How To Install Microsoft Compliance Manager v1 On Windows 7 / Server 2008 / 2008 R2 With Microsoft SQL Server 2008 R2 Express

Make sure you have administrator rights along with user rights assignment to debug programs and manage auditing and security log, found in secpol.msc > local policies > user rights assignment.

Install Microsoft SQL Server 2008 R2 express. Go with the defaults mostly, make changes to your preference or environment, but you must make the SQL instance “MICROSOFTSCM” and have the SQL server database engine use NT authority\system for the account name, do not enter a password your system will take care of that. I would also add your domain or local administrators group to have permissions on the SQL server.

Install Microsoft Security Compliance Manager accepting the defaults or making environment specific changes.

Done.

Windows 7 or Domain Controller forgot password

So some how, and I won’t judge, you don’t have the user name and or password of an Active Directory domain administrator account and you need into that system. Your typical Windows password resetting utilities won’t work. This is because tbhe domain user accounts and passwords are not in the systems registry like they are in Windows 7, for example, but are in Active Directory.

Ok so if your like me you don’t need the talk; your server is down because you don’t have a password and you have users or management breathing down your neck asking every five minutes if you got the server back up.

Go grab your OS install disk and follow the steps below.

1. Boot to the install disk.
2. Select your language.
3. Click the link to take you to the repair tools/console, Repair you computer.
4. Select your installation you want to repair.
5. Launch the command prompt.
6. Change to the System32 directory in the Windows install directory, e.g., D:\Windows\System32.
7. Run this command: copy utilman.exe utilman.bak to make a backup of utilman.exe.
8. Run this command: copy cmd.exe utilman.exe to replace utilman.exe with cmd.exe.
9. Pop the install cd out of the system.
10. Run this command: shutdown -r -t 0 to reboot the system.
11. Once your system is done booting and your at the logon screen.
12. Click the icon in the bottom left that looks like a clock or press the Windows key + U to launch the Ease of Access wizard. But wait … what’s this. It’s not the Ease of Access wizard but a command prompt running as the SYSTEM account.
13. After you settle the evil scientist laugh that’s going on in your head run this command: net user to get a list of users, handy if you don’t know the user name of a domain admin account.
14. Run this command: net user <username> to reset the password of that account to something you know. Now you will still have to meet the password complexity requirements, if there are any, a good one to use night be $top4G3t!ngP@$$w0rd$.
15. Close the command window and logon with your reset account and password.
16. Be a good little boy / girl and undo the hack you just did. Delete the cmd version of utilman, set the password to something you will remember, only one person knows, and strong.
17. Write down the password and secure it in a safe or something.

Done.

You can use this same method when your Windows 7 users forgot the password as well. Bellow you will find a video I made of a practical demonstration of this technique.

 

How to make an Android development machine on Ubuntu 10.04.3 Long Term Support (LTS) Desktop 32 bit version

To start I must give credit to ‘uzzal’ and his blog “Setup Android Environment on Ubuntu 10.10,” found here http://mynetsys.blogspot.com/2011/02/setup-android-environment-on-ubuntu.html, following the directions there I was able to make my first Android development environment. I made this document in order to fit my needs and update the process with the latest software at the time, other than the OS version; I picked 10.04.3 because of its LTS status.
This document assumes you have or know how to install Ubuntu 10.04.3. So please do this first by any means you know how or can find on the internet. You can download the ISO here http://www.ubuntu.com/download/ubuntu/download by using the drop down in step one. Remember in creating this document I use the “Ubuntu 10.04 LTS – Long-term support” “32-bit (recommended) version of Ubuntu. I also followed this nice step-by-step on how install Ubuntu, http://news.softpedia.com/news/Installing-Ubuntu-10-04-LTS-141550.shtml . If you want to get the same results I show here then start with this version of Ubuntu and follow the install steps found at softpedia. I made a change to the softpedia steps by setting a 2048MB swap partition at the beginning of my disk 10240MB as the first primary partition mounted at ‘/’ and the remaining free space of 52135MB as the next primary partition mounted at ‘/home’.
*Note that this is given as is with no warranty and no guarantee. It is not the intent for these steps to cause issues with your system. With that said, making any modifications to a computer system and or its operating system does have the potential to cause issues. If you break your system while performing these actions it’s at your risk, test on a non-production system first.

Prep:

We are going to download all your needed components first then install them in the order you need.
1. Download Oracle’s Java SE Development Kit (JDK) 7u2 from here http://www.oracle.com/technetwork/java/javase/downloads/jdk-7u2-download-1377129.html if this link no longer works by the time you read this document then do a search for “JDK” and find the latest most “official” looking download location, sorry if Oracle changes things.
2. Download Eclipse IDE for Java Developers, Linux 32 Bit version, from here http://www.eclipse.org/downloads/?osType=linux . At the time of this writing the version is “Eclipse Indigo 3.7.1”, again sorry if things have changed by the time you read this … use Google to find the latest stuff.

Install time:

The Oracle JDK

  1.  You can find a good tutorial on how to install JDK 7u2 here http://askubuntu.com/questions/55848/how-do-i-install-oracle-java-jdk-7. I have given you the steps I used below.
  2.  Open a terminal and “cd” to the directory where you downloaded “jdk-7u<version>-linux-i586.tar.gz” to.
  3.  Type ‘sudo tar zxvf jdk-7u<version>-linux-i586.tar.gz, note use the “TAB” button when typing out long names … it really helps, and make it a habit. This will unpack “install” the JDK to a new sub directory called “jdk1.7.0_<version>” in the current directory.
  4.  Make “jvm” directory under “/usr/lib” by typing ‘sudo mkdir /usr/lib/jvm’.
  5.  Move the” jdk1.7.0_<version>” directory to “/usr/lib/jvm/jdk1.7.0_<version>” by typing ‘sudo mv ./jdk1.7.0_<version> /usr/lib/jvm’.
  6.  Now run:
    1. sudo update-alternatives –install “/usr/bin/java” “java” “/usr/lib/jvm/jdk1.7.0_<version>/bin/java” 1
    2. sudo update-alternatives –install “/usr/bin/javac” “javac” “/usr/lib/jvm/jdk1.7.0_<version>/bin/javac” 1
    3. sudo update-alternatives –install “/usr/bin/javaws” “javaws” “/usr/lib/jvm/jdk1.7.0_<version>/ 1

The Eclipse development environment:

  1. Open a terminal and “cd” to the directory where you downloaded “eclipse-java-<version>-linux-gtk.tar.gz” chances are it is in the same directory as the JDK .tar file so stay where you are.
  2. Type ‘sudo tar zxvf eclipse-java-<version>-linux-gtk.tar.gz’, note use the “TAB” button when typing out long names … it really helps, and make it a habit.
  3. Move the “eclipse” directory to “/opt/” by typing ‘sudo mv eclipse /opt/’.
  4. Modify the permissions, ACL, for the eclipse folder with
    1.  ‘sudo chmod -R a+r /opt/eclipse’ – This recursively (-R) gives ‘all’ (a) read (+r) permissions on the “eclipse” folder.
    2. ‘sudo chmod a+x /opt/eclipse/eclipse’ – This  makes “eclipse” executable (+x) to all (a).
  5. Now to make an executable in your path
    1. ‘sudo touch /usr/bin/eclipse’ – Makes an empty file in “/usr/bin” called “eclipse”.
    2. ‘sudo chmod  777 /usr/bin/eclipse – Changes the permissions, ACL, to allow everyone full access to the file.
    3. ‘sudo gedit /usr/bin/eclipse’ – Opens the “eclipse” file in “gedit” so you can add some content to it. Here is the content, copy and paste it into “gedit” then save and close it.:#!/bin/sh #export MOZILLA_FIVE_HOME=”/usr/lib/mozilla/” export ECLIPSE_HOME=”/opt/eclipse” $ECLIPSE_HOME/eclipse $*
      Copy and paste it into “gedit” then save and close it.
  6. You will want to run Eclipse no matter where you are so make a symlink to it by typing ‘sudo ln –s /usr/bin/eclipse /bin/eclipse’.
  7. Launching Eclipse from a terminal is fine and all but what if you want to launch it from the “Applications” menu. Well you do this.
    1.  ‘sudo gedit /usr/share/applications/eclipse.desktop’
    2. Copy and paste this: [Desktop Entry] Encoding=UTF-8 Name=Eclipse Comment=Eclipse IDE Exec=eclipse Icon=/opt/eclipse/icon.xpm Terminal=false Type=Application Categories=GNOME;Application;Development; StartupNotify=true
    3. Then you will have to “save as” under “file” and browse to “/usr/share/applications” and name the file “eclipse.desktop”.
    4. Close “gedit”.
    5. Click “Applications” you should now have a section called “Programming” and under that “Eclipse”.
  8. Run Eclipse for the first time by typing in ‘eclipse –clean’
  9. Type or “Browse…” to the directory you wish Eclipse to use as your workspace, or just keep the default and click “OK”.

Install the Android ADT Plugin for Eclipse:

  1. I followed this guide http://developer.android.com/sdk/eclipse-adt.html starting at “Downloading the ADT Plugin.” For your convenience I have the steps below.
    1. Start Eclipse, then select Help > Install New Software….
    2. Click Add, in the top-right corner.
    3. In the Add Repository dialog that appears, enter “ADT Plugin” for the Name and the following URL for the Location: https://dl-ssl.google.com/android/eclipse/
    4. Click OK Note: If you have trouble acquiring the plugin, try using “http” in the Location URL, instead of “https” (https is preferred for security reasons).
    5. In the Available Software dialog, select the checkbox next to Developer Tools and clickNext.
    6. In the next window, you’ll see a list of the tools to be downloaded. ClickNext.
    7. Read and accept the license agreements, then click Finish.
      Note: If you get a security warning saying that the authenticity or validity of the software can’t be established, click OK.
    8. When the installation completes, restart Eclipse.

Install the Android SDK:

  1. Once Eclipse restarts it asks for your workspace again so type or “Browse…” to the directory you wish Eclipse to use as your workspace, or just keep the default and click “OK”.
  2. Next is a very cool new thing that Google has done for us it automatically assumes that you would want to install the Android SDK seeing as you just installed the ADT Plugin. So yes we would like to do that, keep everything as it sits and click “Next>”.
  3. Are you the sharing type? Make up your mind if you want to share usage statistics with Google and then click “Finish”.
  4. Read and accept all the license agreements, then click “Install”.
There you go your all done, now go program that next killer app!!!

Shadow Groups

Have you ever just wanted to assign permissions on a file or folder to an Active Directory (AD) Organizational Unit (OU)? Well that still isn’t possible but you can achieve the same effect with Shadow Groups (SG) and Restricted Groups (RG).

So here we go, FYI I am assuming you have an AD setup, an OU with users in it, and know how to get around in Active Directory Users and Computers (ADUC) and the Group Policy Management Console (GPMC).

Lets say you have an OU called StormTroopers and it has some user accounts in it. To make a shadow group for this OU is to open the OU and right click in some white space in the right hand pane of ADUC and create a new Security Group, Local/ Global/Universal, you pick one that is best for you.
I might have a post on the differences of each group type in the future so stay tuned.

Anyway back to my story. Name this new group the exact name of the OU, in our case StormTroopers, and now you have a Shadow Group … what a mysterious name for something that isn’t that hard.

Now all you need to do is adjust the Access Control List (ACL) of a file or folder to add the SG you just made.

Well that was fun and quite useful but what if you want to make sure the members of that SG stay the same even off someone adds to that SG on accident, ya we’ll say it was an accident.

In GPMC create a new GPO, name it what you will, and edit it. Drill down through Computer Configuration > Policies > Windows Settings > Security Settings to Restricted Groups. Right click in the white space in the right hand pane and select Add Group… Type in the SG or click Browse… to find it in AD. Under Members of this group: click Add… Type in the user names or click Browse… to find them in AD. Click OK or Apply all the way out of the group properties and close the GPO.

In GPMC right click on the OU that contains your Domain Controllers and click Link an Existing GPO…, find your newly created RG GPO and click OK. To implement this new GPO right away open cmd.exe and run gpupdate /force. Or you can just wait for GP to refresh on its own, default is 15 minutes. All you have to do now is assign your new SG some ACLs on a file or folder.

 

Fixed our Discovery Kids digital mp3 boombox

This post is about how I fixed my kids Discovery Kids digital mp3 boombox that stopped working. It just wouldn’t turn on any more.

wpid-1338704373039

 

I did some searching on the problem and found that other had this same problem. Some found a solution by connecting it to a computer and formating the device. Like others the unit would work fine when connected to USB. The drive looked to be ok, I could access it from the computer without issie, but I copied off the music and formatted the drive just to make sure and then put the music back on. This didn’t help me but I void warranties very well so I opened it up. I also noticed that something was rattling around in there when I shook it so I figured I would at least see what that was.

The tricky part about getting into this toy is the rubber plugs in the screw holes. I had a dental tool that was curved and rather sharp, almost like a sewing needle. I was able to hook it around he back of the plugs and pull them out then use a very small Phillips screw driver to get the screws out.

I found that our kids had played with it a little too rough and the cable that supplies power to the main board from the batteries was broken off. The wires had moved back and forth enough to cause stress fractures and snap off. This flat gray cable has four wires in it and comes off of the circut board that the “ON HOLD OFF” switch controls, which is a pass through for the battery power.

I had to take all of the internal circut boards out and the speakers. Go easy so you don’t break off any other wires. I then stripped back the insulation on the power cable, I just cut between each wire with a hobby knife and used my thumb nail to strip it so I wouldn’t cut the thin wire any more then it was. Next I tinned each wire. Next I tested to see which wire was the ground wire as the ground terminal was labled on the main board and I could use that to make sure I put the wires back in the right place. I just used my multimeter to test continuity to find it. While I was doing all of this my soldering iron was heating up and was now ready for me to re-attach the wires, so that’s what I did. It was a little tricky because my iron tip is was a bit big for this kind of work so I got the terminals crossed once and had to clean it up.

Once the cable was back on I tested it out and it worked just fine. Before I closed it all back up I shot in a good amount of hot glue around the power cable and a few others that looked weak. I put every thing back in and all the screws and even the rubber plugs. The kids were back dancing to “Bit By Bit” and supper happy.

This took me about an hour to do but half of it was with my son in my lap “helping” me out.

Hope this helps someone.

JalapenoPi

Like all of my projects I scoured Google and through the reading of many tutorials I was able to piece together the settings and configurations I needed. I was originally inspired by this article written by Lee Hutchinson URL = http://arstechnica.com/gadgets/2013/06/how-a-total-n00b-mined-700-in-bitcoins/ I had also read about the Raspberry Pi project and wanted to get one but couldn’t think of what I would do with it other than increase my dust collector collection, but with butterfly labs releasing their hardware I now had something to do with a Pi. Anyway here we go and remember “Don’t Panic.”

Getting the Pi up and going with an OS and connectivity:

I followed the first three Raspberry Pi lessons over at learn.adafruit, great site with other good tutorials. I don’t remember making any obscene changes to the steps in the lessons other than those to personalize my box like I did sudo apt-get install vim cuz I like it better than nano which most of the tutorial use.

Lesson 1. Preparing an SD Card for your Raspberry Pi URL = http://learn.adafruit.com/adafruit-raspberry-pi-lesson-1-preparing-and-sd-card-for-your-raspberry-pi

Lesson 2. First Time Configuration URL = http://learn.adafruit.com/adafruits-raspberry-pi-lesson-2-first-time-configuration

Lesson 3. Network Setup URL = http://learn.adafruit.com/adafruits-raspberry-pi-lesson-3-network-setup

Setting up cgminer:

I started with the tutorial “Super Tutorial Raspberry Pi+Raspbian+CGMiner+TightVNC+WIFI at boot” URL = https://forums.butterflylabs.com/bitcoin-discussion/3238-super-tutorial-raspberry-pi-raspbian-cgminer-tightvnc-wifi-boot.html by jafc76. You can go back and forth between that one and mine but I will put everything I did here so you don’t really have to.

I skipped everything that was redundant from the adafruit lessons mentioned above like initial setup and network configuration. I actually skipped over his TightVNC section the first time I read this and cost me more time finding the right VNC combination, but it was here all along. I have included my VNC setup at the end of this so don’t worry. I put things in here in the order that I did them with the goal of getting the end result working first then move on to ease of admining the box.

UPDATE UPDATE UPDATE

I RECIEVED MY BUTTERFLY LABS JALAPENO SO THIS TUTORIAL SHOULD BE COMPLETE NOW

First depencancies

1.

sudo apt-get update

2.

sudo apt-get install build-essential git autoconf libtool libcurl4-openssl-dev libncurses5-dev pkg-config yasm make libusb-1.0-0-dev

Clone latest stable version of cgminer source files

3.

git clone https://github.com/ckolivas/cgminer.git cgminer

Compile cgminer

4.

cd cgminer

5.

sudo ./autogen.sh

6.

sudo ./configure --enable-bflsc

7.

sudo make

8.

sudo make install

Auto start cgminer

1. Make and edit the cgminer.conf file in the /cgminer directory by

sudo vim /cgminer/cgminer.conf

The cgminer.conf file is what holds all your mining account specifics. Mine looks like this … well sort of, I sanitized it so it doesn’t have my actual account names and passwords.

UPDATE:

The slush pool has updated. You can get more info from the place I got it from, here. Basically they have added more operation sites so you can replace the URL with one that is geographically closer to you.

{
"pools" : [
{
"url" : "stratum+tcp://stratum.slushpool.com:3333",
"user" : "bartimaeus.worker1",
"pass" : "C0mpl3xP@$$w0rd"
}
]
,
"api-port" : "4028",
"expiry" : "120",
"hotplug" : "5",
"log" : "5",
"no-pool-disable" : true,
"queue" : "1",
"scan-time" : "60",
"shares" : "0",
"kernel-path" : "/usr/local/bin"
}

2. Edit the rc.local file

sudo vim /etc/init.d/rc.local

3. Go all the way to the bottom and add a new line

/cgminer/cgminer --config PATHTO-CGMINER.CONF

Mine looks like this

/cgminer/cgminer --config /cgminer/cgminer.conf

4. Wright quit that gem and reboot to test. At boot cgminer should be running the the background as root, which is good because you need root privs to access the ASIC device. If your Pi is configured like mine, which it will be if you keep following all my steps you will run headless most of the time cuz the kids have priority on what’s on the TV, then start up PUTTY and login then run TOP to see cgminer in the list. It won’t be taking up too much CPU, maybe like 1 – 2 %.

Administration

Now this is all good and you’re now mining but if you want to check your status you will need to like me ask permission to interrupt Caillou or The Wild Kratts, I won’t interrupt Phineas and Ferb cuz that show rocks! and switch the TV over to your Pi for a few seconds. I don’t like interrupting my kids so I figured there had to be a way to see the session that is configured to boot. I found others that wanted remote capability and they used VNC as the solution. I have used it before for other projects and it works well so I jumped on board but there were a few things that the other tutorials didn’t do or work for me so here is what I did.

I started with and followed a lot from the “Installing VNC” tutorial written by Simon Monk over at learn.adafruit URL = http://learn.adafruit.com/adafruit-raspberry-pi-lesson-7-remote-control-with-vnc/installing-vnc

You can use that tutorial and this one together, if you like switching back and forth or if you like to see nice screen shots, or you can just follow what I have I will make my section titles jive with Simon’s so if you need to you can correlate his steps with mine. I will make it a short and sweet as possible and include anything that gave me a hang up during my install.

Installing VNC

1.

sudo apt-get update

2.

sudo apt-get install tightvncserver -y

3.

vncserver :1

4. Give the prompts what they ask for. Note that the password will be truncated (AKA shortened) to 8 characters so if you put in 123456789 VNC will shorten it to 12345678 so make sure you know how your password will be changed, or just do what I did and pick an 8 character password. If you mess up and forget or fat finger your password just do

sudo rm ~/.vnc/passwd

and redo step 4.

Using a VNC Client

This will come latter, IMO it doesn’t make since to put this right here, it’s better to test at the end.

Running VNC Server at Startup

I could not make VNC server startup the way I wanted to by following Simon … I couldn’t get it to start at all mostly. Unlike Simon’s and other tutorials this will allow you to connect to the user session that starts at boot not an alternate session that would intern run another cgminer instance and whatever else might be in “/etc/xdg/lxsession/LXDE/autostart”.

1.

sudo vim /etc/rc.local

2. Find the line that is

su -l USERNAME -c startx

and comment it out with a “#” so it looks something like this

#su -l USERNAME -c startx

replace USERNAME with a valid username on your box.

3. Add a new line

su - USERNAME -c "/usr/bin/vncserver :1 -geometry 800x600 -depth 16 -pixelformat rgb565 > /tmp/vncserver.log 2>&1 &"

replace USERNAME with a valid username on your box. Mine looks like this

su - bartimaeus -c "/usr/bin/vncserver :1 -geometry 1280x768 -depth 16 -pixelfomat rgb565 > /tmp/vncserver.log 2>&1 &"

4. Write quit that bad boy and reboot to test.

Using a VNC Client (in the right place this time)

1. Open up your favorite VNC client, I like RealVNC’s VNC Viewer, and put in the hostname or IP of you Pi followed by a :1 in the VNC Server or host or whatever spot, mine looks like this

kitty:1

or

192.168.0.2:1

and click connect or go or open or whatever.

2. You might be prompted about the connection being unencrypted just click whatever is equivalent to the don’t bug me again box and click continue or ok or yes or whatever.

3. Enter the password you set up, remember its 8 characters long MAX.

4. If you followed everything right, and I wrote everything right, you should see the desktop with a terminal running cgminer. You should check top to make sure there is only one instance of cgminer running otherwise you just started a new user session and launched a new cgminer instance which won’t do you much good because they will argue over resources and do less work each.

Now that it all works you should follow good industry standard practices and make a backup of you SD card in the event you mess something up in the future or you have hardware issues or you want to make another one of these. At the very lease you should save a copy of this write up someplace local on your system in the even I take it down or something, not that I plan to but again you never know … isn’t that right Perry?

 

UPDATE:

After having the thing run for over a year I was only successful in generating enough Bitcoins for about $40.00. I have since taken it offline.

UPDATE 2:

After several months of not caring about Bitcoins, the mostly death of my phone, made me go look at my Bitcoin wallet. I was surprised to see that the value of Bitcoins had dramatically gone up so that what was once worth only $40.00 was now worth nearly $300.00. So I turned the JalapinoPi back on. Well I had to redo it so that it was working alongside my Weather Underground reporting. With that I ran back through all of this and verified / updated where necessary.