Solriche
MS Windows XP Professional - Performance Tweaks
Please note, not all of these tweaks have been tested, they are used at your own risk.
The following information has been compiled from various internet sources.
Thank you to all those who took the trouble to publish these tips and tweaks to make life easier for us all.
System utilities
- Add the System Policy Editor
Add the shortcut C:\WINDOWS\system32\gpedit.msc to your administrative tools folder.
This allows control of almost everything.
- Add the System Configuration Utility
Add the shortcut C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\msconfig.exe to your Administrative Tools folder.
This allows control of StartUp files, Applications and System Files.
Services.msc may be safer
Pop up balloons
Disable Messenger and passport balloon.
- Open your registry and find the key below.
- Create or edit the existing DWORD value named "Hide Messenger" and set the value to "2" to disable the popup.
- Key:[HKEY_LOCAL_MACHINE\Software\Microsoft\Outlook Express]
- Value Name: Hide Messenger
- Data Type: REG_DWORD
- Data:(2 = disabled)
Passport balloon.
- Open your registry and find the key below.
- Edit the existing BINARY value named "PassportBalloon" and set the value to "0a" to disable the reminder
- Key:[HKEY_CURRENT_USER\Software\Microsoft\MessengerService]
- Value Name: PassportBalloon
- Data Type: REG_BINARY
- Data:(0a = 10)
Show hidden files
In any folder that contains files. Click on the tools menu and select folder options.
Then click on the view tab.
Locate where it lists Hide extensions of known file types and uncheck it.
Click apply to all folders
Click OK
Remove Shared Doc's from My Computer
Start regedit
Navigate to HKEY_LOCAL_MACHINESOFTWARE/Microsoft/Windows/
CurrentVersion/Explorer/MyComputer/NameSpace/DelegateFolders.
Locate the key {59031a47-3f72-44a7-89c5-5595fe6b30ee}.
Right click on it and select delete.
Reboot !
Stop the "search web for program" pop up
Stops that "go to the internet to find a program to open this file with" popup before the "choose" file dialog. Open regedit and browse to;
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
and add a DWORD value called NoInternetOpenWith to the registry key, with a value of 1
Do not Cache Folder Thumbnails
To make folders with thumbnail images start up faster
Go to control panel and then folder options
Click on the view tab and Uncheck "Do not cache thumbnails".
Quick switch user screen
Press Winkey+Q and hold it for a second.
Repress Q to rotate to other users
Quick opening of explorer
Press Winkey+E
Create your own popup menu in the TASK BAR
You can create your own popup window other than START MENU in the taskbar.
Put all the shortcuts to the applications that you want to popup in a folder .
Then you right click on taskbar -->toolbars -->new toolbar --> and select the folder
Remove the annoying and useless search dog
All you need to do is add one simple registry key. Regedit your way to:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState
Right-click an empty space in the right pane and select New > String Value
Name the new value Use Search Asst
Double-click this new value, and enter no as it's value data
Reinstall programs the easy way
If you need to re-install a 'hidden' Windows component, eg. outlook express or messenger, there is an easy way to do this... [but you will have to BE CAREFUL!]
Open the INF folder in your windows folder [C:\WINDOWS\INF]
Find the *.inf files [view>arrange icons by>type]
Find the application title you need in the filename [for example messenger is msmsgs.inf] If you are unsure of the installer, RIGHT CLICK on the file, then select open, at the top of the file should say what application it is:
- ; MSMSGS.INF
- ; Setup INF file for Messenger
When you have found the file the right click on it then click install.
Tip: To reinstall Microsoft Outlook Express, Right click and select install on MSOE50.inf
Fast web page entry for .com sites
Instead of typing http://www.anysite.com you can just type anysite then press ctrl+return and it automatically puts in the http:// and the .com
Desktop icon to send mail without opening outlook express
You can easily create an icon on your desktop that allows you to compose and sand a mail by double clicking on it without opening Outlook Express.
- Find a free space on your desktop and right click on it on New -> Shortcut
- Enter in the space 'mailto:' (w/out quotes)
- Press 'Next' button.
- Enter in the space a name for the icon (i use 'mail')
- Click 'finish'.
Windows media player on XP can encode high quality mp3.
Install an mp3 codec, then make the following registry changes:
HKEY_LOCAL_MACHINE\Software\Microsoft\MediaPlayer\Settings\MP3Encoding
"LowRate"=dword:0000dac0
"MediumRate"=dword:0001f400
"MediumHighRate"=dword:0003e800
"HighRate"=dword:0004e200
Reboot and changes will be evident in media player options.
Back to contents.
Speed up Diskcache
Open Regedit
[HKEY_LOCAL_MACHINESYSTEM/CurrentControlSet/ControlSession/ Manager/MemoryManagement/IoPageLockLimit];
Modify the value in Hex depending on the size of your RAM
RAM: modified value(Hex)
64M: 1000;
128M: 4000;
256M: 10000;
512M or more: 40000.
Reboot.
XP memory tweaks
Below are some Windows XP memory tweaks. They are located in the windows registry at: HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/ SessionManager/MemoryManagement
DisablePagingExecutive - When enabled, this setting will prevent the paging of the Win2k Executive files to the hard drive, causing the OS and most programs to be more responsive. However, it is advised that people should only perform this tweak if they have a significant amount of RAM on their system, more than 128 MB, because this setting does use a substantial portion of your system resources. By default, the value of this key is 0. To enable it, set it to 1.
LargeSystemCache - When enabled, the default on Server versions of Windows 2000, this setting tells the OS to devote all but 4 MB of system memory, which is left for disk caching, to the file system cache. The main effect of this is allowing the computer to cache the OS Kernel to memory, making the OS more responsive. The setting is dynamic and if more than 4 MB is needed from the disk cache for some reason, the space will be released to it. By default, 8MB is earmarked for this purpose. This tweak usually makes the OS more responsive. It is a dynamic setting, and the kernel will give up any space deemed necessary for another application, at a performance hit when such changes are needed. As with the previous key, set the value from 0 to 1 to enable. Note that in doing this, you are consuming more of your system RAM than normal. While LargeSystemCache will cut back usage when other apps need more RAM, this process can impede performance in certain intensive situations. According to Microsoft, the '0' setting is recommended for servers running applications that do their own memory caching, such as Microsoft SQL Server, and for applications that perform best with ample memory, such as Internet Information Services.
IOPageLockLimit - This tweak is of questionable value to people that aren't running some kind of server off of their computer, but we will include it anyway. This tweak boosts the Input/Output performance of your computer when it is doing a large amount of file transfers and other similar operations. This tweak won't do much of anything for a system without a significant amount of RAM, if you don't have more than 128 MB, don't even bother, but systems with more than 128 MB of RAM will generally find a performance boost by setting this to between 8 and 16 MB. The default is 0.5 MB, or 512 KB. This setting requires a value in bytes, so multiply the desired number of megabytes * 1024 * 1024. That's X * 1048576, where X is the number, in megabytes. Test out several settings and keep the one which seems to work best for your system.
This tweak will launch WindowsMediaPlayer with the 'AboveNormal' priority setting when opening a mediafile.
Having trouble watching a movie when you also have a lot of background processes going on?
Here's what to do:
- Create a new textfile in the root of c:\, but instead of giving it the .txt extension you name it wmp_AboveNormal.bat
- Right-click this file and choose 'Edit', you'll see it'll open notepad. Put this line in: start /AboveNormal C:\"Program Files"\"Windows Media Player"\wmplayer.exe %1 %*
- Save (make sure you save it as .bat, not as .txt) and close. Now all you have to do is register your mediafiles to this batchfile. Here's how to do that:
- In Windows Explorer choose Tools>Folder Options >File Types
- Scroll down(press A) to the AVI filetype
- Click 'Change' and point to c:\wmp_AboveNormal.bat . Click OK and Close.
Now everytime you dubbleclick an .avi WMP will open with the 'AboveNormal' -priority setting !
Repeat steps 4-6 to register all mediatypes you want to be opened this way.
These are all the settings: Realtime, High, AboveNormal, Normal, BelowNormal, Low.
*Realtime is not recommended unless you have a dual-CPU system!
Or
This tweak will launch most executables with the priority setting you want it to have.
Let's say you have a game installed called HIGH NEEDS and the executable is called HN.exe
Here's what to do:
- Create a new textfile in the game-app wathever-directory (let's say C:\HN), but instead of giving it the .txt extension you name it HN.bat
- Right-click this file and choose 'Edit', you'll see it'll open notepad. Put this line in:
cmd /c start /High HN.exe
- Save (make sure you save it as .bat, not as .txt) and close.
- Now create a shortcut to this file and place it on your desktop. Every time you doubleclick this shortcut HIGH NEEDS will open with priority set to 'high'. (ofcourse you can also create a batchfile on your desktop, containing the full path of the app you want to start but the nice thing of creating a shortcut is you can give it an icon).
Unload unused .dlls to free up memory
Windows Explorer caches DLLs (Dynamic-Link Libraries) in memory for a period of time after the application using them has been closed. This can be an inefficient use of memory.
- Find the key [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer].
- Create a new sub-key named 'AlwaysUnloadDLL' and set the default value to equal '1' to disable Windows caching the DLL in memory.
- Restart Windows for the change to take effect.
Back to contents.
Allow more than 2 simultaneous downloads in IE 6
This is to increase the number of max downloads to 10.
- Start Registry Editor
- Locate the following key in the registry:
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/InternetSettings
- On the Edit menu, click Add Value , and then add the following registry values:
"MaxConnectionsPer1_0Server"=Dword:0000000a
"MaxConnectionsPerServer"=Dword:0000000a
- Quit Registry Editor.
- Reboot
Enable mIRC identd
Ident needs to use port 113 , if you use "Internet Connection Firewall" in XP. Here is how to get it working without disabling the entire firewall:
- Go into Control Panel-> Network Connections
- Right click "Local Area Network" and select "Properties"
- Left click the advanced tab
- Left click the settings button
- Under services, left click the add button
- For description type "Ident", for Name of IP put the name that identifies your system with your ISP OR your IP if it is static.
- Both external and internal ports are 113 by default and TCP.
- Click OK all the way out.
Disable Schedule Task in IE
IE 6.0 wants to run a schelduled task everytime it connects to a server. This results in slower browsing.
To disable this delete the following key:
HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/
explorer/RemoteComputer/NameSpace/{D6277990-4C6A-11CF-8D87-00AA0060F5BF}
Get rid of Internet Browsing history
- Launch Internet Explorer.
- Select the Tools from the menu bar.
- Then select Internet Options... from the drop down menu.
- Once the internet options has loaded click on the general tab.
- Under the history section change the days to keep in history to 0.
- Also click the clear history button to get rid of everything else.
- Click OK
Change Web Page Font Size on the Fly
If your mouse contains a wheel for scrolling, you can change font size on the fly when viewing a Web page. To do so:
Press and hold Ctrl. Scroll down (or towards yourself) to enlarge the font size. Scroll up (or away from yourself) to reduce the font size.
You might find it useful to reduce font size when printing a Web page, so that you can fit more content on the page.
Branding ie6
Go to Start/Run/Regedit and navigate to this key:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main. In the right pane scroll down to Window Title, double click it and change accordingly.
Checking home page for browser hijack
Go to Start/Run/Regedit and navigate to this key:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel.
If a HomePage dword value exists in this key, select it.
On the Edit menu, click Delete, and then click Yes to confirm the deletion.
Using the local hosts file to block redirects to undesirable websites
The local host file can be used to block requests that would normally go to another website and load their rubbish to your browser or worse still, your computer. With this method, the requested banner ad, cookies etc, in effect doesn't exist. The browser then skips the requested page or action and then moves on to loading the next part of the web page that is being viewed. In essence, the server supplying unwanted content to your browser and pc is blocked because the request is redirected to your pc, where of course, the files don't exist and therefor won't load. Warning: Before altering the existing hosts file be sure to make a backup of it.
For Windows XP, the localhost file resides in DRIVE:\windows\system32\drivers\etc\hosts.
The following is the default file;
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
To block an unwanted site simply add them to the list, e.g.;
127.0.0.1 www.dataminer.com
127.0.0.1 very.nasty.com
127.0.0.1 install.trojan.com
To allow access to a website, just add the # symbol in front of the entry, e.g.;
#127.0.0.1 www.dataminer.com
Please note that IP addresses and http:// and a trailing \ are not allowed parameters in the hosts file
Some trojans will write entries to the hosts file to redirect you to undesirable websites. To prevent this, set the hosts file to read only. Remember that you will have to change this setting to alter the file.
If the file becomes quite large, to around 120kb, internet browsing can slow down. To work round this issue, open services (services.msc from the run box) and set the dns client to manual. From the command prompt this can be done with the following commands;
sc config DNSCache start= demand
sc stop DNSCache
This can be also put into a batch file for quicker operation.
A summary of the steps to configure the hosts file.
Backup the original host file.
Add the required entries.
Set the properties of the host file to read only.
Set the dns client to manual if the host file size becomes large.
Back to contents.
Improve Network Bandwidth
Windows XP can help itself to up to 20% of you network capacity through its QoS services. This preserves network bandwidth for some important applications. This 20% is reserved even if QoS is disabled. Run the Policy Editor that was created in the section 'system utilities'.
- Expand the "Computer configuration" branch
- Expand the "Administrative templates" branch
- Expand the "Network" branch
- Highlight the "QoS Packet Scheduler" in left window
- In right window double click the "limit reservable bandwidth" setting
- On setting tab check the "enabled" item
- Where it says "Bandwidth limit %" change it to read 0-- Click apply, OK, and exit the Policy Editor
- Right Click the relevant NetWork Connection and ensure QoS packet scheduler is enabled.
- Click Ok
- Restart.
Speed up Network Browsing
This registry setting makes a massive difference to network Browsing:
Open regedit
Under [ HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Explorer\RemoteComputer\NameSpace ]
Find the key called "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}" and delete it
Restart.
Back to contents.
To Keep Media Player from maintaining the Recent Files List.
Start/Run/Regedit
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences.
Look in the right pane for the value called: AddToMRU. Double click this item and set the value to 00 (two zeros).
Media Player - DVD
Start/Run/Regedit
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Settings. Value Name: EnableDVDUI, Data Type: REG_SZ (String Value), Value Data: yes or no.
Create a new string value called "EnableDVDUI" and set it to "yes" to enable DVD functionality.
Media Player - Play List
Start/Run/Regedit
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\RecentFileList. Delete RecentFileList, or manually remove them in the right pane.
NOTE: This registry key is re-created the next time you open a file in Media Player.
Clear pagefile on shutdown
For added security you should always clear the page file upon shutting down your computer. Windows uses this file as extra ram. Lets say that you are working on a confidential MS Word doc. When you load this document it is loaded into ram. To save ram windows places certain items in the page file. The page file can then be opened and the document can be extracted as well as any other open program or files. However Microsoft has implemented a feature that will clear the page file but they do not have it enabled by default. Please note, this will slightly increase the amount of time it takes to shut down your computer but it is well worth it.
- Start Regedit.
- Navigate to HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Control > SessionManager > Memory Management
- Select ClearPageFileAtShutdown from the list on the right.
- Right on it and select Modify.
- Change the value to 1 to enable.
- Reboot your computer.
OR for Win2k
- Go to Start --> Run and type 'regedit', without the quotes.
- Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management.
- Modify or add the REG_DWORD entry "ClearPageFileAtShutdown" (without the quotes) and set its value equal to 1.
- You must restart your computer for the changes to take effect.
Disable error reporting
One feature that can be done without is error reporting. Every time a program crashes you do not want to send a report to microsoft. Read below to find out how to disable this feature.
- Open Control Panel
- Click on Preformance and Maintenance.
- Click on System.
- Then click on the Advanced tab
- Click on the error reporting button on the bottom of the windows.
- Select Disable error reporting.
- Click OK
Display message on startup
If you would like to display a legal message or any other message in a pop-up window when windows starts read below:
- Start regedit,
- Navigate to HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/WindowsNT/CurrentVersion/Winlogon
- Modify the key legalnoticecaption with what you want to name the window.
- Modify the key legalnoticetext with what you want the window to say.
- Reboot.
Turn off system beeps
If those beeps annoy you there is a way to turn them off
- Start Regedit.
- Navigate to HKEY_CURRENT_USER > Control Panel > Sound
- Once there, locate Beep on the list on the right.
- Right click on it and select Modify
- Change the value equal to no
- Reboot your computer and the beeps will be gone!
Create a shortcut to lock computer
- Right click on desktop and select new -> shortcut.
- Then copy and paste this in the program location box "rundll32.exe user32.dll,LockWorkStation"
- Click next and enter a name for you shortcut and then click finish.
- Now you can copy and paste that shortcut anywhere you want on your computer.
Repair broken system files
This procedure requires the installation files or CD to be present.
- Click Start.
- Click Run.
- Type SFC /scannow in the run command slot. (Note: there is a space after SFC and that's a FORWARD slash in the middle, there.)
- Press OK button below on run command menu box.
Netmeeting in XP
Click on the Start menu.
Select Run.
Type "conf" in the Command box and hit OK. NetMeeting will launch.
Regedit stays expanded
Open Regedit
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Applets/Regedit and look for the value LastKey.
Double-click it and clear the string.
Then right-click the Regedit key in the lefthand pane and select Permissions.
Set Permissions to Deny for any/all users/groups
Speed up Nero in XP
Go to "administrative tools" in the control panel, and in the "services" list, disable the IMAPI CD-Burning COM service.
Note: manual setting is not enough it must be disabled. It is the built-in CD-burning capability for windowsXP, written by Roxio.
Once it is disabled, Nero will start up much quicker.
Show hidden devices
- Click Start, click Run, type cmd.exe, and then press ENTER.
- Type set devmgr_show_nonpresent_devices=1, and then press ENTER.
- Type Start DEVMGMT.MSC, and then press ENTER.
- Click View, and then click Show Hidden Devices.
Explorer shortcut
- Create short cut on the desktop
- In the target box add;
/e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}.
Useful if no winkey is present on the keyboard.
Showing hidden apps in add/remove programs
- In the %SystemRoot%\Inf folder on the system volume, use a text editor, such as Notepad, to open the Sysoc.inf file.
- Locate the "old base components" line.
- For each component you want to appear in the Add/Remove Programs tool, remove the "Hide" comment.
For example, change Games=ocgen.dll,OcEntry,games.inf,HIDE,7 to:
Games=ocgen.dll,OcEntry,games.inf,,7
- Also remove the "HIDE" option from the "AccessUtil=" line. If you leave this option hidden, then none of the other components in the "old base components" section are available in Add/Remove Programs.
Save and then close the file.
- Displaying the Items During Setup
Copy the I386 folder to a distribution share.
- expand the Sysoc.in_ file using the following command
expand -r sysoc.in_
- Edit the Sysoc.inf file using steps above.
- Rename the Sysoc.in_ file to Sysoc.bak.
Make self extracting files using the Iexpress2.0 tool.
The tool allows you to make a self extracting file and much more. To use this hidden feature of XP;
- Navigate to Windows\system32\
- look for a file called iexpress.exe.
- Double left click on it and follow the wizard.
Auto complete in dos box
You can enable filename completion in the NT "DOS" shell by editing
HKEY_CURRENT_USER\Software\Microsoft\Command Processor
and changing the CompletionChar value to 0x00000009
Boot - Disable Splash Screen
Right click My Computer, select Properties. Go to Advanced, Startup and Recovery, Settings and click the Edit button. Locate the line that loads XP and add /SOS to the end of it. The resulting line should look something like this:
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /SOS
Back to contents.
Swapping hard drive to another motherboard
Before you swap out the current motherboard go to device manager and select the IDE ATA/ATAPI Controller and select your current storage controller. Right click, select update driver and select install from a list or specific location. Click 'don't search I will choose the driver to install' and select the standard dual channel IDE controller. This will prevent the inaccessible boot device blue screen.
Burn cds on locked cd writers
If you want to burn a CD on one of your company's computers, and if that computer has cd-burning disabled, they have probably used a reg hack. This is the reghack that they have probably used:
Windows Registry Editor
Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoCDBurning"=dword:00000001
If you want to ENABLE CD-burning, copy the regcode above into notepad, change the 1 to a 0 and save as cdr_on.reg.
Change cd and hard drive letters
If you want to change your hard drive letter or your cd-rom drive letter, this is the tip you want.
- Click the start button
- Go into Administrative tools (either in the start button or in "All Programs"
- From Administrative Tools, go into "Computer Management"
- In "Computer Management", click on "Disk Management" under "Storage" from the left menu
- You should see a window from the lower right hand corner open (it shows all the hard disk drives and cd-rom drives)
- To change...
- ...hard drive, click on the hard disk with a blue horizonal bar, the box should be shaded; next right click that box that you desire to change the letter then click on "Change Letter Drive and Path"
- ...cd-rom drive, click on the box that you desire the drive letter; next right click that box that you desire to change the letter then click on "Change Letter Drive and Path"
- click the "change..." button
- from the "assign the following drive letter", select the letter you want to assign to the hard drive or the cd-rom drive
- click ok
- click ok
- (optional) redo the whole step to reassign other hard drives or cd-rom drives
- Notes: You can not change the drive letter of your boot or system drive this way. You can not assign drive letters that are already in use. Assign temporary letters as a workaround.
Back to contents.
Moniter the keys that are written or modified in the registry by applications.
How to take a registry snapshot.
Close all unecessary aplications and processes before taking a registry snapshot.
- Go to start>run and enter regedit
- Right click the HKEY_CURRENT_USER branch and from the drop down box select export.
Name the file user1.reg
- Right click the HKEY_LOCAL_MACHINE branch and from the drop down box select export.
Name the file machine1.reg
- Run the application or installation.
- Reopen regedit and repeat steps 1 and 2 above. The exported registry branches should named as user2.reg and machine2.reg.
- Go to start> and enter cmd. Using the cd command, browse to the directory that contains the exported registry files.
- The following uses the file compare utility, fc.exe. Enter the command below, without quotes,
'fc /u user1.reg user2.reg >user.txt'. Repeat the procedure for machine*.reg. The differences are output to the user and machine text files.
Changing user password
This tweak gives a user the opportunity to use it for good or bad. It enables the user to re-password any account without having to know the existing password and also shows you every account that exists on the machine, even the ones that are hidden.
This is a good tool to use if you forgot a password to say your administrator account and you needed to be logged into the admin account for any reason.
To view all of the user accounts:
While logged onto the computer, click on Start>Run>and type in CMD.
From the command prompt window, type in net users. This will show you every account that is made onto the computer whether it is hidden or not.
To change an account password:
While logged onto the computer to an account that has administrative rights, click on Start>Run>and type in CMD.
Type in net user then the name of the account then * and press enter. Here's an example: net user administrator * or net user "Joe Smith" *. Put the name in quotes if it contains spaces.
From there it should ask for a new password. Type in your new password, type very carefully - the command window won't display what you type, and once more to confirm it. If you get the message that the command succeeded successfully you're all set!
AutoComplete - Clear
IE/Tools/Internet Options/General/Clear History
IE/Tools/Internet Options/Content/AutoComplete
Can't Clear History: Start/Search/Change Preferences/Turn off AutoComplete
Control the Auto Complete Mode
This setting controls whether the automatic text completion (AutoComplete) feature of Windows explorer appends the suggested text to the words as you are typing as well as showing a drop-down list of available values.
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Explorer\AutoComplete. Value Name: Append Completion, Data Type: REG_SZ (String Value), Value Data: yes or no.
- Create a new string value, or modify the existing value, named "Append Completion" and set it to "yes" to append the suggested text as you are typing or "no" to only show a drop-down list.
- Restart Windows for the change to take effect.
Note: This setting also changes the auto complete functionality of Internet Explorer.
AutoComplete Keys and Storage
The specific subkeys for different applications (appear to be) is as follows:
IE: HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-839522115-1708537768-1343024091-1003\Data\e161255a-37c3-11d2-bcaa-00c04fd929db
OE: HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-839522115-1708537768-1343024091-1003\Data\220d5cc1-853a-11 d0-84bc-00c04fd43f8f
FTP, Front Page and password protected web sites:
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-839522115-1708537768-1343024091-1003\Data\5e7e8100-9138-11d1-945a-00c04fc308ff
Outlook XP: HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-839522115-1708537768-1343024091-1003\Data\220d5cd0-853a-11d0-84bc-00c04fd43f8f
Note: the S-1-5-21-839522........ part of the Registry key above may be different on your machine.
InfoDelivery, MSN and Identities have their own sub branches off of the Data branch. These number (other than the User number) appear to be the same from machine to machine.
AutoComplete: Remove Google Search History
[HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System
Provider\S-1-5-21-839522115-1708537768-1343024091-1003\Data\e161255a-37c3-11
d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db\q:StringData]
"Behavior"=-
"Item Data"=-
[HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System
Provider\S-1-5-21-839522115-1708537768-1343024091-1003\Data\e161255a-37c3-11
d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db\q:StringIndex]
"Behavior"=-
"Item Data"=-
Note: The S-1-5 ... portion of this string may be different on your machine.
Note 2: To delete the value doesn't work unless the Permissions have been set to allow full control. Nor is it possible to delete the keys, without Full Control being allowed.
Unencrypt files
- Login as Administrator
- Go to Start/Run and type in cmd and click OK.
- At the prompt type cipher /r:Eagent and press enter
- This prompt will then display:
- Please type in the password to protect your .PFX file:
- Type in your Administrator password
- Re-confirm your Administrator password
- The prompt will then display
Your .CER file was created successfully.
Your .PFX file was created successfully.
The Eagent.cer and Eagent.pfx files will be saved in the current directory that is shown at the command prompt. Example: The command prompt displays C:\Documents and Settings\admin> the two files are saved in the admin folder. For security concerns, you should house the two files in your Administrator folder or on a floppy disc.
- Go to Start/Run and type in certmgr.msc and click OK. This will launch the Certificates Manager.
- Navigate to Personal and right click on the folder and select All Tasks/Import. The Certificate Import Wizard will appear. Click Next.
- Browse to the C:\Documents and Settings\admin folder. In the Open dialog box, change the Files of Type, at the bottom, to personal Information Exchange '*.pfx,*.P12'.
- Select the file Eagent.pfx and click Open. Click Next.
- Type in your Administrator password,leave the two checkboxes blank, and click Next.
- Make sure the Radio button is active for the first option, automatically select the certificate store based on the type of certifcate.
- Click Next. Click Finish. You'll receive a message that the import was successful.
- To confirm the import, close Certificates Manager and re-open it. Expand the Personal folder and you will see a new subfolder labeled Certificates.
- Expand that folder and you will see the new entry in the right side column. Close Certificate Manager.
- Go to Start/Run and type in secpol.msc and click OK. This will launch the Local Security Policy.
- Expand the Public Key Policies folder and then right click on the Encrypted File System subfolder and select Add Data Recovery Agent.
- The Wizard will then display. Click Next. Click the Browse Folders button.
- Browse to the C:\Documents and Settings\admin folder. Select the Eagent.cer file and click Open. The wizard will display the status User_Unknown, that's ok.
- Click Next. Click Finish.
- You will see a new entry in the right side column. Close the Local Security Policy.
You, the Administrator are now configured as the default Recovery Agent for All Encrypted files on the Local Machine.
To Recover Encrypted files:
- If you have completed the above steps BEFORE an existing user encrypted his/her files, you can log in to your Administrator account and navigate to the encrypted files. Double click on the files to view the contents.
- If you have completed the above steps AFTER an existing user has already encrypted his/her files, you must login to the applicable User's User Account and then immediately logout.
- Next, login to your Administrator account and navigate to the encrypted files. Double click on the files to view the contents.
- *Warning. Do not Delete or Rename a User's account from which will want to Recover the Encrypted Files. You will not be able to de-crypt the files using the steps outlined above.
MS vulnerability
Remove IPC$ Share Remote Netbios Attack Vulnerability
- Open Regedit
- Navigate to HKEY_LOCAL_MACHINE>System>CurrentControlSet>Control>Lsa>restrictanonymous
- Change "Value Data" from 0 to 1
- This will disable remote logon to a null IPC$ share
Back to contents.
Windows System Key Combinations
CTRL+ESC - Open Start menu
ALT+TAB - Switch between open programs
ALT+F4 - Quit program
SHIFT+DELETE - Delete items permanently
Windows Program Key Combinations
CTRL+C - Copy
CTRL+X - Cut
CTRL+V - Paste
CTRL+Z - Undo
CTRL+B - Bold
CTRL+U - Underline
CTRL+I - Italic
Mouse Click/Keyboard Modifier Combinations for Shell Objects
SHIFT+RIGHT CLICK - Displays a context menu containing alternative verbs.
SHIFT+DOUBLE CLICK - Runs the alternate default command (the second item on the menu).
ALT+DOUBLE CLICK - Displays properties.
SHIFT+DELETE - Deletes an item immediately without placing it in the Recycle Bin.
General Keyboard-Only Commands
F1 - Starts Windows Help.
F10 - Activates menu bar options.
SHIFT+F10 - Opens a context menu for the selected item. This is the same as right-clicking an object.
CTRL+ESC - Opens the Start menu. Use the ARROW keys to select an item.
CTRL+ESC, ESC - Selects the Start button. (Press TAB to select quick launch, the taskbar, system tray)
ALT+DOWN ARROW - Opens a drop-down list box.
ALT+TAB - Switch to another running application. Hold down the ALT key and then press the TAB key to view the task-switching window.
Press down and hold the SHIFT key while you insert a CD-ROM to bypass the auto-run feature.
ALT+SPACE - Displays the main window's System menu. From the System menu, you can restore, move, resize, minimize, maximize, or close the window.
ALT+- (ALT+hyphen) - Displays the Multiple Document Interface (MDI) child window's System menu. From the MDI child window's System menu, you can restore, move, resize, minimize, maximize, or close the child window.
CTRL+TAB - Switch to the next child window of a Multiple Document Interface (MDI) application.
ALT+ - Opens the corresponding menu.
ALT+F4 - Closes the current window.
ALT+DOWN ARROW - Opens a drop-down list box.
CTRL+F4 - Closes the current Multiple Document Interface (MDI) window.
ALT+F6 - Switch between multiple windows in the same program. For example, when the Notepad Find dialog box is displayed, ALT+F6 switches between the Find dialog box and the main Notepad window.
Shell Objects and General Folder/Windows Explorer Shortcuts
F2 - Rename object
F3 - Find: All Files
CTRL+X - Cut
CTRL+C - Copy
CTRL+V - Paste
SHIFT+DEL - Delete selection immediately, without moving the item to the Recycle Bin.
ALT+ENTER - Open the property sheet for the selected object.
To Copy a File - Press down and hold the CTRL key while you drag the file to another folder.
To Create a Shortcut - Press down and hold CTRL+SHIFT while you drag a file to the desktop or a folder.
General Folder/Shortcut Control
F4 - Selects the Go To A Different Folder box and moves down the entries in the box (if the toolbar is active in Windows Explorer).
F5 - Refreshes the current window.
F6 - Moves among panes in Windows Explorer.
CTRL+G - Opens the Go To Folder tool (in Windows 95 Windows Explorer only).
CTRL+Z - Undo the last command.
CTRL+A - Select all the items in the current window.
BACKSPACE - Switch to the parent folder.
SHIFT+CLICK - Close Button For folders, close the current folder plus all parent folders.
Windows Explorer Tree Control
Numeric Keypad * - Expands everything under the current selection.
Numeric Keypad + - Expands the current selection.
Numeric Keypad - - Collapses the current selection.
RIGHT ARROW - Expands the current selection if it is not expanded, otherwise goes to the first child.
LEFT ARROW - Collapses the current selection if it is expanded, otherwise goes to the parent.
Property Sheet Control
CTRL+TAB/CTRL+SHIFT+TAB - Move through the property tabs.
Accessibility Shortcuts
Tap SHIFT 5 times - Toggles StickyKeys on and off.
Press down and hold the right SHIFT key for 8 seconds - Toggles FilterKeys on and off.
Press down and hold the NUM LOCK key for 5 seconds - Toggles ToggleKeys on and off.
Left ALT+left SHIFT+NUM LOCK - Toggles MouseKeys on and off.
Left ALT+left SHIFT+PRINT SCREEN - Toggles High Contrast on and off.
Microsoft Natural Keyboard Keys
WINDOWS - Start Menu
WINDOWS+R - Run dialog box
WINDOWS+M - Minimize All
SHIFT+WINDOWS+M - Undo Minimize All
WINDOWS+F1 - Help
WINDOWS+E - Windows Explorer
WINDOWS+F - Find Files or Folders
WINDOWS+D - Minimizes all open windows and displays the desktop
CTRL+WINDOWS+F - Find Computer
CTRL+WINDOWS+TAB - Moves focus from Start, to Quick Launch bar, to System Tray. Use RIGHT ARROW or LEFT ARROW to move focus to items on Quick Launch bar and System Tray
WINDOWS+TAB - Cycle through taskbar buttons
WINDOWS+BREAK - System Properties dialog box
Application key - Displays a context menu for the selected item
Microsoft Natural Keyboard with IntelliType Software Installed
WINDOWS+L - Log off Windows
WINDOWS+P - Opens Print Manager
WINDOWS+C - Opens Control Panel
WINDOWS+V - Opens Clipboard
WINDOWS+K - Opens Keyboard Properties dialog box
WINDOWS+I - Opens Mouse Properties dialog box
WINDOWS+A - Opens Accessibility Options(if installed)
WINDOWS+SPACEBAR - Displays the list of IntelliType Hotkeys
WINDOWS+S - Toggles the CAP LOCK key on and off
Dialog Box Keyboard Commands
TAB - Move to the next control in the dialog box.
SHIFT+TAB - Move to the previous control in the dialog box.
SPACEBAR - If the current control is a button, this clicks the button. If the current control is a check box, this toggles the check box. If the current control is an option button, this selects the option button.
ENTER - Equivalent to clicking the selected button (the button with the outline).
ESC - Equivalent to clicking the Cancel button.
ALT+ - Select menu item.
Back to contents.
Document revised January 2005
Sponsored by Solriche