Eswar Koneti's Blog

All about Configmgr and its connected objects…….

  • About Author
      View eswar koneti's LinkedIn profile
  • Enter your email address to subscribe to this blog and receive notifications of new posts by email.

    Join 99 other subscribers

  • Awards


  • FaceBook Updates

  • Catagories

  • Meta

  • Copyright!

    All the blog posts in this website are owned by Eswar Koneti and may not be reused in any mode without prior approval of Eswar Koneti. You may quote one paragraph from the blog posts if you link to the original blog post.
    Happy Reading!

Archive for the 'Windows 7' Category

WindowsXP to Windows7 64bit Migration in WinPE offline

Posted by Eswar Koneti on 22nd July 2010

Though the original post is avilable in windows-noob , having utilised the original task seqeunce, there are slight modifications done to carryout this task which are simple to upgrade WinXP to win7.

To use the existing Task sequence in 64 Bit OS , you will have to create additional packages like USMT and Micrisoft runscanstate pacakges which are used to in exisitng TS.

1. Create a New package“USMT x64 Only” which will point to source directory c:\program files\WAIK\tools\USMT\amd64. Do not create any program for this. MAke it avialble on to DP.

2.Open notepad ,paste the below code and name it as like runscanstate-offlinewindirx64.bat

@set USMT_WORKING_DIR=%~2%\USMTbits\amd64

“%~2\USMTbits\amd64\scanstate.exe” “%~1″ /c /o /hardlink /efs:hardlink /nocompress /offlinewindir:c:\windows /v:5 /l:%~2\windows\TEMP\SMSTSLog\scanstate.log /progress:%~2\windows\TEMP\SMSTSLog\scanstateprogress.log /i:%~2\USMTbits\amd64\miguser.xml /i:%~2\USMTbits\amd64\migapp.xml

Now Create package called “runscanstate-offlinewindirx64″  with program command line “runscanstate-offlinewindirx64.bat” with default avilable options.Make it avialable to DP also.

It assumes that ,u have already created another USMT package which will point to USMT folder (x86,amd64) in c:\program files\WAIK\tools\USMT.

once the above packages are ready , you can import the avilable Task Sequence . Edit the TS to ensure the correct packages are referenced like USMTx64 only,USMT Both version( USMT folder) and scanstate package.

You will also need to make some command line changes in xcopy x64 usmt to usmtbits\amd64 step since i have used the default TS from noob and it tries to copy all the DP pakcages to usmtbits folder so i modified the commands like below as it works fine for me.

The command prompt which i use looks like xcopy %_SMSTSC01000D0%* %systemdrive%\USMTbits\amd64 /herciy Where C01000D0 is package ID of  USMT x64 only.

and another task xcopy runscanstate.bat to usmtbits command looks like xcopy %_SMSTSC0100047%* %systemdrive%\USMTbits /herciy where C0100047 is package ID of runscanstate-offlinewindirx64.

Rest of the process is same,you need to Advertise the above tasksequence to the respective collection and do a WINPE to carryout the task.

Task Sequence is given below with snap shot:

scanstate WindowsXP to Windows7 64bit Migration in WinPE offline

Tags: , ,
Posted in OS Deployment, SCCM 2007, Task Sequence, Trobleshooting Tips, Windows 7 | 10 Comments »

Virtual Memory Configuration in Windows 7

Posted by Eswar Koneti on 14th July 2010

In a default installation, Windows creates the page file in the root folder on the same drive that holds the Windows system files. The size of the page file is determined by the amount of RAM in the system.

By default, the minimum size on a 32-bit (x86) system is 1.5 times the amount of physical RAM if physical RAM is less than 1 GB, and equal to the amount of physical RAM plus 300 MB if 1 GB or more is installed.

The default maximum size is three times the amount of RAM, regardless of how much physical RAM is installed. On a PC with a processor that supports Physical Address Extension (PAE)—which is to say, on any PC that is capable of running Windows 7—the maximum size of the page file is 16 TB.

We can see the page file in a Windows Explorer window if we configure Windows to show hidden and system files; look for Pagefile.sys in the root of the system drive.

To see the current configuration of the system’s virtual memory, open the System dialog box in Control Panel and click the Advanced tab. Or, for a handy undocumented shortcut, click Start, type systempropertiesadvanced (with no spaces), and press Enter.

Under the Performance heading, click Settings. In the Performance Options dialog box, click the Advanced tab. And under the Virtual Memory heading, click Change.

Virtual%20Memory jpeg Virtual Memory Configuration in Windows 7

By default, Windows creates a single page file and manages its size. The Currently Allocated number near the bottom of the dialog box shows how large the file is.

If conditions on the system change (say we run an unusually large assortment of memory-intensive applications), Windows might increase or even decrease the size of the page file. All this happens without intimation as long as you leave the “Automatically Manage Paging File Size For All Drives” option selected.

If we don’t want Windows to automatically manage the page file, you have the following options:

Ø We can move the page file to a different volume if you have more than one volume.

Ø If we have more than one volume, we can establish more than one page file.

Ø For any page file, we can choose between System Managed Size and Custom Size.

Ø If we choose Custom Size, we can specify an initial size and a maximum size.

Ø We can remove a paging file from a volume by selecting the volume and choosing No Paging File. (In fact, we can do this to get rid of all paging files, although doing so is not recommended, even on systems with a lot of RAM.)

Should you get involved in managing the page file?

If we have more than one physical disk, moving the page file to a fast drive that doesn’t contain Windows system files is a good idea. Using multiple page files split over two or more physical disks is an even better idea, because your disk controller can process multiple requests to read or write data concurrently.

If we have a single hard disk that contains volumes C, D, and E, splitting the page file over two or more of these volumes, might actually make your computer run more slowly.

If we are short of hard disk space, we might consider setting a smaller initial page file size. Monitor peak usage levels over time; if the peak is well below the current page file size, we can consider reducing the initial size to save disk space.

On the other hand, if we’re not short of disk space, there’s nothing to be gained from doing this and you might occasionally overload your custom settings, thereby degrading the performance of our system.

Should we enlarge our page file?

Most users won’t need to do this. But we might want to keep an eye on the green line in the Memory chart on the Overview tab of Resource Monitor. If that line is spiking off the top of the graph a great deal of the time during normal work, we might consider increasing the maximum size of our page file.

Note that we should disregard page file spikes and disk activity in general that takes place while we’re not actually working. This is likely to be the result of search indexing, defragmentation, or other background processes and does not indicate a problem with your actual work performance.

Tags:
Posted in Windows 7 | 1 Comment »

Display language bar at logon screen in windows 7

Posted by Eswar Koneti on 17th June 2010

Just want to show you how you can enable Language bar at welcome screen in windows 7 at the left corner topside.

Log into your windows 7 computer 1) Go to control panel ,click on Region and Language shown below with screen shots.

 Display language bar at logon screen in windows 7

 Display language bar at logon screen in windows 7

 Display language bar at logon screen in windows 7

 Display language bar at logon screen in windows 7

 Display language bar at logon screen in windows 7

 Display language bar at logon screen in windows 7

 Display language bar at logon screen in windows 7

 Display language bar at logon screen in windows 7

Once you have done the all above changes ,Log off the computer. Next time,when you login ,you should be able to see Language bar on the left side top corner to select which Language.

Tags: , , , , , , , , ,
Posted in OS Deployment, SCCM 2007, Task Sequence, Trobleshooting Tips, Troubleshooting Issues, Windows, Windows 7 | 1 Comment »

Exploring Windows 7

Posted by Eswar Koneti on 12th May 2010

pic1 Exploring Windows 7

AppLocker

Using the AppLocker tool, you have a few options to block other users to access Executables, Windows Installers, Scripts, a specific publisher or path. You can simply do this by pressing the Windows key then typing Gpedit.msc.

Then go to Computer Navigation -> Windows Settings -> Security Settings -> Application Control Policies -> AppLocker. Right click on one of the options ( Executables, Installers, or Script ) and create a new rule. That should save you from a lot of headaches.

Desktop Magnifier

 Press the Windows Key and the Plus Key to zoom in or Windows Key and the Minus Key to zoom out. You can zoom anywhere on the desktop and you can even configure your magnifier.

 You can choose to invert colors, follow the mouse pointer, follow the keyboard focus, or the text insertion point.

Shift The Window From One Monitor To Another

 If you are using two or more monitors, then you might want to move the Windows from one to another.

 All you have to do is press the Windows Key + Shift Key + Left or Right Key, depending on what monitor you want to move it to.

Windows Action Center

 Windows Action Center offers you important information about your PC, like the Antivirus Status, updates, troubleshooting and provides a backup scheduling feature.

 To access it, go to Control Panel -> System And Security -> Action Center.

Windows Troubleshooting Platform

 This platform can help you solve a lot of issues you may encounter, like the internet connection, hardware devices, poor system performance and more.

 You can choose what to troubleshoot and it will come with some possible explanations for the problem that might really help you.

There are a lot of options, guidance and information available there, so give it a try by typing “troubleshoot” or “fix” after pressing the Windows Key.

Open A Folder In A New Process

 Windows 7 opens all folders in the same process in order to save resources, but this means if one folder crashes, they all crash.

 So if you feel like that’s a risk you don’t have to take, then you have to open them all in their own processes.

To do this, hold down Shift, right-click the drive and “Open in New Process”. Now you will be safe.

Problem Step Recorder

 The Problem Step Recorder is a great tool that can be used in more circumstances.

 You can turn it on by pressing the Windows Key, then typing “PSR.exe” and click Record. Now it will record all your moves and save them as a HTML document that you can view or write descriptions to it.

This can help you with troubleshooting or when writing a guidance or tutorial.

Turn Off Recent Search Queries Display

 Windows 7 holds and displays the recent search queries by default. This can often prove to be irritating.

 Press the Windows Key, type gpedit.msc, then go to User Configuration -> Administrative Templates -> Windows Components -> Windows Explorer and double click on “Turn off display of recent search entries”.

Advanced Disk Defragmentation

 Windows 7 offers much better defragmentation and also lets you configure it a bit from the command line.

 To do it, press the Windows Key and then type CMD.

You can defragment your hard disk from the command line by typing “defrag” and you have the following options:

/r will defrag multiple drives simultaneously,

-a performs a defrag analysis,

-v prints the report,

-r treats files with at least 64 Mb of fragments like are not fragmented,

-w will defrag everything.

An example is “defrag C: -v -w” to defrag the whole drive C.

Make Internet Explorer 8 Load Faster

 If you want Internet Explorer 8 to load faster, you need to disable the add-ons that slow it down, so go to Tools -> Manage Add-ons and check the load time for each one.

 You can choose for yourself the ones you can live without and ones that would increase the load speed.

Use Virtual Hard Disk Files

 You can now create and manage virtual hard disks files in Windows 7 as if they were real disks.

 This can allow you to use a live Windows installation on the virtual disk without the need to boot the virtual Computer.

To create a virtual disk you have to press the Windows Key, right-click on Computer, then go to Manage -> Disk Management -> Action ->
Create VHD.

There you can specify the location and size of your virtual hard disk file.

To attach the virtual disk file, press the Windows Key, right-click Computer, then go to Manage -> Disk Management -> Action -> Attach VHD and you have to specify the location and if it’s read only or not.

To initialize a virtual hard disk, press the Windows Key, right-click on Computer, go to Manage -> Disk Management -> Action -> Attach VHD, specify the location, click Ok, then right click on the virtual disk and click on Initialize Disk.

Select the partition style you want to use and then right-click on the unallocated space and click “New Simple Volume” and follow the instructions wizard.

Now, a new hard drive appears in Windows Explorer and you can use it as a real partition.

Posted in Windows 7 | No Comments »

Internet Explorer 8 Features

Posted by Eswar Koneti on 12th May 2010

Web Slices

When you spot the green Web Slices icon on a site, click it. If something changes on that site, the Web Slices icon in your Favorites bar lights up. Point to the glowing icon to see what’s changed on a particular Website.

Instant search

Instant search in IE8  displays a list of relevant suggestions the moment you start typing.

Accelerators

Just highlight some text, then click the blue Accelerator icon that appears to see information on different sites without navigating to other websites.

Compatibility View

If a webpage doesn’t look right, just click the new Compatibility View button on the Address bar. The button corrects misaligned text or images on pages designed for older browsers.

Internet Explorer’s Crash Recovery

It automatically closes and attempts to recover the tab without affecting other open tabs.

Internet Explorer Developer Tools

Now its easy to to create websites without having to modify them for each browser, and can view and debug web-pages.

SmartScreen Filter

It protects users from phishing attacks, online fraud, and spoofed websites, as well as websites that contains malicious software.

InPrivate Browsing

With In Private Browsing, no one can track your details. This helps prevent anyone else who might be using your system from seeing where you visited and what you looked at on the web.

Cross-site Scripting

It protects you from hackers and web attack. It also protects users from malicious websites from stealing your personal information when surfing Internet.

Posted in Windows 7 | No Comments »

BitLocker in Windows 7

Posted by Eswar Koneti on 12th May 2010

Windows BitLocker Drive Encryption is a new security feature that provides better data protection for your computer, by encrypting all data stored on the Windows operating system volume.

In Windows 7, a volume consists of one or more partitions on one or more hard disks. BitLocker works with simple volumes, where one volume is one partition. A volume usually has a drive letter assigned, such as “C:”

A Trusted Platform Module (TPM) is a microchip that is built into a computer. It is used to store cryptographic information, such as encryption keys. Information stored on the TPM can be more secure from external software attacks and physical theft.

  • BitLocker uses the TPM to help protect the Windows operating system and user data and helps to ensure that a computer is not tampered with, even if it is left unattended, lost, or stolen.
  • BitLocker can also be used without a TPM. To use BitLocker on a computer without a TPM, you must change the default behavior of the BitLocker setup wizard by using Group Policy, or configure BitLocker by using a script.

When BitLocker is used without a TPM, the required encryption keys are stored on a USB flash drive that must be presented to unlock the data stored on a volume.

How does BitLocker Drive Encryption work?

If the computer is equipped with a compatible TPM, BitLocker uses the TPM to lock the encryption keys that protect the data. As a result, the keys cannot be accessed until the TPM has verified the state of the computer.

  • Encrypting the entire volume protects all of the data, including the operating system itself, the Windows registry, temporary files, and the hibernation file. Because the keys needed to decrypt data remain locked by the TPM, an attacker cannot read the data just by removing your hard disk and installing it in another computer.
  • During the startup process, the TPM releases the key that unlocks the encrypted partition only after comparing a hash of important operating system configuration values with a snapshot taken earlier.

This verifies the integrity of the Windows startup process. The key is not released if the TPM detects that your Windows installation has been tampered with.

What is a TPM?

A TPM is a microchip designed to provide basic security-related functions, primarily involving encryption keys.

  • The TPM is usually installed on the motherboard of a desktop or portable computer, and communicates with the rest of the system by using a hardware bus.
  • Computers that incorporate a TPM have the ability to create cryptographic keys and encrypt them so that they can be decrypted only by the TPM. This process, often called “wrapping” or “binding” a key, can help protect the key from disclosure.
  • Each TPM has a master wrapping key, called the Storage Root Key (SRK), which is stored within the TPM itself. The private portion of a key created in a TPM is never exposed to any other component, software, process, or person.
  • Computers that incorporate a TPM can also create a key that has not only been wrapped, but is also tied to specific hardware or software conditions. This is called “sealing” a key.
  • When a sealed key is first created, the TPM records a snapshot of configuration values and file hashes. A sealed key is only “unsealed” or released when those current system values match the ones in the snapshot.
  • BitLocker uses sealed keys to detect attacks against the integrity of the Windows operating system.

With a TPM, private portions of key pairs are kept separated from the memory controlled by the operating system. Because the TPM uses its own internal firmware and logic circuits for processing instructions, it does not rely upon the operating system and is not exposed to external software vulnerabilities.

Difference between BitLocker in Windows-Vista and Windows-7

The BitLocker feature was introduced in Windows Vista and allowed you to encrypt the content of your hard drive. In Windows 7 BitLocker allows you to encrypt portable USB flash drives also.

How to use BitLocker Facility?

 Right-click on the flash drive you want to encrypt and select Turn on BitLocker.  BitLocker in Windows 7 After BitLocker initialized the flash drive you will need to enter in a password to unlock the drive.  You can also set up a Smartcard which are usually used in a work environment.  BitLocker in Windows 7 Next you will be prompted to store the recovery key which is used in the event you lose your password or smartcard.  If you store it as a file make sure that it is not on the same drive that you’re encrypting.    BitLocker in Windows 7 After the key has been saved as a file or printed you will see a confirmation message. 4saveconfirm BitLocker in Windows 7Finally you will be ready to start encrypting the drive so just click the Start Encrypting button.

 BitLocker in Windows 7

While it is encrypting there will be a progress screen displayed.

 BitLocker in Windows 7 A successful encryption of the USB flash drive. notice that the drive icon will change to show its encrypted with BitLocker.

 BitLocker in Windows 7Notice that the drive icon will change to show its encrypted with BitLocker where the gold lock indicates it is locked up and the gray lock is displayed after you have unlocked it.

unlock BitLocker in Windows 78icon1 BitLocker in Windows 7

 Right-click on that icon to bring up options to manage BitLocker encryption. 

 BitLocker in Windows 7

The next time you plug in the drive to a Windows 7 machine you will be prompted to enter the password to gain access to the drive.  You can also always have it unlocked on specific machines in the future.

 BitLocker in Windows 7

Posted in Windows 7 | No Comments »

Overview of Wake-on-LAN Technology

Posted by Eswar Koneti on 10th May 2010

Wake-on-LAN is an Ethernet computer networking standard that allows a computer to be turned on or woken up by a network message. The message is usually sent by a simple program executed on another computer on the local area network. Equivalent terms include Wake-on-LAN or Wake on LAN (WOL or WoL), and Remote Wake-Up (RWU).

In case the computer being woken is communicating via Wi-Fi, the wake-up-packet can be sent via Wireless Multimedia Extensions (WMM).

[1] This may also be called Wake on Wireless LAN (WoWLAN).

[2] Wakeup over Wi-Fi networks was not possible in previous implementations of Wake-on-LAN. Wake-on-LAN is being superseded by a robust, secure, and routable out-of-band management protocol known as Desktop and mobile Architecture for System Hardware [citation needed].

 How it works:

Wake-on-LAN is platform-independent, so any application on any platform that sends magic packets can wake up computers running on any platform; it is not restricted only to LAN (Local area network) traffic.

 The computer to be woken is first shut down (sleeping, hibernating, or soft off; i.e., ACPI state G1 or G2), with power reserved for the network card, but not disconnected from its power source. The network card listens for a specific packet containing its MAC address, called the magic packet, broadcast on the broadcast address for that particular subnet (or an entire LAN, though this requires special hardware or configuration).

The magic packet is sent on the data link or layer 2 in the OSI model and broadcast to all NICs within the network of the broadcast address; the IP-address (layer 3 in the OSI model) is not used. 

When the listening computer receives this packet, the network card checks the packet for the correct information. If the magic packet is valid, the network card takes the computer out of hibernation or standby, or starts it up.

In order for Wake-on-LAN to work, parts of the network interface need to stay on. This consumes standby power, much less than normal operating power. If Wake-on-LAN is not needed, disabling it may reduce power consumption slightly while the computer is switched off but still plugged in.

Magic Packet Technology: 

The Magic Packet technology is used to remotely wake up a sleeping or powered off PC on a network. This is accomplished by sending a specific packet of information, called a Magic Packet frame, to a node on the network. When a PC capable of receiving the specific frame goes to sleep, it will enable the Magic Packet mode in the LAN controller, and when the LAN controller receives a Magic Packet frame, it will alert the system to wake up. The patented Magic Packet technology is implemented entirely in the LAN controller. This architecture allows the PC to go into a very low power mode, even as far as to remove the power from the entire system, except for the LAN chip. 

Wake on Internet:

The computer being woken does not know whether the wakeup signal comes from another machine on the same network or from anywhere else. If the magic packet can be made to reach a computer, it can originate anywhere (e.g., from the Internet). This can be achieved by a Virtual Private Network (VPN), which makes the remote computer appear to be a member of the Local Area Network (LAN). In the absence of a VPN, a computer connected to a router can be woken if a magic packet sent over the Internet is routed to it. This requires any firewall to be set up to allow entry of the Wake-on-LAN signal to a specified port. The port can be forwarded to the computer to be woken up; or some routers permit the packet to be broadcast to the entire LAN. However, some routers do not support this as they will not forward broadcast packets. In case the computer being woken is communicating via Wi-Fi, the wake-up-packet can be sent via Wireless Multimedia Extensions (WMM).[1] This was not possible in previous implementations of Wake on LAN.

WOL prerequisites:

To make WOL work, the computer receiving the WOL request must have a motherboard and network card that supports wake on lan requests. In addition, WOL must be activated in the machine’s BIOS. Most PCs today support Wake on lan.

Wake-on-Lan Hardware:

To use Wake on Lan you will need at minimum a motherboard and a network card that support Wake on Lan. Network Cards We currently use the Intel P100+ and 3Com cards although this is by no means a recommendation.

Motherboards: There are two types of motherboard that support Wake on Lan

Cabling :

The two main things to remember about cabling are; 1. The majority of WoL cards require a cable connection between the motherboard and the network card. This is a three pin connection although some older cards and motherboards have two pin connections. To send the signal from the network card to the motherboard this cable has to be connected. There is a specification that would allow the card itself to pass the signal through the PCI bus but we have yet to see or test these cards or motherboards. 2. Your network card must be cabled into some form of network. This can be BNC, RJ45 or even Fibre, indeed the WoL protocol is topology and transport protocol independent so TCP/IP or IPX/SPX could be used to send the magic packet.

Posted in Windows 7 | 1 Comment »