TIPS & TRICKS: Imaging Bootcamp Partition on a Mac

I haven't used this tool yet. But, it definitely came from a good recommendation source. OS X is already easy to clone and restore using various tools. The Bootcamp partition has not been quite as easy. Hopefully, this tool makes cloning as easy as the OS X side.

http://twocanoes.com/winclone.php

Happy Computing.

TIPS & TRICKS: Testing RAM on a Mac

For years, I've used memtest86 to test RAM on PC's. On Macs, I've used TechTools. However, Apple stopped including TechTools Deluxe with AppleCare. Luckily, the open source community comes through again. A tool called memtest, which is a port to Macs from the PC version, does the job.

http://www.command-tab.com/2008/01/11/how-to-test-ram-under-mac-os-x/

This write-up was more thorough and how I came across this tool in the first place:

http://www.littleprojects.org/blog/2011/02/03/testing-ram-on-a-macbook-pro/

TIPS & TRICKS: Managing Permissions on Folders

Scenario: I get a call from a staff member, who I support. She wanted to see if she could obtain permission to some folders in a particular directory on my Windows 2003 file server. Without getting into the non-technical authorization of the situation and tossing the idea back and forth with my boss, I decided that we really needed was to get a listing of permissions of all the sub-folders in the directory in question. 

I poked around the web a bit, until I discovered a Microsoft tool that helps to manage permissions using the command line. GUIs are great for one-off tasks, but command line is necessary handle these types of tasks. Here's the gist of how I ended up with the results I needed:

• Download Xcacls.vbs from the Microsoft link below. http://support.microsoft.com/kb/825751
• Open a command prompt window.
• At the command prompt, navigate to the location where Xcacls.vbs is saved.
• Type in Xcacls.vbs \\server\share\folder\* > c:\output.txt

This got me the output I needed. I did need to clean up the the output a bit because there were some extraneous files in the directory that was not necessary to the task. I know this tool can go further than just listing permissions. When I need to modify permissions across multiple files/folders I will try this out. 

TIPS & TRICKS: Adding a Networked Printer on OS X Lion

Apple recommends adding a networked printer, which is visible via Bonjour. The default installation of Lion does not have very many printer drivers pre-installed. I went to the printer manufacturer's site and found that I should be able to get the driver through Software Updates on OS X, though this only works either on USB or on a printer available via Bonjour. What can you do if the printer is networked, but not available via Bonjour? 

I was trying to add a networked printer manually using LPD protocol and discovered that the driver for the printer was not available in "Select Printer Software" under "Print Using." Finally found that Apple has a bunch of drivers for various printer manufacturers available for download from the Apple Support site:

http://support.apple.com/downloads/#printer drivers

Installing drivers from here, should make them available in the Printer Software box. 

TIPS & TRICKS: Internet Explorer 9 Compatibility

I knew previously that Internet Explorer 9 had a built-in compatibility mode. Even so, there were some sites that just didn't work on IE9. Just figured out there's another way to control how IE9 behaves. There is a developer tool built-in that allow IE9 to emulate specific previous versions:

- With IE9 open, Hit F12
- Click on Browser Mode: IE9 at the bottom of the window
- Select the version that might work for you

Simple. There will probably still be sites that don't quite work, but having options is helpful.

TIPS & TRICKS: "Randomly" Waking Windows 7 Computer

Awhile back, I noticed my workstation was waking up in the middle of the night. After checking the system logs, I found that there was a Google update service that woke the computer up. I fixed that one. To my surprise, I found my computer on again at 1:41am. Another piece of update software woke up the machine. This useful command helped to confirm my findings in the log:

powercfg -lastwake


Just need to make sure to run it from a command prompt as and administrator:


- Click Start
- Type cmd in the Search programs and files box
- right click cmd under Programs and select "Run as Administrator"


If this line is included in the results after the powercfg -lastwake command is issued:


Windows will execute 'MicrosoftWindowsMedia Centermcupdate_scheduled' scheduled task that requested waking the computer.


Then, here's the fix:


- Go to Start > All Programs > Accessories > System Tools > Task Scheduler
- Expand Task Scheduler Library > Microsoft > Windows > Media Center
- Find mcupdate_scheduled (note: make sure to find this one because there's another one called just mcupdate)
- Right click on mcupdate_scheduled and select "Properties".
- Select the Conditions tab
- Uncheck "wake the computer to run this task"

- Hit OK to exit.

Just did this to my workstation and will see if it works. Credit goes to this site:

http://www.beirtech.com/blogs.php?action=view&bid=6

RANTS & RAVES: OS X Printing to Windows Print Server

Found a nice write-up of getting OS X printing to Windows Print Servers. This write-up includes advantages and disadvantages of 4 different methods:

1. LPD
2. Windows Print Sharing
3. Windows Print Services for Macintosh; and 
4. Direct IP printing.

The document also includes instructions, which are helpful if you're not familiar with a particular method. Here's a link to the document:

http://www.softwareshelf.com/news/printmanager/tips/MacOSX_Printing_via_the_Windows_Print_Server.pdf

If the document no longer exists, let me know as I've saved a copy of the PDF.

TIPS & TRICKS: Outlook 2011 Keyboard Shortcuts

I've always been a fan of keyboard shortcuts. Mousing is faster for somethings, but keyboard shortcuts really help to cut down time to do repetitive tasks. Here's a bunch of Outlook 2011 keyboard shortcuts from Microsoft:

http://mac2.microsoft.com/help/office/14/en-us/outlook/item/3b58300d-6f02-47f3-b1fc-9cbe8bb4eac7

Got any of your own you can't live without?

RANTS & RAVES: Design - The Difference Between Adoption and Failure

With all the Apple hype out there, I have come to realize what really makes Apple the company it is today. For a long time, I thought it was purely because Apple controlled both the hardware and software side of things. But, it's more than just controlling the different aspects of hardware and software. It's design. Steve Jobs was all about design. His singularly focused fanaticism on design results in Apple products that everyone either really wants or can't stop talking about.

The point of this post is a case describing the other end of the spectrum where design and usability is nothing more than an marketing topic. This example is quite simple really. I installed a piece of software call Kurzweil 3000 on a few machines. The department had not yet purchased new licenses for these machines so I had to install the trial version while we waited for the licenses to arrive. When they did arrive, I checked out some documentation online that said I had to merely call up the registration process under the existing installations Help menu and enter in the code to activate the software. The link to the registration process was not available. I called Kurzweil Support and they told me that I had to uninstall the old version first and then install the new version. Instead of taking a couple minutes to complete the process, I'm now over an hour into this update process.

Simple thing like design and usability can go such a long way.

TIPS & TRICKS: Google Chrome Behavior of Green Zoom/Maximize Button in Lion

Apparently, Chrome is still using the pre-Lion behavior of the green button, which is as a zoom button. In Lion, this basically means that when a Chrome window that is not full screen and the green button is pushed, then the Chrome window stretches full screen only vertically and not horizontally. I thought one of the best features of Lion was Apple's redesign of the green button to be a true full screen.

The fix for this is to hold down the shift button while hitting the green button. This will make the Chrome window fill the screen.

TIPS & TRICKS: Open Source Software (OSS) Imaging Tools & Process

Found a really nice write-up on using a couple of open source software (OSS) tools for imaging a drive.

http://geekyprojects.com/storage/how-to-clone-hard-drive-to-smaller-drive/

I've been using these tools for awhile and find them quite useful. This little write-up also helped to streamline my own basic imaging process. The extra hurdle I wanted to overcome was imaging from an larger drive/partition to a smaller drive/partition. In order to accomplish this scenario, gparted, one of the OSS tools we are talking about here, is used to shrink the Windows partition to something smaller than the new destination. Here's the summary of steps for my scenario:

- Adjust partition with GParted
- Reboot and let OS rebuild the file system (this is a CRUCIAL step)
- Use Clonezilla to save drive/partition to another drive (imaging rather than cloning works best for me)
- Restore the image to smaller destination drive

Again, the link has a much more detailed and well-documented write-up.

TIPS & TRICKS: Previous Recipients in Apple Mail

Learn something new everyday. I had an idea that Apple Mail saved some sort of list of previously entered email addresses. But, I didn't know where it was stored or how to manage that list. Of course, it's really simple.

With Mail open, click on Window > Previous Recipients. Up comes a window where you can see the list, remove entries in the list, or even add to the Address Book. Simple.

TIPS & TRICKS: Free Backup Tool - EaseUS Todo Backup

Heard about this free local backup tool that seems to have a set of good tools built-in, including an all-important scheduling mechanism. In addition, there's also incremental & differential backup, disk cloning, selective file and folder backup, restoring to dissimilar hardware, and auto deletion of old images.

http://www.todo-backup.com/

I haven't actually tried this tool yet, but I will as I need a better tool than the built-in Windows one for one of my boxes.

TIPS & TRICKS: Know about cookies? What about super cookies?

Nice little write-up about additional information stored on the machine about you. I did notice that running in Private Browsing or Incognito seems to prevent any data from getting stored in cookies or super cookies. The software that uses these super cookies? Adobe Flash Player.

http://www.gpanswers.com/blog/138-lockdown/700-supercookies-the-ugly-snack-you-can-kill-using-group-policy.html

TIPS & TRICKS: Transferring Outlook 2007 AutoComplete Email Addresses to Outlook 2010

Most people probably don't know that Outlook saves frequently used email addresses, which is completely separate from Outlook Contacts. Those addresses are very useful to migrate along with your other Outlook files over to Outlook 2010.

There are 3rd party tools out there that help to do the migration. But, I'm always one to try to use native tools first, as long as they work well. I found this tool from Microsoft that seems to work well:

http://support.microsoft.com/kb/980542#ImportNK2Files_Outlook

In addition, to this being a useful tool, the article also points out that Outlook 2010 no longer uses a .NK2 file to store these frequently used addresses. I didn't figure out where Outlook 2010 now stores these addresses. Perhaps there's some tie-in in the future to Microsoft's Live Services, in which case I would expect it to be in some sort of web-enabled file (i.e. XML or similar).

One thing I haven't figure out is if the machine is in a domain/Exchange, then what happens to those names that are not complete email addresses because of Exchange resolution in Outlook 2007. Do those names (i.e. usernames) get imported and become duplicates? I just did this for someone. We'll find out soon enough.

NEWS: Sniffer hijacks secure traffic from unpatched iPhones

Unpatched iPhones can be exploited even with availability of SSL. One of the methods, published 9 years ago, is so easy that "my mother could actually use this", says Chet Wisniewski, a security researcher with Sophos.

Moral of the story, unless you have iOS 5 with over-the-air-updates, make sure to plug in your iPhone and get it updated.

TIPS & TRICKS: MLGPOs

Learned something new today. There's Active Directory Group Policies Objects (GPOs) and Local Group Policies. Starting with Vista, there is now something called Multiple Local Group Policy Objects (MLGPOs). Here's a quick summary of how these work:

Level 1: Affects everyone
Level 2A: Affects the person if they're a Joe User
Level 2B: Affects the person if they're a local Admin
Level 3: Affects a specific person based on username

With AD GPO's available, I'm not sure why LGPOs are needed. However, I do like having granularity with MLGPOs. Hope I find it useful at some point.

Here's a blog post about it:

http://www.gpanswers.com/blog/140-gp-client-and-internals/695-why-local-gpos-matter.html

TIPS & TRICKS: Google Chrome, Windows 7, and Last Window Placement

If you know me, you'll know that I routinely use private browsing all the time. I don't care to have the browser remember any of my personal data or what sites I've visited. If I really wanted to remember something, then I will bookmark or blog the page. This means that when I use Google Chrome, I'm using its Incognito mode all the time.

One drawback to Incognito is that it also doesn't remember the screen location of the last window you used. In other words, I want the Incognito Chrome window to open in the same place on my screen every time I open a new window. This is actually a good feature because Incognito's purpose is to remember NOTHING. This should also include locally stored settings like screen location.

To get the window to open in the same place, just open a normal Chrome window, move it to the place you want it, close that normal window. Next time an Incognito window is opened, it should open in the last location where the normal window was closed.

Happy Computing.

TIPS & TRICKS: Denying Access to Browsers for Specific Users

Had an interesting request about denying internet access to a particular user account on a Windows machine. This exercise showed me again that is usually more than one way to accomplish something. The first hurdle was that this needed to be done on different versions of Windows. It was already done on a Windows XP machine via NTFS permissions. I had to find a way to do it on Windows Vista Home Premium and Windows 7 Enterprise.

On Windows Vista Home Premium (HP), the process was actually fairly easy. Windows Vista HP has Parental Controls in it, which helped us accomplish our goal. Specifically, it was the Vista Web Filtering tools built-in to the Parental Controls. First, turn on the Parental Controls found in Control Panel. Next click through to the Web Filtering tool and enable the sites allowed option. The key to make this work is to make sure to NOT list any sites to be allowed. This will block all connections via a web browser. What's more, I tested this through Firefox in the account controlled by Parental Controls as well and it worked too.

Windows 7 did away with the Web Filter tools in Parental Controls. Had to find another way to do it. A Google search yielded the path of using a proxy address to control the flow. The nice thing about this solution is that proxy configurations are now user-specific, which means it only affects the one user and not all users. Here are the steps:
1. While in the user account that needs to be limited, setup a proxy server address in Internet Options > Connections > LAN settings. I used 127.0.0.1.

2. Log out and login to an account with administrative access.

3. Launch Local Group Policy Editor (gpedit.msc).

4. Under User Configuration > Administrative Templates > Windows Components > Internet Explorer > Browser Menus, enable the Tools menu: Disable Internet Options... menu option. This will disable access to Internet Options from Internet Explorer.

5. In the same window for Local Group Policy Editor, go to User Configuration > Administrative Templates and click on Control Panel.

6. Open the option for Hide specified Control Panel items and enable it. Then click on the Show button.

7. In a blank field under the Value column, type in Microsoft.InternetOptions. This disables access to the Internet Options area from the Windows Control Panel.

8. Hit OK, OK, and close out the Local Group Policy Editor.


A few pertinent notes here: we were only concerned with blocking browser access. There are, of course, other ways to get connected, but that's a task for another day. Also, these machines were not joined to any domain, only setup as stand-alone machines. Finally, the locking out of Internet Options at the Internet Explorer level and the Control Panel level is effective for all users, unlike the proxy setting that only affects the one user. Also, always make sure to test before deploying.

Update (2012_02_02): Before locking out Internet Options, check this setting. In Internet Options > Connections > LAN Settings, make sure to uncheck Automatically detect settings. This ensures that the proxy settings are used every time (Thanks to my colleague, Erin for pointing this out.)

Happy Computing.

TIPS & TRICKS: OS X Security Tips

Found some good information on how to secure Mac OS X, presented by Sophos:

http://nakedsecurity.sophos.com/2011/01/25/top-tips-for-os-x-security-part-1/

http://nakedsecurity.sophos.com/2011/02/02/top-tips-for-mac-os-x-security-part-2/

http://nakedsecurity.sophos.com/2011/02/21/top-tips-for-mac-os-x-security-part-3/

Sophos also offers free anti-virus for OS X here:

http://www.sophos.com/products/free-tools/free-mac-anti-virus/