/windows | Jul 13, 2018
Microsoft Office Home and Student 2010 cannot verify the license for this product. You should repair the Office program by using Control Panel.
Microsoft's own "Microsoft Office cannot verify the license for this product" error when you start an Office app suggests disabling compatibility mode - no change.
Help Desk Geek's Fix MS Office "Cannot Verify License" Error Message offers four methods:
none of which worked initially, as the Activation Wizard unhelpfully offered:
Telephone Activation is no longer supported for your product.
Happily, Microsoft published a new number: +1-866-421-7141. Used with method 4 above to resolve.
/windows | Jul 13, 2018
A subtle but deeply gratifying feature is how ScreenToGIF displays the current frame when highlighting a range of frames in the timeline (rather than statically displaying the first selected frame).
/windows | May 21, 2018
These steps dumb down security advances made in later Windows versions in order to accommodate XP. Do not use them unless absolutely necessary; even then, do so at your own risk (and joy).
On Windows 10 PC:
AllowInsecureGuestAuthand set its value data to
C:\Windows\System32\OptionalFeatures.exe→ check "SMB 1.0/CIFS File Sharing Support" → OK → reboot when prompted
On Windows XP PC:
You should now be able to map a network drive normally.
If you have trouble with "Reconnect at login" or "Connect using a different user name", consider a batch script in the Startup folder, e.g.,
ping 127.0.0.1 -n 11 >NUL & REM delay execution for 10 seconds net use * /delete /yes & REM clear any existing mapped drives net use x: \\WIN10PC\shared
If the Windows 10 and XP usernames and passwords match, you're done!
If they differ, you can simply store the Windows 10 username and password in Windows XP's Stored User Names and Passwords (aka Credential Manager); access via
rundll32.exe keymgr.dll, KRShowKeyMgr.
Otherwise, you could specify the username in the script, prompting the user for the password each time (e.g.,
net use x: \\WIN10PC\shared /user:xpuser *), or you could store both the username and the password in the script (security-wise, not a great idea, but hey, you're still running Windows XP, so...
net use x: \\WIN10PC\shared /user:xpuser password).
Sources and more information:
/windows | May 17, 2018
Updates failed - Advanced Micro Devices, Inc - System - Error 0x80070002
Attempting to automatically update the driver in Device Manager returned:
AmdAS4 Device: The system cannot find the file specified.
HP's Software and Driver Downloads page for this laptop inexplicably does not include chipset drivers. However, thanks to Paul_Tikkanen's answer in Missing unknown driver ACPI\ASD0001\2&DABA3FF&2 (which took longer than a few seconds to find, hence this post), the error was resolved by downloading and installing the AMD Chipset Drivers (revision 18.10.0418, released 4/18/2018) directly from AMD.
/windows | May 13, 2018
(Note: This post is not about Windows 10's new Timeline feature (but don't miss Windows 10 Timeline Forensic Artefacts and WxTCmd, a parser for the Windows 10 Timeline database.))
Replay / rewind Windows events and actions to:
Unlike the lengthy forensic and incident response tools listed below, Nir Sofer's LastActiviyView runs on a live system within seconds, reporting:
In 2014, Thomas Weller combined LastActiviyView with a host of additional Nirsoft utilities to create Live System Timeline Builder, which builds a super timeline of a running Windows machine in seconds. The unified view includes results from:
While Live System Timeline Builder comes packaged as an installer, the resulting folder (%PROGRAMFILES(X86)%\WelliSolutions\LiveSystemTimeLineBuilder\) is completely portable; you just need LiveSystemTimelineBuilder.exe, EPPlus.dll, and the Providers subdirectory.
You can even update the Nirsoft apps in Providers as well (the latest RegDllView, 1.60, does not appear compatible, so stick with the included 1.58).
If you have more time to dig, there are a number of exhaustive (and time-consuming) timeline tools focused on forensics and incident response:
Autopsy "is a digital forensics platform and graphical interface to The Sleuth Kit and other digital forensics tools. It is used by law enforcement, military, and corporate examiners to investigate what happened on a computer." Includes detailed timeline analysis.
Crowd Response "is a lightweight Windows console application designed to aid in the gathering of system information for incident response and security engagements."
FastIR Collector "collects different artefacts on live Windows and records the results in csv or json files."
Forensafe Timeline Analyzer "will take physical and logical disks, image files and RAM as input to recover artifacts." (Project status unclear, but calimelo's reply in this thread includes a link to a password-protected RAR archive.)
ir-rescue - "A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response."
KeyChain KeySpace "utilizes digital forensic techniques for cyber criminal investigations, internal audits, and industrial confidential disclosures. It is a solution that supports automatic analysis easily and conveniently. Analyze file formats and raw data for professional analysis." (via Google Translate)
Redline - "Thoroughly audit and collect all running processes and drivers from memory, file-system metadata, registry data, event logs, network information, services, tasks and web history."
Timesketch - "Collaborative forensic timeline analysis"
Virtual machine appliances:
* Unlikely that they erased all (if any) traces.
/windows | May 11, 2018
/windows | Mar 22, 2018
In Windows 2000 and XP, the default solid color Desktop background was a serene shade of blue:
The "Windows Classic" theme in Windows 7 used the same color, but there was a slightly darker blue default color available in the Solid Colors menu, which was still available in Windows 8.1:
Inexplicably, Windows 10 not only removed these calming blue tones and replaced them with 24 largely garish colors,
but also failed to provide any option for customizing colors in the main Settings menu (right click Desktop > Personalize > Background: Solid Color). Happily, the classic Desktop Background applet is accessible via Run > control /name Microsoft.Personalization /page pageWallpaper. Not only can you select the Windows 7 darker blue, but you can also create custom colors by clicking "More...".
UPDATE: The day after this post, Microsoft released Windows 10 Fall Creators Update, which includes a "Custom color" option in the main Background settings window. Click "More" to enter RGB, HSV, or hex values.
/windows | Oct 16, 2017
"This tool allows an easy and comfortable way to download genuine Windows 7, Windows 8.1 and Windows 10 disk images (ISO) directly from Microsoft's servers, as well as Office 2007, Office 2010, Office 2013, Office 2016, and Office 2011 for Mac.*
"In the past Microsoft provided disk images for many of their products through their subcontractor "Digital River". These downloads were pulled in early 2014. Afterwards, Microsoft made a limited selection of downloads available on their TechBench site. Our tool accesses that TechBench site, and unlocks a large number of hidden download files on it."
*In my testing, only Windows 8.1, Windows 10, Insider Preview, Office 2013, Office 2016, and Office 2016 for Mac were available. However, there is this promising note on Jan's website:
"Removal of Windows 7 and Office in Version 5.00: These downloads have been blocked by Microsoft. We're working on an update."
/windows | Jun 03, 2017
/windows | May 31, 2017
Subscribe or visit the archives