<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Przemysław Łukawski&#039;s blog &#187; Windows Server 2003</title>
	<atom:link href="http://p-lider.lideve.eu/wordpress/?cat=4&#038;feed=rss2" rel="self" type="application/rss+xml" />
	<link>http://p-lider.lideve.eu/wordpress</link>
	<description>Solutions for IT technical problems admins and developers may face with.</description>
	<lastBuildDate>Tue, 23 Sep 2014 18:29:49 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>https://wordpress.org/?v=4.2.22</generator>
	<item>
		<title>Windows registry autorun locations</title>
		<link>http://p-lider.lideve.eu/wordpress/?p=159</link>
		<comments>http://p-lider.lideve.eu/wordpress/?p=159#comments</comments>
		<pubDate>Sun, 17 Nov 2013 12:14:46 +0000</pubDate>
		<dc:creator><![CDATA[p_lider]]></dc:creator>
				<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[Windows 8]]></category>
		<category><![CDATA[Windows Explorer]]></category>
		<category><![CDATA[Windows Server 2003]]></category>
		<category><![CDATA[Windows Server 2008 and 2008 R2]]></category>
		<category><![CDATA[Windows XP]]></category>

		<guid isPermaLink="false">http://p-lider.lideve.eu/wordpress/?p=159</guid>
		<description><![CDATA[Many times people ask me to check their computers for malware or for the reason it is working slow. The first thing I do is to check all programs that automatically start with windows. Normally I remember 4 or 5 locations in registry where to look for such programs and almost all the time I [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>Many times people ask me to check their computers for malware or for the reason it is working slow. The first thing I do is to check all programs that automatically start with windows. Normally I remember 4 or 5 locations in registry where to look for such programs and almost all the time I must search the internet for another ones. That made me to write this post, which will allow me to always have the full (or almost full) list about the registry locations for auto startup purpose in one place.</p>
<p>In the below table I described all of the registry locations I know which programs are using to start automatically with Windows:</p>
<style>
.descrcell {
	border: 1px solid #000000; 
	padding-top: 0cm; padding-bottom: 0.1cm; padding-left: 0.1cm; padding-right: 0.1cm;
}
.tablecell {
	border: 1px solid #000000;
	padding-top: 0cm;
	padding-bottom: 0.1cm;
	padding-left: 0.1cm;
	padding-right: 0cm;
}
</style>
<div style="overflow: auto; height:500px;">
<table width="707" cellspacing="0" cellpadding="4">
<colgroup>
<col width="15" />
<col width="360" />
<col width="200" /></colgroup>
<tbody>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><b>No.</b></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><b>Registry Location (<span style="color: #0047ff;">blue </span>ones are present in 64bit OS only)</b></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><b>Description</b></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">1</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKML\Software\Microsoft\Windows\CurrentVersion\Run\</span></p>
<p lang="en-US"><span style="color: #0047ff;"><span style="">HKML\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\</span></span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">All values<br />
under this key are executed when any user logs in.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">2</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKML\Software\Microsoft\Windows\CurrentVersion\RunOnce\</span></p>
<p lang="en-US"><span style="color: #0047ff;"><span style="">HKML\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\</span></span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">All values<br />
under this key are executed when any user logs in. After execution<br />
the values are being deleted.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">3</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKML\Software\Microsoft\Windows\CurrentVersion\RunServices\</span></p>
<p lang="en-US"><span style="color: #0047ff;"><span style="">HKML\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices\</span></span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">All values<br />
under this key are executed as services when any user logs in.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">4</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKML\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce\</span></p>
<p lang="en-US"><span style="color: #0047ff;"><span style="">HKML\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce\</span></span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">All values<br />
under this key are executed as services when any user logs in.<br />
After execution the values are being deleted.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">5</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKCU\Software\Microsoft\Windows\CurrentVersion\Run\</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">All values<br />
under this key are executed when current user logs in.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">6</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">All values<br />
under this key are executed when current user logs in. After<br />
execution the values are being deleted.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">7</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\Setup\</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">Used only by<br />
setup. A progress bar is being displayed.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">8</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Run\</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">Same as 5 but<br />
applies to LOCAL SYSTEM user only.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">9</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKU\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce\</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">Same as 6 but<br />
applies to LOCAL SYSTEM user only.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">10</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKLM\Software\Microsoft\Windows<br />
NT\CurrentVersion\Winlogon\</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US">„<span style="">Shell”<br />
and „Userinit” values contain file names separated<br />
with comma which are executed when any user logs in.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">11</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKCU\Software\Microsoft\Windows<br />
NT\CurrentVersion\Winlogon\</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US">„<span style="">Shell”<br />
and „Userinit” values contain file names separated<br />
with comma which are executed when current user logs in.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">12</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKLM\Software\Microsoft\Active<br />
Setup\Installed Components\</span></p>
<p lang="en-US"><span style="color: #0047ff;"><span style="">HKLM\Software\Wow6432Node\Microsoft\Active<br />
Setup\Installed Components\</span></span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">All subkeys<br />
are evaluated for execution when any user logs in. The “StubPath”<br />
value under each subkey describes the program being run.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">13</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKCU\Control<br />
Panel\Desktop</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US">„<span style="">SCRNSAVE.EXE”<br />
value is executed when screen saver is being displayed for current<br />
user.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">14</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKLM\System\CurrentControlSet\Control\Session<br />
Manager\</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">The<br />
„BootExecute” value is being executed at boot time.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">15</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKLM\System\Control\WOW\cmdline</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">Value is<br />
executed when 16 bit application is being run for all users.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">16</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKLM\System\Control\WOW\wowcmdline</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">Value is<br />
executed when 16 bit DOS application is being run for all users.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">17</span></p>
</td>
<td sclass="tablecell" width="360">
<p lang="en-US"><span style="">HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\</span></p>
<p lang="en-US"><span style="color: #0047ff;"><span style="">HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\ ShellServiceObjectDelayLoad\</span></span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">Values<br />
contains GUID for COM library which is being run after explorer<br />
finished loading.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">18</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKCU\Software\Microsoft\Windows<br />
NT\CurrentVersion\Windows\</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">The „run”<br />
and „load” values are executed when current user logs<br />
in. </span></p>
<p lang="en-US">
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">19</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKLM\Software\Microsoft\Windows<br />
NT\CurrentVersion\Windows\AppInit_DLLs</span></p>
<p lang="en-US"><span style="color: #0047ff;"><span style="">HKLM\Software\Wow6432Node\Microsoft\Windows<br />
NT\CurrentVersion\Windows\AppInit_DLLs</span></span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">AppInit_DLLs<br />
value contains dll file names separated with comma which are being<br />
loaded into every process being run in the system.</span></p>
<p lang="en-US"><span style=""><strong>IMPORTANT</strong>:<br />
Very dangerous entry used by many malware programs.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">20</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">Same as 5.<br />
Normally values are named here as numbers starting from „1”.</span></p>
</td>
</tr>
<tr valign="TOP">
<td class="tablecell" width="15">
<p lang="en-US"><span style="">21</span></p>
</td>
<td class="tablecell" width="360">
<p lang="en-US"><span style="">HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\</span></p>
</td>
<td class="descrcell" width="226">
<p lang="en-US"><span style="">Same as 1.<br />
Normally values are named here as numbers starting from „1”.</span></p>
</td>
</tr>
</tbody>
</table>
</div>
<p>Some information in the above table has been taken from this forum: <a href="https://forums.hak5.org/index.php?/topic/12112-registry-autostart-locations/">Registry AutoStart Locations</a></p>
]]></content:encoded>
			<wfw:commentRss>http://p-lider.lideve.eu/wordpress/?feed=rss2&#038;p=159</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to prevent reinstalling Windows after changing motherboard, disk controller or processor.</title>
		<link>http://p-lider.lideve.eu/wordpress/?p=131</link>
		<comments>http://p-lider.lideve.eu/wordpress/?p=131#comments</comments>
		<pubDate>Fri, 28 Oct 2011 12:53:56 +0000</pubDate>
		<dc:creator><![CDATA[p_lider]]></dc:creator>
				<category><![CDATA[Windows Server 2003]]></category>
		<category><![CDATA[Windows XP]]></category>

		<guid isPermaLink="false">http://p-lider.rootnode.net/wordpress/?p=131</guid>
		<description><![CDATA[In most cases, when we replace the motherboard with or without a new processor in the computer the previously installed system will not boot &#8211; probably we will end with BSOD. After that most people will go and reinstall the previously installed operating system because they think there is no other option to resurrect the [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>In most cases, when we replace the motherboard with or without a new processor in the computer the previously installed system will not boot &#8211; probably we will end with BSOD. After that most people will go and reinstall the previously installed operating system because they think there is no other option to resurrect the old one. Well, this is not true. Here I want to tell what steps (without getting to the very details) you must do to resurrect previously installed system.</p>
<p>But first let think why the old os cannot successfully boot on the new hardware. The problem lies in two places (or at least in one of them). First is the controller of the system disk &#8211; if the controller in the new motherboard comes from other vendor or is simply incompatible with the old controller (for examle the old one was Intel IDE and the new is VIA IDE), then the os does not have the right device driver for it and as the result it cannot access the hard drive during boot resulting in BSOD. The second lies in the processor architecture (but only if the new processor is from other vendor, for example the old one was from Intel and the new one comes from AMD).</p>
<p>To cope with the problem with device driver for disk controller you have to have a Live CD or bootable USB flash (with BartPE, VistaPE, etc.) in which you can access the system partition and the registry of the installed system. You will have then manually place the right driver for the new disk controller in the &#8220;%systemroot%\system32\drivers&#8221; folder and manually add or edit the registry to make the driver being loaded with the system (the drivers are being represented as services in the following registry key: HKLM\System\CurrentControlSet\Services).</p>
<p>When you will be fine with the driver for the hard disk controller, then you need to ensure that the <strong>IntelPPM</strong> service is disabled  (in the registry the <strong><em>start</em></strong> value must be set to <em><strong>4</strong></em>). Without disabling it, when the new processor comes not from Intel, you will end up with BSOD as well.</p>
<p>This is not a detailed explanation of what to do exactly but it shows the way you shall go if you don&#8217;t want to reinstall the whole operating system after changing your hardware like motherboard, disk controller or processor.</p>
]]></content:encoded>
			<wfw:commentRss>http://p-lider.lideve.eu/wordpress/?feed=rss2&#038;p=131</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Restoring Selfimage&#8217;s partition image to a greater partition</title>
		<link>http://p-lider.lideve.eu/wordpress/?p=115</link>
		<comments>http://p-lider.lideve.eu/wordpress/?p=115#comments</comments>
		<pubDate>Sun, 19 Dec 2010 12:26:06 +0000</pubDate>
		<dc:creator><![CDATA[p_lider]]></dc:creator>
				<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[Windows Server 2003]]></category>
		<category><![CDATA[Windows Server 2008 and 2008 R2]]></category>
		<category><![CDATA[Windows XP]]></category>

		<guid isPermaLink="false">http://p-lider.rootnode.net/wordpress/?p=115</guid>
		<description><![CDATA[Sometimes you must restore you partition images made by programs like SelfImage to a greater partitions &#8211; for example after buying new greater hard drive and setting the partitions&#8217; sizes to greater values as they were in original drive. The problem with such operation is that after restoring for example 20GB partition image to a partition which has [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>Sometimes you must restore you partition images made by programs like SelfImage to a greater partitions &#8211; for example after buying new greater hard drive and setting the partitions&#8217; sizes to greater values as they were in original drive.</p>
<p>The problem with such operation is that after restoring for example 20GB partition image to a partition which has 40GB, you will see, that the file system says that there is only 20GB of total partition&#8217;s space. This is caused due to old partition size information saved inside internal filesystem&#8217;s structures, which was made during the format of the partition on the original drive. Fortunately, the DISKPART utility built in Windows XP and newer systems can fix that problem. To do that follow the following steps after you restore the image to the new, reater partition:</p>
<ol>
<li>Launch the <em>diskpart</em> command line utility.</li>
<li>Execute &#8220;select volume &lt;number&gt;&#8221; command, where &#8220;&lt;number&gt;&#8221; is a number of the volume containing the restored partition image (the list of all volumes and their numbers can be retrieved by executing &#8220;list volume&#8221; command).</li>
<li>Execute &#8220;extend filesystem&#8221; command.</li>
<li>And this is all &#8211; now exit the diskpart utility by executing &#8220;exit&#8221; command and the system will correctly see the real partition size.</li>
</ol>
<p>Thanks to this tip you can use programs like SelfImage not only for making backups but also for moving entire partitions (including system partitions) to other hard drives even, when they size do not match.</p>
]]></content:encoded>
			<wfw:commentRss>http://p-lider.lideve.eu/wordpress/?feed=rss2&#038;p=115</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>HYPER-V and wrong time measurement in virtual servers</title>
		<link>http://p-lider.lideve.eu/wordpress/?p=109</link>
		<comments>http://p-lider.lideve.eu/wordpress/?p=109#comments</comments>
		<pubDate>Fri, 03 Dec 2010 14:42:12 +0000</pubDate>
		<dc:creator><![CDATA[p_lider]]></dc:creator>
				<category><![CDATA[HYPER-V]]></category>
		<category><![CDATA[Windows Server 2003]]></category>
		<category><![CDATA[Windows Server 2008 and 2008 R2]]></category>
		<category><![CDATA[Windows XP]]></category>

		<guid isPermaLink="false">http://p-lider.rootnode.net/wordpress/?p=109</guid>
		<description><![CDATA[If you have a virtual server which has more than 1 virtual processor and is hosted by HYPER-V technology then you can face problems during time measurement. As the result you can see that login to such server can take quite long time and you can see strange errors in EventViewer saying something like “Windows cannot [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>If you have a virtual server which has more than 1 virtual processor and is hosted by HYPER-V technology then you can face problems during time measurement. As the result you can see that login to such server can take quite long time and you can see strange errors in EventViewer saying something like “Windows cannot obtain the domain controller name for your computer network” etc.</p>
<p>The solution to such problems is quite easy – you only have to add <strong><em>/usepmtimer</em></strong> switch to your server’s <em>boot.ini</em> file and restart the virtual server. This will cause a different approach during time measurement and will fix mentioned problems.</p>
]]></content:encoded>
			<wfw:commentRss>http://p-lider.lideve.eu/wordpress/?feed=rss2&#038;p=109</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>VPN connection and internal DNS names</title>
		<link>http://p-lider.lideve.eu/wordpress/?p=106</link>
		<comments>http://p-lider.lideve.eu/wordpress/?p=106#comments</comments>
		<pubDate>Fri, 03 Dec 2010 14:31:57 +0000</pubDate>
		<dc:creator><![CDATA[p_lider]]></dc:creator>
				<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[Windows Server 2003]]></category>
		<category><![CDATA[Windows Server 2008 and 2008 R2]]></category>
		<category><![CDATA[Windows XP]]></category>

		<guid isPermaLink="false">http://p-lider.rootnode.net/wordpress/?p=106</guid>
		<description><![CDATA[Sometimes after you connect to your VPN network by means of any VPN client (CiscoVPN, OpenVPN, etc.) you are not able to access network resources using their names, however you can access them using IP addresses. This is caused by the DnsCache service, which sometimes may cache wrong IP addresses for your internal network names. [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>Sometimes after you connect to your VPN network by means of any VPN client (CiscoVPN, OpenVPN, etc.) you are not able to access network resources using their names, however you can access them using IP addresses. This is caused by the DnsCache service, which sometimes may cache wrong IP addresses for your internal network names.</p>
<p>To fix this irritating behavior clearing the dnscache will not always work. The best way to cope with this problem is to stop DnsCache service – after doing that every time you try access any network resource by its name, the DNS name query will be passed directly to your DNS servers omitting your local cache.</p>
<p>EDIT:</p>
<p>After some time I noticed one more problem with DNS especially when using VPNs established using RRAS. Simply the names were not being resolved by DNS servers provided by RRAS but they were trying to be resolved by DNS servers outside of VPN. This prevented accessing VPN network resources using names. The problem can be fixed by following the following steps:</p>
<ol>
<li>Go to Network Connections in Control Panel.</li>
<li>Go to Menu: Advanced -&gt; Advanced Settings -&gt; Adapters &amp; Bindings</li>
<li>Move DialUp connections to the top of the list.</li>
<li>Save changes by clisking OK button.</li>
<li>In Windows XP &amp; 2k also follow the instructions described under the following link: <a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;311218">http://support.microsoft.com/default.aspx?scid=kb;en-us;311218</a></li>
<li>Reboot your computer.</li>
</ol>
<p>After performing the above operations you should not have any DNS issues when using VPNs on your computer.</p>
]]></content:encoded>
			<wfw:commentRss>http://p-lider.lideve.eu/wordpress/?feed=rss2&#038;p=106</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Double clicking the disks icons opens search window instead of their contents</title>
		<link>http://p-lider.lideve.eu/wordpress/?p=87</link>
		<comments>http://p-lider.lideve.eu/wordpress/?p=87#comments</comments>
		<pubDate>Mon, 06 Sep 2010 08:10:25 +0000</pubDate>
		<dc:creator><![CDATA[p_lider]]></dc:creator>
				<category><![CDATA[Windows Explorer]]></category>
		<category><![CDATA[Windows Server 2003]]></category>
		<category><![CDATA[Windows XP]]></category>

		<guid isPermaLink="false">http://p-lider.rootnode.net/wordpress/?p=87</guid>
		<description><![CDATA[If the default action for disk drives in &#8220;My Computer&#8221; window is &#8220;Search&#8221; instead of &#8220;Open&#8221; and you cannot change this behavior using &#8220;File Types&#8221; tab in &#8220;Folder Options&#8221; then you must set the default value for HKCR\Drive\Shell registry key to none and restart the explorer.exe process. Mentioned problem sometimes arises after some malware installation &#8211; the disinfection [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>If the default action for disk drives in &#8220;My Computer&#8221; window is &#8220;Search&#8221; instead of &#8220;Open&#8221; and you cannot change this behavior using &#8220;File Types&#8221; tab in &#8220;Folder Options&#8221; then you must set the default value for <span style="white-space: nowrap; color: #00aa66; font-size: 12px; font-weight: bold;">HKCR\Drive\Shell</span> registry key to <span style="white-space: nowrap; color: #00aa66; font-size: 12px; font-weight: bold;">none</span> and restart the <em>explorer.exe</em> process.</p>
<p>Mentioned problem sometimes arises after some malware installation &#8211; the disinfection not always repairs that problem automatically.</p>
]]></content:encoded>
			<wfw:commentRss>http://p-lider.lideve.eu/wordpress/?feed=rss2&#038;p=87</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>&#8220;Object Required&#8221; error while changing passwords using OWA</title>
		<link>http://p-lider.lideve.eu/wordpress/?p=79</link>
		<comments>http://p-lider.lideve.eu/wordpress/?p=79#comments</comments>
		<pubDate>Mon, 06 Sep 2010 07:50:20 +0000</pubDate>
		<dc:creator><![CDATA[p_lider]]></dc:creator>
				<category><![CDATA[IIS]]></category>
		<category><![CDATA[MS Exchange]]></category>
		<category><![CDATA[Windows Server 2003]]></category>

		<guid isPermaLink="false">http://p-lider.rootnode.net/wordpress/?p=79</guid>
		<description><![CDATA[After deploying MS Exchange 2003 server in your organization and configuring OWA to let users change their domain passwords you can face a strange issue. When users try to change their passwords, after clicking &#8220;OK&#8221; button they see an error message saying &#8220;Object Required&#8221; and their password are not being changed. This enigmatic error message means, that [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>After deploying MS Exchange 2003 server in your organization and configuring OWA to let users change their domain passwords you can face a strange issue. When users try to change their passwords, after clicking &#8220;OK&#8221; button they see an error message saying &#8220;Object Required&#8221; and their password are not being changed. This enigmatic error message means, that the MS Exchange cannot find a properly registered COM object in the registry. To solve the problem you must manually register the <em>&#8220;iispwchg.dll&#8221;</em> library on the MS Exchange server. The full command to do this is:<br />
<span style="white-space: nowrap; color: #00aa66; font-size: 12px; font-weight: bold;"><br />
regsvr32 %windir%\system32\inetsrv\iisadmpwd\iispwchg.dll<br />
</span></p>
<p>The reason why MS Exchange does not register mentioned library by itself during the installation is unknown for me. However I noticed, that MS Exchange installers are written is such a way, so the administrators can demonstrate their knowledge and skills &lt;ironic&gt; before the MS Exchange product can start fully working.</p>
]]></content:encoded>
			<wfw:commentRss>http://p-lider.lideve.eu/wordpress/?feed=rss2&#038;p=79</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Completely disabling the autorun feature in Windows XP/2003</title>
		<link>http://p-lider.lideve.eu/wordpress/?p=41</link>
		<comments>http://p-lider.lideve.eu/wordpress/?p=41#comments</comments>
		<pubDate>Fri, 27 Aug 2010 19:31:43 +0000</pubDate>
		<dc:creator><![CDATA[p_lider]]></dc:creator>
				<category><![CDATA[Windows Server 2003]]></category>
		<category><![CDATA[Windows XP]]></category>

		<guid isPermaLink="false">http://p-lider.rootnode.net/wordpress/?p=41</guid>
		<description><![CDATA[Nowadays many viruses and malware spread using portable media like pendrives, players or DVDs. This is possible thanks to the autorun feature which is in every Windows operating system (95 or newer). You can find a lot of guides in the internet telling how to disable the autorun in Windows. However I noticed, that in most cases the guides [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>Nowadays many viruses and malware spread using portable media like pendrives, players or DVDs. This is possible thanks to the autorun feature which is in every Windows operating system (95 or newer). You can find a lot of guides in the internet telling how to disable the autorun in Windows. However I noticed, that in most cases the guides are not accurate &#8211; they do disable the autorun yet they don&#8217;t prevent the <em>autorun.inf</em> file from being analyzed by the system. Thanks to that, the system will not execute commands from <em>autorun.inf</em> file by itself but if you double click the removable disk icon, the system will execute the default command from <em>autorun.inf</em> file and thus install the malware.</p>
<p>Fortunately, I found a way to prevent the system from reading the <em>autorun.inf</em> file at all resulting in completely disabled autorun feature. It is done by creating a new key in the registry. The key that must be created is:</p>
<p><span style="font-size: 12px; font-weight: bold; color: #00aa66; white-space: nowrap;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf</span><br />
with its default value set to:<span style="font-weight: bold; color: #00aa66;">SYS:DoesNotExist</span></p>
<p>After creating mentioned key and restarting the shell by killing explorer.exe process, logging out or rebooting, the autorun feature in the whole system will be completely disabled allowing everyone to plug any portable devices without worrying about malware anymore.</p>
]]></content:encoded>
			<wfw:commentRss>http://p-lider.lideve.eu/wordpress/?feed=rss2&#038;p=41</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Sharing folders in XP by anyone</title>
		<link>http://p-lider.lideve.eu/wordpress/?p=30</link>
		<comments>http://p-lider.lideve.eu/wordpress/?p=30#comments</comments>
		<pubDate>Mon, 23 Aug 2010 18:12:51 +0000</pubDate>
		<dc:creator><![CDATA[p_lider]]></dc:creator>
				<category><![CDATA[Windows Server 2003]]></category>
		<category><![CDATA[Windows XP]]></category>

		<guid isPermaLink="false">http://p-lider.rootnode.net/wordpress/?p=30</guid>
		<description><![CDATA[By default, only members of &#8220;Power Users&#8221; or &#8220;Administrators&#8221; groups can share folders or printers. Sometimes this is not enough &#8211; sometimes we want to allow specific users to have a possibility to share some folders but nothing more. Unfortunately there is no graphical tool in Windows XP or in any other version of Windows, [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>By default, only members of &#8220;Power Users&#8221; or &#8220;Administrators&#8221; groups can share folders or printers. Sometimes this is not enough &#8211; sometimes we want to allow specific users to have a possibility to share some folders but nothing more. Unfortunately there is no graphical tool in Windows XP or in any other version of Windows, which can give us a possibility to do that.</p>
<p>However, there is a great tool called “TweakUI” (created by Microsoft), which can change specific Access Lists in the registry, so we can give anyone we want the right to share folders or printers. To make this happen you must do the following steps:</p>
<ol>
<li>Download and install TweakUI (you can get it from here: <a href="http://www.microsoft.com/windowsxp/downloads/powertoys/xppowertoys.mspx">http://www.microsoft.com/windowsxp/downloads/powertoys/xppowertoys.mspx</a>)</li>
<li>Launch it and go to “Access Control” tab.</li>
<li>Now give the same rights for the users or groups you want to be able to share folders, like they are set for “Power  Users” in the following categories:
<ul>
<li>Manage file/print server connections</li>
<li>Manage file shares</li>
<li>Manage print shares</li>
</ul>
</li>
<li>Apply the changes and reboot the system.</li>
</ol>
<p>From now, the specified in step 3 users or groups will have the right to share folders. It is wise, to create a group called for example “Share Creators”, give it the mentioned earlier rights and put all the users we want to share folders into that group.</p>
]]></content:encoded>
			<wfw:commentRss>http://p-lider.lideve.eu/wordpress/?feed=rss2&#038;p=30</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
