April 10, 2011

How To Backup Securely

This Tech Tip addresses some frequently asked questions about how to safeguard your computer data on a personal and business level. It assumes that you DO NOT have gigabytes of music and movies that require extensive security measures to protect.

1.) How should I begin to secure important data on my desktop computer or laptop?

First, it makes sense to designate 1 or 2 specific folders on your computer as the main folder for confidential file back-ups for several reasons. If you have to do a quick back-up, all you do is copy that folder to an external drive for an instant back-up.

Second, It provides a centralized location for all important data. Instead of having to hunt down the menu, sub-menu, sub-sub-menu of where you normally download company financial spreadsheets, you can set your browser and programs (such as Quickbooks, etc.) to save/download all important files to this folder.

Third, let’s say you only save ALL important files on a flash drive/external hard drive. If your notebook gets lost/stolen, the thieves only have the programs and not the actual confidential files which are on the cheap flash drive.

2.) Great, now how do I actually back-up my designated BACK UP folder(s)?

Secure Data Backup – Geeks.comHere’s where it gets tricky. You have several back-up options such as:

A.) Cloud – Services such as Carbonite and Mozy offer low-priced back-up solutions. You basically upload all your confidential files to their cloud servers and are able to access them anywhere in the world where there is Internet access. The main issue is that, from a business security perspective, you have no idea where your data is stored. If, for example, it’s stored in a server farm in China which gets hacked, then you’re in trouble.

Secure Data Backup – Geeks.comB.) External Hard Drives – These nifty devices come in portable 2.5” and larger 3.5” flavors and offer more than generous dumping grounds for all things important. Once you plug it in, your OS recognizes it and pops you up with a folder showing it as a (giant) external drive with a letter (i.e. G:) Some even feature OTB (One Touch Backup) so you press one button and it backs up either your entire system or certain portions of it. Some external hard drives offer plug-in encryption that prevents unauthorized access. The issue with this solution is that you have to lug it around, which means it has a chance of getting lost/stolen and the formality of performing a back-up might become time-consuming to some.

Secure Data Backup – Geeks.comC.) Flash Drive – These little drives are more nimble, have zero moving parts and are highly portable. Unfortunately, this is also its Achilles’ Heel as its relatively small size makes it prone to becoming misplaced or stolen. Also it does not have the capacity of a larger external drive. The good news is that some flash drives have built-in encryption which can be useful if it lands in the wrong hands.

Secure Data Backup – Geeks.comD.) Home/Office Network Attached Storage Drive – Also called NAS, this is an excellent solution for comprehensive back-up protection as these hard drives function as dumping grounds for an entire home or office network. It provides a centralized location for files, folders and documents which any connected computer can access and come in large drive sizes. However, security precautions should be utilized if the NAS has built-in measures as an unsecured NAS may be prone to prying eyes. For example, a NAS without security protocols activated while connected to a home Wi-Fi network is prone to being breached. Because of this, it’s crucial to configure the NAS security as well as the router/network security for optimal protection.

Secure Data Backup – Geeks.comE.) Backing up to CD/DVD/Blu-Ray – Optical media back-up is actually a very cost-effective solution because CDs and DVDs are very cheap nowadays. Furthermore, if you’re looking to close the books for a certain month on your business, burning to a CD-R or DVD+R sets the data in stone so it can’t be manipulated on the disc. The problem is that if you have lots of data to back-up, the formality of using several CD-R or DVD-R discs to save might also become time consuming. In addition, you would have to make sure said back-up discs are placed in a safe place where the chance of it getting stolen is minimized.

3.) Which back-up method should I pick?

Secure Data Backup – Geeks.comWhile the above solutions offer many ways to back up your confidential data, the best way to minimize a data breach/loss is to follow a combination of multiple back-up solutions and proactive behavior. For example, it would be a good idea to store important sensitive data on your flash drive and encrypting it with TRUE Crypt while also saving duplicate file copies on your home NAS drive via secure VPN connection. If your flash drive is lost/stolen, True Crypt prevents the drive from being used without proper credentials and you can still access the very same duplicate files on your NAS server.

Regarding proactive behavior, you should be mindful of back-ups so you don’t lose something you wish you saved 2 weeks ago.

There are also programs out there that can help secure data such as:

  • Folder Lock – Locks and can hide any folder you wish from prying eyes.

  • True Crypt– secures drives with extensive hardware encryption.

  • Acronis Drive Cleaner – Completely erases all drive data with several methods (DoD, Gutmann method, etc.) – works great if you’re planning to get ride of old computer hardware.

Remember, it’s all about being proactive and being mindful of what back-up security solutions to use for your personal or business needs!

Permalink • Print • Comment

January 10, 2011

10 PowerShell commands every Windows admin should know

Over the last few years, Microsoft has been trying to make PowerShell the management tool of choice. Almost all the newer Microsoft server products require PowerShell, and there are lots of management tasks that can’t be accomplished without delving into the command line. As a Windows administrator, you need to be familiar with the basics of using PowerShell. Here are 10 commands to get you started.

Note: This article is also available as a PDF download.

1: Get-Help

The first PowerShell cmdlet every administrator should learn is Get-Help. You can use this command to get help with any other command. For example, if you want to know how the Get-Process command works, you can type:

Get-Help -Name Get-Process

and Windows will display the full command syntax.

You can also use Get-Help with individual nouns and verbs. For example, to find out all the commands you can use with the Get verb, type:

Get-Help -Name Get-*

2: Set-ExecutionPolicy

Although you can create and execute PowerShell scripts, Microsoft has disabled scripting by default in an effort to prevent malicious code from executing in a PowerShell environment. You can use the Set-ExecutionPolicy command to control the level of security surrounding PowerShell scripts. Four levels of security are available to you:

  • Restricted — Restricted is the default execution policy and locks PowerShell down so that commands can be entered only interactively. PowerShell scripts are not allowed to run.
  • All Signed — If the execution policy is set to All Signed then scripts will be allowed to run, but only if they are signed by a trusted publisher.
  • Remote Signed — If the execution policy is set to Remote Signed, any PowerShell scripts that have been locally created will be allowed to run. Scripts created remotely are allowed to run only if they are signed by a trusted publisher.
  • Unrestricted — As the name implies, Unrestricted removes all restrictions from the execution policy.

You can set an execution policy by entering the Set-ExecutionPolicy command followed by the name of the policy. For example, if you wanted to allow scripts to run in an unrestricted manner you could type:

Set-ExecutionPolicy Unrestricted

3: Get-ExecutionPolicy

If you’re working on an unfamiliar server, you’ll need to know what execution policy is in use before you attempt to run a script. You can find out by using the Get-ExecutionPolicy command.

4: Get-Service

The Get-Service command provides a list of all of the services that are installed on the system. If you are interested in a specific service you can append the -Name switch and the name of the service (wildcards are permitted) When you do, Windows will show you the service’s state.

5: ConvertTo-HTML

PowerShell can provide a wealth of information about the system, but sometimes you need to do more than just view the information onscreen. Sometimes, it’s helpful to create a report you can send to someone. One way of accomplishing this is by using the ConvertTo-HTML command.

To use this command, simply pipe the output from another command into the ConvertTo-HTML command. You will have to use the -Property switch to control which output properties are included in the HTML file and you will have to provide a filename.

To see how this command might be used, think back to the previous section, where we typed Get-Service to create a list of every service that’s installed on the system. Now imagine that you want to create an HTML report that lists the name of each service along with its status (regardless of whether the service is running). To do so, you could use the following command:

Get-Service | ConvertTo-HTML -Property Name, Status > C:\services.htm

6: Export-CSV

Just as you can create an HTML report based on PowerShell data, you can also export data from PowerShell into a CSV file that you can open using Microsoft Excel. The syntax is similar to that of converting a command’s output to HTML. At a minimum, you must provide an output filename. For example, to export the list of system services to a CSV file, you could use the following command:

Get-Service | Export-CSV c:\service.csv

7: Select-Object

If you tried using the command above, you know that there were numerous properties included in the CSV file. It’s often helpful to narrow things down by including only the properties you are really interested in. This is where the Select-Object command comes into play. The Select-Object command allows you to specify specific properties for inclusion. For example, to create a CSV file containing the name of each system service and its status, you could use the following command:

Get-Service | Select-Object Name, Status | Export-CSV c:\service.csv

8: Get-EventLog

You can actually use PowerShell to parse your computer’s event logs. There are several parameters available, but you can try out the command by simply providing the -Log switch followed by the name of the log file. For example, to see the Application log, you could use the following command:

Get-EventLog -Log "Application"

Of course, you would rarely use this command in the real world. You’re more likely to use other commands to filter the output and dump it to a CSV or an HTML file.

9: Get-Process

Just as you can use the Get-Service command to display a list of all of the system services, you can use the Get-Process command to display a list of all of the processes that are currently running on the system.

10: Stop-Process

Sometimes, a process will freeze up. When this happens, you can use the Get-Process command to get the name or the process ID for the process that has stopped responding. You can then terminate the process by using the Stop-Process command. You can terminate a process based on its name or on its process ID. For example, you could terminate Notepad by using one of the following commands:

Stop-Process -Name notepad

Stop-Process -ID 2668

Keep in mind that the process ID may change from session to session.

Additional PowerShell resources

Permalink • Print • Comment

January 7, 2011

Four free programs to help control Windows 7



Windows 7, like all powerful operating systems, can seem a bit overwhelming and give you the feeling you've lost control.

Fortunately, there are some great utilities for taming Windows 7.

Some problems are obvious: you've got so many icons on your desktop you've given up trying to keep them organized. Other problems are more obscure — for example, why Windows takes so long to boot. And it's always good to know exactly what hardware and software are residing in your PC.

Here are four free programs that make Windows easier to control. I'm betting you'll find them as useful as I do.

Use Fences to subdivide your desktop

If you're one of those rare people who never ever put anything on their desktops, I applaud your inner neatnik. But if your screen is so packed with file and shortcut icons that you don't remember what your wallpaper looks like, Stardock's Fences (download page) can put some order back into your computing life. (Sorry, it can't do anything about your garage.)

Once installed, this utility lets you create fenced areas on your desktop by double-clicking a blank spot and right-dragging the mouse. After you've created a fence, you give it a name and drag any item on the desktop into it.

You can, for example, create one fence for programs, another for shortcuts to files, and yet another for stuff you plan to delete in the near future. (See Figure 1.) If you put more stuff into a fence than it has room for, it adds a scrollbar. (You can get rid of the scrollbar by removing items from the box or resizing the fence.)

Stardock's Fences
Figure 1. If your desktop is cluttered with dozens of icons, use Fences to corral them into organized groups.

A fenced area can be moved, renamed, or deleted. (The items that were inside the fence remain on your desktop.) Double-click the desktop, and all your fences — plus any unfenced icons — disappear. (Desktop windows remain visible.) Double-click again, and everything comes back.

If you find the double-click-and-hide feature annoying, you can turn it off in Fences' configuration box. You can also control the look of the fences, back up your desktop layout (the backups are misleadingly called "snapshots"), and pick a standardized layout.

Fences is free for personal use, but you can also purchase the U.S. $50 Pro version, which adds default fences for new icons; automatic icon organization by file type, name, and more; icon sorting within fences; plus fence transparency and other powerful features.

The Soluto solution for long boot times

It's one of Windows' most annoying problems: half the programs on your PC want to load automatically every time you boot Windows — and most continue to run in the background indefinitely, soaking up memory and CPU time. Every one of those programs slows the boot process and may even slow down Windows. But in truth, few of them should be running all of the time.

I want to emphasize: I'm not talking about those junk programs you don't want at any time; I'm talking about applications you want running only when you need them — not hanging around using valuable PC resources when you don't need those apps.

Soluto (download page) offers a remarkably easy way to deal with this problem. After you install the app and reboot your system, an odd, turn-up-the-corner-of-the-page graphic shows you that Soluto is examining the PC's boot process. (See Figure 2.) After your system is rebooted, you launch the Soluto app and it displays what it found.

Soluto corner graphic
Figure 2. Soluto's turned-page graphic tells you it's examining your PC's boot sequence.

Reporting its findings within an attractive, graphic-oriented display, Soluto tells you exactly what's launching at boot time (far more than is shown by Windows' built-in msconfig app), how much boot time this takes, and what startup apps might be unnecessary.

It divides the boot-time applications into three categories: No-brainer (remove from boot), Potentially removable (advanced users), and Cannot be removed with Soluto (yet …). (See Figure 3.) Click on any item within a category and you get a brief description; click the description's Advanced link and you get more details, such as what you gain and lose by allowing this program to load at boot time. Should you decide you don't want an app to load at boot, click the Pause button.

Soluto boot report
Figure 3. Soluto's comprehensive system-boot report displays a chart of what apps to keep and what to remove.

The program is far from perfect. It's discouraging to look at its results and see that the Cannot be removed section is far larger than the other two put together. And Soluto itself must launch during startup so that it can block other programs.

Still, Soluto is the easiest solution I've yet found for controlling autoloaders.

Soluto is currently in public beta. I checked with a company contact and was told that the application will remain in beta for some time and that there'll still be a free version once beta testing is finished.

Find out everything about your computer

System Information for Windows (SIW, download page) provides a massive amount of information about your PC's hardware, the Windows version running on it, and the network it's attached to. Most of this information is available elsewhere, but SIW puts it all into one convenient place. (See Figure 4.)

System Information for Windows
Figure 4. System Information for Windows provides an encyclopedic summary of your PC's data.

Here's a taste of what it can show you:

  • CPU and memory usage
  • Broadband speed report
  • Windows' activation status
  • Available restore points
  • Every installed program's version number and update URL
  • Computer serial number
  • PC's Windows Experience Index
  • Maximum system RAM capacity and snapshot of what's currently in memory
  • How hot a PC is running, in Celsius and Fahrenheit
  • Your system's IP address
  • Open network ports

System Information viagra for sale without prescription for Windows is portable; you can put it on a flash drive and run it on any Windows PC. The program is free for personal use, but professional versions will set you back $70 to $100.

Take control of when your PC powers down

You're done with the day's work, but you're not ready to shut down your PC. Maybe you're backing it up or scanning for malware, or maybe you want to give family members network access to your photos or music for the evening. But you also want to save power by not leaving the system on all night.

WinMend Auto Shutdown (download page) does exactly what the name implies. It automatically powers down your PC at a time you set. (See Figure 5.) It can also sign you off your system or put a PC into hibernate or sleep mode.

Auto Shutdown lets you specify a one-time date and time for power-down or set up a daily recurring schedule. There's also a countdown option; you can, for example, shut down the PC in two hours or put it into sleep mode within 30 minutes.

WinMend Auto Shutdown
Figure 5. WinMend's Auto Shutdown lets you shut down your PC exactly when you want to — without being there.

Auto Shutdown is completely free, though the site does have a donation link.

Feedback welcome: Have a question or comment about this story? Post your thoughts, praises, or constructive criticisms in the WS Columns forum.


Lincoln Spector writes about computers, home theater, and film and maintains two blogs: Answer Line at PCWorld.com and Bayflicks.net. His articles have appeared in CNET, InfoWorld, The New York Times, The Washington Post, and other publications.

Permalink • Print • Comment

December 20, 2010

USB Drive AutoRun.inf Tweaking

The autorun.inf file is the key to getting your USB drive (or CD-ROM drive, for that matter) to perform certain actions automatically and customize it’s look in My Computer. The purpose of this article is to shed some light on how this can be done.

Autorun.inf Structure

The autorun.inf file is a simple text file that can be opened up in any text editor (e.g. notepad). It always starts with a section header of:

[autorun]

Below this header is a list of different options. Each of these options is in the following format:

option=value

where

option is the option that you want to set and value is the value that you are setting for that option. So, if you had an option foo and you wanted to be set to bar, then you would enter:

foo=bar

(Do not use foo=bar in your autorun.inf file as it is only an example, not a real option setting.)

That is all there really is to understand about the structure of an autorun.inf file. On to doing some actual cool stuff with it!

Setting a Custom Icon

To create a custom icon for your USB drive, use the icon option. Set it to the name of the icon file.

Note: Since drive letters can change for USB drives, the file path is relative to the root of the drive. This means that if your USB drive is presently mounted on U: and your icon is located at U:\Icons\MyIcon.ico, then you would enter \Icons\MyIcon.ico for the value of this option.

For example, if you had an icon on the root of the USB drive called coffeecup.ico and you wanted this to be the icon that showed up for the USB drive, you would enter:

icon=coffeecup.ico

You are not limited to .ico files. If, for example, you have an executable with a nice icon, you can specify it as the icon file. For example:

icon=DCoTopen.exe

This is valid as long as DCoTopen.exe is available on the root of the USB drive.

Some files have more than one icon embedded in them. If this is the case, you can select which icon to use by specifing the index number after the file name. For example:

icon=iconlib.dll,2

This will use the second icon in the iconlib.dll file.

Naming Your USB Drive

If you would like your USB drive to display a specific name othr than the drive label created when it is formatted, use the label option. For example, if I wanted to call my drive DCoT Drive, I would add this to my autorun.inf file:

label=DCoT Drive

Now, when you look at your USB drive in My Computer, it will say DCoT Drive by the drive letter.

Setting AutoPlay Options

AutoPlay is a relatively new function of Windows XP. It allows you to set up what file is run when the USB drive is plugged into the computer and the message that you are prompted with. There are two options that work in conjunction with AutoPlay. The first is open. It specifies the program that you can run automatically with AutoPlay. So, if we wanted to run a program called DCoTopen.exe, you would add the this to your autorun.inf file:

open=DCoTopen.exe

The second option that we add is the message the user is prompted with. To set this, we use the action option. If we want the message to say DCoT Open Program, add the following to autorun.inf:

action=DCoT Open Program

Once you have added this information, AutoPlay should look something like this:

 

AutoPlay

 

Adding Context Menu Items

There are certain basic options such as Open and Explore that are available when you right click on a USB drive. But, wouldn’t it be cool to add your own? You can using a couple of lines in the autorun.inf file.

The first thing that we need to do is create an action, give it a name, and a message. We do all of this using the shell\verb option. For example, let’s say that we would like to create an action called lost. It does not matter what the actin is called. It can be anything you want. We would also like to show the message Help! I’m Lost! in the context menu. We would simply add this line to autorun.inf:

shell\lost=Help! I'm Lost!

This will display Help! I’m Lost! in the context menu so that you can click on it. But, it doesn’t know what to do when you click on it. Tell the system by using shell\verb\command option. In our example, we want to run the Lost.exe application. Adding this line will do the trick:

shell\lost\command=Lost.exe

viagra faq

You can add as many of these line pairs as you want to make the context menu as custom as you want.

Changing Default Action

When you double click on your USB drive, by default it will open up the drive so that you can browse through the files. Often, it is advantageous to perform some other action when the user double clicks the USB drive icon. You do this with the shell option. If we wanted to run the Lost.exe program from the previous section automatically when we double clicked on the USB drive, we would add this line:

shell=lost

because lost is the name of the action that was specified in the earlier lines.

Viewing a File

If you wanted to view a file on your USB drive in the default application instead of running a program on the drive, you can substitute the open option for the shellexecute option. For example, if you wanted to open up a website called, oh, I don’t know, say http://www.DailyCupOfTech.com in the default web browser, you could user the following:

shellexecute=http://www.DailyCupOfTech.com

This will work for any file. This is the equivalent of using Start – Run… and then typing in a file name and clicking OK.

School’s Out, Time To Play!

That is about all there is to customizing the autorun.ing file. Now that you know what you are doing, it’s time to start playing! I have created the Autorun Dabbler’s Toolkit that you can play with.

Download the zip file and extract the contents to the root of an empty USB drive. You can now edit the autorun.inf and get it to do different things. Have fun!

Permalink • Print • Comment

Autorun.inf – Commands

Below are some of the commands/entries in the Autorun.inf file described briefly. A more detailed description can be found at the following Microsoft page: Autorun.inf Entries
 
OPEN =

The OPEN command specifies the path and file name of the application that AutoRun launches when a user inserts a disc in the drive. You can also specify parameters/arguments to the application.
 
ICON =

The ICON command specifies an icon which represents the AutoRun-enabled drive in the Windows user interface. The icon is normally an .ico file, but can also be a .bmp, .exe or .dll file containing icon information. The icon file must be in the same directory as the file specified by the OPEN command.
 
LABEL =

The LABEL command specifies a text label which represents the AutoRun-enabled drive in the Windows user interface. This text label is for example in Windows Explorer showed to the right or below the drive icon.
 
SHELLEXECUTE =

The SHELLEXECUTE command opens a document or starts an application. Mostly used to open documents automatically. Requires Windows ME/2000 or newer.
 
SHELL =

The SHELL command specifies a default command viagra effects on women for the drive's shortcut menu. The shortcut menu of the drive is the menu that is opened when the user right clicks on the drive icon.
 
SHELL\VERB =

The SHELL\VERB command adds a custom command to the drive's shortcut menu. This custom command can for example be used to launch an application on the CD/DVD.
 
ACTION =

ACTION is a command that was introduced with Windows XP SP2. It is not supported in Windows before that. This command specifies a text that should be shown as the first option in the Windows Autoplay dialog, together with the icon specified by the ICON. This option is always selected by default and if the user accepts the option, the application specified by the OPEN or SHELLEXECUTE entry in the media's Autorun.inf file is launched. As an alternative, the SHELLEXECUTE command can also specify a document instead of an application.

Permalink • Print • Comment
« Previous PageNext Page »
Made with WordPress and a search engine optimized WordPress theme • Sky Gold skin by Denis de Bernardy