Breeze 171022112959 005
Breeze Drone Video 1
Breeze Drone Video 1
|
Star Wars Arcade Build 5 | Dark Side Cabinet
HyperSpin Front End, Dual Monitors, LED Projector Lighting.
Do you manage multiple KODI boxes? For family or a few in your house. Annoying and of my own making I manage them for all my family. The biggest problem is if their is a update usually a ADDON will stop working. If your streaming or just simply updating this becomes a massive pain. I usually try to setup KODI using s specific theme so I can walk each family member through navigation etc if they have problems. Want them all the same? And updated from a single source here is how. KODI and SYNCTHING your centralized solution.
This example below is setup on a windows 7 64 BIT OS: (Why windows 7 - less bells and whistles then windows 10 and for a pure media center it allows for more customization ) Step 1: Start by downloading KODI get it setup with all your addons - I use the PLEX add on to sync to my plex server. I set the KODI theme to CONFLUENCE or AMBER both are simple and easy to work with. Step 2: Download Syncthing - For this blog I am using it on Windows so download their SyncTrazyor which is a nice little windows app. Install it. Step 3: Within the SyncTrazyor you chose which folder you wish to share with everyone. For windows you will need to sync - c:\users\"Your User Name"\AppData\Roaming\KODI  Step 4: Next take note of MD5 ID - Located under the COG wheel named Actions at the top right. The ID is what allows you to add this primary share on remote devices. Step 5: To make this more seemless, and only if you use this a pure media center. I create a simply BATCH file on the computer. Example below. Basically it kills Explorer.exe, starts Sync and then starts kodi. Now I wrapped the very same batch file in a EXE that runs silent. If you wish to use it your more then welcome. Please note I did not pay the 179.99 to register it so your AV might complain. Here is the link from my ONEDRIVE account. Basically place it in your startup folder or create a shortcut to it in the start up folder. BATCH FILE EXAMPLE: ======================================================================= echo off taskkill /im explorer.exe /f "C:\Program Files\SyncTrayzor\SyncTrayzor.exe" "C:\Program Files (x86)\Kodi\kodi.exe" ======================================================================= Place the batch file in a safe spot, create a shortcut and place it in your startup folder. C:\Users\"Your Username"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup You also want to set your user to auto login and have the password never expire. Step 6: Remote computer, follow the same setup as above but when it comes time to setup SyncTrayzor we are not sharing we connect to the KODIMASTER computer. Step 7: Open SYNCTRAYZOR from the taskbar on the remote machine. You will need to "ADD Remote Device" which is located on the bottom right. You can see from my picture below, this is my master machine. But the remote devices can be added you just need their ID (Actions Cog wheel) So on your remote machine add the ID of your KODI Master machine. This takes time to link - so depending on your internet speed just sit back and wait. You will need to jump on your KODI MASTER machine and allow it to connect, a yellow bar will ask you to add it. You add and share the APPDATA folder you have already synced. So share it with your remote system. Step 8: Back on your remote system, a yellow bar will show up asking you to add the KODI MASTER share. This is where you will need to go to your APPDATA install of KODI. DONT DO THIS QUIT YET. READ BELOW c:\users\"Your User Name"\AppData\Roaming\KODI Delete all contents in this folder, yes thats right I said delete everything, don't worry we are getting this back from your KODIMASTER system. So to confirm on your remote computer, delete all the contents but leave the folder. Once all the files are gone but the folder still exists, go back to SYNCTRAYZOR. Now we add the shared folder - It will ask you to save it somewhere. Choose this same path. c:\users\"Your User Name"\AppData\Roaming\KODI It should start Syncthing the files FROM you KODIMASTER to your remote computer. Once its 100% you should be good to go. Do a reboot - the PC should auto start, auto login to your user account and start SYNCTHING then KODI with all your addons, theme etc setup the exact same as your KODIMASTER. For me this saves me adding the streaming APPS, updating KODI, themes the addons which constantly break and require updates. I do this on one machine and it updates them all. You now have a single source to update, like a ONERING to rule them all. 
STEP 1: Download the SCP driver packaged here. You can get it elsewhere I don't really care where. The link is from my one drive. STEP 2: Under program files, least this is where I placed mine, you can place the extracted folder anywhere. I create a folder called PS3 c:\Program Files\PS3 Place the extracted zip file in that folder - the default extracted name is "SCPServer"  STEP 3: Before proceeding plug in your PS3 into the USB port on your computer. This is needed to install the device drivers for it. Go into the "BIN" sub folder and you will see several files and exe's like so. First EXE you want to run is "SCPDriver.exe" STEP 4: Once you open SCPDriver click on install (NOTE click forced install if everything doesn't install). You should get a UAC popup or "Trust Applicatio" pop up. Say yes to everything and continue. It should show both USB driver and few other packages installed. Most important it should include the bluetooth driver in the install.  STEP 5: FINAL step when you remove the PS3 from USB it should auto sync with your bluetooth. Please note this converts your bluetooth into a dedicated connection, other blue tooth devices will no longer work. You must then uninstall using the application again to remove drivers. Hope this helps. Happy gaming.
It beings here asking for the IP address or hostname of the remote computer, you can even use "localhost" if you want to test it on your local system.  Next it gather some WMIC info on the machine your removing it from, current user, make, model, serial number etc. This helps you keep track and know you are running it on the correct machine. You can still exit at this point before it runs the uninstall command.  After it gets the WMIC product installation ID for "Symantec Endpoint Protection" it runs the MSIEXEC with the install string to uninstall the software. Once complete it does another WMIC get to see if the product is still listed as installed, then prompts you to try again if it still shows as installed or exit.  I have included a download link here
Any questions please feel free to contact me.  My first attempt at setting up a migration from exchange 2003 to office 365. Once you get your account setup within Office 365, you begin the migration portion. I followed this guide which help quite a bit. MIGRATE FROM EXCHANGE TO OFFICE 365 I ran into a few hiccups that caused some issues. First being that most mailboxes during the BATCH (You run this to sync exchange with office 365) failed, would not sync. Using Microsoft support - for the migration I used the local administrator account which had its own exchange mailbox and was local domain admin. Microsoft explained this is why mailboxes are failing and had me choose a domain user with domain admin and exchange admin privileges. My test user account I added to both domain and exchange full access privileges. We deleted the batch and started a new one using my "Test User" Again the batch failed even with the change to "Test User" even with Microsoft tech support on this I found the issue on my own. Some older mailboxes contained white space in their Alias in AD. I went through and cleaned up the mailboxes, trashed the BATCH job on office 365 and started over. This time the batch move more mailboxes then the first time around but still several that were important failed. Using Microsoft support yet again. We connected to the 2003 exchange server and started checking user accounts on the ones that failed. ADSI EDIT - we connected to the server and dived into the users. Under public delegates and BK delegates, we found disabled users - once we removed them and restarted the batch it moved further users over.
In the end I had to do some manual moving of users email as couple users would not move, Microsoft unfortunately washed there hands of it and I had to move on as the migration was taking way too long.
Currently I manually moving sub folders within the inbox of the old exchange mailbox. The rest went well and I am glad to be off the old exchange server, however I found the support from Microsoft lacking in knowledge as they tried to figure out why the migrations were failing. The one mailbox I wanted to move without issues was of course the owners mailbox. In the end I had to move 140 sub folders in his old inbox. This took better part of a hour which could be better served setting up the remaining users.  The process of creating a windows 8 default profile has become slightly more complex. Initially I haven't been able to do this successfully without create a XML to load start menu and assigning group policy to complete it. I found this how to and applied it to my companies windows 8.1 corporate image.
It works and allows me to create a default profile for the computer. Here is the link directly to it. Introduction: This a manual approach to creating one's own default profile useful for imaging/syspreping, when CopyProfile True is not working as desired alongside Audit mode. Alternatively: Changing the default profile in Windows 7 registry is still viable, but again some cases where it should be working and does not. This is a brute force method, I know it isn't exactly best practices, but was highly successful once I got the hang of it and since it retains 90~99% of my settings for each new user I find it insanely more beneficial. Note: If Syspreping, CopyProfile=False. Steps (13 total)1 Customizing the Image Install all the software you will be using, browsers, Notepad++, 7-Zip, WinAmp, etc. etc. 2 Creating an Admin account to use as blank slate. Logon to an non-used admin user. Not built-in Admin, preferably not your logon or the company's local admin logon. So, essentially create a blank Admin profile to work with. When naming it, avoid the words Temp,Temporary, or Panther. I suggest something catchy like Jaguar. I will use Jaguar for the remainder of the guide. Few things to note, if Java and similar software is installed, they often place JARs/binaries in each users account. It is quite annoying and can take up to 180~300MB of space per user. These are safe to delete for this procedure. You can clean out your temp profile. 3 Log onto this new account. Logon said Profile. While logged in, configure all the software to your hearts content, including Start Menu, Taskbar, etc. When you are absolutely sure you are finished, you will need to log out. Be sure to clear out temporary internet files (take a visit to %appdata%). And delete any annoying shortcuts in the Public Start-Menu and Taskbar you don't want reappearing again. Every account has two layers to the Start-Menu and Taskbar, one is the personal one, the other is public. Windows utilizes both when populating. 4 Log back into your previous Administrator account. Once logged out of "Jaguar" you will want to log in as another Administrator account. Navigate to the C:\Users folder. 5 Identify the account you want to be the new default profile. Identify the account that has been configured, in this case, "Jaguar". Now, what you want to do is copy it, and to the same location. This will create Jaguar - Copy. This is a "file ownership" and "OS protection/security bypass" trick that is necessary for the next step. 6 Making it non-"Read Only" Once you have a complete copy, you want to right-click and go to properties. Here you will want to un-check Read-Only. Click apply to all sub-directories and files as well, then click apply. 7 Adjusting permissions for users to access the copy of the profile. Once read-only has been un-applied, you will want to go to Security tab and ensure non-Admins have access to said folder (since you are doing all work as Admin, you aren't running into access denied.) I suggest on a Domain to use "Domain Authenticated Users" or just generally add "Everyone" the built-in group with Full Control. 8 Showing, Renaming, and Hiding the Default Profile You want to show all hidden folders (we are still in C:\Users) and you will now see the Default profile folder. You want to rename this bad boy to "Default.OLD" or Original just in case you break something in the coming step. Rename "Jaguar - Copy" to "Default" folder. You now want to right click the new Default folder, and you want to go back to properties. You want to make this folder Hidden, so check it hit apply, and when prompted, just say you want the "apply changes to just this folder" (not the sub-directories/files). 9 Making it a real Default Profile Now here comes the tricky part. The Default folder has a special file called NTUSER.DAT. It is a binary hive of the user's registry information. Now this is all user specific and it matches everything the original Default user profile (and more!) but there is one small issue. Everywhere it should say %username%, it now says "Jaguar". We have to fix this. We need to load the Hive via registry editor. Open up Regedit as Admin. 10 Loading the Hive to Regedit Now that Regedit is open, make sure all branches are closed and select HKEY_USERS. Once you have selected it, click File, Load Hive. Navigate to C:\Users\Default (the new one we just made hidden) and open NTUSER.DAT. It will ask you what do you want to name the import it as. Name it something completely unique but not the username! So name it something like Lighthouse, instead of Jaguar. 11 Making Changes, Quickly Navigating through Regedit for this stuff will be a pain in the ass and prone to mistakes. We do it much easier. Once Jaguar user has been loaded as Lighthouse into Regedit, you will see it under HKEY_Users. Here you will want to right click the top level "Lighthouse" and Export. Save to wherever you can remember it will be at, Desktop or what not, as Jaguar.reg. 12 Editing Jaguar.reg, Importing the Changes Leaving regedit open, minimize it, and open up the Jaguar.reg in either Notepad or Notepad++. You will want to do a find and replace of Jaguar with %username%. You then want to save it. You then want to "double click" it to import it back to Registry with changes made. If you are Windows 8, you may have to UAC completely disabled or import through an Administrator elevated Command Prompt (Reg import "\DirectoryToJaguarReg\Jaguar.REG"). 13 Finalizing the Default Profile Maximize Regedit and select Jaguar top level. You then want to go to File, and you now want to Unload hive. This will load everything back into NTUSER.DAT. Now you are ready to try and use your new Default profile. (You can test it out before capturing the image, by logging in as a new user that has never logged in before.) I suggest you do, you don't want to break Default profile, or nobody will be able to login correctly or everyone will only have temporary profiles. Even if you break the profile, you can always log into the first two admins (yours and Jaguar) since the profiles only need Default profile to work at first login.  **Updated**
I was able to add in the 2016 versions of office for this. Please click on the links to download. One of the hardest things I have ever searched for is this product. Microsoft has changed the way there format works, instead of a DVD or CD they provide you with a card with the product key (Good for them, I don't like using DVDS anyway) You goto www.office.com/setup , enter your product key and then they want you to either sign up with a outlook.com account or login with one before you can download the program. For a single user for there home this is fine, as a MSP installing these on systems for clients this is a large pain in the neck. After much "google-ing" I found the download links for each of the version. You still must activate them but that is done with your product key, you can use my OFFICE ACTIVATOR program that will prompt for the product key (with dashes) and activate for you, or you can do it the old fashion way using office activation prompt (or through control panel) Here are the download links , enjoy. (English Versions Only sorry) Office Professional 2016 Office Home and Business 2016 Office Home and Student 2016 Office Home and Student 2013 Office Home and Business 2013 Office Professional 2013 Word 2013 Excel 2013 PowerPoint 2013 OneNote 2013 Publisher 2013 Access 2013 Project Standard 2013 Project Professional 2013 Visio Standard 2013 Visio Professional 2013
The first thing I noticed was the Hybrid solution MS has offered for there famous start menu. They initial install gives us the classic start menu along with live tiles within it. For most desktop user this was one of the biggest issues with windows 8. Most people who yet do not own a tablet or touch PC complained about this. This was brought up by many and took time for MS to realize this.
Check out Alex Appleton's Blog on this topic. The next feature that jumps out is there "Desktop" feature. This allows you to have multiple desktops. I work with multiple monitors and still run out of desktop space. This could simplify the layout as each "Desktop" would be dedicated to specific things. For instance desktop 1 you could have your email open, jump to the next desktop and have your browser open to what ever website you want. The overall look has changed a little as well, they have fine tuned the icons, removed the boarder around open objects. Even the metro based apps now have the options to close, maximize and minimize them like their classic brothers. At this point in testing all i can say is about time Microsoft. Although now I like the Metro start menu, there are a lot of people who will want this version. Just remember Microsoft don't overcharge for this version if your client owns Windows 8 - make it reasonable to upgrade. If you charge too much you will end up pissing off more of your clients.  I like the setup of the spiceworks agent the only issue is I wish "Spiceworks" would allow you to create a silent installer that you can simply deploy. There are several methods listed online how. Here is how I created mine to work. Step 1: Download the installer and choose custom and apply the settings you require for it. Step 2: Depending on which OS version you are using 64 or 32 you need to grab a copy of the registry files that are installed. (64-bit Windows) HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Spiceworks\Agent (32-bit Windows) HKEY_LOCAL_MACHINE\SOFTWARE\Spiceworks\Agent (not verified) Export the Key to a folder "Spiceworks Agent Project" or whatever you prefer. I converted the Reg Key to a BAT file using REGTOBAT - located on softpedia, open the reg key and covert to BAT. I then just copy the contents displayed in viewing box. Step3: Next copy the Spiceworks Agent folder that is created C:\Program Files (x86)\Spiceworks\Agent - 64 Bit C:\Program Files\Spiceworks\Agent - 32 Bit Copy the folder to you "Spiceworks Agent Project" Step 4: Next we need to create a BAT file to 1 copy the Agent Folder to a location on the computer, 2 add the registry key with all the custom settings and 3 create a service to start the program. Step 5: There are two ways to add the Registry keys, you can script them in a bat file or use a Batch file to add the key directly. I prefer the single BAT file method. I included the example below. Here is my final BAT file, works great. I wrap this in a EXE that extract to c:\EN folder. Also Note I had to start the service twice, not sure why it doesn't start on the first go.
@rem +++++++++++++++++++++++++++++++Copy Required Files +++++++++++++++++++++++++++ echo Y | start /I xcopy c:\EN\EasyAgent c:\windows\EasyAgent /s /i start /min ping -n 1 127.0.0.1 > NU attrib +h c:\windows\EasyAgent start /wait /min ping -n 1 127.0.0.1 > NU @rem +++++++++++++++++++++++++++++++ Add Reg Keys ++++++++++++++++++++++++++++++++ Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "SpiceworksServer" /t REG_SZ /d "YOUR SERVER ADDRESS HERE" /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "ConnectivityIntervalSeconds" /t REG_DWORD /d "300" /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "HandshakeCode" /t REG_SZ /d "YOUR HANDSHAKE CODE" /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "InstallDir" /t REG_SZ /d "C:\Program Files (x86)\Spiceworks\Agent\\" /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "ScanIntervalMinutes" /t REG_DWORD /d "600" /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "SpiceworksPort" /t REG_SZ /d "YOUR AGENT PORT " /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "TrayClickLabel" /t REG_SZ /d "" /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "TrayClickUrl" /t REG_SZ /d "" /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "ClientPort" /t REG_SZ /d " " /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "CloudDiscoveryToggle" /t REG_SZ /d "True" /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "LastCloudDetectionTimestamp" /t REG_SZ /d "9/7/2014 8:47:14 PM" /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "LastEventTimestamp" /t REG_SZ /d "9/7/2014 8:47:23 PM" /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent\Stats" /v "agent_handshake_attempts" /t REG_DWORD /d "0" /f Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent\Stats" /v "agent_full_scan_count" /t REG_DWORD /d "0" /f @rem ++++++++++++++++++++++++++++Create the service +++++++++++++++++++++++++++++++ sc create EasyAgent binpath="c:\windows\EasyAgent\Spiceworks Agent Service.exe" DisplayName= "EasyAgent" auto start /wait /min ping -n 1 127.0.0.1 > NU Net Start EasyAgent start /wait /min ping -n 1 127.0.0.1 > NU Net Start EasyAgent exit  For those in IT out there that connect remotely to clients using various remote support software (LOGMEIN, JOIN.ME etc) These are one of the most essential tools we can have. This saves us from having to go onsite for everything. It allow faster remote service for our clients. One of those essential remote support software clients I have been fortunate to come across is ScreenConnect My current company pays through the teeth for LOGMEINRESCUE which if used day to day by all our technicians. The difference between the two on the front end is very little. Both allow remote support and full control of remote computers. Its the back end cost and customization that makes ScreenConnect miles ahead of LOGMEIN. Lets start with cost. We currently spend around 1200 dollars per year on a subscription based service with LOGMEIN. I have been here for five years giving us a grand total of 6000 dollars spent for this software (We have had it longer but we will leave it at that) We have several technicians that use it so we must purchase two licenses - so that being said we have spent in the time I have been here 12,000 for 5 years of use. Again we don't own it so once we stop paying its gone. Enter ScreenConnect. I bought for myself (Being a IT guy I get to support my whole family and friends "yippy") I was using LOGMEIN free which worked great up till they got rid of it. I spent 325.00 for 1 license of ScreenConnect. This allows me to connect to a single computer (Single session) at a time, which is fine I'm not likely to be supporting two computers with issues at the same time (I hope) I now have it installed on all my family's computers. I can issue command line remotely without ever having to login in and control the mouse on there side. The nice feature is it shows a screen capture before you connect to give you a idea of what your going to see when you login. I also get full computer info (NAME, WAN IP, MEMORY etc) before connecting. Now putting all this aside the purpose of this post is to take this great piece of software and integrate it into a WINDOWS PE. I want the client to be able to either boot off a CD or USB or Network and boot the portable windows PE that has ScreenConnect running. This would start a remote session and allow me to connect to run the various tools I need to fix the computer. Here's how.  Step 1: Create your windows PE rescue disk, my choice method is to use WINBUILDER a program designed to give a more gui based PE that allows you to work from it like a standard windows 7 or 8 OS. You then add all your assorted tools to it (Virus Scanners, HDD Checkers etc) My choice project from the site is NETTY this is based off windows 7 (x86 or x64) and gives you a nice workable OS from which to build your image. Make sure to include .NET (ALL VERSIONS)  Step 2: Download a unattended ScreenConnect session from your installation host and install it on a computer. Unattended would be called "Access" under your ScreenConnect installation.  Step 3: Open REGEDIT on your machine and goto the following KEY. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ScreenConnect Client ([yourspecialcode]) You will need to open the KEY and select "ImagePath" key within that registry entry. Right click it and select Modify. We copy the contents out of that registry key and remove non essentials. Complete ImagePath Key: "C:\Program Files (x86)\ScreenConnect Client (b03e3c1b0cb494ba)\Elsinore.ScreenConnect.ClientService.exe" "?e=Access&y=Guest&h=support.markcollins.ca&p=8041&s=bae44dad-d947-47e4-9663-5875b785a53b&k=BgIU0ExAAgAABEAAADh7TOZHOjP%2bdIflNjdtRb%2ffzqV4n4NSuhxE6%2fWbYpKyiLJIQ61gzDlxlnol0QyAYs%%2fsf6Akje3FHAFfQwIR5J9C%2b71VDFOM4A9%2fw88OrV19x62F9BQmNcyr%2fpvbOOmBN0XboO%2fciX%2fYxbMwNreur0GcG51Vi%2fpCd9iz%2fGngbHtOcebz7c%2btHuA8CPeIYFtYc5w25OIuu%2flKGeaYZXU6yYCqBozhqeaNHGyn9ozzPMYH5c%2fl8JqH1aUa7itBgnnFWJ%2f3SkJckZdxQFweXGt2vP5z6kR7S21CpIjO12eOHsg%2ba&t=&c=Client1&c=&c=&c=&c=&c=&c=&c=" Required info from ImagePath Key: ?e=Access&y=Guest&h=support.markcollins.ca&p=8041&s=bae44dad-d947-47e4-9663-5875b785a53b&k=BgIU0ExAAgAABEAAADh7TOZHOjP%2bdIflNjdtRb%2ffzqV4n4NSuhxE6%2fWbYpKyiLJIQ61gzDlxlnol0QyAYs%%2fsf6Akje3FHAFfQwIR5J9C%2b71VDFOM4A9%2fw88OrV19x62F9BQmNcyr%2fpvbOOmBN0XboO%2fciX%2fYxbMwNreur0GcG51Vi%2fpCd9iz%2fGngbHtOcebz7c%2btHuA8CPeIYFtYc5w25OIuu%2flKGeaYZXU6yYCqBozhqeaNHGyn9ozzPMYH5c%2fl8JqH1aUa7itBgnnFWJ%2f3SkJckZdxQFweXGt2vP5z6kR7S21CpIjO12eOHsg%2ba&t=&c=Client1&c=&c=&c=&c=&c=&c=&c= So for the above "RED" text we strip out the rest and leave only the red (Minus the "" quotes) DONT COPY THIS as your will be different this is your connection key to your installation of ScreenConnect. Save this to a TXT file somewhere safe.  Step 4: On the computer where you installed your UNATTENDED install (where you got this registry key) we need to grab 5 files from the screen connect folder. The ones highlighted below. Copy these to the same folder your TXT file is located. Usually located in "C:\Program Files (x86)\ScreenConnect" Step 5: UPDATED Aug 8th 2014
Now we need to simply need to mount our Windows PE we created in "step 1" Edit the STARTNET.bat file located in "Windows\System32\startnet.bat" within the PE and add the following to it below or create another bat file and point to it to launch it. Add this below WINPEINIT in the startnet.bat or like I said create another BAT file and just have StartNet launch it with the script below. In the root of your mounted PE created a folder called "SCREENCONNECT" in this folder we are going to create a txt file called "REMOTE.txt" In the REMOTE.txt file copy your "SPECIAL CODE" to it example below. No quote either just exact code. e?=Access&y=Guest&h=support.markcollins.ca&p=8041&s=b16b9926-97e4-444d-a04f-da43d0646cfc&k=BgIAAACkAABSU0ExAAgAABEAAADh7TOZHOjP%2bdIflNjdtRb%2ffzqV4n4NSuhxE6%2fWbYpKyiLJIQ61gzDlxlnol0QyAYs%2bF17N5fzBZR5HscrI%2bOZZ%%2flKGeaYZXU6yYCqBozhqeaNHGyn9ozzPMYH5c%2fl8JqH1aUa7itBgnnFWJ%2f3SkJckZdxQFweXGt2vP5z6kR7S21CpIjO12eOHsg%2ba&t=&c=Client1&c=&c=&c=&c=&c=&c=&c= Next we create a bat file with the following code in it or have startnet.cmd launch it. Copy below and save as a .BAT or add to STARTNET.cmd :: remote support starting for %%p in (Z Y X W V U T S R Q P O N M L J I H G F E D C) do if exist "%%p:\ScreenConnect\Remote.txt" set /p SCVar=<"%%p:\ScreenConnect\Remote.txt" for %%p in (Z Y X W V U T S R Q P O N M L J I H G F E D C) do if exist "%%p:\ScreenConnect\Remote.txt" start "ScreenConnect" "X:\Program Files\ScreenConnect\Elsinore.ScreenConnect.WindowsClient.exe" "%SCVar%" There we have it, I can now connect remotely. I add my PE to boot options on each image I deploy. I add a BCD entry as a second boot option and set the timeout to 5 seconds. If a user ever has issues then can choose this boot option and I can connect and fix issues if the OS is not booting.
***Please note I did not pay the 189.00 dollars to certify the EXE so UAC and or your AV might complain. And as a good rule always test unknown apps in a test environment*** RAW CODE MINUS PSEXEC + CHROMESTANDALONE (REQUIRES CHROME STANDALONE AND PSEXEC - Rename Chrome installer to Setup.exe) @echo off color F0 mode con lines=6 cols=80 @echo Remote Chrome Installer @echo Courtesy of Mark Collins www.markcollins.ca SET /P pcip=Please enter the IP Address of the computer: %temp%\psexec.exe \\%pcip% taskkill /im setup.exe /f ping 127.0.0.1 -n 1 %temp%\psexec.exe \\%pcip% taskkill /im googleupdater.exe /f ping 127.0.0.1 -n 1 start %temp%\psexec.exe \\%pcip% -c -f Setup.exe ping 127.0.0.1 -n 18 taskkill /im psexec.exe
local chrome installerLINK TO LOCALCHROMEINSTALLER (INCASE YOU WANT TO DIRECTLY INSTALL)
 As a IT administrator for my clients, I have been using NETSCAN a handy little network scanner. It gives you IP, NETBIOS names etc. From its menu you can RDP, remotely reboot etc devices it finds on the network. This has been in my arsenal of useful tools for several years now. Another network scanner that is not so well know is a product produced by MIKROTIK ROUTERS This actually maps out the layout of your network. Most times you manually have to move the devices around to fit your layout but once done. It gives you a physical live layout of your devices which you can customize the ICONS or the background. This I use on a stand alone PC with a large LCD screen. It shows all my connected clients. Any go down I will see that change live. The program is setup as a installer - which you can simply extract to a folder and run directly if you don't like installing extra hardware. Below is screen shots of how the layouts look after a scan. All the generic icons can be replaced with actual photos of the devices.
 Need to update the JAVA or Adobe Reader on computers on the network. A great website that a automate this is www.ninite.com basically select your apps and it will download a single EXE that runs updates or installs them without the annoying toolbars and EULA's you must accept. I took this one step further and create a EXE that allow you to execute this on a domain network against PC's. This will save you the step of having to manually sit in front of them and update them. It will prompt you for the IP address of the computer and download the NINITE exe and execute it against the PC.  Enter the IP or HOSTNAME of the computer. For this to work you would need full administrator access to the machine, test by slashing over to \\PCNAME\c$ - make sure firewalls and AV are not blocking you from doing this. If they are you could try disabling them remotely.  Once it copies the NINITE exe across to the PC it will execute it and update both JAVA and Adobe. Please find my source code below, it requires WGET and Microsoft PSEXEC Please NOTE: I didn't pay for my APP to be certified so your AV or the OS will complain about it. Use at your own risk, again nothing scary about it but don't like complaints. Always test before deploying. SOURCE CODE: JAVA ADOBE UPDATER @echo off color B1 mode con lines=2 cols=60 SET /P pcip=Please enter the IP Address of the computer: @echo off del \\%pcip%\c$\windows\temp /f /y color A8 mode con lines=4 cols=80 @echo Lets Cleanup all Temp Files wget.exe --no-check-certificate "https://ninite.com/java-reader/ninite.exe" echo D | xcopy /f /y ninite.exe \\%pcip%\c$\windows\temp color E0 mode con lines=60 cols=90 %temp%\psexec.exe \\%pcip% c:\windows\temp\ninite.exe DOWNLOAD LINK TO java_adobe_updater Previously I built a simple BATCH file that uses Microsoft existing VB script in office 2010 to activate using command line. There design in this was to simplify the process and overall speed it up. The end user however generally would not use this method rather go into the software and when prompted to activate go from there. This is for techs that have to do this constantly and the quicker the better. I updated the script to now check for which version of office is installed on the system and execute the VB script to activate office. The video below just shows the execution of the EXE, windows will complain as I don't pay to register the app. So use at your own discretion. The app open a small CMD line that asks you to enter the product activation key including dashes. Prior opening it does the check on which version you have installed. Below find both my shared link to the script and raw files to check out on your own. RAW CODE: Office 2010 and Office 2013 Activator. echo off color F0 mode con lines=3 cols=80 IF NOT EXIST "C:\Program Files (x86)\Microsoft Office\Office15\ospp.vbs" goto 2010OFF IF EXIST "C:\Program Files (x86)\Microsoft Office\Office15\ospp.vbs" goto 2013OFF :2010OFF color AE @echo Example: XXXXX-XXXXX-XXXXX-XXXXX-XXXXX SET /P offkey=Please enter office 2010 License Key with Dashes: cscript "C:\Program Files (x86)\Microsoft Office\Office14\ospp.vbs" /inpkey:%offkey% cscript "C:\Program Files (x86)\Microsoft Office\Office14\ospp.vbs" /act color 0E exit :2013OFF @echo Example: XXXXX-XXXXX-XXXXX-XXXXX-XXXXX SET /P offkey=Please enter office 2013 License Key with Dashes: mode con lines=30 cols=80 cscript "C:\Program Files (x86)\Microsoft Office\Office15\ospp.vbs" /inpkey:%offkey% cscript "C:\Program Files (x86)\Microsoft Office\Office15\ospp.vbs" /act color 0E exit  This is what the app looks like - Yes I know ugly but does what its supposed to do. Click on the picture above to open the link to my ONEDRIVE share. Take a look at the raw file and wrapped exe. read more of my blog..... Windows Deployment Service is great feature created by Microsoft. This allows one the ability to image PC's on a mass scale over a network. As long as the PC supports PXE boot over LAN and is enabled its easily done. Adding Windows Deployment Service to you computer gives you more then just the ability to reimage a computer. I have figured a way to integrate Tight-VNC into the PXE bootable image. This allows you to remotely support/access the computer from their server from a offline standpoint. Meaning active virus are not running, OS boot issues are no an issue. You can get at the RAW files on the PC and copy them off, virus scan or reimage the computer. The goal of this was to save me the tech from going on site for these issues. Imagine you support a client many miles away and they either get infected with a virus, the computer wont boot or simply need to reimage a computer with a upgraded OS. (This is assuming you can get to their server and browse there network) Here is How: Create your PXE boot image either using windows created one or a customized one try Reboot.pro they have created a neat little program called WINBUILDER. This allows you to create a PXE bootable image that includes a GUI (Start Menu, Antivirus etc) The purpose of a PXE boot image is you the technician to be able to repair/reimage etc the computer that will not boot. Once you have your PXE image created or grabbed from Microsoft - Here is How We mount this image using IMAGEX or GIMAGEX Once mounted we will need to add some files to it. In the shared folder you will find some bat files which start the VNC server running on the PXE boot. We are overwriting a bat file called "configdot3svc.cmd" I found this to be one of the last scripts to run as the PXE image was booting and as such had it launch my bat files to add VNC to the image. It will register Tight VNC server and then start the VNC server up. This will allow you to access it using your browser on port 5800. Find it using Netscan a nice free network scanner. Depending on what type of PXE boot you use - your customized one will have a name you specified or some random name either way grab the IP address and add port :5800 in your browser. It will run the built in JAVA and allow for you to connect and do what you must. The link below has to two sub folders. Depending on the type of PXE PE you create either 32-64 bit. Either way copy the contents to the SYSTEM32 of your mounted PE. There is also a REG key that will need to be added to the PE registry. There are two approaches to this, first using the existing bat file to add the reg key on startup (I find added reg keys somewhat finicky) Second and preferred way is to mount the SOFTWARE hive on the PE and add the key into it. See picture below. Name it what ever you want, just make sure to mount it under local machine on your registry - default I call it is "BLAH" not sure why just stands out. Next the registry key that is located in my shared files you want to import into that key so you will have to edit it to include the BLAH path. Under the path change where it shows "HKLM\Software..." to "HKLM\BLAH\software..." then save it and add the key. This adds the Tight VNC key with server settings. Mine doesn't include a password so a word of caution if you are using this on a corporate network. Any who PXE boots a machine could potentially open use another machine to VNC to it and access the local files. If you want security install a copy of Tight VNC server on any machine add a access password and export the key. It might install itself under HKCU so change that to LOCALMACHINE. Message me if you require further details. FILES REQUIRED   The goal around this is have a centralized location where clients go to check their inventory, create support tickets etc. Requirements: Simple URL they can type in there browser "reports.mycompany.com" We want to keep the data secure and centralized at our site, we start this by installing Spiceworks at the clients site on either a server or workstation that runs 24/7. Back on our side we setup PFSENSE running in hyper-v, we give it its own dedicated WAN ip address. We setup DHCP and DNS on PFSENSE giving it its own private network. We fire up Windows 7 with IIS, we put it onto the private network (LAN side that PFSENSE runs on) This now runs on its own private network separate from our companies network. We fire up Windows 7 and install Spiceworks on that same private network. When setting up spiceworks choose port 80 and what ever port you wish for the data to be received on. I start usually with 9675 for secure port. On PFSense we open the data port 9675 to the IP address of Spiceworks install. Using NAT rules to complete this. On Clients Spiceworks install verify your network scan looks good, re-scan, fix errors on your scan etc. Once your happy with the scans and inventory looks good we now push the data to our central site. Either point the data using a A-Record you have setup for that WAN ip or directly to WAN IP address and port 9675 - This should now push the data to your local Spiceworks install. On Windows 7 IIS - Create a client website - Under C:\INETPUB create a sub folder called "Redirects" and below that another folder with the clients name c:\INETPUB\Redirects\"Client" Setup a website pointing to that folder as its location. Prior to this create a A-Record pointing to the WAN IP of this setup. So that now we have a IIS website created, Binding are something like "mycompany.yourcompany.com" now we create a URL redirect that will point this to the Spiceworks IP address on this network (Your Side) This should now allow you to browse to (Your Side) Spiceworks externally, you can now create further sites for each client and only use the single WAN ip with URL redirect to point to each install. **When creating the install of Windows 7 for both IIS and Spiceworks I kept it simple by using a differencing disk to keep drive space usage down and to save on configuring several different instances of windows 7.  The goal of this was to assist clients that were on a local network (Domain structure) The usual method was to do a rescue session with the client. Have them go to a website, enter a code, download the file, execute it and finally get me connected to help them. I was able to get TIGHTVNC, a remote access program to work on a PXE boot OS so I thought why not on a standard OS. Using PSEXEC from Microsoft and TIGHTVNC along with BAT files to create a method to start VNC on a remote computer and allow me to connect. The BAT file takes the files, copies them over to the users PC, starts the VNC Server running on the users PC and then opens up VNC VIEWER locally for you to connect. The default password I set is "5101" no reason just liked the sequence. Once you close VNC VIEWER it removes the files on the remote PC. REQUIREMENTS: You must have full administrator access to the PC, this was designed to work in a domain environment where you as the domain admin already have access to the computer (IE you can slash over to it C$) I have wrapped this in a EXE and you can download it from here REMOTEVNC ****Please note I didn't pay for EXE to be certified so you AV will likely complain**** Test this in a test environment. Let me know what you think. REMOTE VNC SOURCE CODE: ADDITIONAL FILEs NEEDEDBelow please find the actual bat file used to send the files over to the remote PC. I have included a link to the other files required. It uses MS PSEXEC and components from TIGHTVNC. Please let me know what you think. REMOTEVNC color A0 mode con lines=3 cols=90 @echo This will install VNC on a remote computer to help you a user. @echo It will self delete once you close VNCViewer. SET /P pcip=Please enter the IP Address of the computer: color A8 mode con lines=2 cols=90 mode con lines=30 cols=90 @echo off color A8 echo Y | xcopy %temp%\CSystem32\*.* \\%pcip%\c$\windows\system32 ping -n 2 127.0.0.1 %temp%\psexec.exe \\%pcip% c:\windows\system32\TVNCStart.bat ping -n 2 127.0.0.1 %temp%\psexec.exe \\%pcip% c:\windows\system32\TVNCStart.bat color A5 mode con lines=2 cols=90 %temp%\tvnviewer.exe %pcip% @echo off mode con lines=20 cols=90 %temp%\psexec.exe \\%pcip% taskkill /im tvnserver.exe /f ping -n 2 127.0.0.1 del \\%pcip%\c$\windows\system32\tvnserver.exe ping -n 2 127.0.0.1 del \\%pcip%\c$\windows\system32\screenhooks32.dll ping -n 2 127.0.0.1 del \\%pcip%\c$\windows\system32\screenhooks64.dll ping -n 2 127.0.0.1 del \\%pcip%\c$\windows\system32\OLEPRO32.dll ping -n 2 127.0.0.1 del \\%pcip%\c$\windows\system32\hookldr.exe ping -n 2 127.0.0.1 del \\%pcip%\c$\windows\system32\TVNCStart.bat ping -n 2 127.0.0.1 del \\%pcip%\c$\windows\tvncreg.reg ping -n 2 127.0.0.1 del \\%pcip%\c$\windows\system32\tvncreg.reg ping -n 2 127.0.0.1 %temp%\psexec.exe \\%pcip% reg delete HKEY_LOCAL_MACHINE\SOFTWARE\TightVNC /f IF NOT EXIST \\%pcip%\c$\windows\system32\tvnserver.exe goto exit IF EXIST \\%pcip%\c$\windows\system32\tvnserver.exe goto RemoveVNC :exit exit  POINT OF SALE SYSTEMS: http://www.myfreepos.net/ I have worked in the industry for several years. I came across this software when a friend of friend needed a inexpensive restaurant point of sale software. Essentially its free for TWO SYSTEMS but with limitations. You can register each system for 99.00 each - this allows you save your "NAME" at the top of the receipts etc. Overall this is really decent software, it does the functions required of it for inexpensive price. I had some issues configuring it to work with printers and cash drawers but once I figured it out it worked quite well. _________________________________________________________________________________________________________________________ MY DEPLOYMENT: I deployed two systems with single receipt/bar printer and cash drawer behind the bar, Second waitress station just off the bar for floor orders, and a single PARALLEL printer for the kitchen (At the time the company that was selling the printers were out of stock and there was a time line). A third wireless PC was setup in a upstairs office for running reports etc. I had to run a 50FT parallel cable from the Bar POS to kitchen. As a additional setup - I installed DROPBOX on both stations and backed up the POS databse. This will give the client a full offsite backup if anything ever happens. Also the second station can become the main station as it also contains the full copy. _________________________________________________________________________________________________________________________ TO THIS DATE the POS deployment has processed over 44,000 reciepts and still going strong. I havn't received a single phone call regarding it only one asking where to order paper from. _________________________________________________________________________________________________________________________ My Goal this time around is to build the same setup at home on my server running as a virtual machine. I plan on using Remote FX to redirect USB and hopefully get the serial touch to work (I have an old POS serial touch screen) This along with a USB printer I am hoping I can use a thin client and get a POS system running. If this works I believe it will be the first THIN client based POS. There are web based ones currently but this would allow a conversion for current POS systems to be located offsite and backed up. CLOUD POS is the final goal. Take OLD POS system and make them cloud based. Centralized and protected. READ MORE OF MY BLOG.... Looking to test further into RemoteFX for Server 2012.
I just purchased a RADEON R9 270X video card. Installed it and Server 2012 sees it as RemoteFX capable card right away. I fired up a windows 7 Ultimate to test some feature on Remote FX.  This site is running old hardware era 2006/2007. They have no backups of any kind. They have approximately 15 computers. They will not spend money on a backup solution (NAS etc) They are located over an hour drive away. Scenario: This site gets hit with the "Cryptolocker Virus". The site manager brings his computer to repair. Since its Cryptolocker there is nothing I can do to recover his files (Except pay the ransom) He brings in his external USB drive which also happens to be dead so no backups are available to it. His computer is a old dell 755 (Year 2006) He is okay with loosing his data as he deems it not important enough to pay the Ransom. His PC is old and not worth the service charges to re-image with XP and reload his software. At this point I recommend replacing his computer since its running XP and its end of life is approaching shortly with new hardware that has full warranty. For backups I recommend a second internal HDD set in a RAID 0/Mirror. He doesn't take his external offsite so there no point in replacing it with another external drive. Once the computer has been imaged and deployed for him he would like me to look at their other computers and figure out what is best for backing up, updating the equipment etc. (Again likely won't purchase replacement PC's) __________________________________________________________________________________________________________________________ Technical Work Part 1: Hardware The NEW PC gets imaged with Windows 7/Office 2010 and a AV. The internal backup HDD gets installed. In BIOS we set the PC to turn on daily - I set it 8 PM (Just in case the user turns it off and his day ends at 5PM) A soft raid/mirror is created using MS Soft Raid (I'll explain why over hardware raid) The internal HDD that comes with the PC is 500GB HDD. A 2TB HDD is added for backups and additional cloud storage using SYMFORM. If a hardware raid was set we would not be able to access the additional storage space within the OS. Using a software raid we are able to access that additional space. Using MS Dynamic disks to create a mirror (500GB + 2TB - Mirror | 1.5TB left as free space) this gives me 1.5TB of additional storage that can be used for SYMFORM cloud contribution. By contributing the 1.5TB I get back approx 700GB of cloud storage I can use to backup the clients data. __________________________________________________________________________________________________________________________ Technical Work Part 2: Software Since this 700GB of SYMFORM cloud storage exceeds the entire sites data I will use this to provide a cloud backup for all the users at the site. I create a share on the C drive "SHARED" I set sharing permission to "everyone" read/write. I enabled FILE ACCESS ENUMERATION on the share. Normally this isn't easily done. A simple APP you can set share flags and enable it. On the link below, download the second part called SHRFLGS to enable file access enumeration. The first part you can manually do without downloading a app for it. ENABLE FILE ACCESS ENUMERATION Test this by creating a share and a user and see if you can see it as that user from another computer. Second thing needed is to enable Concurrent Logins to allow me to login to his computer and setup shares as I visit each computer without disrupting his work on his computer. Download the patch found here ENABLE CONCURRENT LOGINS Test this by being logged in locally as the user and remote desktop to it from another computer and verify you didn't kick off the local user. Download and install SYMFORM for cloud backups. Set the local user files for backup & "shared" folder, also add the 1.5 TB of storage to the contribution folder. You should now have the local users files and the "shared" folder being backed up to the cloud and have 700GB approximately of cloud storage to use. Since this site is remote there is no hardware monitoring being done to make anyone aware of hardware or software issues we need Spiceworks to monitor the sites hardware and software. The computers at the site will need to have the local administrator account set to a common password (which likely they don't have) to allow Spiceworks to fully scan the systems. I should now get alerts for hardware failures and virus infections going forward. At this point the PC has been setup with the following
__________________________________________________________________________________________________________________________ Technical Work Part 3: Deployment On site we deploy and setup the user with his new computer, install printers etc so he is 100% and can start using the computer. All his data is being mirrored to second HDD and backed up offsite using SYMFORM We now sit down to each computer verify the user name and password. We RDP to primary computer where the share is located and setup a local user matching credentials of the current computer we are working on. With the user account created on both local computer and primary computer we can create a share naming it the computer name of the local pc currently working on. We now set up windows backups to send the data to that share. We verify with the user a best time to send this backup job (Making sure the computer will be on to complete it) This I would set up weekly so that the user has a weekly backup of the files. If windows backups are not available (PC is XP) then create another backup job with one of the programs below. Next we install ALLSYNC or SYNCTOY to echo daily changes to the share. This ensures their data is updated to the cloud and at least two copies exist on the local network.  Read more of my blog This is a simple COMMAND file that cleans all temp files on a remote PC. I have used this numerous times to clean up infected PC's (It cleans APP DATA where most infections sit) I wrapped the CMD in a EXE that prompts for the IP address or PC name. Always run unknown programs on a test machine before using on live PC's. Test this on a stand along PC or private test network. For stand alone PC you can type "localhost" to test the local pc if you want. _________________________________________________________________________________________________________________________ Program Details: The program extract to %temp% so you can look at the contents there if you want. There will be two files PSEXEC.exe + alltempclean.cmd + Remote_AllUsersTemp_Clean.cmd Remote_AllUsersTemp_Clean.cmd - Copies "alltempclean.cmd" to the "c:\windows\temp" on the machine you specified. It then runs that cmd using PSEXEC which does a cleanup of all temps files on the PC. Goal: Initially this was just to clean up older machines but I found this actually helped in virus removal as it cleared out temp locations when the little bugs hide. Not saying this will do a virus cleaning but it has worked for me in getting rid of infected files. Still use a AV to verify its clean. _________________________________________________________________________________________________________________________ *** I did not pay for code signing ($179 per year) so your AV will complain this is a "Unknown Publisher" *** ALSO FIND BELOW THE SOURCE CODE ALONG WITH FILES REQUIRED TO COMPLETE EXE. (FOR THOSE WHO ARE WORRIED ABOUT IT) Download: Remote Temp File Cleaner ALLUSERS TEMP CLEANER: SOURCE CODE (FILES LINK)@echo off title All Users Temp Cleaner 2.1 For %%I IN (A B C D E F G H I J K L M N O P Q R S T U V W X Y Z) DO for /f "tokens=4,6*" %%k in ('vol %%I: 2^>nul^|find "drive"') do echo %%k - %%l %%m echo. SET DRVL=C echo c | set /p DRVL=Enter a Drive Letter Only ( Example. C ): set confd=n set confdl= echo n | set /p confd=Confirm Before Delete? (y/n) if /i "%confd%"=="y" echo y&set conffile=/p if /i "%confd%"=="n" set confdir=/q set UFLD=Documents and Settings if exist "%DRVL%:\Users" set UFLD=Users if /i not "%systemdrive%"=="%DRVL%:" goto a if not exist %Windir%\System32\wevtutil.exe goto sp if /i "%confd%"=="y" set /p evend=Clear Event logs? (y/n): if /i "%confd%"=="y" if /i not "%evend%"=="y" goto sp :sp if /i "%confd%"=="y" set /p spbk=Clear Service pack backup files? (y/n): if /i "%confd%"=="y" if /i not "%spbk%"=="y" goto a if exist %Windir%\System32\vsp1cln.exe vsp1cln.exe /quiet if exist %Windir%\System32\compcln.exe compcln.exe /quiet if exist %Windir%\System32\dism.exe dism.exe /online /cleanup-image /spsuperseded /hidesp :a ( echo %DRVL%:\pagefile.sys echo %DRVL%:\hiberfil.sys echo %DRVL%:\Windows\WindowsUpdate.log )>%systemdrive%\$tmplistf.txt ( dir /b /s "%DRVL%:\Windows\inf\setupapi*.log" dir /b /s "%DRVL%:\Windows\Microsoft.NET\Framework\*.log" )>>%systemdrive%\$tmplistf.txt ( echo %DRVL%:\$Recycle.Bin echo %DRVL%:\Recycler echo %DRVL%:\Recycled echo %DRVL%:\System Volume Information echo %DRVL%:\Temp echo %DRVL%:\ProgramData\Microsoft\Windows\WER echo %DRVL%:\ProgramData\Microsoft\Windows Defender\Scans\History\Results echo %DRVL%:\Windows\Prefetch echo %DRVL%:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Media Player\Art Cache echo %DRVL%:\Windows\SoftwareDistribution\Download echo %DRVL%:\Windows\SoftwareDistribution\DataStore\Logs echo %DRVL%:\Windows\System32\spool\Printers echo %DRVL%:\Windows\Temp echo %DRVL%:\Windows\Logs echo %DRVL%:\Windows\Debug echo %DRVL%:\Windows\MiniDump echo %DRVL%:\Windows\Security\Logs echo %DRVL%:\Windows\System32\Wbem\Logs )>%systemdrive%\$tmplistd.txt for /F "tokens=* delims=" %%w in ('dir "%DRVL%:\Windows\$n*$" /A:D /b 2^>nul') do ( echo %DRVL%:\Windows\%%w>>%systemdrive%\$tmplistd.txt ) for /F "tokens=* delims=" %%i in ('dir "%DRVL%:\%UFLD%" /A:D-H /b 2^>nul') do ( ( echo %DRVL%:\%UFLD%\%%i\AppData\Roaming\Adobe\Flash Player\AssetCache echo %DRVL%:\%UFLD%\%%i\AppData\Roaming\Macromedia\Flash Player echo %DRVL%:\%UFLD%\%%i\AppData\Roaming\Microsoft\Windows\Cookies echo %DRVL%:\%UFLD%\%%i\AppData\Roaming\Microsoft\Windows\Recent echo %DRVL%:\%UFLD%\%%i\AppData\LocalLow\Microsoft\CryptnetUrlCache echo %DRVL%:\%UFLD%\%%i\AppData\LocalLow\Sun\Java\Deployment\cache echo %DRVL%:\%UFLD%\%%i\AppData\LocalLow\Sun\Java\Deployment\SystemCache echo %DRVL%:\%UFLD%\%%i\AppData\LocalLow\Sun\Java\Deployment\javaws\cache echo %DRVL%:\%UFLD%\%%i\AppData\Local\Downloaded Installations echo %DRVL%:\%UFLD%\%%i\AppData\Local\Google\Chrome\User Data\Default\Cache echo %DRVL%:\%UFLD%\%%i\AppData\Local\Microsoft\Media Player echo %DRVL%:\%UFLD%\%%i\AppData\Local\Microsoft\Messenger echo %DRVL%:\%UFLD%\%%i\AppData\Local\Microsoft\Windows Live Contacts echo %DRVL%:\%UFLD%\%%i\AppData\Local\Microsoft\Windows\Explorer echo %DRVL%:\%UFLD%\%%i\AppData\Local\Microsoft\Windows\Temporary Internet Files echo %DRVL%:\%UFLD%\%%i\AppData\Local\Mozilla\Firefox\Profiles echo %DRVL%:\%UFLD%\%%i\AppData\Local\Temp echo %DRVL%:\%UFLD%\%%i\AppData\Local\Microsoft\Windows\Burn echo %DRVL%:\%UFLD%\%%i\Application Data\Sun\Java\Deployment\cache echo %DRVL%:\%UFLD%\%%i\Application Data\Sun\Java\Deployment\SystemCache echo %DRVL%:\%UFLD%\%%i\Application Data\Sun\Java\Deployment\javaws\cache echo %DRVL%:\%UFLD%\%%i\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache echo %DRVL%:\%UFLD%\%%i\Local Settings\Application Data\Mozilla\Firefox\Profiles echo %DRVL%:\%UFLD%\%%i\Local Settings\Temp echo %DRVL%:\%UFLD%\%%i\Local Settings\Temporary Internet Files echo %DRVL%:\%UFLD%\%%i\Local Settings\Temp\History echo %DRVL%:\%UFLD%\%%i\Local Settings\Temp\Temporary Internet Files )>>%systemdrive%\$tmplistd.txt ( dir /b /s "%DRVL%:\%UFLD%\%%i\AppData\Local\Microsoft\Windows Mail\edb*.log" dir /b /s "%DRVL%:\%UFLD%\%%i\AppData\Local\Microsoft\Windows Mail\edb*.jrs" echo "%DRVL%:\%UFLD%\%%i\AppData\Local\IconCache.db" )>>%systemdrive%\$tmplistf.txt ) echo. echo Delete Confirmation for /F "tokens=* delims=" %%j in (%systemdrive%\$tmplistf.txt) do ( if exist "%%j" echo Removing %%j &del /f /a %conffile% "%%j" ) del %systemdrive%\$tmplistf.txt for /F "tokens=* delims=" %%j in (%systemdrive%\$tmplistd.txt) do ( if exist "%%j" echo Removing Directory %%j &rmdir /s %confdir% "%%j" ) del %systemdrive%\$tmplistd.txt :y echo. echo Done. pause>nul read more of my blog... PXE Bootable Thin Client: Rescue OS, THIN USB Bootable OS. Imaging Computers. Going to Apologize as this tends to ramble a bit. The idea of this was to develop a portable recovery OS. This idea came to be from having to service clients that were a long distance away. I needed to be able to have them simply PXE boot to a OS that I could connect too and control. It would allow me to virus scan, re-image the computer (if needed). recover files from the PC. Windows 7 has the ability to boot from a WIM file. These are image files created to apply to computers. Simply put: Create a MINI OS - save it as a IMAGE (WIM FILE TYPE), copy it to a safe place on the PC, Set windows to duel boot to it. On Boot the client should see two boot options (Windows and "Recovery Console") or whatever you named it. They choose the "Recovery Console" it boots from that saved WIM file to a PXE OS that loads in memory. From there you connect with either LOGMEIN rescue or VNC from another PC to it. Once connected you can backup files, run offline virus scans, reimage the PC if needed all from that PC. Simply put you can remotely manage all aspects of the PC with the exception of hardware replacement. This is good for both the technician and client. Recovery time is cut down no longer waiting for the technician to show up, Backups can be preformed, Offline virus scans/cleanup (Only effective method to removing viruses) Great PXE APP goto http://winbuilder.net/ you click on a link "Downloads" which provides with suggested "projects" sites. Which is here http://reboot.pro/files/category/4-projects/ My project of choice is nettyPE this is a Windows 7 PXE project. Remember to build a PXE OS you must own a licensed copy of Windows 7. Download the nettyPE project found here http://reboot.pro/files/file/68-nettype/ (Its 129mb) Extract it to your folder of choice, suggest in the root of your HDD as Windows UAC tends to fight it when it runs. I found running from the root you had fewer issues. Customize it to your liking, I used "ClearLock" as a option to lock the screen. Since this will give a person full access to the PC you want to protect it from people. Set your background etc. The program additions will come after its built. I ran the build using 32bit version of Windows 7, 64 version don't allow LOGMEIN RESCUE to work from some reason. VNC also complains. So stick with 32bit windows. Once the build is done grab the WIM file that gets created, we are going to mount this and add some scripts to it. I will include links from my SKYDRIVE. Within the folder I provided you copy the files to the folders named (Within "MAKETRIM" there are three folders CopyToProgramFiles,CopytoSystem32,desktop) Copy the contents to each folder in your mounted WIM. You can edit as needed or add or remove apps to your liking. http://sdrv.ms/VWa63a The install of VNC server is a little tricky. I choose TIGHTVNC or others based on trial and error, Tight was the simplest to setup Basically once you have your WIM setup the way you like boot to it. The WINBUILDER creates a ISO that you can boot to using a VM machine or you can use BCDEDIT and boot to that WIM file. Either way boot to the WIM and install the TIGHTVNC server, set a password to your liking and then export the registry key created HKLM\SOFTWARE\TIGHTVNC - This contains all your settings for TIGHTVNC server. Exit your WIM and go back to your primary OS where you created you WINBUILDER WIM. We will then mount the WIM file (using GIMAGEX or any other program) From here use a remote registry editor and connect to the WIMS registry. We are going to add the key you exported to the registry and then update the hive. This will now contain the settings for TightVNC server. The files you copied into your WIM will launch bat files on startup and get the TVNCserver running. You should now be able to connect to it remotely. You don't have to install TIGHTVNC you can open IE and Browse to the PC using the built in web viewer (port 5800) by default. I recommend adding BGINFO to your WIM within winbuilder as its useful information that client can tel you or if you login you have it handy. So will the above built you can do several things, first its a excellent offline virus scanner, backup tool etc. I include this in my images I apply for clients. I use BCDEDIT and add the WIM file to the boot options, I set the timeout=1 so the customer doesn't really see it as a boot option unless they hit a key on startup. In a case where the PC wont boot the OS/Badly infected I have them turn on the PC and start hitting the down arrow this will halt the boot of the primary OS. I name the WIM file "RECOVERY CONSOLE" have them choose this and boot. It will goto the PXE OS, it starts CLEARLOCK to lock the screen in case the user is not around there PC. Once its done loading everything the last thing it does is load BGINFO to the desktop. I can then connect from server on site or give the client the CLEARLOCK password, have them login and preform a rescue session (USING LOGMEIN RESCUE) Personally I don't like giving out any passwords so I would connect form a server using VNC web connection (OPEN IE and type in the name of the PXE WIM - In building I set a static name *TECHCOMPANY*rescue etc - you can then connect enter the password and your connected, from there (VIRUS SCANS, BACKUP USER DATA, REMIAGE the PC) My favorite is reimaging the PC, backup the users data to a network share (you have to RUN NET USE from command to map using windows to browse or \\ to drive doesn't work for some reason) and apply a WIM image, reboot the PC and reconnect once your done. All done remotely without a on site visit. _____________________________________________________________________________________________________ SECOND OPTION FOR PXE BOOT: We can make this a RDS client, you can set the PXE OS to load a RDS screen, the user would then run RDS to connect to TS server. In this case you would no longer need HDD in computers, if you have a WDS server (Windows Deployment Server) you have set all computers to boot to network. NO MORE HDD failures. Everyone working from Remote Desktop you would be preventing local infections on computers. This makes managing your network that much simpler.  read more of my blog... The idea behind this was to run MS SAFETY SCANNER on a remote computer that is reported as infected (either from a user or AV) Unfortunately the AV they use doesn't always stop the infections. In most cases its just a profile infection and can be cured with a Scan. I wanted to figure out a way to run Microsoft Online Safety Scanner and run it against the machine I choose on my network. I located a direct link to download MS Safety Scanner and created a Bat file along with PSEXEC and WGET to download it, copy to the PC on the network and run it. _________________________________________________________________________________________________________________________ Always run unknown programs on a test machine before using on live PC's. Test this on a stand along PC or private test network. For stand alone PC you can type "localhost" to test the local pc if you want. _________________________________________________________________________________________________________________________ Program Details: The program extract to %temp% so you can look at the contents there if you want. There will be four files PSEXEC.exe +WGET.exe + MSERT.cmd + schmsert.bat MSERT.cmd - Does the following, it asks for the IP address (you can put in hostname as well) and then does a folder check "Program Files (x86)" - This determines if its 64bit OS or 32bit. Depending on which one it uses WGET.exe to download the latest msert.exe from Microsoft's website, xcopy it the remote computer along with a "schmsert.bat". It then runs the schmsert.bat to start the scan on the machine (NOTE the end user will not see this running) Once the scan is completed it outputs the results on the cmd screen so you can verify the results (infections found etc) Goal: Corporate AV don't always stop infections, usually the end user clicks on something they shouldn't and they get infected. I just wanted a way to scan a network computer without having to sit in front of it. _________________________________________________________________________________________________________________________ *** I did not pay for code signing ($179 per year) so your AV will complain this is a "Unknown Publisher" *** DOWNLOAD:Microsoft Remote Safety Scanner read more of my blog... Need to open CMD line on a remote machine. Add a local user, enable RDP or Disable Firewall. This simple exe consists of two things PSEXEC+BAT FILE It will prompt you for the IP address and user/password to run it against (Assuming you will user the Administrator or Domain Administrator account) ________________________________________________________________________________________________________________________ **** Word of caution this shows the Password as you type it**** Don't run this front a user. I will create a VB script next time around to hide the password. ________________________________________________________________________________________________________________________ Always run unknown programs on a test machine before using on live PC's. Test this on a stand along PC or private test network. For stand alone PC you can type "localhost" to test the local pc if you want. _________________________________________________________________________________________________________________________ Program Details: The program extract to %temp% so you can look at the contents there if you want. There will be two files PSEXEC.exe + RemoteCMD.cmd Goal: Run quick commands on network computers. Restart, Shutdown, delete files, copy files etc. Anything you can do from command line. _________________________________________________________________________________________________________________________ *** I did not pay for code signing ($179 per year) so your AV will complain this is a "Unknown Publisher" *** Download: Remote Command Line This is my shared drive on SKYDRIVE, its called "RemoteCMD_IPPrompt" Let me know what you think!!!! read more of my blog... |
Categories
All
|
