Old posts

Group Policy to disable Autorun

Posted by on January 21, 2009 | 5 comments

Well, its been a while, but I thought I’d share this little snippet.

Theres a big hoo-ha going round at the minute about a number of viruses that are exploiting autorun.inf to spread.

You can read all the gorey details over at CERT “Microsoft Windows Does Not Disable AutoRun Properly

Essentially, the recommended fix is to set a registry key. I did read somewhere that this makes windows handle the file as a Win95 ini file but sadly I can’t find the blog/article where I read that anymore.

Approaching this as a sysadmin and wanting to undertake minimal effort to resolve this issue I’ve create a Group Policy adm file to solve apply it to all the machines in an Active Directory domain. I’ve copied the contents below and attached the file to this post.

To use it:

  1. Create a new group policy object in your AD
  2. Edit it, right click on the Administrative Templates folder and remove all the default ones listed and add the one below.
  3. Right click on the Administrative Templates folder and change the view filtering to not hide settings that can’t be fully managed
  4. Group poicy editor will now display the setting to disable autorun which will set the appropriate registry key

ADM files are just text. You can either download the one below or copy and paste this (watch for the line wrap on the last line!):
» Read the full post

Tags: , , ,

OpenDNS – free filtered DNS for the masses

Posted by on February 11, 2008 | No comments

I’ve just started using a new (free) service called OpenDNS – http://www.opendns.com – at home and I’ve also set it up at work.

You need to know very little about How The Web Works™ to know that this can be a good thing.

DNS is where your computer takes a name like www.livejournal.com and turns it into a number that is used to route your computer to the right webserver.

OpenDNS doesn’t just give you the correct address for a website. It maintains a list of Phishing websites and redirects these to a safe page warning you about the site you were about to visit.

Of additional interest to me for its use at my work (and to parents who’s kids have access to the Internet) is that they don’t just categorise phishing websites, but they also have categories of adult and mature sites you can bar if you want (once you’ve signed up)

Took me a few minutes to setup (a little extra poking required at work, naturally). Very unintrusive – no software to install, just a couple of settings to change and they have lots of help pages on how to do that.

Tags: , ,

Exchange Guid converter tool

Posted by on September 18, 2007 | 111 comments
ExchangePHPTech

In response to the amount of comments I’ve had (which are way way more than I was ever expecting!) on my Exchange Mailbox Recovery article, I’ve written a script to convert your guids from the bad format that exmerge gives you to the one thats required for updating the user account.

You can access it here. Please leave any feedback on this post.

Tags: , , ,

LastFM for Drupal

Posted by on August 23, 2007 | No comments
DrupalPHPTech

So, I’ve been playing with Drupal recently.

At first it did my head in, but then something sorta clicked. Not been near the Taxonomy module yet, but when I do I expect that process to reverse.

Anyway, I decided I needed a module that will allow users to show their LastFM stuff on their profile pages. I couldn’t find one so I wrote one.

I stared out with the Onlinestatus module as it did something very similar to what I was hoping to achieve.

Anyway, the module is attached should you feel so inclined. (Requires the profiles module I think. The one I based it on does anyway, so it probably does too.)

Download: lastfm.tar.gz

Tags: , , , ,

Photos in Active Directory

Posted by on November 9, 2006 | 56 comments

UPDATE:
The number one reason people come to this page is they want pictures in Outlook from the Global Address List.
It appears this is now possible using Outlook 2010 against Exchange 2010 as outlined by Ilse Van Criekinge in her Technet blog.


Oh my blog, how I’ve neglected you.

Here’s a couple of things I managed to cook up at work this week, again after spending an inordinate amount of time on Google looking for the answer and having to piece it together bit by bit.

The problem: how to store (and retrieve) staff photos in Active Directory. After the first twenty or so webpages I’d decided on using the jpegPhoto attribute. The secondary problem of getting the staff to submit to getting their pictures taken has already been solved by the new photopasses we’re all getting.
» Read the full post

Tags: , , , ,

Powered by Wordpress and Stripes Theme Entries (RSS) | Comments (RSS)