You may have heard about Microsoft’s antivirus solution (Forefront Client Security, the corporate version – there is also a home user version), well now there is an additional way of deploying it (see button link) – untested, but sounds like piece of pie 🙂

Microsoft’s Live Care (home user version);
http://onecare.live.com/standard/en-us/default.htm

Microsoft Forefront Client Security;
http://www.microsoft.com/forefront/clientsecurity/en/us/default.aspx

Corporate deployment (New method);
http://www.codeplex.com/fcscompete/Release/ProjectReleases.aspx?ReleaseId=14440

A few web-casts that may also be interesting (have not seen them myself yet);
http://whitepapers.techrepublic.com.com/abstract.aspx?docid=348503
http://whitepapers.techrepublic.com.com/abstract.aspx?docid=348463

Ever tried re-installing a file/print server?  And ever had to manually recreate a number of printers / print cue’s?  Its a horrible way to spend an evening :-/

And actually its a total waste of good (Battlefield playing) time, if you use “Print Migrator” from Microsoft to export the printers in advance you can simply re-import all printers and cue’s in minutes.  In order for this to work properly, you should export your printers from time to time (as a disaster recovery preemptive step).

Print Migrator is a Microsoft utility, and its free 😉

http://www.microsoft.com/windowsserver2003/techinfo/overview/printmigrator3.1.mspx

Additional disaster recovery hints;
Be sure to backup;
DHCP scopes,
Printers,
Shared folder info (a reg key) – “HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceslanmanserverShares” (you can once you have restored all data simply import this registry key and all shares are restored with correct NTFS).

Export data via commandline this way;
Create a C:ackup directory
use this commandline:

regedit /e c:ackupshares.reg HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceslanmanservares

printmig -b c:ackup\%computername%-Printers.cab

Now you will have a dump of your printer cue’s and the setup of all your shares on this server/machine, these can be found in c:ackup.

This will reduce your recovery time tenfold.

I use a scheduled script like this to ensure I have a current backup of printers and shares;

@Echo off
cls
Echo *************************************************************************************
Echo * SYSTEMBACKUP SCRIPT V 20081104        *
Echo * This script will backup printers, dhcp and shares to c:systembackup directory    *
Echo *************************************************************************************
Echo.

rem
rem   To schedule at 12:00 /interactive /every:sa “c:systembackupsystembackup.cmd”
rem

mkdir c:systembackup
mkdir c:systembackupdhcp
mkdir c:systembackupprinters
mkdir c:systembackupshares

Echo System Backup Commencing… [SHARES]
regedit.exe /e c:systembackupshares\%computername%-shares.reg HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceslanmanserver
Echo System Backup Commencing… [PRINTERS]
c:systembackup oolsprintmig.exe -b c:systembackupprinters\%computername%-Printers.cab
Echo System Backup Commencing… [DHCP]
del /F /Q c:systembackupdhcp*.*
copy %systemroot%system32dhcpBackup
ew c:systembackupdhcp
regedit.exe /e c:systembackupdhcp\%computername%-dhcp.reg HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesDHCPServerParameters
netsh dhcp server dump > c:systembackupdhcpDHCPconfig.cfg

Echo Done.
exit

If you have a MySQL database somewhere you obviously need to back it up, now I am not much into the inner workings of a MySQL database and have limited access to my hosted services, however I managed to find a link to a utility you can use ‘offsite’, its called “MySQL Administrator 1.2” dooh 😉

Anyhow, you can get it from here;
http://www.mysql.com/ (you may need to do some digging as versions change and I thus not can provide a permanent download link).

How to backup your DB (Danish link);
http://www.web10.dk/help/faq/mysql_backup

Want to expand your knowledge in the security field? ofcause you do, its cool 🙂

Spend some time visiting;

http://www.irongeek.com – tons of cool stuff and tutorials
http://www.hak5.org – a cool show with neet stuff from modding to hacking.

Looking to expand into Pentesting, then you should take a look at;
http://www.metasploit.com/

Now this is not for noobs, its hardcore – but hey that is what you need working in this field.

Another link would be Backtrack (a linux boot cd with all the stuff you need);
http://www.remote-exploit.org/backtrack.html
http://en.wikipedia.org/wiki/Auditor_Security_Collection#Auditor_Security_Collection

Caution Note,if starting out in this field, be sure to NOT try pentesting random sites/networks, you may do it only for fun and to learn, but it may be illegal (depending on regional law, and on what tests you perform) furthermore the sysadmin on the other end may not enjoy your ‘school project’ and take it very serious.

Ever tried Knoppix?  The cd/dvd bootable version of linux..

Its fairly cool and useful if you need to mess around with linux, but don’t want to reinstall your machine with linux..

Well cd/dvd boot is all very well, but would it not be cool to do it from a USB stick instead?  You could have it in your pocket ready for use anytime!?

Yeah, I think so too, so without further delay here is a link to a how to guide 🙂  Enjoy..

http://www.pendrivelinux.com/2007/01/01/usb-knoppix-510/

We all recall PGP the cool email encryption master of the 90’s, however after going commercial and tumbling a bit around the idea more or less died out, maybe because of the introduction of certificate based counterparts.

Never the less it was very cool and worked very well, and now for the good news, it has gone GNU and is awailable once again as free software, now I make it sound like this is breaking news – its not but I just recently stumbled upon it :-).

It also integrates into MS Office 2003/2007 nice

Check the website;
http://gpgee.excelcia.org/

Alternative
Just stumbled across yet another GNU open PGP util, have not tried it and it does not appear to have support for Office, but may still be worth a look;
Enigmail – http://enigmail.mozdev.org/home/index.php

With a 8 or 16gb usb pen you may be wandering what to fill it up with?

Well dont, here is a “getting started” list to fill it up 🙂

Link for the list;
http://www.makeuseof.com/tag/portable-software-usb/

100 Portable Apps for your USB Stick (both for Mac and Win)

Free Portable Apps This stuff can be installed on any portable drive, i.e. USB thumbdrive, PDA or an iPod. You can use them at work, school, or any other place where you can plugin your device. Check them out, you can either scroll-down for relevant category, i.e office software, email tools, messengers, games, etc. or get a ‘all-in-one’ package (all essential tools) . While there are more apps for windows users, I tried to include a mac version for each essential tool. All free. Enjoy!

What is a portable program ? : A portable program is a piece of software that you can carry around with you on a portable device and use on any other computer. It can be your email program, your browser, system recovery tools or even an operating system. The coolest part about it, is that all of your data and settings are always stored on a thumbdrive so when you unplug the device, none of your personal data is left behind.

Portable Office Software

  • Abiword [Win (6.3 mb) / Mac (9.5 mb)] – word processor (compatible with Microsoft word)
  • OpenOffice [Win (65 mb) / Mac (127 mb)] – free alternative to Microsoft Office (fully compatible with Microsoft Office docs)
  • PDF Viewers: Sumatra [Win (1.1 mb) ], Foxit PDF Reader [Win, (1.8 mb) ]
  • Notepad ++ – feature-rich Notepad replacement.

Portable Email/Calendar/ToDo Programs

Portable Text and Voice Messengers

  • All-in-One (Yahoo, MSN, ICQ, etc.): Gaim [Win, 6.9 mb], Miranda IM [Win, 1.2 mb], Adium [Mac, 15.5mb], Trillian [Win]
  • iChat [Mac] – requires locally installed iChat
  • Newspeak [Mac, 1mb] – Newspeak Cocoa IRC client
  • Skype – exlpains how to make skype portable

Portable Media Tools (Audio / Video)

  • Audacity [Win (2.4 mb), Mac (5mb)] – simple audio editor and recorder
  • VLC [Win (9.3 mb), Mac (24 mb)] – powerful media player that plays almost all popular audio and video formats
  • K-Lite Mega Codec Pack with Media Player (resource unaccessible) – another powerful media player for playing all conceivable formats
  • iShout [Mac, 7mb] – record and listen to your favorite internet radios.
  • CocoaJT [Mac, 8.7mb] – stream live TV programs from major broadcast channels.

Portable Graphics Viewers and Image Editors

     

  • GIMP [Win (8.6 mb), Mac (87.5 mb)] – free alternative to Photoshop
  • IrfanView [Win, 1013kb] – fast graphic viewer with basic image editing features
  • XNView [Win, Mac, Linux] – image viewer and converter (supports more then 400 image formats)
  • Inkscape [Mac, 24.6mb] – scalable vector graphics editor

Portable Browsers and Internet Tools (FTP, Feedreaders, Torrent Clients…)

Portable Security Software

  • Antivirus: ClamWin [Win, 5.9mb], Dr.Web CureIt [Win, 5.5 mb]
  • Keepass Password [Win, 1mb] – securely store and manage your passwords
  • Omziff [Win, 0.5mb] – lets you encrypt/decrypt a file, using secure encryption algorithms. Also includes a password generator, file shredder, file splitter and some more tools.
  • LockNote [Win] – simple text file that lets you store sensitive info with 256bit password encryption.
  • RoboFor2Go [Win] – secure password manager and form filler
  • Smart Sniff [Win, 57kb] – lets you inspect network traffic that passes via your network adapter.

Portable Games

Other Portable Utilities

  • 7Zip [Win, 1.1 mb] – file archiver and compressor, supports 7z, ZIP, GZIP, BZIP2, TAR, RAR and more
  • Registry Tweaker [Win, 1.52mb] – registry tweaking tool
  • Restoration [Win, 229kb] – handy program for recovering deleted (or formatted) files
  • YamiPod [Win] – powerful iPod manager (copy mp3/AAC files to and from your iPod, import/export playlists, search for songs, remove duplicates,..). More iPod tools
  • Drive Manager [Win, 1191 kb] – quick summary for each local and removable drive.
  • PStart – lets you organize and create menu-like list for quicker access to your portable programs.
  • SyncPAppX – script that syncs preferences between portable and local applications.
  • RQ Money – handy utlity to manage your credits and debts
  • SIW – a system analysis tool that tells you almost everything you need to know about a computer, i.e. hardware, configuration settings, etc.
  • WinAudit – one more analysis tool
  • Convert [Win, 155 kb] – fast metric unit conversion tool (distance, temperature, volume, time, speed, mass…)
  • UK Calender [Win, 321kb] – straightforward calendar with ToDo and reminders
  • CPU-Z [Win] – provides detailed info about your processor and other components
  • Country Codes [Win, 1358 kb] – a small database of country codes and additional information for all countries.
  • TreePad Lite [Win, 866kb] – personal database program, lets you store all your notes, emails, bookmarks, etc. into one well-structured file
  • StartupList [Win, 158 kb] – displays all items that are in any way related to your computer startup and are executed without any user interactions
  • eTextReader [Win, 279kb] – read plain text files provided by Project Gutenberg in a book-like manner.
  • Index Your Files [Win, 640kb] – provides an easy way to create index databases (of specified folders and drives) for quick file/term search
  • RockXP [win, 768kb] – handy utility for retrieving Win XP’s product key
  • WhoisThisDomain [Win, 42kb] – view owner and registration info for any domain name
  • Converter – portable unit convertsion utility

Portable Developer Tools (Techies Only)

  • Nvu [Win (7.3 mb), Mac (12 mb)] – easy-to-use webpage editor. Simpler alternative to Dreamweaver and Microsft Frontpage
  • Server2Go – apache webserver (no configurations needed)
  • InstantRails[Win, 60mb] – contains Ruby, Rails, Apache, and MySQL, all preconfigured and ready to run.
  • Putty [Win, 0.9 mb] – lightweight telnet and SSH client
  • Follow-Me IP – displays your external IP address
  • XAMPP [Win, 25/17 mb] – integrated server package of Apache, mySQL, PHP and Perl. Just Unzip and Run
  • HTTP File Server [Win] – simple and easy-to-use file server for personal file sharing.
  • CurrPorts [Win, 46kb]- lets you view a list of ports that are currently in use, along with applications that use them
  • FTP Servers: Quick’n Easy FTP Server [Win, 355kb], PureFTPdManager [Mac, 10.9mb]

All-In-One Packages

  • PortableApps Suite [Win, 89.5mb] – includes 7 programs for essential needs (office, email, IM client, etc.) + cool Startup manager and backup utility
  • FSuite [Mac, 668.3mb] – over 30 useful tools in one file (Office, Graphic, Audio, Video, Internet, Developer Tools and Games)

Portable Operating Systems (’HowTo’ Articles)

USB ThumDrive Tips

That’s mainly it… In case you’re looking for something that wasn’t mentioned above, there are a couple of resources you may want to check out. These are Portablefreeware.com and Tinyapps.org

I keep forgetting how to uninstall the ePO agent, so this is mostly a reminder to myself;

Command line to manually remove ePolicy Orchestrator.
FrmInst.exe /REMOVE=Agent

FrmInst.exe is in the “program filesmcafee…..” directory…

And no you are right its generally not a good idea to remove the ePO agent, however as we are moving to Microsoft Forefront Client Security we sometime come across a remaining ePO agent which makes not much sense 🙂

Useful Command Lines;
Uninstall McAfee Virus Scan 8.6
MsiExec /X{35C03C04-3F1F-42C2-A989-A757EE691F65} /q
Uninstall McAfee Virus Scan 8.0i
msiexec /uninstall {5DF3D1BB-894E-4DCD-8275-159AC9829B43} /qn
Uninstall McAfee Virus Scan 7.1
MsiExec /X {59224777-298D-4E9C-9AEB-4A91BDA01B27} /q

Uninstall ePO agent;
"C:\Program Files\Network Associates\Common Framework\FrmInst.exe" /forceuninstall
or
"C:\Program Files\McAfee\Common Framework\FrmInst.exe" /forceuninstall

If you are lazy (like me ;-)), then I have created an uninstaller that will do all the work for you,
it was created in the AutoIT script language, you can download it both as a
stand alone EXE and an AU3 (the script file);

https://readmydamnblog.com/downloads/McAfee_Uninstall.au3
or the compiled EXE version here
https://readmydamnblog.com/downloads/McAfee_Uninstall.exe

Want to know more about the AutoIT script engine? look here; 
https://readmydamnblog.com/?p=966

If uninstall FAILS, then here is McAfee’s own guide for manual removal;
https://kc.mcafee.com/corporate/index?page=content&id=KB58597

ProductKeyExplorer
Here is a tip for backing up all those product keys you have on your system today (be that the key to your CD burner software or the latest version of World of Warcraft).

We all hate to reinstall our PC, but every now and again it is necessary.  One of the very annoying things are all those serial keys you enter for your products, where DID you write that down or print it out to when you bought it.

Well this product will assist you with this, it can extract serial/product keys for a ton of programs all in one convenient sweep and at a price of just 29$ it is a bargain, just run in before a reinstall and print a report, that was the good news.  Good news often is accompanied by bad and this is no exception, the very same product can be used by evil doers to extract YOUR serial/product keys from YOUR machine all they need is to have physical access to it, or if they know your credentials they can even do so via the network.

http://www.nsauditor.com/product_key_finder.html