Sunday, January 14, 2007

Fix a registry on a dead system

Sometimes a registry problem causes a computer not to boot or to prevent logon. If you can't boot the computer, or you don't have any other means to restore the problem registry file, you might be able to open the registry on another computer, fix it, and restore it to the problem PC.

In order to fix the registry this way, you must be able to boot the system through a diskette or dual-boot configuration and gain access to the file system. You also need to be able to copy the registry file to a removable media with sufficient space to accommodate it or be able to copy the file across the network.


Here's how to modify a remote registry locally on your computer if you can't connect to it across the network:



1. Boot the other computer with a boot diskette or dual-boot OS and then copy the problem hive file to a removable media or directly across the network to your system.
2. Log in as administrator on your system and run REGEDIT.EXE.
3. In the Registry Editor, select either the HKEY_LOCAL_MACHINE or HKEY_USERS window, and then choose Registry Load Hive.
4. Locate the file copied to the system in step 1, select the file, and click Open. This loads the hive into the local registry as a subkey of the selected key.
5. Make the necessary changes to the damaged hive and then choose Registry Unload Hive.
6. Copy the hive file back to its original location on the problem computer. Restart to test the system.

Note: Editing the registry is risky, so make sure you have a verified backup before making any changes.

Recovering from a forgotten Administrator password in Windows 2000 Pro

It's the one of the worst things you can do, and it makes you feel like a complete idiot. You forgot the password for the Administrator account of your Windows 2000 Pro system. If you've just finished the install, check for an innocent mistake before you jump out the window or reinstall—enter the password in uppercase in case the Caps Lock key was on when you created the Administrator account.

Didn't do it? Hopefully you have another account that is a member of the Administrator's group. If so, just log on with that account and change the Administrator password. If that doesn't do the trick and you can afford to lose any other accounts contained on the system (likely with a workstation but unlikely on most servers), delete the SAM hive. On a FAT system, boot the computer with an old DOS or Windows 9x boot disk and delete the %systemroot%\System32\Config\SAM file (or rename it). On an NTFS system, you can use the Recovery Console to access and delete the file, but only if you have configured the Recovery Console for automatic administrative logon through the local security policy or through the inherited domain security policy.

Another option is to back up the system, reinstall Windows 2000, and then restore the system. As when deleting the SAM, you'll lose your accounts, but at least you'll have the system back with all your other settings intact. And if you absolutely don't want to lose your accounts, check out http://www.winternals.com/ for utilities that will enable you to reset the administrator password.

Recovering from a forgotten Administrator password in Windows 2000 Pro

It's the one of the worst things you can do, and it makes you feel like a complete idiot. You forgot the password for the Administrator account of your Windows 2000 Pro system. If you've just finished the install, check for an innocent mistake before you jump out the window or reinstall—enter the password in uppercase in case the Caps Lock key was on when you created the Administrator account.

Didn't do it? Hopefully you have another account that is a member of the Administrator's group. If so, just log on with that account and change the Administrator password. If that doesn't do the trick and you can afford to lose any other accounts contained on the system (likely with a workstation but unlikely on most servers), delete the SAM hive. On a FAT system, boot the computer with an old DOS or Windows 9x boot disk and delete the %systemroot%\System32\Config\SAM file (or rename it). On an NTFS system, you can use the Recovery Console to access and delete the file, but only if you have configured the Recovery Console for automatic administrative logon through the local security policy or through the inherited domain security policy.

Another option is to back up the system, reinstall Windows 2000, and then restore the system. As when deleting the SAM, you'll lose your accounts, but at least you'll have the system back with all your other settings intact. And if you absolutely don't want to lose your accounts, check out http://www.winternals.com/ for utilities that will enable you to reset the administrator password.

Thursday, January 11, 2007

IT NEWS 2007 Security Threats on the Rise

With the new calendars freshly hung on the wall, an important question surfaces: What security threats are on the rise for 2007? It appears that the year will bring more narrowly defined threats or "targeted threats," which are different from what we've seen before. They are more focused on individual information as opposed to mass-mailing worms that are sent over the Internet to randomly infect victims.

IT NEWS 2007 Security Threats on the Rise

With the new calendars freshly hung on the wall, an important question surfaces: What security threats are on the rise for 2007? It appears that the year will bring more narrowly defined threats or "targeted threats," which are different from what we've seen before. They are more focused on individual information as opposed to mass-mailing worms that are sent over the Internet to randomly infect victims.

Monday, January 8, 2007

SPEED UP Your Internet connection settings: DSL/Cable/56K

Now Windows XP is installed, it's time to get the internet connection working. Most popular are the DSL or Cable connections, but a connection through your phone line is also possible. Follow the instructions of your service provider.

The most simple connection is through a gateway router. The gateway router (provided by some of the internet providers as the modem) keeps the DSL or Cable internet connection alive, and makes sure that every connected computer is able to enter the internet. If this is the case: you only have to plug in the ethernet cable and the connection will probably be there automatically.

DSL or Cable? Buy a gateway (wireless) router!
There are increasingly more households with more then one computer. By placing these computers in a network, all computers are able to connect to the internet at the same time. Besides using the same internet connection, you are also able to share printers and files as well!
Theoretically, creating a network with a gateway router is not that difficult, in most cases easier then sharing the internet connection within Windows. Practically however, many are having a lot of problems, especially if a secured wireless connection is on the wish list! Most internet providers use a modem with DHCP to get connected. By setting up the router with automatic IP address you are probably quick online (sometimes you have to clone the computers MAC address). Although there are routers which support an USB modem, I advise to buy an ethernet modem. Besides that, I advise to use a modem supported by your internet provider (if you buy a combined modem-router, you will probably get no support if needed).

Optimizing the internet connection

For maximum performance, it's wise to optimize your internet connection. For this purpose you can make use of the utility TCP Optimizer (download: http://www.speedguide.net/downloads.php). This tool can be used for both Windows XP/2000 and 98/ME. Choose your internet connection type, option Optimal settings, and Apply changes to optimize your connection.
For the tab MaxMTU use the value 1500 and reboot your Windows and do the test (if needed change to www.google.com). The optimized MaxMTU will be found.


Internet by a 56K modem

If you are still using an old fashion 56K modem, I can imagine you get irritated with the noise. Switching the noise off, is easy: Control Panel, Network Connections, right click the 56K connection and choose Properties, button Configure (the modem), tab Modem, Speaker volume: Off.
Are you having troubles creating a connection? Use the following initialization string (same place): s11=55 for getting connected faster and s10=60 to prevent to get disconnected.

Internet history cleaning (cookies, temporary files, history, visited websites)

With every visit of a website, all sort of information and files are stored on your computer. There are a few tools to erase this information easily. I like the following utilities most:
Active@ Eraser for Windows (download: http://www.active-eraser.com/)
IEHistoryView from Nirsoft (download: www.nirsoft.net/utils/iehv.html)
Active Eraser actually overwrites the data, so they are no longer recoverable!