F6 is for losers

July 28th, 2008

FYI, the driver INF list you get if you hit F6 when installing XP might be longer the 4 devices you can see.. Try scrolling UP to see other devices to install…

Rutter shared this jewel with me:

cscript c:\windows\system32\slmgr.vbs -skms [FQDN of your KMS]

I just activated Vista Enterprise from home over VPN!

From an email that I just sent to a colleague:

First, copy the install DVD(s) to a network share. A few files you’ll need to make/touch:


This file needs to go in all of the payload folders (okay, not _all_ of them, but it is just easier that way, trust me). It should look like this for a silent install:


<?xml version="1.0" encoding="utf-8"?>
<Data key="Serial" protected="0">yourserialnumberwithouthyphens</Data>
<Data key="Registration">Suppress</Data>
<Data key="EULA">Suppress</Data>
<Data key="Updates">Suppress</Data>


Next, look in the deployment folder for deployment.xml or something that indicates installing in your country and language. It should look like this (at least for DP (Design Premium), other bundles or individual apps are really similar):


<Property name="installLanguage">en_US</Property>
<Property name="serialNumber">yourserialnumberwithouthyphens</Property>
<!--Adobe Acrobat 8 Professional (At install, older versions get upgraded)-->
<Payload adobeCode="{AC76BA86-1033-0000-7760-000000000003}">
<!--Adobe Dreamweaver CS3-->
<Payload adobeCode="{00E5C764-9525-44C3-8404-712AD06AE12A}">
<!--Adobe Flash CS3-->
<Payload adobeCode="{3BC8460B-085E-47F3-9C62-8FFCBAF11D78}">
<!--Adobe Flash Video Encoder-->
<Payload adobeCode="{7BB7F66A-D798-45A3-A383-0727FB1EBF8E}">
<!--Adobe Illustrator CS3-->
<Payload adobeCode="{C4519961-AC64-4565-B3AF-9050296B5D5A}">
<!--Adobe InDesign CS3-->
<Payload adobeCode="{24D77A7C-E10B-4057-9974-FAB8BFDAC853}">
<!--Adobe Photoshop CS3-->
<Payload adobeCode="{30C4B843-28DA-466F-AFCA-CB0ED153C826}">


In the above example I took out Version Cue so it won’t get installed. The line with ‘<Property name=”serialNumber”>’ isn’t necessary for Design Standard/Premium (or Web Standard/Premium, I don’t think), but some apps require it for passing along the serial number to install third party content (Audition, Encore, Premiere Pro all need this).

After you make/edit those files all you need to do is call the setup.exe with some parameters. I run a script like this from Deployment Solution:


call "\\server\software\adobe\cs3\win\Adobe CS3\setup.exe" --mode=silent --deploymentFile="\\server\software\adobe\cs3\win\Adobe CS3\deployment\deployment.xml"
copy /y \\server\keyed\cs3\acrobat.exe "C:\program files\adobe\Acrobat 8.0\Acrobat\acrobat.exe"
copy /y \\server\\keyed\cs3\dreamweaver.exe "C:\program files\adobe\Adobe Dreamweaver\CS3\dreamweaver.exe"
copy /y \\server\keyed\cs3\flash.exe "C:\program files\adobe\Adobe Flash CS3\flash.exe"
copy /y \\server\keyed\cs3\illustrator.exe "C:\program files\adobe\Adobe Illustrator CS3\Support Files\Contents\Windows\illustrator.exe"
copy /y \\server\keyed\cs3\indesign.exe "C:\program files\adobe\Adobe InDesign CS3\indesign.exe"
copy /y \\server\keyed\cs3\photoshop.exe "C:\program files\adobe\Adobe Photoshop CS3\photoshop.exe"
del /f /q "C:\documents and settings\all users\desktop\adobe acrobat 8 professional.lnk"


In this case I have already created zero-footprint keyed *.exe files for our Sassafras Keyserver. I also don’t like icons on the desktop. If the exit code is anything except 0 you need to do some troubleshooting. Check for logs in “C:\program files\Common Files\Adobe\Installers”. The installer log will likely be a GZIPPED UNIX FORMATTED TEXT FILE (OMG, why would you do this Adobe? We are obviously on Windows!)!

A few notes:

You can’t install _just_ Acrobat from any of the bundled packages (Design Premium, Web Standard, etc.) because you need to launch another of the BIG applications in order to start the licensing; i.e. you need to launch Photoshop before you can use Acrobat. Photoshop is a popular application, so I never really worried about this in my labs. If you only install Acrobat you won’t have any of the BIG applications to activate the licensing on that computer. Stoopid, right? Tough. There is no way around it.

It takes a fast (single-hard drive) computer about 30 minutes on gigabit Ethernet to install CS3 DP. I don’t like installing while users are logged in because sometimes the installer will fail if it needs to touch browser plugins (DW and Flash) or Outlook (Acrobat stuff).

If you have less than 1GB of memory and less than 1024×768 resolution, the installer will fail. No way around it that I know of. The video/production applications check for other hardware (microphone/non-integrated video, etc.).

I tried putting all of CS3 DP into an Altiris SVS layer. Since the licensing daemon needs to run at startup, I never got it working right. Mind you, I didn’t really try that hard since I had some reservations over pushing out a several gigabyte VSA…

There is a deployment PDF on the DVD that has most of this information. Also check out www.appdeploy.com for some really good hints and for application-specific ‘gotcha’’s.

I’m still working on slipstreaming updates into the payloads. I haven’t tried too hard yet. Right now I’m just downloading the updaters and repackaging them.

…because I had the MS Office 2007 File Format Converters for Office 2003 installed. The installer just crapped out and left a bunch of meaningless crapola in the eventvwr. I then uninstalled the O2007FFC and Office 2007 started installing just fine.


I stumbled across the pieces to make up this little chunk of WMI goodness.

Const BELOW_NORMAL = 16384
strComputer = "."
Set objWMIService = GetObject("winmgmts:\" & strComputer & "rootcimv2")
Set colProcesses = objWMIService.ExecQuery _
("Select * from Win32_Process Where Name = 'Notepad.exe'")
For Each objProcess in colProcesses

Priorities in Windows get funny numbers, not like nice. Check out this MS article on what the numbers really mean. Save that text in a *.vbs file and you are good to go. Maybe even add it to a scheduled task to make sure that a certain process gets the right amount of processor time.

setuid for Windows?

April 3rd, 2007

I needed a way for normal users to stop a service at login time. The service was running as a privileged user. I made up a scheduled task that ran as the owner of the service, but that sucked. Basically I wanted to run a script setuid root… Then I ran across this utility. It encrypts username and password information into a *.job file and then runs your app/script/whatever with the encrypted credentials. Pretty straight forward. Use in conjunction with cmdow.exe and your users will never see anything. (I tried to find a link to cmdow.exe, but I guess it is on a lot of people’s lists as a hacking tool… No good results on the first few pages of google for me.)