Search in uioop.blogspot.com

Labels

Showing posts with label Server 2008. Show all posts
Showing posts with label Server 2008. Show all posts

Wednesday, December 30, 2009

Windows 2008的高级安全防火墙功能

在管理、维护局域网的过程中,网络管理员或许经常会遇到这样的一种现象,那就是一些不自觉的上网用户往往会在局域网中偷偷使用P2P工具,来下载大容量的电影或其他多媒体数据,这种恶意下载操作消耗掉了局域网中有限的宝贵带宽资源,并且很容易造成整个局域网网络不能稳定地运行。

事实上,我们可以利用Win2008系统新增加的高级安全防火墙功能,来控制恶意下载行为;考虑到P2P工具在进行恶意下载操作时,会通过系统的3077,3078端口对外进行网络通信,我们只要让高级安全防火墙功能限制3077,3078端口对外进行网络通信,就能实现阻止上网用户偷偷使用迅雷这样的P2P工具进行恶意下载了。现在,我们就利用Win2008系统的高级安全防火墙功能创建安全访问规则,禁止P2P工具进行下载连接:

首先以系统管理员权限进入Win2008系统桌面,依次点选“开始”菜单中的“程序”、“管理工具”、“服务器管理器”命令,从其后出现的服务器管理器窗口左侧位置处,将鼠标定位于“配置”节点选项上,再选中目标节点选项下面的“高级安全防火墙”项目;

其次打开“高级安全防火墙”配置界面,在该界面左侧位置处点选“出站规则”功能选项,再从对应该功能选项的右侧位置处点选“新规则”功能选项,打开安全出站规则创建向导对话框,当向导对话框询问我们要进行何种类型的控制操作时,我们应该选中这里的“端口”选项,以便让高级安全防火墙功能对本地计算机中3077、3078端口的网络连接进行限制;

接着单击“下一步”按钮,在其后出现的向导设置对话框中选中“TCP”功能选项,并且选中“特定本地端口”选项,此时“特定本地端口”文本框会被自动激活,在该文本框中直接输入“3077,3078”端口号码,

再单击“下一步”按钮后,向导屏幕会弹出提示询问“连接符合指定条件时应该进行什么操作”,这个时候我们必须将“阻止连接”功能选项选中,之后设置好该安全规则具体的应用范围,在这里我们可以同时选中“域”、“专用”、“公用”这几种应用环境,最后为新创建的出站规则设置一个合适的名称,再单击“完成”按钮结束安全出站规则的创建工作,这样的话任何一位上网用户在本地Win2008系统中尝试进行恶意下载时,Win2008系统自带的高级安全防火墙功能就对自动对这样的恶意下载进行拦截,那么本地网络的运行稳定性自然也就能得到有效保证了。

Saturday, April 4, 2009

How to change entries in VISTA boot loader !!!

http://www.flexbeta.net/forums/lofiversion/index.php/t8373.html

=====================
Modify your VISTA Boot Menu
=====================


Do you also have several cryptical entries in your personal new VISTA bootloader?

Does it look like:

Legacy (pre-Longhorn) Microsoft Windows Operating System
Microsoft Windows
Microsoft Windows
Microsoft Windows
Microsoft Windows
....

Don't know which Windows is which entry?

Then you need this new guide with my experiences!

You will get a "new" boot menu! For example:

Legacy (pre-VISTA) XP, 2000, 2003, WIN98x
VISTA 5259 TAP
VISTA 5231 IDX
WINDOWS SERVER 2003



======
Theory
======


Till VISTA build 5231 we have had the new VISTA LOADER and for XP, 2000, 2003
and Win 98 the all known NTLDR called NT Loader or NT Bootloader and the mirror
of that is BOOT.INI...

With VISTA 5259 we have a new hierarchy:

First loader: VISTA loader called bootmgr, a "BOOTMANAGER"
Second Loader: NTLDR (XP,2003,98...)

VISTA looks in its "DATA STORE", were the new entries will be hold.
In the beta state of VISTA we have only two programs, which can help us:

MSCONFIG (which does not see the legacy OS)
BCDEDIT.EXE


==========
BCDEDIT.EXE
==========


Please press START and RUN (have you activate "RUN"? >Go to ADMINISTRATOR, right-click Taskbar, Properties, Start Menu, Start Menu Customize, check Run command, OK) and type in: command and press OK.

Yes, it looks like MS-DOS! It's name is Windows DOS...

Then you must type in: bcedit
and the nice program starts and shows for example this:


Microsoft® Windows DOS
©Copyright Microsoft Corp 1990-2001.

D:\USERS\ADMINI~1>bcdedit

Windows Boot Manager
--------------------
Identifier: {bootmgr}
Type: 10100002
Device: partition=C:
Description: Windows Boot Manager
Locale: ENG-US
Inherit options: {emssettings}
{dbgsettings}
Default: {871d699a-68d1-11da-9f30-eb66f9279051}
Display order: {legacy}
{871d699a-68d1-11da-9f30-eb66f9279051}
{d3e15d7c-66fb-11da-83c4-f23116dca051}
{77e994d8-64b9-11da-afd6-cd1e42667751}
{748c9ce4-6497-11da-b587-ba41a6a3f856}
{6bde53aa-630a-11da-b591-bb4bd04c9f19}
{d9b222a6-5f5b-11da-8e9c-87c5457d571e}
{eafe9a2c-558c-11da-86bb-9237c2e1a919}
{3ffee100-4b31-11da-b300-e812ef50ad19}
{eda3906c-438e-11da-b934-f4ecbe0a3419}
{4f964faa-3d7a-11da-bb88-b7df6f4d4219}
Timeout: 3

Windows Legacy OS Loader
------------------------
Identifier: {legacy}
Type: 10300006
Device: partition=C:
Path: \ntldr
Description: Legacy (pre-Longhorn) Microsoft Windows Operating System


Windows Boot Loader
-------------------
Identifier: {871d699a-68d1-11da-9f30-eb66f9279051}
Type: 10200003
Device: partition=H:
Path: \Windows\system32\winload.exe
Description: Microsoft Windows
Locale: en-US
Inherit options: {emssettings}
{dbgsettings}
{5189b25c-5558-4bf2-bca4-289b11bd29e2}
Windows device: partition=H:
Windows root: \Windows
No Execute policy: OptIn

Windows Boot Loader
-------------------
Identifier: {d3e15d7c-66fb-11da-83c4-f23116dca051}
Type: 10200003
Device: partition=H:
Path: \Windows\system32\winload.exe
Description: Microsoft Windows
Locale: en-US
Inherit options: {emssettings}
{dbgsettings}
{5189b25c-5558-4bf2-bca4-289b11bd29e2}
Windows device: partition=H:
Windows root: \Windows
No Execute policy: OptIn

Windows Boot Loader
-------------------
Identifier: {77e994d8-64b9-11da-afd6-cd1e42667751}
Type: 10200003
Device: partition=H:
Path: \Windows\system32\winload.exe
Description: Microsoft Windows
Locale: en-US
Inherit options: {emssettings}
{dbgsettings}
{5189b25c-5558-4bf2-bca4-289b11bd29e2}
Windows device: partition=H:
Windows root: \Windows
No Execute policy: OptIn

Windows Boot Loader
-------------------
Identifier: {748c9ce4-6497-11da-b587-ba41a6a3f856}
Type: 10200003
Device: partition=D:
Path: \Windows\system32\winload.exe
Description: Microsoft Windows
Locale: ENG-US
Inherit options: {emssettings}
{dbgsettings}
Windows device: partition=D:
Windows root: \Windows
No Execute policy: OptIn
Detect hal: Yes

Windows Boot Loader
-------------------
Identifier: {6bde53aa-630a-11da-b591-bb4bd04c9f19}
Type: 10200003
Device: partition=J:
Path: \Windows\system32\winload.exe
Description: Microsoft Windows
Locale: ENG-US
Inherit options: {emssettings}
{dbgsettings}
Windows device: partition=J:
Windows root: \Windows
No Execute policy: OptIn
Detect hal: Yes

Windows Boot Loader
-------------------
Identifier: {d9b222a6-5f5b-11da-8e9c-87c5457d571e}
Type: 10200003
Device: partition=J:
Path: \Windows\system32\winload.exe
Description: Microsoft Windows
Locale: ENG-US
Inherit options: {emssettings}
{dbgsettings}
Windows device: partition=J:
Windows root: \Windows
No Execute policy: OptIn
Detect hal: Yes

Windows Boot Loader
-------------------
Identifier: {eafe9a2c-558c-11da-86bb-9237c2e1a919}
Type: 10200003
Device: partition=J:
Path: \Windows\system32\winload.exe
Description: Microsoft Windows
Locale: ENG-US
Inherit options: {emssettings}
{dbgsettings}
Windows device: partition=J:
Windows root: \Windows
No Execute policy: OptIn
Detect hal: Yes

Windows Boot Loader
-------------------
Identifier: {3ffee100-4b31-11da-b300-e812ef50ad19}
Type: 10200003
Device: partition=J:
Path: \Windows\system32\winload.exe
Description: Microsoft Windows
Locale: ENG-US
Inherit options: {emssettings}
{dbgsettings}
Windows device: partition=J:
Windows root: \Windows
No Execute policy: OptIn
Detect hal: Yes

Windows Boot Loader
-------------------
Identifier: {eda3906c-438e-11da-b934-f4ecbe0a3419}
Type: 10200003
Device: partition=J:
Path: \Windows\system32\winload.exe
Description: Microsoft Windows
Locale: ENG-US
Inherit options: {emssettings}
{dbgsettings}
Windows device: partition=J:
Windows root: \Windows
No Execute policy: OptIn
Detect hal: Yes

Windows Boot Loader
-------------------
Identifier: {4f964faa-3d7a-11da-bb88-b7df6f4d4219}
Type: 10200003
Device: partition=J:
Path: \Windows\system32\winload.exe
Description: Microsoft Windows
Locale: ENG-US
Inherit options: {emssettings}
{dbgsettings}
Windows device: partition=J:
Windows root: \Windows
No Execute policy: OptIn
Detect hal: Yes

D:\USERS\ADMINI~1>


Sorry - a long one, but you will see, I have several entries of the same kind.
Partition H:\ three times and J:\ even more...



=========
Backup first!
=========


First of all, we need a backup/copy of our boot entries!

Step 1: Change to ADMINISTRATOR

Step 2: Type in: bcdedit -?

This will show us the HELP MENU of bcdedit.exe:


H:\USERS\ADMINI~1>bcdedit -?

BCDEDIT - Boot Configuration Data Store Editor

The Bcdedit.exe command-line tool modifies the boot configuration data store.
The boot configuration data store contains boot configuration parameters and
controls how the operating system is booted. These parameters were previously
in the Boot.ini file (in BIOS-based operating systems) or in the nonvolatile
RAM entries (in Extensible Firmware Interface-based operating systems). You can
use Bcdedit.exe to add, delete, edit, and append entries in the boot
configuration data store.

For detailed command and option information, type bdedit.exe /? . For
example, type "bcdedit.exe /? /createstore" (without quotes).

For command and option information, please run "bcdedit /? " where
is one of the help topics listed below.

/bootdebug Enables or disables boot debugging for a boot application.

/bootems Enables or disables Emergency Management Services for a boot
application.

/bootsequence Sets the one-time boot sequence for the boot manager.

/copy Makes copies of entries in the store.

/create Creates new entries in the store.

/createstore Creates a new and empty boot configuration data store.

/dbgsettings Sets the global debugger parameters.

/debug Enables or disables kernel debugging for an operating system
entry.

/default Sets the default entry that the boot manager will use.

/delete Deletes entries from the store.

/deletevalue Deletes entry options from the store.

/displayorder Sets the order in which the boot manager displays the multiboot
menu.

/ems Enables or disables Emergency Management Services for an
operating system entry.

/emssettings Sets the global Emergency Management Services parameters.

/enum Lists entries in the store.

/export Exports then contents of the system store to a file. This file
can be used later to restore the state of the system store.

formats Displays the formats of the data required by the /set command.

id Displays the identifier parameter options that can be used
in several Bcdedit commands such as /create and /copy.

/import Restores the state of the system store using a backup file
created with the /export command.

/set Sets entry option values in the store.

/store Specifies the boot configuration data store to use.

/timeout Sets the boot manager time-out value.

/types Displays the data types required by the /set and /deletevalue
commands.

/v Displays all entry identifiers in full, rather than using
shorthand notation for the well-known identifiers.

H:\USERS\ADMINI~1>


Step 3: Type in: bcdedit -? export

You will get:

H:\USERS\ADMINI~1>bcdedit -? export

bcdedit /export

This command exports the contents of the system store into a file. This file
can be used later to restore the state of the system store. This command is
only valid for the system store.

The filename to be used as the desination for the export.
If the filename contains spaces, it must be enclosed in
double quotes (").

Example:

The following example will export the system store to the specified file:

bcdedit /export "C:\Data\BCD Backup"

H:\USERS\ADMINI~1>


Step 4: Please make a new folder: C:\DATA

Step 5: Type in: bcdedit /export "C:\Data\BCD Backup"

You have now a BACKUP of bootmgr entries! With "import" you are able to restore it!!
You can afterwards also safe your new entries, no problem like:

bcdedit /export "C:\Data\BCD My New Boot Entries"




==========================
DELETE DOUBLE ENTRIES IN bootmgr
==========================


In the next step we will wipe out the double entries. (Always use your OWN identifiers!
My used one are only for explanation!!)

Step 6: Look at the double entries like: Device: partition=H:

Step 7: Type in: bcdedit -? delete

You will get:


H:\USERS\ADMINI~1>bcdedit -? delete

bcdedit -delete [-f]

This command will delete an entry from the boot configuration data store.

This specifies the identifier of the boot entry to be
deleted.

[-f] bcdedit will not delete any entries that have a well known
identifier. To force such a delete operation, specify this
flag.

Examples:

The following command will delete the specified OS entry from the store:

bcdedit -delete {cbd971bf-b7b8-4885-951a-fa03044f5d71}

The following command will delete the legacy OS loader entry from the store:

bcdedit -delete {legacy} -f

H:\USERS\ADMINI~1>bcdedit -delete {4f964faa-3d7a-11da-bb88-b7df6f4d4219}
The operation completed successfully.

H:\USERS\ADMINI~1>


Let explain with the follow examples of my bootmgr entries:

Windows Boot Loader
-------------------
Identifier: {871d699a-68d1-11da-9f30-eb66f9279051}
Type: 10200003
Device: partition=H:
Path: \Windows\system32\winload.exe
Description: Microsoft Windows
Locale: en-US
Inherit options: {emssettings}
{dbgsettings}
{5189b25c-5558-4bf2-bca4-289b11bd29e2}
Windows device: partition=H:
Windows root: \Windows
No Execute policy: OptIn

Windows Boot Loader
-------------------
Identifier: {d3e15d7c-66fb-11da-83c4-f23116dca051}
Type: 10200003
Device: partition=H:
Path: \Windows\system32\winload.exe
Description: Microsoft Windows
Locale: en-US
Inherit options: {emssettings}
{dbgsettings}
{5189b25c-5558-4bf2-bca4-289b11bd29e2}
Windows device: partition=H:
Windows root: \Windows
No Execute policy: OptIn


I want to delete the second (blue) one:
Identifier: {d3e15d7c-66fb-11da-83c4-f23116dca051}

Step 8: Type in: bcdedit -delete {d3e15d7c-66fb-11da-83c4-f23116dca051}

It is away!
All of this commands needs only the correct Identifier to scratch!
Now we can delete all other double entries in the same way.



=====================
RENAME ENTRIES in boot menu
=====================


The next step is to rename the entries.

The easiest one is the one you are in. If you have bootet VISTA 5259 TAP
you must type in:

Step 9: Type in: H:\USERS\ADMINI~1>bcdedit -set DESCRIPTION "VISTA 5259 TAP"

The operation completed successfully. Test it:

H:\USERS\ADMINI~1>bcdedit

The desription of your booted VISTA has changed from only "Microsoft Windows" to
"VISTA 5259 TAP"!

You can now boot in a other VISTA build, maybe 5231 or another. In 5231 for example there is also a BCDEDIT.EXE and you must type in the same with an other description or you are in VISTA 5259 and
you want to change the description from your "other" VISTA.


Step 10: Type in: H:\USERS\ADMINI~1>bcdedit -set {748c9ce4-6497-11da-b587-ba41a6a3f856} DESCRIPTION "VISTA 5231 IDX"

You have easily changed the description of your second VISTA, if have use the correct IDENTIFIER!

From my 6 entries about WINDOWS SERVER 2003 I have deleted 5 and renamed the last:

H:\USERS\ADMINI~1>bcdedit -set {6bde53aa-630a-11da-b591-bb4bd04c9f19} DESCRIPTION "WINDOWS SERVER 2003"


=============================
START XP/2000/20003/98x automatically
=============================


Now to the following problem:

You want to boot in your XP (2003, WIN98x) automatically?

MSCONFIG does not yet! Look in!

BCDEDIT does!


Step 11: Type in: bcdedit ? default

You will get:

H:\USERS\ADMINI~1>bcdedit -? default

This command sets the default entry that the boot manager will use when the
time-out expires.

bcdedit /default

Specifies the identifier of the boot entry to be used as the
default when the time-out expires.

Examples:

The following command sets the specified entry as the default boot manager
entry:

bcdedit /default {cbd971bf-b7b8-4885-951a-fa03044f5d71}

The following command sets the legacy Windows loader (Ntldr) as the default
entry:

bcdedit /default {legacy}

H:\USERS\ADMINI~1>



So a easy task, isn't it? You only must do Step12!

Step 12: Type in: bcdedit /default {legacy}


To look at the correct entry, look at "DEFAULT":

Microsoft® Windows DOS
©Copyright Microsoft Corp 1990-2001.

H:\USERS\ADMINI~1>bcdedit

Windows Boot Manager
--------------------
Identifier: {bootmgr}
Type: 10100002
Device: partition=C:
Description: Windows Boot Manager
Locale: ENG-US
Inherit options: {emssettings}
{dbgsettings}
Default: {legacy}
Display order: {legacy}
{current}
{d3e15d7c-66fb-11da-83c4-f23116dca051}
{77e994d8-64b9-11da-afd6-cd1e42667751}
{748c9ce4-6497-11da-b587-ba41a6a3f856}
{6bde53aa-630a-11da-b591-bb4bd04c9f19}
{d9b222a6-5f5b-11da-8e9c-87c5457d571e}
{eafe9a2c-558c-11da-86bb-9237c2e1a919}
{3ffee100-4b31-11da-b300-e812ef50ad19}
{eda3906c-438e-11da-b934-f4ecbe0a3419}
{4f964faa-3d7a-11da-bb88-b7df6f4d4219}
Timeout: 3


Yes, it worked!



========================
CHANGE {legacy} to a nicer one!
=======================


In the next and last step we will learn to change the description entry of {legacy} from:

Legacy (pre-Longhorn) Microsoft Windows Operating System

to a neater one like:

Legacy (pre-VISTA) XP, 2000, 2003 , WIN98x


Step 13: Type in: bcdedit -set {legacy} DESCRIPTION "Legacy (pre-VISTA) XP, 2000, 2003, WIN98x"

Let's have a look, how it worked:

Windows Legacy OS Loader
------------------------
Identifier: {legacy}
Type: 10300006
Device: partition=C:
Path: \ntldr
Description: Legacy (pre-VISTA) XP, 2000, 2003, WIN98x

Pefect!

With that renamed entry you will go directly in your NTLDR loader and there is working the good old
well known BOOT.INI!

Nice program, the BCDEDIT.EXE, isn't it?

Like I have read anywhere in internet MS is planning to give us a GUI for that bootmgr editing!

I hope, we will get a fast, safe, and nice VISTA 2006!

Have fun with BCDEDITing and please, don't forget to make first my described BCD Backup before
you fiddle to much and nothing worked for you after reboot.

HELP: After everey step type in: bcdedit and you will see what have worked.
Look at the "Windows Device", "Description" and "Identifiers".

Have fun!

Wednesday, February 4, 2009

Import Users with CSVDE

In the previous two exercises, you created users one at a time. In this exercise, you will use a
comma-delimited text file to import two users.

1. Open Notepad and enter the following three lines. Each of the following bullets represents
one line of text. Do not include the bullets in the Notepad document.

❑ DN,objectClass,sAMAccountName,sn,givenName,userPrincipalName
❑ "cn=Lisa Andrews,ou=People,dc=contoso,dc=com",user,lisa.andrews,
Lisa,Andrews,lisa.andrews@contoso.com
❑ "cn=David Jones,ou=People,dc=contoso,dc=com",user,david.jones,
David,Jones,david.jones@contoso.com

2. Save the file to your Documents folder with the name Newusers.txt.
3. Open a command prompt.
4. Type cd %userprofile%\Documents and press Enter.
5. Type csvde -i -f newusers.txt -k and press Enter.
The three users are imported. If you encounter any errors, examine the text file for typographical problems.

Import Users with LDIFDE

Like CSVDE, LDIFDE can be used to import users. The LDIF file format, however, is not a typical delimited text file. In this exercise, you will use LDIFDE to import user.

1. Open Notepad and type the following lines. Be sure to include the blank line between
the two operations.

DN: CN=April Stewart,OU=People,DC=contoso,DC=com
changeType: add
CN: April Stewart
objectClass: user
sAMAccountName: april.stewart
userPrincipalName: april.stewart@contoso.com
givenName: April
sn: Stewart
displayName: Stewart, April
mail: april.stewart@contoso.com
description: Sales Representative in the USA
title: Sales Representative
department: Sales
company: Contoso, Ltd.

2. Save the file to your Documents folder with the name Newusers.ldf. Surround the file
name with quotes; otherwise, Notepad will add a .txt extension.

Although you can import LDIF files with any extension, it is convention to use the .ldf
extension.

3. Open a command prompt.

4. Type cd %userprofile%\Documents and press Enter.

5. Type ldifde -i -f newusers.ldf -k and press Enter.
The two users are imported. If you encounter any errors, examine the text file for typographical
problems.

--------------------------------

DN: CN=,OU=,DC=,DC=
changeType:
CN:
objectClass:
sAMAccountName:
userPrincipalName:
givenName:
sn:
displayName:
mail:
description:
title:
department:
company:
-----------------------------------------

Wednesday, August 20, 2008

How to Automatically Rearm and Extend Activation Grace Period in Windows Vista and Server 2008

Windows Vista and Windows Server 2008 has free activation grace period which allows user to install and use the operating system for 120 days and 240 days without product key or product activation completed. The initial grace period given is 30 days and 60 days respectively for Windows Vista and Server 2008, and user has to “rearm” the system when the expiration of grace period is nearly ending in order to reset and extend the trial evaluation period, and hence activation grace period again.

Neither Windows Vista nor Windows Server 2008 display prominently when is the activation-free evaluation grace period ends (even though it’s actively reminding user to activate Windows with information on how many days left to activate, which usually ignored by users). Surely you don’t want a warning dialog message box pops up suddenly to notify that you may be victim of counterfeiting or to activate the system now, especially if your notebook/laptop computer is used for business presentation. System administrators also certainly don’t want to face with uncertainty or instability possibly brought by expiry of activation grace period, especially if the server is running critical processes, applications or databases.

Instead of remembering the activation grace period expiry or ending date to manually rearm and reset activation grace period in Windows Vista and Windows Server 2008, Microsoft provides the following script which can be used with Task Scheduler to schedule automatic extension of the evaluation period and activation-bypass grace period of Windows Server 2008 every 60 days, which should be able to used in Windows Vista too which requires to be triggered every 30 days.

How to Automate the Rearm and Extension of the Activation Grace Period in Windows Server 2008 and Vista

On the Windows Vista or Windows Server 2008 system, copy and paste the following Task code to text editor such as Notepad. In the Task, change the value of the following UserID tag (as in domain\alias line) to contain domain name and user name alias (for user on domain Active Directory), or local host name and user ID (for standalone Windows Vista user). Then save it as a .xml file. For example, ReArm.xml or Extend.xml.

<?xml version="1.0" encoding="UTF-16"?>
<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
<RegistrationInfo>
<Date>2007-09-17T14:26:04.433</Date>
<Author>Microsoft Corporation (My Digital Life)</Author>
</RegistrationInfo>
<Triggers>
<TimeTrigger id="18c4a453-d7aa-4647-916b-af0c3ea16a6b">
<Repetition>
<Interval>P31D</Interval>
<StopAtDurationEnd>false</StopAtDurationEnd>
</Repetition>
<StartBoundary>2007-10-05T02:23:24</StartBoundary>
<EndBoundary>2008-09-17T14:23:24.777</EndBoundary>
<Enabled>true</Enabled>
</TimeTrigger>
</Triggers>
<Principals>
<Principal id="Author">
<UserId>domain\alias</UserId>
<LogonType>Password</LogonType>
<RunLevel>HighestAvailable</RunLevel>
</Principal>
</Principals>
<Settings>
<IdleSettings>
<Duration>PT10M</Duration>
<WaitTimeout>PT1H</WaitTimeout>
<StopOnIdleEnd>true</StopOnIdleEnd>
<RestartOnIdle>false</RestartOnIdle>
</IdleSettings>
<MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
<DisallowStartIfOnBatteries>true</DisallowStartIfOnBatteries>
<StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>
<AllowHardTerminate>true</AllowHardTerminate>
<StartWhenAvailable>false</StartWhenAvailable>
<RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
<AllowStartOnDemand>true</AllowStartOnDemand>
<Enabled>true</Enabled>
<Hidden>false</Hidden>
<RunOnlyIfIdle>false</RunOnlyIfIdle>
<WakeToRun>true</WakeToRun>
<ExecutionTimeLimit>P3D</ExecutionTimeLimit>
<DeleteExpiredTaskAfter>PT0S</DeleteExpiredTaskAfter>
<Priority>7</Priority>
<RestartOnFailure>
<Interval>PT1M</Interval>
<Count>3</Count>
</RestartOnFailure>
</Settings>
<Actions Context="Author">
<Exec>
<Command>C:\Windows\System32\slmgr.vbs</Command>
<Arguments>-rearm</Arguments>
</Exec>
<Exec>
<Command>C:\Windows\System32\shutdown.exe</Command>
<Arguments>/r</Arguments>
</Exec>
</Actions>
</Task>

Or, download a copy of ReArm.xml directly (you still need to change the “UserID”.

  1. Click Start, point to Administrative Tools (in Windows Vista, go to Control Panel -> System and Maintenance), and then click Task Scheduler.
  2. In the Task Scheduler, click Import Task on the “Action” menu.
  3. Select the task .xml file saved from above above. For example, click Extend.xml or ReArm.xml.
  4. Click Import.
  5. A “Create Task” window will appear. Click the Triggers tab.

    Schedule Automatic Rearm Activation Grace Period

  6. Click the One Time trigger, and then click Edit.
  7. Change the start date of the task to a date just before the end of current evaluation period (activation grace period expiry date).

    User can also customize the schedule so that the Task Scheduler automates the rearm of system license status every 30 days (for Windows Vista) or 60 days (for Windows Server 2008) for 3 times. For example, change to Daily with recurring every 30 or 60 days, and then set an Expire date for the task after 120 days or 240 days.

  8. Click OK, and then exit the Task Scheduler.

The Task Scheduler will now run the evaluation reset and rearm operation on the date that been specified automatically to extend the free usage of Windows operating system.

Extend Vista or Windows Server 2008 Activation-free Evaluation Period

http://www.mydigitallife.info/2008/06/08/how-to-install-and-use-windows-server-2008-240-days-for-free/

http://support.microsoft.com/kb/948472

How to manually extend the activation grade period on expiring

When the 60-day activation grace period is about to expire and end, run the slmgr.vbs script to reset and extend the evaluation period for another new 60-day trial evaluation period, with everything including programs installed and data intact.

  1. Open an elevated privilege command prompt.
  2. Type the slmgr.vbs -rearm, and then press Enter to reset the activation grace period to 60 days.
  3. Restart the computer.

To check the status or time that is left on current activation grace period or evaluation period, run slmgr.vbs -dli command to display the number of days that are left in the current 60-day evaluation period.

AVG Internet Security 2013

Total Pageviews

Contributors