 2011
How to Deploy Windows Deployment Server into the Microsoft Windows 2008 Environment?
Today I test Microsoft Windows Deployment Service in the Microsoft Windows 2008 environment.I reference from this forum. (http://www.windows-noob.com/forums/index.php?/topic/446-how-can-i-setup-wds-in-windows-server-2008/).Here is the step by step instructions.
1).Install Microsoft Windows 2008 Enterprise.
2).Add the IP address.Dns suffix add.
3). Install and configure Active Directory.
4). Install and configure DNS Server.
5). Install and configure DHCP Server.
6). Install and configure Windows Deployment Service.
(Add the image file into the install image file and boot image file) (d:\source file must be copy) (example: .wim file)
1).Install Microsoft Windows 2008 Enterprise.
2).Add the IP address.Dns suffix add.
3). Install and configure Active Directory.
4). Install and configure DNS Server.
5). Install and configure DHCP Server.
6). Install and configure Windows Deployment Service.
(Add the image file into the install image file and boot image file) (d:\source file must be copy) (example: .wim file)
How to upgrade AD 2003 Domain Controller to AD 2008 Domain Controller?
If you are going to upgrade Microsoft Windows 2003 Domain Controller to Microsoft Windows 2008 Domain Controller you must need to Raise the domain functional 200 native to 2003. Here is step by step installation and configuration.
1). Insert the Microsoft Windows 2008 DVD.
2). Go to the Command Prompt.Go to this path from the cd (d:\source\adprep)
3). Run the Adprep /Forestprep and Adprep /Domainprep.Reboot your computer.
4). After that boot up with your Microsoft Windows 2008 Server DVD and upgrade the Microsoft Windows 2003 Server to Microsoft Windows 2008.
Tips: Server Edition must be same. (Example: if your Microsoft Windows 2003 server is Enterprise so Microsoft Windows 2008 Server must be Enterprise Edition.
Myo
1). Insert the Microsoft Windows 2008 DVD.
2). Go to the Command Prompt.Go to this path from the cd (d:\source\adprep)
3). Run the Adprep /Forestprep and Adprep /Domainprep.Reboot your computer.
4). After that boot up with your Microsoft Windows 2008 Server DVD and upgrade the Microsoft Windows 2003 Server to Microsoft Windows 2008.
Tips: Server Edition must be same. (Example: if your Microsoft Windows 2003 server is Enterprise so Microsoft Windows 2008 Server must be Enterprise Edition.
Myo
Login Screen is black in W2k3
Yesterday I have met this error at my office. I was little bit confused for this error.But I can fix it.You must need to copy color file from the another Microsoft Windows 2003 registry.Here is the step by step instructions.
1). Copy the registry file from the another Microsoft Windows 2003 Server.The source file in (HKEY_USERS>.DEFAULT>CONTROL PANEL>COLORS).
2). Export that Colors file.Copy it into the USB stick.
3). After that go to the error computer.Open the registry and import that color file.
PS. You need to backup the registry and after that you have to import the registry file.
1). Copy the registry file from the another Microsoft Windows 2003 Server.The source file in (HKEY_USERS>.DEFAULT>CONTROL PANEL>COLORS).
2). Export that Colors file.Copy it into the USB stick.
3). After that go to the error computer.Open the registry and import that color file.
PS. You need to backup the registry and after that you have to import the registry file.
Thursday, April 7, 2011
Where is the Remote Desktop .exe file?
Sometimes Remote Desktop Shortcut bar is gone.So you can get it from here.
C:\Windows\System32\mstsc.exe
C:\Windows\System32\mstsc.exe
Friday, March 4, 2011
Microsoft Outlook 2007 error
I met this error when I open email -
Could not install the custom actions. The form cache file c:\users\xxx\appdata\local\microsoft\forms\FRMCACHE.DAT is not valid content your administrator.
Go to Control Panel, Open folder options, select view tab, down the you will
see a hidden files and folder, Select show hidden files and folders.
Close the control panel.
Open my computer and search down the directories.Local Disk (C>Users>(your user name)>AppData>Local>Microsoft>FRMCACHE.DAT
Delete the folder named FORMS, its corrupt!
Close the window and open Outlook 2007, everything should work fine now.
Could not install the custom actions. The form cache file c:\users\xxx\appdata\local\microsoft\forms\FRMCACHE.DAT is not valid content your administrator.
Go to Control Panel, Open folder options, select view tab, down the you will
see a hidden files and folder, Select show hidden files and folders.
Close the control panel.
Open my computer and search down the directories.Local Disk (C>Users>(your user name)>AppData>Local>Microsoft>FRMCACHE.DAT
Delete the folder named FORMS, its corrupt!
Close the window and open Outlook 2007, everything should work fine now.
Sunday, February 20, 2011
Cannot delete print job
Sometimes print job cannot be delete from your computer or notebook. I find a way to fix this problem.
Here is the step how to delete the print job.
1).Go to services.msc
2).Stop the printer spool service
3).Go to this folder path (c:\windows\system32\spool\printer) and clear everything what your are seeing.
4).Restart the printer spool service
5).After that Print Job is gone.
Here is the step how to delete the print job.
1).Go to services.msc
2).Stop the printer spool service
3).Go to this folder path (c:\windows\system32\spool\printer) and clear everything what your are seeing.
4).Restart the printer spool service
5).After that Print Job is gone.
Junk File Prohibit in Fax
Today I have met this error on Epson Fax Printer. The error mention Junk File Prohibit. So I try to disable
the setting of Junk Fie Prohibit.After that error is gone.
the setting of Junk Fie Prohibit.After that error is gone.
Wednesday, February 16, 2011
How to Install and Configure Microsoft SharePoint Server 2007?
I'm using this link to install Microsoft Share-Point Server 2007 in my environment.
It is a single server installation.
Here is the Link:
(http://vspug.com/bobbyhabib/2007/09/17/how-to-install-sharepoint-server-2007-on-a-single-machine/)
It is a single server installation.
Here is the Link:
(http://vspug.com/bobbyhabib/2007/09/17/how-to-install-sharepoint-server-2007-on-a-single-machine/)
Wednesday, January 12, 2011
Software and Hardware Requirement of SharePoint Server 2007
1).One front-end server and one back-end server
2).Front-end server- 2.5 GHz CPU and 2GB RAM
3).Back-end server -2.0 GHz CPU and 2.GB RAM
4).Windows 2003 (Web Edition, Standard Edition, Enterprise Edition,Data Center Edition) with Service Pack1
5).Microsoft .Net framework 2.0
6).Microsoft .Net framework 3.0
7).IIS (Internet Information Service) 6.0 or later.
8).NTFS (New Technology File System).Cannot run in FAT32(File Allocation table).
9).Microsoft SQL server 2005 or Microsoft SQL server 2000
2).Front-end server- 2.5 GHz CPU and 2GB RAM
3).Back-end server -2.0 GHz CPU and 2.GB RAM
4).Windows 2003 (Web Edition, Standard Edition, Enterprise Edition,Data Center Edition) with Service Pack1
5).Microsoft .Net framework 2.0
6).Microsoft .Net framework 3.0
7).IIS (Internet Information Service) 6.0 or later.
8).NTFS (New Technology File System).Cannot run in FAT32(File Allocation table).
9).Microsoft SQL server 2005 or Microsoft SQL server 2000
Wednesday, January 5, 2011
Fix Sharepoint Error
Failed to start the database service MSSQL$OfficeServers. Repair this product by selecting it from the Add/Remove Programs menu.
If you get this error when you configure sharepoint product and technologies wizard.You can fix just like this:
Go to Regedit: change just like this-
(HKLM/Software/Microsoft/Shared Tools/Web Server Extensions/12.0/WSS/ServerRole) is set incorrectly. It was set to SINGLESERVER.
If you get this error when you configure sharepoint product and technologies wizard.You can fix just like this:
Go to Regedit: change just like this-
(HKLM/Software/Microsoft/Shared Tools/Web Server Extensions/12.0/WSS/ServerRole) is set incorrectly. It was set to SINGLESERVER.
I changed ServerRole’s value from SINGLESERVER to APPLICATION
Saturday, January 1, 2011
What is eseutil.exe?
You can use the Eseutil utility to defragment the information store and directory in Microsoft Exchange Server 5.5 and to defragment the information store in Microsoft Exchange 2000 Server and in Microsoft Exchange Server 2003. Eseutil examines the structure of the database tables and records (which can include reading, scanning, repairing, and defragmenting) the low level of the database (Ese.dll).
Eseutil is located in the Winnt\System32 folder in Exchange Server 5.5 and in the Exchsrvr/Bin folder in Exchange 2000 and in Exchange 2003. The utility can run on one database at a time from the command line.
Eseutil is located in the Winnt\System32 folder in Exchange Server 5.5 and in the Exchsrvr/Bin folder in Exchange 2000 and in Exchange 2003. The utility can run on one database at a time from the command line.
Subscribe to:
Posts (Atom)