December 24, 2012

Shrink the SEPM 12.1 database

Filed under: Tips n Tricks — Rahul Patel @ 1:46 pm

I had an issue with SBS2008 C drive space, i have checked and found that SEP database size is nearly 3GB. I had then decided to reduce this database size ASAP. I had Google it found below solution from Symantec Web Site.

1. Backup your database.

Before running this tool, please backup the DB manually by stopping the Symantec Endpoint Protection Manager service and copying the sem5.db and sem5.log from “..\Symantec\Symantec Endpoint Protection Manager\db\”  to another folder. You can copy them back and start the SEPM service and embedded database service to restore the previous SEPM status.

2. Copy this tool into the “Tools” folder of the SEP Manager.

Copy the file ShrinkEmbeddedDB.bat and ShrinkEmbeddedDB.jar to folder “..\Symantec\Symantec Endpoint Protection Manager\Tools\”.

3. Double click file ShrinkEmbeddedDB.bat or run it from a command window.

4. Follow the prompt of the tool to delete the sem5.db.bak and sem5.log.bak after shrinking the database successfully.

I have successfully reduced  the SEP database size. I have performed above step in SBS2008 Environment.

Source: http://www.symantec.com/business/support/index?page=content&id=TECH185177


October 1, 2011

McAfee Internet Security won’t activate in Windows 7

Filed under: Tips n Tricks — Rahul Patel @ 3:35 pm

Problem :

When you click on activate button, after some time the message appeared that ” Unsuccessful Activation”

Solution :

1.Click the Windows Button and type cmd.exe into the search bar.
2.Right-click cmd.exe in the search list, and select Run as Administrator.
3.Type the following text, then press ENTER:

c:\program files\mcafee\msc\mcoemmgr.exe /regserver

4.Right-click the M icon in your taskbar and select either Activate, Activate Now, Register, or Register Now.
5.Follow the instructions.

Source:McAfee Community

June 23, 2011

SEP Proactive Threat Protection Defintion is not updating

Filed under: Tips n Tricks — Rahul Patel @ 7:22 pm

Symantec Endpoint Protection 11 (SEP 11) includes a feature called Proactive Threat Protection, which seeks out suspicious behavior on your computer, and isolates it. Since brand new viruses may not always be immediately detected by antivirus software, Proactive Threat Protection is a good barrier against the unknown.

Unfortunately, sometimes have noticed that their Proactive Threat Protection defitions are stuck or not update day by day.

Delete the string value “Sequence Number” under the following registry keys:



Exit the registry and restart your system.

IF problem not solve, then try this one:

Modify the value of the following DWORD registry entry to 1:

HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\LiveUpdate\SyknappsContentListReady

Note: If this registry entry does not exist on the client, create the entry and set it to the value above

Run command : smc -stop
smc -start

or Reboot the system.

February 3, 2011

Redirecting New Users and New Computers to a Specified OU

Filed under: Active Directory,Tips n Tricks — Rahul Patel @ 5:21 pm

Either on you computer or on a domain controller run the below commands to make the changes.

To Redirect Users
C:\Windows\System32\redirusr DN_of_new_OU
For example:
C:\Windows\System32\redirusr ou=myusers,DC=mydomain,dc=com

To Redirect Computers
C:\Windows\System32\redircmp DN_of_new_OU
For example:
C:\Windows\System32\redircmp ou=mycomputers,DC=mydomain,dc=com

Note: Your domain functional level must be at at least Windows Server 2003.
If your DN contains spaces etc you will need enclose the DN with quotes.

September 11, 2010

SEP installation RollBack Issue on Windows 7 -Fix

Filed under: Tips n Tricks,Windows 7 — Rahul Patel @ 2:48 am


When attempting to install the Symantec Endpoint Protection client onto a machine, the installation fails and rolls back around the point of registering with LiveUpdate.


In the registry,


HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData

and change it to

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData

Restart Windows 7 and then install SEP client again.


June 21, 2010

Shadow a Terminal Server Session Without Prompt for Approval

Filed under: Server 2003,Tips n Tricks — Rahul Patel @ 3:15 pm

Using windows 2003 and want to gain session access to another users session. Perhaps the person you are asking for shadow permission has an issue on his desktop and cannot figure it out,

To “Shadow” you have to know the session id of the user’s session that you want to view and or take over. Right click on your taskbar and select task manager. Go to Users and pick the users name and the session number should be located to the left of the name.
Shadow 0 and on the users session it will pop up a dialog box asking the other user for permission for you to access the session.

Of course this can be denied from the other user. Frustrating? 😦

To shadow any other session, without a prompt, you would use the RDP-TCP Properties dialog, on the Remote Control tab, and clear the require users permission box.

To remote control the console (session 0) without a prompt for approval:

1. On the Terminal Services server, Start –> Run –>Gpedit.msc –> OK.

2. Navigate through Computer Configuration–> Administrative templates –> Windows Components –> Terminal Services.

3. Right-click Remote Control Settings and press Properties.

4. Select the Enabled option.

5. Select Full Control without user’s permission, under Options.

6. Press OK.

7. Exit the Group Policy Editor.

8. To force this local policy to update now, open a CMD prompt, type gpupdate /force, and press Enter.

When you establish a Remote Desktop session, you can connect to the console and remote control it:

1. Open a CMD prompt.

2. Type Shadow 0 and press Enter.

The user will NOT be prompted for permission.

Well this can be exploited and used in many wrong ways. So just be careful and use it wisely… 🙂

Source :http://support.microsoft.com/kb/292190

January 7, 2010

Windows 7’s “God-Mode” Hack

Filed under: Tips n Tricks,Windows 7 — Rahul Patel @ 3:15 pm

One irritation with Windows – even the well-designed Windows 7 – is that various control panels (Autoplay, Action Center, Administrative Tools, etc.), tend to be spread around the OS in multiple locations, making management more time consuming.

Some may have known this already, but a new tweak is just now gaining public attention, which allows all of these control panels to be congregated in a single folder. To get access to this “God-Mode” super folder, all you have to do is create a new folder named:


Once you’ve completed the (re)name the folder’s icon will switch to a control panel. You’ll then be free to start performing all the administration tasks you’ve been putting off.

July 24, 2009

.NET Framework Cleanup Tool

Filed under: Tips n Tricks — Rahul Patel @ 5:47 pm

This .NET Framework cleanup tool is designed to automatically perform a set of steps to remove selected versions of the .NET Framework from a computer.  It will remove files, directories, registry keys and values and Windows Installer product registration information for the .NET Framework.  The tool is intended primarily to return your system to a known  state in case you are encountering .NET Framework installation, uninstallation, repair or patching errors so that you can try to install again.

Download location


March 6, 2009

Determine the authentication (logon) Domain Controller

Filed under: Tips n Tricks — Rahul Patel @ 9:40 am

An easy way to determine what Domain Controller authenticated a person at logon. This can come in handy when troubleshooting slow logons and troubleshooting logons for roaming laptop users.

From the workstation, start a command prompt.
Type “set” (for settings)
Find the “LOGONSERVER=” line
just Type set l
That’s it!

or download vbscript(login server info.vbs) from My Share box..

February 19, 2009

Kodak Imaging for Windows XP

Filed under: Tips n Tricks — Rahul Patel @ 7:04 pm

You may have heard some of your Windows XP users asking what happened to the Kodak Imaging for Windows application. Upon closer inspection you may have discovered that some of the Windows XP systems have Imaging and others don’t. The reason for the discrepancy is that when you upgrade an existing Windows 2000 installation to Windows XP, Setup leaves Imaging on the system. But if you have a brand new Windows XP installation, Imaging is nowhere to be found.

Unfortunately, Microsoft didn’t relicense the Imaging application from Kodak for inclusion with Windows XP. It instead replaced the functions that Imaging provided with the Windows Picture And Fax Viewer and the Scanner And Camera Wizard. While these features, along with others in the Windows XP operating system, will provide most of what you need, there are some operations, such as scanning multiple images into one document or applying a rubber stamp annotation, that are no longer available.

If you have users who need and are accustomed to using the Imaging for Windows application, there’s a way to extract Imaging’s files from a Windows 2000 Professional CD and then install Imaging in Windows XP.

Download a little batch file from my Shared box name as Kodak_XP.zip that you can run to perform the entire operation.

Next Page »

Blog at WordPress.com.