Monday, October 29, 2012

Installing Windows 8 on HP EliteBook 2760p

A client bought Windows 8 Pro. She asked me to install it on her HP EliteBook 2760p. If you're familiar with this device then you know it's a combination device, i.e., a laptop/tablet model with a 360 degree rotation touchscreen monitor connected to a keyboard dock making for a very nice device. The specs are 4 GB ddr3 ram, intel core i5 vPro 3.0 GHz processor, 320 GB hdd running Windows 7 pro.

She didn't want to keep any files. She wanted a clean installation. Since the device doesn't have a dvd drive, I had to copy the install files from the windows 8 pro dvd to my usb drive then run the install from windows explorer. So far, it has been a simple install. Very direct so as to not confuse the user, which makes for a very user friendly install. I was asked if I wanted to install updates, I checked yes. After installing updates, Windows 8 wanted the product key. I decided to give the product key. I was then asked if I wanted to keep any files (all files meaning applications; personal files meaning documents/music/pics; or nothing at all), I checked 'nothing at all.' It checked my environment. After that, I was shown how Windows 8 would be installed. Very simple. In fact, this has been the simplest OS installation in my entire tech life (yes, I've installed linux, apple, and windows operating systems).

I started the install at 10:40. At 11:05 windows was installed. By install, I mean now the only thing left is personalization.

UPDATE 10/31/2012

I've failed to get back to this post for update. During personalization, I didn't attempt to use the touch screen. Well, when I tried to use 'touch' it wouldn't work. The touch screen was not functional. I went to device manager to see if there were any problems and yes, there were. So, I went to HP, found the elitebook 2760p, then installed the chipset driver. After the install, the touch screen functioned and all was well with the elitebook.

Ge the drivers for the elitebook
HP Elitebook 2760p drivers (the windows 7 64 bit driver works for Windows 8 Pro)

Wednesday, October 24, 2012

Resources on Windows 8

It's coming. Two days until it's here. What am I talking about? Why, I'm talking about Windows 8. It's a sexy beast and you're going to need to know about it because it's the next big thing.

Windows 8 Resources
Free ebook from Microsoft Press: Introducing Windows 8
Free videos from Total Seminars' Mike Myers on Windows 8
My IT Forum's best Windows 8 Resources

Enjoy!

Tuesday, October 23, 2012

My internet broke! What do I do?



You've heard it many times. You get the call from an employee, family member, or friend (sometimes all three-shudder) telling you something like, "I can't get on the internet. Help!" This will vary depending on your crisis stricken caller's techie-ness, of course, but they're basically telling you, "Hey, my internet is broke. Fix it. Now. I need to check my [insert preferred social media site here], then my email, then youtube to watch funny animals and people falling down, then some gossip columns, then amazon."

What do you do?

I remember in college and during my CompTIA studies that the number one, most important thing you do before anything else is interrogate the person you're helping. What were you doing when this happened? What was the last program you used? Did you hear any noises? Did any error messages pop up on the screen? And so on. That's important, sure, but that kind of approach really depends on the person doesn't it? In my experience the bulk of persons tell me what they can't do and then leave me. I used to try and ask questions, but those questions got me nowhere fast or slow. My approach is to ask the person what they can't do and what they want to be able to do. Quick. Simple. Then the person can leave while I try to make that happen.

To fix the "internet is broke" problem we'll make a list. This list I use at for home users and business users.

Determine environment
Is this PC a member of a domain? Is it a type of server? Is it workgroup PC? Is it a stand-alone PC? This is the number one thing to find out. If it's a stand-alone PC then you won't have to go through as many tasks as a PC that is a member of an active directory domain, right?

Renew the IP address
First and foremost, the easiest fix may be renewing the IP address if it's a device that utilizes DHCP. To determine if it is go the command prompt ( start, run cmd.exe for XP users, start search cmd, click on cmd for vista and above users) and enter the following command: ipconfig /all Look for the word 'DHCP Enabled' You should see to the right of that a 'Yes' or 'No.'

If DHCP is enabled, then run the following commands while still in the command prompt: ipconfig /release then ipconfig /renew This could fix the problem

Flush the DNS cache
DNS is darn important for web browsing. Let me say that again: DNS is darn important for web browsing. When a person looks up sites on the internet your device keeps a record of the DNS "stuff" for that site in some files on your device for quicker lookup time when you visit the site again. Sometimes, the DNS information (cache for us techies) stored on your device can get "messed up" (corrupted, no longer valid information) and this can cause you to not be able to visit certain sites. Well, this can be fixed. While a simple reboot can do the trick, entering following command at the command prompt is quicker: ipconfig /flushdns If successful the cmd prompt will return the following: Windows IP Configuration Successfully flushed the DNS Resolver Cache

Now, this method will work for a stand-alone PC, but what if the PC is a networked PC? For example, if it's a PC connected to a router. Well, the router also has a DNS cache. If that is corrupted, then it needs to be fixed. Reboot (turn off, then turn on) the router to fix the problem.

What if the PC is connected to a domain that has a DNS Server? The DNS server also has a DNS cache. How do you clear the DNS cache on a Windows DNS server?
  1. Open DNS in your Windows Server
  2. In the tree click on the DNS server(s)
  3. On the action menu (or right clicked menu), click clear cache.
Reset IE to Default Settings
These steps work for IE 7, 8, and 9.

In IE, go to Tools > Options
The Options windows opens. Click on Advanced. You should see a Reset button in the lower right portion of the window under a heading that reads, "Reset Internet Explorer Settings." Click on the Reset button.
In the Reset Internet Explorer Settings Dialog box, click on the Reset button.
After a little bit, IE will be return to the default state. 

Dive Into the Windows firewall configuration
For Windows 7 users, click start and in the search bar type 'windows firewall' then click enter. For Windows XP users go to control panel then find Windows Firewall.

Try disabling rules/exceptions one at a time, checking internet searching after disabling each one. You might find that a certain rule/exception is blocking internet all together or certain sites.


Reset TCP/IP
If you can't connect to the internet, the TCP/IP protocol may be corrupted. If it is, then you'll need to reset this protocol using the netsh utility via command prompt logged in as an admin.

1. Open command prompt as an admin (start, run cmd.exe for XP users, start search cmd, right click cmd, run as admin for vista and above users).
2. At the command prompt, enter the following command and then press ENTER: netsh int ip reset c:\resetlog.txt  By the way, you don't have to specify a directory path for the log file. If you don't want to, drop the "c:\" from the "resetlog.txt" portion of the command.
3. Reboot the computer.

Repair Winsock
If resetting TCP/IP didn't work, for example, if you're still getting "page cannot be displayed" when trying to access a site, or if Filezilla isn't working correctly then it may be a Winsock problem. Run the following command in command prompt as an admin to repair winsock netsh winsock reset catalog After repairing winsock (you're taking it back to default configurations) you may, MAY, have to reinstall services that use winsock.

Reset the default hosts file *copied and pasted from Microsoft*
To reset the Hosts file back to the default, follow these steps:
  1. Click Start, click Run, type %systemroot% \system32\drivers\etc, and then click OK.
  2. Rename the Hosts file to Hosts.old.
  3. Create a new default hosts file. To do this, follow these steps:
    1. Right-click an open space in the %WinDir%\System32\Drivers\Etc folder, point to New, click Text Document, type hosts, and then press Enter.
    2. Click Yes to confirm that the file name extension will not be .txt.
    3. Open the new Hosts file in a text editor. For example, open the file in Notepad.
    4. Copy the following text to the file:

      For Windows XP or for Windows Server 2003
      # Copyright (c) 1993-1999 Microsoft Corp.
      #
      # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
      #
      # This file contains the mappings of IP addresses to host names. Each
      # entry should be kept on an individual line. The IP address should
      # be placed in the first column followed by the corresponding host name.
      # The IP address and the host name should be separated by at least one
      # space.
      #
      # Additionally, comments (such as these) may be inserted on individual
      # lines or following the machine name denoted by a '#' symbol.
      #
      # For example:
      #
      #      102.54.94.97     rhino.acme.com          # source server
      #       38.25.63.10     x.acme.com              # x client host
      
      127.0.0.1       localhost
       
      For Windows Vista or for Windows Server 2008
      # Copyright (c) 1993-2006 Microsoft Corp.
      #
      # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
      #
      # This file contains the mappings of IP addresses to host names. Each
      # entry should be kept on an individual line. The IP address should
      # be placed in the first column followed by the corresponding host name.
      # The IP address and the host name should be separated by at least one
      # space.
      #
      # Additionally, comments (such as these) may be inserted on individual
      # lines or following the machine name denoted by a '#' symbol.
      #
      # For example:
      #
      #      102.54.94.97     rhino.acme.com          # source server
      #       38.25.63.10     x.acme.com              # x client host
      
      127.0.0.1       localhost
      ::1             localhost
       
      For Windows 7
      # Copyright (c) 1993-2006 Microsoft Corp.
      #
      # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
      #
      # This file contains the mappings of IP addresses to host names. Each
      # entry should be kept on an individual line. The IP address should
      # be placed in the first column followed by the corresponding host name.
      # The IP address and the host name should be separated by at least one
      # space.
      #
      # Additionally, comments (such as these) may be inserted on individual
      # lines or following the machine name denoted by a '#' symbol.
      #
      # For example:
      #
      #      102.54.94.97     rhino.acme.com          # source server
      #       38.25.63.10     x.acme.com              # x client host
      
      # localhost name resolution is handle within DNS itself.
      #       127.0.0.1       localhost
      #       ::1             localhost
    5. Save and then close the file.
Network Devices
If this PC is connected to a network then the problem may very well be another PC or device causing the internet problem. Doing the above suggestions all day long won't fix the issue if another device on the network is the culprit.

Monday, October 15, 2012

How to Use Google Maps on iOS6

Have you heard? No Google maps app on Apple iPhone's iOS6. Yep. That's right. This makes sense for Google, of course, because Google is in competition with Apple. Basically Google is saying, "Hey, competitor, make your own mapping app." While the Google maps app is not available for the iphone, there is a workaround so don't despair. No, it's not the app, but it's still google maps.

Go to Safari. Type in Google in the address bar. Once you're there, click on "maps." You might be asked by the browser if you'd like to add a shortcut icon to your home screen. Do it and now you'll be able to access Google maps on your newly updated iphone. No, it's not perfect and accessing Google maps through the web isn't as fluid as the app version; however, currently, this is the only way to use Google maps on your iOS6 smartphone.

Wednesday, October 10, 2012

Change the Interface DHCP Lease Is Bound To in Sonicwall

* Note: this blog post is about Sonicwall firmware version "SonicOS Enhanced 5.8.1.5-46o"

So you've went through the VPN wizard. It's running. You have people using it. It's great. Oh wait! What's that? In your security log you see "attacks" labeled as "IP Spoof." Looking at the log, it shows the user logging in on interface X0, but their IP on your network is a X2 address. Sonicwall thinks it is an IP spoof. You see the external IP. You recognize the external IP is from one of your remote sites. It's no threat, but you would like for Sonicwall to not log it anymore. How do you fix it? I'm glad you asked.

Example setup.
X0\ LAN\ Static\ 192.168.10.XXXX\ you use this for DHCP for your wifi users
X1\WAN
X2\ LAN\ Static\ 192.168.1.XXXX\ this is your production network that doesn't utilize DHCP every user on this network has a static IP

In your VPN setup, Sonicwall binds the DHCP lease to the interface that uses DHCP (genius idea right?). So you've built this VPN connection. On the client's machine, you install the Sonicwall VPN client software to connect to the network. You want her to be on the production network though, so you change the virtual adapter the Sonicwall client uses on her machine to a 192.168.1. address. Now, she is able to access production network resources like she wanted. Great.

Back home, you see in the security logs, the IP Spoof stuff. How is that fixed? In the Sonicwall admin panel, go to VPN\DHCP over VPN. Click the dropdown box, select Remote Gateway then click configure.


You should see the following, "DHCP Lease Bound To:" and a dropdown box next to that with the various interfaces. Following our example above, choose the X2 interface so the client will be on the production network when logged in using the VPN.

Then click OK. You might see a goofy red message, but it won't keep you from making the change to the DHCP lease binding.

Tuesday, October 9, 2012

Hardware Firewall Is a Must

From TechRepublic's recent "10 Things" blog:

6: Deploy a hardware-based firewall Let’s face it: The built-in Windows firewall is simply not sufficient. If you want real security, you need a dedicated firewall on your network. This firewall will be a single point of entry that will stop many more attempted breaches than the standard software-based firewall will. Besides, the hardware-based fire will be far more flexible and customizable. Look at a Cisco, Sonicwall, or Fortinet hardware firewall as your primary protection.  

This is an excellent, excellent, (did I say excellent?) recommendation. If you or your business is connected straight to your modem without any border protection from the external world then you're in jeopardy and by jeopardy I don't mean the game show, I mean trouble. Why? Because your PC or group of PCs have an external IP. Your device doesn't have a bouncer to keep the bad guys and crap out of your house. You don't have that extra layer of protection that a connected device needs to operate more securely. Now, don't think a hardware firewall will make you invincible. I don't want to paint the wrong picture. I do mean to say that a hardware based firewall along with other security measures can make you more secure. 
 What are the benefits of a hardware based firewall?
   
1. NAT
*cue hissing* Some techs don't think NAT is a security feature, but I do. There is some mystery regarding NAT. Was it meant for security? Was it not meant for security? I think it's up in the air. Even so, I think it's fair to say that NAT gives *some* security in that it gives your device a local IP instead of your public, external IP. Intruders, the green ones conservatively speaking, won't know your device's IP which does help. No, it's not a super excellent security feature, but it's just another layer of protection that is nice to have while we're still mostly in a IPv4 world. 
 

2. Rules
With a hardware based firewall, you can make firewall rules which are rules that you create to allow the traffic you want coming in and leaving your network. You can make as many or as little rules as you like. Don't want RDP sessions coming in to your network? Block it. Don't like WMI packets coming in? Block those too. It's customizable. Some techs start by blocking everything then slowly unblocking ports as the days progress. For example, a tech had most ports blocked. He downloaded WoW was able to run some of it, then realized he needed to open certain ports for the game, so he did. That's what I mean by some techs block everything, then slowly open ports when the situation occurs. You don't need everything open right out of the gate. Only open ports that you need open. 
 

3. Logs
Yeah, Windows and other OSs have log views, they're limited to your system though. With a hardware firewall you'll have logs informing you who and what was trying to access your network. You'll see your rules working. You'll see intrusions prevented, this app allowed, another app blocked and so on. It's helpful. It's encouraging. You can see your firewall at work or not at work. You'll see what's getting in, out, and blocked. 
Those are three reasons I can think of right away for getting a hardware firewall. You don't have to spend hundreds of dollars on a hardware firewall either. Routers come equipped with firewalls. For my home I use a Netgear wireless router that is excellent for my home setup. The firewall provides good protection, customization, and it's easy to use. Buy one. 

 Netgear WNR3500L this link gives you the specs and has links to the stores it's sold at.   

* I didn't make the image used in this blog post. I found it in a google search from this website.