search for: sysinternals

Hi all, Sysinternals have just released a version of their autoruns command line tool that's capable of scanning an offline windows install for images configured to start automatically (very useful for tracking down malware). How likely is it that it could be made to run under wine on Ubuntu? I've got to the...

psexec util (from sysinternals) is a tool which allows to execute commands on a remote Windows machine. A command like that: psexec.exe \\192.168.1.147 -u Administrator -p password C:\test.bat would run C:\test.bat as administrator on a Windows workstation with IP address 192.168.1.147. Quite cool, you don't have to in...

Gert van den Berg wrote: > A drivers houldn't be needed for registry files copied from another PC and not actively loaded? Only kernel can load registry. And obviously if you trying to load registry that overrides your system registry one need some drivers to work around that. Of course you can open registry hive as a simple file and try to parse it. However this isn't trivial and

I thought that accessing an "Offline" registry file is like parsing a copy of a registry file that is not in use or, like you said, actively loaded by the oprating system. Registry files in Windows are normally located under "C:\WINDOWS\system32\Config" for system hives and "C:\Documents And Settings\Username" for user hives. I open these files in

Anyone ? Thanks, LP

...ation: idmap backend = rid:DOMAIN=500-100000000 idmap gid = 500-100000000 imap uid = 500-100000000 It seems to work for groups: wbinfo --group-info="domain admins" domain admins:x:100512 PsGetSid v1.43 - Translates SIDs to names and vice versa Copyright (C) 1999-2006 Mark Russinovich Sysinternals - www.sysinternals.com SID for DOMAIN\domain admins: S-1-5-21-xxxxxxxxxx-xxxxxxxx-xxxxxxxxxx-512 But not for users: wbinfo --user-info=administrator administrator:*:10027:10005:Administrator:/home/DOMAIN/administrator:/bin/zsh SID for DOMAIN\administrator: S-1-5-21-xxxxxxxxxx-xxxxxxxxx-xxxxxxx...

Hi all, Dave Burt mentioned the possibility of adding symlinks to the Dir class. http://www.sysinternals.com/ntw2k/source/misc.shtml#junction There is also Autrijus Tang''s symlink Perl module at http://search.cpan.org/~autrijus/Win32-Symlink-0.04/ Looks easy enough, but it only seems to work for directories, not regular files. Should we add this to the Directory class, or simply define it...

Hi everyone, in samba 4.5 changelog, it says that samba AD now supports tombstone reanimation. I've been used to ldbrename and ldbmodify to reanimate objects to keep objectSID, but if it is now officially supported, it would be better to use the proper way. Sysinternals tool adrestore [1] seems to be working properly (it does not restore most attributes, but this is expected since recycle bin is not yet supported. Replication after adrestor'ing an object is fine. I did'nt found an equivalent with samba-tool. Is using adrestore windows command line a pr...

Hello all, I've scoured the RODBC.pdf, but there appears to be no way to set the name of the RODBC connection. This is useful for the DBA's to know that some processes should only run for so long and can be automatically killed. But currently the name is just R. so they aren't sure if the connection can be automatically killed. We are able to set this with our perl ODBC interfaces

...th SID's... they'll all be the same. That's a bad thing. Maybe you have a need to change a SID... perhaps a dual-boot box where you want the computer names and IP addresses to be the same. This is all assuming you have the proper number of software licenses, of course. If you go to the Sysinternals website ( http://www.sysinternals.com/ ) you can download NewSID, a free SID changing program. Source code is available. For more info on NewSID, go to http://www.sysinternals.com/ntw2k/source/newsid.shtml I have NOT tried this software, so I can't help you use it. --Jonathan Johnson jon@sut...

I was wondering if there is a pstools / psexec (tools by Sysinternals) equivalent, which could be run on Linux machine to execute a process on a remote Windows machine?

Hi, I've got a simple PHP script which is using psexec from sysinternals to execute commands on a remote machine (which uses SMB under the hood). If I run it from DOS it works fine. If I run the same script via apache it hangs. Fired up Wireshark and had a look at what was going on. In the working version the treeconnect calls go to the IPC$ and then the ADMIN$ accounts...

...ally <100K/s. > > I know that it is not likely to be samba's fault in regards > to the speed, since I get *up to* 100MB read/write to samba during > benchmark testing. > > >> >> >>> >>> maybe some antivirus interaction? >> Will check with sysinternals but assume no, because oft he >> locally-is-everything-fine thing. >> >>> >>> the login/logouts -- read about them on MS's website...look up >>> under profile loading ... it talks about how multi-gig profiles >>> will really slow down first time l...

Hello dear Samba users! My setup: ================= Server: - openSUSE 11.2 - 64 bit - Samba 3.4.3 running as PDC. Roaming profiles active - DNS Server (bind 9) - DHCP-Server, which dynamically updates the zone files of the DNS Client: - Windows 7 Professional - 64 bit, english My problems: ================= 1. The first time when I login a new user on the client, it takes

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, Does anyone have a good suggestion for patching XP clients on a Samba PDC domain? I've tried using autoit and sysinternal's psexec to write a script to do this but this doesn't work well because the computer has to be active and our machines lock the machine if it's not active in 15 minutes. I hate having to log onto every

I see that Microsoft has a utility that (apparently) can read a running system and create an image that can then be imported and run on Virtualbox. https://docs.microsoft.com/en-us/sysinternals/downloads/disk2vhd "You can even have Disk2vhd create the VHDs on local volumes, even ones being converted (though performance is better when the VHD is on a disk different than ones being converted)." Is there anything that does the same thing for Linux, and can image a system like tha...

Hi, I am experiencing a strange issue on our Samba PDC (3.0.24). Today I got called up by a user who was unable to open certain files from a samba share. He can open .doc, .xls, .pdf, etc. just fine, however, if he tries to open a .mdb file or an executable program from that share, he gets a permission denied message. Opening the same files from another user account logged into the same

Greetings All, Without going into the specific reasons why I need to do so, is anyone aware of a method (or tool) of watching real-time, human-readable (or system call print) of ext3 filesystem operations on a mounted, active filesystem? Excuse me if this is a duplicate question but I was unable to find any similar ones in the archives. Thanks in advance! Kevin Strong Criminal Information

Already try the pre realease 0.3. The rtpeer.rb is working. But I don''t know why is take quite a while to listen only port 6969. The after that start to scan port 6881,6882..etc. After that manage to download the file normally. As usual I run everything in one PC. Azureus, ABC, and rubytorrent. The example on "doc\api.txt" still doesn''t work for me. I am very hapy the

...onment (files are marked writable, I already checked). The MSBuild infrastructure isn't used by VS 2005 for C++ projects; rather, VCBuild does the work. I'm not sure about VS 2008. FWIW, I used ProcMon to diagnose file-handling issues I had in my build: http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx -- Barry -- http://barrkel.blogspot.com/