Modify BCD to disable Win8 AutoRepair via a SCCM Application?

We've recently found that the Windows 8 automatic repair feature kills our systems that are encrypted via 3rd party tools. So we need to ensure that this is disabled on all systems.
We could use a login script to run "bcdedit/set{current}
recoveryenabledNo"
however I'd prefer to do this via a SCCM Application if possible. As this would ensure it is set & give an easy visual check for staff via the Detection Rules & having it show as an 'installed application'.
Has anyone done this before & had any luck? I am thinking it should be possible via a custom script in the detection rules, but I've never done anything like that before.
Or am I just over complicating things & there is a much better way to handle this?
Cheers!

First, you wouldn't be able to run this as a login script unless your users have local admin permissions -- if they do, you can commence beating your head against the wall because you've got bigger issues anyway :-)
Next, why not just a [classic] package for this? Applications are primarily meant for, as their name implies, applications and not scripts. There's no reason you can't specifically use an application and there are some advantages to doing so, but figuring
out the detection can sometimes be more painful than its worth. Glad you got this figured out though.
Jason | http://blog.configmgrftw.com

Similar Messages

What is the Command to disable Printer Sharing via the Terminal?

What is the Command to disable Printer Sharing via the Terminal?

cupsctl is the command.
man cupsctl(8)
Hope that helps.

How to disable password complexity via command

hello
i have spent hours searching to find a command or script (powershell, cmd, VB, registry...) to disable group policy password complexity. few solutions has been delivered on the net but none of them works.
i wonder how what a pity if we can't do such simple thing in Microsoft windows
i really need that because i have created a script which contains many lines which automates windows customization which i always need in my classrooms for testing & teaching purposes
thanks in advanced

The answer is in your question: group policy password complexity. http://technet.microsoft.com/en-us/library/cc875814.aspx#ECAA
On a non-domain joined pc, this is governed by local policy.
Note that if your domain is on functional level 2008 or up, you can use fine grained password policies to have a different password policy on the systems your are deploying. http://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx
There
is no (supported) way to change the password policy applied to a computer. That is intended in the design because password complexity is one of the keys to protect against bruteforce attacks.
Why wouldn't your script be able to handle password complexity rules? I would recommend tackling this in
your script, not in password policy.
MCP/MCSA/MCTS/MCITP
hi SenneVL
i don't understand your sentence: "Why wouldn't your script be able to handle
password complexity rules? I would recommend tackling this in your script, not in password policy."
i exactly need a way to disable password complexity via an script. what script can do that
? as far as i searched, no script

Starting and stopping applications via a Java-application on Windows/Unix

Hello,
I want to start java and other applications via a java application.
This java application should start several different applications on windows and
on unix systems and take care of their current state (e.g. running/not running).
For all applications to be started there are .sh-scripts for unix and .bat-scripts
for windows. In the scripts there could be a java call, e.g. "java someApplication",
or some executables could be called. These scripts set the applications' environment etc.
and start the application finally.
My java application calls these scripts via the ProcessBuilder API, which is working fine.
But there is the following problem: on windows, when executing a script that starts
some other application, the ProcessBuilder gives me process-handle to the started
process. If calling destroy() on this handle, only the cmd.exe gets killed which
started the application. The application itself is running on. This is undesired behaviour
since I want to be able to control the started applications, at least start and stop it which
is impossible that way.
On unix, it is working when using
"exec java someApplication"
instead of just
"java someApplication"
in the .sh-scripts. The exec command substitutes the shell process with the underlying
process started in the script, so everything is working as expected on unix.
But how could I get this working on windows systems? Is there any equivalent to the exec
command on unix? Any suggestions appreciated.
If something's unclear in my description, please let me know.

Yes - after looking at this option - I think that's the direction I am going to go. It probably makes sense to give my JMS topics and my BPEL server their own OC4J instances anyway - for a number of reasons.
Lon

HOW to Disable a button in ALV on application bar

Hi,
 I have a button in ALV program and i want to disable that button which is on application bar is there any way plz tel me
Regards,
Saleha

hi ,
Copy the STANDARD status of the function group SALV into the application program
i.e in ur prg....
see below ex....
data:
t_spfli like standard table of spfli.
DATA:
w_program LIKE sy-repid.
SELECT *
INTO CORRESPONDING FIELDS OF TABLE t_spfli
FROM spfli.
MOVE sy-repid TO w_program.
CALL FUNCTION 'REUSE_ALV_LIST_DISPLAY'
EXPORTING
 i_callback_program = w_program
 i_callback_pf_status_set = 'STATUS'
 i_structure_name = 'SPFLI'
TABLES
 t_outtab = t_spfli
EXCEPTIONS
 program_error = 1
 OTHERS = 2
IF sy-subrc <> 0.
MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
 WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
*& Form status
 text
 -->P_T_EXTAB text
FORM status USING p_t_extab TYPE slis_t_extab.
SET PF-STATUS 'DEMO' EXCLUDING '&ODN'.
ENDFORM. "status

regards ,
Naresh.

Disabling WINDOWS CTRL+C in Java Application

Hello Friends,
I want to use CNTRL+C in my SWING Application. But in Windows CTRL+C is used for COPY. I want to use CTRL+C for different purpose. So I want to disable WINDOWS CNTRL+C in my application.
Is there any way to achieve this?
Thanks in Advance
Abhijai

Just one suggestion:
import java.awt.*;
import java.awt.event.*;
import javax.swing.*;
import javax.swing.table.*;
public class DisablingControlC {
Object[][] data = {{"aaa","bbb"},{"ccc","ddd"}};
String[] columnNames = {"000","111"};
JTable table = new JTable(new DefaultTableModel(data,columnNames));
JButton button = new JButton();
private JPanel makeUI() {
    KeyStroke ks = KeyStroke.getKeyStroke(KeyEvent.VK_C, Event.CTRL_MASK);
    InputMap im = table.getInputMap(
        JComponent.WHEN_ANCESTOR_OF_FOCUSED_COMPONENT);
    im.put(ks, "different_purpose");
    table.getActionMap().put("different_purpose", new AbstractAction() {
      public void actionPerformed(ActionEvent e) {
        if(table.getSelectedRowCount()>0) {
          System.out.println("copy");
          table.getTransferHandler().getCopyAction().actionPerformed(e);
        }else{
          System.out.println("different purpose");
    button.setAction(new AbstractAction("clear selection") {
      public void actionPerformed(ActionEvent e) {
        table.changeSelection(0, columnNames.length, false, false);
        table.clearSelection();
    button.setFocusable(false);
    JPanel p = new JPanel(new BorderLayout());
    p.add(new JScrollPane(table));
    p.add(button, BorderLayout.SOUTH);
    return p;
public static void main(String[] args) {
    EventQueue.invokeLater(new Runnable() {
      public void run() {
        JFrame frame = new JFrame();
        frame.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE);
        frame.getContentPane().add(new DisablingControlC().makeUI());
        frame.setSize(new Dimension(320,240));
        frame.setVisible(true);
}Edited by: aterai on 2009/01/23 16:08

Is there any way to open an VB6 execulatble application via a Sharepoint application page?

Is there any way to open an VB6 execulatble application via a Sharepoint application page?

No, only thing you can do is add a link to a sharepoint application page that points to a vb6 executable, once the end user clicks that one, the client OS and end user decide what happens next.
Kind regards,
Margriet Bruggeman
Lois & Clark IT Services
web site: http://www.loisandclark.eu
blog: http://www.sharepointdragons.com
can you give me a reference on how to achieve this, please.

Run a .sh file via a web application

Hi,
How can I run a .sh file via a web application? I want to start and stop a service in linux via a web app.

a service in linux In Unix (including Linux) they are called rather daemons.
Anyway, usually appropriate (root) privileges are needed to start/stop a dameon and a web application should not run as root.
So be prepared that ome "sudo" magic might be needed.

Disable animation of popup on entire application?

Hi all.
I am using JDeveloper 11.1.2.1 and ADF.
Is there a way to disable popup animation on entire adf application without disabling it on every popup that I use?
Thanks in advance.

Thanks a lot John.
I did two things:
1. trinidad-config.xml looks like this
<?xml version="1.0" encoding="UTF-8"?>
<trinidad-config xmlns="http://myfaces.apache.org/trinidad/config">
<skin-family>mySkin</skin-family>
<animation-enabled>false</animation-enabled>
</trinidad-config>2. In adf-config.xml added this part
<adf-faces-config xmlns="http://xmlns.oracle.com/adf/faces/config">
<flash-player-usage>disabled</flash-player-usage>
</adf-faces-config>Regards.

Lenovo Yoga 2 Pro Installing Windows OS via PXE SCCM

Hello everyone,
I have 2 Lenovo Yoga 2 Pro here in our company environment, because our CEO really like using touchpads with pens =).
Since the Yoga 2 does not have a LAN connector i have been unable to install windows via our SCCM Server.
I contacted telephone support and basically got told, this is a consumer device and pxe is not prossible. Which seems weird since there are pxe drivers and a management driver pack for the yoga 2 available.
What I tried this far.
Use the One Dock -> Doesnt recognize lancard
Use USB Networdcard Startech USB21000S2 (7500 chipset) -> Not recognised by BIOS
Use pptical boot media -> boots to pxe environment but cant connect to the server and aborts
SCCM 2012 SP1 CU4
OS to install: Windows 7 Ent
All standard and pxe drivers are incorporated into the install image.
Does anybody know, if or how it is possible to get this Notebook integrated in my SCCM environment?
Thanks in advance

Hi Jerry133, welcome to the forums,
the following thread may be of interest to you; it would appear the USB ethernet dongle for the ThinkPad X1 Carbon works with the Yoga 2 Pro for PXE boot.
http://forums.lenovo.com/t5/Idea-Windows-based-Tablets-and/Yoga-2-Pro-PXE-boot/m-p/1516628#M20051
The part number for the dongle is 4X90E51405 and should be the first article on the following page;
http://lenovoquickpick.com/deu/accessorycategory/33/networking-i-o
More Info on the dongle can be found here;
http://support.lenovo.com/en_US/detail.page?DocID=PD029741
Andy ______________________________________
Please remember to come back and mark the post that you feel solved your question as the solution, it earns the member + points
Did you find a post helpfull? You can thank the member by clicking on the star to the left awarding them Kudos Please add your type, model number and OS to your signature, it helps to help you. Forum Search Option T430 2347-G7U W8 x64, Yoga 10 HD+, Tablet 1838-2BG, T61p 6460-67G W7 x64, T43p 2668-G2G XP, T23 2647-9LG XP, plus a few more. FYI Unsolicited Personal Messages will be ignored.
Deutsche Community Comunidad en Español English Community Русскоязычное Сообщество
PepperonI blog

How do I disable this - "Firefox.app" is an application downloaded from the Internet. Are you sure you want to open it?

how do I disable this - “Firefox.app” is an application downloaded from the Internet. Are you sure you want to open it?

If you want to open it confirm that you do. You will not be asked that question again after the first time you open it
Unless you are keeping Firefox in the .dmg it was downloaded in. That is to say, if you obtained Firefox in a .dmg, and you have kept the .dmg mounted, and are launching Firefox from the mounted .dmg, then you will ALWAYS get that warning. You should copy Firefox from the mounted .dmg to your Applications Folder (or anywhere you prefer), and then eject the mounted .dmg. Unless you need to install Firefox on another system, you can then delete the .dmg.

Disable Printer Sharing via .plist?

Hi All,
I am trying to find the .plist file that holds the boolean value for turning printer sharing on and off.
Via the GUI this option is located at:
Preferences > Sharing > "Printer Sharing"
I can see what appears to be the option located in this plist:
~/library/preferences/com.apple.alf.plist
and PlistEdit Pro tells me it us under:
firewall > printer sharing > state - with a value of 1 or 0.
Changing the option in that plist does not change the setting in Prefernces (and vice versa).
Reason: I have 600+ Macs on our network, and users have started enabling the check box thus sharing their printers via Bonjour to every other user - I'm sure you can imagine how confusing this looks when you attempt to add a new printer, and the problems when User A adds printers shared by User B and suddenly cannot print when User B takes their macbook away.
I would like to push out a profile to disable printer sharing. I can already disable access to the Sharing preference pane via profile to stop more users turning the option on - but it does not revert the change made by other users.
Cheers
/Glaic

I am not aware of a plist but you could try modifying the cupsd.conf file (located in /etc/cups) and then pushing that to the +600 Mac's.
Within the cupsd.conf file there is the entry "DefaultShared" which the man page shows as;
"Specifies whether local printers are shared by default. The default is "Yes".
I just tried modifying the file now using the cups admin page (localhost:631/admin). You will see the setting "Share printers connected to this system". Disable the setting and save the changes. Then when you open the cupsd.conf in TextEdit you will see that browsing is disabled and shared printers, even if share enabled in Printers & Scanners, will not be visible on the local network.

Disabling Resource Governor via trace flag 8040 is failing

Hi,
I am attempting to disable resource governor completely via trace flag 8040 (specified at startup in windows server) for SQL Server 2012 is faling. DBCC TraceStatus (8040) does show status as "1" and Global as "1" which means it
took the flag, but apparently I'm still able to "enable" resoure governor - which should have failed (at least according to Microsoft SQL Server 2012 Internals book by Kim Delaney).
I was wondering if anyone else has faced the similar issue, and knows the workaround then please share it on this forum.
Thanks,
Vijay

I am experiencing this issue.
You cannot disable the resource governor, this is a serious terminological fail from the developers. It is always enabled, and the default values which it uses are challenged. In my case they effectively limit the number of concurrent jobs to 4.
My counter intuitive partial solution is this.
Enable the resource governor
Modify the default resource pool to "High Importance" and with "memory grant" = 100 (this is in the SSMS interface). Leave the other exposed values at zero (unlimited)
Increase the maximum queued IO per volume to the maximum value of 100 (pretty low value, but there you have it). http://msdn.microsoft.com/en-us/library/bb934013%28v=sql.120%29.aspx
Doing this enabled me to have up to 12 serious threads of execution concurrently in operation, before jobs stall with memory allocation grant wait. So far so good, but ...
The target and actual CPU usage shown in perfmon SQLServerResourceStats is still pegged around 75%. CPU monitor shows 85% for SQLServer though (go figure). In my real live case, the processes are CPU bound, so I expect to get all the CPU available.
However, the next attempt to do anything at all on the instance will wait for some indeterminate amount of time before the grant memory allocation occurs. There is no LOCK shown in the LOCK statistics that I have found and sp_who2 simply reports the active
verb (INSERT etc) with no indication that the SPID is doing nothing.
This will let you know that the governor is stalling requests. You have to figure out which ones and when.
select pool_id, name, active_memgrant_count,memgrant_waiter_count,* from sys.dm_resource_governor_resource_pool
All in all a sub-optimal solution. It is better than the default, which is fatally crippled, but still a completely inappropriate result

Server2003, enable / disable user login via powershell

Hi all,
Newbie, in Africa for short time only and probably haven't done all the homework I should have.
Unix and OO background but just learning powershell.
I need to be able to enable / disable local user accounts on a local server in a school; no clusters, pretty much stand-alone. I presume if I can get the user object it has a member / method for enabling / disabling, but I don't understand how to get
the user object. In particular, I don't understand the two-character abbreviations used in front of params to queries.
If I bring up active directory users and computers, what I see is:
techna-school
Tech/na school
      Students
The users I want to enable/disable are members of the "Students" group above, and for RDP / security purposes are members of the "Learners" group. The server is not in any "official" (i.e. DNS recognized) domain, just gets
net access as a normal user via dialup and DHCP.
I'm guessing I need something kinda like the following to get at the user objects, but I haven't a clue what the "ou", "dc", or anything else needed are supposed to be as I don't have an MS server background.
$learners = [ADSI] "LDAP://ou=Learners,dc=techna-school"
Any help would be much appreciated.
Thanks,
Gary

From the sounds of it, you have domain accounts not local accounts. The difference is domain accounts can log onto any machine within your domain, whereas local accounts can only log onto the local machine they where created on. Since your users are using
thin clients, it is most liekly a domain account they are using.
For using AD cmdlets on Server 2003, you need some things in place, this article might help you
Thanks for the info and pointer.
I'm a little leery of going through that process as I don't have a test system to work on, but I appreciate the pointer; may delve into that later.
In the meantime, I've managed to get the user objects using Get-WmiObject, but an attempt to modify them via Set-WmiInstance fails:
    $learners = Get-WmiObject -query "Select Name,Disabled From Win32_UserAccount"
    foreach ($learner in $learners) {
    Set-WmiInstance -InputObject $learner -Argument @{Disabled=$True} -PutType UpdateOnly
Set-WmiInstance : Invalid Object
Seems pretty straight-forward so I suspect it is a simple error but I'm not seeing it.

Disabling Check box via SPEL

I have a requirement where in a Message Check Box needs to be disabled. When navigated to this page the checkbox is already set.
a. Can this be achived via Personalization?
b. I have set the item's Required property to SPEL with the following value ${oa.AppraisalVO.disableCheckBox} but it errors?
Please help!
Thanks,
Hari

Set FND: Diagnostics profile to yes to get the complete error stack.
--Shiv

Modify BCD to disable Win8 AutoRepair via a SCCM Application?

Similar Messages

Maybe you are looking for