Archive - October 2013

"Know that there is something inside you greater than any obstacle." - Christian D. Larson

Index

Return Machine Model 2 Ways
Rename Computer Model Number & Service Tag
Deploy Reg Settings to 64 bit Systems
Install Chrome Extension
Return Username on Remote Machine
Stop and Start the Sql Server Browser
Load Bitlocker Recovery Keys to AD Manually

Import Bitlocker Info into Active Directory
Enabling Bitlocker in a Script - Automated
Cannot Logon onto Computer
Check and Log into Form
Delete all Temps in all Profiles

Δ Thursday, October 31st, 2013

Δ Return Machine Model 2 Ways

This will return the model of a computer. I am using this in conjunction with a computer
naming script to name a computer using this convention: model-service tag.

On error resume next

'PRIMARY MODEL DETECTION
Set objWMI = GetObject("winmgmts:")
Set colSettings = objWMI.ExecQuery("Select * from Win32_ComputerSystem")

For Each objComputer in colSettings
LaptopModel = Trim(objComputer.Model)
Next

Select Case LaptopModel

Case "HP EliteBook 8470p"
'strModel = "8470"

Case "HP EliteBook 8460p"
strModel = "8460"

Case "HP EliteBook 8450p"
strModel = "8450"

Case "HP EliteBook 8440p"
strModel = "8440"

Case "HP EliteBook 6930p"
strModel = "6930"

Case "HP EliteBook 2530p"
strModel = "2530"

Case "HP EliteBook 2540p"
strModel = "2540"

Case "HP Compaq dc7900 Small Form Factor"
strModel = "7900"

Case "HP Compaq 8000 Elite SFF PC"
strModel = "8000"

Case "HP Compaq 8200 Elite SFF PC"
strModel = "8200"

Case "OptiPlex 755"
strModel = "755"

Case "OptiPlex 745"
strModel = "745"

Case "Latitude D630"
strModel = "630"

Case "Latitude D620"
strModel = "620"

Case "Latitude D430"
strModel = "430"

End Select

'SECONDARY MODEL DETECTION
if strModel = "" then
'msgbox "no model was detected"
myLength = Len(LaptopModel)

For i = 1 To myLength
If Asc(Mid(LaptopModel, i, 1)) <> 32 Then
If Asc(Mid(LaptopModel, i, 1)) >= 48 And Asc(Mid(LaptopModel, i, 1)) <= 57 Then
myNumber = myNumber & Mid(LaptopModel, i, 1)
End If
Else
'msgbox("no numeric")
End If
Next
'msgbox(myNumber)
strModel = myNumber
end if

msgbox strModel

Δ [email me]

Δ Tuesday, October 29th, 2013

Δ Rename Computer Model Number & Service Tag

This script allows you to name a computer using the model number and service tag. Just
throw it into your imaging/deployment process, and you can automate the naming portion
of your imaging.

on error resume next

'returns service tag
Dim computername
strComputer = "."

Set objWMIservice = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
set colitems = objWMIservice.ExecQuery("Select * from Win32_BIOS",,48)
For each objitem in colitems
'for testing only
'Wscript.echo "Dell Service Tag: " & objitem.serialnumber
computername = objitem.serialnumber

'returns machine model number only
'PRIMARY MODEL DETECTION
Set objWMI = GetObject("winmgmts:")
Set colSettings = objWMI.ExecQuery("Select * from Win32_ComputerSystem")

For Each objComputer in colSettings
LaptopModel = Trim(objComputer.Model)
Next

Select Case LaptopModel

Case "HP EliteBook 8470p"
strModel = "8470"

Case "HP EliteBook 8460p"
strModel = "8460"

Case "HP EliteBook 8450p"
strModel = "8450"

Case "HP EliteBook 8440p"
strModel = "8440"

Case "HP EliteBook 6930p"
strModel = "6930"

Case "HP EliteBook 2530p"
strModel = "2530"

Case "HP EliteBook 2540p"
strModel = "2540"

Case "HP Compaq dc7900 Small Form Factor"
strModel = "7900"

Case "HP Compaq 8000 Elite SFF PC"
strModel = "8000"

Case "HP Compaq 8200 Elite SFF PC"
strModel = "8200"

Case "OptiPlex 755"
strModel = "755"

Case "OptiPlex 745"
strModel = "745"

Case "Latitude D630"
strModel = "630"

Case "Latitude D620"
strModel = "620"

Case "Latitude D430"
strModel = "430"

End Select

'SECONDARY MODEL DETECTION
if strModel = "" then
'msgbox "no model was detected"
myLength = Len(LaptopModel)

'for testing only
'msgbox strModel

'renames machine with model number - service tag
Set objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")

Set colComputers = objWMIService.ExecQuery ("Select * from Win32_ComputerSystem")

For Each objComputer in colComputers
err = objComputer.Rename(strModel & "-" & computername)
Next

WScript.Quit(0)

Δ [email me]

Δ Friday, October 25th, 2013

Δ Deploy Reg Settings to 64 bit Systems

Wow6432Node and how to Deploy Registry settings to 64 bit systems via Sccm.

Unless your company decided to deploy only 32 bit OS versions, you most probably have encountered some problems trying to figure out where a specific registry entry will end up being written to when you deploy it via Sccm.

If you compare the registry hives of Windows 32 and 64 bits systems, you will easily see that some additional entries are present:

HKLM\SOFTWARE\MYapp (64 bits native app)

HKLM\SOFTWARE\Wow6432Node\Myapp (32 bits ‘Redirected’ App)

So, let’s deploy a reg key in HKLM\SOFTWARE\MYapp on a 64 bits System. A common program would be REG ADD HKLM\SOFTWARE\MYapp

When you run this via the command line, it writes at the expected location. But when you try to run this same command via SCCM, it writes it under the Wow6432Node hive…!

The issue is the client is a 32bits application that will be redirected to the Wow6432Node by the OS.

Here is a list of examples and workarounds. I use always the same key, as well as a reg file in the following format for application with import tools.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\MYapp]

1. You apply the changes from the command line (without SCCM Client)

The following commands will write to the 64 bits hive [HKLM\SOFTWARE\MYapp]

REG ADD HKLM\SOFTWARE\MYapp

REG ADD HKLM\SOFTWARE\MYapp /reg:64

C:\Windows\System32\REG ADD HKLM\SOFTWARE\MYapp

C:\Windows\System32\REG ADD HKLM\SOFTWARE\MYapp /reg:64

REGEDIT /s MYapp.reg

C:\Windows\REGEDIT /s MYapp.reg

The following commands will write to the 32 bits redirected hive [HKLM\SOFTWARE\Wow6432Node\MYapp]

REG ADD HKLM\SOFTWARE\MYapp /reg:32

C:\Windows\System32\REG ADD HKLM\SOFTWARE\MYapp /reg:32

C:\Windows\Syswow64\regedit /s MYapp.reg

2. You apply the changes via a SCCM Package (32 bits SCCM Client on 64 Bits Operating System)

The following commands will write to the 64 bits hive [HKLM\SOFTWARE\MYapp]

REG ADD HKLM\SOFTWARE\MYapp /reg:64

The following commands will write to the 32 bits redirected hive [HKLM\SOFTWARE\Wow6432Node\MYapp]

REG ADD HKLM\SOFTWARE\MYapp

REG ADD HKLM\SOFTWARE\MYapp /reg:32

C:\Windows\System32\REG ADD HKLM\SOFTWARE\MYapp

C:\Windows\Syswow64\REG ADD HKLM\SOFTWARE\MYapp

REGEDIT /s MYapp.reg

C:\Windows\REGEDIT /s MYapp.reg

C:\Windows\Syswow64\REGEDIT /s MYapp.reg

3. You apply the changes via a SCCM Task Sequence

The following commands will write to the 64 bits hive [HKLM\SOFTWARE\MYapp]

REG ADD HKLM\SOFTWARE\MYapp Only When checkbox ‘Disable 64-bit file system redirection is CHECKED

C:\Windows\REGEDIT /s MYapp.reg Only When checkbox ‘Disable 64-bit file system redirection is CHECKED

The following commands will write to the 32 bits redirected hive [HKLM\SOFTWARE\Wow6432Node\MYapp]

REG ADD HKLM\SOFTWARE\MYapp Only When checkbox ‘Disable 64-bit file system redirection is UNCHECKED

C:\Windows\REGEDIT /s MYapp.reg Only When checkbox ‘Disable 64-bit file system redirection is UNCHECKED

4. You apply the changes via a MSI packaged Application

When using MSI, the path that will be used is set at the Component level.

If you set the property of the component ’64-bit’ to YES it will write to the 64 bit path, otherwise it will be redirected.

Note that when using SCCM to deploy MSI files, there is no side effect so the same applies.

Δ [email me]

Δ Wednesday, October 23rd, 2013

Δ Install Chrome Extension

There are 2 methods you can use when installing a Chrome Extension.

Using the Windows registry
1.Make the .crx extension file available to the machine you want to install the extension on. (Copy it to a local directory or to a network share — for example, \\server\share\extension.crx.)
2.Find or create the following key in the registry:•32-bit Windows: HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions
•64-bit Windows: HKEY_LOCAL_MACHINE\Software\Wow6432Node\Google\Chrome\Extensions

3.Create a new key (folder) under the Extensions key with the same name as the ID of your extension (for example, aaaaaaaaaabbbbbbbbbbcccccccccc).
4.Create two string values (REG_SZ) named "path" and "version", and set them to the extension's location and version. For example:•path: \\server\share\extension.crx
•version: 1.0

5.Launch the browser and go to chrome://extensions; you should see the extension listed.

Using a preferences file

Windows note: Until bug 41902 is fixed, you might want to use the Windows registry instead of the preferences file.

Note: Previous versions of Google Chrome used an external_extensions.json file to specify which extensions to install. This file has been deprecated in favor of individual .json files, one per extension.
1.If you are installing from a file, make the .crx extension file available to the machine you want to install the extension on. (Copy it to a local directory or to a network share for example, \\server\share\extension.crx or /home/share/extension.crx.)
2.Create a file with the following name in one of the folders listed below: aaaaaaaaaabbbbbbbbbbcccccccccc.json where the file name (without the extension) corresponds to your extension's ID. The location depends on the operating system.
Windows:chrome_root\Application\chrome_version\Extensions\  Example: c:\Users\Me\AppData\Local\Google\Chrome\Application\6.0.422.0\Extensions\ 
You can also use a reference machine

If all fails, you can just use a reference machine to collect your settings, and then replicate those settings and files through all profiles using this

@rem ----- ExeScript Options End -----
 @echo on
 set CurDir=%CD%
 set _curruser=%%~nu

c:\windows\system32\taskkill.exe /f /im chrome.exe

:::::::::::EXTRACT FILES ::::::::::::
 "%CurDir%\source_files.exe"
 ::::::::::::END EXTRACT::::::::::::::

:::::::::::BEGIN OS CHECK::::::::::::
 ver | find "XP" > nul
 if %ERRORLEVEL% == 0 goto :winxp

ver | find "7600" > nul
 if %ERRORLEVEL% == 0 goto :win7

ver | find "7601" > nul
 if %ERRORLEVEL% == 0 goto :win7

goto :end
 ::::::::::::END OS CHECK:::::::::::::

:winxp
 REM RETURN WINXP USER PROFILES - run routine minus exceptions

rem get user profiles
 for /D %%u in (C:\docume~1\*) do (

rem add exceptions here
 if "%_curruser%" NEQ "administrator" (
 if "%_curruser%" NEQ "All Users" (
 if "%_curruser%" NEQ "Default" (
 if "%_curruser%" NEQ "LocalService" (
 if "%_curruser%" NEQ "NetworkService" (

rem copies all required files
 xcopy "%CurDir%\source_files\*.*" "C:\Documents and Settings\%_curruser%\Local Settings\Application Data\Google\Chrome\User Data\Default\" /s /e /h /c /y

)
 )
 )
 )
 )

)

exit /b 0

:win7
 REM RETURN WIN7 USER PROFILES - run routine minus exceptions

rem get user profiles
 for /D %%u in (C:\Users\*) do (

rem add exceptions here
 if %_curruser% NEQ Public (
 if %_curruser% NEQ Default (

rem copies all required files
 xcopy "%CurDir%\source_files\*.*" "C:\Users\%_curruser%\AppData\Local\Google\Chrome\User Data\Default\" /s /e /h /c /y

)
 )

)

exit /b 0

Δ [email me]

Δ Monday, October 21st, 2013

Δ Return Username on Remote Machine

These scripts should be useful for Helpdesk or other IT Admins to query remote machines to see who is logged on.

Δ [email me]

Δ Friday, October 18th, 2013

Δ Stop and Start the Sql Server Browser

To start the SQL Server Browser service from the command prompt.

Δ [email me]

Δ Thursday, October 17th, 2013

Δ Load Bitlocker Recovery Keys to AD Manually

This is how you load the Bitlocker recovery into active directory manually.

STEP 1: Get the ID for the numerical password protector of the volume, in the example below we are using the C: drive: manage-bde -protectors -get c: Example: Bitlocker Drive Encryption: Configuration Tool version 6.1.7600 Copyright (C) Microsoft Corporation. All rights reserved. Volume C: [Old Win7] All Key Protectors External Key: ID: {F12ADB2E-22D5-4420-980C-851407E9EB30} External Key File Name: F12ADB2E-22D5-4420-980C-851407E9EB30.BEK Numerical Password: ID: {DFB478E6-8B3F-4DCA-9576-C1905B49C71E} Password: 224631-534171-438834-445973-130867-430507-680922-709896 TPM And PIN: ID: {EBAFC4D6-D044-4AFB-84E3-26E435067AA5} In the above result, you would find an ID and Password for Numerical Password protector. STEP 2: Use the numerical password protector’s ID from STEP 1 to backup recovery information to AD In the below command, replace the GUID after the -id with the ID of Numerical Password protector. manage-bde -protectors -adbackup c: -id {DFB478E6-8B3F-4DCA-9576-C1905B49C71E} Bitlocker Drive Encryption: Configuration Tool version 6.1.7600 Copyright (C) Microsoft Corporation. All rights reserved. Recovery information was successfully backed up to Active Directory. You should now be able to view the recovery information for the volume in the active directory. -------------------------------------------------------------------------------------------------------------------------- Reference: http://technet.microsoft.com/en-us/library/cc771778(WS.10).aspx#BKMK_AppendixA

Δ [email me]

Δ Thursday, October 10th, 2013

Δ Import Bitlocker Info into Active Directory

This is a script I wrote to automatically return the numerical password and import the
Bitlocker information into Active Directory. This is especially useful if you implement
Bitlocker on the clients before you setup Active Directory.

Δ [email me]

Δ Wednesday, October 9th, 2013

Δ Enabling Bitlocker in a Script - Automated

How to automate the enabling of Bitlocker. This can be added to your post imaging setup steps.

enableBitLocker.vbs

Δ [email me]

Δ Monday, October 7th, 2013

Δ Cannot Logon onto Computer because the logon method is not allowed

Symptom: When trying to logon a computer using non administrator ID, you may receive
this message: "You cannot log on because the logon method you are using is not allowed
on this computer. Please see you network administrator for more details."

Case 1: Group Policy' "Allow log on locally" was not setup to allow users or domain users. To setup allow users or domain users to logon the computer or domain, you need to add the users or domain users to the "Allow log on locally". Please follow these steps to add the users.

1. Run gpedit.msc. 2. Expand Computer Configuration\Windows Settings\Security Settings\Local Policies 3. Click on User Rights Assignment 4. Ensure that "Allow log on locally" includes Administrators, Backup Operators, Domain Users or Users.

Case 2: Group Policy' "Deny log on locally"  was setup to deny users or domain users. To setup allow users or domain users to logon the computer or domain locally, "Deny log on locally" should be empty or no users or domain users in the list. Please follow these steps to remove the users or domain users from the "Deny log on locally".

1. Run gpedit.msc. 2. Expand Windows Settings\Security Settings\Local Policies 3. Click on User Rights Assignment 4. Ensure that "Deny log on locally" is empty.

Case 3: The local group policy allow user to logon. However, domain group policy which overrides local policy doesn't allow users to logon locally. The resolution is modify the domain policy to allow users to logon locally.

Case 4:  The domain policy allows domain users to logon locally, but the local policy doesn't and the domain policy doesn't apply to the computer. The fix is running gpupdate to force to update the domain policy.

Case 5: Norton Firewall blocks the communication between the client and domain controller. The solution is disabling Norton firewall or re-configuring it to allow to access the domain controller.

Δ [email me]

Δ Thursday, October 3rd, 2013

Δ Check and Log into Form

This allows you to automatically log into a website if it uses a form/pop-up username and password.


Dim IE
 Dim Helem
 on error resume next
 set WshShell = WScript.CreateObject("WScript.Shell")
 Set IE = CreateObject("InternetExplorer.Application")
 IE.Visible = 1
 IE.navigate "THE_WEB_ADDRESS"
 WScript.Sleep 3000
 'WshShell.AppActivate "Windows Security"
 'WScript.Sleep 1000
 'WshShell.SendKeys "{ESC}"
 Set Helem = IE.document.getElementByID("formUsername")
 Helem.Value = "YOURUSERNMAE" ' change this to yours
 Set Helem = IE.document.getElementByID("formPassword")
 Helem.Value = "YOURPASSWORD" ' change this to yours
 Set Helem = IE.document.Forms(0)
 Helem.Submit

Do While (IE.Busy)
 WScript.Sleep 10
 Loop

Dim someElement
 Set someElement = IE.document.getElementByID("someElement")
 If Len(someElement.innerText) > 0 Then
 MsgBox "logged in"
 'WScript.Sleep 2000
 'WshShell.SendKeys "{F5}"
 End If

Δ [email me]

Δ Tuesday, October 1st, 2013

Δ Delete all Temps in all Profiles

This VBScript allows you to clear all temps in all user profiles.


Set objFSO = CreateObject("Scripting.FileSystemObject")
 Set objFolder = objFSO.GetFolder("C:\Users")
 Set colSubfolders = objFolder.Subfolders

On Error Resume Next

For Each objSubfolder in colSubfolders
 '    WScript.Echo "for loop 1"
 WScript.Echo objSubfolder.Name
 Set TempFolder = objFSO.getFolder("c:\Users\" & objSubfolder.Name & "\AppData\Local\Temp")
 For Each objFile In TempFolder.Files
 objFile.Delete
 'WScript.Echo objFile.Path
 Next
 Next

For Each objSubfolder In colSubfolders
 Set TempFolder2 = objFSO.getFolder("c:\Users\" & objSubfolder.Name & "\AppData\Local\Temp")
 For Each objfolder In tempfolder2.SubFolders
 objfso.DeleteFolder objFolder
 Next
 Next

Δ [email me]

About

   I'm a Computer
   Systems Engineer

   Living and Loving Life

Author