Disable USB Port in a Windows Operating System Computers

You can disable access to your USB ports in your Windows base PC, to prevent people from taking out data from your personal PC without permission or spreading viruses through the use of USB thunderbolt drives.

For do that follow the next steps:

1. Go to http://technet.microsoft.com/en-us/sysinternals/bb963880.aspx and download "Regjump".
2. Unzip "Regjump.zip" file and save "Regjump.exe" file in "System32" folder.
3. Now open "Command Prompt" as Administrator, and type "regjump HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\USBTOR".
4. In the "Registry Editor" window, in the Work Area double click on "Start" key.
5. In the "Edit DWORD (32-bit) Value" window, in "Value data:" delete 3 and type 4.
6. Click OK.
7. Close "Registry Editor" window.

If you want re-enable access to your USB ports, fallow the above steps. In the step 5 change the value data from (4) to (3).

Enjoy it :)

NOTE: Regjump is a small utility by Microsoft that can be used to open the registry editor to a specified key.

Event ID: 4015 Source: DNS-Server-Service on Windows Server 2008 and Server 2012

If you recently installed a Windows Server 2008 or Windows Server 2012 Domain Controller; all seems to be running well but have notice you keep getting a repeating DNS Error like this:

Event ID: 4015 

Source: DNS-Server-Service

Details: 

"The DNS server has encountered a critical error from Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contain the error."

All do you need to do is:

• Setting a Windows Server 2008 or Windows Server 2012 Domain Controller as a Global Catalog.
• Transferring FSMO Roles in Windows Server 2008 or Windows Server 2012.

For fix that, click in the below link and do the step 4 and 5.

http://systemadministratorrecipes.blogspot.com/2012/06/migrating-active-directory-domain.html

Now you Active Directory is functioning properly, and the DNS error is fixed  :)

Event ID: 122 Source: DeviceSetupManager in Windows Server 2008 and 2012

If you noticed these Event ID: 122  Source: DeviceSetupManager error appearing on Event Viewer "Administrative Events"

"Access to drivers on Windows Update was blocked by policy"

Follow the next steps to fix it:

1. Open "Control Panel".

In Windows Server 2008:

• On the Keyboard press Window key.
• In the "Search programs and files" bar, type "Control" then press Enter.

In Windows Server 2012:

• On the Keyboard press Window key + X, then click on "Run".
• In the "Run" window, type "Control" then press Enter.

     2.  In "Control Panel" window, in "Search Desktop" bar, type "device installation" then press Enter.

     3.  In the "device installation-Control Panel" window click "Change Device Installation Settings".

     4.  In the "Device Installation Settings" window click to check "Yes, do this automatically (recommended)", then click on Save Changes bottom.

     5.  Click to close all open windows.

Congratulation you fixed the error Event Id: 122 :)
     

Error "The Windows Installer Service could not be accessed"

When you try to install an Application in Windows and you received the follow error:

"The Windows Installer Service could not be accessed. This can occur if you are running Windows in safe mode, or the Windows Installer is not correctly installed. Contact your support personnel for assistance".

All do you need to do is Unregister and Re-Register the Windows Installer. You can do that
following the next steps:

1. Log On "Administrator Account".
2. Click Start < Run.
3. In "Run" window  type cmd, then press Enter.
4. In "Command Prompt" window type "msiexec /unregserver" and press Enter.
5. In "Command Prompt" window type "msiexec /regserver" and press Enter.
6. Click to close "Command Prompt".

Now Try your Windows Installer-based application again.

Congratulation, now you can install the application :)

The Local Policy of this system does not permit you log on interactively

If you attempting login in your personal PC, and you received the follow error message:

"The Local Policy of this system does not permit you to logon interactively"

Don't worries, follow the below instructions:

1. Log on as Administrator in the local PC.
2. Click "Start" > "Run".
3. In "Run" Window type "gpedit.msc", then click OK.
4. In "Gropu Policy" window click to expand "Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment".
5. In the right panel, locate the entry named "Allow logon through Terminal Services" and double click on it.
6. In "Allow logon through Terminal Services" window, click "Add User or Group".
7. In "Select Users or Groups" window, you can find a "Specific User Account" or type "Everyone" and click in "Check Names" bottom.
8. After the "User" is underline, click OK.
9. Restart your PC.

 Now, you're supposed to be able to log into your PC.

If for some reason this fail again, follow the below instructions:

1. Log on in Active Directory Server.
2. Click "Start > Administrative Tools > Group Policy Management".
3. In the "Group Policy Management" window, click to expand "Forest:Domain > Domains > You Domain Name".
4. Right click on "Default Domain Policy", and click "Edit".
5. In the "Group Policy Management Editor" window, on the "Computer Configuration" click to expand "Policies > Windows Settings > Security Settings > Local Policies".
6. Click on "User Right Assignment".
7. In the right panel, locate the entry name "Deny log on locally", and be sure this policy is "Not Define" or the user account name is not under this policy.
8. Click to close all open windows.
9. Click "Start", open "Command Prompt" and type "gpupdate /force".
10. Go back to personal computer and attempting login again.

Now, you should be able to log in successfully on your personal PC :)