Memory Limits for Windows Releases

The following documentation regarding the limit of physical memory for Windows versions:

http://msdn.microsoft.com/en-us/library/aa366778 (v = VS.85). aspx

Wallpaper does not load in Windows 7 via GPO

A known bug in Windows 7 and Windows Server 2008 R2 is for the loading of the wallpaper, when it is configured via GPO.

To solve the problem, we can take the following actions:

• Enter the machine's registry ( http://en.kioskea.net/faq/589-how-to-open-registry )
• Navigate to the following key:
  • HKEY_CURRENT_USER \ Control Panel \ Desktop
• Find the REG_SZ value called Wallpaper
• Change the value with the path where the wallpaper is shared.

You can download a fix that will make the change:

• Fix x86
• Fix x64

If necessary change on multiple workstations, we can effect such change through thePreferences via GPO. As the image below:

If your domain is Windows Server 2003 and either does not support the Preferences feature, you need the distribution via script to make the change key in the registry.

The following example:

Const HKEY_CURRENT_USER = & H80000001

strComputer = "."
Set oReg = GetObject ("winmgmts: {ImpersonationLevel = impersonate}! \ \" & _
strComputer & "\ root \ default: StdRegProv")
strKeyPath = "Control Panel \ Desktop"
strValueName = "Wallpaper"
strValue = "\ \ server \ share \ wallpaper.jpg"
oReg.SetStringValue HKEY_LOCAL_MACHINE, strKeyPath, strValueName, strValue

Libraries and removes the Control Panel icon from the desktop

Personal

This tip can be useful when we set a very restrictive policy in Windows 7 ... .. when we forced the classic theme, the system includes a shortcut on the desktop shell of theLibraries folder and Control Panel. Via GPO until you remove the shortcuts, but it is also remove any link placed on the desktop, even if it is created via logon script ...

The method I found to solve this hurdle, it was deleting the following registry keys:

Remove icon library:

Remove icon in Control Panel:

For those who need to do a VBS for this ... ... follows:

Const HKEY_LOCAL_MACHINE = & H80000002
strComputer = "."
on error resume next
Set oReg = GetObject ("winmgmts: {ImpersonationLevel = impersonate}! \ \" & _
strComputer & "\ root \ default: StdRegProv")
strKeyPath =
strKeyPath =
strKeyPath =
oReg.DeleteKey HKEY_LOCAL_MACHINE, strKeyPath

I hope it's useful!

Windows Server 2008 R2 and Windows 7 Service Pack 1 BETA

 

The betatesters!! Here's a link to download the beta version of Service Pack 1 on Windows Server 2008 R2 and Windows 7 …
http://www.microsofttranslator.com/BV.aspx?ref=BVNav&from=&to=en&a=http%3A%2F%2Ftechnet.microsoft.com%2Fen-us%2Fevalcenter%2Fff183870.aspx

Windows Server 2008 R2 with Windows 7 theme

 

Ladies and gentlemen,

Just to relax a little, I am posting a video, where I show how to enable the theme of Windows 7 on Windows Server 2008 R2. This feature is used so that the terminal Service user, have an experience similar to the Windows environment 7 … requirements:

• Windows Server 2008 R2 
• Video card is configured with the correct driver.

Partitioning disk with GPT

 

Ladies and Gentlemen,

I am posting links to information on the partitioning of GPT disk, much improved and more flexible than our old friend MBR.

Segue link´s: Here's a link's:

http://www.microsoft.com/whdc/device

/storage/GPT_FAQ.mspx

http://en.wikipedia.org/wiki/GUID_Partition_Table

Installing Windows 7 from a Pen-drive

I will show a simple process and pretty cool that is installing Windows 7 through a Pen-drive common…

For the procedures, we will need a pen-drive and DVD install Windows 7 …

Let us prepare the Pen-drive for installation. From the command prompt, you are going to access the application DISKPART to prepare for the partition.

After the opening of the DiskPart prompt, type list disk command to identify the Pen-drive as image below:

Locate the removable disk (in my case, the DISK 1), and then select the same through select disk command <x> (where x is the number of the disk). After the disk check, enter CLEAN command to delete the existing partition on the same …

… now, let's create a primary partition and activate it through the create partition primary command and ACTIVE

We already have the partition created and active, now is the only format … type FORMAT QUICK fs = FAT32, I do quick FAT32 formatting

Our Pen-drive, is now ready, now is the only copy the contents of the DVD to the Pen-drive and bootar the machine by USB. Simple, fast and convenient! rss

I hope that is useful!

Configuring multiple GPO ´ s locations in Windows Vista, Windows, and Windows Server 2008 R2

Ladies and gentlemen, I will show a cool feature we from Windows Vista, which is to create multiple local group policy.

In earlier versions of operating systems (Windows 2000, 2003 and XP) we have only one layer, where we have the local GPO applied to all local users and groups from the machine. With Windows Vista and beyond, we have three layers to work with the local GPO´ s:

1. The first layer, we have a default local GPO, where configure both user configuration options as this computer is applied to all including local administrators.
2. In the second layer, ´ s we GPO that will be applied to users in the Administrators group and GPO ´ s that will be applied to common users. None of these objects local group policy contains settings for your computer.
3. The third layer contains GPO ´ (s) that will be applied to a specific user and those Group Policy objects, we can only user settings.

In case of conflict between the GPO ´ s, the last GPO applied is that prevaleçe and the order in which they are applied is ..... Default (1st local GPO) layer, GPO for administrators and non-administrators (2nd layer) and finally the GPO to specific user (3rd layer)

In the case of a computer in a domain, the GPO ´ s site, domain, and OU GPO will prevail over the ´ s locations. You can also turn off the processing of local GPO ´ s, configuring the option "turn off Local Group Policy objects processing" in "computer Configuration Administrative Templates \System \ policy" in the domain GPO.

To demonstrate how to create and apply these GPO ´ s, I use a computer with Windows 7 installed. The first step is to create a common user as shown in image …

… then we will work with a UserAdmin (local administrator) and UserComum (user). The next step is to create a custom MMC, we need to add a Group Policy object editor "for each GPO created. To do this, click Start , in Search type MMC.exe, and click OK .

In the Console1 window, ', click file, and then click Add or remove snap-in. In the list of available snap-ins, click "Policy object editor" group, and then click Add . Choose the object to the local computer. Click Concluir.

Again, click file, and then click Add or remove snap-in. In the list of available snap-ins, click "Policy object editor" group, click then add and click Browse . Click the tab, users click não-administradores group … click OK and Finish button.

Again, click file, and then click Add or remove snap-in. In the list of available snap-ins, click "Policy object editor" group, click then add and click Browse . Click the tab, users click the Administrators group of … click OK and Finish button.

Do the same procedure by selecting the object UserAdmin …

Click file, click Save and save the MMC with a name of your own …

Now we must set up group policies according to our needs. For example, I will configure common users that will disappear the option menu, all programs "Iniciar… menu

Logging in with a typical user, you can see that the policy was applied to the user.

As an example, administrators set up for a GPO that does not appear Documentos… option

Logging in with a user a member of the Administrators group , the GPO is applied … Note that the option "all programs" appears to the user, because it was not a customized GPO …

… I customize user GPO to the, UserAdmin in this policy I will disable LOGOFF option and purposely create a conflict, contrary to the GPO applied to group Administradores.

Logging with the user, we can see that the Logoff option is disabled and that documents appear to the user, proving the GPO precedence (3rd layer)

If you want to remove the policies, do the same process of adding a new object … click Start , Search type MMC.exe, and click OK then click. file, and then click Add or remove snap-in. In the list of available snap-ins, click "Policy object editor" group, click then add and click Browse . Click the tab users, select the user or group you want to delete the policy, click with the right button and choose the option to remove the GPO, as pictured below …

I hope that is useful!

Enabling and configuring bitlocker to go on Windows 7

Staff, let's talk in this article about "bitlocker to go ", which is the ability to encrypt a removable disk, such as a Pen-drive for example. What is very helpful with respect to information security, it is very easy to lose a pendrive due to its small size, not to mention how this object is susceptible to theft. The feature can be enabled on any computer running Standalone Windows 7 and in an environment in the area where we have workstations running Windows 7 and servers with Windows Server 2008 R2 (configuration through group policies … but that already is another article! RSS) with BitLocker enabled on a removable disk, the same can only be accessed through the typing a password, which is registered at the time of encryption configuration.

To enable the appeal, is quite simple … then right-click on the device and enable the feature, as shown in the image below:

We have the option of configuring access protection through a password or smart card with a … show the example using a password. Register and confirm the same …. click Next

If you forget your password, we can save a recovery password in a file, both when printing the same …

After you choose the method for recovery password storage shall be instituted device encryption. wait until the end of encryption, if you want to modify, copy, or move the removable disk files, click the PAUSE button to freeze the encryption process … so you do not run the risk of damaging the files …

After the device encryption will always be required typing the password to permit access to information …

We can see clearly the device encrypted in "My Computer".

In the case of lost password, we have the option of using a recovery password (same saving and there in the previous steps or …) …

… just digit password and follow the wizard, it will stick so that we can change our access password again.

Using the removable device on other machines, we have access to the files of the Pen-drive via "bitlocker to go reader", which is already contained in encrypted device; that makes it read-only access to data …

As we can see, this is a hands-on resource, fast and very useful!

Configuring BitLocker to go through Group Policy

This article show how to configure BitLocker to go in a domain environment through group policies.

… "BitLocker to go" is a resource that is used to encrypt removable disks (external disks, etc…) pendrive. our pre-requirements for configuring a server running Windows Server R2 DC and clients running Windows 7.

The first step is to create a GPO setting. to this end, we will run the tool "Group Policy Management Console" in "administrative tools." for more information about GPMC: http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

In the container "group policy depended" right click on it, and click New …

A name for the policy object, and then click OK. as the figure below:

…. Editing a GPO, navigate to the \Program Computer Configuration Administrative Templates \Windows Components \ BitLocker Encryption \ Removable date Driver Drives … below, watch the video where I describe each configuration related to BitLocker to go:

<a href="http://video.msn.com/?mkt=pt-BR&amp;playlist=videoByUuids:uuids:90efecf8-da1b-4772-90a3-46a09b26c1b8&amp;showPlaylist=true" target="_new" title="BitLocker to go GPO">Vídeo: BitLocker to go GPO</a>

BUG Windows7 e Windows Server 2008 R2

Staff,

Caution with some bugs disclosed in a French blog concerning SMBv2 Windows 7 and Windows Server 2008 R2 …
link:
http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html