Windows 2008 10 new command line utilities

Posted on January 29th, 2009 in Microsoft, Server 2008 by Gil Kreslavsky
  1. Oclist. When using Server Core , you can use  Oclist to review  installed server rules
  2. Ocsetup. is used to add or remove installed rules for example “start / w ocsetup DHCPServerCore start / w ocsetup DHCPServerCore”
  3. Bcdedit.  Bcdedit, supports a variety of command line parameters. To view the contents of the repository, use the command: “bcdedit / enum bcdedit / enum “
  4. Icacls.  replaces former Cacls and Xacls allows you to view, update and back up  (ACL) for files and directories. The following example illustrates the preservation of access lists (ACL) for the directory C: temp:  “icacls c: temp / save tempacl icacls c: temp / save tempacl”
  5. Mklink. Mklink allows you to create a symbolic link to the file system to redirect all requests on the road.  Symlinks are «transparent» for users, and appear as normal files or directories.  The following example shows how to create a symbolic link to the name «alsotemp» for the directory C: temp: “mklink / d alsotemp c: temp mklink / d alsotemp c: temp “
  6. Robocopy. The Robocopy utility  , is more effective than the standard Windows Copy command and Xcopy, and can resume work after the failures in the network and copy the correct file attributes, alternate data streams, and security systems.  The following example illustrates the use Robocopy to create a «mirror» MyData folder and all subfolders in the shared folder Backups for MyServer:   “robocopy “C: MyData” robocopy “C: MyData”  “MyServerBackups» / MIR / R: 2/NP “MyServerBackups» / MIR / R: 2/NP”
  7. Wbadmin. This command is used to create backup copies of Server 2008 and recovery operations. The following example illustrates the use of Wbadmin to create a full backup system in a shared folder Backups on MyServer:  wbadmin start backup-backuptargetMyServerBackups wbadmin start backup-backuptargetMyServerBackups – AllCritical-vssFull – AllCritical-vssFull”
  8. WinRS.  allows you to open a secure window commands the remote host.  All communication between the client and the site is encrypted using a Kerberos key or NT LAN Manager (NTLM).. The following example illustrates the connection to the server MyServer and run shell: winrs-r: MyServer cmd winrs-r: MyServer cmd “
  9. Appcmd.is a new command line utility, it’s located at% WinDir% System32InetSrv. Appcmd is used for viewing, creating and setting properties of the server Microsoft IIS 7.0, Web-sites and application pools.  To view a list of all nodes in the system, you can use the following command: “appcmd list sites appcmd list sites “
  10. ServerManagerCmd. Without a doubt, the most wonderful tool in Server 2008  is ServerManagerCmd.exe, which is controlled from a command-line version of the new Server Manager.   In fact, this option allows you to specify a scenario, when all actions are performed by the dispatcher server. To view a list of all the established roles and functions in Server 2008, you can use the following command: “servermanagercmd.exe-query servermanagercmd.exe-query”

Windows 2008 Configure DNS via CLI – dnscmd switches

Posted on January 29th, 2009 in Microsoft, Server 2008 by Gil Kreslavsky

Function

DNSCMD option

Example

Comments

Do any dnscmd command on a remote system

dnscmd servername command

dnscmd main.bigfirm.com / zoneprint bigfirm.com

Create a primary zone

dnscmd / zoneadd zonename /primary

dnscmd / zoneadd bigfirm.com /primary

Create a secondary zone

dnscmd / zoneadd zonename /secondary master IP address

dnscmd / zoneadd bigfirm.com /secondary 192.168.1.1

Host a zone on a server based on an existing (perhaps restored) zone file

dnscmd / zoneadd zonename /primary /file filename /load

dnscmd / zoneadd bigfirm.com /primary /file bigfirm.com.dns /load

Delete a zone from a server

dnscmd / zonedelete zonename [/f]

dnscmd / zonedelete bigfirm.com /f

(without the /f, dnscmd asks you if you really want to delete the zone)

Show all of the zones on a DNS server

dnscmd / enumzones

dnscmd / enumzones

Dump (almost) all of the records in a zone

dnscmd / zoneprint zonename

dnscmd / zoneprint bigfirm.com

Doesn’t show glue records.

Add an A record to a zone

dnscmd / recordadd zonename hostname A ipaddress

dnscmd / recordadd bigfirm.com mypc A 192.168.1.33

Add an NS record to a zone

dnscmd / recordadd zonename @ NS servername

dnscmd / recordadd bigfirm.com @  A dns3.bigfirm.com

Delegate a new child domain, naming its first DNS server

dnscmd / recordadd zonename childname NS dnsservername

dnscmd / recordadd bigfirm.com test NS main.bigfirm.com

This would create the “test.bigfirm.com” DNS child domain unter the bigfirm.com DNS domain

Add an MX record to a zone

dnscmd / recordadd zonename @ MX priority servername

dnscmd / recordadd bigfirm.com @ MX 10 mail.bigfirm.com

Add a PTR record to a reverse lookup zone

dnscmd / recordadd zonename lowIP PTR FQDN

dnscmd / recordadd 1.168.192.in-addr.arpa 3 A pc1.bigfirm.com

This is the PTR record for a system with IP address 192.168.1.3

Modify a zone’s SOA record

dnscmd / recordadd zonename @ SOA primaryDNSservername responsibleemailipaddress serialnumber refreshinterval retryinterval expireinterval defaultTTL

dnscmd / recordadd bigfirm.com @ SOA winserver.bigfirm.com mark.bigfirm.com 41 1800 60 2592000 7200

Ignores the serial number if it’s not greater than the current serial number

Delete a resource record

dnscmd / recorddelete zonename recordinfo [/f]

dnscmd / recorddelete bigfirm.com @ NS main.bigfirm.com /f

Again, “/f” means “don’t annoy me with a confirmation request, just do it.”

Create a resource record and incorporate a nonstandard TTL

dnscmd / recordadd zonename leftmostpartofrecord TTL restofrecord

dnscmd / recordadd bigfirm.com pc34 3200 A 192.168.1.4

Reload a zone from its zone file in \windows\system32\ dns

dnscmd / zonereload zonename

dnscmd / zonereload bigfirm.com

Really only useful on primary DNS servers

Force DNS server to flush DNS data to zone file

dnscmd / zonewriteback zonename

dnscmd / zonewriteback bigfirm.com

Tell a primary whom to allow zone transfers to

dnscmd / zoneresetsecondaries zonename / nonsecure|securens

dnscmd / zoneresetsecondaries bigfirm.com / nonsecure

That example says to allow anyone who asks to get a zone transfer

Enable/disable DNS NOTIFY

dnscmd / zoneresetsecondaries zonename /notify|/ nonotify

dnscmd / zoneresetsecondaries bigfirm.com / nonotify

Example disables DNS notification, which is contrary to the default settings.

Tell a secondary DNS server to request any updates from the primary

dnscmd / zonerefresh zonename

dnscmd / zonerefresh bigfirm.com

Enable or disable dynamic DNS on a zone

dnscmd / config zonename / allowupdate 1|0

1 enables, 0 disables, 0 is default

Stop the DNS service

Either net stop dns or sc stop dns

(No dnscmd command for this)

Start the DNS service

Either net start dns or sc start dns

(No dnscmd command for this)

Install the DNS service on a 2008 full install system

servermanagercmd -install dns

Install the DNS service on a 2008 Server Core system

ocsetup DNS-Server-Core-Role

Case matters — ocsetup dns -server-core-role would fail

Uninstall the DNS service on a 2008 Server full install system

servermanagercmd -remove dns

Uninstall the DNS service on a 2008 Server Core system

ocsetup /uninstall DNS-Server-Core-Role

Windows 2008 Active Directory features poster

Posted on January 29th, 2009 in Active Directory, Guides, Microsoft, Server 2008 by Gil Kreslavsky

I realy recomend download and print that.

The poster can be very useful when troubleshooting AD issues.

MMC Shortcuts – Management Tools

Posted on January 29th, 2009 in Microsoft, Server 2003, Server 2008, Vista, Windows XP by Gil Kreslavsky

adsiedit.msc ADSI Edit
sidewalk.msc SID Security Manager
certmgr.msc Certificates
ciadv.msc Indexing Service
compmgmt.msc Computer Management
devmgmt.msc Device Manager
dfrg.msc Disk Defragmenter
diskmgmt.msc Disk Management
eventvwr.msc Event Viewer
fsmgmt.msc Shared Folders
gpedit.msc Group Policy
lusrmgr.msc Local Users and Groups
ntmsmgr.msc Removable Storage
ntmsoprq.msc Removable Storage Operator Requests
perfmon.msc Performance
rsop.msc Resultant Set of Policy
secpol.msc Local Security Settings
services.msc Services
wmimgmt.msc Windows Management Infrastructure (WMI)
comexp.msc Component Services

Windows Control Panel Applets

Posted on January 29th, 2009 in Microsoft, Server 2003, Server 2008, Vista, Windows XP by Gil Kreslavsky

access.cpl Accessibility Options
appwiz.cpl Add or Remove Programs
desk.cpl Display Properties
hdwwiz.cpl Add Hardware Wizard
inetcpl.cpl Internet Properties
intl.cpl Regional and Language Options
joy.cpl Game Controllers
main.cpl Mouse Properties
mmsys.cpl Sounds and Audio Devices Properties
ncpa.cpl Network Connections
nusrmgr.cpl User Accounts
nwc.cpl Gateway Services for NetWare Properties
odbccp.cpl ODBC Data Source Administrator
powercfg.cpl Power Options Properties
s32lucp1.cpl Norton Live Update Properties (if using Norton Antivirus)
sysdm.cpl System Properties
telephon.cpl Phone and Modem Options
timedate.cpl Date and Time Properties
sapi.cpl Speech Properties
irprops.cpl Infrared Properties
mlcfg32.cpl Mail Setup (only with Office)

Windows programs shortcuts

Posted on January 29th, 2009 in Microsoft, Server 2003, Server 2008, Vista, Windows XP by Gil Kreslavsky

You can use windows program shortcuts via Run or add the shortcuts to scripts.

Character Map = charmap
DirectX diagnosis = dxdiag
Object Packager = packager
System Monitor = perfmon
Program Manager = progman
Remote Access phone book = rasphone
Registry Editor = regedt32
File siganture verification tool = sigverif
Volume Contro = sndvol32
System Configuration Editor = sysedit
Syskey = syskey
Microsoft Telnet Client = telnet

Windows Vista networking

Posted on January 28th, 2009 in Microsoft, Vista by Gil Kreslavsky
  • Network and Sharing Center: In previous versions of Windows, there wasn’t a
    single place to go to view, configure, and troubleshoot networking issues. Windows
    Vista changes that with the new Network and Sharing Center, which provides
    access to new and improved tools that take the guesswork out of networking.
  • Seamless network connections: In Windows XP, unconnected wired and wireless
    network connections would leave ugly red icons in your system tray, and creating
    new connections was confusing and painful. In Vista, secure networks connect
    automatically and an improved Connect To option in the Start Menu provides an
    obvious jumping-off point for connecting to new networks.
  • Network Explorer: The old My Network Places explorer from previous versions
    of Windows has been replaced and upgraded significantly with the new Network
    Explorer. This handy interface now supports access to all of the computers, devices,
    and printers found on your connected networks, instead of just showing network
    shares, as XP did. You can even access network-connected media players, video
    game consoles, and other connected device types from this interface.
  • Network Map: If you are in an environment with multiple networks and network
    types, it can be confusing to know how your PC is connected to the Internet
    and other devices, an issue that is particularly important to understand when
    troubleshooting. Vista’s new Network Map details these connections in a friendly
    graphical way, eliminating guesswork.
  • Network Setup Wizard: If you’re unsure how to create even the simplest of home
    networks, fear not: Windows Vista’s improved Network Setup Wizard makes it easier
    than ever thanks to integration with Windows Rally (formerly Windows Connect Now)
    technologies, which can be used to autoconfigure network settings on PCs and compatible
    devices. This wizard also makes it easy to configure folder sharing (for sharing
    documents, music, photos, and other files between PCs) and printer sharing.
  • Folder and printer sharing: The model for manually sharing folders between
    PCs has changed dramatically in Windows Vista, but Microsoft has intriguingly
    retained an alternate interface that will be familiar to those who are adept at
    setting up sharing on XP-based machines. I’ll show you why this type of folder
    sharing is, in fact, easier to set up than Vista’s new method. Printer sharing,
    meanwhile, works mostly like it did in XP.

Vista Low Level Security Features

Posted on January 28th, 2009 in Microsoft, Security, Vista by Gil Kreslavsky

Windows Vista includes a vast array of low-level security features. One of the most dramatic
is service hardening. Because of the modular architecture of Windows Vista, the
system has been created in such a way that the components that make up the system are
as isolated from and independent of each other as possible.
Furthermore, Microsoft has gone over each of these components to ensure that they are
running under the lowest possible security privileges. This protection extends to the
system services that run silently in the background.
There’s also a new feature called Address Space Layout Randomization (ASLR) that randomly
loads key system files in memory, making them harder to attack remotely. This is
a security technique that’s been employed by UNIX-based systems for some time.
While none of these features are particularly configurable, it’s fair to say that Windows
Vista is the most secure Windows version ever made, thanks to the sum of these and many
other security enhancements.

Vista Internet Explorer 7 Security Features

Posted on January 28th, 2009 in Browsers, Microsoft, Vista by Gil Kreslavsky

Internet Explorer 7

The version of Internet Explorer 7 packaged with Windows Vista includes a number of
advanced security technologies that make this the safest version of IE yet. In this section
you’ll examine the many security features Microsoft added to Internet Explorer 7. These
features were absolutely necessary: Ever since Microsoft integrated Internet Explorer with
the Windows shell beginning in the mid 1990s, Internet Explorer has been a major avenue
of attack against Windows. With Windows Vista, finally, Microsoft has decoupled IE from
the Windows shell and introduced advanced security controls that make IE safer.

ActiveX Opt-In

Initially developed as a lightweight version of COM (Component Object Model)—
executable code modules designed to be small and fast enough to work over the Internet—
Microsoft’s ActiveX technology has been maligned by security experts as being one of the
most insecure technologies created in the past 20 years. ActiveX controls litter literally
every Windows system in existence, and hundreds of thousands of them are available
online. Unfortunately, some of the controls—which can take various forms, such as browser
helper objects, toolbars, and so on—are malicious and designed to hurt PCs.
In previous Internet Explorer versions, Microsoft didn’t differentiate between ActiveX
controls that were designed expressly for the Web—such as the Adobe Reader add-on—
and those that were designed to be used locally on the PC only (Microsoft still includes
many such controls with Windows). With Internet Explorer 7, a new feature called ActiveX
Opt-In automatically disables entire classes of ActiveX controls, including those that were
not designed specifically for use over the Internet. Now, when you visit a Web page that
tries to activate an ActiveX control on your system, the Internet Explorer 7 Information
Bar prompts you so you can decide whether or not to proceed, as shown in Figure 8-9.
If you know a particular control is safe, the Information Bar lets you enable the control
and proceed.

Protected Mode

Available only in Windows Vista, Internet Explorer Protected Mode ensures that Internet
Explorer 7 runs with even lower security privileges than a standard user account. This is a
huge improvement over the way IE 7 works in, say, Windows XP. On that system, IE runs
in the context of the user account of the current user, which is typically an administratorclass
account with wide-open access to everything on the system. In Windows Vista, IE 7
always runs in a special low-privilege mode that is below that of both administrators and
standard users; and it does so regardless of what kind of user is currently logged on.
This important feature ensures that automated electronic attacks cannot succeed against
Internet Explorer 7, and because the browser is restricted from accessing any part of
the user’s hard drive other than the Temporary Internet Files folder, Internet Explorer is
effectively sandboxed from the rest of Vista. As a result, should an attack succeed somehow,
any malicious code that is injected into the system will find itself in a location that
is isolated from the rest of the file system. Furthermore, the code will simply be deleted
when Vista reboots. IE is significantly safer than it used to be.

Fix Settings for Me

In the past, it was sometimes necessary to temporarily change Internet Explorer’s security
settings in order to run a certain Web application or access certain online features;
but once you did that, it was hard to figure out what you needed to do to restore Internet
Explorer back to its default state. If you are forced to change Internet Explorer 7’s security
settings in a way that lowers Vista’s security prowess, the browser will begin prompting
you with its Information Bar. Then you can access a simple new feature called Fix Settings
for Me to return IE to its default security settings.
Shown in Figure 8-11, this feature simply requires you to click the Information Bar and
select Fix Settings for Me. You’ll be prompted with a confirmation dialog box, and Internet
Explorer reverts to its default settings. It’s easy and effective.

Phishing Filter

Internet Explorer 7 includes an integrated Phishing Filter that can help prevent you from
being a victim of identity theft. These so-called phishing attacks are described in Chapter
20 because this type of attack is most commonly launched via an e-mail solution.

Delete Browsing History

In previous Internet Explorer versions it was difficult to delete various data related to
Web browsing, such as temporary Internet files, cookies, Web history, saved form data, or
saved passwords. In IE 7 all of this information can be deleted from a single dialog, either
individually or all at once.  Delete Browsing History is available
from the Tools button in the IE command bar.

Other Internet Explorer Security Features

The list of Internet Explorer 7 security features is vast, although you won’t likely run into
most of them unless you’re truly unlucky. IE 7 integrates with Windows Defender to provide
live scanning of Web downloads to ensure that you’re not infecting your system with
spyware, and it integrates with Vista’s parental controls (see Chapter 9) to ensure that
your children are accessing only those parts of the Web you deem safe. IE 7 also provides
International Domain Name (IDN) support so that hackers can’t construct malicious Web
sites that mix character sets in order to fool unsuspecting users. In addition, various lowlevel
changes prevent cross-domain or cross-window scripting attacks.

How To Free BlackBerry Memory

Posted on January 21st, 2009 in Black Berry, BlackBerry Device by Gil Kreslavsky

They are certain ways to clean BB memory and I’ll describe few of them here.

Method 1 is to delete unused languages ( frees the most amount of space, up to 13 mb)

  • Scroll to and select the Settings icon.
  • Select the Options icon.
  • Select Advanced Options.
  • Select Applications.
  • Scroll to and highlight each of the unused languages under the Input Support and Language and Input Support subheadings.
  • Press the Menu key.
  • Select Delete.
  • When prompted to Restart select No until all unused languages are deleted.
  • Reset the BlackBerry Device.
  • NOTE:The same task can be performed via BB instalation wizzard.


Method 2 is to delete sample video 2.2mb

  • Scroll to and select the Settings icon.
  • Select the Options icon.
  • Select Advanced Options.
  • Select Applications.
  • Scroll to and highlight “Blackberry Sample Video”.
  • Press the Menu key.
  • Select Delete.
  • When prompted to Restart select Yes.
  • Reset the BlackBerry Device.


Method 3 is to reduce memory alocated to media

  • Scroll to Media icon and select it.
  • Navigate to  Pictures .
  • Select the Device Memory.
  • Press on Menu key, select Options.
  • Change the Device Memory Limit to 12MB.
  • Press the Menu key, and select Save.
  • Reset the BlackBerry Device.

Method 4 is to reduce Calendar Appointments range to 60 days or less

  • Scroll to calendar item and select it.
  • Presson the Menu key, than select Options.
  • Scroll to  Keep Appointments and select it.
  • Select the desired amount of time to keep appointments – 30 for example.
  • Press on the Menu key and select Save.
  • Reset the BlackBerry Device.

Method 5 is to reduce the amount of time messages are kept on the BB device.

  • Scroll to  Messages icon and select it.
  • Press the Menu key, and select Options.
  • Navigate to  General Options.
  • Scroll  Keep Messages and select it.
  • Select the desired amount of time to keep appointments.
  • Press on the Menu key, and select Save.
  • Reset the BlackBerry Device.

Method 6 is to BB Browser Clear Cache and Cookies

  • Scroll to  Browser or Media Net icon and select it.
  • Press the Menu key.
  • Select Options.
  • Select Cache Operations.
  • Select Clear History.
  • Reset the BlackBerry Device.


Next Page »