Useful Utils

A few useful utils I’ve come across recently

Sandboxie – runs your programs in an isolated space which prevents them from making permanent changes to other programs and data in your computer. http://www.sandboxie.com/

MagicDisk – a free alternative to Daemon Tools for mounting ISO images as disks – http://www.magiciso.com/tutorials/miso-magicdisc-overview.htm

EasyBCD – a free tool to manipulate Windows boot menus – http://neosmart.net/dl.php?id=1

Dave

‘Source Path Too Long’ error when using Shadow Copy Service

When using Shadow Copy Service (also known as “Previous Versions”) to restore or copy a file you may receive an error which states ‘Source Path Too Long’

Error

This is due to a limitation of the Windows File System . In the Windows the maximum length for a path is defined as 260 characters for example “H:\some 256-character path string”. Programs which break this limitation can cause this and other problems on clients and servers.

Workaround

In order to restore files and folders where this error occurs you need to map a Network drive to the location to shorten the path. This changes a long path to a short one allowing the restore to take place.

So a long path like

\\campus\dept\mydeparmtnet\management\management reports\trial system\pre-adoption \Research and development with no reponse\reports\2010

Becomes

X:\2010\

The restore can then be performed as usual.

Patching ProLiant Firmware & Software with HPSUM (HP Smart Update Manager) on Windows Systems

This will hopefully be of help with for people using HP Proliant Servers who want quickly to patch their Firmware and Software to the very latest versions

ProLiant Support Packs (PSP) represent operating system (OS) specific bundles of ProLiant optimized drivers, utilities, and management agents. These bundles of software are tested together to ensure proper installation and functionality.

This means that the The Proliant support packs will not necessarily contain the latest versions, just a baseline tested combination and that the software\firmware in use could still be vulnerable or lack the updated functionality in later versions.

It’s possible (and painful) to install updates via the System Management Homepage but this requires lots of restarts and lots of waiting around. The easiest method is to use HPSUM (HP Smart Update Manager) which ships as part of the ProLiant Support Pack but has the ability to download the very latest Firmware and Patches from HP as part of the update process.
Here is how to do it:

1. Extract the ProLiant Support Pack

2. Locate and run setup.exe. This will start the Windows GUI (there is also a command
line version setupc.exe for Windows Server Core)

3. Select the Check ftp.hp.com option and set ‘Type of updates to use’ to ‘Both’.

4. Select ‘Start Inventory’

5. If asked for permission to download from HP.com select yes.

6. At the next screen select Local Host > Next

7. At the next screen it is important to select the currently installed ProLiant Support Pack and ‘ALLOW NON-BUNDLE PRODUCTS’ and ‘ALLOW NON-BUNDLE VERSIONS’. If these options are not checked components will not be update above the level of the currently installed Support Pack.

8. At the next screen you will see all of the very latest updates available. Select the ones you want and hit install. Restarts are optional but some components swill not update until after the next restart.

Free e-book: Keep Yourself and Your Stuff Safe Online

Microsoft has teamed up with author Linda McCarthy to offer a free downloadable version of her new book Own Your Space – Keep Yourself and Your Stuff Safe Online. The book covers a variety of computer security and online safetly topics and is aimed at internet savvy teens, as well as parents and educators. Personally I’d say that the chances of teens reading it all the way through aren’t great, but parents of online offspring should definitely get up to speed with this stuff.

Frankly I’d recommend that anyone who uses the internet and isn’t as capable as Sarah Connor at fighting off the machines, should read this.

Own Your Space

Both PDF and XPS versions are available at the Microsoft Download Center.

Free e-book: Introducing Windows Server 2008 R2

All you need is a Windows Live ID.

Free e-book offer from Microsoft Press: Introducing Windows Server 2008 R2
Learn about the features of Windows Server 2008 R2 in the areas of virtualization, management, the web application platform, scalability and reliability, and interoperability with Windows 7. Sign in to download Introducing Windows Server 2008 R2, written by industry experts Charlie Russel and Craig Zacker along with the Windows Server team at Microsoft.

http://www.microsoft.com/…dowsserver.aspx

Outlook, text formatting and signatures

Summary: appending three spaces to the end of each line of a text block (eg a signature block) in a plain text message will stop Outlook from joining lines and messing up your formatting.

Long version…

For a while now we’ve had niggling issues with formatting of plain text email signatures in Outlook.
Problem was that a signature sent as

--
Paul Haldane
Infrastructure Systems
Information Systems and Services, Newcastle University
Claremont Tower
Claremont Road
Newcastle upon Tyne
NE1 7RU

Would be displayed (by default) in Outlook as

--
Paul Haldane
Infrastructure Systems
Information Systems and Services, Newcastle University Claremont Tower Claremont Road Newcastle upon Tyne
NE1 7RU

I don’t understand why the last line isn’t joined on to the penultimate line but I assume that it’s another feature of Outlook’s rendering algorithm.

NB That’s not my real email sig – the one that I use is

--
Paul Haldane
Manager, Infrastructure Systems
Information Systems and Services
Newcastle University

The example I’ve used at the top has characteristics which lead to the problem appearing while my real sig doesn’t (which had been one of the puzzling factors during the investigation).

The correct rendering can be shown by the recipient selecting “restore line breaks” when looking at a message or un-ticking “Remove extra line breaks in plain text messages” (Options->Preferences->E-mail options). Even if we decided that changing the default setting for University managed machines to not remove extra line breaks was a good idea, we obviously can’t control the settings for external recipients.

One of the reasons that this issue was hard to track down was that not all sigs demonstrated the problem. Mine didn’t; our director’s did and our VC’s did (which is one of the things that gave the issue visibility).

Comparing the original versions of the three I guessed that the common factor might be line length. Both of the problem sigs had longer lines than mine – split was somewhere between 38 and 44 characters. More testing …

INPUT

o three four five EOL
0000 xxxx 1111 XXXX 2222 xxxx 3333 XXXX 4
One two three four five EOL

40

One two three four five EOL
0000 xxxx 1111 XXXX 2222 xxxx 3333 XXXXx
One two three four five EOL

39

One two three four five EOL
0000 xxxx 1111 XXXX 2222 xxxx 3333 XXXX
One two three four five EOL

OUTPUT

41

One two three four five EOL
0000 xxxx 1111 XXXX 2222 xxxx 3333 XXXX 4 One two three four five EOL

40

One two three four five EOL
0000 xxxx 1111 XXXX 2222 xxxx 3333 XXXXx One two three four five EOL

39

One two three four five EOL
0000 xxxx 1111 XXXX 2222 xxxx 3333 XXXX
One two three four five EOL

So the breakpoint is 40. Lines after that are joined.

One unexplained fact was that the longest line in the VC’s sig was

Vice-Chancellor: Newcastle University

Which if you count is only 37 characters. However previous attempts to fix the problem by appending spaces to the end of the line (see below) meant that the line had two non-breaking spaces and a space at the end bringing the length to 40. (Non-breaking spaces can be explicitly inserted by typing control-shift-space in Outlook’s message editor but there might be some cleverness going on that converts three adjacent spaces to a mixture of non-breaking and real.)

Tests and investigation had got us a reasonable model for when the problem would happen (and an explanation for why I didn’t see it with my sig). We didn’t yet have a solution.

Internet folklore suggests that adding three spaces to the end of each line (or two spaces at the start; or a tab at the end – opinions vary as to which is the most consistent) will result in messages being rendered in Outlook as intended.
I tried appending three spaces to each non-empty line in the input. This gave the desired behaviour; lines were rendered correctly by the recipient’s instance of Outlook (no matter what their setting for removing extra line breaks was).

I was just looking back through my open tabs to put in some references to the Internet folklore that I’ve mentioned and spotted a very informative post that I must have consistently skimmed over.
On
http://stackoverflow.com/questions/136052/how-do-i-format-a-string-in-an-email-so-outlook-will-print-the-line-breaks mtruesdell says the following …

Every message starts with continuation off.
Lines less than 40 characters long do not trigger continuation, but if continuation is on, they will have their line breaks removed.
Lines 40 characters or longer turn continuation on. It remains on until an event occurs to turn it off.
Lines that end with a period, question mark, exclamation point or colon turn continuation off. (Outlook assumes it’s the end of a sentence?)
Lines that turn continuation off will start with a line break, but will turn continuation back on if they are longer than 40 characters.
Lines that start or end with a tab turn continuation off.
Lines that start with 2 or more spaces turn continuation off.
Lines that end with 3 or more spaces turn continuation off.

This is from testing against Outlook 2007 – he’s obviously got more patience than me. It would be so much easier if Microsoft published the algorithm that Outlook uses – at the moment there’s nothing to say that this behaviour won’t change in future versions.

Driver support for Windows 7 using Dynamic Driver Provisioning

Just a bit of info for those who are considering using WDS Dynamic Driver Provisioning to add hardware support to Windows images, and also for anyone who is curious to know how we provide operating system support to the myriad of PCs, servers and laptops out there on campus

In order to fully support Windows 7 client deployment and to start to wind-down support for Windows XP, recently we converted 2 out of 3 of our Mixed-mode WDS servers to Native Mode. The Native Mode servers run on Server 2008 R2 and therefore include the option to use Dynamic Driver Provisioning (DDP).

So what is DDP and why is it good for us?

Microsoft tell us that this new WDS functionality provides the following benefits:

  • Eliminates the need to add driver packages manually by using the tools in the Windows Automated Installation Kit.
  • Minimizes the size of install images.
  • Makes it easier to update and manage drivers because the drivers are stored outside the images.
  • Eliminates the need to maintain multiple images for different hardware configurations.
  • Eliminates the need for additional tools to manage drivers (for example, the Microsoft Deployment Toolkit (MDT) or non-Microsoft solutions).
  • Eliminates the need to use an Unattended installation file to add drivers.

And Microsoft are quite right. So far, DDP is working beautifully in our environment. I wont say it’s not a little clunky in places, because it is. Certainly some of the Filters could be better. But this will hopefully come in later versions.

For us, DDP is the perfect solution because we don’t need anything fancy to deploy our operating system images – the MDT is a sledgehammer to crack a nut in our environment, where software is deployed separately using Group Policy and SpecOps (http://www.specopssoft.com/web/home.aspx).

For those who are interested in the detail of how we use DDP here at Newcastle, please feel free to browse my setup notes

Delegating Group Policy Objects

A common issue which we hear about is IT Staff who manage delegated Organisational Units (OU) in the Active Directory not being able to edit Group Policy Objects (GPOs) created by other members of their team or people who have left the University.

When a GPO is created the creator (along with some other built in Security Principals are assigned rights to Edit, Settings, delete or modify security. No one else will have these rights until they are assigned them. As with nearly all cases when working with Active Directory the best way to do this is via Group membership.

Every OU we delegate has an Admin Group associated with it for example ISS OU Admin Group or and this is the one you should use. If you are not sure what yours is called each for your s-id in Active Directory and select the ‘Member of’ tab from its properties. Once you know the name of your group you can delegate your GPOs.

Steps to Delegate GPOs

1. From within the GPMC (Group Policy Management Console) Select the Delegation Tab

2. Select the Add button from the bottom of the screen.

3. Add your OU Admin Group Name and select OK.

5. Select ‘Edit settings, delete, modify security’ and select OK.

6. Now all members of your OU Admin Group can edit the GPO