Google
 

How to Change Permissions on the Windows Scheduled Tasks Folder (C:\Windows\Tasks)

Posted on May 11th, 2009 by thehabgroup



How to Change Permissions on the Windows Scheduled Tasks Folder (C:\Windows\Tasks)

To modify folder permissions on C:\Windows\Tasks — the “Scheduled Tasks” folder you will need to use CACLS.EXE tool that allows manipulation of the NTFS permission flags directly.

1. Open a CMD prompt

2. Type XCOPY C:\WINDOWS\TASKS C:\TASKTEMP /s /e /k /o

This will copy the tasks folder, in its entirety, including permissions and attributes. This essentially gives you a “mirrored” version of the scheduled tasks at C:\TASKTEMP.

3. Go to Windows Explorer and modify the ACL of C:\TASKTEMP as needed. It is important to set the “Apply To” attribute to “This folder only.”

4. Go back to the CMD prompt and type CACLS C:\TASKTEMP /S

Select the SDDL string , within the quotes, and copy into the notepad. Since the command prompt does not support line-wrapping text copy, you may have to post a larger string into notepad, and then trim out the stuff on either side of the quotes. You only want the bare SDDL string in the clipboard.

5. Type CACLS C:\WINDOWS\TASKS /S:<SDDL>

…replacing/pasting the <SDDL> part with the SDDL string you put into step 4 — do not include quotes.

6. Test!

7. Delete the C:\TASKTEMP folder.

Note: the default ACL for Windows Server 2003 is D:P(A;OICIIO;FA;;;CO)(A;;0×1200ab;;;BO)(A;;0×1200ab;;;SO)(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)

No Comments »
Filed under: Operating System, Task Scheduler

How to grant permissions to specific Windows services

Posted on May 11th, 2009 by thehabgroup


 

  1. Download and install on the target computer the Windows resource kit utility Subinacl.
  2.  Determine the target service name by opening the registry (Start -> Run -> Regedit) and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<ServiceName> (If the service name contains spaces, the whole parameter should be enclosed in quotation marks.)
  3. Open the CMD prompt and navigate to the folder in which the Subinacl tool is installed (Default: c:\Windows\Program Files\Windows Resource Kit\tools\)

Run the command SUBINACL /SERVICE \\MachineName\ServiceName /GRANT=[DomainName\]UserName[=Access] where ·  The user executing this command must have administrator rights in order for it to complete successfully.

·  If “MachineName” is omitted, the local machine is assumed.

·  If “DomainName” is omitted, the local machine is searched for the account.

·  Although the syntax example indicates a user name, this will work for user groups as well.

·  The values that ‘Access’ can take are:

   F : Full Control
   R : Generic Read
   W : Generic Write
   X : Generic eXecute
   L : Read controL
   Q : Query Service Configuration
   S : Query Service Status
   E : Enumerate Dependent Services
   C : Service Change Configuration
   T : Start Service
   O : Stop Service
   P : Pause/Continue Service
   I : Interrogate Service 
   U : Service User-Defined Control Commands
                                     
  1. ·  If ‘Access’ is omitted then ‘F (Full Control)’ is assumed.

 

To automate the permission changes use the script below:

 

   strDomain   = Wscript.Arguments.Item(0)’domain where computer account is held
   strComputer = Wscript.Arguments.Item(1)’computer netbios name
   strSecPrinc = Wscript.Arguments.Item(2)’user’s login name as in: DomainNameUserName
   strAccess   = Wscript.Arguments.Item(3)’access granted, as per the list in the KB
 
   ‘bind to the specified computer
   set objTarget = GetObject(”WinNT://” & strDomain & “/” & strComputer & “,computer”)
 
   ‘create a shell object.  Needed to call subinacl later
   set objCMD = CreateObject(”Wscript.Shell”)
 
   ‘retrieve a list of services
   objTarget.filter = Array(”Service”)
 
   For each Service in objTarget
 
   ‘call subinacl to se the permissions
   command = “subinacl /service ” & Service.name & ” /grant=” & strSecPrinc & “=” & strAccess
   objCMD.Run command, 0
 
   ‘report the services that have been changed
   Wscript.Echo “User rights changed for ” & Service.name & ” service”
   next
       

The script should be saved as a .vbs file, such as “Services.vbs,” and called like this:

   CSCRIPT Services.vbs DomainName ComputerName UserName Access
                                     

 

No Comments »
Filed under: Operating System, vbscript, Windows XP, Windows 2000, Windows 2003, services

How to Switch Internet Explorer 7 to Full Screen Mode

Posted on May 6th, 2009 by thehabgroup


How to Switch Internet Explorer 7 to Full Screen Mode

 

  1. Navigate to the Menu Bar and select Tools
  2. Select the Full Screen Mode Option or Select the F11 function key on the keyboard

 

To turn of the IE 7 full screen mode

 

  1. Select the F11 key again
  2. Or move the cursor to top of the browser and the menu bar will appear.
  3. Navigate to the Menu Bar and select Tools
  4. Select the Full screen mode

No Comments »
Filed under: Windows XP, Internet Explorer, Windows 2003

How to Enable Network (Ditributed Transaction Coordinator) DTC access Windows 2003

Posted on April 15th, 2009 by thehabgroup


Steps to enable network DTC access

  1. Click Start, point to Control Panel, and then click Add or Remove Programs.
  2. Click Add/Remove Windows Components.
  3. Select Application Server, and then click Details.
  4. Select Enable network DTC access, and then click OK.
  5. Click Next.
  6. Click Finish.

To configure Network DTC follow these additional steps:


1.      Click Start, click Run, type comexp.msc, and then click OK to open Component Services.

2.      Expand Component Services, expand Computers, right-click My Computer, and then click Properties.

3.      On the MSDTC tab, click Secuity Configuration under Transaction Configuration, click to select the Network DTC Access check box under Secuity Settings, and then click to select the following check boxes under Transaction Manager Communication:

o        Allow Inbound

o        Allow Outbound

4.      On Microsoft Cluster Server (MSCS) clusters, you cannot select Mutual Authentication Required. Therefore, click to select one of the following check boxes:

o        Incoming Caller Authentication Required

o        No Authentication Required

5.      Make sure that the Logon Account is set to NTAUTHORITY\NetworkService.

Click OK. A message box explains that the MS DTC Service will be stopped and restarted, and that all dependent services will also be stopped and restarted. Click Yes.

No Comments »
Filed under: Windows 2003

How to get meaningful ASP error messages for 500 Internal Server Error

Posted on April 15th, 2009 by thehabgroup


By default the Internet Explorer browser version 5.0 and up has the advanced option “Show friendly HTTP error messages” enabled. This typically produces the 500 Internal server error instead of meaningful ASP error. To disable this browser option follow these steps:

  1.  Open IE and navigate to Tools ->  Internet Options -> Advanced Tab
  2. Uncheck the “Show friendly HTTP error messages”option under the heading Browsing

Show Friendly HTTP error messages

If you have access to the IIS server that hosts the relevant page you can verify that the website properties are configured to send detailed error messages to clients.

  1.  Open Internet Services Manager by navigating to Control Panel -> Administrative Tools - > Internet Information Services (IIS) Manager
  2. Then locate your website and right click to get to the properties.
  3.  Go to the home/virtual directory tab  and click on Configuration, go to the Debugging tab, and make sure “Send detailed error messages to the client” is selected.

Send detailed error messages to client

No Comments »
Filed under: IIS, Windows XP, Windows 2000, Internet Explorer, Windows 2003

How to add “Empty Recycle Bin” to the Right Click Menu

Posted on November 12th, 2008 by thehabgroup

  1. Open Regedit: Start -> Run -> type regedit
  2. Navigate to followig registry keys and enter the values below:
  3. [HKEY_CLASSES_ROOT*shellexContextMenuHandlers{645FF040-5081-101B-9F08-00AA002F954E}]
@=”Empty Recycle Bin”

[HKEY_CLASSES_ROOT*shellexContextMenuHandlersEmpty Recycle Bin]
@=”{645FF040-5081-101B-9F08-00AA002F954E}”

[HKEY_CLASSES_ROOTDirectoryBackgroundshellexContextMenuHandlersEmpty Recycle Bin]
@=”{645FF040-5081-101B-9F08-00AA002F954E}”

[HKEY_CLASSES_ROOTDirectoryshellexContextMenuHandlersEmpty Recycle Bin]
@=”{645FF040-5081-101B-9F08-00AA002F954E}”

[HKEY_CLASSES_ROOTFoldershellexContextMenuHandlersEmpty Recycle Bin]
@=”{645FF040-5081-101B-9F08-00AA002F954E}”

    4. No Comments »
    Filed under: Uncategorized

How to add “Empty Recycle Bin” to the Right Click Menu - Windows XP

Posted on November 12th, 2008 by thehabgroup
  1. Open Regedit: Start -> Run -> type regedit
  2. Navigate to followig registry keys and enter the values below:
  3. [HKEY_CLASSES_ROOT*shellexContextMenuHandlers{645FF040-5081-101B-9F08-00AA002F954E}]
@=”Empty Recycle Bin”

[HKEY_CLASSES_ROOT*shellexContextMenuHandlersEmpty Recycle Bin]
@=”{645FF040-5081-101B-9F08-00AA002F954E}”

[HKEY_CLASSES_ROOTDirectoryBackgroundshellexContextMenuHandlersEmpty Recycle Bin]
@=”{645FF040-5081-101B-9F08-00AA002F954E}”

[HKEY_CLASSES_ROOTDirectoryshellexContextMenuHandlersEmpty Recycle Bin]
@=”{645FF040-5081-101B-9F08-00AA002F954E}”

[HKEY_CLASSES_ROOTFoldershellexContextMenuHandlersEmpty Recycle Bin]
@=”{645FF040-5081-101B-9F08-00AA002F954E}”

No Comments »
Filed under: Windows XP

Tips and Tricks for Using Microsoft Office SharePoint Portal Server 2003 - White paper

Posted on November 7th, 2008 by thehabgroup

From Microsoft: These Tips and Tricks show how to perform a number of basic tasks in a Microsoft® Office SharePoint™ Portal Server 2003 environment. They can help you learn to use SharePoint Portal Server and will introduce you to the basic features and principles of portal site navigation and customization.

See attached file.sharepointtips.doc

No Comments »
Filed under: Sharepoint

Vbscript to Search Windows Event Logs

Posted on November 7th, 2008 by thehabgroup


‘ —— SCRIPT CONFIGURATION ——
On Error Resume Next

intEventCode = 4377 ‘ Enter the Event ID here
intEventTime = InputBox(”Enter Date in the Format MM/DD/YYYY”, “Enter Date to check Event”) ‘ No default date used
strLog = “System” ‘ Event log name; e.g. Application
intMaxNum = 0 ‘ Max events to return (0 for all)
strSource = “NTServicePack” ‘Enter the Event source here

‘The function of this section is to get the computer name(s) from a text file and connect to computer
Set oFSO = CreateObject(”Scripting.FileSystemObject”)

Set oTS = oFSO.OpenTextFile(”c:\Computer.txt”)

Do Until oTS.AtEndOfStream

varComputer = oTS.ReadLine

arrComputers = Array(varComputer)

‘ —— END CONFIGURATION ———
for each strComputer in arrComputers
WScript.Echo vbCrLf & vbCrLf
WScript.Echo “Searching ” & strComputer & “….” & vbCrLf
set objWMI = GetObject(”winmgmts:\\” & strComputer & “\root\cimv2″)
set colEvents = objWMI.ExecQuery(”Select * from Win32_NTLogEvent ” & _
” Where Logfile = ‘” & strLog & “‘” & _
” and TimeGenerated >= ‘”& intEventTime & “‘” & _
” and SourceName = ‘” &strSource & “‘” & _
” and EventCode = ” & intEventCode)

count = 0
for each objEvent in colEvents
Wscript.Echo “Date: ” & objEvent.TimeWritten
Wscript.Echo “Source: ” & objEvent.SourceName
Wscript.Echo “Category: ” & objEvent.Category
Wscript.Echo “Type: ” & objEvent.Type
Wscript.Echo “Event Code: ” & objEvent.EventCode
Wscript.Echo “User: ” & objEvent.User
Wscript.Echo “Computer: ” & objEvent.ComputerName
Wscript.Echo “Message: ” & objEvent.Message
WScript.Echo “——”
WScript.Echo
count = count + 1
if intMaxNum > 0 and count >= intMaxNum then
WScript.Echo “Reached maximum threshold…exiting”
exit for
end if
next
Next
Loop

No Comments »
Filed under: vbscript, Windows XP, Windows 2000, Windows 2003

The ATTRIB Commnd - CMD

Posted on July 30th, 2008 by thehabgroup


Attrib commnd - Changes file attributes for a single file or directory. This command sets or removes the read-only, system, hidden, and compressed attributes assigned to files or directories.

The attrib commnd with the parameters listed below is only available when you are using the Recovery Console. The attrib command with different parameters is available from the command prompt.

attrib [+r|-r] [+s|-s] [+h|-h] [+c|-c] [[drive:][path] filename]

Parameters

+r

Sets the read-only file attribute.

-r

Clears the read-only file attribute.

+s

Sets the system file attribute.

-s

Clears the system file attribute.

+h

Sets the hidden file attribute.

-h

Clears the hidden file attribute.

+c

Sets the compressed file attribute.

-c

Clears the compressed file attribute.

[[drive:][path] filename]

Specifies the location and name of the directory or file you want to process. You can change attributes for only one file or directory at a time.

No Comments »
Filed under: Operating System, Windows XP, Windows 2000, Windows 2003

  • Products

    Free Search Engine Submission thanks to: Create a Website

  • Blogroll

  • Buzz

  • News


powered by FreeFind