Buy Me a Coffee

Monday, November 2, 2015

Blue screen, ERROR: 0x0000007e vmware tools

If you have got Blue screen, ERROR: 0x0000007e you will have to perform the following steps for each effected VM:

1. Start the VM using “Safe mode” (pressing F8 while machine boot)

2. open command prompt and type

REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer" /VE /T REG_SZ /F /D "Service"

3. Now from command prompt type: net start msiserver

4. Uninstall VMware tools using the “add remove programs”

Thursday, October 22, 2015

How to enable ssh to user root

You also need to edit /etc/ssh/sshd_config, and comment out the following line:

PermitRootLogin without-password

Just below it, add the following line:

PermitRootLogin yes

Then restart SSH:

service ssh restart

Wednesday, May 20, 2015

Can not open Checkpoint firewall SmartDashboard due to wrong rule

There may be a time where you install the wrong policy onto a Check Point Firewall. This can block your connections, and screw which traffic is allowed through the firewall.
In order to fix it, open the firewall console and perform the following steps:

These steps will show you how to remove and reinstall the correct policy via the CLI on the manager (SCS),
  1. First of all we look at the policy history, so we can find out the name of the policy we need to reinstall. 
fw stat -l [firewall ip]
  2. Next we remove the security policy from the firewall.
fwm unload [fwname]
  Now you may open the Firewall SmartDashBoard, examine the wrote configuration \ or the fault rule, change it and install the new policy.


Sunday, May 17, 2015

Clean Up the WinSxS Folder

  1. At an elevated command prompt, run the following command:
    Net Stop WUAUSERV
  2. Delete the contents of the %windir%\softwaredistribution\download folder.
  3. At an elevated command prompt, run the following command:
    Net Start WUAUSERV

for windows 8.1

The following command will uninstall all previous versions of components without the scheduled task’s 30-day grace period:
DISM.exe /online /Cleanup-Image /StartComponentCleanup
The following command will remove files needed for uninstallation of service packs. You won’t be able to uninstall any currently installed service packs after running this command:
DISM.exe /online /Cleanup-Image /SPSuperseded
The following command will remove all old versions of every component. You won’t be able to uninstall any currently installed service packs or updates after this completes:
DISM.exe /online /Cleanup-Image /StartComponentCleanup /ResetBase

Monday, May 11, 2015

Clean up windows 7


In some cases, windows OS hard drive is getting full with no reason, below find some use cases and how to handle them:

The first step would be diagnostic the hard drive, highly recommended tool is "WinDirStat" which can be download from here > “WinDirStat

After you have found all the huge video, music and pst files, you hard drive is still full ? great, go on to the next step.

Here are some path which may contain a LOT of waste hard drive space, I'll explain what is all about and how to clean it, please note that the sizes mentioned below based on my experience, you may get different sizes,


What is it?
Windows uninstall information
Windows update / service packs data information


Safe to delete?
Yes, but not manually

What should I do?
1. Install KB2852386 from here 

2. Open CMD as administrator and run the followings:
dism /online /cleanup-image /spsuperseded

3. open Noteped, past the following text into it, and save it as "FILENAME.REG"
Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Content Indexer Cleaner]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Downloaded Program Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Internet Cache Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Memory Dump Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Offline Pages Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Old ChkDsk Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Previous Installations]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Recycle Bin]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Service Pack Cleanup]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Setup Log Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\System error memory dump files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\System error minidump files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Temporary Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Temporary Setup Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Thumbnail Cache]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Update Cleanup]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Upgrade Discarded Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Windows Error Reporting Archive Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Windows Error Reporting Queue Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Windows Error Reporting System Archive Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Windows Error Reporting System Queue Files]"StateFlags0100"=dword:00000002[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Windows Upgrade Log Files]"StateFlags0100"=dword:00000002

4. Execute FILENAME.REG registry file

5. Open CMD as administrator and run:
 cleanmgr /sagerun:100


What is it?
Microsoft OneNote cache files


Safe to delete?
yes, can be reduced or moved

What should I do?
To reduce size: open OneNote > options > save & backup and click “Optimize all Files now”.
To move the files to another drive, click “Modify”.


What is it?
Recycle Bin


Safe to delete?

What should I do?
Change the folder view setting to show protected operating system files, open “C:\$Recycle.Bin” and delete it content by using “SHIFT+DELETE”.


What is it?
Windows Page file


Safe to delete?
No, Can be moved to another drive or reduced 

What should I do?

  1. Open System by clicking the Start button Picture of the Start button, right-clicking Computer, and then clicking Properties.
  2. In the left pane, click Advanced system settings. Administrator permission required If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
  3. On the Advanced tab, under Performance, click Settings.
  4. Click the Advanced tab, and then, under Virtual memory, click Change.
  5. Clear the Automatically manage paging file size for all drives check box.
  6. Under Drive [Volume Label], click the drive that contains the paging file you want to change.
  7. Click Custom size, type a new size in megabytes in the Initial size (MB) or Maximum size (MB) box, click Set, and then click OK.

Wednesday, March 11, 2015

VMware VC certificate is missing (rui.cer)

Here is how to restore VMware VC certificate in case it has been deleted somehow

In case "C:\ProgramData\VMware\VMware VirtualCenter\SSL\rui.cer" or "C:\ProgramData\VMware\vSphere Web Client\ssl\rui.cer" files is missing, here is how to restore it:

1.       Login to the server, browse to C:\ProgramData\VMware\VMware VirtualCenter\SSL.

2.       Double click rui.PFX file.

3.       Choose store location:  “local machine” and click “Next”.

4.       Make sure the file path is correct and click “Next”.

5.       Type the password for the privet key (testpassword), choose “Mark this key as exportable” and click “Next”.

6.       Make sure location of certificate set to automatically, and click “Next”.

7.       In the “completing certificate import wizard” click “Finish”.

8.       Download and run “DigiCert Certificate Utility for Windows” from here.

9.      Choose “VMware default certificate” and click “Export Certificate”.

10.   Choose “No, do not export the private key” and click “Next”.

11.   Choose name and location to the exported certificate “C:\ProgramData\VMware\VMware VirtualCenter\SSL\rui.cer” and click “Finish”.

12.   Click ok to complete the process.

Tuesday, March 3, 2015

PXE boot from the 2nd network card (NIC) - Dell PowerEdge R210

Hi While trying to boot via the 2nd network card of Dell PowerEdge R210 machine, the 2nd NIC is not presented. There is a need to enable PXE boot for the 2nd NIC as well, here is how to do it:

 1. While booting the machine, boot to BIOS (pressing F2 during post).

 2. Go to integrated device and press <ENTER>


 3. You will see that “Embedded gb NIC2” is enable.

4. Change it to “Enabled with PXE”. 


 5. Save configuration and reboot the server. 


 6. While the machine booting, press F12 and wait for “boot from” message, then choose the 2nd NIC.