Monthly Archives: July 2013

Problem with Group Policy Settings not applying or Group Membership not applying properly.

I’ve seen this happen recently at my job and it actually happened to me directly.  Being in Support I have to be apart of many groups.  While I was setting up a new machine I noticed none of the Group Policies were applying and certain drives I normally access were now throwing a ‘Access Denied’ error.  After discussing it with some colleagues we determined I was a member of too many groups.  Increasing the default Token Size to 48000 was recommended.  This is a very simple fix and we decided to apply it to our default machine policy for our Domain.

Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters

Entry: MaxTokenSize
Data type: REG_DWORD
Value: 48000

If you are having symptoms where your group policy is not applying or a group membership isn’t taking effect try this out.

To learn more about this check out this Microsoft Article: http://support.microsoft.com/kb/327825

How to transfer account settings in Microsoft Outlook from one User/PC to another User/PC

So, let’s say you’re in a situation where you don’t have roaming profiles or you just got a new PC and don’t feel like recreating all your Outlook settings.  There is a simple way of doing this.

NOTE:  You can also use these steps to just simply backup your Microsoft Outlook profile and settings.

On the original computer/user profile do the following:

  1. Close Outlook (if open)
  2. Click on Start and then Run and enter ‘Regedit’ and press enter.
  3. Navigate through the registry to:
    ‘HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles’
  4. Click on File
  5. Click on Export
  6. Save the .REG file to a external drive or a network path (whichever you prefer).

On the new computer/user profile do the following:

  1. Open the the location where you saved the .REG file from the other computer
  2. Double click on the .REG file and import the registry settings
  3. Start Outlook to confirm everything is OK.

If you feel like something was not imported incorrectly or there was an issue simply delete the new profile created in the registry or open up ‘Mail’ in the ‘Windows Control Panel’.

Note:  If you have multiple profiles on the original PC they will all transfer.  You can delete the rest individually by going to Mail in the Control Panel.

outlook

Repairing Micrsoft .NET Framework on Windows 7 / Vista

I recently came across a machine where .NET Framework 3.5 wasn’t functioning correctly.  It was needed as a prerequisite and the application was not recognizing it even though it was enabled in the “Turn Windows Features on and off” (Search for this on the Windows Start Menu).

If uninstalling and installing .NET on Vista does not work you can run a command to scan and repair system files.  Since .NET 3.5 is part of Windows 7 you can’t easily uninstall it.  Try this command out and it should help if you actually have corrupt system files.

  1. Open a command prompt (CMD) window and make sure you ‘Run As Administrator’. (Search for CMD in your Windows 7 Start Menu and then right click CMD.EXE and select ‘Run As Administrator’).
  2. Enter the following command and press enter:  sfc /scannow

This can take a while but let it run.  This will scan all protected system files and replace incorrect versions with correct Microsoft versions.  Once it has completed reboot your machine and try again.

sfc

If any errors are reported that SFC was unable to fix, there are steps in this knowledge base article  that explain how to locate and attempt to fix the errors

How to completely / cleanly remove a Printer from Windows 7

Open the ‘Start‘ menu and type ‘CMD‘ in the search bar.  Right click on ‘CMD‘ and select ‘Run as Administrator

When the command prompt opens up type the command ‘printui /s /t2‘.

printui

Select the Printer you would like to Remove and click on ‘Remove..’.  Remember to select ‘Remove driver and driver package’.

If you have difficulty removing the driver and package you can stop and start the ‘Print Spooler’ service.  You can do this by searching for ‘service.msc’ in your Windows 7 start menu (Remember to Run as Administrator).  Find the service named ‘Print Spooler’.  Right click and Stop the service and then Start the service.  After you have done that you can try removing the Driver / Driver Package again.

Error 1324. The folder path ‘My Pictures’ contains an invalid character.

I came across this problem recently at my job.  We recently migrated from Windows Server 2003 to Windows Server 2008 and during this process we were also upgrading our desktops to Windows 7.
error1324

We started seeing this MSI error randomly once we moved a large majority of user ‘home drive’ shares to our new Windows 2008 Server.  From my understanding, MSI files verify free space of the users “Home” directory (My Pictures, My Music, etc).  Since we use folder redirection it looks to the full UNC path which is in the registry under the following path:

Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

If you change all the values pointing from the UNC path to ‘%userprofile%\Path’ the error will go away but this needs to be done each time the user logs on and off.  But, that will only happen if you use folder redirection.

After doing some research and testing I realized that Windows 7 + Windows Server 2008 requires a specific security change to the folder or else this error will constantly occur.  Under Advanceed > Change Permissions for “Authenticated Users” or “Domain Users’ (We used Auth. Users) we needed to add “Read Attributes” and apply it to “This folder only”.
Capture
The error should go away after you make this change.  Making this change WILL NOT allow for anyone to see the given folder.  It is simply an attribute.  We tested and confirmed this in our environment.