Hiren's cd fix for lsass and Registry Corruption

(Source: TechSupportForum)


This is what worked for me.

Requirements: 
1) System Restore enabled in windows.
2) NTFS Dos Pro and a Boot CD/Disk - Preferabbly Hiren's Boot C (which is loaded with all the apps you need). 
3) Don't use the system.bak file located in windows\repair.
4) Don't assume that either of the _regis~1, ~2, ~3 or ~4 files in a RP\Snapshot folder are the registry files you need - they are not.


Steps.
1) In your BIOS, set 1st boot device to CD.
2) Reboot with Hiren's Boot CD (or similar).
3) Load NTFS DOS Pro. (in the NTFS Ext2Fs Tools menu on the Hiren CD). You can skip Checkdisk
(use pro instead of regular NTFS as it lists long file name details)
4) Once loaded, the 2nd last line of text indicates the new temporary drive letter of your HDD, in my case D:
5) switch to D:
6)i) You will probably have short file and folder names displayed instead of long when you 'dir', however the full name appears once you are in the directory.
6ii) type (without quotes ' cd system~1\_restor~1\rp95\snapshot '
(RP = restore point, the higher the number the more recent the rp. if this doesn't work for you, try a lower/older number).
7)type ' dir/p ' to list the files in the directory. (use /p, not /w for this)
8) Look through the text (file details) on the right to find ' _REGISTRY_MACHINE_SYSTEM '. Look across to the left, this is the file size (which should be fairly large, eg 5,365,760 in my case). To the left again is the actual file name, in my case ' _r62e7~1 '.
9) You may need to tap the space bar again to finish listing all the files.
10) Once at the command prompt, type ' copy _r62e7~1 d:\windows\system32\config\system '
11) Overwrite = Y
12) Reboot (CTR+ALT+DEL)
13) Load windows.... sucessfully hopefully.

If this doesn't work for you, try;

A) Reload NTFS PRO, go back to the same RP\snapshot directory and copy the following files (copy the actual file name, not the details text).

_REGISTRY_MACHINE_SOFTWARE
_REGISTRY_MACHINE_SAM
_REGISTRY_MACHINE_SECURITY
_REGISTRY_MACHINE_DEFAULT

copy (overwrite) the above files to their corresponding file in the config directory (step 10). eg _REGISTRY_MACHINE_SOFTARE copy over ' software '

Above are all the files that Microsoft recommends you overwrite..... however MS caused my lsass loop in the first place!

Reset BPOS User Password via Powershell

You must first install Microsoft Online Services Migration Tools.

ps> $cred = get-credentials

(type in email address + password of BPOS Admin Credentials)

• Can specify not to change on next logon
• Can set password to one previously used.
• Complexity requirements enforced

ps> Set-MSOnlineUserPassword -Credential $cred -Identity user@domain.com -Password P@ssw0rd1 -ChangePasswordOnNextLogon false

Configure NTP on Windows Server 2003

http://www.ozzu.com/mswindows-forum/how-configure-ntp-server-windows-2003-server-t91197.html

Remote Desktop + Offline Files

If Remote Desktop is configured to support multiple connections, you cannot enable offline files.

In the registry, you need to change:

HKLM\Software\Microsoft\Windows NT\CurrnetVersion\Winlogin\allowMultipleTSSessions from "1" to "0"

Source: http://forums.techarena.in/windows-server-help/57425.htm

File was rejected by digital signature policy

You receive 'Error 1718. File FileName was rejected by digital signature policy' when you attempt to install a large Windows Installer package or patch on Windows Server 2003?

When you attempt to install a large .msi package or .msp package on Windows Server 2003, you receive:

Error 1718. File was rejected by digital signature policy.

This behavior occurs if the server has insufficient contiguous memory to verify that the package is correctly signed.

To workaround this behavior:

01. Start / Run / control admintools / OK.

02. Double-click Local Security Policy.

03. Expand Software Restriction Policies. If no software restrictions are displayed, right-click Software Restriction Policies and press Create New Policy.

04. Double-click the Enforcement Object Type in the right hand pane.

05. Check the All users except local administrators radial button and press OK.

06. Shutdown and restart your server.

07. Install the package while logged on as a user who is a member of the local Administrators group.

08. Repeat steps 1 - 4.

09. Check the All users radial button and press OK.

10. Shutdown and restart your server.

NOTE: This tip applies to Windows XP also.

Source: WindowsITPro

Fix for When Pinned Jump List Items Get Stuck in Windows 7

Source: How-To Geek

msoobe.exe crash

Start Windows in Safe Mode with Command Prompt.

Type: %windir%\ie7\spuninst\spuninst.exe

Let it complete and then restart when it asks.

Retry activation.

Source: Microsoft Forums