Unable to Log You on Because of an Account Restriction

This behavior can occur if the account you are using to connect with has a null (blank) password. You cannot establish Remote Desktop connections when you are using an account with a null password.

You can disable blank password restrictions by using a policy. To locate and change this policy:

1. Click Start, point to Run, type gpedit.msc, and then click OK to start the Group Policy Editor.
2. Open Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Accounts: Limit local account use of blank passwords to console logon only.
3. Double-click Limit local account use of blank passwords to consol logon only.
4. Click Disabled, and then click OK.
5. Quit Group Policy Editor.

http://support.microsoft.com/default.aspx?scid=kb;en-us;303846

Disable USB Removable Mass Storage Device Drive Access in Windows

It’s possible to simply disable USB ports support in PC BIOS in order to prevent and forbid computer user from using USB removable flash drive or mass storage device (portable hard disk drive) to copy and transfer data and files. However, disabling USB ports totally also shutdown the ability for system to use USB based keyboard, mouse, webcam, printer, scanner and etc, which has become a common connectivity norm in modern computer.

As a workaround, use the following registry hack to stop USB Mass Storage Device drivers from starting when the system boots up.

1. Run Registry Editor (regedit).
2. Navigate to the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
3. In the right pane, double click on the Start value name.
4. Change the value data to 4 to disable the removable USB mass storage device drive access.
5. To revert and re-enable the drive access for removable USB mass storage device driver, change back the value data for Start to its original default of 3.

The change will take effect immediately to block any USB mass storage device such as USB flash drive, USB key and portable harddisk from been used in the system, while still allowing hardware components to work properly via USB connection. The hack works in most Windows operating system such as Windows Vista, XP, Windows Server 2008, 2003 and 2000.

For user who dare not to modify the registry manually, simply download the following registration entries file to enable or disable the USB drive. Extract the downloaded content in .ZIP format, and then double click on the .REG file to open and apply or merge the registry values to system.

Download DisableUSBDrive.reg

Download EnableUSBDrive.reg

IntelliAdmin also has a free tool named USB Drive Disabler that automatically change the registry key value accordingly to enable or disable the USB drives on Windows 2000, 2003, 2008, XP and Vista system with just one click. In Windows Vista, the program has to be run as administrator.

Select Disable USB Drives or Enable USB Drivers and then click on Apply to set the registry setting accordingly.

Download IntelliAdmin USB Drive Disabler: DisableUSB_Free.exe

Disable and Stop Restart or Reboot After Installing Windows Update

Set Automatic Updates to “Download updates for me, but let me choose when to install them”. Go to Control Panel > System > Automatic Updates tab.
Disable auto restart for automatic updates in Group Policy..
Disable Permanently – Using Group Policy

1. Head to Start >> Run >> type gpedit.msc >> hit Enter
2. Above step will open group policy editor
3. Now go to Computer Configuration >> Administrative Templates >> Windows Components >> Windows Update
4. On the right hand side pane, double click on No auto-restart with logged on users for scheduled automatic updates installations and enable it

network ok but no internet

OpenDNS servers:
DNS1: 208.67.222.222
DNS2: 208.67.220.220
Turn off your firewall
2) Open your "wireless adapater" properties, make sure your "TCP/IP properties" have "Automatically assigned by DHCP" everywhere
3) If the above steps didn't bring any light, then open "Status" for your "Wireless connection", write down your IP address (the first line), network mask, gateway address and DNS servers addresses
4) Disable your "wireless adapter", open its properties, change "TCP/IP properties" to the written down information, change the places of DNS server with written one, so that DNS1 will be DNS2 and DNS2 will be DNS1
5) Enable your "wireless adapter" and try google
ipconfig /releasel
ipconfig /all
ipconfig /flushdns
ipconfig /renew

netsh int ip set dns

netsh int ip set dns
netsh winsock reset
------ reinstall service pack also

solved: found problem with IPSEC service. after stopping the service internet started working. 

prioritize LAN Connection & Wireless in Windows XP

I would recommend reordering the list of connections you have for
networking, by this I mean, going into

Control Panel

| Network Connections

Click on the “Advanced� menu item

Click “Advanced Settings�

On the “Adapters and Bindings� tab look at the list of connections you have,
if you require you LAN to have priority over you WLAN, then move the LAN
connection to the top and WLAN below using the Green arrows on the right hand
side.

This might help, cant guarantee it but it’s another option to try if the
first suggestion didn’t work.

Could not load file or assembly 'MOM.Implementation' or one of its dependencies.the system cannot find the file specified.

Installing .net framework 2.0
and
in control panel add/remove programs...
uninstalling catalist control center
uninstalling catalist display driver
restart windows

Adobe reader 9 plugin crashes

fix this issue remove the following dll files from the C:\windows\system32:

ace.dll
AGM.dll
BIB.dll
BIBUtils.dll
JP2KLib.dll



FIX: A batch script would be something like this:
move /y %windir%\system32\ace.dll %windir%\system32\ace.dll.old
move /y %windir%\system32\AGM.dll %windir%\system32\AGM.dll.old
move /y %windir%\system32\BIB.dll %windir%\system32\BIB.dll.old
move /y %windir%\system32\BIBUtils.dll %windir%\system32\BIBUtils.dll.old
move /y %windir%\system32\JP2KLib.dll %windir%\system32\JP2KLib.dll.old

download the software from below path 

http://docs.google.com/leaf?id=0B-0arqBLL47NNjJhMjEzMTctNjJhNi00OTcwLWFiOGQtY2Q1YmM5MTEzMTQz&hl=en 

http://forums.adobe.com/thread/391737

Changing Root Password in linux

1. Entering Runlevel 1

Some Linux distribution, such as Ubuntu for instance, offer a specific bootmenu entry where it is stated "Recovery Mode" or "Single-User Mode". If this is your case, selecting this menu entry will boot your machine into single user mode, you can carry on with the next part. If not, you might want to read this part.

Using GRUB, you can manually edit the proposed menu entry at boot time. To do so, when GRUB is presenting the menu list (you might need to press ESC first), follow those instructions:

• use the arrows to select the boot entry you want to modify.
• press e to edit the entry
• use the arrows to go to kernel line
• press e to edit this entry
• at the end of the line add the word single
• press ESC to go back to the parent menu
• press b to boot this kernel

The kernel should be booting as usual (except for the graphical splash screen you might be used to), and you will finally get a root prompt (sh#).

Here we are, we have gained root access to the filesystem, let's finally change the password.

2. Changing Root Password

As root, changing password does not ask for your old password, therefore running the command:

# passwd

That's it, you can now reboot your box and gain root access again

Windows Genuine Advantage Notifications" tool

RemoveWGA enables you to remove the Microsoft "Windows Genuine Advantage Notifications" tool, which is calling home and connect to Microsoft servers every time you boot (pilot version), or every two weeks (current release).

Once the WGA Notification tool has checked your OS and has confirmed you had a legit copy, there is no decent point or reason to check it again and again every boot. Moreover, connecting to Microsoft brings security issue for corporate networks, and privacy issues for everyone. It is also unclear which information are transmitted (Microsoft published an official answer, but an individual study brought some questions). All of that, along the fact that Microsoft used deceptive ways to make you install this tool (it was told you it was an urgent security update, whereas it is a new installation giving you no extra security) makes me calling this tool a spyware.

Also, Windows Genuine Advantage Notifications is different than Windows Genuine Advantage Validation. RemoveWGA only remove the notification part, phoning home, and does not touch the Validation part. As the time I'm writting this, the Validation part is mandatory for some not critical downloads from Microsoft, but the Notification part is not mandatory at all, and you are able to install all of the security updates without installing this one. This may change in the future thought, I don't know what are the Microsoft plans.

Note : once the WGA notification is removed, the Automatic Update will bug you about installing the update again. This is normal, and out of the scope of RemoveWGA (since at this point, the WGA notification is uninstalled from your system). If you are concerned about tweaking Automatic Update to prevent Microsoft trying to push the update on your computer. 

http://www.softpedia.com/get/Tweak/Uninstallers/RemoveWGA.shtml

system standby VS hibernate

system standby is a hardware/software solution where the hardware and software work together to manage the computer's power usage by shutting down some non-critical systems (Fans, drives, peripherals) and throttling back the critical ones (CPU, Network). Hibernation is a Software only solution that basically takes the current snapshot of the system (RAM memory) and writes it to the hard disk then informs the hardware that it should do a complete shutdown. When the hardware is turned back on, the hardware does a full POST (Power On/Self Test) process and then passes off to the software to do a full boot. Since the software wrote a copy of itself to the hard drive it skips it's full boot process and simply loads the system snapshot written to disk back into RAM and the applications that were running generally have no idea they were not running during that period of time the machine was "off". In short, Hibernation was created to give the false impression of quick "boot" times for users who wanted to start up their computers faster.
All of this seems to suggest that Hibernation would save more energy than System Standby. Although more will be said later on with regards to the subject, it is important to understand how modern PC hardware is designed. In the "old" days² the power switch was hardwired to the power supply and when the switch was off then the power supply was off and little³ energy was being consumed. In modern configurations⁴ the power supply is always drawing some energy and supplying the system's motherboard with a trickle current. The motherboard uses this to keep an idea of what state the hardware is in ("on" or "off") and manage the devices accordingly. When a user switches "on" the power button, the motherboard⁵ determines what state it should change to based on rules. In a two state system the most basic is what state is the hardware in now and then change to the opposite state. As such, Hibernation, System Standby and turning a system "off" will result in similar if not the same power draws.

The Remote Simple Mail Transfer Protocol Service Rejected AUTH Negotiation

When users send e-mail to external, remote, or Internet domains, they may receive the following notification from the Postmaster or Administrator of the local Exchange server:

Delivery Status Notification

This is an automatically generated Delivery Status Notification.

THIS IS A WARNING MESSAGE ONLY.

YOU DO NOT NEED TO RESEND YOUR MESSAGE

Delivery to the following recipients has been delayed
someone@example.com

The user may also receive the following message indicating the time expiration of delivery attempts for the message:

Your message did not reach some or all of the intended recipients.

Subject: Sender's subject
Sent: Date and time that the message was sent

The following recipient(s) could not be reached:

someone@example.com on date and time
Could not deliver the message in the time limit specified. Please retry or contact your administrator.
(server.contoso.com #4.4.7)

Back to the top

CAUSE

This behavior may occur if the outbound security of the Simple Mail Transfer Pr...

This behavior may occur if the outbound security of the Simple Mail Transfer Protocol (SMTP) virtual server or the outbound security of one or more SMTP Connectors are set incorrectly.

To verify whether this is the cause:

1. Open Exchange System Manager.
2. Expand Servers, and then expand ServerName.
3. Expand Protocols, and then expand SMTP.
4. Expand Default SMTP Virtual Server, and then expand Queues.

Remote Delivery Queues will be displayed in retry mode (A Blue Arrow).

To view the description of the queues in retry status:

1. Right-click a queue in retry status, and then click Properties.
2. The upper status box should read, "Retry, Remote delivery".
3. The lower box should read, "The remote SMTP service rejected AUTH negotiation".

Back to the top

RESOLUTION

This resolution addresses two types of delivery methods. Using DNS for Deliver...

This resolution addresses two types of delivery methods.

Back to the top

Using DNS for Delivery

By default, Anonymous access is the default setting for sending SMTP mail by using DNS to all Internet domains. To resolve this behavior:

1. Follow these steps to change the SMTP virtual server:
   
   1. Open Exchange System Manager.
   2. Expand ServerName, expand Protocols, and then expand SMTP.
   3. Right-click Default SMTP Virtual Server, and then click Properties
   4. Click the Delivery tab.
   5. Click Outbound Security.
   6. Click to select the Anonymous access option, click OK, and then click OK again.
2. Follow these steps to change the SMTP connector:
   
   1. Locate, and then expand Connectors.
   2. Right-click SMTP Connector, and then click Properties
   3. Click the Advanced tab.
   4. Click the Outbound Security button.
   5. Click to select the Anonymous access option, click OK, and then click OK again.
   6. Close Exchange System Manager.

Back to the top

Forwarding Mail Through a Smart Host

Use an SMTP connector for this type of delivery, and set access control to the requirements of the smart host. For more information about when to use an SMTP Connector, see the "References" section.

1. Use the preceding steps for the SMTP connector.
2. Set the outbound security according to the requirements of the Smart host

http://support.microsoft.com/kb/329636

1.  

4000080 winxp crashes

install latest network drivers

how to kill sessions in exchange 2003

There’re several reasons why you would want to use ExMon in your environment, like mentioned above you can view, evaluate and gather real-time data about your users, which can be quite handy as it will help you as an Exchange Administrator better understand current client usage patterns and plan ahead by being proactive and perform the proper upgrades for the future.
Although ExMon is capable of showing you quite a comprehensive set of information about your users, you should bear in mind the tool at the time of this writing only is capable of showing MAPI traffic and load, not other protocols such as OWA, POP3 and IMAP.

ExMon is capable of showing information such as IP addresses used by clients, Outlook versions and mode (cached mode or classic online mode) , Outlook client-side monitoring data and resource use (CPU usage, Server-side processor latency, total latency for network and processing with Outlook 2003 MAPI clients and network bytes.

Installing Microsoft Exchange Server User Monitor

Start by grabbing a copy of ExMon here.

Note:
ExMon is supported on Exchange 2000 Server SP2 and higher, or Exchange Server 2003 SP1.

Now navigate to C:\Program Files\ExMon and execute ExMon.msi. The ExMon Installation wizard will fire up (see Figure 1) and you can simply click Next.

Figure 1: Executing the ExMon Installation Wizard

Read and accept the agreement and click Next as shown in Figure 2

Figure 2: Reading and accepting the End User Agreement

Now select the Installation folder (default should be just fine) then click Next as in Figure 3.

Figure 3: Specifying the Installation Directory

Let the installation process complete and click Finish.

Figure 4: Finishing the Installation Wizard

Before we can move on and begin playing with the ExMon tool we need to do one more thing, and that is to add two registry keys - RpcEtwTracing and UsePerformanceClock to the registry (see Figure 5). Luckily you don’t have to do this manually as the ExMon installation throws an ExMon.reg file into the installation directory, which you can simply double-click on or run through a command prompt window. It’s mandatory to add these keys in order for ExMon to collect data, and my guess is they will be added automatically as part of the installation wizard in a later ExMon build.

Figure 5: ExMon registry keys

Using ExMon

Now that we got ExMon properly installed let’s fire up the tool by executing the ExMon.exe file from the installation directory (C:\Program Files\ExMon). This will bring us the screen you see in Figure 6 below. As you can see we, when the first update occurs, gets a list of currently connected MAPI clients listed by resource usage.

Figure 6: Tracing MAPI clients in ExMon

As shown in Figure 6 above ExMon by default collects data in one-minute intervals, however this can easily be adjusted by clicking the up and down buttons to the right of Update Interval (min) in the ExMon toolbar. The update interval can be anything between 1 and 30 minutes, if you want it do be more than 30 minutes you should use another data collection method. You can stop or start traces by using the play and stop buttons in the toolbar or alternatively click File > Stop or Start. You can save statistics by clicking the floppy disk icon in the toolbar or File > Save Statistics in the menu.
As you can see in Figure 6 above there are 3 different views to choose between:

View type	Description
By User	Aggregates data about individual user’s consumption of server resources
By Version	Aggregates data about the client MAPI version
By Clientmon	Aggregates data which can help Exchange administrators quantify individual user’s experience with Outlook 2003 (previous Outlook versions is not supported with Clientmon).

Table 1: ExMon View types Note:
Although this article demonstrates how you collect data directly with ExMon (which is the simplest method for short-term data collection) you can as well configure ExMon to collect data with the System Monitor or by using command-line tools. For more details on how this is accomplished see the ExMon documentation located in the ExMon installation directory.

The data collected by ExMon is by default saved in Event Trace Log (.ETL) files in the installation directory (C:\Program Files\ExMon), as can be seen in Figure 7 below.

Figure 7: ExMon Data Collection to Event Trace Log (.ETL) Files

Exporting Data with ExMon

All the data collected by ExMon can be exported to a comma-separated text file (.CSV) which again can be manipulated with a program such as Excel, Access or even SQL Server. This is done by running ExMon in a Command Prompt window with either -SU, -SV or -SC. For example the below command exports the By User data to a .CSV file in a directory named Data under the ExMon installation directory:

ExMon.exe –SU “C:\Program Files\ExMon\data\ByUser.csv”

For further details on exporting ExMon data, again see the ExMon documentation.

The dreaded Unknown StartTrace Error (183) Message

Before you start using the ExMon tool I thought I would tell you about an issue you should be aware of. There have been several cases where different Exchange administrators, when executing ExMon.exe, got an Error 183 message (shown in Figure 8), and actually I also had the pleasure of dealing with it on one of the Exchange 2003 SP1 servers, I’ve been using the tool on (after testing it out in my test lab of course).

Figure 8: Unknown StartTrace Error (183)

The Error 183 message can happen if ExMon crashes or is killed while collecting data, the reason being the Exchange trace continues. Personally I got a bit scared when I saw the trace just continued, but fortunately I later found out it had a limit of 512 MB where the trace will stop collecting automatically. The reason for the 183 error message is quite simple, it’s because when you try to execute ExMon (after a crash or after the process somehow got killed) it will start a new trace, while the old one is still tracing (ExMon only supports one trace at a time).

Alright I don’t want to use this tool unless I know how to fix this problem without rebooting my Exchange production server, I hear you grumble.

I fully understand! I personally had big problems finding out how to stop the Exchange trace, until I was informed of a comment (thanks to Exchange MVP Michael B. Smith) to the ExMon blogpost at You Had Me at EHLO (aka Exchange team blog), where Chris Mitchell (Software Design Engineer from the Microsoft Exchange Performance Engineering Team) did a great comment informing how you can stop a trace using Tracelog.exe which can be found in the Microsoft Driver Development Kit (DDK) for Windows 2000 Server or the Windows Server 2000 Resource Kit. You simply open a command prompt window and execute the following command:

Tracelog -stop “Exchange Event Trace”

Also see Figure 9 below.

Figure 9: Stopping an ExMon trace using Tracelog.exe

Note:
Make sure the ExMon.exe process isn’t running while stopping the trace.

I hoped you found the article useful if you have any questions, comments or other feedbacks please post them to the below thread on the MSExchange.org Message boards:

http://forums.msexchange.org/ultimatebb.cgi?ubb=get_topic;f=15;t=004838
Relevant Reading
Microsoft Exchange User Monitor (ExMon) tool Documentation (a must read which can be found in the ExMon installation folder)
You Had Me At EHLO...: Introducing the Microsoft Exchange User Monitor (Exmon) tool:
http://blogs.technet.com/exchange/archive/2005/04/06/403409.aspx
Download details: Microsoft Exchange Server User Monitor:
http://www.microsoft.com/downloads/details.aspx?FamilyID=9a49c22e-e0c7-4b7c-acef-729d48af7bc9&DisplayLang=en

http://www.msexchange.org/tutorials/Microsoft-Exchange-Server-User-Monitor.html

How to manually remove juniper Network Connect

Knowledge Base ID:	KB9081
Version:	8.0
Published:	08 Oct 2008
Updated:	08 Oct 2008
Categories:	SSL VPN SSL_VPN_(IVE_OS)

Summary:

At times, due to a bad or failed installation, it may be necessary to completely remove Network Connect from the client machine.

Problem or Goal:

If there are installation problems or upgrade issues you can completely remove all the files and folder associated with Network Connect before attempting to reinstall the client.

Solution:

For each operating system, the files and folders that need to removed will be different.  Once these are removed you can restart the Network Connect client installation.
If a folder or file listed below does not exist, move onto the next step.
For Linux:

1. Ensure the Network Connect Service is not running
2. Delete the folder /.juniper_networks/network_connect
3. Delete the following file: /.juniper_networks/ncLinuxApp.jar
4. For 5.2 delete the following folders:
   • /usr/sbin/ncui
   • /usr/sbin/ncsvc
   • /usr/sbin/ncdiag
5. For 5.3 and newer, delete the following folder:
   • /usr/local/nc

For Macintosh:

1. Delete the folder /usr//lib/logs/juniper networks
2. Delete the file Network Connect.app from the /apps folder
3. Empty the Trash

For Windows:

1. Remove Juniper Networks Network Connect from Add/Remove Programs, if it exists
2. Delete the following folders:
   • C:\Program Files\Juniper Networks\Common Files
   • C:\Program Files\Juniper Networks\Network Connect 5.x.x
   • C:\Documents and Settings\\Application Data\Juniper Networks\Network Connect 5.x.x 
   • http://kb.juniper.net/KB9081


ntldr is missing press ctrl+alt+del to restart windows xp

1. insert the Windows XP bootable CD into the computer.
2. When prompted to press any key to boot from the CD, press any key.
3. Once in the Windows XP setup menu press the "R" key to repair Windows.
4. Log into your Windows installation by pressing the "1" key and pressing enter.
5. You will then be prompted for your administrator password, enter that password.
6. Copy the below two files to the root directory of the primary hard disk. In the below example we are copying these files from the CD-ROM drive letter, which in this case is "e." This letter may be different on your computer.
   
   copy e:\i386\ntldr c:\
   copy e:\i386\ntdetect.com c:\
   
   
7. Once both of these files have been successfully copied, remove the CD from the computer and reboot.

not-able-to-open-drives-on-hard-disk-by-double-click

Trouble:
Sometimes it happens in windows XP that you are not able to open drives on your hard disk. When you double clicking on the drives icons or right click on the drive>>explore in My computer ,the drive does not open.
This problem is generally caused by most of the viruses which infect windows XP system. They block or restrict your access to any of the drives.
But don’t worry this is not a big trouble it can be fixed easily.

Fix:
Normally when a virus infects a windows system which causes a drive opening problem, it automatically creates a file named autorun.inf in the root directory of each drive.
This autorun.inf file is a read only ,hidden and a system file and the folder option is also disabled by the virus. This is deliberately done by the virus in order to protect itself.  autorun.inf initiates all the activities that the virus performs when you try to open any drive.
You have to just delete this file and restart your system to correct this problem.
Follow the set of commands below to show and delete the autorun.inf
1. Open Start>>Run and type cmd and press enter. This will open a command prompt window. On this command prompt window type the following steps.
. type cd\ 3. type attrib -r -h -s autorun.inf
4. type del autorun.inf
5. now type d: and press enter for d: drive partition. Now repeat steps 3 and 4. Similarly repeat step 5 for all your hard disk partition.
Restart your system and your trouble will be fixed.

Data Execution Prevention Internet Explorer 8

This article explains how to fix the Data Execution Prevention error that occurs on Internet Explorer 8 and Windows in general. There are many fixes available, most websites only show you one. This website covers all Data Execution Prevention errror fixes.

DEP Error Example

Dep Error In ie8

Fix 1

Step 1 - Go to "Start" and click on "Run". Type the command "inetcpl.cpl" and press Return or click on the "Ok" button.

Step 2 - Navigate to the "Advanced" tab. Inside this tab, scroll down until you find the option "Enable memory protection to help mitigate online attacks*". Untick this option, click "Ok" and restart your internet explorer browser.

Im on Vista or Windows 7 - It wont let me untick this box?

If you have User Account Control turned on this box will be greyed out by default when you enter this window. To get around this, either turn off User Account Control or try the following....

Step 1 - Click on the vista start button. In the search box type "inetcpl.cpl" when the icon appears, right click on it and click "Run as Administrator".

Step 2 - You can now follow the steps explained above to turn off this setting.

Data Execution Prevention Fix 1

Alternative

Fix 2
Step 1 - Go to "Start" then "Run" type "regedit" hit return or press "Ok". This will take you to the registy editor.

Step 2 - Follow the link below to find the key.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main

Step 3 - The key you are looking for is called "DEPOff". Double click this key to modify it, give it the value of "1" (without the quotation marks). Restart your browser and try again.
Data Execution Prevention Fix 2

Other Alternative

Still Doesnt Work?! Fix 3

If these settings still didnt work, then you are using Windows Vista or Windows 7 with User Account Control Turned on!

You can try one more thing, but if it doesnt work, you will need to turn User Account Control off! I will explain how to do that after this, but try this first.

Step 1 - Click "Start" then "Run" > type "sysdm.cpl" and press return, or click "Ok". You will be faced with the system control panel.

Step 2 - Click on the "Advanced" tab. Then click on the "Settings" button for performance.

Step 3 - Click on the "Data Execution Prevention" tab.

Step 4 - Click on the "Add" Button. Browse to your internet explorer .exe file. This is normally found at "c:\program files\internet explorer\iexplore.exe".

Step 5 - Highlight it and click "Ok"

Step 6 - Tick the radio button "Turn on DEP for all programs and services except those I select"

Step 7 - Tick the box next to Internet Explorer.

Step 8 - Restart your Internet Explorer browser. Try again.

See screenshot for more help.

Data Execution Prevention Fix 3

If All Else Fails

Fix 4

This part of the article explains how to turn DEP off even in Windows 7.



This command will turn of DEP in your boot.ini which can be found in the root of c:\

1.Click on Start > Run

2.Type the command "cmd" and hit the return key.

3.Type the following command...

bcdedit.exe /set {current} nx AlwaysOff

This command will ensure that DEP is turned off across the entire computer, try the other work around's first before trying this one. This should fix the problem guaranteed.

You MUST restart your computer once this has been done for changes to take effect.


No Other Options

If all else fails you will need to turn off User Account Control for Vista and Windows 7. And apply fixes shown above.

To do this.

Click on "Start" go to your user settings by clicking on your User image on the start menu. If you have classic view you will need to navigate through Control Panel.

Under computer settings you will see "Turn User Account Control On or Off". Select this option, untick the UAC box or drag the pointer down (Windows 7) and re-start PC.

Disable USB Removable Mass Storage Device Drive Access in Windows

Modify Default Security Policies IN WINDOWS SERVER 2008

Updated: November 19, 2009
Applies To: Windows Server 2008, Windows Server 2008 R2
To increase security, domain controllers that run Windows Server 2008 and Windows Server 2008 R2 require (by default) that all client computers attempting to authenticate to them perform Server Message Block (SMB) packet signing and secure channel signing. If your production environment includes client computers that run platforms that do not support SMB packet signing (for example, Microsoft Windows NT® 4.0 with Service Pack 2 (SP2)) or if it includes client computers that run platforms that do not support secure channel signing (for example, Windows NT 4.0 with Service Pack 3 (SP3)), you might have to modify default security policies to ensure that client computers running older versions of the Windows operating system or non-Microsoft operating systems will be able to access domain resources in the upgraded domain.

Note

By modifying the settings of the default security policies, you are weakening the default security policies in your environment. Therefore, we recommend that you upgrade your Windows–based client computers as soon as possible. After all client computers in your environment are running versions of Windows that support SMB packet signing and secure channel signing, you can re-enable default security policies to increase security.

To configure a domain controller to not require SMB packet signing or secure channel signing, disable the following settings in the Default Domain Controllers Policy:

• Microsoft network server: Digitally sign communications (always)
  
  
• Domain member: Digitally encrypt or sign secure channel data (always)
  
  

Back up the Default Domain Controllers Policy Group Policy object (GPO) before you modify it. Use the Group Policy Management Console (GPMC) to back up the GPO so that it can be restored, if necessary.
Membership in Domain Admins or Enterprise Admins, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at http://go.microsoft.com/fwlink/?LinkId=83477.
To disable SMB packet signing enforcement based domain controllers

1. To open GPMC, click Start, click Run, type gpmc.msc, and then click OK.
   
2. In the console tree, right-click Default Domain Controllers Policy in Domains\Current Domain Name\Group Policy objects\Default Domain Controllers Policy, and then click Edit.
   
3. In the Group Policy Management Editor window, in the console tree, go to Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/Security Options.
   
4. In the details pane, double-click Microsoft network server: Digitally sign communications (always).
   
5. Verify that the Define this policy setting check box is selected, click Disabled to prevent SMB packet signing from being required, and then click OK.
   To apply the Group Policy change immediately, either restart the domain controller or open a command prompt, type the following command, and then press ENTER:
   

unlock problem in lenovo t 400

once after locking the system , it is very difficult to unlock the system. the only way is to restart the laptop.

resolution: uninstall fingerprint software and download and reinstall the latest one from lenovo site.