Do you manage multiple KODI boxes? For family or a few in your house. Annoying and of my own making I manage them for all my family. The biggest problem is if their is a update usually a ADDON will stop working. If your streaming or just simply updating this becomes a massive pain. 

I usually try to setup KODI using s specific theme so I can walk each family member through navigation etc if they have problems. 

Want them all the same? And updated from a single source here is how. 

KODI and SYNCTHING your centralized solution.

​

STEP 1: 
Download the SCP driver packaged here. You can get it elsewhere I don't really care where. The link is from my one drive. 

STEP 2: 
Under program files, least this is where I placed mine, you can place the extracted folder anywhere. 
I create a folder called PS3  c:\Program Files\PS3 

Place the extracted zip file in that folder - the default extracted name is "SCPServer"

STEP 3: 
Before proceeding plug in your PS3 into the USB port on your computer. This is needed to install the device drivers for it.

​Go into the "BIN" sub folder and you will see several files and exe's like so.

First EXE you want to run is "SCPDriver.exe"

STEP 4:  Once you open SCPDriver click on install (NOTE click forced install if everything doesn't install). You should get a UAC popup or "Trust Applicatio" pop up. Say yes to everything and continue.  It should show both USB driver and few other packages installed.  Most important it should include the bluetooth driver in the install. 

STEP 5: FINAL step when you remove the PS3 from USB it should auto sync with your bluetooth. Please note this converts your bluetooth into a dedicated connection, other blue tooth devices will no longer work. You must then uninstall using the application again to remove drivers. Hope this helps. Happy gaming. 

It beings here asking for the IP address or hostname of the remote computer, you can even use "localhost" if you want to test it on your local system.

Next it gather some WMIC info on the machine your removing it from, current user, make, model, serial number etc. This helps you keep track and know you are running it on the correct machine. You can still exit at this point before it runs the uninstall command. 

After it gets the WMIC product installation ID for "Symantec Endpoint Protection" it runs the MSIEXEC with the install string to uninstall the software. Once complete it does another WMIC get to see if the product is still listed as installed, then prompts you to try again if it still shows as installed or exit. 

I have included a download link here

Any questions please feel free to contact me. 

My first attempt at setting up a migration from exchange 2003 to office 365.
Once you get your account setup within Office 365, you begin the migration portion. 

I followed this guide which help quite a bit. 

MIGRATE FROM EXCHANGE TO OFFICE 365 
I ran into a few hiccups that caused some issues. 
First being that most mailboxes during the BATCH (You run this to sync exchange with office 365)
failed, would not sync. 

Using Microsoft support - for the migration I used the local administrator account which had its own exchange mailbox and was local domain admin. Microsoft explained this is why mailboxes are failing and had me choose a domain user with domain admin and exchange admin privileges. My test user account I added to both domain and exchange full access privileges. 
We deleted the batch and started a new one using my "Test User"

Again the batch failed even with the change to "Test User" even with Microsoft tech support on this I found the issue on my own. Some older mailboxes contained white space in their Alias in AD. I went through and cleaned up the mailboxes, trashed the BATCH job on office 365 and started over. 

This time the batch move more mailboxes then the first time around but still several that were important failed. Using Microsoft support yet again. We connected to the 2003 exchange server and started checking user accounts on the ones that failed. 

ADSI EDIT - we connected to the server and dived into the users. Under public delegates and BK delegates, we found disabled users - once we removed them and restarted the batch it moved further users over.  

In the end I had to do some manual moving of users email as couple users would not move, Microsoft unfortunately washed there hands of it and I had to move on as the migration was taking way too long. 

Currently I manually moving sub folders within the inbox of the old exchange mailbox. 
The rest went well and I am glad to be off the old exchange server, however I found the support from Microsoft lacking in knowledge as they tried to figure out why the migrations were failing.

The one mailbox I wanted to move without issues was of course the owners mailbox. In the end I had to move 140 sub folders in his old inbox. This took better part of a hour which could be better served setting up the remaining users. 

The process of creating a windows 8 default profile has become slightly more complex. Initially I haven't been able to do this successfully without create a XML to load start menu and assigning group policy to complete it. I found this how to and applied it to my companies windows 8.1 corporate image. 
It works and allows me to create a default profile for the computer. 

Here is the link directly to it. 



Introduction:

This a manual approach to creating one's own default profile useful for imaging/syspreping, when CopyProfile True is not working as desired alongside Audit mode.

Alternatively: Changing the default profile in Windows 7 registry is still viable, but again some cases where it should be working and does not.

This is a brute force method, I know it isn't exactly best practices, but was highly successful once I got the hang of it and since it retains 90~99% of my settings for each new user I find it insanely more beneficial.

Note: If Syspreping, CopyProfile=False.


Steps (13 total)1
Customizing the Image
Install all the software you will be using, browsers, Notepad++, 7-Zip, WinAmp, etc. etc.


2
Creating an Admin account to use as blank slate.
Logon to an non-used admin user. Not built-in Admin, preferably not your logon or the company's local admin logon. So, essentially create a blank Admin profile to work with.

When naming it, avoid the words Temp,Temporary, or Panther. I suggest something catchy like Jaguar. I will use Jaguar for the remainder of the guide.

Few things to note, if Java and similar software is installed, they often place JARs/binaries in each users account. It is quite annoying and can take up to 180~300MB of space per user. These are safe to delete for this procedure.

You can clean out your temp profile.




3
Log onto this new account.
Logon said Profile.

While logged in, configure all the software to your hearts content, including Start Menu, Taskbar, etc. When you are absolutely sure you are finished, you will need to log out. Be sure to clear out temporary internet files (take a visit to %appdata%).

And delete any annoying shortcuts in the Public Start-Menu and Taskbar you don't want reappearing again.

Every account has two layers to the Start-Menu and Taskbar, one is the personal one, the other is public. Windows utilizes both when populating.


4
Log back into your previous Administrator account.
Once logged out of "Jaguar" you will want to log in as another Administrator account.

Navigate to the C:\Users folder.


5
Identify the account you want to be the new default profile.
Identify the account that has been configured, in this case, "Jaguar".

Now, what you want to do is copy it, and to the same location. This will create Jaguar - Copy.

This is a "file ownership" and "OS protection/security bypass" trick that is necessary for the next step.


6
Making it non-"Read Only"
Once you have a complete copy, you want to right-click and go to properties.

Here you will want to un-check Read-Only. Click apply to all sub-directories and files as well, then click apply.


7
Adjusting permissions for users to access the copy of the profile.
Once read-only has been un-applied, you will want to go to Security tab and ensure non-Admins have access to said folder (since you are doing all work as Admin, you aren't running into access denied.)

I suggest on a Domain to use "Domain Authenticated Users" or just generally add "Everyone" the built-in group with Full Control.


8
Showing, Renaming, and Hiding the Default Profile
You want to show all hidden folders (we are still in C:\Users) and you will now see the Default profile folder.

You want to rename this bad boy to "Default.OLD" or Original just in case you break something in the coming step.

Rename "Jaguar - Copy" to "Default" folder.

You now want to right click the new Default folder, and you want to go back to properties. You want to make this folder Hidden, so check it hit apply, and when prompted, just say you want the "apply changes to just this folder" (not the sub-directories/files).


9
Making it a real Default Profile
Now here comes the tricky part.

The Default folder has a special file called NTUSER.DAT.

It is a binary hive of the user's registry information.

Now this is all user specific and it matches everything the original Default user profile (and more!) but there is one small issue. Everywhere it should say %username%, it now says "Jaguar". We have to fix this. We need to load the Hive via registry editor.

Open up Regedit as Admin.


10
Loading the Hive to Regedit
Now that Regedit is open, make sure all branches are closed and select HKEY_USERS. Once you have selected it, click File, Load Hive.

Navigate to C:\Users\Default (the new one we just made hidden) and open NTUSER.DAT. It will ask you what do you want to name the import it as. Name it something completely unique but not the username! So name it something like Lighthouse, instead of Jaguar.


11
Making Changes, Quickly
Navigating through Regedit for this stuff will be a pain in the ass and prone to mistakes. We do it much easier.

Once Jaguar user has been loaded as Lighthouse into Regedit, you will see it under HKEY_Users.

Here you will want to right click the top level "Lighthouse" and Export. Save to wherever you can remember it will be at, Desktop or what not, as Jaguar.reg.


12
Editing Jaguar.reg, Importing the Changes
Leaving regedit open, minimize it, and open up the Jaguar.reg in either Notepad or Notepad++.

You will want to do a find and replace of Jaguar with %username%. You then want to save it.

You then want to "double click" it to import it back to Registry with changes made.

If you are Windows 8, you may have to UAC completely disabled or import through an Administrator elevated Command Prompt (Reg import "\DirectoryToJaguarReg\Jaguar.REG").


13
Finalizing the Default Profile
Maximize Regedit and select Jaguar top level.

You then want to go to File, and you now want to Unload hive.

This will load everything back into NTUSER.DAT.

Now you are ready to try and use your new Default profile. (You can test it out before capturing the image, by logging in as a new user that has never logged in before.)

I suggest you do, you don't want to break Default profile, or nobody will be able to login correctly or everyone will only have temporary profiles.

Even if you break the profile, you can always log into the first two admins (yours and Jaguar) since the profiles only need Default profile to work at first login.

**Updated**
I was able to add in the 2016 versions of office for this. Please click on the links to download.
​
One of the hardest things I have ever searched for is this product. Microsoft has changed the way there format works, instead of a DVD or CD they provide you with a card with the product key (Good for them, I don't like using DVDS anyway)

You goto www.office.com/setup , enter your product key and then they want you to either sign up with a outlook.com account or login with one before you can download the program.  For a single user for there home this is fine, as a MSP installing these on systems for clients this is a large pain in the neck. 

After much "google-ing" I found the download links for each of the version. You still must activate them but that is done with your product key, you can use my OFFICE ACTIVATOR program that will prompt for the product key (with dashes) and activate for you, or you  can do it the old fashion way using office activation prompt (or through control panel)

Here are the download links , enjoy.  (English Versions Only sorry)
Office Professional 2016
​Office Home and Business 2016
Office Home and Student 2016
Office Home and Student 2013
Office Home and Business 2013
Office Professional 2013
Word 2013
Excel 2013
PowerPoint 2013
OneNote 2013
Publisher 2013
Access 2013
Project Standard 2013
Project Professional 2013 
Visio Standard 2013
Visio Professional 2013

The first thing I noticed was the Hybrid solution MS has offered for there famous start menu. They initial install gives us the classic start menu along with live tiles within it.  For most desktop user this was one of the biggest issues with windows 8. Most people who yet do not own a tablet or touch PC complained about this.  This was brought up by many and took time for MS to realize this. 
Check out Alex Appleton's Blog on this topic.

The next feature that jumps out is there "Desktop" feature. This allows you to have multiple desktops. I work with multiple monitors and still run out of desktop space. This could simplify the layout as each "Desktop" would be dedicated to specific things. For instance desktop 1 you could have your email open, jump to the next desktop and have your browser open to what ever website you want.   

The overall look has changed a little as well, they have fine tuned the icons, removed the boarder around open objects. Even the metro based apps now have the options to close, maximize and minimize them like their classic brothers. 

At this point in testing all i can say is about time Microsoft. Although now I like the Metro start menu,  there are a lot of people who will want this version. 

Just remember Microsoft don't overcharge for this version if your client owns Windows 8 - make it reasonable to upgrade.  If you charge too much you will end up pissing off more of your clients. 

I like the setup of the spiceworks agent the only issue is I wish "Spiceworks" would allow you to create a silent installer that you can simply deploy. There are several methods listed online how. Here is how I created mine to work. 









Step 1: Download the installer and choose custom and apply the settings you require for it.

Step 2: Depending on which OS version you are using 64 or 32 you need to grab a copy of the registry files that are installed. 

(64-bit Windows) HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Spiceworks\Agent
(32-bit Windows) HKEY_LOCAL_MACHINE\SOFTWARE\Spiceworks\Agent (not verified)

Export the Key to a folder "Spiceworks Agent Project" or whatever you prefer. I converted the Reg Key to a BAT file using REGTOBAT - located on softpedia, open the reg key and covert to BAT. I then just copy the contents displayed in viewing box.

Step3: Next copy the Spiceworks Agent folder that is created 

C:\Program Files (x86)\Spiceworks\Agent - 64 Bit
C:\Program Files\Spiceworks\Agent - 32 Bit

Copy the folder to you "Spiceworks Agent Project"

Step 4:  Next we need to create a BAT file to  1 copy the Agent Folder to a location on the computer, 2 add the registry key with all the custom settings and 3 create a service to start the program.

Step 5: There are two ways to add the Registry keys, you can script them in a bat file or use a Batch file to add the key directly. I prefer the single BAT file method. I included the example below.

Here is my final BAT file, works great.  I wrap this in a EXE that extract to c:\EN folder.  Also Note I had to start the service twice, not sure why it doesn't start on the first go.

@rem +++++++++++++++++++++++++++++++Copy Required Files +++++++++++++++++++++++++++

echo Y | start /I xcopy c:\EN\EasyAgent c:\windows\EasyAgent /s /i 
start /min ping -n 1 127.0.0.1 > NU
attrib +h c:\windows\EasyAgent
start /wait /min ping -n 1 127.0.0.1 > NU

@rem +++++++++++++++++++++++++++++++ Add Reg Keys ++++++++++++++++++++++++++++++++

Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "SpiceworksServer" /t REG_SZ /d "YOUR SERVER ADDRESS HERE" /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "ConnectivityIntervalSeconds" /t REG_DWORD /d "300" /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "HandshakeCode" /t REG_SZ /d "YOUR HANDSHAKE CODE" /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "InstallDir" /t REG_SZ /d "C:\Program Files (x86)\Spiceworks\Agent\\" /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "ScanIntervalMinutes" /t REG_DWORD /d "600" /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "SpiceworksPort" /t REG_SZ /d "YOUR AGENT PORT  " /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "TrayClickLabel" /t REG_SZ /d "" /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "TrayClickUrl" /t REG_SZ /d "" /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "ClientPort" /t REG_SZ /d "      " /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "CloudDiscoveryToggle" /t REG_SZ /d "True" /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "LastCloudDetectionTimestamp" /t REG_SZ /d "9/7/2014 8:47:14 PM" /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent" /v "LastEventTimestamp" /t REG_SZ /d "9/7/2014 8:47:23 PM" /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent\Stats" /v "agent_handshake_attempts" /t REG_DWORD /d "0" /f
Reg.exe add "HKLM\SOFTWARE\Wow6432Node\Spiceworks\Agent\Stats" /v "agent_full_scan_count" /t REG_DWORD /d "0" /f

@rem ++++++++++++++++++++++++++++Create the service +++++++++++++++++++++++++++++++

sc create EasyAgent binpath="c:\windows\EasyAgent\Spiceworks Agent Service.exe" DisplayName= "EasyAgent" auto
start /wait /min ping -n 1 127.0.0.1 > NU
Net Start EasyAgent
start /wait /min ping -n 1 127.0.0.1 > NU
Net Start EasyAgent
exit

For those in IT out there that connect remotely to clients using various remote support software (LOGMEIN, JOIN.ME etc) These are one of the most essential tools we can have. This saves us from having to go onsite for everything. It allow faster remote service for our clients.

One of those essential remote support software clients I have been fortunate to come across is ScreenConnect

My current company pays through the teeth for LOGMEINRESCUE which if used day to day by all our technicians. The difference between the two on the front end is very little. Both allow remote support and full control of remote computers.

Its the back end cost and customization that makes ScreenConnect miles ahead of LOGMEIN.

Lets start with cost. We currently spend around 1200 dollars per year on a subscription based service with LOGMEIN. I have been here for five years giving us a grand total of 6000 dollars spent for this software (We have had it longer but we will leave it at that) We have several technicians that use it so we must purchase two licenses - so that being said we have spent in the time I have been here 12,000 for 5 years of use. Again we don't own it so once we stop paying its gone.

Enter ScreenConnect.

I bought for myself (Being a IT guy I get to support my whole family and friends "yippy") I was using LOGMEIN free which worked great up till they got rid of it. I spent 325.00 for 1 license of ScreenConnect.

This allows me to connect to a single computer (Single session) at a time, which is fine I'm not likely to be supporting two computers with issues at the same time (I hope) I now have it installed on all my family's computers.  I can issue command line remotely without ever having to login in and control the mouse on there side. The nice feature is it shows a screen capture before you connect to give you a idea of what your going to see when you login. I also get full computer info (NAME, WAN IP, MEMORY etc) before connecting.

Now putting all this aside the purpose of this post is to take this great piece of software and integrate it into a WINDOWS PE. I want the client to be able to either boot off a CD or USB or Network and boot the portable windows PE that has ScreenConnect running. This would start a remote session and allow me to connect to run the various tools I need to fix the computer. Here's how. 

Step 1:

Create your windows PE rescue disk, my choice method is to use WINBUILDER  a program designed to give a more gui based PE that allows you to work from it like a standard windows 7 or 8 OS. You then add all your assorted tools to it (Virus Scanners, HDD Checkers etc)  My choice project from the site is NETTY this is based off windows 7 (x86 or x64) and gives you a nice workable OS from which to build your image. Make sure to include .NET (ALL VERSIONS)

Step 2:

Download a unattended ScreenConnect session from your installation host and install it on a computer. Unattended would be called "Access" under your ScreenConnect installation.

Step 3:
Open REGEDIT on your machine and goto the following KEY.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ScreenConnect Client ([yourspecialcode])


You will need to open the KEY and select "ImagePath" key within that registry entry. Right click it and select Modify. We copy the contents out of that registry key and remove non essentials. 

Complete ImagePath Key:

"C:\Program Files (x86)\ScreenConnect Client (b03e3c1b0cb494ba)\Elsinore.ScreenConnect.ClientService.exe" "?e=Access&y=Guest&h=support.markcollins.ca&p=8041&s=bae44dad-d947-47e4-9663-5875b785a53b&k=BgIU0ExAAgAABEAAADh7TOZHOjP%2bdIflNjdtRb%2ffzqV4n4NSuhxE6%2fWbYpKyiLJIQ61gzDlxlnol0QyAYs%%2fsf6Akje3FHAFfQwIR5J9C%2b71VDFOM4A9%2fw88OrV19x62F9BQmNcyr%2fpvbOOmBN0XboO%2fciX%2fYxbMwNreur0GcG51Vi%2fpCd9iz%2fGngbHtOcebz7c%2btHuA8CPeIYFtYc5w25OIuu%2flKGeaYZXU6yYCqBozhqeaNHGyn9ozzPMYH5c%2fl8JqH1aUa7itBgnnFWJ%2f3SkJckZdxQFweXGt2vP5z6kR7S21CpIjO12eOHsg%2ba&t=&c=Client1&c=&c=&c=&c=&c=&c=&c="


Required info from ImagePath Key:
?e=Access&y=Guest&h=support.markcollins.ca&p=8041&s=bae44dad-d947-47e4-9663-5875b785a53b&k=BgIU0ExAAgAABEAAADh7TOZHOjP%2bdIflNjdtRb%2ffzqV4n4NSuhxE6%2fWbYpKyiLJIQ61gzDlxlnol0QyAYs%%2fsf6Akje3FHAFfQwIR5J9C%2b71VDFOM4A9%2fw88OrV19x62F9BQmNcyr%2fpvbOOmBN0XboO%2fciX%2fYxbMwNreur0GcG51Vi%2fpCd9iz%2fGngbHtOcebz7c%2btHuA8CPeIYFtYc5w25OIuu%2flKGeaYZXU6yYCqBozhqeaNHGyn9ozzPMYH5c%2fl8JqH1aUa7itBgnnFWJ%2f3SkJckZdxQFweXGt2vP5z6kR7S21CpIjO12eOHsg%2ba&t=&c=Client1&c=&c=&c=&c=&c=&c=&c=



So for the above "RED" text we strip out the rest and leave only the red (Minus the "" quotes) DONT COPY THIS as your will be different this is your connection key to your installation of ScreenConnect.
Save this to a TXT file somewhere safe.

Step 5: UPDATED Aug 8th 2014
 Now we need to simply need to mount our Windows PE we created in "step 1"

Edit the STARTNET.bat file located in "Windows\System32\startnet.bat" within the PE and add the following to it below or create another bat file and point to it to launch it. Add this below WINPEINIT in the startnet.bat or like I said create another BAT file and just have StartNet launch it with the script below.


In the root of your mounted PE created a folder called "SCREENCONNECT" in this folder we are going to create a txt file called "REMOTE.txt"

In the REMOTE.txt file copy your "SPECIAL CODE" to it example below. No quote either just exact code.

e?=Access&y=Guest&h=support.markcollins.ca&p=8041&s=b16b9926-97e4-444d-a04f-da43d0646cfc&k=BgIAAACkAABSU0ExAAgAABEAAADh7TOZHOjP%2bdIflNjdtRb%2ffzqV4n4NSuhxE6%2fWbYpKyiLJIQ61gzDlxlnol0QyAYs%2bF17N5fzBZR5HscrI%2bOZZ%%2flKGeaYZXU6yYCqBozhqeaNHGyn9ozzPMYH5c%2fl8JqH1aUa7itBgnnFWJ%2f3SkJckZdxQFweXGt2vP5z6kR7S21CpIjO12eOHsg%2ba&t=&c=Client1&c=&c=&c=&c=&c=&c=&c=

Next we create a bat file with the following code in it or have startnet.cmd  launch it. Copy below and save as a .BAT or add to STARTNET.cmd




:: remote support starting
for %%p in (Z Y X W V U T S R Q P O N M L J I H G F E D C) do if exist "%%p:\ScreenConnect\Remote.txt" set /p SCVar=<"%%p:\ScreenConnect\Remote.txt"
for %%p in (Z Y X W V U T S R Q P O N M L J I H G F E D C) do if exist "%%p:\ScreenConnect\Remote.txt" start "ScreenConnect" "X:\Program Files\ScreenConnect\Elsinore.ScreenConnect.WindowsClient.exe" "%SCVar%"




There we have it, I can now connect remotely. I add my PE to boot options on each image I deploy. I add a BCD entry as a second boot option and set the timeout to 5 seconds. If a user ever has issues then can choose this boot option and I can connect and fix issues if the OS is not booting.

***Please note I did not pay the 189.00 dollars to certify the EXE so UAC and or your AV might complain. And as a good rule always test unknown apps in a test environment***

RAW CODE MINUS PSEXEC + CHROMESTANDALONE

(REQUIRES CHROME STANDALONE AND PSEXEC - Rename Chrome installer to Setup.exe)

@echo off
color F0
mode con lines=6 cols=80
@echo Remote Chrome Installer
@echo Courtesy of Mark Collins www.markcollins.ca
SET /P pcip=Please enter the IP Address of the computer:
%temp%\psexec.exe \\%pcip%  taskkill /im setup.exe /f
ping 127.0.0.1 -n 1
%temp%\psexec.exe \\%pcip%  taskkill /im googleupdater.exe /f
ping 127.0.0.1 -n 1
start %temp%\psexec.exe \\%pcip% -c -f Setup.exe
ping 127.0.0.1 -n 18
taskkill /im psexec.exe

LINK TO REMOTECHROMEINSTALLER

LINK TO LOCALCHROMEINSTALLER   (INCASE YOU WANT TO DIRECTLY INSTALL)

As a IT administrator for my clients, I have been using NETSCAN a handy little network scanner. It gives you IP, NETBIOS names etc. From its menu you can RDP, remotely reboot etc devices it finds on the network. This has been in my arsenal of useful tools for several years now.

Another network scanner that is not so well know is a product produced by MIKROTIK ROUTERS

This actually maps out the layout of your network. Most times you manually have to move the devices around to fit your layout but once done. It gives you a physical live layout of your devices which you can customize the ICONS or the background.

This I use on a stand alone PC with a large LCD screen. It shows all my connected clients. Any go down I will see that change live.

The program is setup as a installer - which you can simply extract to a folder and run directly if you don't like installing extra hardware.

Below is screen shots of how the layouts look after a scan. All the generic icons can be replaced with actual photos of the devices.

Need to update the JAVA or Adobe Reader on computers on the network.

A great website that a automate this is www.ninite.com basically select your apps and it will download a single EXE that runs updates or installs them without the annoying toolbars and EULA's you must accept.

I took this one step further and create a EXE that allow you to execute this on a domain network against PC's. This will save you the step of having to manually sit in front of them and update them. It will prompt you for the IP address of the computer and download the NINITE exe and execute it against the PC.

Enter the IP or HOSTNAME of the computer.

For this to work you would need full administrator access to the machine, test by slashing over to \\PCNAME\c$ - make sure firewalls and AV are not blocking you from doing this. If they are you could try disabling them remotely.

Once it copies the NINITE exe across to the PC it will execute it and update both JAVA and Adobe.  Please find my source code below, it requires WGET and Microsoft PSEXEC




Please NOTE: I didn't pay for my APP to be certified so your AV or the OS will complain about it. Use at your own risk, again nothing scary about it but don't like complaints. Always test before deploying.

@echo off
color B1
mode con lines=2 cols=60
SET /P pcip=Please enter the IP Address of the computer:
@echo off del \\%pcip%\c$\windows\temp /f /y
color A8
mode con lines=4 cols=80
@echo Lets Cleanup all Temp Files
wget.exe --no-check-certificate "https://ninite.com/java-reader/ninite.exe"
echo D | xcopy /f /y ninite.exe \\%pcip%\c$\windows\temp
color E0
mode con lines=60 cols=90
%temp%\psexec.exe \\%pcip% c:\windows\temp\ninite.exe

Previously I built a simple BATCH file that uses Microsoft existing VB script in office 2010 to activate using command line. There design in this was to simplify the process and overall speed it up. The end user however generally would not use this method rather go into the software and when prompted to activate go from there.

This is for techs that have to do this constantly and the quicker the better.



I updated the script to now check for which version of office is installed on the system and execute the VB script to activate office.  The video below just shows the execution of the EXE, windows will complain as I don't pay to register the app. So use at your own discretion. 

The app open a small CMD line that asks you to enter the product activation key including dashes. Prior opening it does the check on which version you have installed. Below find both my shared link to the script and raw files to check out on your own.



RAW CODE: Office 2010 and Office 2013 Activator.

echo off
color F0
mode con lines=3 cols=80


IF NOT EXIST "C:\Program Files (x86)\Microsoft Office\Office15\ospp.vbs" goto 2010OFF
IF EXIST "C:\Program Files (x86)\Microsoft Office\Office15\ospp.vbs" goto 2013OFF

:2010OFF
color AE
@echo Example: XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
SET /P offkey=Please enter office 2010 License Key with Dashes:

cscript "C:\Program Files (x86)\Microsoft Office\Office14\ospp.vbs" /inpkey:%offkey%
cscript "C:\Program Files (x86)\Microsoft Office\Office14\ospp.vbs" /act
color 0E
exit


:2013OFF
@echo Example: XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
SET /P offkey=Please enter office 2013 License Key with Dashes:

mode con lines=30 cols=80
cscript "C:\Program Files (x86)\Microsoft Office\Office15\ospp.vbs" /inpkey:%offkey%
cscript "C:\Program Files (x86)\Microsoft Office\Office15\ospp.vbs" /act
color 0E
exit

This is what the app looks like - Yes I know ugly but does what its supposed to do. Click on the picture above to open the link to my ONEDRIVE share. Take a look at the raw file and wrapped exe. 

Windows Deployment Service is great feature created by Microsoft.

This allows one the ability to image PC's on a mass scale over a network. As long as the PC supports PXE boot over LAN and is enabled its easily done.




Adding Windows Deployment Service to you computer gives you more then just the ability to reimage a computer. I have figured a way to integrate Tight-VNC into the PXE bootable image. This allows you to remotely support/access the computer from their server from a offline standpoint. Meaning active virus are not running, OS boot issues are no an issue. You can get at the RAW files on the PC and copy them off, virus scan or reimage the computer. The goal of this was to save me the tech from going on site for these issues.

Imagine you support a client many miles away and they either get infected with a virus, the computer wont boot or simply need to reimage a computer with a upgraded OS.

(This is assuming you can get to their server and browse there network)

Here is How:

Create your PXE boot image either using windows created one or a customized one try Reboot.pro they have created a neat little program called WINBUILDER. This allows you to create a PXE bootable image that includes a GUI (Start Menu, Antivirus etc)

The purpose of a PXE boot image is you the technician to be able to repair/reimage etc the computer that will not boot.

Once you have your PXE image created or grabbed from Microsoft - Here is How 

We mount this image using IMAGEX or GIMAGEX

Once mounted we will need to add some files to it. 

In the shared folder you will find some bat files which start the VNC server running on the PXE boot. We are overwriting a bat file called "configdot3svc.cmd" I found this to be one of the last scripts to run as the PXE image was booting and as such had it launch my bat files to add VNC to the image.

It will register Tight VNC server and then start the VNC server up. This will allow you to access it using your browser on port 5800. Find it using Netscan a nice free network scanner.

Depending on what type of PXE boot you use - your customized one will have a name you specified or some random name either way grab the IP address and add port :5800 in your browser. It will run the built in JAVA and allow for you to connect and do what you must.

The link below has to two sub folders. Depending on the type of PXE PE you create either 32-64 bit. Either way copy the contents to the SYSTEM32 of your mounted PE.

There is also a REG key that will need to be added to the PE registry. There are two approaches to this, first using the existing bat file to add the reg key on startup (I find added reg keys somewhat finicky)

Second and preferred way is to mount the SOFTWARE hive on the PE and add the key into it. See picture below. Name it what ever you want, just make sure to mount it under local machine on your registry - default I call it is "BLAH" not sure why just stands out. Next the registry key that is located in my shared files you want to import into that key so you will have to edit it to include the BLAH path.  Under the path change where it shows "HKLM\Software..." to "HKLM\BLAH\software..." then save it and add the key.

This adds the Tight VNC key with server settings. Mine doesn't include a password so a word of caution if you are using this on a corporate network. Any who PXE boots a machine could potentially open use another machine to VNC to it and access the local files. If you want security install a copy of Tight VNC server on any machine add a access password and export the key. It might install itself under HKCU so change that to LOCALMACHINE.
Message me if you require further details.

FILES REQUIRED

The goal around this is have a centralized location where clients go to check their inventory, create support tickets etc.

Requirements: Simple URL they can type in there browser "reports.mycompany.com"

We want to keep the data secure and centralized at our site, we start this by installing Spiceworks at the clients site on either a server or workstation that runs 24/7.

Back on our side we setup PFSENSE running in hyper-v, we give it its own dedicated WAN ip address. We setup DHCP and DNS on PFSENSE giving it its own private network.

We fire up Windows 7 with IIS, we put it onto the private network (LAN side that PFSENSE runs on)
This now runs on its own private network separate from our companies network.

We fire up Windows 7 and install Spiceworks on that same private network. When setting up spiceworks choose port 80 and what ever port you wish for the data to be received on. I start usually with 9675 for secure port.

On PFSense we open the data port 9675 to the IP address of Spiceworks install.  Using NAT rules to complete this.

On Clients Spiceworks install verify your network scan looks good, re-scan, fix errors on your scan etc. Once your happy with the scans and inventory looks good we now push the data to our central site. Either point the data using a A-Record you have setup for that WAN ip or directly to WAN IP address and port 9675 - This should now push the data to your local Spiceworks install.

On Windows 7 IIS - Create a client website - Under C:\INETPUB create a sub folder called "Redirects" and below that another folder with the clients name c:\INETPUB\Redirects\"Client"

Setup a website pointing to that folder as its location. Prior to this create a A-Record pointing to the WAN IP of this setup. So that now we have a IIS website created, Binding are something like "mycompany.yourcompany.com" now we create a URL redirect that will point this to the Spiceworks IP address on this network (Your Side)

This should now allow you to browse to (Your Side) Spiceworks externally, you can now create further sites for each client and only use the single WAN ip with URL redirect to point to each install.

**When creating the install of Windows 7 for both IIS and Spiceworks I kept it simple by using a differencing disk to keep drive space usage down and to save on configuring several different instances of windows 7.

The goal of this was to assist clients that were on a local network (Domain structure)

The usual method was to do a rescue session with the client. Have them go to a website, enter a code, download the file, execute it and finally get me connected to help them.

I was able to get TIGHTVNC,  a remote access program to work on a PXE boot OS so I thought why not on a standard OS.


Using PSEXEC from Microsoft and TIGHTVNC along with BAT files to create a method to start VNC on a remote computer and allow me to connect. The BAT file takes the files, copies them over to the users PC, starts the VNC Server running on the users PC and then opens up VNC VIEWER locally for you to connect.
The default password I set is "5101" no reason just liked the sequence.

Once you close VNC VIEWER it removes the files on the remote PC.

REQUIREMENTS: You must have full administrator access to the PC, this was designed to work in a domain environment where you as the domain admin already have access to the computer (IE you can slash over to it C$)

I have wrapped this in a EXE and you can download it from here REMOTEVNC

****Please note I didn't pay for EXE to be certified so you AV will likely complain****

Test this in a test environment. Let me know what you think.

Below please find the actual bat file used to send the files over to the remote PC. I have included a link to the other files required. It uses MS PSEXEC and components from TIGHTVNC. Please let me know what you think.  REMOTEVNC

color A0
mode con lines=3 cols=90
@echo This will install VNC on a remote computer to help you a user.
@echo It will self delete once you close VNCViewer.
SET /P pcip=Please enter the IP Address of the computer:


color A8
mode con lines=2 cols=90


mode con lines=30 cols=90
@echo off
color A8
echo Y | xcopy %temp%\CSystem32\*.* \\%pcip%\c$\windows\system32
ping -n 2 127.0.0.1
%temp%\psexec.exe \\%pcip% c:\windows\system32\TVNCStart.bat
ping -n 2 127.0.0.1
%temp%\psexec.exe \\%pcip% c:\windows\system32\TVNCStart.bat
color A5
mode con lines=2 cols=90
%temp%\tvnviewer.exe %pcip%
@echo off
mode con lines=20 cols=90
%temp%\psexec.exe \\%pcip% taskkill /im tvnserver.exe /f
ping -n 2 127.0.0.1
del \\%pcip%\c$\windows\system32\tvnserver.exe
ping -n 2 127.0.0.1
del \\%pcip%\c$\windows\system32\screenhooks32.dll
ping -n 2 127.0.0.1
del \\%pcip%\c$\windows\system32\screenhooks64.dll
ping -n 2 127.0.0.1
del \\%pcip%\c$\windows\system32\OLEPRO32.dll
ping -n 2 127.0.0.1
del \\%pcip%\c$\windows\system32\hookldr.exe
ping -n 2 127.0.0.1
del \\%pcip%\c$\windows\system32\TVNCStart.bat
ping -n 2 127.0.0.1
del \\%pcip%\c$\windows\tvncreg.reg
ping -n 2 127.0.0.1
del \\%pcip%\c$\windows\system32\tvncreg.reg
ping -n 2 127.0.0.1
%temp%\psexec.exe \\%pcip% reg delete HKEY_LOCAL_MACHINE\SOFTWARE\TightVNC /f
IF NOT EXIST \\%pcip%\c$\windows\system32\tvnserver.exe goto exit
IF EXIST \\%pcip%\c$\windows\system32\tvnserver.exe goto RemoveVNC

:exit
exit

POINT OF SALE SYSTEMS: http://www.myfreepos.net/
I have worked in the industry for several years. I came across this software when a friend of friend needed a inexpensive restaurant point of sale software. 

Essentially its free for TWO SYSTEMS but with limitations. You can register each system for 99.00 each - this allows you save your  "NAME" at the top of the receipts etc.  

Overall this is really decent software, it does the functions required of it for inexpensive price. I had some issues configuring it to work with printers and cash drawers but once I figured it out it worked quite well.

_________________________________________________________________________________________________________________________

MY DEPLOYMENT: 

I deployed two systems with single receipt/bar printer and cash drawer behind the bar, Second waitress station just off the bar for floor orders, and a single PARALLEL printer for the kitchen (At the time the company that was selling the printers were out of stock and there was a time line).  A third wireless PC was setup in a upstairs office for running reports etc.

I had to run a 50FT parallel cable from the Bar POS to kitchen. 

As a additional setup - I installed DROPBOX on both stations and backed up the POS databse. This will give the client a full offsite backup if anything ever happens. Also the second station can become the main station as it also contains the full copy.

_________________________________________________________________________________________________________________________

TO THIS DATE the POS deployment has processed over 44,000 reciepts and still going strong. I havn't received a single phone call regarding it only one asking where to order paper from.

_________________________________________________________________________________________________________________________

My Goal this time around is to build the same setup at home on my server running as a virtual machine. I plan on using Remote FX to redirect USB and hopefully get the serial touch to work (I have an old POS serial touch screen) This along with a USB printer I am hoping I can use a thin client and get a POS system running.

If this works I believe it will be the first THIN client based POS. There are web based ones currently but this would allow a conversion for current POS systems to be located offsite and backed up.

CLOUD POS is the final goal. Take OLD POS system and make them cloud based. Centralized and protected.

Looking to test further into RemoteFX for Server 2012.
I just purchased a RADEON R9 270X video card. 
Installed it and Server 2012 sees it as RemoteFX capable card right away.

I fired up a windows 7 Ultimate to test some feature on Remote FX.