Nxl67170 - Windows: Difference between revisions

From miki
Jump to navigation Jump to search
Line 288: Line 288:
|-
|-
|Misc||
|Misc||
* {{red|candidate}} Enable '''[[Windows Administration#Enable Login Verbose Status|VerboseStatus]]'''
* {{blue|3rd}} Enable '''[[Windows Administration#Enable Login Verbose Status|VerboseStatus]]'''
|-
|-
|Region and Language||
|Region and Language||
* {{red|candidate}} '''Uninstall''' Chinese (Simplified), Chinese (Tradional), Japanese, Korean (free 2.3GB)
* {{blue|3rd}} '''Uninstall''' Chinese (Simplified), Chinese (Tradional), Japanese, Korean (free 2.3GB)
* {{red|candidate}} '''Copy''' current locale settings to startup screen
* {{blue|3rd}} '''Copy''' current locale settings to startup screen
|-
|-
|Tuning||
|Tuning||
* {{red|new}} '''Delete''' C:\Users\Administrator\AppData\Local\Temp
* {{blue|3rd}} '''Delete''' C:\Users\Administrator\AppData\Local\Temp
* {{red|new}} '''Disable''' screensaver:
<source lang=reg>
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Control Panel\Desktop]
"ScreenSaverIsSecure"="1"
"ScreenSaveTimeOut"="9999"
"ScreenSaveActive"="0"

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop]
"ScreenSaveActive"="0"
"ScreenSaverIsSecure"="1"
"ScreenSaveTimeOut"="9999"
</source>
|}
|}



Revision as of 13:33, 4 April 2013

Introduction

This is the configuration page for the Windows 7 partition on NXL67170.

Available Images

  • (1st image as-of 2012-02-19 deleted)
  • Image 1 (ntfsclone) — 2013-03-20 — Native, as received from IT with some additional software (Visio, Euroglot...), but without any virtualization .
  • Image 2 (ntfsclone) — Last backup image. Contains additional software, custom settings and virtualization.
  • Image 3 (vbox snapshot) — 1st virtualbox snapshot, state as on harddrive image. Content of the next backup image. Last known good version, VM is reverted to that image if Candidate image is broken
  • Candidate (vbox snapshot) — Last permanent image, VM is reverted to that image regularly to get SW updates, and apply last changes from new. All services enabled. Merged into Image 3 if proven stable.
  • New (vbox snapshot) — Lightweight version of candidate (many serviced and AV disabled). Contains last bleeding-edge changes. VM already started. VM is reverted to that image on a daily basis.

Daily process

  • Boot new snapshot.
  • Apply last changes during last session, and update new snapshot (replace previous one).
  • Enjoy

Weekly process

  • Merge candidate snapshot into image 3.
  • Boot the new image 3
  • Apply last changes applied in image new, and download last SW update, etc.
  • Create new candidate snapshot
  • Apply non-permanent changes (lightweight), and create new new snapshot.

Monthly process

  • Backup image 3

Configuration Files

All configuration files can be found here.

Installed Applications

List of applications installed in each image, by order of first appearance, and their configuration settings.

Note: 1st, 2nd, new, etc. indicate that the settings was applied in the given image, and not in the image under which the application is listed (to track settings changed after image was taken).

1st Image

Outlook 2010
  • 1st Deleted .OST file in user profile, and boot once outlook to recreate it (but quit before send & receive)
  • 2nd Set value HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\options\DisableIMAP to 0
  • 2nd Add account, your name Michael Peeters, e-mail address michael.peeters@nxp.com, type IMAP, incoming server localserver, outgoing localserver, user name beq06659, password (see keepassx) — (more settings) Account _archives_, root folder path INBOX
    • 2nd OptionsAdvancedSend/Receive...Edit... → select Archives, and click Download headers for subscribed folders.
    • 2nd Right click on IMAP folder account → IMAP folders... → uncheck When displaying hierarchy in Outlook, show only subscribed folders. Then right click again → Update Folder List.
    • 2nd For each IMAP account, select Mark items for deletion but do not move them automatically (→ Folder menu → PurgePurge Options...) (from [1]).
      This fix the error message The operation cannot be performed because the object has been deleted.
  • 2nd Add account, your name Michael Peeters, e-mail address michael.peeters@noekeon.org, type IMAP, incoming server localserver, outgoing localserver, user name mip@noekeon.org, password (see keepassx) — (more settings) Account _noekeon.org_, incoming server 9143, outgoing server 9025, root folder path INBOX
    • Setup Send & Receive..., subscribed folders and purge settings.
  • 2nd Add account, your name Michael Peeters, e-mail address michael.peeters@immie.org, type IMAP, incoming server mail.gandi.net, outgoing mail.gandi.net, user name mpe@immie.org, password (see keepassx) — (more settings) Account michael.peeters@immie.org, Outgoing server requires authentication, incoming server 9993 using SSL, outgoing server 9465 using SSL, root folder path INBOX
    • Setup Send & Receive..., subscribed folders and purge settings.
    • Use mail.gandi.net for server to avoid 'The target principal name is incorrect'. For this, add to hosts file:
10.0.2.2    mail.gandi.net
  • 2nd Add account, your name Ismael Peeters, e-mail address ismael.peeters@immie.org, type IMAP, incoming server mail.gandi.net, outgoing mail.gandi.net, user name ipe@immie.org, password (see keepassx) — (more settings) Account ismael, Outgoing server requires authentication, incoming server 9993 using SSL, outgoing server 9465 using SSL, root folder path INBOX
    • Setup Send & Receive..., subscribed folders and purge settings.
    • Use mail.gandi.net for server to avoid 'The target principal name is incorrect'. For this, add to hosts file:
10.0.2.2    mail.gandi.net
  • 2nd Select favorite folders
  • 2nd Change count from show number of unread items to show total number of items (for sent folders)
  • 2nd Refresh rules (and target folders) (see rules in text install log for nxl67002)
  • 2nd OptionsMail
    • Reading Pane...uncheck' both Mark items as read...
    • → When replying to a message → Prefix each line of the original message
  • 2nd OptionsCalendar
    • → First day of week Monday
    • Show week numbers in the month view and in the Date Navigator
  • 2nd Select an IMAP folder, then Change viewManage ViewsModify...Conditional Formatting.... Add 2 new formatting as follows:
    • To me only, color maroon, condition (advanced panel):
To    is (exactly)   Michael Peeters
To    is (exactly)   Michaël Peeters
To    is (exactly)   michael.peeters@nxp.com
To    is (exactly)   michael.peeters@noekeon.org
To    is (exactly)   michael.peeters@immie.org
To    is (exactly)   peeters-ml1@noekeon.org
    • To me, color blue, condition (advanced panel):
To    contains   Michael Peeters
To    contains   Michaël Peeters
To    contains   michael.peeters@nxp.com
To    contains   michael.peeters@noekeon.org
To    contains   michael.peeters@immie.org
To    contains   peeters-ml1@noekeon.org
  • 2nd Apply this view on all other IMAP folders
  • 2nd Install Send & Save macro, and File → Options Trust Center → Macro SettingsEnable all macros
  • 2nd Import old signatures to C:\Users\beq06659\AppData\Roaming\Microsoft\Signatures, then Options → Mail → Signatures...', select (graphic) for new messages, (short) for replies/forwards.
  • 3rd Update rules!
  • 3rd Repair IMAP account (delete & create again PST)!
  • 3rd Add Alias accounts (regular alias, but disable receive mail in Send & Receive settings)
  • 3rd Import mail security certificate from nxl67002.
Windows Explorer
  • 1st Folder Options → Show hidden files, DO NOT hide extensions for known file types, DO NOT hide protected OS files
  • 1st Taskbar — Use small icons
  • 1st Pin Windows Command Processor (cmd.exe) to Start Menu
  • 1st Unpin Internet Explorer, Windows Explorer, Window Media Player
  • 1st Folder optionsAutomatically expand to current folder
  • 1st Tray — Lync 2010 → show icon and notifications for Lync 2010, Sysinternals Process Explorer
  • 2nd WallpaperPirate Mac.jpg (fill)
Office Lync 2010
  • 1st Minimize to notification area
  • 1st Display optionsName View
  • 1st Migration Office 365 completed (via corporate update) + imported old contacts
Windows Command Processor (cmd.exe)
  • 1st Pin to Start Menu
  • 1st Defaults → Buffer size 500, Font Lucida Console, layout 132 x 5000 132 x 50, black on white
  • 3rd Set shortcut to run as administrator
7-zip
  • 1st v9.20, no localization files, for all users
Launchy
  • 1st v2.6 Beta 2
  • 1st Hide when it loses focus, Always on top, DO NOT auto update catalog, DO NOT check for new versions
  • 1st Plugin pathy (access apps in system path)
Sysinternals Process Explorer
  • 1st Installed in C:\Windows
  • 1st Select Replace Task Manager, Hide When Minimized, Allow Only One Instance.
  • 1st Select columns IO Read Byte, IO Write Byte, IO Other Byte, IO Delta Read Byte, IO Delta Write Byte, IO Delta Other Byte.
Sysinternals Autoruns
  • 1st Installed in C:\Windows
  • 1st v9.20, no localization files.
MS Office Visio Professional 2010 SP1 EN
  • 1st Via NXP Advertised program (requested via wbi portal)
Euroglot Professional 7.6.3 EN
  • 1st Via NXP Advertised program (requested via wbi portal)
Opera
  • 2nd Set http://nxl67170ux:8118 as proxy (all protocol)
  • 2nd Add Collabnet client-side authentication certificate
  • 2nd Recover opera profile from WinXP image (keyboard/, sessions/, skin/, styles/user.css, toolbar/, bookmarks.adr, notes.adr, search.ini, speeddial.ini, operaprefs.ini (merged))
  • 2nd Set master password, and use it to protect saved passwords
  • 3rd Remove old sessions (incl. autosave.win)
PDF X-Change Vewer
  • 1st v2.5.210
  • 1st NO live update, NO addins
Vim
  • 1st v7.3-789 (from Cream sourceforge) (32-bit version)
  • 2nd Import basic config from Linux, but far from perfect
  • 3rd ISSUE no context menu !!! — FIXED Copy 64-bit version of gvimext.dll to C:\Program Files\vim\vim73\gvimext.dll (create directory first), and import:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{51EEE242-AD87-11d3-9C1E-0090278BBD99}]
@="Vim Shell Extension"

[HKEY_CLASSES_ROOT\CLSID\{51EEE242-AD87-11d3-9C1E-0090278BBD99}\InProcServer32]
@="C:\\Program Files\\vim\\vim73\\gvimext.dll"
"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{51EEE242-AD87-11d3-9C1E-0090278BBD99}"="Vim Shell Extension"

[HKEY_LOCAL_MACHINE\SOFTWARE\Vim\Gvim]
"path"="C:\\Program Files (x86)\\vim\\vim73\\gvim.exe"

Note that we tell gvimext.dll to use 32-bit version of gvim.exe. More solutions at [2], [3], but the shellex DLL offers more flexibility.

Internet Explorer
  • 3rd Use custom proxy.pac at C:\Users\beq06659\proxy.pac

2nd Image

Nokia PC Suite
  • 2nd v7.1 — Tried on native image, or on a clean VM Windows 7 Pro, works flawless
  • ISSUE — Only detect & connect if I detach then reattach USB BCM20702A0
Virtualbox Additions
  • 2nd v4.2.10
PrimoPDF
  • 2nd v5.1.0.2 — DO NOT install Nitro PDF Reader! try it?

3rd Image

WinDirStat
  • 3rd installed

New / Candidate Image

Not Yet Installed

Picasa 3
  • Was installed on NXL67002

Detailed System Settings

1st Image

  • Got PC from IT (2013-02-19)
  • Disabled BitLocker
  • Removed restore points, hibernat.sys, cache file, etc.
  • Shrink partition (1st via DISKPART.EXE then ntfsresize)
  • ntfsclone
Tuning
  • 1st Disable Windows Search
    via Control PanelPrograms and FeaturesTurn Windows features on or offWindows Search


2nd Image

Tuning
  • 2nd Disable McAfee (drivers, services, start app)
    Easiest way is to attach drive to another Win7 vbox, and use autoruns to edit remote system.
Physical-2-Virtual (P2V)
  • 2nd Fix bad BCD (Windows Boot Manager Error) — Boot once with Windows Recovery CD, and let auto-repair run
  • 2nd Fix bad BCD (BSOD 0x0000007B) — Boot again with Windows Recovery CD, go to command prompt:
bcdedit /export C:\BCD_Backup
ren c:\boot/BCD bcd2.old
bootrec /rebuildbcd
  • 2nd Fix missing drivers (BSOD 0x0000007B) — Still within Windows Recovery CD, start regedit:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96A-E325-11CE-BFC1-08002BE10318}\0000]
"InfPath"="mshdc.inf"
"InfSection"="msahci_Inst"
"ProviderName"="Microsoft"
"DriverDateData"=hex:00,80,8c,a3,c5,94,c6,01
"DriverDate"="6-21-2006"
"DriverVersion"="6.1.7600.16385"
"MatchingDeviceId"="pci\\cc_010601"
"DriverDesc"="Standard AHCI 1.0 Serial ATA Controller"
"Migrated"=dword:00000001

[HKEY_LOCAL_MACHINE\nxl_SYSTEM\ControlSet001\Control\PnP]
"DisableCDDB"=-

[HKEY_LOCAL_MACHINE\nxl_SYSTEM\ControlSet001\services\atapi]
"Start"=dword:00000000

[HKEY_LOCAL_MACHINE\nxl_SYSTEM\ControlSet001\services\msahci]
"Start"=dword:00000000
  • 2nd Boot virtual box, and ***wait*** for all devices to be detected.
  • 2nd DO NOT reboot when prompted, but instead start regedit again:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\nxl_SYSTEM\ControlSet001\Control\PnP]
"DisableCDDB"=-
Misc
  • 2nd Open all office apps, and check activation is ok
Fonts
  • 2nd 2nd Installed Bitstream Vera, Fontin, Diavlo, Signika fonts
Network
  • 2nd Add to hosts file:
10.0.2.2     localproxy
10.0.2.2     localserver
10.0.2.2     nxl67170ux
10.0.2.2     mail.gandi.net                 # To avoid 'The target principal name is incorrect' error msg in Outlook
Update
  • 2nd Restore corporate env. to get latest updates (incl. Office 365 migration for Lync)

3rd Image

Misc
Region and Language
  • 3rd Uninstall Chinese (Simplified), Chinese (Tradional), Japanese, Korean (free 2.3GB)
  • 3rd Copy current locale settings to startup screen
Tuning
  • 3rd Delete C:\Users\Administrator\AppData\Local\Temp

New / Candidate Image

Non-permanent "lightweight" settings, only for new image:

Outlook
  • new only delete .OST file in user profile (always outdated after image restore)
Tuning
  • new only Disable McAfee services (see C:\Temp\Custom config\Disable_McAfee_On_Remote.reg)
  • new only Disable various services (see C:\Temp\Custom config\Disable_Services_On_Remote.reg)
  • new only Disable screensaver:
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Control Panel\Desktop]
"ScreenSaverIsSecure"="1"
"ScreenSaveTimeOut"="9999"
"ScreenSaveActive"="0"

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop]
"ScreenSaveActive"="0"
"ScreenSaverIsSecure"="1"
"ScreenSaveTimeOut"="9999"

Remarks

  • Install advertised program
    This works even if policy deleted (winlogon was running though), network interface set to NAT, and with most service disabled (require smshost + ccmexec).

To Do

Issues

  • Issue — virtualbox shared folder \\vboxsrv\d is not visible from Administrator account. Very annoying when copying files to system32 for instance (because source won't be visible anymore).
    Temp. workaround, launch cmd as administrator:
net use D: \\vboxsrv\d
  • Issue — Opera does not work with custom proxy.pac file.

To Do

  • Questions
    • Outlook — macro always enabled. Any better solution?
    • Outlook — move .ost to d: drive (or find a solution that outlook always complaining .ost is old)
    • Outlook — find a rss reader that can save into IMAP (check rss2email or feed2imap)
    • System — Enable page file?
    • Merge history from file win7_P2V_links.txt, and written notes.
    • Recover application settings from old profile

Done & Fixed

  • Fixed — Issue description
    Fix description
  • Done — Description