Easy2Boot - MulitBoot USB Project

Program that formats a USB drive and lets you boot from ISO's stored on the drive.


Easy2Boot

Lock down Terminal Server 2008

Good link for locking down a terminal server

http://www.adshotgyan.com/2012/02/terminal-server-lockdown.html

Free MSI creator

http://www.advancedinstaller.com/

Allow remote support helpers to see and interact with UAC prompts

Everyday problem that we have here when remotely supporting Windows 7 users that do not have local admin rights.  When we remote into a workstation to help, it enviably evolves doing something with elevated privileges.  When UAC is tripped we cannot see it and have to rely on the user.  

Found this registry change that allows the remote helper to see the UAC prompt.

Reg key to enable / disable UAC prompts 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CurrentVersion\Policies\System\PromptOnSecureDesktop

Change its value from 1 (default value) to 0.

After changing the above reg key remote helper can see and interact with the elevated prompts.

Setting a PDC Emulator to pull time from an NTP Server

On a domain the computers pull their time from the domain controllers and thedomain controllers pull  their time from the AD server that has the PDC Emulator role. To set the PDC Emulator to pull time from an outside NTP server follow these commands.

-  Find the PHC server: c:\>netdom /query fsmo

-  Stop the time service (w32time): c:\>net stop w32time

-  Point the server to the external NTP source: c:\>w32tm /config /syncfromflags:manual /manualpeerlist:"0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org"

-  Make the PDC a reliable time source: c:\>w32tm /config /reliable:yes

-  Start the time service: c:\>net start w32time

-  Check the configuration changes:  c:\>w32tm /query /configuration

-  Force a sync: c:\>w32time /resync

List of NTP servers:

NTP.ORG

server 0.pool.ntp.org

server 1.pool.ntp.org

server 2.pool.ntp.org

server 3.pool.ntp.org

NIST.GOV

nist1-ny.ustiming.org

nist1-nj.ustiming.org

nist1-nj2.ustiming.org

nist1-ny2.ustiming.org

Server 2012 - Change the product key

Powershell commands to change the product key in server 2012

- Run powershell as administrator
- slmgr -upk  (removes the current product key)
- slmgr -ipk "Product Key"  (installs the new key)

BPOS to Office 365 Outlook Keeps Prompting for Password

After migrating one of my clients from BPOS to Office 365 we had a few computers that would prompt for their password every time Outlook was opened.  The normal fixes did not work so after some digging I found  this BLOG Post and it did the trick.

http://community.office365.com/en-us/f/162/t/52027.aspx

Outlook prompting for password repeatedly, after password change, former BPOS acct

• Posted by David Szp  on 2012-May-04 2:01 PM

  A customer of ours has Office 365 Exchange that was migrated from BPOS a few months ago. One user had this issue up front but not others; recently after passwords expired and were changed, several other users began to get continued password prompts (relating to a RED001... server, the old BPOS server) in Outlook shortly after it opened, even though it was connected to Exchange and getting new email and such just fine. The password prompts were very annoying.

  Additionally, if I did a Repair from Account Settings, the account would fail to autodiscover one time after a timeout, but if I retried immediately it would succeed the second time (DNS was configured correctly). After the fix below, Repair succeeds with autodiscover the first time every time, and quickly.

  I tracked down a blog post where the first comment gave me an idea. I tested it and it seemed to work, so I expanded it a little into a complete solution that has solved the problem for this customer, I'm sharing it here in case it's useful to someone else:

  
  

  In order to fix the random password popups with Outlook where BPOS was previously installed, navigate to this folder in Windows Explorer(the %userprofile% text will be replaced by Windows automatically with the correct path):

  
  

  %userprofile%\AppData\Local\Microsoft\Sign In\Config\

  
  

  Then go into the subfolder that's named after the Outlook email address.

  In that folder, rename or delete these two files:

  
  

  ConfigurationParameters.xml

  outlook-autodiscovery.xml

  
  

  Close (if open still) Outlook and then reopen it, and go to Tools menu (Outlook 2007) or File menu (Outlook 2010) and click Account Settings. When viewing the account (should only be one), click the Repair button just above the account list. Click Next to go through the wizard which should be successful all the way through, then close out of the settings, restart Outlook and the password prompts should be gone.

  I specifically tested this with Outlook 2007 but I assume 2010 would be similar. I suspect the files above are remnants of the BPOS sign-in assistant (which I think had been uninstalled, though maybe not fully. However I forgot to double-check this before disconnecting from the customer's machine).

  Hopefully that helps someone else! I was unable to find much useful information online; the link I did find above didn't have a complete solution just a suggestion in a comment I ran with.

  
  

  David Szpunar
  Lead Engineer,
  PC Help Services

Connect a Physical Hard Disk to a Virtual Machine

Updated: February 5, 2010

Applies To: Windows Server 2008 R2

Your virtual machines can also be connected to physical hard disks on the virtualization server—not just to virtual hard disks. (This is sometimes referred to as having a “pass-through” disk connected to a virtual machine.)

The physical hard disk that you connect to a virtual machine can also be a network-attached disk, like a logical unit number (LUN) in a storage area network (SAN). A common example is an iSCSI LUN that has been mapped to the virtualization server by using Microsoft iSCSI Initiator. Because the virtualization server sees network-attached storage as local disks, the iSCSI LUN can be connected to a virtual machine.

Important
The most important limitation about having a physical hard disk connected to a virtual machine is that it cannot be connected to the virtualization server or to other virtual machines at the same time. The virtual machine must have exclusive access to the physical hard disk.

Note
For more information about connecting network-attached storage to the virtualization server by using Microsoft iSCSI Initiator, see the Microsoft iSCSI Initiator Step-by-Step Guide (http://go.microsoft.com/fwlink/?LinkID=182862).

Scenario prerequisites

To test this scenario, you will need the following:

• Complete all steps in the main section of this guide. After you complete all the steps, you will have a virtualization server and two virtual machines: Base Virtual Machine (used for creating new virtual machines) and Imported Virtual Machine.
  
• Imported Virtual Machine is running, Windows Server 2008 R2 is configured, and the computer name for the virtual machine is VirtualMachine1.
  
• Make available a hard disk drive on the virtualization server that is not currently used for other tasks and can be temporarily disconnected from the virtualization server. Alternatively, use a network-attached disk or LUN that is already mapped to the virtualization server.
  

Scenario steps

The following procedure explains how to connect a physical hard disk on the virtualization server to a virtual machine.

To connect a physical hard disk to a virtual machine

1. On the virtualization server, take the physical hard disk offline by using Disk Management:
   

   Warning
   To avoid losing data, before you take a physical hard disk offline, stop all applications on the virtualization server that read or write data to that hard disk.

   1. Open Server Manager. Click Start, point to Administrative Tools, and then click Server Manager.
      
   2. In Server Manager, in the console tree, under Storage, click Disk Management.
      
   3. After the disks on the virtualization server are listed in Disk Management, locate and determine if the physical disk that you want to attach to the virtual machine is online. The state of the disk (Online or Offline) is listed in the small pane on the left, where the disk name, disk type, and disk size are also listed.
      
   4. If the disk is online, to take the disk offline, right-click the disk, and then click Offline. After the disk state changes to Offline, the disk is disconnected from the virtualization server.
      
      

      Note
      To perform actions on a disk in Disk Management, you must right-click the small pane on the left, where the disk name, disk type, disk size, and disk state are listed.

2. Connect the physical hard disk to the SCSI controller of the Imported Virtual Machine virtual machine, as follows:
   

   Note
   Connecting a disk to the SCSI controller of a virtual machine instead of an IDE controller enables you to perform this action without having to first shut down the virtual machine. For more information, see Connect a Virtual Hard Disk to a Virtual Machine Without Shutting It Down, in this guide.

   1. On the virtualization server, open Hyper-V Manager. Click Start, point to Administrative Tools, and then click Hyper-V Manager.
      
   2. In Hyper-V Manager, under Virtual Machines, right-click Imported Virtual Machine, and then click Settings. The Settings for Imported Virtual Machine dialog box appears.
      
   3. In the left navigation pane, click SCSI Controller.
      
   4. In SCSI Controller, click Hard Drive, and then click Add. A hard drive is added to the SCSI controller and is automatically selected in the left navigation pane.
      
   5. In the Hard Drive properties, click Physical hard disk, and then select the physical disk that you took offline.
      
   6. To connect the physical hard disk to the virtual machine, click OK. The physical hard disk is now available on the virtual machine, and can be accessed to read and write information.
      
3. To disconnect the physical hard disk from the virtual machine:
   

   Warning
   To avoid losing data, before you disconnect a physical hard disk from a virtual machine, stop all applications on the virtual machine that read or write data to the physical hard disk.

   1. In Hyper-V Manager, under Virtual Machines, right-click Imported Virtual Machine, and then click Settings. The Settings for Imported Virtual Machine dialog box appears.
      
   2. In the left navigation pane, under SCSI Controller, click the physical hard disk that you want to detach from the virtual machine.
      
   3. In the Hard Drive properties, click Remove.
      
   4. To detach the physical hard disk from the virtual machine, click OK.

Apps to make managing Hyper-v Core easier

vtCommander  - A GUI program that allows you to manage your guest machines from the console of your core server

Office 365 Conversion - Autodiscover still points to old exchange server

Recently ran into a problem where a client had been migrated from an in house exchange server to Office 365 email.

After the migration the outlook clients kept switching back to the in house exchange server even though there was an external DNS autodiscover record and an internal cname autodiscover pointing to the external dns record.

We fix this by removing the following two attributes from the users AD account.  homeMDB and homeMTA


After removing the account we were able to run repair in outlook and it reconnect to the correct server.

SBS Migration help

SBSMigration.com

BPOS PowerShell Commands

Grant full access, send as, and send of behalf of  permission to account.

Add-MSOnlineMailPermission -GrantFullAccess True -GrantSendAs True -GrantSendOnBehalfOf True -Identity User1@domain.com -TrustedUser User2@domain.com

 Grants User2@domain.com access to User1@domain.com account.

Office 365 PowerShell commands

As I come across useful Powershell commands to manage Office365 I'll add them here.

To manage Office 365 through PowerShell you first need to install an update to PowerShell that can be found HERE

List of  commands


1.    Authenticate with Office 365

 Connect-MsolService


2.   Get list of user accounts

Get-MSOLUser

3.   Change password to never expire.

Set-MsolUser -UserPrincipalName     -PasswordNeverExpires $true


-----------------------------------------

Connect Windows PowerShell to the Service

Applies to: Office 365 for professionals and small businesses, Office 365 for enterprises, Live@edu

Topic Last Modified: 2011-12-19

After you have installed and configured Windows PowerShell and Windows Remote Management (WinRM) on your computer, you have to connect the Windows PowerShell on your local computer to the cloud-based service to perform tasks in your cloud-based organization.

When you open Windows PowerShell on your computer, you're in the Windows PowerShell session of your local computer. A session is an instance of Windows PowerShell that contains all the commands that are available to you.

The Windows PowerShell session of your local computer, called the client-side session, only has the basic Windows PowerShell commands available to it. By connecting to the cloud-based service, you connect to the Microsoft datacenter's server environment, called the server-side session, which contains the commands used in the cloud-based service.

Before you begin

Before you connect, make sure you have the correct version of Windows PowerShell and WinRM installed and configured on your computer. For more information, see Install and Configure Windows PowerShell.

Verify the account you will use to connect is authorized to connect using Windows PowerShell. For more information, see Control Users' Access to Windows Remote Management.

Connect Windows PowerShell on your local computer to the cloud-based service

1. Click Start > All Programs > Accessories > Windows PowerShell > Windows PowerShell.
2. Run the following command:
   
   
   

   $LiveCred = Get-Credential
   

3. In the Windows PowerShell Credential Request window that opens, type the credentials of an account in your cloud-based organization. When you are finished, click OK.
4. Run the following command:
   
   
   

   $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $LiveCred -Authentication Basic -AllowRedirection
   

   Note   The AllowRedirection parameter enables cloud-based organizations in datacenters all over the world to connect Windows PowerShell to the cloud-based service by using the same URL.
5. Run the following command:
   
   
   

   Import-PSSession $Session
   

   A progress indicator appears that shows the importing of commands used in the cloud-based service into the client-side session of your local computer. When this process is complete, you can run these commands.

Disconnect Windows PowerShell from the cloud-based service

When you're finished using the server-side session, always disconnect Windows PowerShell by running the following command:

Remove-PSSession 

For example, to disconnect from the server-side session that is defined by the $Session variable, run the following command:

Remove-PSSession $Session

Important   If you close the Windows PowerShell window without disconnecting from the server-side session, your connection will remain open for 15 minutes. Your account can only have three connections to the server-side session at one time.

----------------------------------------------------------------

Give an Administrator the Ability to Open and View the Contents of a User's Mailbox

Applies to: Office 365 for professionals and small businesses, Office 365 for enterprises, Live@edu

Topic Last Modified: 2011-03-08

Your organization may require that Exchange Online administrators be able to open another user's mailbox and view the contents, including reading e-mail messages.

By default, Exchange Online administrators or members of the Organization Management administrator role group can access a user's Options page in the Exchange Control Panel, but they can’t open the user’s mailbox and view the contents. You have to explicitly assign an administrator the permissions necessary to open another user's mailbox.

Assign permissions to one Exchange Online administrator

Run the following command:

Add-MailboxPermission  -User admin -AccessRights FullAccess -InheritanceType All

Note   You can also allow an ordinary user, such as an administrative assistant or human resources specialist, to open another user's mailbox by specifying that person in the User parameter.

Assign permissions to the Organization Management role group

Run the following command:

Add-MailboxPermission  -User "Organization Management" -AccessRights FullAccess -InheritanceType All

Give full access to all user mailboxes in your organization

To give the Exchange Online administrator access to all user mailboxes in your organization, run the following command:

Get-Mailbox -ResultSize unlimited -Filter {(RecipientTypeDetails -eq 'UserMailbox') -and (Alias -ne 'Admin')} | Add-MailboxPermission -User admin -AccessRights fullaccess -InheritanceType all

To give members of the Organization Management role group access to all user mailboxes, set the User parameter to “Organization Management” in the previous command.

Open another user's mailbox

Here's how you open another user's mailbox after you've been assigned permissions: Open Another Mailbox.

Export / Merge recovered mailbox from RSG to a new account

Exchange 2007 Recovery Storage Group

Export / Merge recovered mailbox from RSG to a new account


Restore-Mailbox –RSGMailbox “Test User 1” -RSGDatabase “servername\RSG name\database name” –Identity “Test User 2” –TargetFolder “Test User 1 Recovered data”

Run Commands

A bunch of useful run commands.  Here is the link to the site I found this on.

To Access…	Run Command
Accessibility Controls	access.cpl
Accessibility Wizard	accwiz
Add Hardware Wizard	hdwwiz.cpl
Add/Remove Programs	appwiz.cpl
Administrative Tools	control admintools
Adobe Acrobat (if installed)	acrobat
Adobe Designer (if installed)	formdesigner
Adobe Distiller (if installed)	acrodist
Adobe ImageReady (if installed)	imageready
Adobe Photoshop (if installed)	photoshop
Automatic Updates	wuaucpl.cpl
Bluetooth Transfer Wizard	fsquirt
Calculator	calc
Certificate Manager	certmgr.msc
Character Map	charmap
Check Disk Utility	chkdsk
Clipboard Viewer	clipbrd
Command Prompt	cmd
Component Services	dcomcnfg
Computer Management	compmgmt.msc
Control Panel	control
Date and Time Properties	timedate.cpl
DDE Shares	ddeshare
Device Manager	devmgmt.msc
Direct X Control Panel (if installed)*	directx.cpl
Direct X Troubleshooter	dxdiag
Disk Cleanup Utility	cleanmgr
Disk Defragment	dfrg.msc
Disk Management	diskmgmt.msc
Disk Partition Manager	diskpart
Display Properties	control desktop
Display Properties	desk.cpl
Display Properties (w/Appearance Tab Preselected)	control color
Dr. Watson System Troubleshooting Utility	drwtsn32
Driver Verifier Utility	verifier
Event Viewer	eventvwr.msc
Files and Settings Transfer Tool	migwiz
File Signature Verification Tool	sigverif
Findfast	findfast.cpl
Firefox (if installed)	firefox
Folders Properties	folders
Fonts	control fonts
Fonts Folder	fonts
Free Cell Card Game	freecell
Game Controllers	joy.cpl
Group Policy Editor (XP Prof)	gpedit.msc
Hearts Card Game	mshearts
Help and Support	helpctr
HyperTerminal	hypertrm
Iexpress Wizard	iexpress
Indexing Service	ciadv.msc
Internet Connection Wizard	icwconn1
Internet Explorer	iexplore
Internet Properties	inetcpl.cpl
Internet Setup Wizard	inetwiz
IP Configuration (Display Connection Configuration)	ipconfig /all
IP Configuration (Display DNS Cache Contents)	ipconfig /displaydns
IP Configuration (Delete DNS Cache Contents)	ipconfig /flushdns
IP Configuration (Release All Connections)	ipconfig /release
IP Configuration (Renew All Connections)	ipconfig /renew
IP Configuration (Refreshes DHCP & Re-Registers DNS)	ipconfig /registerdns
IP Configuration (Display DHCP Class ID)	ipconfig /showclassid
IP Configuration (Modifies DHCP Class ID)	ipconfig /setclassid
Java Control Panel (if installed)	jpicpl32.cpl
Java Control Panel (if installed)	javaws
Keyboard Properties	control keyboard
Local Security Settings	secpol.msc
Local Users and Groups	lusrmgr.msc
Logs You Out Of Windows	logoff
Malicious Software Removal Tool	mrt
Microsoft Access (if installed)	msaccess
Microsoft Chat	winchat
Microsoft Excel (if installed)	excel
Microsoft Frontpage (if installed)	frontpg
Microsoft Movie Maker	moviemk
Microsoft Paint	mspaint
Microsoft Powerpoint (if installed)	powerpnt
Microsoft Word (if installed)	winword
Microsoft Syncronization Tool	mobsync
Minesweeper Game	winmine
Mouse Properties	control mouse
Mouse Properties	main.cpl
Nero (if installed)	nero
Netmeeting	conf
Network Connections	control netconnections
Network Connections	ncpa.cpl
Network Setup Wizard	netsetup.cpl
Notepad	notepad
Nview Desktop Manager (if installed)	nvtuicpl.cpl
Object Packager	packager
ODBC Data Source Administrator	odbccp32.cpl
On Screen Keyboard	osk
Opens AC3 Filter (if installed)	ac3filter.cpl
Outlook Express	msimn
Paint	pbrush
Password Properties	password.cpl
Performance Monitor	perfmon.msc
Performance Monitor	perfmon
Phone and Modem Options	telephon.cpl
Phone Dialer	dialer
Pinball Game	pinball
Power Configuration	powercfg.cpl
Printers and Faxes	control printers
Printers Folder	printers
Private Character Editor	eudcedit
Quicktime (If Installed)	QuickTime.cpl
Quicktime Player (if installed)	quicktimeplayer
Real Player (if installed)	realplay
Regional Settings	intl.cpl
Registry Editor	regedit
Registry Editor	regedit32
Remote Access Phonebook	rasphone
Remote Desktop	mstsc
Removable Storage	ntmsmgr.msc
Removable Storage Operator Requests	ntmsoprq.msc
Resultant Set of Policy (XP Prof)	rsop.msc
Scanners and Cameras	sticpl.cpl
Scheduled Tasks	control schedtasks
Security Center	wscui.cpl
Services	services.msc
Shared Folders	fsmgmt.msc
Shuts Down Windows	shutdown
Sounds and Audio	mmsys.cpl
Spider Solitare Card Game	spider
SQL Client Configuration	cliconfg
System Configuration Editor	sysedit
System Configuration Utility	msconfig
System File Checker Utility (Scan Immediately)	sfc /scannow
System File Checker Utility (Scan Once At The Next Boot)	sfc /scanonce
System File Checker Utility (Scan On Every Boot)	sfc /scanboot
System File Checker Utility (Return Scan Setting To Default)	sfc /revert
System File Checker Utility (Purge File Cache)	sfc /purgecache
System File Checker Utility (Sets Cache Size to size x)	sfc /cachesize=x
System Information	msinfo32
System Properties	sysdm.cpl
Task Manager	taskmgr
TCP Tester	tcptest
Telnet Client	telnet
Tweak UI (if installed)	tweakui
User Account Management	nusrmgr.cpl
Utility Manager	utilman
Windows Address Book	wab
Windows Address Book Import Utility	wabmig
Windows Backup Utility (if installed)	ntbackup
Windows Explorer	explorer
Windows Firewall	firewall.cpl
Windows Magnifier	magnify
Windows Management Infrastructure	wmimgmt.msc
Windows Media Player	wmplayer
Windows Messenger	msmsgs
Windows Picture Import Wizard (need camera connected)	wiaacmgr
Windows System Security Tool	syskey
Windows Update Launches	wupdmgr
Windows Version (to show which version of windows)	winver
Windows XP Tour Wizard	tourstart
Wordpad	write

How to Remove / Stop Folder Redirection in Windows Server

I found this link to be very useful in removing folder redirection.

How to stop Folder Redirection in Windows Server 2003 and in Windows 2000 Server

View products that this article applies to.

System TipThis article applies to a different version of Windows than the one you are using. Content in this article may not be relevant to you. Visit the Windows 7 Solution Center

On This Page

• INTRODUCTION
• MORE INFORMATION
  • Technical support for Windows x64 editions

Expand all | Collapse all

INTRODUCTION

This article describes how to stop Folder Redirection in Microsoft Windows Serve...

This article describes how to stop Folder Redirection in Microsoft Windows Server 2003 and in Microsoft Windows 2000 Server.

Back to the top

MORE INFORMATION

After you have successfully deployed a Folder Redirection Group Policy object (G...

After you have successfully deployed a Folder Redirection Group Policy object (GPO) in your site, you may want to stop Folder Redirection for one or more users. However, before you try to stop Folder Redirection, you must first enable the Redirect the folder back to the local userprofile location when policy is removed Group Policy setting.

Important After you modify a GPO and enable the Redirect the folder back to the local userprofile location when policy is removed Group Policy setting, all users who you want to stop Folder Redirection must log off and then log on again. This is to make sure that the updated GPO settings are applied before you stop Folder Redirection.

To stop Folder Redirection, follow these steps:

1. Enable the Redirect the folder back to the local userprofile location when policy is removed Group Policy setting. To do this, follow these steps:
   1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
   2. In the Active Directory Users and Computers console tree, locate the site, domain, or organizational unit that contains the users who you want to apply the updated GPO to.
   3. Right-click the object, such as the organizational unit, and then click Properties.
   4. Click the Group Policy tab.
   5. Click the GPO that contains your Folder Redirection policy setting in the Group Policy Object Links list, and then click Edit.
   6. In the Group Policy console tree, expand User Configuration, expand Windows Settings, and then expand Folder Redirection.
   7. Right-click Application Data, and then click Properties.
   8. Click the Settings tab.
   9. In the Policy Removal box, click to select the Redirect the folder back to the local userprofile location when policy is removed policy setting, and then click OK.
   10. Repeat steps g through i for the Desktop, My Documents, and Start Menu objects.
   11. Close the Group Policy dialog box, and then close the Properties dialog box for the object that you selected in step c.
   Important All users who are affected by your GPO modification must log off and back on to any computers where they have logged on before the changes are applied. You must apply these changes to the user's computer before you go to the next step.
2. When all users have logged off and then logged back on, and the updated GPO for Folder Redirection has been applied, use one of the following methods to stop Folder Redirection:
   • Method 1: Remove the user from the organizational unit where the folder redirection GPO is applied to a different organizational unit that does not redirect folders. To do this, follow these steps:
     Important Move the user accounts, do not delete the GPO.
     1. In the console tree of Active Directory Users and Computers, right-click DomainName, and then click Find.
     2. Click Users, Contacts, and Groups in the Find box.
     3. Type the name of the user account, and then click Find Now.
     4. In the Search results box, right-click the user account, and then click Move.
     5. In the Container to move object to box, locate a security group that does not have Folder Redirection policy enabled, and then click OK.
   • Method 2: Modify the security properties of the GPO to deny the user or group Read permissions and Apply Group Policy permissions to that GPO. This enables other GPO's to be applied to the user, while making sure that the folder redirection policy setting is not applied. To do this, follow these steps:
     1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
     2. In the Active Directory Users and Computers console tree, right-click the organizational unit object or domain object that has the Group Policy Object whose security properties that you want to change, and then click Properties.
     3. In the Properties dialog box for the object, click the Group Policy tab, select the GPO that you want to change from the list, and then click Properties.
     4. In the GPO Properties dialog box, click the Security tab, and then change the permissions so that only the required users have the Read and Apply Group Policy permissions. For users where the GPO does not apply, make sure that you click to select the Deny check box for the Read and Apply Group Policy permissions. Click OK two times.
        
        Note Make sure that Administrators have Read and Write permissions for the GPO.
   After you use one of these methods, Folder Redirection will be stopped the next time that the user processes this GPO. By default, the object is cached on the user's computer and will not be updated unless another change is detected. To force an update, you must follow these additional steps:
   1. Create or modify a GPO that applies to the computers on which users who are affected by folder redirection policies log on.
   2. Edit the GPO.
   3. Under Computer Configuration, expand Administrative Templates.
   4. Under Administrative Templates, expand System.
   5. Under System, select Group Policy.
   6. Double-click the Folder Redirection policy processing setting
   7. Select the Enabled option, and then click to select the second check box. (Process even if the Group Policy objects have not changed.)
   8. Exit the Group Policy Object Editor. Make sure that this new GPO applies to computer accounts for which users are using folder redirection.
   After you apply this policy change, the computers can detect the updated folder redirection policy and will honor the changes that have been made to stop using folder redirection.
   
   Note After a Folder Redirection GPO is applied to a user profile, those Group Policy settings are retained locally on the user's computer. Group Policy settings are changed only when a new or modified GPO is applied to the user or computer.
   
   For additional information about Folder Redirection, click the following article numbers to view the articles in the Microsoft Knowledge Base:
   232692 (http://support.microsoft.com/kb/232692/ ) Folder Redirection feature in Windows

Back to the top

Technical support for Windows x64 editions

Your hardware manufacturer provides technical support and assistance for Microsoft Windows x64 editions. Your hardware manufacturer provides support because a Windows x64 edition was included with your hardware. Your hardware manufacturer might have customized the Windows x64 edition installation with unique components. Unique components might include specific device drivers or might include optional settings to maximize the performance of the hardware. Microsoft will provide reasonable-effort assistance if you need technical help with your Windows x64 edition. However, you might have to contact your manufacturer directly. Your manufacturer is best qualified to support the software that your manufacturer installed on the hardware.

For product information about Microsoft Windows XP Professional x64 Edition, visit the following Microsoft Web site:

http://www.microsoft.com/windowsxp/64bit/default.mspx (http://www.microsoft.com/windowsxp/64bit/default.mspx)

For product information about Microsoft Windows Server 2003 x64 editions, visit the following Microsoft Web site:

http://www.microsoft.com/windowsserver2003/64bit/x64/editions.mspx (http://www.microsoft.com/windowsserver2003/64bit/x64/editions.mspx)  

http://support.microsoft.com/kb/888203