Microsoft

From My Notepad
Jump to: navigation, search

Microsoft Exchange Topics

Microsoft Group Policy Topics

Microsoft Networking Topics

Microsoft Networking Topics - Advanced

Microsoft Outlook Topics

Microsoft Performance Monitoring

Microsoft Printer Management

Microsoft Scripting Topics

Microsoft SQL Server Topics

Microsoft Windows Related Topics

Monitoring

Out of the options listed here Snare is the only one that I could get working to my satisfaction.

Windows Search

To default to Search Companion when you click "Search", start regedit, go to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Desktop Search\DS, and change the value of "ShowStartSearchBand" to 0.

tasklist

The command line tool tasklist will show you all the tasks running on the system, similar in function to ps in *nix. Using the switch /svc will display the service in each process. This is handy for finding out what is hiding under svchost.exe processes! Here is an example:

tasklist /svc

Image Name                   PID Services
========================= ====== =============================================
System Idle Process            0 N/A
System                         4 N/A
smss.exe                     656 N/A
csrss.exe                    712 N/A
winlogon.exe                 736 N/A
services.exe                 780 Eventlog, PlugPlay
lsass.exe                    792 Netlogon, PolicyAgent, ProtectedStorage,
                                 SamSs
svchost.exe                  968 DcomLaunch, TermService
svchost.exe                 1036 RpcSs
svchost.exe                 1332 AudioSrv, BITS, Browser, CryptSvc, Dhcp,
                                 dmserver, ERSvc, EventSystem, helpsvc,
                                 HidServ, lanmanserver, lanmanworkstation,
                                 Netman, Nla, RasMan, Schedule, seclogon,
                                 SENS, SharedAccess, ShellHWDetection,
                                 srservice, TapiSrv, Themes, TrkWks, W32Time,
                                 winmgmt, wuauserv, WZCSVC
svchost.exe                 1372 WudfSvc
svchost.exe                 1436 Dnscache
svchost.exe                 1492 EapHost
svchost.exe                 1680 LmHosts, RemoteRegistry, SSDPSRV, upnphost,
                                 WebClient
svchost.exe                 1696 Dot3svc
spoolsv.exe                 1984 Spooler

External Links

Copy all contents from hard drive to hard drive

Original content

Requirements: robocopy.exe subinacl.exe

First run subinacl to take ownership of all the files on the SOURCE and give Everyone Full Control of the files and folders:

start /wait subinacl.exe /errorlog="C:\errorlog.txt" /nostatistic /subdirectories F: /Owner=Administrator /grant=Everyone=F /objectexclude=*.swp /objectexclude=*.dmp /objectexclude=*.tmp /objectexclude=pagefile.sys /objectexclude=hiberfil.sys

    start /wait subinacl .exe //this starts the script and waits for it to complete before moving to the next line in the batch file
    /errorlog="C:\errorlog.txt" //this saves an error log to the path specified
    /nostatistic //this suppresses displaying the progress
    /subdirectories //Makes it do all files and subdirectories in the path specified
    F: //Path to hard drive
    /Owner=yan@solo.local //Who takes ownership of the files
    /grant=Everyone=F //Grant Everyone Full Permissions
    /objectexclude=*.tmp // no need wasting time on a file we aren't going to copy.

Second run robocopy to copy the entire contents of the hard drive except certain uneccesary files:

start /wait robocopy.exe F:\ T:\test /E /ZB /COPY:DAT /IA:RASHNTCEO /X /V /FP /XF *.swp *.dmp *.tmp pagefile.sys hiberfil.sys /XD MCAF*.TMP "$VAULT$.AVG" "_RESTORE" "MSOCache" "Recycled" "RECYCLER" "Temporary Internet Files" "System Volume Information" "WUTemp" /R:1 /W:0 /LOG:"C:\Documents and Settings\Yan\Desktop\robolog.txt" /TEE

    start /wait robocopy .exe //this starts the script and waits for it to complete before moving to the next line in the batch file
    F:\ //Source
    T:\test //Destination

Put the script contents into a batch file and run.

RAS Disable Saved Passwords

Source

Microsoft Documentation

This was verified to work on Windows 8 on 9/11/2017.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\Parameters]
"DisableSavePassword"=dword:00000001

Enabled Windows Firewall ICMP

netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow