Solriche

MS Windows XP Professional - Performance Tweaks

Please note, not all of these tweaks have been tested, they are used at your own risk.
The following information has been compiled from various internet sources.
Thank you to all those who took the trouble to publish these tips and tweaks to make life easier for us all.

Contents.

User Interface Tweaks

System utilities

Pop up balloons

Disable Messenger and passport balloon.
  1. Open your registry and find the key below.
  2. Create or edit the existing DWORD value named "Hide Messenger" and set the value to "2" to disable the popup.
  3. Key:[HKEY_LOCAL_MACHINE\Software\Microsoft\Outlook Express]
  4. Value Name: Hide Messenger
  5. Data Type: REG_DWORD
  6. Data:(2 = disabled)

Passport balloon.

  1. Open your registry and find the key below.
  2. Edit the existing BINARY value named "PassportBalloon" and set the value to "0a" to disable the reminder
  3. Key:[HKEY_CURRENT_USER\Software\Microsoft\MessengerService]
  4. Value Name: PassportBalloon
  5. Data Type: REG_BINARY
  6. Data:(0a = 10)
Show hidden files
In any folder that contains files. Click on the tools menu and select folder options.
Then click on the view tab.
Locate where it lists Hide extensions of known file types and uncheck it.
Click apply to all folders
Click OK

Remove Shared Doc's from My Computer

Start regedit
Navigate to HKEY_LOCAL_MACHINESOFTWARE/Microsoft/Windows/
CurrentVersion/Explorer/MyComputer/NameSpace/DelegateFolders.
Locate the key {59031a47-3f72-44a7-89c5-5595fe6b30ee}.
Right click on it and select delete.
Reboot !

Stop the "search web for program" pop up

Stops that "go to the internet to find a program to open this file with" popup before the "choose" file dialog. Open regedit and browse to;
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
and add a DWORD value called NoInternetOpenWith to the registry key, with a value of 1

Do not Cache Folder Thumbnails

To make folders with thumbnail images start up faster
Go to control panel and then folder options
Click on the view tab and Uncheck "Do not cache thumbnails".

Quick switch user screen

Press Winkey+Q and hold it for a second.
Repress Q to rotate to other users

Quick opening of explorer

Press Winkey+E

Create your own popup menu in the TASK BAR

You can create your own popup window other than START MENU in the taskbar.
Put all the shortcuts to the applications that you want to popup in a folder .
Then you right click on taskbar -->toolbars -->new toolbar --> and select the folder

Remove the annoying and useless search dog

All you need to do is add one simple registry key. Regedit your way to:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState
Right-click an empty space in the right pane and select New > String Value
Name the new value Use Search Asst
Double-click this new value, and enter no as it's value data

Reinstall programs the easy way

If you need to re-install a 'hidden' Windows component, eg. outlook express or messenger, there is an easy way to do this... [but you will have to BE CAREFUL!]
Open the INF folder in your windows folder [C:\WINDOWS\INF]
Find the *.inf files [view>arrange icons by>type]
Find the application title you need in the filename [for example messenger is msmsgs.inf] If you are unsure of the installer, RIGHT CLICK on the file, then select open, at the top of the file should say what application it is:
When you have found the file the right click on it then click install.
Tip: To reinstall Microsoft Outlook Express, Right click and select install on MSOE50.inf

Fast web page entry for .com sites

Instead of typing http://www.anysite.com you can just type anysite then press ctrl+return and it automatically puts in the http:// and the .com

Desktop icon to send mail without opening outlook express

You can easily create an icon on your desktop that allows you to compose and sand a mail by double clicking on it without opening Outlook Express.
  1. Find a free space on your desktop and right click on it on New -> Shortcut
  2. Enter in the space 'mailto:' (w/out quotes)
  3. Press 'Next' button.
  4. Enter in the space a name for the icon (i use 'mail')
  5. Click 'finish'.

Windows media player on XP can encode high quality mp3.

Install an mp3 codec, then make the following registry changes:
HKEY_LOCAL_MACHINE\Software\Microsoft\MediaPlayer\Settings\MP3Encoding
"LowRate"=dword:0000dac0
"MediumRate"=dword:0001f400
"MediumHighRate"=dword:0003e800
"HighRate"=dword:0004e200
Reboot and changes will be evident in media player options.

Back to contents.

System Performance Tweaks

Speed up Diskcache

Open Regedit
[HKEY_LOCAL_MACHINESYSTEM/CurrentControlSet/ControlSession/ Manager/MemoryManagement/IoPageLockLimit];
Modify the value in Hex depending on the size of your RAM
RAM: modified value(Hex)
64M: 1000;
128M: 4000;
256M: 10000;
512M or more: 40000.
Reboot.

XP memory tweaks

Below are some Windows XP memory tweaks. They are located in the windows registry at: HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/ SessionManager/MemoryManagement

DisablePagingExecutive - When enabled, this setting will prevent the paging of the Win2k Executive files to the hard drive, causing the OS and most programs to be more responsive. However, it is advised that people should only perform this tweak if they have a significant amount of RAM on their system, more than 128 MB, because this setting does use a substantial portion of your system resources. By default, the value of this key is 0. To enable it, set it to 1.

LargeSystemCache - When enabled, the default on Server versions of Windows 2000, this setting tells the OS to devote all but 4 MB of system memory, which is left for disk caching, to the file system cache. The main effect of this is allowing the computer to cache the OS Kernel to memory, making the OS more responsive. The setting is dynamic and if more than 4 MB is needed from the disk cache for some reason, the space will be released to it. By default, 8MB is earmarked for this purpose. This tweak usually makes the OS more responsive. It is a dynamic setting, and the kernel will give up any space deemed necessary for another application, at a performance hit when such changes are needed. As with the previous key, set the value from 0 to 1 to enable. Note that in doing this, you are consuming more of your system RAM than normal. While LargeSystemCache will cut back usage when other apps need more RAM, this process can impede performance in certain intensive situations. According to Microsoft, the '0' setting is recommended for servers running applications that do their own memory caching, such as Microsoft SQL Server, and for applications that perform best with ample memory, such as Internet Information Services.

IOPageLockLimit - This tweak is of questionable value to people that aren't running some kind of server off of their computer, but we will include it anyway. This tweak boosts the Input/Output performance of your computer when it is doing a large amount of file transfers and other similar operations. This tweak won't do much of anything for a system without a significant amount of RAM, if you don't have more than 128 MB, don't even bother, but systems with more than 128 MB of RAM will generally find a performance boost by setting this to between 8 and 16 MB. The default is 0.5 MB, or 512 KB. This setting requires a value in bytes, so multiply the desired number of megabytes * 1024 * 1024. That's X * 1048576, where X is the number, in megabytes. Test out several settings and keep the one which seems to work best for your system.

This tweak will launch WindowsMediaPlayer with the 'AboveNormal' priority setting when opening a mediafile.

Having trouble watching a movie when you also have a lot of background processes going on?
Here's what to do:
  1. Create a new textfile in the root of c:\, but instead of giving it the .txt extension you name it wmp_AboveNormal.bat
  2. Right-click this file and choose 'Edit', you'll see it'll open notepad. Put this line in: start /AboveNormal C:\"Program Files"\"Windows Media Player"\wmplayer.exe %1 %*
  3. Save (make sure you save it as .bat, not as .txt) and close. Now all you have to do is register your mediafiles to this batchfile. Here's how to do that:
  4. In Windows Explorer choose Tools>Folder Options >File Types
  5. Scroll down(press A) to the AVI filetype
  6. Click 'Change' and point to c:\wmp_AboveNormal.bat . Click OK and Close.
Now everytime you dubbleclick an .avi WMP will open with the 'AboveNormal' -priority setting !

Repeat steps 4-6 to register all mediatypes you want to be opened this way.
These are all the settings: Realtime, High, AboveNormal, Normal, BelowNormal, Low.
*Realtime is not recommended unless you have a dual-CPU system!

Or

This tweak will launch most executables with the priority setting you want it to have.
Let's say you have a game installed called HIGH NEEDS and the executable is called HN.exe
Here's what to do:
  1. Create a new textfile in the game-app wathever-directory (let's say C:\HN), but instead of giving it the .txt extension you name it HN.bat
  2. Right-click this file and choose 'Edit', you'll see it'll open notepad. Put this line in: cmd /c start /High HN.exe
  3. Save (make sure you save it as .bat, not as .txt) and close.
  4. Now create a shortcut to this file and place it on your desktop. Every time you doubleclick this shortcut HIGH NEEDS will open with priority set to 'high'. (ofcourse you can also create a batchfile on your desktop, containing the full path of the app you want to start but the nice thing of creating a shortcut is you can give it an icon).

Unload unused .dlls to free up memory

Windows Explorer caches DLLs (Dynamic-Link Libraries) in memory for a period of time after the application using them has been closed. This can be an inefficient use of memory.
  1. Find the key [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer].
  2. Create a new sub-key named 'AlwaysUnloadDLL' and set the default value to equal '1' to disable Windows caching the DLL in memory.
  3. Restart Windows for the change to take effect.

Back to contents.

Internet Tweaks

Allow more than 2 simultaneous downloads in IE 6


This is to increase the number of max downloads to 10.
  1. Start Registry Editor
  2. Locate the following key in the registry:
    HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/InternetSettings
  3. On the Edit menu, click Add Value , and then add the following registry values:
    "MaxConnectionsPer1_0Server"=Dword:0000000a
    "MaxConnectionsPerServer"=Dword:0000000a
  4. Quit Registry Editor.
  5. Reboot

Enable mIRC identd

Ident needs to use port 113 , if you use "Internet Connection Firewall" in XP. Here is how to get it working without disabling the entire firewall:
  1. Go into Control Panel-> Network Connections
  2. Right click "Local Area Network" and select "Properties"
  3. Left click the advanced tab
  4. Left click the settings button
  5. Under services, left click the add button
  6. For description type "Ident", for Name of IP put the name that identifies your system with your ISP OR your IP if it is static.
  7. Both external and internal ports are 113 by default and TCP.
  8. Click OK all the way out.

Disable Schedule Task in IE

IE 6.0 wants to run a schelduled task everytime it connects to a server. This results in slower browsing.
To disable this delete the following key:

HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/
explorer/RemoteComputer/NameSpace/{D6277990-4C6A-11CF-8D87-00AA0060F5BF}

Get rid of Internet Browsing history

Change Web Page Font Size on the Fly

If your mouse contains a wheel for scrolling, you can change font size on the fly when viewing a Web page. To do so:
Press and hold Ctrl. Scroll down (or towards yourself) to enlarge the font size. Scroll up (or away from yourself) to reduce the font size.
You might find it useful to reduce font size when printing a Web page, so that you can fit more content on the page.

Branding ie6

Go to Start/Run/Regedit and navigate to this key:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main. In the right pane scroll down to Window Title, double click it and change accordingly.

Checking home page for browser hijack

Go to Start/Run/Regedit and navigate to this key:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel.
If a HomePage dword value exists in this key, select it.
On the Edit menu, click Delete, and then click Yes to confirm the deletion.

Using the local hosts file to block redirects to undesirable websites

The local host file can be used to block requests that would normally go to another website and load their rubbish to your browser or worse still, your computer. With this method, the requested banner ad, cookies etc, in effect doesn't exist. The browser then skips the requested page or action and then moves on to loading the next part of the web page that is being viewed. In essence, the server supplying unwanted content to your browser and pc is blocked because the request is redirected to your pc, where of course, the files don't exist and therefor won't load. Warning: Before altering the existing hosts file be sure to make a backup of it.

For Windows XP, the localhost file resides in DRIVE:\windows\system32\drivers\etc\hosts.

The following is the default file;

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com     # source server
#        38.25.63.10     x.acme.com          # x client host
127.0.0.1 localhost

To block an unwanted site simply add them to the list, e.g.;

127.0.0.1 www.dataminer.com
127.0.0.1 very.nasty.com
127.0.0.1 install.trojan.com
To allow access to a website, just add the # symbol in front of the entry, e.g.;

#127.0.0.1 www.dataminer.com

Please note that IP addresses and http:// and a trailing \ are not allowed parameters in the hosts file

Some trojans will write entries to the hosts file to redirect you to undesirable websites. To prevent this, set the hosts file to read only. Remember that you will have to change this setting to alter the file.

If the file becomes quite large, to around 120kb, internet browsing can slow down. To work round this issue, open services (services.msc from the run box) and set the dns client to manual. From the command prompt this can be done with the following commands;

sc config DNSCache start= demand
sc stop DNSCache
This can be also put into a batch file for quicker operation.

A summary of the steps to configure the hosts file.

Backup the original host file.
Add the required entries.
Set the properties of the host file to read only.
Set the dns client to manual if the host file size becomes large.

Back to contents.

Networking tweaks

Improve Network Bandwidth

Windows XP can help itself to up to 20% of you network capacity through its QoS services. This preserves network bandwidth for some important applications. This 20% is reserved even if QoS is disabled. Run the Policy Editor that was created in the section 'system utilities'.
  1. Expand the "Computer configuration" branch
  2. Expand the "Administrative templates" branch
  3. Expand the "Network" branch
  4. Highlight the "QoS Packet Scheduler" in left window
  5. In right window double click the "limit reservable bandwidth" setting
  6. On setting tab check the "enabled" item
  7. Where it says "Bandwidth limit %" change it to read 0-- Click apply, OK, and exit the Policy Editor
  8. Right Click the relevant NetWork Connection and ensure QoS packet scheduler is enabled.
  9. Click Ok
  10. Restart.

Speed up Network Browsing

This registry setting makes a massive difference to network Browsing:
Open regedit
Under [ HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Explorer\RemoteComputer\NameSpace ]
Find the key called "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}" and delete it
Restart.

Back to contents.

Miscellaneous Tweaks

To Keep Media Player from maintaining the Recent Files List.

Start/Run/Regedit
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences.
Look in the right pane for the value called: AddToMRU. Double click this item and set the value to 00 (two zeros).

Media Player - DVD

Start/Run/Regedit
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Settings. Value Name: EnableDVDUI, Data Type: REG_SZ (String Value), Value Data: yes or no.
Create a new string value called "EnableDVDUI" and set it to "yes" to enable DVD functionality.

Media Player - Play List

Start/Run/Regedit
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\RecentFileList. Delete RecentFileList, or manually remove them in the right pane.
NOTE: This registry key is re-created the next time you open a file in Media Player.

Clear pagefile on shutdown

For added security you should always clear the page file upon shutting down your computer. Windows uses this file as extra ram. Lets say that you are working on a confidential MS Word doc. When you load this document it is loaded into ram. To save ram windows places certain items in the page file. The page file can then be opened and the document can be extracted as well as any other open program or files. However Microsoft has implemented a feature that will clear the page file but they do not have it enabled by default. Please note, this will slightly increase the amount of time it takes to shut down your computer but it is well worth it.
  1. Start Regedit.
  2. Navigate to HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Control > SessionManager > Memory Management
  3. Select ClearPageFileAtShutdown from the list on the right.
  4. Right on it and select Modify.
  5. Change the value to 1 to enable.
  6. Reboot your computer.

OR for Win2k

Disable error reporting

One feature that can be done without is error reporting. Every time a program crashes you do not want to send a report to microsoft. Read below to find out how to disable this feature.
  1. Open Control Panel
  2. Click on Preformance and Maintenance.
  3. Click on System.
  4. Then click on the Advanced tab
  5. Click on the error reporting button on the bottom of the windows.
  6. Select Disable error reporting.
  7. Click OK

Display message on startup

If you would like to display a legal message or any other message in a pop-up window when windows starts read below:

Turn off system beeps

If those beeps annoy you there is a way to turn them off
  1. Start Regedit.
  2. Navigate to HKEY_CURRENT_USER > Control Panel > Sound
  3. Once there, locate Beep on the list on the right.
  4. Right click on it and select Modify
  5. Change the value equal to no
  6. Reboot your computer and the beeps will be gone!

Create a shortcut to lock computer

Repair broken system files

This procedure requires the installation files or CD to be present.
  1. Click Start.
  2. Click Run.
  3. Type SFC /scannow in the run command slot. (Note: there is a space after SFC and that's a FORWARD slash in the middle, there.)
  4. Press OK button below on run command menu box.

Netmeeting in XP

Click on the Start menu.
Select Run.
Type "conf" in the Command box and hit OK. NetMeeting will launch.

Regedit stays expanded

Open Regedit
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Applets/Regedit and look for the value LastKey.
Double-click it and clear the string.
Then right-click the Regedit key in the lefthand pane and select Permissions.
Set Permissions to Deny for any/all users/groups

Speed up Nero in XP

Go to "administrative tools" in the control panel, and in the "services" list, disable the IMAPI CD-Burning COM service.
Note: manual setting is not enough it must be disabled. It is the built-in CD-burning capability for windowsXP, written by Roxio.
Once it is disabled, Nero will start up much quicker.

Show hidden devices

Explorer shortcut

  1. Create short cut on the desktop
  2. In the target box add;
    /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}.
    Useful if no winkey is present on the keyboard.

Showing hidden apps in add/remove programs

Make self extracting files using the Iexpress2.0 tool.

The tool allows you to make a self extracting file and much more. To use this hidden feature of XP;
  1. Navigate to Windows\system32\
  2. look for a file called iexpress.exe.
  3. Double left click on it and follow the wizard.

Auto complete in dos box

You can enable filename completion in the NT "DOS" shell by editing
HKEY_CURRENT_USER\Software\Microsoft\Command Processor
and changing the CompletionChar value to 0x00000009

Boot - Disable Splash Screen

Right click My Computer, select Properties. Go to Advanced, Startup and Recovery, Settings and click the Edit button. Locate the line that loads XP and add /SOS to the end of it. The resulting line should look something like this:
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /SOS

Back to contents.

Hardware tweaks

Swapping hard drive to another motherboard

Before you swap out the current motherboard go to device manager and select the IDE ATA/ATAPI Controller and select your current storage controller. Right click, select update driver and select install from a list or specific location. Click 'don't search I will choose the driver to install' and select the standard dual channel IDE controller. This will prevent the inaccessible boot device blue screen.

Burn cds on locked cd writers

If you want to burn a CD on one of your company's computers, and if that computer has cd-burning disabled, they have probably used a reg hack. This is the reghack that they have probably used:
Windows Registry Editor
Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoCDBurning"=dword:00000001

If you want to ENABLE CD-burning, copy the regcode above into notepad, change the 1 to a 0 and save as cdr_on.reg.

Change cd and hard drive letters

If you want to change your hard drive letter or your cd-rom drive letter, this is the tip you want.

  1. Click the start button
  2. Go into Administrative tools (either in the start button or in "All Programs"
  3. From Administrative Tools, go into "Computer Management"
  4. In "Computer Management", click on "Disk Management" under "Storage" from the left menu
  5. You should see a window from the lower right hand corner open (it shows all the hard disk drives and cd-rom drives)
  6. To change...
  7. click the "change..." button
  8. from the "assign the following drive letter", select the letter you want to assign to the hard drive or the cd-rom drive
  9. click ok
  10. click ok
  11. (optional) redo the whole step to reassign other hard drives or cd-rom drives
  12. Notes: You can not change the drive letter of your boot or system drive this way. You can not assign drive letters that are already in use. Assign temporary letters as a workaround.

Back to contents.

Security

Moniter the keys that are written or modified in the registry by applications.

How to take a registry snapshot.

Close all unecessary aplications and processes before taking a registry snapshot.
  1. Go to start>run and enter regedit
  2. Right click the HKEY_CURRENT_USER branch and from the drop down box select export.
    Name the file user1.reg
  3. Right click the HKEY_LOCAL_MACHINE branch and from the drop down box select export.
    Name the file machine1.reg
  4. Run the application or installation.
  5. Reopen regedit and repeat steps 1 and 2 above. The exported registry branches should named as user2.reg and machine2.reg.
  6. Go to start> and enter cmd. Using the cd command, browse to the directory that contains the exported registry files.
  7. The following uses the file compare utility, fc.exe. Enter the command below, without quotes,
    'fc /u user1.reg user2.reg >user.txt'. Repeat the procedure for machine*.reg. The differences are output to the user and machine text files.

Changing user password

This tweak gives a user the opportunity to use it for good or bad. It enables the user to re-password any account without having to know the existing password and also shows you every account that exists on the machine, even the ones that are hidden.
This is a good tool to use if you forgot a password to say your administrator account and you needed to be logged into the admin account for any reason.

To view all of the user accounts:

While logged onto the computer, click on Start>Run>and type in CMD.
From the command prompt window, type in net users. This will show you every account that is made onto the computer whether it is hidden or not.

To change an account password:

While logged onto the computer to an account that has administrative rights, click on Start>Run>and type in CMD.
Type in net user then the name of the account then * and press enter. Here's an example: net user administrator * or net user "Joe Smith" *. Put the name in quotes if it contains spaces.
From there it should ask for a new password. Type in your new password, type very carefully - the command window won't display what you type, and once more to confirm it. If you get the message that the command succeeded successfully you're all set!

AutoComplete - Clear

IE/Tools/Internet Options/General/Clear History
IE/Tools/Internet Options/Content/AutoComplete
Can't Clear History: Start/Search/Change Preferences/Turn off AutoComplete

Control the Auto Complete Mode

This setting controls whether the automatic text completion (AutoComplete) feature of Windows explorer appends the suggested text to the words as you are typing as well as showing a drop-down list of available values.

AutoComplete Keys and Storage

The specific subkeys for different applications (appear to be) is as follows:

IE: HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-839522115-1708537768-1343024091-1003\Data\e161255a-37c3-11d2-bcaa-00c04fd929db

OE: HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-839522115-1708537768-1343024091-1003\Data\220d5cc1-853a-11 d0-84bc-00c04fd43f8f

FTP, Front Page and password protected web sites:

HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-839522115-1708537768-1343024091-1003\Data\5e7e8100-9138-11d1-945a-00c04fc308ff

Outlook XP: HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider\S-1-5-21-839522115-1708537768-1343024091-1003\Data\220d5cd0-853a-11d0-84bc-00c04fd43f8f

Note: the S-1-5-21-839522........ part of the Registry key above may be different on your machine.

InfoDelivery, MSN and Identities have their own sub branches off of the Data branch. These number (other than the User number) appear to be the same from machine to machine.

AutoComplete: Remove Google Search History

[HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System

Provider\S-1-5-21-839522115-1708537768-1343024091-1003\Data\e161255a-37c3-11

d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db\q:StringData]

"Behavior"=-

"Item Data"=-

[HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System

Provider\S-1-5-21-839522115-1708537768-1343024091-1003\Data\e161255a-37c3-11

d2-bcaa-00c04fd929db\e161255a-37c3-11d2-bcaa-00c04fd929db\q:StringIndex]

"Behavior"=-

"Item Data"=-

Note: The S-1-5 ... portion of this string may be different on your machine.

Note 2: To delete the value doesn't work unless the Permissions have been set to allow full control. Nor is it possible to delete the keys, without Full Control being allowed.

Unencrypt files

  1. Login as Administrator
  2. Go to Start/Run and type in cmd and click OK.
  3. At the prompt type cipher /r:Eagent and press enter
  4. This prompt will then display:
  5. Please type in the password to protect your .PFX file:
  6. Type in your Administrator password
  7. Re-confirm your Administrator password
  8. The prompt will then display
    Your .CER file was created successfully.
    Your .PFX file was created successfully.

The Eagent.cer and Eagent.pfx files will be saved in the current directory that is shown at the command prompt. Example: The command prompt displays C:\Documents and Settings\admin> the two files are saved in the admin folder. For security concerns, you should house the two files in your Administrator folder or on a floppy disc.

You, the Administrator are now configured as the default Recovery Agent for All Encrypted files on the Local Machine.

To Recover Encrypted files:
  1. If you have completed the above steps BEFORE an existing user encrypted his/her files, you can log in to your Administrator account and navigate to the encrypted files. Double click on the files to view the contents.
  2. If you have completed the above steps AFTER an existing user has already encrypted his/her files, you must login to the applicable User's User Account and then immediately logout.
  3. Next, login to your Administrator account and navigate to the encrypted files. Double click on the files to view the contents.
  4. *Warning. Do not Delete or Rename a User's account from which will want to Recover the Encrypted Files. You will not be able to de-crypt the files using the steps outlined above.

MS vulnerability

Remove IPC$ Share Remote Netbios Attack Vulnerability
  1. Open Regedit
  2. Navigate to HKEY_LOCAL_MACHINE>System>CurrentControlSet>Control>Lsa>restrictanonymous
  3. Change "Value Data" from 0 to 1
  4. This will disable remote logon to a null IPC$ share

Back to contents.

Microsoft Windows shortcut keys

Windows System Key Combinations

CTRL+ESC - Open Start menu
ALT+TAB - Switch between open programs
ALT+F4 - Quit program
SHIFT+DELETE - Delete items permanently

Windows Program Key Combinations

CTRL+C - Copy
CTRL+X - Cut
CTRL+V - Paste
CTRL+Z - Undo
CTRL+B - Bold
CTRL+U - Underline
CTRL+I - Italic

Mouse Click/Keyboard Modifier Combinations for Shell Objects

SHIFT+RIGHT CLICK - Displays a context menu containing alternative verbs.
SHIFT+DOUBLE CLICK - Runs the alternate default command (the second item on the menu).
ALT+DOUBLE CLICK - Displays properties.
SHIFT+DELETE - Deletes an item immediately without placing it in the Recycle Bin.

General Keyboard-Only Commands

F1 - Starts Windows Help.
F10 - Activates menu bar options.
SHIFT+F10 - Opens a context menu for the selected item. This is the same as right-clicking an object.
CTRL+ESC - Opens the Start menu. Use the ARROW keys to select an item.
CTRL+ESC, ESC - Selects the Start button. (Press TAB to select quick launch, the taskbar, system tray)
ALT+DOWN ARROW - Opens a drop-down list box.
ALT+TAB - Switch to another running application. Hold down the ALT key and then press the TAB key to view the task-switching window.
Press down and hold the SHIFT key while you insert a CD-ROM to bypass the auto-run feature.
ALT+SPACE - Displays the main window's System menu. From the System menu, you can restore, move, resize, minimize, maximize, or close the window.
ALT+- (ALT+hyphen) - Displays the Multiple Document Interface (MDI) child window's System menu. From the MDI child window's System menu, you can restore, move, resize, minimize, maximize, or close the child window.
CTRL+TAB - Switch to the next child window of a Multiple Document Interface (MDI) application.
ALT+ - Opens the corresponding menu.
ALT+F4 - Closes the current window.
ALT+DOWN ARROW - Opens a drop-down list box.
CTRL+F4 - Closes the current Multiple Document Interface (MDI) window.
ALT+F6 - Switch between multiple windows in the same program. For example, when the Notepad Find dialog box is displayed, ALT+F6 switches between the Find dialog box and the main Notepad window.

Shell Objects and General Folder/Windows Explorer Shortcuts

F2 - Rename object
F3 - Find: All Files
CTRL+X - Cut
CTRL+C - Copy
CTRL+V - Paste
SHIFT+DEL - Delete selection immediately, without moving the item to the Recycle Bin.
ALT+ENTER - Open the property sheet for the selected object.
To Copy a File - Press down and hold the CTRL key while you drag the file to another folder.
To Create a Shortcut - Press down and hold CTRL+SHIFT while you drag a file to the desktop or a folder.

General Folder/Shortcut Control

F4 - Selects the Go To A Different Folder box and moves down the entries in the box (if the toolbar is active in Windows Explorer).
F5 - Refreshes the current window.
F6 - Moves among panes in Windows Explorer.
CTRL+G - Opens the Go To Folder tool (in Windows 95 Windows Explorer only).
CTRL+Z - Undo the last command.
CTRL+A - Select all the items in the current window.
BACKSPACE - Switch to the parent folder.
SHIFT+CLICK - Close Button For folders, close the current folder plus all parent folders.

Windows Explorer Tree Control

Numeric Keypad * - Expands everything under the current selection.
Numeric Keypad + - Expands the current selection.
Numeric Keypad - - Collapses the current selection.
RIGHT ARROW - Expands the current selection if it is not expanded, otherwise goes to the first child.
LEFT ARROW - Collapses the current selection if it is expanded, otherwise goes to the parent.
Property Sheet Control
CTRL+TAB/CTRL+SHIFT+TAB - Move through the property tabs.

Accessibility Shortcuts

Tap SHIFT 5 times - Toggles StickyKeys on and off.
Press down and hold the right SHIFT key for 8 seconds - Toggles FilterKeys on and off.
Press down and hold the NUM LOCK key for 5 seconds - Toggles ToggleKeys on and off.
Left ALT+left SHIFT+NUM LOCK - Toggles MouseKeys on and off.
Left ALT+left SHIFT+PRINT SCREEN - Toggles High Contrast on and off.

Microsoft Natural Keyboard Keys

WINDOWS - Start Menu
WINDOWS+R - Run dialog box
WINDOWS+M - Minimize All
SHIFT+WINDOWS+M - Undo Minimize All
WINDOWS+F1 - Help
WINDOWS+E - Windows Explorer
WINDOWS+F - Find Files or Folders
WINDOWS+D - Minimizes all open windows and displays the desktop
CTRL+WINDOWS+F - Find Computer
CTRL+WINDOWS+TAB - Moves focus from Start, to Quick Launch bar, to System Tray. Use RIGHT ARROW or LEFT ARROW to move focus to items on Quick Launch bar and System Tray
WINDOWS+TAB - Cycle through taskbar buttons
WINDOWS+BREAK - System Properties dialog box
Application key - Displays a context menu for the selected item

Microsoft Natural Keyboard with IntelliType Software Installed

WINDOWS+L - Log off Windows
WINDOWS+P - Opens Print Manager
WINDOWS+C - Opens Control Panel
WINDOWS+V - Opens Clipboard
WINDOWS+K - Opens Keyboard Properties dialog box
WINDOWS+I - Opens Mouse Properties dialog box
WINDOWS+A - Opens Accessibility Options(if installed)
WINDOWS+SPACEBAR - Displays the list of IntelliType Hotkeys
WINDOWS+S - Toggles the CAP LOCK key on and off

Dialog Box Keyboard Commands

TAB - Move to the next control in the dialog box.
SHIFT+TAB - Move to the previous control in the dialog box.
SPACEBAR - If the current control is a button, this clicks the button. If the current control is a check box, this toggles the check box. If the current control is an option button, this selects the option button.
ENTER - Equivalent to clicking the selected button (the button with the outline).
ESC - Equivalent to clicking the Cancel button.
ALT+ - Select menu item.

Back to contents.


Document revised January 2005

Sponsored by Solriche