Category Archives: General

Disk Cleanup Is Missing On Windows Server 2008 R2

Windows Server 2008 R2 doesn’t include the Disk Cleanup tool by default.   Either install the Desktop Experience feature, which requires a reboot, or copy

C:\Windows\winsxs\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_6.1.7600.16385_none_c9392808773cd7da\cleanmgr.exe

to

%systemroot%\System32

and

C:\Windows\winsxs\amd64_microsoft-windows-cleanmgr.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b9cb6194b257cc63\cleanmgr.exe.mui

to

%systemroot%\System32\en-US

To start Disk Cleanup type cleanmgr.exe at the command prompt.

Advertisements

Generate Code Signing Certificates Using An Enterprise Certificate Authority

If you’re creating macros in Microsoft Office, or other code that needs to be signed and trusted for internal use, you can easily create code signing certificates using an Enterprise Certificate Authority (ECA).

Log onto the ECA and open Server Manager

Expand Roles -> Active Directory Certificate Services

Navigate to the Certificate Templates section.  In the right hand pane, right click on the Code Signing certificate. choose Properties and click on the Security tab

Add the Read and Enroll permissions for the users that need to be able to generate certificates.

 

In Group Policy, add the ECA server to Trusted Sites in Internet Explorer and enable “Initialize ActiveX unsafe for scripting” for the Trusted Sites zone.  This resolve the “CA must be configured to use HTTPS authentication error.

Navigate to the ECA website address, e.g. http://%ECA_SERVER_NAME%/certsrv/

Choose Request a certificate, then choose the option for and advanced request, followed by Create and submit a request to this CA

Accept any security prompts that follow

From the certificate type drop down choose Code Signing, provide a friendly name and click Submit

Finally, click Install this certificate

The certificate is now installed and ready for use.

 

Scheduled Task To Run A Batch File

I recently ran into a problem where I’d scheduled a batch file to run on a Windows Server 2008 R2 server, task manager reported the task had run, but it hadn’t.

The batch file was in F:\Folder1\ and the scheduled task screen was as below

In order to get the batch file to run, I had to set the Program\script box to contain just the name of the script and place the folder path in the Start in (optional) box

Adobe Reader Enterprise Depolyment

The steps below are the ones I followed to distribute and configure Adobe Reader X in an enterprise environment

  • Download the latest Adobe Reader base release e.g. 10.1.0 as an msi file
  • Download the latest Adobe Reader quarterly update e.g. AdbeRdrUpd1013.msp
  • Place the Adobe Reader msi file and the msp patch file in a folder.  Create an empty file called Setup.ini in the folder containing the msi and msp.
  • Run the Adobe Customization Wizard and load the Adobe Reader msi file.  Choose your installation options, e.g. removing the EULA prompt, disabling updates etc. and save the mst into the folder holding the installation files.
  • Run the command below to silently install Adobe Reader, update it using the msp file and apply the customizations in the mst file.
  • msiexec.exe /i “\\%SERVER%\SoftwareDistribution\Packages\AdobeReader_X\AdbeRdr1010_en_US.msi” PATCH=”\\%SERVER%\SoftwareDistribution\Packages\AdobeReader_X\AdbeRdrUpd1013.msp” TRANSFORMS=”\\%SERVER%\SoftwareDistribution\Packages\AdobeReader_X\Custom_Install.mst” /qn

Hide The “Java Update Available” Popup

If you’ve had enough of the Java Update Available popup, you can remove it by setting the EnableJavaUpdate registry key to 0 and rebooting

32bit Windows

HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy

64bit Windows

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy

 

Pending File Rename Workaround

If you need to install an update or some software, but are told you cannot because of a pending file rename, first of all reboot the PC or server.  If this fails you can force the install by renaming the “PendingFileRenameOperations” registry key at HKLM\SYSTEM\CurrentControlSet\Control\Session Manager.  Just rename the key to something like “PendingFileRenameOperationsOLD” and your update should install.

Service Unavailable In IIS

In IIS 6.0 I created an application pool for a new application and set the identity to a Windows domain account.  When I tried to load the application I was greeted with “Service Unavailable”.  The Windows system event log showed the two messages below:

A failure was encountered while launching the process serving application pool ‘xxx’. The application pool has been disabled.

The identity of application pool ‘xxx’ is invalid, so the World Wide Web Publishing Service can not create a worker process to serve the application pool.  Therefore, the application pool has been disabled.

In order to fix the problem I added the application pool account to the IIS_WPG local group on the web server.