Windows 10 machines with bitlocker on when you didn't enable it (finding the recovery key)

 I had a Lenovo Carbon X1 laptop that was bitlocker encrypted that I did not turn on.  As such, I did not have the recovery key.  I found that when a machine is connected to Azure, the machine auto-encrypts and stores the recovery key in Azure.

I found this information here:
https://hardsoft-support.kayako.com/article/99-windows-10-bitlocker-turns-on-without-a-notice

Short version of the above article:
1) go to https://manage.windowsazure.com/ and log in with your Azure connected email address
2) Go to users and find your device where you *should* see the recovery key.

Remove HP Client Security for Windows 7 to Windows 10 upgradres

I was doing a Windows 7 to Windows 10 upgrade the other day on an HP EliteBook 840 and after a series of failures (error code 0xc1900208 - the eventual solution was to remove HP Client Security.  It's an incompatible app.

Replicating Windows 10 Start Menu layout

I found this great post on how to replicate the Windows 10 Start Menu to other profiles on the same computer.

In brief, run this command from powershell to export the start menu as you've configured it:
Export-Startlayout -path C:\Windows\Temp\SMenu.xml

Then run this command from powershell to apply that layout to all other profiles:
Import-StartLayout -LayoutPath C:\Windows\Temp\SMenu.xml -MountPath $env:SystemDrive\

Creating a new Windows profile on Windows 10 (or Windows 8, Windows 7, or Vista)

This is what I consider best practice for creating a new Windows profile on Windows 10.  Typically, I do this if I think the Windows profile is corrupt in some way and I think a new profile will solve the problem.  All of this assumes that you have the user's log in password.

Step 1: Note the default printer and default browser for the existing profile (or any other things that may be unique to the profile, but those are the two big ones).  You might note which programs have been logged in with credentials you don't have as well - Dropbox, Google Drive, Skype, etc

Step 2: Log in with an account that has local administrator privileges.

Step 3: Edit the registry and go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

Look at the various keys in there and find the one with the value that you want to delete.  For example, in the screen shot below, the value c:\users\dave is in the key that begins with S-1-15-21.  You delete the entire entry that begins with S-1-15-21.

Step 4: Rename the profile that is going to be deleted.  In this example, I'd rename c:\users\dave to c:\users\dave-old

Step 5: Reboot and then log in as the user.  You'll find a brand new profile is created and you can access all the old data in the renamed profile from step 4.

Step 6: Set up the profile as needed including, but not limited to:
1) set up Outlook
2) move back data from old profile to new profile:
 a) desktop
 b) documents
 c) all the other stuff that is in c:\users\%username%
3) set up backup
4) set up VPN
5) add back signature using old sent items

6) add printers (if necessary) and set correct default printer

7) restore browser settings

8) Remind the user that he/she will need to log in to services you don't have the password to (Dropbox, Skype, Google Drive, etc)

Start menu organization in Windows 10

I used to leave the Windows 10 menu alone with all the default bloatware garbage on it, but I've started arranging the menu and putting the critical programs, weather, and news (changed from small to large window size) on the start menu,  I prefer a nicely organizard tile section in my start menu, so why not make it that way for the users?  This is what my typical start menu looks like:

Windows 10 Upgrade tips when the upgrade process fails

My last two Windows 7 to Windows 10 upgrades have not gone smoothly.  In each case, I was running the Windows 10 upgrade for users who use the accessibility features of Windows located here:
https://www.microsoft.com/en-us/accessibility/windows10upgrade

Here are the steps I take if the computer is stuck at 0% installing Windows 10 or stops anywhere before finishing.

1. Create a batch file with the content below and run the file as administrator
2. Update all drivers on the machine - particularly the video card driver
3. Make sure the C drive has at least 40 GB free
4. run "sfc /scannow" from an elevated DOS prompt
5. Remove any third party antivirus
6. Log in as a user with a minimal profile
7. Go to msconfig and under services, hide all Microsoft services and then disable all services (which will leave all MS servers enabled)
8. Remove the computer from the domain and log in with a brand new profile with admin privileges,  

Batch file contents:


net stop wuauserv
net stop bits
net stop cryptsvc
net stop trustedinstaller
sc config cryptsvc start= auto obj= "NT Authority\NetworkService" password= a
sc config wuauserv start= auto obj= LocalSystem
sc config bits start= delayed-auto obj= LocalSystem
Sc config trustedinstaller start= demand obj= LocalSystem
Sc config eventlog start= auto
reg add HKLM\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "%systemroot%\system32\wuaueng.dll" /f
reg add HKLM\SYSTEM\CurrentControlSet\Services\bits\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "%systemroot%\system32\qmgr.dll" /f
reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /f
reg delete HKLM\COMPONENTS\PendingXmlIdentifier /f
reg delete HKLM\COMPONENTS\NextQueueEntryIndex /f
reg delete HKLM\COMPONENTS\AdvancedInstallersNeedResolving /f
sc sdset wuauserv D:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)
sc sdset bits D:(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;SAFA;WDWO;;;BA)
sc sdset cryptsvc D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
sc sdset trustedinstaller D:(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;SAFA;WDWO;;;BA)
sc sdset eventlog D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;SA;DCRPWPDTCRSDWDWO;;;WD)(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
takeown /f %systemroot%\winsxs\pending.xml
icacls %systemroot%\winsxs\pending.xml /grant Administrators:(F)
icacls %systemroot%\winsxs\pending.xml /grant Administratörer:(F)
del /q %systemroot%\winsxs\pending.xml
ren %systemroot%\System32\Catroot2 oldcatroot2
ren %systemroot%\SoftwareDistribution SoftwareDistribution.old
rename \ProgramData\Microsoft\Network\Downloader Downloader.old
cd /d %windir%\system32
regsvr32.exe atl.dll /s
regsvr32.exe urlmon.dll /s
regsvr32.exe jscript.dll /s
regsvr32.exe vbscript.dll /s
regsvr32.exe scrrun.dll /s
regsvr32.exe msxml3.dll /s
regsvr32.exe msxml6.dll /s
regsvr32.exe actxprxy.dll /s
regsvr32.exe softpub.dll /s
regsvr32.exe wintrust.dll /s
regsvr32.exe dssenh.dll /s
regsvr32.exe rsaenh.dll /s
regsvr32.exe cryptdlg.dll /s
regsvr32.exe oleaut32.dll /s
regsvr32.exe ole32.dll /s
regsvr32.exe shell32.dll /s
regsvr32.exe wuapi.dll /s
regsvr32.exe wuaueng.dll /s
regsvr32.exe wups.dll /s
regsvr32.exe wups2.dll /s
regsvr32.exe qmgrprxy.dll /s
regsvr32.exe wucltux.dll /s
regsvr32.exe wuwebv.dll /s
net start eventlog
net start cryptsvc
net start bits
net start wuauserv
fsutil resource setautoreset true c:\
netsh winhttp reset proxy
bitsadmin /reset /allusers
wuauclt.exe /resetauthorization /detectnow
:MESSAGE
echo+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
echo===========================================================
echo     The commands has been succesfully executed. Hit enter to continue
echo===========================================================
echo+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Pause > Null
:end

Windows 10 Anniversary Update download location

Since it seems to take me 30 seconds to wade through various pages to find the Windows 10 anniversary update, I'm documenting the best link here:

http://go.microsoft.com/fwlink/?LinkID=823759

update rollups for Windows 7 or other OSes (convenience updates)

If (for some reason) Windows update isn't working, which oddly I've seen a couple times in the last week when I needed to update Windows 7 in advance of a Windows 10 update (the checking for updates progress bar just cycles and cycles for hours) . . .

You can install update via a "convenience" update.

As an example, here's a convenience update for convenience update for Windows 7 and Windows 2008:

https://support.microsoft.com/en-us/kb/3125574

Before installing the update, install the April 2015 servicing stack update from here:
https://support.microsoft.com/en-us/kb/3020369

Also - you may need to stop the "Windows Update" service so that the convenience update does not try to check for existing updates since the Windows Update service has already shown instability.

Upgrading to Windows 10 after 7/29/16

There is a workaround to get the Windows 10 upgrade on PCs after Microsoft's 7/29/16 deadline.  Per this article from Howtogeek.com - the upgrade is still available for users who use "assistive technologies."  There is no validation on whether or not the computer uses assistive technologies, so in effect, the upgrade is available to everyone.

For reference, the link to the Windows 10 upgrade is here:

https://www.microsoft.com/en-us/accessibility/windows10upgrade

Using DISM to repair WIndows when sfc /scannow can't repair Windows 10

I have found that sfc /scannow doesn't repair system files on Windows 10 in many cases.  Sfc /scannow will find problems but not repair them.

I have found a fix that won't work for the average user - only sysadmins with access to a Windows 10 ISO.

Here's what I did:

• Downloaded the Windows 10 Pro 64 bit version 1511 ISO from "Microsoft Volume Licensing Service Center" - this 4 GB file will take a while to download
• Mounted the ISO file as d:
• Ran this command from an elevated command prompt:
  DISM /Online /Cleanup-Image /RestoreHealth /source:WIM:d:\Sources\Install.wim:1 /LimitAccess
• Re-ran "sfc /scannow" after the DISM command above finishes

Using Windows 10 search to pull up Outlook emails in the Windows search interface

This post will discuss getting emails to appear in the Windows 10 search interface *if* you are using Start10 or some similar start menu program.

I was working with a user who had Windows 8 and Office 2010 installed.  The user had Start8 installed as the Windows 8 interface stinks.  The user often ran searches via clicking Start and then typing search terms and hitting "See More Results" just like you can/could do in Windows 7.  When clicking "See More Results" - the results included emails from Outlook.  This was the critical behavior we wanted to keep (getting emails in the search results).

You'd get to the needed searches like this:

I upgraded the user's laptop to match our current software setup - Windows 10 and Office 2013.  For this executive user, I also installed Start10 (not part of my standard install).  

The bright side was that the user could still click on "see more results" and get files or emails, but the problem was that the user would double click on the emails and get nothing (no error or ability to see the message).  I'm 95% sure I could have fixed the problem right then and there via deleting the file C:\Program Files\Common Files\System\MSMAPI\1033\MSMAPI32.DLL - but I wasn't sure about that fix until later.  You can delete that MSMAPI32.DLL file with Outlook closed and the file Outlook will recreate the file on next open (credit for that info here).

My assumption was that the indexing was broken.  The search was pulling up indexed results that didn't point to the underlying issue.  I rebuilt the index.  No dice.  Same problem.  I could see the searches, but the user could not double click on the emails and get Outlook to open them.  

I then upgraded to Office (and Outlook 2016) assuming that it was some way in that Windows 10 was having trouble talking to Outlook 2013.  With installation of Outlook 2016, emails would not appear in the "see more results" entries.  I later learned that Microsoft says they have disabled the feature that made Outlook results appear in Windows searches.  Supposedly, MS disabled this feature for both Outlook 2013 and Outlook 2016, but my experience says that Outlook 2013 still works.  

If I could go back in time, I'd reinstall Outlook 2013, but in this case - I uninstalled Outlook 2016 and installed Outlook 2010.  I had to delete the OST and let the OST rebuild.  While I was at it, I rebuilt the index for best info for the user.

Things are great, right?  Not true.  I run a search, and I get emails among the search results, but I get an error of "Either there is no default mail client or the current mail client cannot fulfill the messaging request. Please run Microsoft Outlook and set it as the default mail client."  I tried the MS FixIt and deleting the registry entries for both 32 bit and 64 bit as described in the excellent troubleshooting steps here:

http://www.brighthub.com/computing/windows-platform/articles/66114.aspx

However, no dice.  I also tried to set Outlook as the default program via Set Program Defaults in Windows 10.  No dice.  The eventual fix was to delete C:\Program Files\Common Files\System\MSMAPI\1033\MSMAPI32.DLL with Outlook closed.  Upon Outlook reopen, the file recreated itself (different size and date) and the ability to click on emails found in search was successful.

removing Windows 10 notification

Option 1:
I created a file that will adjust four registry entries to disable the Windows 10 Upgrades here:
http://www.t-solve.com/software/Disable-Win10.reg

Save that file and run it.

Option 2:
Manually make the adjustments below (credit to the resources comes from here):

1. Type regedit in RUN or Start search box and press Enter. It'll open Registry Editor.

2. Now go to following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows

3. Create a new key under Windows key and set its name as GWX

So the final key path would be:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GWX

4. Now select GWX key and in right-side pane create a new DWORD DisableGWX and set its value to 1

---

1. Again in Registry Editor, go to following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows

2. Create a new key under Windows key and set its name as WindowsUpdate

So the final key path would be:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

3. Now select WindowsUpdate key and in right-side pane create a new DWORD DisableOSUpgrade and set its value to 1

---

1. Again in Registry Editor, go to following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\OSUpgrade

2. In right-side pane, look for two DWORDs AllowOSUpgrade and ReservationsAllowed and change their values to 0