Archive for the ‘Windows 8’ category

Prevent Other Users from Accessing Windows Apps with AppLocker

May 9th, 2016 by Admin

AppLocker is a Window’s built-in application that gives the administrator a very granular control over which applications are allowed to execute and which are blocked for a Windows account. This feature is really useful if you share a computer and don’t want other users accessing certain applications.

Today we’ll walk you through how to create rules in AppLocker to prevent other users from accessing certain applications in Windows 10, 8 and 7.

How to Restrict Access to Programs with Windows AppLocker?

  1. Press Windows key + R to open the Run dialog box. Type gpedit.msc and press Enter.

    gpedit

  2. Under Local Group Policy Editor, navigate to:
    Computer Configuration -> Windows Settings -> Security Settings -> Application Control Policies -> AppLocker -> Executable Rules
  3. Right-click on Executable Rules in the left pane, and then select Create New Rule.

    applocker

  4. Click Next to bypass the Before You Begin screen. On the Permissions page, select Deny (Click Allow if you want to restrict what programs other users can access only).

    permissions-page

    Click on the Select button to choose the user or groups you want the rule to apply. When it’s done, click Next to reach the Conditions page.

  5. AppLocker rules can identify programs using the following conditions: Publisher, Path and File hash. Publisher condition relies on the digital signature of the executable file.

    conditions-page

    Here we’ll choose File hash because AppLocker can still identify the program even if it’s renamed or moved.

  6. On the File Hash page, click Browse Files and find the executable file for the application to which you want this rule to apply, or click Browse Folders if you want the system to calculate a hash for all of the executable files in a folder. Click Next.

    file-hash-page

  7. Type a name for the rule that will make it easy for you to remember what it is, and then click on Create.

    name-and-description

  8. When prompted to create the default rules, make sure you click Yes. This is to ensure that the rules you created don’t block operating system files from running.

    create-default-rules

  9. Now you will see three default rules and the new one you created.

    applocker-rules

    Restart your computer for the AppLocker rules to come into effect. When you try to run the blocked application, you’ll receive an error: “This app has been blocked by group policy. For more information, please contact your system administrator.

    app-blocked-by-group-policy

AppLocker Doesn’t Work?

AppLocker doesn’t work under either an admin account or a standard account? AppLocker not blocking application even if you set up the executable rule correctly? AppLocker relies on the built-in Application Identity service, which is normally set to manual startup type by default. Administrators should configure the service to start automatically.

To bring AppLocker back to work, follow these steps to start the Application Identity service:

  1. Press Windows key + R to open the Run dialog box. Type services.msc and press Enter.

    services-msc

  2. Right-click on the Application Identity service, and select Properties.

    services

  3. Set the Startup type to Automatic and click on the Start button to run the service.

    application-identity-service

  4. Click on Apply and then OK.

2 Ways to Configure Windows Firewall to Allow SQL Server Access

May 2nd, 2016 by Admin

By default, Windows Firewall doesn’t allow inbound / outbound requests for SQL Server. If you try to connect to a SQL Server instance from network, you might get the error saying “The server was not found or was not accessible”. In this tutorial we’ll show you 2 ways to configure Windows Firewall to allow SQL Server access.

Method 1: Allow SQL Server Access Through Control Panel

  1. Open Control Panel in Large icons or Small icons view, click on Windows Firewall.

    windows-firewall

  2. Click the link “Allow a program or feature through Windows Firewall” on the left of window.

    allow-app-through-firewall

  3. You will now see a list with all the apps which are allowed to communicate through the Windows Firewall. To change the rules, you need to click the Change Settings button. The list of rules will no longer be gray and you will be able to edit it.

    change-firewall-settings

  4. Click the “Allow another program…” button.

    add-another-program

  5. From the “Add a Program” window, click the Browse button.

    browse-program

  6. Navigate to the installation path for your SQL Server instance and select sqlservr.exe, and click Open. In my example, the location is C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe.

    sqlserv

  7. You’ll back to the “Add a Program” window and see SQL Server is added to the list. Click the Add button.

    add-sql-server

  8. SQL Server now appears in the list of Allowed programs and features. You can check any of the location types: private or public. When done, press OK.

    allowed-program

Method 2: Allow SQL Server Access Through Command Prompt

  1. Open an elevated Command Prompt.
  2. You can run the Netsh advfirewall command to open all ports for SQL Server connections. Assuming the path of your SQL Server service is C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe, copy / and paste the following commands in the Command Prompt, press Enter after each.

    netsh advfirewall firewall add rule name="SQL Server TCP" protocol=tcp dir=in action=allow program="C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" enable=yes profile=any localip=any localport=any remoteip=any remoteport=any

    netsh advfirewall firewall add rule name="SQL Server UDP" protocol=udp dir=in action=allow program="C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" enable=yes profile=any localip=any localport=any remoteip=any remoteport=any

    advfirewall

  3. When it’s done, you’ve successfully opened up all ports to allow SQL Server access through Windows Firewall.

How To Shrink & Expand Partition in Windows 10 / 8 / 7

April 25th, 2016 by Admin

Keep getting low disk space on C:\ drive even if you’ve deleted all files you can delete? There is no spare partition for another operating system? In this tutorial we’ll show you how to use the built-in Disk Management to shrink & expand partition in Windows 10, 8 and 7.

Part 1: Open Disk Management

To access Windows build-in Disk Management tool, just press the Windows key + R to open the Run box. Type diskmgmt.msc and hit Enter. This will open the Windows Disk Management utility. From there you can resize (shrink or expand) your hard drive partition without data loss.

disk-management

Part 2: Shrink Partition

Need to create a new partition but you don’t have unallocated space? Just shrink an existing partition to free up space from which you can create a new partition. Here’s how to shrink a partition:

  1. Right-click the partition you want to shrink (C: in our example) and select Shrink Volume.

    shrink-volume

  2. Windows will take a moment to query the volume for available shrink space. Enter the amount of space you want to shrink. For example if want to free up 15GB space, enter 15000 Mb (1000 MB = 1 GB) in the text box. Next click Shrink.

    space-to-shrink

  3. When the process is complete, you will see a new unallocated partition right next to your shrinked partition.

Part 3: Expand Partition

Run out of space on one of your Windows partitions? You can also expand disk partitions, as long as there is free (unpartitioned) space available only after the partition you’re trying to expand. Here’s how to expand a partition:

  1. Right-click the partition you want to expand (C: in our example) and select Extend Volume. Note that the Extend Volume option might be greyed out when there is no unallocated space right after your selected partition.

    extend-volume

  2. Now when the Extend Volume Wizard opens, click Next.

    extend-volume-wizard

  3. It will select the maximum number of unallocated space itself. But you can set any amount yourself too, keep in mind that it is calculated in MB not GB. After you are done here, click Next.

    select-disk-to-extend

  4. You’ll see a brief summary of the changes. Click Finish to apply them. Now you’ll see your partition is larger and the unallocated partition has been merged.

    complete-extend-wizard

How to Disable Caps Lock Key in Windows and Mac

April 14th, 2016 by Admin

“Whenever I type, my baby finger hits the Caps Lock key and all my typing ends up in caps. I want to disable it completely and just use the Shift key for capitals. How do I disable the Caps Loks key in Windows 10? Please help!”

Without the Caps Lock key, you can still type the letter you want to capitalize by holding down the Shift key. Pressing the Shift key once is much more efficient than pressing the Caps Lock key twice. If you don’t need to use the Caps Lock key, you can disable it permanently. In this tutorial we’ll show you how to disable Caps Lock key in Windows 10/8/7/Vista/XP and Mac OS X.

Part 1: Disable Caps Lock in Windows 10/8/7/Vista/XP

There is no built-in settings available in Windows that allow you to disable Caps Lock key, so we have to use a registry hack to map the Caps Lock key to doing nothing. Follow these steps:

  1. Press the Windows key + R to open the Run box. Type notepad and press Enter.
  2. Copy the lines below and then paste them into the NotePad:
    Windows Registry Editor Version 5.00
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout]
    "Scancode Map"=hex:00,00,00,00,00,00,00,00,02,00,00,00,00,00,3a,00,00,00,00,00

    notepad

  3. Click the File menu and select Save as. Select “All Files” from the “Save as type” drop-down box. Type the file name as Disable_Caps_Lock.reg. Click Save.

    save-as

  4. Double-click the .reg file, or right-click on it and select “Open with” -> “Registry Editor“. If prompted by UAC, click on Yes.

    open-with-registry-editor

  5. Registry Editor will confirm if you want to import the registry settings in your .reg file, click Yes.

    import-into-registry

    Now log out (and back in) or reboot to make this registry trick to take effect.

If you want to enable the Caps Lock key again, open the Registry Editor and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout, then delete the Scancode Map entry entirely.

enable-caps-lock

Part 2: Disable Caps Lock in Mac OS X

It’s pretty easy to actually turn the Caps Lock key off if you’re using a Mac. Here’s how:

  1. Click the Apple icon in the top-left corner of your desktop, then select System Preferences from the drop-down menu.

    system-preferences

  2. Click on the Keyboard icon to launch the preferences pane.

    keyboard-utility

  3. Click the Modifier Keys button in the bottom-right corner.

    modifier-keys

  4. A new window will slide down with a setting for the Caps Lock key at the top. click on the drop-down menu next to the Caps Lock Key title, and choose No Action.

    disable-mac-caps-lock

  5. Click OK. Now, whenever you hit the Caps Lock key by mistake, nothing will happen.

Fix: “Burn disc image” Option Missing for ISO Context Menu

April 11th, 2016 by Admin

When you right-click on an ISO file in Windows 10/8/7, you should see the “Burn disc image” option in the context menu. What to do if the “Burn disc image” option is missing or no longer appears in the right-click context menu? To restore this context menu item, you have to set the built-in app – Windows Disc Image Burner – as the default program for opening an ISO file. Here’s how:

burn-disc-image

How to Fix: “Burn disc image” Option Missing for ISO Context Menu

  1. Open the Control Panel. Select Large icons from the View by option, then click on Default Programs.

    control-panel-items

  2. On the Default Programs window, click Set your default programs link.

    default-programs

  3. From the generated list of available programs in the left pane, select Windows Disc Image Burner, and then click on the Set this program as default option on the bottom right.

    set-default-programs

  4. Click on Choose defaults for this Program. You will get a window that displays the list of file extensions registered by the program. Check the boxes against the file extensions (*.iso, *.img) that you want the selected program to open by default. Click Save and you’re done.

    set-program-association

  5. Restart your computer and the “Burn disc image” option should now appear in the right-click context menu of an ISO file.

How to Delete Windows Update Cache to Free Space

April 9th, 2016 by Admin

The update cache is a temporary folder used by Windows Update to store the temporary installation files. By default, Windows Update automatically cleans out the cached updates at a regular interval. But the temporary files will not be deleted when Windows Update fails or refuses to install an update.

update-temp-file-size

Sometimes the obsolete update cache can take up Gigabytes of space and this can run out of disk space on C:\ drive. When you run into space issue or Windows Update doesn’t work properly, you can use this method to safely delete Windows Update cache in Windows 10, 8 and 7.

How to Delete Windows Update Cache to Free Space?

In previous post we’ve covered how to delete temporary Windows installation files ($WINDOWS.~BT) using Disk Cleanup. But that utility doesn’t include an option for purging Windows Update cache. So we need to delete the update cache manually. Before getting started, make sure no update process is running, or your update will fail to install.

  1. The first step is to temporarily turn off the Windows Update service. Press the Windows key + R to open the Run box. Type cmd and press Enter.
  2. When the Command Prompt opens, type the command below to stop the Windows Update service.
    net stop wuauserv

    stop-windows-update

  3. Open the Windows Explorer and navigate to the following folder and delete all its content (not the folder itself).
    C:\Windows\SoftwareDistribution\Download

    delete-update-temp-files

  4. Once you’ve deleted the update cache, open the Command Prompt again and run the following command to start the Windows Update service.
    net start wuauserv

How to Fix “The signature of this program is corrupt or invalid”

April 3rd, 2016 by Admin

When you download a software with Microsoft Edge or Internet Explorer, you might receive the error message saying “The signature of this program is corrupt or invalid“.

edge-warn-signature-corrupt

ie-warn-signature-corrupt

Recently we’ve also heard of our customers having this issue when downloading the Lock My Folders program in Windows 10, so we spend lots of time trying to reproduce this issue. We finally got to the bottom of the issue (we believe).

The signature was never corrupt or even invalid. Microsoft released a cumulative security update KB3140745 for Windows 10 that deprecated support for SHA1 code signing certificate. Any programs signed with SHA1 certificate after January 1st, 2016 will be flagged as an invalid signature. In this tutorial we’ll explain how to check if your downloaded program is signed with SHA1 or not, then discuss the methods to get around the download issue.

How do I know if a program is signed with SHA1?

  1. Right-click on your program and select Properties.
  2. Click on the Digital Signatures tab.
  3. Select the signature and click on the Details button.
  4. Click the View Certificate button.
  5. Click the Details tab.
  6. Look at the Signature hash algorithm.

    sha1-certificate

Methods to fix “The signature of this program is corrupt or invalid”

If you are the software developer, just contact the CA to re-issue or replace your SHA1 certificate with a new stronger SHA2 certificate, then sign your program with SHA2 certificate and the issue will be resolved.

If you download software from a reliable website and get the “The signature of this program is corrupt or invalid” error message, here are 3 ways to work around this problem:

  • When you see the a pop-up message that says the signature is corrupt or invalid, click on View downloads button.

    edge-warn-signature-corrupt

    Next right-click on the file in downloads and choose Run anyway.

    edge-run-anyway

    If Windows 10 Smart Screen displays a warning that the app cannot be recognized, click More Info and click Run Anyway to install.

  • Uninstall the Windows update that causes this issue. I can reproduce the problem by installing KB3140745 on Windows 10. I then uninstall this single update and it fixed the problem. If you’ve turned on automatic updating, you can block that specific update in Windows 10 so it won’t be installed any longer.
  • Only the browsers from Microsoft block SHA1 code signing certificate now. Chrome and Firefox still accepts SHA1 certificate. So you can get around this problem by downloading with Chrome or Firefox browsers.

Fix “You’ve been signed in with a temporary profile” Error in Windows 10 / 8 / 7

March 24th, 2016 by Admin

After you log on to a Windows user account, you may face the temporary profile issue and some of your desktop icons & files are disappeared. A notification pops up in the right bottom corner of the taskbar, saying:

“You’ve been signed in with a temporary profile. You can’t access your files, and files created in this profile will be deleted when you sign out. To fix this, sign out and try signing in later. Please see the event log for more details or contact your system administrator.”

temporary-profile

In Windows 7, the error message looks like:

“You have been logged on with a temporary profile. You cannot access your files and files created in this profile will be deleted when you log off. To fix this, log off and try logging on later. Please see the event log for details or contact your system administrator.”

So I did a quick Google search and it seems that this is a common issue. This problem usually occurs if the user profile was accidentally moved or deleted from the system. Any changes that you make to the current desktop are lost after you log off the system. In this tutorial we’ll explain the step-by-step procedure to fix temporary profile issue in Windows 10, 8 and 7.

How to Fix “You’ve been signed in with a temporary profile” Error?

Before getting started, you need to find the SID (Security Identifier) of your user account that is experiencing the temporary profile problem. To do this, just press the Windows + R keys to open the Run box. Type cmd and press Enter.

cmd

When the Command Prompt launches, type the following command, replacing Tom with the name of your affected account. Press Enter and you’ll see the SID that will be used in steps below.
wmic useraccount where name='Tom' get sid

wmic

After finding the SID, close the Command Prompt. Now we begin to fix the registry settings. Press the Windows + R keys to open the Run box. Type regedit and press Enter.

regedit

When the Registry Editor opens, navigate to the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

Expand the ProfileList subkey, you will see the SID keys for all the users on the machine. As we’ve found the SID of your affected account above, just click that SID key (without .bak), you’ll see the “ProfileImagePath” entry in the right pane that points to a temporary profile.

temp-profile-key

Double-click the ProfileImagePath entry to edit the values data. Type the correct profile path and click OK. If you don’t know the correct profile location, open Windows Explorer and browse to C:\Users. In my example, I want to set the account to use the profile folder named Tom, so I point ProfileImagePath to C:\Users\Tom. If your profile folder was already corrupted or deleted, just delete the SID key.

profile-folder

Next, right-click on your old SID key that is maked as .bak, and then click on Delete.
original-profile-key

That’s it. Log off or restart your computer. Windows will sign in to your account with a local profile instead of a temporary profile, and you will no longer receive the temporary profile error.

How to Remove Windows 10 / 8 and Install Windows 7

March 16th, 2016 by Admin

“My laptop came with Windows 8 preinstalled. I really don’t like the new interface of Windows 8. I want to uninstall Windows 8 and install Windows 7. How to go about it?”

If you don’t like Windows 10 / 8, or the new OS doesn’t work as you expected, you might want to downgrade to Windows 7. In this tutorial we’ll walk you through the steps of removing Windows 10 / 8 and then install a fresh copy of Windows 7.

How to Remove Windows 10 / 8 and Install Windows 7?

Before get started, you need to prepare a Windows 7 installation disc. Make sure any important files already on your PC are backed up on a portable hard drive or an online backup solution.

Part 1: Disable UEFI and Enable Legacy Boot

New Windows 10/8 PCs come with UEFI firmware and Secure Boot enabled. Starting with Windows 8, Microsoft replaced BIOS with UEFI. Secure Boot will prevent Windows 7 installation disc from booting, so you need to disable the Secure Boot option and enable Legacy/CSM boot.

Here’s how to enable Legacy boot on a Windows 8 ASUS notebook:

  1. When powering on the computer, quickly and repeatedly press F2 to enter BIOS Setup.
  2. In the Security menu, use the arrow keys on your keyboard to select the Secure Boot Control option. Press Enter to set it Disabled.

    asus-secure-boot

  3. Go to the Boot menu, enable Launch CSM.

    asus-csm-mode

  4. Press F10 to save and exit.

Your BIOS may be different. If you don’t know how to access the UEFI/BIOS or couldn’t find the UEFI secure boot option, please check out the following articles:

Part 2: Convert Partition Scheme from GPT to MBR

Now we need to convert the hard drive from GPT to MBR, because Windows 7 couldn’t be installed on GPT partition. Follow these steps:

  1. Put the Windows 7 installation disc in your optical drive and restart to boot from it. You may have to change the boot sequence in your BIOS if it doesn’t boot to the CD. Watch for the “Press any key to boot from CD or DVD” message. Press a key as indicated.

    press-key-boot-cd

  2. When Windows 7 Setup appears, you’re asked to choose your preferred language and keyboard method. Just press Shift + F10 to launch the Command Prompt.

    language-to-install

  3. In the Command Prompt, type the following commands one by one, press Enter after each.
    diskpart
    list disk
    select disk 0
    clean
    convert mbr
    exit

    This will delete all partitions on your hard drive and convert it to a MBR disk.

    convert-mbr-parition

  4. Now close the Command Prompt. You’ll return back to Windows 7 Setup screen.

Part 3: Install Windows 7

  1. Once you come back to Windows 7 Setup Screen, select your language and click Next.

    language-to-install

  2. You will be now taken to the Install now menu. Click on Install Now to proceed.

    install-now

  3. Review the license agreement, and click “I accept the license terms“.

    accept-license-term

  4. On the Which type of installation do you want? window, click Custom (advanced).

    installation-type

  5. The next step is to choose where you want to install Windows 7. Inexperienced users can simply highlight the unallocated space and click Next.

    where-to-install-windows

    If you want to split the hard drive into two or more partitions, click on “Drive options (advanced)” which allows you to create new partitions, format or delete them. When it’s done, select the partition you want to install Windows 7 on and click Next.

    repartition

  6. Windows will begin installing. Now you can sit back and relax for a while, because this part is automatic. During this process, the PC will also restart on its own—don’t panic, that’s just part of the installation process.

    installing-windows

  7. When the installation is complete, you’ll go through the first-time setup process: type your computer name, set up a user account and password, enter product key, etc.

How to Disable Caps Lock Pop-up Notification in Windows 10 / 8 / 7

March 11th, 2016 by Admin

Every time you press the Caps Lock key, you might see a popup notification near the bottom-right corner of your screen. This can be a big problem since it takes focus off of the window/app you’re typing in. If you’re playing a game and accidentally press Caps Lock, clicking the popup will minimize the game.

caps-lock-notification

In this tutorial we’ll show you all possible ways to disable Caps Lock notification that pops up at the bottom right of your screen. The methods differ depending on the manufacturer of your computer.

Method 1: For HP computers

Here’s how to turn off Caps Lock notification on HP computers:

  1. Press the Windows logo key + R to bring up the Run box. Type regedit and hit Enter.
  2. After the Registry Editor opens, navigate to:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Hewlett-Packard\HP HotKey Support
  3. In right pane, double-click on the CapsLockOSD entry and set its value to 0.

Method 2: For Dell computers

Dell Quickset is supposedly a helpful little program that helps you keep track of your power management and other system settings. To disable Caps Lock notification on Dell computer, you can uninstall Quickset, or make a registry change by following the steps below:

  1. Press the Windows logo key + R to bring up the Run box. Type regedit and hit Enter.
  2. After the Registry Editor opens, navigate to:
    HKEY_LOCAL_MACHINE\SOFTWARE\Dell Computer Corporation\QuickSet
  3. In right pane, double-click on the QuickSetControl entry and set its value to 1.

Method 3: For Lenovo computers

  1. Open the Control Panel. Set the View by option to Large icons.
  2. Click on Display icon, then click on Change display settings on left panel.
  3. Click on the Advanced settings, then click on On-Screen Display tab.
  4. Check Enable on-screen display.
  5. Under “Indicator settings for NumLock and CapsLock” section, look for “While the numeric lock or caps lock is ON” section, choose the “Show the indicator for a few seconds” option.

    disable-caps-lock-indicator

  6. Click Apply, then click OK.

Method 4:

The Caps Lock notification might be handled by BlueTooth (BTTray.exe) process. You must edit the following registry entries to ged rid of this ugly alert:

  1. Press the Windows logo key + R to bring up the Run box. Type regedit and hit Enter.
  2. When the Registry Editor opens, navigate to:
    HKEY_LOCAL_MACHINE\SOFTWARE\Widcomm\BTConfig\General
  3. Change the value of KeyIndication from 1 to 0.
  4. Reboot your computer and the Caps Lock pop-up notification is gone!

Method 5:

This is a common method to decrease the display time for Caps Lock notification:

  1. Open Control Panel. Set the View by option to Large icons.
  2. Click Ease of Access Center.
  3. Select “Make it easier to focus on tasks“.
  4. Scroll down to the “Adjust time limits and flashing visuals” section, Check the checkbox to “Turn off all unnecessary animations (when possible)“. Under the option “How long should Windows Notification dialogue boxes stay open“, select 5 seconds.

    turn-off-notication

  5. Click Apply/OK.

The end result is that you will still see the notification that Caps Lock has been turned on or off, but it will not cause a pause in your typing.