Archive

Archive for May, 2012

Microsoft Releases Windows 8 and Server 2012 Previews

May 31, 2012 Leave a comment

Today, Microsoft has released the Windows 8 Release Preview and the Release Candidate of Windows Server 2012. We have already seen developer previews and betas released in the past couple of months for both of these products. The Windows Server 2012 Release Candidate includes a made-over Server Manager and replaces the Start Menu with the new Metro UI. Windows Server 2012 will include new features such as the new Resilient File System for handling heavy-duty data and managing shared storage across machines. Applications that run on Windows Server 2008 and Windows Server 2008 R2 are expected to be compatible with the new version upcoming version.

Changing The Kernel FOG Clients Use For PXE Boot

May 15, 2012 Leave a comment

In the organization I work at, we use a free, open source cloning solution called FOG. FOG is led by The FOG Project Team. FOG ties together a few open-source tools with a php-based web interface. It does not use any boot disks or CDs; everything is done via TFTP and PXE. With fog many device drivers are built into the kernel. Occasionally we will receive a machine to clone that is not compatible with the current FOG kernel we use. Here is how I change the kernel for FOG:

  1. Download the FOG kernel that you need. This SourceForge page contains over sixty different FOG kernels you can use. To know which FOG kernel you need for your hardware, check out the Working Devices page. There you will find an extensive list of computers organized by manufacturer and model along with the appropriate FOG kernel you would need. If you cannot find the kernel you need there, you may need to Google it.
  2. Copy the kernel to the following directory on your FOG server:

    /tftpboot/fog/kernel

  3. Create a symbolic link to the FOG kernel you just downloaded and name it ‘bzImage’

    ln -s Kernel-2.6.33.3.PS bzImage

    Replace Kernel-2.6.33.3.PS with your kernel of choice.

  4. Try imaging a client with the new kernel.

Things to remember:

  •  Make sure the machine is set to PXE boot
  • If you are attempting to perform a full host registration or quick image and the video ‘craps out’, you might still have the correct kernel. Try manually registering the host or deploying the image through the web interface and then look under Task Management > Active Tasks to see if it is cloning.
  • Anytime you need to change the kernel, simply remove the symbolic link bzImage and create a new one pointing to the new kernel.

Transfer or Seize Flexible Single Master Operations (FSMO) Roles

May 10, 2012 1 comment

There are five Flexible Single Master Operations (FSMO) roles for domain controllers. They are:

  1. infrastructure master
  2. naming master
  3. pdc (primary domain controller)
  4. rid master
  5. schema master

To transfer the five Flexible Single Master Operations (FSMO) roles we will use a tool called ntdsutil. NtdsUtil is a Directory Services Management Tool. NtdsUtil performs database maintenance of the Active Directory store, management and control of the Floating Single Master Operations (FSMO), and cleaning up of metadata left behind by abandoned domain controllers. Abandoned domain controllers are those which are removed from the network without being uninstalled properly. For more on NtdsUtil, visit: NtsdUtil

To transfer these roles to a different domain controller:
Logged in as Domain Administrator on the domain controller in which you want to transfer the roles from:

  1. Open a Windows CMD Shell.
  2. Type ‘ntdsutil’ You should be greeted with a “ntdsutil: ” prompt.
  3. Type ‘roles’ You should be greeted with a “fsmo maintenance: ” prompt.
  4. Type ‘connections’ You should be greeted with a “server connections: ” prompt.
  5. Type ‘connect to server <server_name_here>’ where server name is the name of the domain controller you wish to transfer the roles to. You should receive a confirmation stating that it is binding to the domain controller using the credentials of the locally logged on user.
  6. Type ‘q’ to exit server connections. You should be back to the fsmo maintenance prompt.
  7. Type ‘transfer infrastructure master’
  8. Type ‘transfer naming master’
  9. Type ‘transfer pdc’
  10. Type ‘transfer rid master’
  11. Type ‘transfer schema master’
  12. Type ‘q’ to exit fsmo maintenance
  13. Type ‘q’ to exit ntdsutil.
  14. Type ‘exit’ to close the CMD shell.

If the domain controller is dead you will need to use the command ‘seize’ to take the role back. Example: ‘seize infrastructure master’ and so on for the other four.

Useful Links:

http://support.microsoft.com/kb/255504 (Microsoft Support Article on Transferring or Seizing FSMO Roles)

Removing McAfee VirusScan Enterprise 8.x & McAfee Agent

May 3, 2012 24 comments

The organization I work for uses McAfee VirusScan Enterprise on all machines. You should always try and use Add/Remove Programs (Windows XP) or Programs & Features (Windows 7) first before attempting the solutions below.

Removing VirusScan Enterprise (VSE) 8.x (Assuming traditional uninstall methods above failed!)

**These actions must be performed by a user with Administrator privileges**

Step 1: frminst

  1. Click Start, Run
  2. Type cmd and press Enter
  3. For 64-bit operating systems, change directory (cd) to C:\Program Files (x86)\McAfee\Common Framework\ or For 32-bit operating systems, change directory (cd) to C:\Program Files\McAfee\Common Framework\
  4. Type frminst.exe /forceuninstall and press Enter

Step 2: msiexec

  1. Click Start, Run.
  2. Type the removal string for your version of VSE, then click OK.

VirusScan Enterprise 8.8
msiexec /x {CE15D1B6-19B6-4D4D-8F43-CF5D2C3356FF} REMOVE=ALL REBOOT=R /q

VirusScan Enterprise 8.7i
msiexec /x {147BCE03-C0F1-4C9F-8157-6A89B6D2D973} REMOVE=ALL REBOOT=R /q

VirusScan Enterprise 8.5i
msiexec.exe /x {35C03C04-3F1F-42C2-A989-A757EE691F65} REMOVE=ALL REBOOT=R /q

VirusScan Enterprise 8.0i
msiexec.exe /x {5DF3D1BB-894E-4DCD-8275-159AC9829B43} REMOVE=ALL REBOOT=R /q

Switches that you can use with msiexec:
/q The quiet switch ensures the removal is done silently – nothing is displayed.
/x This switch will automatically remove an installation.
/i  This switch will communicate via the UI (User Interface) and is used to Repair, Remove, or Modify an installation.
/? This switch provides additional information on all msiexec.exe command switches.

If you were able to uninstall McAfee VirusScan Enterprise (VSE) but not the McAfee Agent because you received an error stating that “McAfee Agent cannot be removed because other products are still using it” or “McAfee Agent cannot be removed while it is in managed mode”, you can follow the steps in Method 2 and when you get to Step 4, instead of /forceuninstall, use /remove=agent

So it would be frminst.exe /remove=agent

Optional Step 3: When I was uninstalling VirusScan Enterprise 8.8, an extra step was involved. It uses another component called Host Intrusion Prevention (HIP). To remove HIP 8.0:

  1. Right-click on the Host Intrusion Prevention (HIP) icon in the taskbar. If you do not see the HIP icon, you may need to restart the machine after completing the first two steps. Then it should appear.
  2. Select disable IPS
  3. Start up an elevated command prompt (Click Start, type cmd, and right click on command prompt and choose Run as Administrator)
  4. Execute: msiexec.exe /x{D2B9C003-A3CD-44A0-9DE5-52FE986C03E5} EPOSPAWNED=True /q /l+*v C:\Windows\Temp\McAfeeLogs\McAfeeHip8_UnInstall.log

This will remove Host Intrusion Prevention. After uninstalling any of the mentioned components, you should restart your computer for all changes to take effect. Be advised that McAfee leaves orphaned files behind in the hard drive and registry. If you want to remove every trace of McAfee, look at the ‘Useful Links’ below and follow the steps for deleting left-over files for the version of VirusScan Enterprise that you removed.

Useful Links:

https://kc.mcafee.com/corporate/index?page=content&id=KB52648 (removing VSE using msexec)
http://www.growse.com/news/comments/want-to-remove-mcafee-virusscan-enterprise-here-s-how/ (backup of article KB52648)
https://community.mcafee.com/thread/30300 (removing mcafee agent)
https://kc.mcafee.com/corporate/index?page=content&id=KB73127 (remove HIP versions 7&8)
https://kc.mcafee.com/corporate/index?page=content&id=KB58597 (deleting left-over files from VirusScan Enterprise 8.0)
https://kc.mcafee.com/corporate/index?page=content&id=KB50602 (deleting left-over files from VirusScan Enterprise 8.5)
https://kc.mcafee.com/corporate/index?page=content&id=KB59996 (deleting left-over files from VirusScan Enterprise 8.7)
https://kc.mcafee.com/corporate/index?page=content&id=KB71179 (deleting left-over files from VirusScan Enterprise 8.8)

HP Service Menu PINs

May 1, 2012 Leave a comment

I recently had to replace the maintenance kit on an HP LaserJet 9050. After replacing all the rollers and fuser, it was time to reset the maintenance count in the Service Menu. The Service Menu is intended for repair technicians and generally includes options like clearing the event log, changing the maintenance count, maintenance interval, and more. Newer HP printer models require entering a PIN code to access the Service Menu. These PIN codes can typically be found in the service manuals of the printer. These manuals, however, are easy to lose and so I thought I would save everyone some Googling and share some common HP printers and their PIN codes.

HP Printer Model                  Service Menu PIN Code

LaserJet 2300                         11230002
LaserJet 2410                         10241004
LaserJet 2420                         10242004
LaserJet 2430                         10243004
Color LaserJet 3000              11300005
Color LaserJet 3500              10350003
Color LaserJet 3550              10350003
Color LaserJet 3600              11360005
Color LaserJet 3700              10370003
Color LaserJet 3800              11380005
LaserJet 4100 MFP                04410002
LaserJet 4101 MFP                04410002
LaserJet 4200                         11420002
LaserJet 4240                         04424005
LaserJet 4250                         09425004
LaserJet 4300                         11430002
LaserJet 4345 MFP                11434504
LaserJet 4350                         09435004
Color LaserJet 4600              04460002
Color LaserJet 4610              05465004
Color LaserJet 4650              05465004
Color LaserJet 4700              09470005
Color LaserJet 4730 MFP     09473005
LaserJet 5200                         05520006
Color LaserJet 5500              04550002
Color LaserJet 5550              09555004
LaserJet 9000                         00900001
Laserjet 9040                         04904005
Laserjet 9050                         09905004
Laserjet 9500                         04950003
LaserJet 9000 MFP               00900001
LaserJet 9040 MFP               11904004
LaserJet 9050 MFP               09905004
Color LaserJet 9500 MFP    04950003
LaserJet cp4005                   10400506
Color laserjet CP3505         06350507
Color laserjet CP4005         10400506
Color laserjet CP6015         03601508
LaserJet M3027                    11303506
LaserJet M3035                    11303506
LaserJet M4345                    11434506
LaserJet M5025                    11503506
LaserJet M5035                    11503506
LaserJet P3005                    10300506
Laserjet P4014                     05401408
Laserjet P4015                     05401508
Laserjet P4515                     05451508