Wednesday, May 29, 2013

Package Java jre1.7.0_21 for deployment using Configuration Manager 2012

First thing you need to so is download the “Full Installer” from Oracles website http://www.oracle.com/technetwork/java/javase/downloads/jre7-downloads-1880261.html. You should not download the installer from java.com because this is the bootstrap installer that goes out to the internet and downloads the install binary.
In my case, I downloaded the jre-7u21-windows-i586.exe setup file. You can install Java from this installer using the /s switch, but I always prefer grabbing the MSI and Data.cab file from the installer. This reduces the install time on the client since the MSI installer doesn’t need to be extracted.
To grab the MSI and Data.cab file, launch  jre-7u21-windows-i586.exe (Whatever version you downloaded) installer.
JavaInstallStep1
When the installer is launched, it extracts the MSI installer and the Data1.cab into you AppData\LocalLow folder see screen shot below
JavaInstallStep2
Go ahead and copy this two files to your package source share and cancel the Java installer
In Configuration Manager you can go ahead the create an Application choose the Windows Installer Type. Browse to the shared folder for the Java Runtime installer files to choose the MSI installer file. Configuration Manager will automatically detect the meta data from the installer file as seen below
JavaInstallStep3
In the general information will will want to change the Installation Program command the default will look something like this
JavaInstallStep4
I append the following after the /q      REBOOT=ReallySuppress AUTOUPDATECHECK=0 EULA=0 JAVAUPDATE=0 IEXPLORER=1 MOZILLA=1 /L*v %temp%\JRE7Update21.log
These parameters will disable updates, suppress reboots, accept EULA, register Java Runtime in browsers, and create a verbose log in the %temp% folder.
JavaInstallStep5
Once your application is created you can go ahead and distribute the content to DP’s and deploy it however you like! I just created a available deployment to a device collection
JavaInstallStep7
Once the install was complete, I went ahead and checked the Java applet in control panel and the update tab was disabled as desired
JavaInstallStep8
Hope this helps! – Justin

Friday, May 24, 2013

How to manually activate Windows 8 Enterprise using a MAK key

1.

Open Start.

Open the new Start menu to begin.
2.

Search for "Command Prompt" or "CMD".

3.

Right-click "Command Prompt" and choose "Run As Administrator".

F64f4aed7a94a89f17c06b515581d92f8c628da7675d2affd44fdd706311ccd7_2012-10-23_10h40_30_big
4.

Execute the command "SLUI.EXE 3" to launch the SLUI application.

SLUI.EXE 3
A1f09a01947a638ea2a33e78a9da9f97054596ad82e21eb756d48e61f460b744_2012-10-23_11h29_55_big
5.

Type the MAK product key in the text box then click "Activate".

C27800039467499e9df262b67e48521a694c1e5e99316365d3952b850f64b420_2012-10-23_11h14_18_big
6.

Verify that Windows is now activated by opening the System applet.

Windows should now be activated. You can verify activation by opening the System applet.
A0d9130d877e06c062b9d9f5f1fa75ab3ea19e39674b4fb4a1f1c0690e6a0d48_2012-10-23_10h44_57_big

Conclusion

There are two ways to activate Windows 8 Enterprise using a MAK product key. The first is from the command prompt using the SLMGR.VBS script built into Windows, or the Service Licensing User Interface application (SLUI.EXE). This article describes how to use the SLUI.EXE application to perform activation instead of the SLMGR.VBS script.
What is a MAK key? MAK stands for Multiple Activation Key and is one of two ways that Enterprise editions of Windows can be activated. MAK keys are available on the Microsoft Volume Licensing Service Center website for your organization provided that you are licensed to obtain such keys. The other way activation works is via a Key Management Server, or KMS server. A KMS server is an on-premise server that handles activating Windows on behalf of Microsoft. A computer must be re-activated within 30 days if you are using KMS activation, but is permanently activated when using a MAK key. Windows 8 Enterprise is designed so that it searches for a KMS server to activate the operating system. When a KMS server is unavailable, or if the computer has not reactivated against a KMS server within 30 days, a MAK key must be used to permanently activate Windows against Microsoft's licensing servers.

Friday, May 17, 2013

Running NT Backup under Windows 7


Windows 7 (and Server 2008 R2) have great new backup tools.  These improvements were sorely needed, though: the widely-used, well-known NT Backup was getting pretty long in the tooth. Unfortunately, “in with the new” always seems to imply “out with the old”, and if “the old”, in your scenario, happens to be the format in which all your precious backups are saved, “the new” becomes pretty useless pretty quick.  That’s right: NT Backup files (*.bkf files) are officially obsolete and cannot be opened with Windows 7.
What’s worse is that the Extensible Storage Manager – one of the Windows services NT Backup is built on – is no longer included with Windows 7, so it doesn’t seem too likely that simply copying ntbackup.exe from an XP machine would fix anything.
But it does!
That’s right: running ntbackup.exe under Windows 7 is entirely possible, easy to do, and generally works well – although tape drives and other odd storage devices won’t be supported.  If you have the .bkf files, though, you’re in luck.  Just find these files from the system32 folder on any Windows XP machine (or Virtual Windows XP, if you have it installed):
  • ntbackup.exe
  • ntmsapi.dll
  • vssapi.dll
Copy them on to the Windows 7 machine and then run ntbackup.exe.  You’ll get an error:
image
Just ignore it.  Now run NT Backup as usual.  Since .BKF files won’t be registered with this application, you’ll have to point NT Backup to the .BKF files yourself.  Right-click the Files tree in recovery mode and click Catalog File.  Select your backup file, and click okay.  You’ll then be able to catalog and restore your files as needed.
For the most part, NT Backup works just fine under Windows 7.  It might not be ideal to continue using NT Backup as your daily backup solution, but it’s good to know those .bkf files you have lying around are still worth something, after all.

Tuesday, May 7, 2013

Windows Server 2008 R2 on VM: Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item


Newly built Windows Server 2008 R2 server on VM had strange issues. I logged in as account that’s part of domain admins. I supposed to have local administrative privileges. But when try to open any administrative tools (like services, event log), I get this error message:
Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item
It was driving me crazy. It turn out to be I can’t logon as local administrator either.
After half day of itching my mind, the following two things resolved the my issue.
  1. Turned off Internet Explorer Enhanced Security setting for Administrators and Users
  2. Turned off User Account Control (in Safe Mode)

How To Turn Off Internet Explorer Enhanced Security Configuration


1.  Open the Server Manager Tool. Configure IE ESC is located on the right hand side of the interface in the section heading Security Information.
esc2
2. Select the link Configure IE Esc and the configuration window will open. 
esc3
At this point you can choose whether to turn off IE ESC for Administrators or for Users or for both.  I am going to turn it off for administrators since my account is an administrative account. 
3.  Open Internet Explorer and notice the glaring Warnings that IE ESC has been disabled.  I find it funny that we list exactly how to turn IE ESC back on but on the initial page we never told you how to turn it off. 
esc4
4.  If you would like you can change the Local Intranet Zone settings or you can simply request not to have the message displayed in the future.  And then you can visit Bing.com
esc6
5.  One last suggestion. Change your homepage to Bing.com so that next time you open your Internet Explorer browser you don’t have to see the IE ESC message again.  Unfortunately unless you change it the message will be the default home page. 
And there you have it.  A Windows Server 2008 R2 machine that can surf the internet free of IE ESC. 

Disable User Account Control (UAC) the Easy Way on Win 7 or Windows 2008 R2



I’ve previously written about a way to enable or disable UAC from the command line. This is an easier method that you can use to do the same thing from the GUI interface in either Windows 7 or Vista. To recap my earlier article, UAC is ANNOYING.
Note: Disabling UAC will lead to a less secure system, so be warned.
Disable UAC on Windows Vista
Open up Control Panel, and type in “UAC” into the search box. You’ll see a link for “Turn User Account Control (UAC) on or off”:
uac1.png
On the next screen you should uncheck the box for “Use User Account Control (UAC)”, and then click on the OK button.
You’ll need to reboot your computer before the changes take effect, but you should be all done with annoying prompts.
Disable UAC on Windows 7
Windows 7 makes it much easier to deal with UAC settings, and in fact you don’t have to completely disable UAC if you don’t want to. Just type UAC into the start menu or Control Panel search box.
You can simply drag the slider up or down, depending on how often you want to be alerted.

If you drag it all the way down to the bottom, you’ll have disabled it entirely.

Disable User or Computer Settings in Local Group Policy


Applies To: Windows 7, Windows 8, Windows Server 2008 R2, Windows Server 2012
Occasionally you may want to disable policy settings rather than delete the entire Local Group Policy.

To disable user or computer policy settings in a Local Group Policy object

  1. Open Microsoft Management Console.
  2. Click File and then click Add/Remove Snap-in .
  3. In the Add/Remove Snap-in dialog box, in the Available Snap-ins list box, click Group Policy Object Editor , and then click Add .
  4. In the Select Group Policy Object dialog box, click Browse .
  5. To specify Local Computer Policy, click OK and then click Finish . Proceed to Step 7.
  6. To specify Local Computer Policy for users or groups, click the Users tab, and select from the following Local Group Policy objects:
    • Administrators : Predefined Local Group Policy that applies to users included in the Administrators group.
    • Non-Administrators : Predefined Local Group Policy that applies to users not included in the Administrators group.
    • User-Specific : Local Group Policy objects associated with a specific local user account.
  7. Right-click the name of the Local Group Policy object, and then click Properties .
  8. Click Disable Computer Configuration settings or Disable User Configuration settings .
  9. Click OK , and then close Microsoft Management Console.

Additional considerations

  • Local Computer Policy allows you to disable both computer and user configurations. Administrators, Non-Administrators, and User-Specific Local Group Policies allow you to disable only the user configuration.
  • Local Group Policy Editor and the Resultant Set of Policy snap-in are available in Windows Server 2008 R2 and Windows 7 Professional, Windows 7 Ultimate, and Windows 7 Enterprise. For more information, seehttp://go.microsoft.com/fwlink/?LinkId=139815.