Windows 7 Security Forum

Windows 7 Domain Account Lock Out Problem

Thu, 19 Nov 2009 19:20:26 Z

I've seen this issue discussed here and there, but I have yet to find a solution. I installed one Windows 7 machine and connected it to the domain (Server 2003) several weeks ago, and during my tests, my account got locked out several times. I figured it was a fluke. Today, I upgraded my workstation to Windows 7, and same problem. My domain account keeps getting locked out. I think it has something to do with our Intranet site. We run IIS6 on Server 2003 and have Digest and Windows Authentication onlly enabled. When I stay off of that site, it does not appear to happen, but soon after I start using our Intranet site, the account locks. This is a huge deal, because developing for that site is my primary role. I am at my wits end and unless I get a solution quickly, will be downgrading back to Vista in the next hour, as I can't work right now.

Here is what I have found, that was not helpful:
http://social.technet.microsoft.com/Forums/en/w7itprosecurity/thread/45cddbc8-f5f7-4868-ba0a-042f12addb45
http://social.technet.microsoft.com/Forums/en-US/w7itprosecurity/thread/ac159f92-4c3a-4de4-8412-ecddc33026e9

Windows 7 desktop locks after 10 minutes idle - Policy setting?

Tue, 01 Dec 2009 15:16:40 Z

Is there a policy setting to lock the desktop after a certain amount of idle time? I can't seem to find one, and searches on the web only seem to uncover lock up issues with software, rather than security policy settings.

Right now our Win 7 desktops lock after 10 minutes of inactivity (set by old IT staffer who is no longer here). This is way too short and we need to change it. However, I can't find where the setting is. The screensaver is disabled and the power settings are set to maximum. The only policy setting that looks like it could be what I'm looking for is "Microsoft network server: Amount of idle time required before suspending session", but that wasn't set to 10. I went and set it to 0 anyway and the desktop still locks after 10 mins.

Can someone point me in the right direction for this setting?

Thanks!

Bitlocker Password Viewer for Windows 7

Tue, 24 Nov 2009 15:35:42 Z

Got my AD schema extended for saving Bitlocker and TPM passwords. Encrypted a laptop and ran the VBS scripts to verify that a encrypted drive was saving password info to AD. When I open up ADUC on a Windows 7 Enterprise (64 bit) or Professional workstation (32 bit) that has the Bitlocker Password Viewer feature enabled, I do not see any selections when right clicking on the encrypted laptop nor can I search for it when right clicking on the domain in ADUC. The user I am logged in with is a domain admin, and also attempted it with the domain administrator account as well to rule out a permissions issue.

I've installed the Win 7 RSAT tools on another machine (32 bit Enterprise) and received the same results. Tried removing/adding the Password Viewer feature but still get same results. Anyone else run into this?

HowTo: Simpler way to bypass UAC for trusted app other than ACT (app compatibility toolkit)?

Sat, 21 Nov 2009 19:57:21 Z

Summary:
Is there a simple way to allow a trusted app to launch and bypass UAC other than the ACT (application compatibiity toolkit)?

More info:
I use Win7600-Home Premium (not Pro) for software development and Photoshop. With Photoshop, my experience is that the UAC prompt shows up when I start Adobe Photoshop, Bridge, DngConverter, and other components of the CS4 suite. My understanding is that this is because these non-privileged applications modify files and create files.

I would like to have "finer granularity" to tell UAC to allow these apps to run. I have them set to "Run as Administrator", but I'm still seeing the UAC prompt. I'm reluctant to turn-off UAC entirely, or lower its default. If anything, I would like to make UAC more hostile to unfamiliar apps, but friendlier to trusted apps.

In searching the web, I came across references to using the ACT to accomplish this. I've downloaded the files associated with ACT 5.5, but haven't yet installed them. I wanted to find out if there is a simpler way and thus avoid getting up to speed with ACT if I can avoid it. ACT 5.5 seems like using a chain-saw to slice bread.

The websites I came across seemed oriented to Vista, but the Microsoft website regarding ACT 5.5 seemed to include Win-7.
http://www.microsoft.com/downloads/details.aspx?FamilyID=24da89e9-b581-47b0-b45e-492dd6da2971&displaylang=en

Also, I use an older Explorer replacement, PowerDesk, which hasn't been updated for Win-7 (it is something of an orphan, and hasn't been updated much since it was originally developed back in the 90's, and now seems to be an afterthought by Avanquest). I have PowerDesk set with "Run as Administrator", and the UAC prompt shows up each time. I would like to be able to specify that UAC allow it to run without the prompt.

I have Win-7-Home Premium rather than Win-7-Pro, so the WinXp virtual machine isn't an option.

BitLocker in Xp

Fri, 27 Nov 2009 05:55:17 Z

I Locked My USB Drive With BitLocker.....
But When I connect That Drive in XP i m Unable To copy Files & folders in that drive...
is it possible to copy files in bitlocked drive...?
please help me...
my email id: sopan.patil@iccs.ac.in

UAC ideas

Mon, 16 Feb 2009 02:45:03 Z

UAC blocks some programs starting when Windows starts. There needs to be an 'allowed list' so programs can be added to it so these programs will run with admin privliges and no prompts. This is to minimise prompts while maintaining good security and allowing some programs to run on start up without being blocked.

Firewall software has a list of allowed programs and firewalls only prompt once once the program has been granted permission to have access all the time. The UAC should use a similar layout to controll programs while minimising prompts.

Using Flash is security threat ??

Fri, 13 Nov 2009 08:52:49 Z

I've read about serious security problems when using a Flash prog , i.e. Adobe Flash.
Now, if i disable flash i'm not able to watch any of the vid's widespread available.

Reading [url=http://www.computerworld.com/s/article/9140768/Flash_flaw_puts_most_sites_users_at_risk_say_researchers]THIS article[/url] makes me want to disable Flash for sure.

Is it possible within Win7 64bit + IE8 , to toggle Flash on/off ??
I've searched and found one prog i really don't trust , it's from " flash_melameth_com.htm.

Adobe explained that it is NOT possible to patch the Flash player , so is there a solution or a more trustworthy prog around.

question on UAC and hidden administrator account

Wed, 25 Nov 2009 17:48:03 Z

I wanted to know the the difference in account privileges for being logged in under the "super" administrator account (that is hidden by default) and being logged in as a user with UAC off. I would think that once UAC is off I can do anything the Administrator account can do on the system but I also wonder if there are still some security measures in effect on a user acct that has UAC off, such as IE still in protected mode, (not sure if that is turned off in the Administrator acct) for an example that would benefit still being in the user acct and not in the Administrator acct. thanks for your help!

File permissions in Windows 7 - "Take Ownership" reports success but I can't access my files

Fri, 08 May 2009 19:44:37 Z

I am experiencing difficulty getting at my files.

I have used the "Take Ownership" registry hacks (which open a command window) on files and/or folders, and I get a "SUCCESS" message each time; however, I still cannot access the files.

I can copy the files, and the proper permissions get set on the copies ... but I have several hundred gigs of files and not enough disk space left to do that, to say nothing of having to rename the files. Strange thing is, after I copy a file, I can delete the original file ... but still not "execute" it (double-click; the app that owns that type of file opens, but reports that it can't get access to the file).

I set UAC to "off" (lowest setting) and am trying the "Take Ownership" thing again to see if that makes a difference; in the meantime, has anyone else experienced this problem?

UAC seems to brake expectations from Windows normal usage

Mon, 23 Nov 2009 12:06:43 Z

Hi everyone,

I am used to several OS, and started using Windows 7 now, without any Vista experience.

I have decided to make a proper installation from the security point of view, by having normal
user and an administrator user configured on my system. Parallel to that I have set the UAC configuration
to always be asked to authenticate when required.

Now I am experiencing what seems to be a broken application behavior.

Many applications mistakely use my admins "MyDocuments", instead of my normal user "MyDocuments" after
the application has its rights elevated.

Windows Explorer shell extensions don't ihnerit admin rights even thought I am running it as admin for a specific task.

When I try to change the environment variables for the local user, after I authenticate, what I see are the variables for
the user with admin rights.

Having experience with other OS that offer similar functionality the above behavior seems really strange. Is this type of
behavior expected? Or the applications themselves are to blame. If that is so, why is the "set users environment variables"
configuration also broken.

Thanks in advance,
Paulo

Windows 7 Security Templates

Mon, 30 Nov 2009 17:59:07 Z

Hi there,

I´m looking for the Default security template .inf file in Windows 7.
Windows XP had those files under %systemroot%/security/templates
compatws.inf
hisecdc.inf
hisecws.inf
...
setup security.inf

I´m looking for the equivalent file for setup security.inf in Windows 7
Does anibody know where is it now ?

any help or idea is apreciated.

thank you .

Luiz Camilo

Schannel error

Mon, 30 Nov 2009 19:51:09 Z

Running Windows 7 Version 6.1.7600

Norton Internet Security Version 16.7.2.11

Dell XPS 720, 4 gb RAM, 1.5 tb hard drive (2 WD 750 black hard drives in RAID 0) Video cards GeForce 7950 x 2 (Quad SLI)
Chipset nForce 680i SLI / 680i LT SLI, Intel Processor X6800 @ 2.93 ghz Core 2

I hope I provided all the information needed. This error shows up 15 to 20 times in a row at boot up, but not everytime.

Thanks for any help that can be provided.

Here is info from Administrative Events log.

The following fatal alert was received: 10.

-	System

-	Provider

[ Name]

Schannel

[ Guid]

{1F678132-5938-4686-9FDC-C8FF68F15C85}

EventID

36887

Version

Level

Task

Opcode

Keywords

0x8000000000000000

-	TimeCreated

[ SystemTime]

2009-11-30T16:04:52.746400000Z

EventRecordID

11786

Correlation

-	Execution

[ ProcessID]

1020

[ ThreadID]

564

Channel

System

Computer

MarkD-PC

-	Security

[ UserID]

S-1-5-18

-	EventData

AlertDesc

Using PC safeguard in Windows 7

Mon, 30 Nov 2009 16:17:27 Z

I have windows 7 installed on a bunch of PCs for our customer service center. I cannot find the Safeguard tool to configure an equivalen of "WSS". any advice will be appriciated. is this feature removed from the final release?

Windows Vista Security Guide

Sat, 21 Nov 2009 16:05:52 Z

when will we have a documentation like Windows Vista Security Guide ?
with recomendations to harden windows 7 security?
will be expecting replies,
RR

Password reset disk..... on a disk??

Mon, 30 Nov 2009 08:56:20 Z

Hi
How can I create a password reset disk when it does not allow the CD/DVD drive to be used? My laptop does not have a floppy and I'm using my usb stick for something else.

Thanks

Windows 7 OS hardening recommendations

Mon, 30 Nov 2009 12:10:56 Z

Hi,

Can anyone helpme with recommendations on Windows 7 OS hardening.

Thanks,
Sitaram

Thanks, Sitaram www.sitaram-pamarthi.com

Access Denied

Fri, 27 Nov 2009 07:00:50 Z

My computer recently fried from a power surge so about a week ago I bought a new one. Since all of my Visual Studio Projects were on my old HD I decided to add that HD to the new computer. Both computers were running on Windows 7, so now everytime I try to access my .vb files or anything else in the old HD that used to be green says "Access Denied" or "you do not have the permission" I tried to somehow get a certificate exported from the old HD and I imported that certificate into my new HD's O.S, but im still having the same issue it is as if the certificate didn't do anything. I'm not familiar how windows encrypts files and I apologize if I'm posting in the wrong place. I just want to know what I can do to continue my previous work.

I can't get rid of this virus on Windows 7.

Mon, 17 Aug 2009 02:09:58 Z

It creates hidden executables with names like yttd.exe and always sets explorer to not show the hidden files.
I have avira antivirus and already tried a few other ones but although sometimes it detects them as a virus most of the time it doesn't.

Please help recommend a good virus remover.
Thanks

zminin dot com

From Win2K to Win7, starting with security -

Sun, 22 Nov 2009 03:46:11 Z

Hi, greetings.

I'm an expert user with Win2k (certified MS professional). But that's as far as I've gone with Windows. Now, I jumped directly into Win7. but I'm a bit lost with the security and access control in Win7. I would really appreciate if one of you MS experts here could point me to a place where I may quickly get the big picture on how to secure a Win7 installation, and the best practice in terms of security and access control in Win7. Thanks.

Max

Windows 7 Enterprise Fingerprint Tool error at login: "A match for the fingerprint was not found in the fingerprint store"

Thu, 12 Nov 2009 01:54:22 Z

We at PGS are currently running a Windows 7 pilot to test/confirm windows 7 functionality before we start our production rollout of Windows 7. This issues will seriously bring that to a halt or force us to use the working Lenovo Fingerprint software. I would like to avoid the Lenovo software even though it works without this error on a test laptop and use the native Windows 7 biometric tools.

We have a issue on all our Lenovo laptops that prevents us from simple using the fingerprint login despite registration. This only seems to occur when we are not connected to the domain. This occurs on all laptops tested so far and this error is repeatable.

Error at login screen: Windows Security: A match for the fingerprint was not found in the fingerprint store

The Biometrics settings is enabled, TPM and drivers installed and setting set to "allow users to login to Windows using their fingerprints" and "allow users to login to a domain using their fingerprints".

I am level 2 support and am the technical lead for this project.

Has this been reported to Microsoft as a issue yet? I cannot find any google articles and this error.

PGS Americas
Nathan Bridges

Windows Firewall - nonstandard behavior - Stealth Mode (Vista, 7, 2008, 2008 R2)

Sun, 29 Nov 2009 15:32:45 Z

Hello,
is there any way to disable the Stealth mode "feature" in the Windows Vista (Seven, Server 2008, Server 2008 R2)? Here http://technet.microsoft.com/en-us/library/dd448557(WS.10).aspx the MS says: "Stealth mode is enabled by default", but nothing about disabling. This behavior is against RFC and causes some serious problems with security scanners installed in our network. So, is there any way of using windows firewall and being RFC compliant?

Thanks,
Glatz

Windows 7 Home Premium has a System Image backup?

Sat, 27 Jun 2009 18:11:46 Z

Windows Vista Home Premium didn't have Complete PC Backup like the Bussiness and Ultimate editions.

Will Windows 7 Home Premium have the System Image backup (not file and folder backup) as Windows 7 Professional and Ultimate do?

Windows security tab missing when selecting more than one file or folder!!!

Wed, 21 Oct 2009 15:00:31 Z

Hi all,

I currently have Windows 7 Ultimate installed and it seems like the same problem that was in windows vista is now included in windows 7 as well. When i select multiple folders or files and right hand click, select properties, the security tab is missing. This just makes things more difficult for admins. Does anyone know a fix???

I have logged a priority call with Microsoft so hopefully i might get something back...

Matt Smith

Anytime Upgrade Bug?

Sun, 29 Nov 2009 11:43:54 Z

Hello,

I recently did a fresh install of Windows 7 Professional & wanted to do some bug testing.
Now on my ventures, I was testing the prospects of "Pirated Keys" breaking activation and or working without requiring internet connections and so on so forth.
However, This changed when I come across the "Windows Anytime Upgrade" and thought I would do some basic testing.

I have a licensed copy of Windows Vista Ultimate and Windows 7 Ultimate so this was done on instinct and a educational test and was not done for piracy purposes:-

* I pursued Google for some "Pirated Activation Serials" for Windows 7 Ultimate and come surprisingly over a few of them, The 1st serial I acknowledged was invalid for activation though I still took it for a run.

What I noticed was that it passed the "Anytime Upgrade Advantage", Meaning it took the key and upgraded me to the "Ultimate Release".

My question is, Was this a fluke or a bug within the Microsoft Verification Process for Anytime Upgrades?

Suggestions would be helpful in regards to this,

View Here:- http://atechforum.com/showthread.php?goto=newpost&t=571

-Sean

Sean

This copy of Windows 7 is not genuine. Error Code 8004F807

Wed, 08 Jul 2009 21:23:26 Z

About a month or 2 or so I installed Build 7100.

I activated it immediately. Everything was fine.

Then about a week ago, I went to update it and got a "Cannot update" error message code 8004F807

I then noticed that in the bottom right hand corner of my desktop, I have a new tag:

Windows 7
Evaluation copy. Build 7100
This copy of Windows is not genuine

I haven't installed any new hardware or anything.

Under Computers=>Properties
Windows Activation
Status: Not Available
Product ID: Not Available

Any help would be appreciated.

thanks
Scott

Windows 7 Parental control: time limit problems

Fri, 05 Jun 2009 17:03:51 Z

Hi, i was referred to here by the windows community site. my problems are relates to the time limits restriction on a standard user
1. the account does not log off after allowed time period ends
2. the account cannot be used the moment 'switch user' happens, as how parental control works, but the account remained logged on for some reason

I am sure that i turned on parental control and this problem occured for several days, that means the computer has been restarted for parental control changes made apply

Now can i know how should i deal with this problem to ensure the standard account logs off when it reaches blocked time period?

I want to login without entering my password, but Windows resets the setting each time

Wed, 02 Sep 2009 13:41:43 Z

Hello, I'm using Windows 7 Rtm 64 bit. I have this problem: I've used "control userpasswords2" to avoid having to enter my password at each logon.

Trouble is, this setting gets reset very often, and when I restart the system I have to enter the password again. If I check with "control userpasswords2", the checkbox I had unchecked is checked again.

What can be causing this? Is there a way to monitor a related registry key and discover what's resetting it?

EDIT: I think it gets resets each time the pc wakes up from sleep. Any help?

Possible virus or spyware??

Sat, 31 Oct 2009 22:03:32 Z

Last night, shortly after midnight, in the am of, oct.31,09. My computer started lagging very bad, even solitair was running slow. Programs wouldn't open or close, taskbar is very, very slow. Task manager is extremely slow.

Tried a few reboots. Windows Defender has been turned off and will not restart (not by me). CPU use shows only 1% or so?

I have had messages about backgound programs running durring shut down and some sort of program updating before it shuts down messages.

Any suggestions? Win 7 RC has been execlent until last night.

WM

Win7 RC1 Error message

Sat, 14 Nov 2009 20:07:58 Z

I get the following error message at bootup: Windows Defender Error 0x80070422
This error message started after I downloaded, installed UWTv2.0 (Ultimate windows tweaker v2.0) and rebooted. I deleted UWTv2.0 but the error message is still there. Sometimes I can restart WD using the start button in the error message window, sometimes I can't. I have gone into Services and restarted it (delayed start) but it reappears at bootup. I have run malware, av, and antispyware scans with no success. Any suggestions how to fix this?
System: P4 3.2Gig, 2Gig Ram, 320 Gig HD, ATI 2400 Pro 512 mb Graphics Win7 RC1 Ultimate

"Unknown Contact" on permissions for Adobe PDF files

Sat, 28 Nov 2009 20:32:47 Z

I’ve been doing backups for the last year using xcopy in a bat file under Windows 7 RC without problems. I put on Win7 Home Premium and now the copy dies after a few minutes with a denied access message. If I simply drag and drop or edit/copy edit/past the directory it copies without problems. Go figure…

I found a PDF file I couldn’t open—access denied message, and right clicked it. I clicked share with/specific people and found myself as owner and an account names “unknown contact” which had read/write privileges. If I clicked on properties/security there was an unidentified account starting with S-1-5-21 etc. I went back and deleted the “unknown contact” and was able to open the pdf file successfully. Take ownership didn’t change the equation.

Closing and re-opening the PDF file caused the S-1-5 etc guy to disappear.

After a day of messing around I found only PDF files have the problem and resetting all PDF files to eliminate the “unknown contact” solves the problem and permits the xcopy bat file to run to a successful completion. I used “search” and *.PDF for all directories, then selected all via shift/select and eliminated the “unknown contact” permission.

Does anyone have any idea what’s going on here? How do these funky accounts/permissions get set?

Windows 7 + Telnet

Thu, 26 Nov 2009 02:52:31 Z

I was trying to test some open ports on Windows 7 64-bit with telnet and NMAP I needed to see if 7777 was open for a game. I disabled my Firewall first to check and see if it could talk to the port. Neither telnet nor NMAP could find that port open with the firewall off. Any chance someone can help me figure out why nothing is talking to those ports?

RDP with custom certificate in Windows 7? (No tsconfig.msc or Group Policy setting)

Tue, 25 Aug 2009 09:25:58 Z

I am trying to configure Remote Desktop in Windows 7 RTM using SSL/TLS authentication and encryption, with a custom certificate (not the default self-signed certificate) and private key. I installed a specific certificate and private key into the Local Computer store under Remote Desktop > Certificates. However, I do not see any way to tell Remote Desktop/Terminal Services to use that cert and key. How do I select that specific cert and key?

I tried to connect to the Windows 7 machine from Windows XP running the Remote Desktop Connection Client (mstsc.exe) 6.0. It continues to report the self-signed certificate when connecting, not the custom cert. I tried removing the self-signed certificate and restarting, but the self-signed certificate gets regenerated (new issued time, and new SHA-1 fingerprint).

tsconfig.msc is missing: a post on the MS blogs suggests that it is only available in the Server editions of Windows.

In gpedit.msc (Group Policy), I found Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security, but I do not know what to put in for "Server Authentication Certificate Template", or if that is even the right setting to manipulate. I just want to specify the specific certificate and private key, such as by SHA-1 fingerprint, or by selecting from a drop-down list. Is this possible?

Windows 7 temporary freezing and showing lots of Error ID 21268 from MOM Agent in the Eventlog

Thu, 22 Oct 2009 22:00:44 Z

I'm using a Lenovo N200 Notebook with Windows 7 ULtimate RTM 09/28/2009 a fresh install. It is added to the office domane and we are using Forefront Client Security. Doing partial teleworking, 4 days each week I'm only connected via VPN with the office domain.
Each day I suffer multipe events, where the only the cursor is following the mouse, but input not wven ctrl-alt-del is ignored. This lasts perhaps 60 seconds. In this time the disk led is on and I hear noise of strong disk activity. The task manager doesn't show unusual activity.

Here is the event log of the last day:

Error    22.10.2009 22:36:42    TFSShellExt    3    None
Error    22.10.2009 22:35:21    Microsoft Operations Manager    26008    None
Error    22.10.2009 22:26:59    TFSShellExt    3    None
Error    22.10.2009 22:25:38    Microsoft Operations Manager    26008    None
Error    22.10.2009 22:15:58    Microsoft Operations Manager    21268    MOM Agent
Error    22.10.2009 20:51:10    TFSShellExt    3    None
Error    22.10.2009 20:49:19    Microsoft Operations Manager    26008    None
Error    22.10.2009 20:40:30    Microsoft Operations Manager    21268    MOM Agent
Error    22.10.2009 20:27:02    Microsoft Operations Manager    26008    None
Error    22.10.2009 20:11:41    Microsoft Operations Manager    21268    MOM Agent
Error    22.10.2009 18:51:06    Microsoft Operations Manager    21268    MOM Agent
Error    22.10.2009 17:30:00    Microsoft Operations Manager    21268    MOM Agent
Error    22.10.2009 16:36:34    TFSShellExt    3    None
Error    22.10.2009 16:35:02    Microsoft Operations Manager    26008    None
Error    22.10.2009 16:15:47    Microsoft Operations Manager    26008    None
Error    22.10.2009 13:06:11    Microsoft Operations Manager    26008    None
Error    22.10.2009 12:02:11    Microsoft Operations Manager    21268    MOM Agent
Error    22.10.2009 10:05:35    Microsoft Operations Manager    21268    MOM Agent
Error    22.10.2009 10:03:05    Microsoft Operations Manager    21268    MOM Agent
Error    22.10.2009 09:24:41    Application Error    1000    (100)
Error    22.10.2009 09:24:41    Microsoft Operations Manager    26008    None
Error    22.10.2009 09:24:38    Microsoft Operations Manager    21268    MOM Agent
Error    22.10.2009 07:19:08    Microsoft Operations Manager    21268    MOM Agent
Error    21.10.2009 21:57:39    Microsoft Operations Manager    26008    None
Error    21.10.2009 20:52:35    Microsoft Operations Manager    21268    MOM Agent
Error    21.10.2009 19:50:35    Microsoft Operations Manager    21268    MOM Agent
Error    21.10.2009 19:10:05    Microsoft Operations Manager    21268    MOM Agent
Error    21.10.2009 18:00:35    Microsoft Operations Manager    21268    MOM Agent
Error    21.10.2009 17:17:35    Microsoft Operations Manager    21268    MOM Agent
Error    21.10.2009 16:16:09    Microsoft Operations Manager    21268    MOM Agent
Error    21.10.2009 13:43:53    Microsoft Operations Manager    21268    MOM Agent

Before I used Windows 7 RC, but update from Vista, meber of the office domane and in the last week I was using Forefront Client Security and I didn't observe this effect.

I informed my system administrator and indicated http://technet.microsoft.com/en-us/library/bb643195.aspx?ppud=4
to him, and we concluded, that the next step had to be some configuration on the server.

Searching Google for ID 21268 indicates that this seems to be rather a singular problem. Its annoying, but not to the degree that it requires an imediate reinstallation.

Any hints to track down and solve this problem are wellcome. This Notebook was preinstalled with Vista witout downgrade option to XP.
Since first public beta I was using Windows 7 and I really like it. Escepially the quick and stable VPN connections.

Nearly all is perfect, but just this issue.

Bernd Kriszio

twitter: bernd_k

Exporting LAN profile XML file

Thu, 26 Nov 2009 23:36:54 Z

Hi All,
In Windows 7 command prompt I am trying to perform the following command:

netsh lan export profile folder=c:\

after the command is performed the Local Area Connection.xml of all interfaces should be exported to my C:\, however, the following error occurs:

Interface: Local Area Connection
Profile File Name: c:\Local Area Connection.xml

Error exporting profile of interface Local Area Connection:
File access is denied.
No profile was exported.

Does anyone know why this is occuring and how the error can be resolved in Windows 7?
I am logged in a workstation administrator with all of the possible rights but for some reason this wont export in Windows 7 but will export successfully with Windows XP SP3

Any help much appreciated.

Thanks.

Windows 7 with print driver installation

Tue, 29 Sep 2009 04:57:49 Z

On an enterprise network I am trying to deploy windows 7 machines. However when a user tries to install a printer it askes for elevated rights and gives an access denied error. Group policy has been set to allow the user to install the printers and currently works for vista machines, just not windows 7. What do I have to do to get this to work?

I have tried the article at http://technet.microsoft.com/en-us/library/cc725938.aspx and http://technet.microsoft.com/en-us/library/cc753269.aspx

Generate Bitlocker recovery password after MDT2010 deployment. (No AD Intergration)

Thu, 26 Nov 2009 21:55:33 Z

Hi There,

Can anyone advise on how to re-generate the creation of Bitlocker recovery Key\Password via a script?

After deploying Windows 7 via MDT, using the built-in BitLocker configuration I am able to configure PIN and TPM, this works fine. But since I don't have the AD schema updates in place yet. I have to opt to not create the recovery password during this phase.

After the build and the drive is fully encrypted and working as expected, you can normally re-generate the keys from the BitLocker menu, but when using MDT you no longer have these options available, you can only change your PIN.

Since there is no menu item, I've been searching for a script to regenerate these keys and save to flash drive, but have been unsuccessful.

Anyone know how I can do this?

I have already tried sing script from techNet (http://gallery.technet.microsoft.com/ScriptCenter/en-us/780d167f-2d57-4eb7-bd18-84c5293d93e3) but even though there is an option to regenerate it tries to intialize it first and fails since BL is already on..

Thanks,

Jtsm

WindowsUpdate_800736B2

Wed, 25 Nov 2009 14:31:27 Z

I get this code when trying to install updates, it has been since june 16th,2009 since all updated were able to install, now none will install

Windows 7 Update Errors - 80072EE2 and 80072F8F

Mon, 13 Jul 2009 20:32:44 Z

Good Morning (Australian Time),

I have attempted unsuccessfully to update my Windows 7 RC1 installation, I will post the full details here....

- Windows 7 RC1 - x64bit
- CPU: Intel Q8200 (Quadcore 2.33ghz)
- RAM: 8gb
- HDD Space: (collectively 4.5tb)

Networking Configuration:
- Primary Gateway: Cisco 2621XM router
- Internal Schema: 10.10.10.x / 255.0.0.0 ip range
- External Schema: ISP DHCP
- Routing Type: NAT (anything from the 10.10.10.x requested an opening will be held open until the requestor closes, otherwise from the outside in there are static rules)

As below, I bypassed the router and got the same two error codes.

Error codes:
80072EE2 - Which apparently is "Update is too busy"
80072F8F - Your clock is wrong

What have I done?
- Tried the post that asked me to reregister all my DLLs with wuauserv, bits and cryptsrv (or similar) shutdown.
- Disabled my router
- Gone directly via 2 ISPs (bypassing routing etc just straight to modem which are in full bridge mode (one's cable one's adsl2)
- Tried ensuring all current files are valid
- Updated my system clock manually and via time.microsoft.com

Any suggestions? I've tried everything.

Jeff

Possible bug: How do you prevent Windows Security from questioning access to .zip files on LAN NAS?

Sun, 26 Jul 2009 16:25:58 Z

I have a drive letter persitently mapped to a NAS server on my home LAN. When I right-click on files with suffix .zip, I get a "Windows Security" dialog warning me that "Opening these files might be harmful to your computer - Your Internet security settings blocked one or more files from being opened. Do you want to open these files anyway?"

First of all, a NAS server on my LAN is NOT on the Internet, so why would "Internet security settings" have anything to do with it? I set "local intranet" security settings to low, but the bogus message still persists. The message is triggered from the file type suffix (.zip) alone, because I created an empty file named foo.zip and that also triggers the message. The trigger is dependent on the file location. If the file is local, there is no message, but the same file on NAS casues the message to be displayed. It is interesting that .tar, .gzip, .7zip and even .exe files do not trigger this message--only .zip files. Is there any way to make this stop?

Lee Cason
Fairfax, VA USA
-----------------------------------------------------------------
OS Name:                   Microsoft Windows 7 Ultimate
OS Version:                6.1.7100 N/A Build 7100
OS Configuration:          Standalone Workstation
OS Build Type:             Multiprocessor Free
Product ID:                00447-321-7001193-70610
Processor(s):              1 Processor(s) Installed.
                           [01]: Intel64 Family 6 Model 23 Stepping 7 GenuineIntel ~1985 Mhz
BIOS Version:              American Megatrends Inc. R01-A1, 1/13/2009
Boot Device:               \Device\HarddiskVolume2
Total Physical Memory:     8,191 MB
Available Physical Memory: 7,003 MB
Network Card(s):           1 NIC(s) Installed.
                           [01]: NVIDIA nForce 10/100/1000 Mbps Ethernet

Can't delete Network Folder using Windows 7 - Works in XP!

Mon, 28 Sep 2009 17:28:39 Z

Hello,

Using my user account I am able to view a series of profiles created when users log in via Citrix. These profiles are on a network share which I access by the UNC path. From time to time when the user is having Citrix issues we rename the users profile so that a new one is created when the user logs in. We then delete the renamed folder after we verify that the issue has been resolved.

Here's the problem: When performing this function from a Windows XP or Windows 2003 machine everything works fine. When trying this from a Windows 7, Vista, or Server 2008 box the deletion fails with the following security error:

You need permission to perform this action

You require permission from Administrators to make changes to the following folder
Application data

The way I see it, this cannot be a permissions issue since the same account is being used in both cases, the only thing that changes is the operating system being used. I suspect this is related to User Account Control settings, however in Windows 7 I have used the slider to try both the highest and lowest security settings with the same error. In almost all cases UAC is turned off entirely on 2008 Server, and Windows 7 - but again I've tried it on and off.

I have tried seizing ownership of the folder and all it's contents and subdirectories, but the deletion still errors out. (But as I said earlier, I still don't think this is the issue). I've also used the run-as command to launch Explorer.exe as the local administrator, however this has not worked either. I've done several searches for this on the Internet and I haven't found anything that really matches this issue. Has anyone seen this before or could you try to suggestion something?

Thanks.