Common Windows Server Group Policies and Scripts

By Ian Matthews   December 11, 2008    Last Updated April 22, 2009 NOTE: The author will not accept responsibility for damages as a result of following the suggestions below.  They are provided “as is” and intended only as a rough guide.  You should always back up your servers System State prior to changing Group Policies.  USE AT “YOUR OWN RISK”. There are many Active Directory Group Polices which you may want to use.  Below are some…

How to Install and Manage Windows Deployment Services

By Ian Matthews  November 25, 2008  Last Updated *** DRAFT *** This article will brief the key area’s of Windows Deployment Services (WDS) under Windows Server 2008.  Note that the majority of these instructions will function equally as well under Server 2003 R1 or R2 but are not specifically intended for those platforms. WDS was released with Service Pack 2 for Server 2003, as a replacement for Remote Install Services (RIS).  RIS had a number of…

Microsoft Windows 2000 & 2003 Domain to Windows 2008 Upgrade Procedure

& Things to Know in General About Server 2008 Prepared by Ian Matthews September 21, 2008, last updated October 6, 2008 Unlike the Server 2003 upgrade process, I have attended no Windows 2003 to 2008 Microsoft presentations (live or on-line).  This is very unusual for Microsoft but the process is easier than it was from 2000 to 2003. I have now completed five Sever 2008 installs, some on existing domains, some on new domains and…

How to Remove The Windows Sharing and Security Tabs

Even users with RESTRICTED USER rights on their Windows 2000 or XP machines can create shares on their PC.  This is obviously a very bad idea for the vast majority of companies.  Microsoft has Knowledge Base article 300153 which explains how to remove the SECURITY tab (which can be accomplished via Group Policy if you wish) however, if there is nothing on how to remove the SHARING tab.  Microsoft’s “Woody G” was good enough to…

How to Undo a Windows 2000 Group Policy Lock Out

Last Update Nov 17 2003 Well, if you have accidentally locked yourself out of a Windows 2000 or Windows 2003 Server Group Policy, don’t worry, you can easily undo it!  I have been using Windows 200x in production environments since 1998 and up until November 2003 never made the obvious mistake of going into the SECURITY TAB of a Group Policy, clicked ENTERPRISE ADMINS, FULL CONTROL, DENY… note very bright.  I should have simply clicked…

Microsoft Windows 2000 Domain to Windows 2003 Upgrade Procedure

Prepared by Ian Matthews August 18, 2003, last updated Sept 20, 2003 Several glossy Microsoft presenters have stated that all you need to do to complete a Windows 2003 Domain upgrade is run ADPREP and then upgrade away.  This may work for very small / simple environments but it is definitely not good advice for most companies.  After upgrading five servers in two unrelated domains and installing many fresh copies of 2003 I can say…

How to Stop Programs (like Google Update) From Starting Automatically

Prepared by Ian Matthews June 6, 2010, updated August 28 2010 If you have ever wasted hours trying to figure out how those clever “people” at Google managed to have GoogleUpdate.exe automatically startup even after you are sure you disabled all there was to disable, this page is for you. WHERE PROGRAMS STARTUP FROM: STARTUP FOLDER: START button, PROGRAMS folder, STARTUP folder if you want to remove something from here just right click on it and…

How to Inject Drivers into Windows PE 3.0 .WIM in 5 Minutes (or into a Windows 7 or 2008 R2 Image)

Prepared by Ian Matthews June 23, 2010 – Last Updated May 10, 2011 MARCH 2014 SEE: https://www.urtech.ca/2014/03/solved-how-to-add-drivers-in-wds-windows-deployment-services/  This is the followup to how to add drivers to a Windows PE 2.0 (Vista) .WIM file.  Today I needed to add a network driver to a Windows 7 PE 3.0 Boot Image I had in my Windows Deplopyement Services (WDS) 2008 Server.  After two hours of banging though half baked explainations a blogs I figured out the…

How to Troubleshoot SVCHOST.EXE 100% CPU Usage Problems

By Ian Matthews December 10, 2007 If you have noticed that your Windows 2000, XP or Vista PC is running slowly and that SVCHOST.EXE is taking 100% of your single core CPU system (or 50% of your dual core CPU system), this is the article for you! SVCHOST.EXE is a generic “host” or holder of services which run from .DLL’s.  Basically .DLL’s are small programs that other programs use, as opposed to .EXE programs which…

How to Create a Bootable Windows CD after Slip Streaming a Service Pack

written by Ian Matthews June 3, 2005 There are many articles which reference slip streaming and many of them provide the basic instruction.  However, most of them do not tell you how to make the resulting Windows + SP CD bootable; the process below will: copy the entire Windows CD to a folder on your PC (i.e. c:\origdisk )   extract the contents of the service pack to a different folder (i.e. c:\spack (see below…

30 Minutes of Search Engine Optimization

By Ian Matthews November 16, 2008, updated August 28, 2010 I am regularly asked by clients how to optimize their web site.  The first thing to know is that, with few exceptions, Google is the only engine you need to optimize for.  Today, all of the other engines will follow their lead.  Below are some of the critical search engine optimization “rules”. The first rule of Search Engine Optimization is that you cannot be indexed/ranked…

What is RAID 10, 0, 1, 5 and 6?

This document is reprinted from “Intel:Build a Real Server” section of a Microsoft “How To Technology Fair” handout dated Aug 2000. Updated by Ian Matthews of Up & Running Technologies on August 28 2010 to include RAID 6. We also have a very simple explanation of SAN, NAS, DAS, iSCSI, FiberChannel updated in November 2016 Redundant Array of Independent Disks (RAID) RAID is an acronym for Redundant Array of Independent Disks. The term was coined in 1988…

Invisible File Extensions in Windows

Invisible file extensions on Windows By Floydman, Bachelor in Computer Sciences [email protected] [email protected] May 7th, 2001 You can distribute this document freely, as long as no changes are made to the file, or as long as credit for it is not pretended by someone else. All comments and suggestions about the material presented here should be directed at [email protected] If future versions of this document include add-ons coming from other people than me, then proper…

How To Renew a Terminal Server / Remote Desktop SSL Certificate

CREATE A NEW CERTIFICATE REQUEST: Launch IIS Manager and click the SERVER name (not the websites or virtual directories) In the IIS section, click SERVER CERTIFICATES (if you don’t see this, you are likely not at the server level, go click on the server name at the top of the IIS Manager CONNECTIONS tree) Click CREATE CERTIFICATE REQUEST and complete the form. Note that the only things that really counts is the certificate name (like tsg.commodore.ca)…