I’m working on a powershell script extracting the file server audit log and creating a human readable html out of it when I got stumbled by the beautiful codes below (which are really hard to find) and decided that they deserve a re-post. Thanks to this guy for translating them. The list below is from WinXP, there are more codes in the newer windows versions, however, these are still valid. Here is the link to the TechNet post. BTW the Resource Hacker still works and you can use it to extract the codes from %windir%\system32\msobjs.dll . Please note that you’ll have to translate them from HEX to decimal to receive the values you got from the… Read More »Microsoft Windows Security Audit Event Accesses IDs
Today I had to do this for an isolated network, it was a great reminder 🙂 https://social.technet.microsoft.com/Forums/windows/en-US/5a69ed0c-2fcf-483c-ab1d-ad5b16fa32ca/isolated-network-without-internet-access-how-do-i-make-the-yellow-no-internet-access-icon-go?forum=w7itpronetworking I had some missing GPO templates (2008 R2 server) which are easily obtained from Microsoft Installation is straight forward and explained under Install Instructions. And yes, you need both policies enabled.
If you are using Windows 10, do yourself a favor and just use this tool http://www.winprivacy.de/english-home/
wmic product get /format:csv > filename_%Computername%.csv
Yesterday I found and tested delprof2 – it works and it’s cool timesaving tool.
If you ever wondered how to log off user remotely (or locally) via command line try this. As usual membership of the local admins group is needed. Start cmd with elevated privileges. check logged user and their session number with qwinsta: QWINSTA /server:computername Memorize the session ID and use the logoff command: LOGOFF sessionID /server:computername.
Installation finished – it was pretty fast, less than 10 minutes on top of my home Hyper-v to the desktop, let’s check the user experience.
VM Specs are pretty standard – in the wizard I selected Generation 2 machine, gave it 2gb of RAM and 60 gb of HDD. To be honest I was impressed that 18 hours after the installation finished Windows 10 expaned on 9.2GB only and didn’t had a single glitch yet.
Windows 8/8.1 let’s you delete all accounts including the administrator one, leaving you only with guest account to log in. Please, don’t do it, however, if you already did there is a easy fix using Safe mode or Repair console (advanced boot options)
If you like me are annoyed from the Skype advertisements during calls just add the following line in your hosts file 127.0.0.1 rad.msn.com