Windows 8.1 Device Encryption and MBAM

According to this TechNet article http://technet.microsoft.com/en-us/library/dn306081.aspx Windows 8.1 now has a feature called device encryption that will encrypt the drive
after windows installation. It says in the above TechNet article that "If you have configured this Group
Policy setting with the option Save BitLocker recovery information to Active Directory Domain
Services unchecked, device encryption will be prevented because device encryption requires that the recovery password be backed up to AD DS if the device
is domain-joined." Is there any way to get MDOP 2014 (mainly MBAM 2.5) to put the recovery key on our MBAM server? We are currently using MBAM 1.0 and are planning to upgrade. If this request is possible then it will accelerate our upgrade plans.
Thanks for your help!

Hi,
MBAM stores the recovery key in the MBAM database. You have to configure GPO using the MBAM admx files and install MBAM Client on your target machines.
/Oliver

Similar Messages

Active sync policy - device encryption

Hi
We have a exchange 2007 server with active sync. We have enabled the actrive sync policy device encryption. But when i try to sync with my android HTC desire who dosent have device encryption support it works anyway and i can sync emails etc. Must I
do someting else to enforce that active sync policy? Allow non-provisonable devices is not checkt.

“The iPhone 3GS supports device encryption, and is the first version to do so. Previous iPhone models, including the iPhone 3G, do not
support device encryption. Additionally,
before iPhone OS 3.1, these devices did not communicate their policy status correctly, resulting in the devices being able to connect to Exchange Server, even if your Exchange ActiveSync policy required device encryption and did not allow non-provisionable
devices”
---------Refer to <Exchange
ActiveSync and iPhone OS 3.1>
According to the article above, if the device doesn’t support encryption, it would not apply the policy correctly. Also, the non-allowed
device can’t be prevented from accessing the mailbox
“Device encryption enabled: This setting enables encryption on the device.
Not all devices can enforce encryption. For more information, see the device and mobile operating system documentation”
---------Refer to <Understanding
Exchange ActiveSync Mailbox Policies>
So, you need to contact the manufacturer of the mobiles, and confirm if the device support device encryption
Workaround: Add the allowed device ID to all current phone users so that they can only synchronize the mailbox with specific devices. For all other users who don’t have the device
currently, you can add a fake device ID to prevent the initial synchronization, and add the correct ID when you confirm that the phone supports device encryption (Reference)
Notes: If you have exchange 2010, you can set quarantine for all the devices that
try to synchronize as Rich said. Then, approval message can be sent to you. if you confirm that the device support device encryption, a simple click on approval message will allow the synchronization to proceed again
“Currently, only the storage card can be encrypted on devices running Windows Mobile 6.0. We recommend that you don't
use this setting and use the RequireStorageCardEncryption parameter instead”
---------Refer to <New-ActiveSyncMailboxPolicy>
James Luo
TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx)
If you have any feedback on our support, please contact
[email protected]

Window 8.1 device mdm enrolment issue

Window 8.1 device(Laptop and Tablet) doesn't shows the option of entering enrollment server address while enrolling it through Network->Workplace Settings.
Windows Phone 8.1 doesn't have this issue.

Did you try the Nokia Software Recovery Tool already?

Import Error The document is encrypted and can't be opened.i am able to open the file on my windows computer at work. there is no password needed.

I am unable to open an xls file. I get the message: Import Error The document is encrypted and can’t be opened.
I am able to open the file on my windows computer at work. there is no password needed.

See note 2 in Troubleshooting issues with iTunes for Windows updates for starters...
tt2

Itunes latest version can not find any of devices on windows 8. eg iphone 5 and iphone 4

itunes latest version can not find any of my devices on windows 8. eg iphone 5 and iphone 4 with correct iphone new cable

Hi dunderick,
Thanks for using Apple Support Communities. This article has steps you can take if your devices aren't recognized in iTunes:
iOS: Device not recognized in iTunes for Windows
http://support.apple.com/kb/TS1538
Cheers,
- Ari

SMB 3 Encryption and only x86 32 Windows 8.1U1

Has anyone else used the 32 bit x86 Windows 8.1U1 to map to a Windows 2012 R2 with
Set-SmbServerConfiguration –EncryptData $True and
Set-SmbServerConfiguration –RejectUnencryptedAccess $False ?
I have full success with 64 bit X64 Windows 8.1U1 client. No problems.
As soon as I try NET USE X: \\SERVERNAME.DOMAIN.EXT\SHARENAME the 32 bit client hangs for many minutes before finally mapping the drive. Any attempt to access the share hangs Explorer or the computer for many more minutes. So slow it is almost
impossible to use the machine.
If I set on the server:
Set-SmbServerConfiguration –EncryptData $False
The NET USE works fast and access is fast.
Or, if I turn off SMB2/3 on client, NET USE works fast and access is fast, like this:
sc.exe config lanmanworkstation depend= bowser/mrxsmb10/nsi
sc.exe config mrxsmb20 start= disabled
This is on a freshly installed 8.1U1, no GP, no apps or fully configured with apps and GP. Every 32 bit OS machine, including varied Sony and Dell hardware, VM's on HyperV Server, etc. Behaves the same against several 2012 and 2012 R2 servers,
although they are all similar in setup.
Thanks!

I have the same issue - I already thought, I am the only one, because I did not find any information about this issue until now.
The setup: Domain controller/file server Win 2012 R2, freshly installed Win 8.1 clients 64 bit and 32 bit.
64 bit clients work fine, 32 bit clients show the described issue.
I also created a file share with the data encryption option disabled and this share with clear text data transfer can be accessed fine by 32 bit clients as well. At least as long as no share with enabled data encryption was accessed before - I go into
that further below.
Overall it seems the 32 bit implementation is buggy when it comes to handling encrypted SMB3.
I monitored the communication with Wireshark and witnessed some interesting behavior which might help to understand the problem:
Protocoll negation works fine. SMB 3.02 is agreed on.
Tree Connect Request Tree: \\servername\share-with-enc-on results in sucessful Tree Connect Resonse
Client sends one Encrypted SMB3 package and immediately receives one encrypted SMB3 package from the server as responds.
And this is where it stops. Normally, the client should continue with sending the next Encrypted SMB3 package, but this does not happen.
Once in this state, it is also not possible to access the share without encryption (e.g. \\servername\share-with-enc-off) anymore. So I initially thought, the client is dead. But with some experimentation and looking at the network traffic I found out a
few things:
I you use a different name or the IP to access the server, it works fine. E.g. \\serveralias1\share-with-enc-off. Until you try to access \\serveralias1\share-with-enc-on - then you have the same issue as described above.
Looking at the network traffic, it seems - once the client is stuck - it sends some requests to access \\servername\share-with-enc-off encrypted and in clear text at the same time. At least I think it is, because it is a little random and also encrypted,
but usually with a Tree Connect Request an encrypted request goes out with the same ack number. The server happily answers both.
Before the client goes haywire, it does not send any encrypted requests when accessing \servername\share-with-enc-off
But looking at the network traffic, I also saw, that the stuck communication regarding listing the directory contents of \\servername\share-with-enc-on continued after about 20 minutes and completed successfully. I was then able to see the share content
in Windows Explorer on the 32 bit client. But if you initiate another request (e.g. by going one folder deeper) you are in for another waiting period. I did not test, if 20 minutes are constant or the time differs.
What I also saw in the network traffic, once the communication got unstuck is, that it finished very quickly, exchanging several encrypted packages doing that. So the theory of old hardware just being slow on the encryption/decryption part seems not to
be the cause.
Disabling encryption is acceptable in my environment, so I will do that on the server side in the share options as a workaround. But it would be nice to get a fix for that.
Kind Regards,
Martin
PS: I can provide a Wireshark trace file if required.

Iphone 4s is not recognised by my pc; I get a message to say that the device malfunctioned and not recognised by windows

My iphone 4s is suddenly not recognised by my pc; I get a message to say that the USB device is not recognised, and that the last device malfunctioned and not recognised by windows.

Hey Jacky,
Welcome to Apple Support Communities.
Take a look at the article linked below, it provides information and troubleshooting suggestions that can help you resolve the issue with your iPhone 4s not being recognized by iTunes on your PC.
iPhone, iPad, or iPod not recognized in iTunes for Windows - Apple Support
Cheers,
-Jason

Known Issue: Cannot Deploy to a Windows Mobile Device (Windows 10 Insider Preview SDK and tools, April 2015 release)

To deploy to a Windows 10 Mobile device with this release, your device must be running Windows Mobile OS build 10074 or later. When deploying your Universal Windows app to a device with an earlier build, or a Windows Phone 8.1 device, you will get the following
error:
Error : DEP0001 : Unexpected Error: The Appx package's manifest is invalid. (Exception from HRESULT: 0x80080204)

Use the Windows 10 Mobile emulator or update your device to Windows Mobile OS build 10074 or later.

Lenovo Yoga with Windows 8 Pro, Office 2013 and Visual Studio

For you developer types, I just wanted to post a message and let you know my experience with Lenovo Ideapad Yoga 13 as a development machine. I bought Lenovo Ideapad Yoga 13 from Bestbuy for $999.99. As expected, it came with a crap ton of bloatware installed by Lenovo.
Here is a summary of what I did to it (I take no responsilibity for accuracy of below information. You are on your own if you decide to follow them. I am just putting this down from my memory so that I can look it up in the future if I ever need to do this again).
INITIAL CLEANUP
Installed Lenovo hotfix for partition cleanup/merging: http://support.lenovo.com/en_US/downloads/detail.page?DocID=DS033035
Installed Lenovo Touchpad driver fix.
CAUTION: I take no responsibility for below steps. I am writing them from memory and if you decide to follow them and end up making your machine unusable, you are on your own as Lenovo might not honor your warranty.
BACK UP ENTIRE DISK (requires an empty USB flash drive for booting and another external USB drive for backup)
Copied Drivers from D_Backup folder to the external USB hard drive (plugged into USB 3.0 port).
Installed Paragon Backup & Recovery 2012 Free: http://www.paragon-software.com/home/br-free/
Created Paragon Backup & Recovery boot USB flash drive with default Linux recovery environment option (flash drive plugged into USB 2.0 port).
Shutdown Lenovo Yoga.
Plugged in the Paragon Backup & Recovery boot USB flash drive (USB 2.0 port).
Pressed the one key recovery button (next to power button). Went to BIOS.
In the BIOS, enabled Legacay mode and made Legacy high priority and saved the changes.
The machine booted into Paragon Backup & Recovery mode. From there, made a backup of entire disk to the external USB hard drive.
Shut down the machine, pressed the one key recovery button (next to power button). Went to BIOS. Turned off Legacy mode and switched back to UEFI boot mode and saved the changes and restarted the machine.
Logged into the machine and verified that everything was good and checked the external USB drive to verify that the backup image was present.
MAKE WINDOWS 8 PRO BOOT USB FLASH DRIVE (requires a second empty USB flash drive and a second computer with Windows 7. This USB Flash Drive has to be between 4GB to 32GB as Windows won't format 64GB flash drives to FAT32 mode)
(Note: I installed Windows 8 Pro in UEFI mode. See http://pcsupport.about.com/od/windows-8/a/install-windows-8-usb.htm)
You need a licensed ISO image of Windows 8 Professional Full version (not the upgrade version) from your MSDN or Technet subscription or create an ISO from the Windows 8 Pro full version DVD.
Download Windows 7 USB/DVD Download Tool on the computer with windows 7.
Plug in the second empty USB flash drive (has to be at least 4GB but less than 32GB) into the computer with Windows 7.
Using Windows 7 USB/DVD Download Tool and the ISO file, create the Windows 8 Pro bootable USB Flash drive.
Create a new folder on your computer disk, for example, C:\WIN8USB.
Copy all the files from your USB flash drive to the newly created folder (created in the previous step).
Right click on the USB drive icon in Computer window and select “Format…” from the context menu. Make sure you select “FAT32 (Default)” in “File system” drop down menu. Click “Start” and wait till the drive gets formatted. This step is needed because NTFS is not readable by BIOS in UEFI boot mode. During formatting, MBR is preserved so the thumbdrive is still bootable.
Copy all the files from the folder you created earlier (C:\WIN8USB, for example) to the formatted drive. Your Windows 8 installation USB drive is ready to install in UEFI mode.
WIPE THE DISK PARTITIONS
Shut down the machine, pressed the one key recovery button (next to power button). Went to BIOS, enabled Legacay mode and made Legacy high priority and saved the changes.
Booted into Paragon Backup & Recovery boot USB flash drive again. This time, I deleted all partitions on the primary disk (Disk 0). CAUTION: This WILL wipe your hard disk and will make your machine unusable!!!
Shut down the machine, pressed the one key recovery button (next to power button). Went to BIOS. Turned off Legacy mode and switched back to UEFI boot mode and saved the changes and shut down the machine.
At this point, the disk is wiped clean. All factory installed software and recovery partitions are gone!!!
INSTALL WINDOWS 8 PRO
Plug in the USB Flash Drive with Windows 8 Pro install files.
Windows 8 Installer would show the unallocated disk space. I can't remember the exact details but either I had to click on Delete or New to delete and then create a new GPT partition. The entire partition was about 119GB.
From that point, follow the Windows 8 Pro installation steps.
After booting up into Windows 8 Pro, plug the external USB drive that had the drivers folder backed up from D_backups.
Install all the drivers from this folder (I was able to install everything except for one Intel fast boot one because of missing partition but my Yoga still boots up just as fast).
Go to device manager to check and everything should be good now.
Run Windows Update.
You should now have about 101GB free on C: drive!!
INSTALL VISUAL STUDIO, SQL SERVER and OFFICE 2013 ON LENOVO YOGA 13
I installed the following in that order:
Microsoft SQL Server 2008 R2 Developer edition (I installed all components, everything!). Then I installed latest service pack.
Microsoft Visual Studio 2010 (I installed all components, everything!). Then I installed latest service pack.
Microsoft SQL Server 2012 Developer edition(I installed all components, everything!). Then I installed latest service pack.
Microsoft Visual Studio 2012(I installed all components, everything!)
I ran Windows update and also installed Nov 2012 updates of SQL Server Data tools.
I then installed Office 2013 Pro Plus.
MAKE LENOVO YOGA 13 MORE SECURE
Go to Control Panel and enable Windows Defender (it is included by default in Windows 8 and is anti-virus and anti-malware solution)
Enable full hard-disk encryption using BitLocker feature of Windows 8 Pro. Since Lenovo Ideapad Yoga 13 doesn't have hardware TPM, you have to enable password based option. For this, follow the steps here: http://rics.partners.org/show_article.php?id=274.
Basically, you go to GPEDIT.MSC and Open Computer Configuration => Administrative Templates => Windows Components => BitLocker Drive Encryption => Operating System Drives. From the right pane double-click "Require additional authentication at startup. Select Enabled radio button and check the box for "Allow BitLocker without a compatible TPM...". Click OK and close the policy editor. Then Right-click your C drive in the Computer folder, click Turn on BitLocker. Then select Enter a password instead of USB option. Then provide a strong password (make sure to write it down and put it in a SAFE place, if you lose the password, no one can boot into your hard disk). Then select Save to a file and save it to the External Drive. Select "Encrypt entire drive...", click Next. When this is done, you will get a pop-up on the lower-right a prompt to restart the computer. Restart your PC. Enter the encryption password created earlier. If you are successful in getting into Windows, you're all set.
I also hooked up to Skydrive and used BoxCryptor to encrypt my files in cloud.
The available free disk space should now be about 54GB.
I verified that Lenovo Yoga 13 works like a champ with no slowdown with Visual Studio 2010, Visual Studio 2012 and SQL Server Management Studio open simultaneously and Bitlocker enabled!
The keyboard right SHIFT key is small but other than that, it can work as a great portable development machine and Microsoft Reader is great for reading PDF eBooks.
So if you are a Developer on Microsoft platform, go right ahead. Lenovo IdeaPad Yoga 13 is great for running Visual Studio 2010 and Visual Studio 2012 (1600x900 resolution is totally usable) while on the move. Since I have only had this machine for a few days, I can't tell much about the long term reliability.
Solved!
Go to Solution.

Thank you for posting this. I am in this exact situation. I purchased a yoga 13, and installed Visual Studio Express 2012 for Windows Phone. As it turns out, the Windows Phone Emulator ONLY works in a Windows 8 Pro environment. Since the Yoga doesn't have a disc drive, I shared my W7 computer's cd drive, then put in Windows 8 Pro, so that it could install onto the Yoga. Well, after the installation was done, I tried running my program again and ran into the same issue. It prompted me that my environment must be Windows 8 Pro! I thought that Windows 8 Pro already installed but, what confuses me is that I see no indication that Windows 8 Pro installed. When I go to the System Window, it reads: "Windows 8". Should it read Windows 8 Pro?
Ultimately, I'd like to know, are you able to execute the Windows Phone Emulator? I'm not sure as to whether the Yoga has the hardware capability (needs to be SLAT enabled or something like that?), I HOPE it is able to, and judging by your post, it seems like it but I'd love to know your perspective on my approach.
Please let me know if this makes sense, as I'm new to this kind of thing but really want to start development for Windows Phone.

Windows 8.1 Mail app and Exchange 2010 EAS partnership - "Make Windows user account an Administrator" to meet security requirements?

As the title says, I have a new Windows 8.1 based device which I'm trying to connect to my Exchange 2010 box (SP3 Update Rollup 2). I currently have my iphone set up as an EAS client with no problems. I have an EAS policy on my mailbox
with the following settings surrounding passwords :
Require Password, Require Encryption, Allow Simple Password, Time without user input - 10 minutes. Allow non-provisional devices is also checked.
The Windows 8.1 device has Bitlocker enabled, which meets the encryption requirement - I know this because the 1st time I tried this it moaned about Bitlocker needing to be enabled to meet requirements, though at that time the local user account on the Windows
8.1 device was an admin level account so it never mentioned this issue, it worked normally.
Now, while using a std user account on the Windows 8.1 device and trying to connect up via EAS, it complains that my local windows user account must be an ADMIN level account to meet the security requirements...?
Anyone encountered this?

Did anyone solve this problem? I'm also struggling with this issue.
this is still a problem. I'm just hitting it now and it's not doing much for management's love of Microsoft devices.
Evidently, it has to be an admin to set the policies on the device to match the policies on the EAS. And once set, a user can be changed back.
But this is seriously not cool. Don't the "app" folks and the enterprise folks talk to each other?

Re sizing C partition after Encryption By MBAM

we have windows 7 in our company and we use MBAM to encrypt our laptops
we need to Re size C Partition and extend it using free space on D partition
After Encryption I can not make Re size by Manage Console or third parity software
The Resize Option became Dim
I do not want to decrypt and encrypt again to make this action because it takes long time
So any support for this issue
Thanks

we have windows 7 in our company and we use MBAM to encrypt our laptops
we need to Re size C Partition and extend it using free space on D partition
After Encryption I can not make Re size by Manage Console or third parity software
The Resize Option became Dim
I do not want to decrypt and encrypt again to make this action because it takes long time
So any support for this issue
Thanks

Can my MacBook Pro use boot camp with Windows 7 with BitLocker encryption?

I'm at wit's end with this, and I'm hoping I can get some advice here. I've read so many forum, posts and reviews that I'm not entirely sure what I can trust.
I have an early 2011 MacBook Pro (MacBookPro8,3). I need to run Windows encrypted for work purposes. It needs to be real windows with full-disk encryption (FDE). The business tools run in boot camp, but not in Parallels, because Parallels doesn't support DirectX 11. I would also benefit greatly from an SSD.
I do not want to do anything hacky like removing the Mac reocovery partition, because I've read that just loading Disk Utility in OS X might mess up your patrition boot tables as it tries to "fix" things. I don't want to have to manually reocover to fix stuff or chance losing data.
I have read (and tried) installing BitLocker on Windows 7 Ultimate under boot camp, but ran into the partition limit on my internal HDD. A maximum of 4 partitions are allowed, and between OS X, its recovery, boot camp, and the Windows partition, all 4 are used.
I have considered one of the following, which may work:
Install OWC's Data Doubler Kit with an additional 240GB SSD (http://eshop.macsales.com/item/OWC/DDMBS6E240/). I would replace the internal SuperDrive with the HDD, and install the new SSD on the faster SATA 6G port. Windows would be installed on the SSD and OS X would stay on the HDD.
Replace the internal HDD with a new SSD (keeping the SuperDrive). I would lose OS X altogether and just have Windows installed.
Forget the entire thing and just buy a PC for work.
My thoughts are that with option both options #1 and #2, I don't even know if these setups will allow BitLocker. In both cases, Windows will be the only partition on the drive, so I'm assuming that when BitLocker is installed, there will be room for the new partition it creates. With option #1, I'm pretty sure I'd still be using Boot Camp, but how would that would for option #2? Is boot camp used even though there is no Mac partition? Would I still need to keey the Mac Recovery partition for this to work? I'd probably need to use Boot Camp drivers under Windows, I think.
I'd certainly be interested in using a self-encrypting drive (SED), especially a SSD, but I'm concerned that most of them appear to require TPM or BIOS functions that Mac's EFI does not provide. Such a drive would allow me to drop BitLocker, but I would need to be use the self-encryption actually works on this setup. From what I've read, most of the SED drives will work just fine under EFI, but you won't be able to set or access the encryption password, which pretty much makes these drives unencrypted.
I've read that BitLocker can be configured to use a flash drive as a decryption key, but I haven't been able to test that yet. I'm tried creating bootable flash drives under Windows and OS X, and none of them seem to appear when I access the boot menu (hold option during boot chime). I don't even know if this system supports bootable USB flash drives, or whether they can be used as a BitLocker key under boot camp.
For the record, I have attempted to use an external thunderbolt drive as my Windows partition, but Windows doesn't want to be installed on removable media, and even if it worked, I believe you can only boot OS X from thunderbolt. I do have a second OS X install booting from the thunderbolt drive, so I know that works. Also, FileVault 2 is installed on my OS X partition, and I read something about FV2 using the Recovery partition somehow so you can't remove the recovery partition to make room for BitLocker.
So ... does anyone have any suggestions preferably based on personal experience as to whether options #1 or #2 should work for my needs?
At this point, I'm really thinking I should just bite the bullet and purchase a PC that I will forever look down upon.

Are you using a MacBook Pro? Is everything installed on the same drive?
I would love to know how that install was performed. When I install Windows under boot camp, my MacBook Pro drive ends up with 4 partitions: Mac, Mac Recovery, Windows, and a small partition that I believe is used by boot camp.
Installing BitLocker on Windows requires the creation of a new small partition that Windows will boot off. The small partition is unencrypted, while the primary Windows partition will get encrypted. The following post discusses the maximum partition issue: https://discussions.apple.com/message/22753791#22753791
Has anyone installed Windows through boot camp on it's own drive, and if so, can BitLocker be installed on that without reaching any partition limit? I'm assuming that's possible, but would like to know before I spend hundreds on new hardware.

Lenovo Yoga 2 13, Kali Linux 1.0.7, Ubuntu 14.04, Windows 8.1 install, config, and wifi fix.

Lenovo Yoga 2 13, Kali Linux 1.0.7, Ubuntu 14.04, Windows 8.1 install, config, and wifi fix.
I wanted to share an experience with everyone I hope will help others avoid what I have gone through the past 3 days. I bought a Yoga 11s that I loved but had some issues with the wireless, Lenovo being awesome replaced it with a Yoga 2 13. I love this laptop but ran into some issues with Linux install/wireless, which I wanted to show how to resolve in one place. Hopefully this will help someone else get through this quicker
I am going to try and write this for someone with little Linux experience, if I miss the mark please let me know and I will clarify the best I can.
For work I need Windows 8.1 and Kali Linux, while for home I prefer Ubuntu.
My Yoga 2 13:
I5 1.6 ghz
8 GB ram
256 GB SSD
ORANGE!
My requirements:
I need Windows
I need Kali Linux (livecd, even with persistent mode was not an option as it would not save the wireless fix or system updates) – I would also like this on a USB drive and not the internal SSD
I would like Ubuntu
Needed to do this:
1. 2 USB thumb drives (at least 8gb in size each) I used 2 Leef Supra 32GB drives. They are my favorite right now and are only about $27 at amazon.
2. Phone that can USB Tether or a USB Ethernet card (External USB wireless will show as "Hardware Locked"). Again you can pick one up for sub $10 if you need the USB Ethernet route. I used my Galaxy S5, you will need to download 200-300 mb of items through this so make sure you have the data if you go that route.
3. You may be able to get a USB wifi card to work if you do the following after boot. This only worked once for me.
                a.Type ‘sudo rmmod iwlmvm’
b.Type ‘sudo rmmod iwlwifi’
4. ISOs of Ubuntu and Kali Linux (I used Ubuntu 14.04 and Kali Linux 1.0.7)
5. Software to unzip the ISOs. I recommend 7-ZIP and will be referencing this in this guide.
6. I will include the EFI boot files and the WiFi fix files if I can attach. Otherwise I will provide a link to them.
   Link: https://www.dropbox.com/s/puxnnoft3gn2b6l/WiFiFix.zip
Recommended (these are just in case you corrupt something making your system not see any OS
1. I would call Lenovo beforehand and get a set of recover disks (this will take 2-3 days)
2. In the meantime a USB Windows 8.1 or 8 ISO (the repair feature may save you)
*Note: At many points in this guide I detail steps and commands. Please double check that you understand the step before proceeding. There are multiple points where a mistyped command or clicking the wrong option will cause your entire system to fail and you will need to reformat the entire drive and start over. This also will make One Touch recovery not work. Proceed with caution.*
I did not need to disable ‘secure boot’ to do this, but keep in mind that you may need to.
Steps:
First let’s go through the installs, and then we will go through grub config and wireless fix
1. In Windows scroll to computer and right click, select manage.
2. Go to “Disk Management”
3. Select the main HDD (notice Lenovo puts a stupid number of partitions on here)
a. I deleted the D: drive on here, if you do this make sure to copy the drives over to your main C: drive. You will want to run each of the installers and repair the drivers after.
4. I used the space from the D: drive and pulled a little more creating a 50 GB partition for Ubuntu and my swap file
a. You can also add more space by right clicking your C drive and selecting shrink
b. Do not format the partitioned data as this will make identifying it later much easier.
5. Open a command line
                a. Swipe from the right of the screen and select search
                b. Type ‘cmd’
                c. right click and select ‘run as admin’
6. For Ubuntu: Type ‘diskpart’ into the command line
                a. type ‘list disk’
i. You should see 2-3 disks depending on if you have one or both usb drives in the laptop at the time. I would suggest only doing 1 at a time so you don’t lose track.
                b. type ‘select disk $’ (Replace the $ with the number of the drive)
c. ***** Before proceeding make sure you have the correct drive selected or you can ruin your Windows install and Lenovo one touch recovery will not fix it since we have changed the partitions *****
d. type ‘clean’
e. type ‘create partition primary’
f. type ‘active’
g. type ‘format fs=fat32 quick’
h. type ‘assign’
i. type ‘exit’
6. For Kali Linux: Type ‘diskpart’ into the command line
                a. type ‘list disk’
i. You should see 2-3 disks depending on if you have one or both usb drives in the laptop at the time. I would suggest only doing 1 at a time so you don’t lose track.
                b. type ‘select disk $’ (Replace the $ with the number of the drive)
c. ***** Before proceeding make sure you have the correct drive selected or you can ruin your Windows install and Lenovo one touch recovery will not fix it since we have changed the partitions *****
d. type ‘clean’
e. type ‘create partition primary size= 3272
f. type ‘active’
g. type ‘format fs=fat32 quick’
h. type ‘assign’
i. type ‘exit’
j. By doing this we can maintain a portion of this drive as the install CD and still have linux install/ liveCD if we need to run it on another machine.
7. At this point the drive is ready to have the contents of the ISO copied over.
8. Right click the ISO and select 7-zip then ‘zip to /’ This should unzip the ISO to the location of the ISO into a folder named exactly the same as the ISO.
9. Once this is done for Ubuntu ISO it is done
10. Kali requires a little bit more to be ready
                a. Kali will need some files added for EFI boot. --$--
                               i. Thanks to: https://forums.kali.org/showthread.php?271-How-to-EFI-install-Kali-Linux
                               ii. EFI files are located within the wifi fix folder https://www.dropbox.com/s/puxnnoft3gn2b6l/WiFiFix.zip
11. Now let’s start with Ubuntu
Ubuntu install
1.     Place USB drive into the laptop and press the “Lenovo boot” button next to the power button
2.     Select ‘Boot Menu’
3.     Select ‘EFI USB Device (Name of drive)’ Mine stated Leef Supra
4.     Select ‘install Ubuntu’
5.     Go through the Ubuntu install until you get to select the install drive
6.     Once you get to the install portion it will ask you to select from one of 4 options. Select ‘Manually select partition’
7.     Select the “Free Space” where we opened up some of the drive
8.     You will need to create 2 partitions, I usually create the swap partition at the end of the drive
a.     First I create the swap
                                          i.    Set at the end of the drive
                                         ii.    Set size to 1024 mb
                                        iii.    Set type to ‘swap’
b.     Second create the ext 4 partition
                                          i.    Set to beginning of drive
                                         ii.    Set to remainder of the space
                                        iii.    Set type to ext4
                                        iv.    Set mount point to /
9.     Finish the install and boot into Ubuntu
10.   You will notice that your wireless is ‘disabled by hardware’ This is fine for the time being and we will worry about this after the kali install. If we fix it now for some reason after installing kali we get the error again and would just need to fix it again.
Kali Linux install
1.     Place USB drive into the laptop and press the “Lenovo boot” button next to the power button
2.     Select ‘Boot Menu’
3.     Select ‘EFI USB Device (Name of drive)’ Mine stated Leef Supra
4.     From the grub menu select ‘install kali linux’ both graphical and text work. I much prefer text install
5.     You will get a few errors through the install but that is fine
6.     The first we see is about network hardware and ‘load missing firmware from removable media?’ – Select ‘no’
7.     Then select no ethernet card
8.     It will have you name your machine then it will ask you for the root password
a.     If you want to just use root *not recommended* place the password here
b.     If you wish to use a non-root account then leave these blank and it will ask you for a name, username, and password of the new machine *Very Recommended* - this will also add this user to the sudoers file
9.     It will then ask you to ‘partition disks’
10.   Select manual
11.   Now here is where it can get a little confusing so read twice click once
12.   Select the USB drive from this list
13.   Mine shows up under (sdb) – Leef Supra
a.     It could be sdc, sdd, sde, etc… depending on how many drives you have plugged in.
14.   You should see one primary drive that is 3gb or so that is formatted as FAT32. – DO NOT TOUCH THIS PARTITION!
15.   You should see the remainder of this drive as ‘FREE SPACE’ select that
16.   Create a partition at the end at size 1024mb and swap
17.   Then create another one for the remainder of the drive and set it to ext4 with mountpoint of /
18.   Continue through the install after you should see an error warning you that ‘you may not be able to boot’ that is fine, select continue
19.   Then select from the menu of all the options ‘continue without bootloader’
20.   It should finish up then reboot on its own.

First setup/boot/fix grub
1.     You should be able to boot up into GRUB2 menu now.
2.     You may not see kali linux in this menu (make sure you have your towel and don’t panic!)
3.     Boot into Ubuntu
4.     Once you log in you should see that you still cannot use wireless due to being locked by hardware
5.     This is expected
6.     Let’s fix grub then we will come back to fixing wireless
7.     Plug in your device to connect to the internet (USB Tethering or USB Ethernet)
8.     Once you verify that you now have an internet connection run the following from terminal
a.     ‘sudo add-apt-repository ppa:danielrichter2007/grub-customizer’
b.     ‘sudo apt-get update’
c.     ‘sudo apt-get install grub-customizer’
9.     You can also edit the grub.cfg manually if you know what you are doing… I did not
10.   Open grub customizer
11.   It should auto populate and you should see ‘debian (kali linux)’ somewhere in the list
12.   It should be mounted to /dev/sdb2 or /dev/sdc2 depending on how many devices you have
13.   At this point go ahead and save
14.   Reboot and test that you can get into each OS
15.   This is where my inexperience got me. I spent 2 of my days so I am including this error: If when you boot into Kali you get an error somewhere that says ‘/bin/sh: can’t access tty: job control turned off’ look above it for an error that looks similar to ‘ALERT! /dev/sdc2 does not exist. Dropping to a shell!!’
a.     That error is due to the mount point being incorrect in grub, reboot and from within grub highlight the kali boot. Press ‘e’ then towards the bottom you should see ‘root=/dev/sdc2’ change this to ‘root=/dev/sdb2’ again the number doesn’t matter just make sure it stays the same.
b.     Press F10
c.     If this boots fine then you will need to go back and fix the grub.cfg or load into Ubuntu and open grub customizer again, it should fix this
16.   Now you have 3 working OS on the machine with one being on a USB! Congrats!
17.   You can remove the USB with no worry of screwing up your install, but you will not be able to boot into Kali Linux until you replace it. I would suggest only removing it and replacing it while the machine is powered off, but that’s just me.
Fix Wireless
Now is the time to do what probably ¾ of you came here for. FIX THE DANG WIRELESS. This is a huge problem from Lenovo’s side that I hope they realize how important Linux is and will fix. I won’t hold my breath though.
Log into Ubuntu : This is well documented in the following forum post on page 3 by user Haohe:
http://ubuntuforums.org/showthread.php?t=2215044&page=3
His has you download quite a large file, mine should be much smaller.
https://www.dropbox.com/s/puxnnoft3gn2b6l/WiFiFix.zip
1.     Download the attached package with the fix.
2.     Connect your USB internet device (tether or ethernet)
3.     Place the packages somewhere easy to access, in this example I will place them under ~/Desktop/WiFiFix
4.     Type ‘cd ~/Desktop/WiFiFix/’
5.     Now we need to prep the tools we need.
6.     Type ‘sudo apt-get update’ – we did this before, but you know, just in case
7.     Type ‘sudo apt-get install linux-headers-`uname –r`’   Note around uname-r they are the ` symbol not the ‘ this is located just above the tab on the same key as ~.
8.     Type ‘make’
9.     Type ‘sudo cp /lib/modules/3.13.0-24-generic/kernel/drivers/platform/x86/ideapad-laptop.ko ~/ideapad-laptop.ko.backup’
10.   Type ‘sudo cp ~/Desktop/WiFiFix/ideapad-laptop.ko /lib/modules/3.13.0-24-generic/kernel/drivers/platform/x86/’
11.   Type ‘sudo modprobe -r ideapad-laptop’
12.   Type ‘sudo modprobe ideapad-laptop’
13.   Type ‘sudo rfkill unblock all’
14.   Type ‘sudo modprobe -r ideapad-laptop’
15.   Type ‘sudo mv ~/ideapad-laptop.ko.backup /lib/modules/3.13.0-24-generic/kernel/drivers/platform/x86/ideapad-laptop.ko’
16.   Next we need to blacklist the ideapad module
17.   Type ‘sudo echo 'blacklist ideapad-laptop' > /etc/modprobe.d/blacklist-ideapad.conf’
a.     The first time I tried this it wouldn’t work. So I did the following
b.     ‘sudo touch /etc/modprobe.d/blacklist-ideapad.conf’
c.     ‘sudo vim /etc/modprobe.d/blacklist-ideapad.conf’
d.     Enter     blacklist ideapad-laptop
e.     Exit and save
18.   Reboot your Yoga 2 13
19.   Boot into kali and see if you have wireless, if you do then you are done. If not we will need to repeat this process with one small little change.
Kali Wifi Fix
1.     Copy the sources.list from the package provided
2.     Replace /etc/apt/sources.list with the included
3.     Some of the file path changes but the process remains the same from here.
Congratulations you now have 3 OSes one portable to other machines and working wifi!
Thank you
SirGed

Where are my photos on the PC after sync with an iphone? I know nobody out there is stupid enough to suggest to me that they are encrypted and inaccessible, right? Seriously? How stupid would Apple corporation have to be to do something like this?

Where are my photos on the PC after synching with an iphone? I know nobody out there is stupid enough to suggest to me that they are encrypted and inaccessible, right? Seriously? How stupid would Apple corporation have to be to do something like this? That would be just as foolish as making my music unusable on the PC...
Okay, Let's assume that Apple is indeed THAT foolish.......How does one get the photos from the phone to the PC and still use them?

The photos are still on your phone, and if enabled in your Photo Stream. They are not automatically transferred to your computer when syncing.
See iOS: Import personal photos and videos from iOS devices to your computer and iCloud: My Photo Stream FAQ
tt2

How to run an application on windows mobile 6 device ?

Hi everybody,
How can you run an application on a windows mobile 6 device with the new SDK 3.0 ?
Can you launch a MIDLET like any other program ? or running your MIDLET on windows mobile 6 is only for testing while you are developing.
When you finished your MIDLET, can you copy the jar file to the mobile device with windows mobile 6 and to run it anytime ?
Thank you.

Its simply a matter of opinion, but I'm 3-months-in, developing for WM5 + WM6 and the only usable solution I've found that has the correct look and feel on Windows Mobile as well as JSR support is IBM's J9.
It's not free, but I searched high and low, and it's the only product that I was happy with.
Here's a [screenshot of it running my application on WM6 emulator|http://3.bp.blogspot.com/_9hmP3Ho0t14/S7eDTXfkE9I/AAAAAAAAAa0/ISZ-HohZQDs/s1600/wm6.png] .
Here's a [quick article I wrote for it.|http://fatbuttlarry.blogspot.com/search?updated-max=2010-02-16T11%3A34%3A00-08%3A00&max-results=7] Remember, it's NOT free. Pricing is very fair, but you'll have to license it to use and distribute it.
-Tres

Windows 8.1 Device Encryption and MBAM

Similar Messages

Maybe you are looking for