mapping drives with group policy on Server 2008

If you want to map drives using group policy instead of scripts, here is the process. In this example, I have made four separate oragnization units (OUs) in ADUC (active directory users and computers) representing the four offices - NY, DC, Chicago, and SF.

Then you go into group policy management. Expand to forest: domain.local -> domains -> domain.local -> Group Policy Objects. Right click on Group Policy Objects and choose NEW. Give it a name like "map DC drives" and hit OK. Right click on the new group policy object you just created and choose EDIT. Expand User Configuration -> Preferences -> Windows Settings. Right click on Drive Maps and choose New -> Mapped Drive.

Create the drive and location as specified like this.

Still in group policy management , right click on the OU you want to apply the group policy to and click "link to existing GPO." Choose the appropriate group policy.

Now, any users you have in that OU will have that group policy that maps network drives applied to them.

At the end, run "gpupdate /force" from an elevated command prompt.

removing XP Antivirus 2012

I've found XP antivirus 2012 to be easier to remove than most other of the fakealert viruses.

With XP antivirus 2012, you can use control-alt-delete to end task. Then run an rkill. Then run quick malwarebytes scan and remove everything, but don't reboot. Then run a full malwarebytes scan. You may find that the virus restarts even after an rkill after 3 or 4 minutes. Just close the program again and run an rkill and let the quick malwarebytes scan to keep the virus from restarting. Then run the full scan to completely get rid of the virus.

installing quickbooks 2010 Premier on a Win 2008 terminal server (32 bit)

Here's how I installed Quickbooks 2010 Premier on a Windows 2008 terminal server:

run "change user /install"

Install Quickbooks normally

When you first run Quickbooks, it asks you to choose a specific edition, but I got this error:

After some research, I tried solution #2 here:

http://support.quickbooks.intuit.com/support/Articles/SLN40477

This resolved the problem, and I was able to choose a business specific edition.

using combofix in safe mode with command prompt

I was faced with a fakealert virus yesterday that existed in safe mode also, which made cleaning it very difficult. I used the command prompt method I used a couple weeks ago to clean it. Luckily, I was on a network - not sure I would have been able to do this on a stand alone computer. Here were my steps:

[on the virus affected machine]

boot into safe mode with networking

log in as a domain admin

create new local administrator (on the chance that I didn't know the local admin password)

[from another machine in the network that is not infected]

from another machine on the network logged in as a domain admin

go to \\10.0.0.54\c$ (affected computer drive)

create a new folder on the root of C called malware

download newest version of combofix and copy it to \\10.0.0.54\c$\malware

[on the virus affected machine]

reboot into safe mode with command prompt

log in as local administrator

run c:\malware\combofix.exe

You won't be able to install the recovery console, but in the two times I've tried this, it hasn't been a problem.

Google Address Book "Connection to Google is temporarily unavailable"

By default, you get an error about the google address book not being able to sync when you open a Google Apps profile in Outlook. It looks like this:

This is fixed by enabling contact sharing in the Google Apps control panel. I guess this is some kind of global address list from what I'm reading.

Here's how you fix it:

• In the Google Apps control panel, click the Settings tab, then Contacts on the left side
• Select Enable contact sharing.
• Click Save changes.

And when fixed, it should work properly (though I've seen it not work - it makes little sense):

intermittent temporary freezes or pauses on Dell Latitude E4200

I've found some issues with intermittent temporary freezes/pauses on Dell Latitude E4200 laptops. But the hard part is that I've found no rhyme, reason, or consistency for the issue. It's certainly partly hardware related - but how? Here's what I know:

Windows will temporarily freeze every 5 to 10 minutes for 2 to 4 seconds. Keyboard and mouse will be unresponsive and the whole OS seems unresponsive during these short periods.

This problem ONLY happens when docked.

Twice, I have been able to narrow this problem down to hardware. In one case, a locally attached (via USB) Laserjet 2300DN and in another case a Logitech webcam. Once these objects were disconnected, the intermittent freezing stopped.

But I can't narrow it down to specific hardware all the time. For one user, he had nothing but the basics plugged in (USB keyboard, USB mouse, VGA monitor, ethernet). I got a different USB keyboard, USB mouse, and a different monitor (DVI this time). I also updated his BIOS and all other drivers. No effect. The intermittent freezing continued. I've seen this issue before and after the installation of Windows 7 SP 1 and with Symantec Endpoint Protection (separate rant on SEP forthcoming in a future blog post) and with MS Security Essentials.

I'm about to troubleshoot this again on another laptop. Interestingly, I've found this issue on 5 different Latitude E4200 laptops out of about 20 I have in place at various clients. So it's clearly not a universal issue. It's hard to troubleshoot because I have laptops with the exact same configuration not giving the same problem and the problem isn't easy to reproduce. If you have any experience with this issue, please feel free to leave a comment.

EDIT - I have resolved this on two laptops just by updating drivers. From the Dell web site, I updated the BIOS, video driver, mouse driver, and WLAN card driver. I'm not sure which one actually did it, but all the drivers should be up to date anyway.

handling windows restore fakealert virus

Today, I dealt with another one of those fakealert viruses. This one was called windows restore. I had to take a couple minor extra steps. I booted to safe mode with networking. I found that the virus had removed the DNS servers (which had been statically set on this computer). I added those back and was then able to download malwarebytes. One thing that was super weird was that it had hidden all files and folders. I ran start -> run -> iexplore to start IE, but I also unhid all files.

After running malwarebytes and removing the virus, I found that all files were still hidden. I ran this from a DOS prompt to remedy that:

attrib *.* -s -h /s /d

And things were back to normal.

Of course I ran these instructions to clean the virus:

http://t-solve.blogspot.com/2010/11/cleaning-spywaremalware-in-safe-mode.html