Best Technology Articles

IT Tips, Networking Articles, Networking Tutorials, Programming Tutorials, ASP Tutorials, PhP Tutorials, ADS Installation, Network Setup, Networking Tips and Tricks, Hacking Articles, Software Tips, Macintosh Articles, Macintosh Tips, Technology Tips, Mobile Softwares, Mobiles Rates in Pakistan

Well yesterday a friend came to me and said that his usb drive was not working, i plugged it into my computer and my pc detected it but was unable to format it or access it. so i googled for a solution and found a tool called "On Belay". a shareware with some days before it asks for registeration so i decided it and gave it a try. there was a format button , and it detected the usb drive and formatted it and it told me to plug out the usb and plug back in and when i plugged it back in the usb drive was working. here is the link for the tool.

Download Link

The same day another friend came to me and said that the usb drive was not working. well now that i had the solution i tried the same tool again. but to my surprise it did not work. the message it gave was that there was no media present. well that gave me a shock and i googled again for another tool. well i found two other tools. here they are

HP Usb Drive Format Tool

HDD Low Level Format Tool

i tried the same and both of them did not work, the same media message , i started googling again and finally i read about it in a forum , that some times the power outage or extra power simply burns the usb chip which is usually what the media is located on. but one thing is still bugging me if the chip has burnt why the window is still detecting it and showing it as a removable drive. could some body please explain that to me. i have also tried the manufacturer's tool too.

Chances are you're in the process of rolling out a new VPN client server setup, or you're already managing one. Windows 2000 VPNs are fun to design and configure because there are so many options available. Spoke and Hub or Mesh? PPTP or L2TP/IPSec? VPN Server or VPN Gateway? Policy via user account or RAS Policy? What's really great is configuring VPN client/ server setups are easy, in spite of the fact you have so many options.

I was talking to a friend yesterday about a VPN he was setting up. He was very excited about the whole thing and spent over an hour telling me each and every detail of his design. During a breathless moment at the end of his story, I asked him if he planned to disable split tunneling for his VPN clients. He gave me a cross-eyed look and finally asked "what's split tunneling?"

What are you supposed to do when you haven't heard of something? Hit the TechNet CD! So we went to a computer with a TechNet CD on it and searched for "split tunneling". No results. Then we tried "split tunnel". Still nothing. Then we tried "'split' near ‘tunnel'". Still nothing. No wonder my friend had never heard of split tunneling. Clearly no one at Microsoft had heard of it either!

You can run into some real security problems with VPNs that allow split tunneling. The problem centers around VPN client configuration. The default Microsoft VPN client configuration is secure. That's because the default Microsoft VPN client configuration does NOT allow split tunneling. You only run into problems when you change the default setting. Sometimes you need to make this change, and sometimes the change is made to subvert network security.

Now what is this mysterious setting I'm talking about? It's the "Use default gateway on remote network" Option on the VPN client. This option appears in various places, depending on the version of Microsoft VPN client you're using. On a Windows XP Pro Computer, you'll find it this way:

1) Right click the My Network Places icon on the desktop and click Properties.

2) Right click on your VPN client connections in the Network Connections window and click Properties.

3) Click the Networking tab, and then click on the Internet Protocol (TCP/IP) entry and click the Properties button.

4) On the General tab of the Internet Protocol (TCP/IP) Properties dialog box, click the Advanced button.

5) On the General tab of the Advanced TCP/IP Settings dialog box, note the "Use Default Gateway on Remote Network" option.

This is a significant setting. It makes the difference between a secure VPN client connection, and VPN clients that are hacker, virus, and worm gateways.


VPN Client Default Route

The "Use Default Gateway on the Remote Network" option is enabled by default. When the VPN client connects to the VPN server, a new default route is created on the VPN client and it appears in the VPN client's routing table. You can view this new route by opening a command prompt and typing the "route print" command. The new default route replaces the old default gateway that was set on the VPN client when the initial dial-up connection was established (assuming the VPN client connected to the ISP via a modem). The default gateway is set as the ISP's router when a dial-up connection is used. This allows the dial-up clients to access the Internet.

A VPN client with the "Use Default Gateway on Remote Network" setting enabled cannot access the Internet because the VPN client now uses the VPN interface to route packets to remote (non-local) networks after the new default route is added. Since all networks except for those on the network ID assigned by the ISP to the modem interface are non-local, all packets are forwarded to the VPN server through the client's VPN interface.

This is exactly what you want. You do not want VPN clients accessing your private network *and* the Internet at the same time. Allowing a VPN client to directly access the Internet and your internal network at the same time is like spraying nerve gas on your network security infrastructure. The reason for this is that the VPN client can become a gateway between the Internet and your private network.

You have a split tunnel configuration when you allow clients to connect to the VPN and the Internet at the same time. Split tunneling is enabled when the "Use Default Gateway on Remote Network" option is *disabled* for the VPN interface. Now you understand why split tunneling can be so toxic to network security.

For Windows to automatically log on a user account during the startup process, the following must be met:

- The Welcome screen must be available
- Guest account access must be turned off
- There must be only one user account on the computer
- The user account must not have a password


Auto-Dial: Disconnect/Disable

Check your settings here:

Right click the My computer icon (Desktop), open Manage/Services and Applications/Services. In the right pane scroll down to Remote Access Auto Connection Manager and double click it. Use the Startup type drop box and choose Disabled.

Network Connections/Advanced/Dial-Up Preferences/Enable Auto-Dial by Location/Uncheck all locations and Always ask me before Auto-Dialing.

Also check all programs with a Notification Area icon (system tray) for an option to disable or not start at startup. Most can be unselected here: Start/Run/Msconfig/Startup and/or removed from here: Start/Run/Regedit

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


Windows has the option to automatically dial your Internet Service Provider (ISP) to establish an Internet connection. This option can be controlled using this tweak.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Create a new binary value named "EnableAutodial", and set the new value to equal "01 00 00 00" to enable autodial or "00 00 00 00" to disable it.

Note: This restriction can be used either on a user by user basis by adding it to HKEY_CURRENT_USER or on a computer wide basis by adding it to HKEY_LOCAL_MACHINE.

To view the list of names and addresses recorded by AutoDial, type the following command at a command
prompt: rasautou -s

To delete a name or address entry from the list: Start/Run/Regedit

HKEY_CURRENT_USER\Software\Microsoft\RAS Autodial\Addresses

You can delete any TCP/IP addresses that you see under this key. Note that AutoDial can use IP addresses, DNS fully qualified domain names (FQDN), and NetBIOS names.

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To enable this option so that it is always checked, use the following steps to edit the registry:

1.Start Registry Editor (Regedt32.exe).
2.Locate and select the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon
3.From the Edit menu, click Add Value, and type the following information:
Value Name: RasForce Data Type: REG_SZ Value: 1
NOTE: After you add this value, the Log on using dial-up connection option will be permanently selected. If the remote network is not available to authenticate your logon, then you will not be able to logon to the computer until one of the following conditions is met:
The remote network becomes available.
You use the Emergency Repair Disk (ERD).
You use another computer to edit the registry remotely and change the RasForce value from 1 to 0, which turns off the Log on using dial-up connection option.
NOTE: This will only be possible if the computer is also on a LAN. For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

A VPN is a private network created over a public one. It’s done with encryption, this way, your data is encapsulated and secure in transit – this creates the ‘virtual’ tunnel. A VPN is a method of connecting to a private network by a public network like the Internet. An internet connection in a company is common. An Internet connection in a Home is common too. With both of these, you could create an encrypted tunnel between them and pass traffic, safely - securely.

If you want to create a VPN connection you will have to use encryption to make sure that others cannot intercept the data in transit while traversing the Internet. Windows XP provides a certain level of security by using Point-to-Point Tunneling Protocol (PPTP) or Layer Two Tunneling Protocol (L2TP). They are both considered tunneling protocols – simply because they create that virtual tunnel just discussed, by applying encryption.

Configure a VPN with XP

If you want to configure a VPN connection from a Windows XP client computer you only need what comes with the Operating System itself, it's all built right in. To set up a connection to a VPN, do the following:

  1. On the computer that is running Windows XP, confirm that the connection to the Internet is correctly configured.
  • You can try to browse the internet
  • Ping a known host on the Internet, like yahoo.com, something that isn’t blocking ICMP
  1. Click Start, and then click Control Panel.

  1. In Control Panel, double click Network Connections

  1. Click Create a new connection in the Network Tasks task pad

  1. In the Network Connection Wizard, click Next.

  1. Click Connect to the network at my workplace, and then click Next.

  1. Click Virtual Private Network connection, and then click Next.
  2. If you are prompted, you need to select whether you will use a dialup connection or if you have a dedicated connection to the Internet either via Cable, DSL, T1, Satellite, etc. Click Next.

  1. Type a host name, IP or any other description you would like to appear in the Network Connections area. You can change this later if you want. Click Next.

  1. Type the host name or the Internet Protocol (IP) address of the computer that you want to connect to, and then click Next.
  2. You may be asked if you want to use a Smart Card or not.

  1. You are just about done, the rest of the screens just verify your connection, click Next.

  1. Click to select the Add a shortcut to this connection to my desktop check box if you want one, if not, then leave it unchecked and click finish.
  2. You are now done making your connection, but by default, it may try to connect. You can either try the connection now if you know its valid, if not, then just close it down for now.

  1. In the Network Connections window, right-click the new connection and select properties. Let’s take a look at how you can customize this connection before it’s used.
  2. The first tab you will see if the General Tab. This only covers the name of the connection, which you can also rename from the Network Connection dialog box by right clicking the connection and selecting to rename it. You can also configure a First connect, which means that Windows can connect the public network (like the Internet) before starting to attempt the ‘VPN’ connection. This is a perfect example as to when you would have configured the dialup connection; this would have been the first thing that you would have to do. It's simple, you have to be connected to the Internet first before you can encrypt and send data over it. This setting makes sure that this is a reality for you.

  1. The next tab is the Options Tab. It is The Options tab has a lot you can configure in it. For one, you have the option to connect to a Windows Domain, if you select this check box (unchecked by default), then your VPN client will request Windows logon domain information while starting to work up the VPN connection. Also, you have options here for redialing. Redial attempts are configured here if you are using a dial up connection to get to the Internet. It is very handy to redial if the line is dropped as dropped lines are very common.

  1. The next tab is the Security Tab. This is where you would configure basic security for the VPN client. This is where you would set any advanced IPSec configurations other security protocols as well as requiring encryption and credentials.

  1. The next tab is the Networking Tab. This is where you can select what networking items are used by this VPN connection.

  1. The Last tab is the Advanced Tab. This is where you can configure options for configuring a firewall, and/or sharing.

Connecting to Corporate

Now that you have your XP VPN client all set up and ready, the next step is to attempt a connection to the Remote Access or VPN server set up at the corporate office. To use the connection follow these simple steps. To open the client again, go back to the Network Connections dialog box.

  1. One you are in the Network Connection dialog box, double-click, or right click and select ‘Connect’ from the menu – this will initiate the connection to the corporate office.

  1. Type your user name and password, and then click Connect. Properties bring you back to what we just discussed in this article, all the global settings for the VPN client you are using.
  1. To disconnect from a VPN connection, right-click the icon for the connection, and then click “Disconnect”

Can't Log On to Windows XP?

If that’s your only problem, then you probably have nothing to worry about. As long as you have your Windows XP CD, you can get back into your system using a simple but effective method made possible by a little known access hole in Windows XP.

This method is easy enough for newbies to follow – it doesn’t require using the Recovery Console or any complicated commands. And it’s free - I mention that because you can pay two hundred dollars for an emergency download of Winternals ERD with Locksmith which is a utility for unlocking lost Windows passwords. See here http://www.winternals.com/products/repairandrecovery/locksmith.asp

ERD is an excellent multi purpose product, but you should know it is not a necessary one if you have a healthy system and your sole problem is the inability to logon to Windows due to a forgotten password. Not necessary because you can easily change or wipe out your Administrator password for free during a Windows XP Repair. Here’s how with a step-by-step description of the initial Repair process included for newbie’s.

1. Place your Windows XP CD in your cd-rom and start your computer (it’s assumed here that your XP CD is bootable – as it should be - and that you have your bios set to boot from CD)

2. Keep your eye on the screen messages for booting to your cd Typically, it will be “Press any key to boot from cd”

3. Once you get in, the first screen will indicate that Setup is inspecting your system and loading files.

4. When you get to the Welcome to Setup screen, press ENTER to Setup Windows now

5. The Licensing Agreement comes next - Press F8 to accept it.

6. The next screen is the Setup screen which gives you the option to do a Repair.

It should read something like “If one of the following Windows XP installations is damaged, Setup can try to repair it”

Use the up and down arrow keys to select your XP installation (if you only have one, it should already be selected) and press R to begin the Repair process.

7. Let the Repair run. Setup will now check your disks and then start copying files which can take several minutes.

8. Shortly after the Copying Files stage, you will be required to reboot. (this will happen automatically – you will see a progress bar stating “Your computer will reboot in 15 seconds”

9. During the reboot, do not make the mistake of “pressing any key” to boot from the CD again! Setup will resume automatically with the standard billboard screens and you will notice Installing Windows is highlighted.

10. Keep your eye on the lower left hand side of the screen and when you see the Installing Devices progress bar, press SHIFT + F10. This is the security hole! A command console will now open up giving you the potential for wide access to your system.

11. At the prompt, type NUSRMGR.CPL and press Enter. Voila! You have just gained graphical access to your User Accounts in the Control Panel.

12. Now simply pick the account you need to change and remove or change your password as you prefer. If you want to log on without having to enter your new password, you can type control userpasswords2 at the prompt and choose to log on without being asked for password. After you’ve made your changes close the windows, exit the command box and continue on with the Repair (have your Product key handy).

13. Once the Repair is done, you will be able to log on with your new password (or without a password if you chose not to use one or if you chose not to be asked for a password). Your programs and personalized settings should remain intact.

I tested the above on Windows XP Pro with and without SP1 and also used this method in a real situation where someone could not remember their password and it worked like a charm to fix the problem. This security hole allows access to more than just user accounts. You can also access the Registry and Policy Editor, for example. And its gui access with mouse control. Of course, a Product Key will be needed to continue with the Repair after making the changes, but for anyone intent on gaining access to your system, this would be no problem.

And in case you are wondering, NO, you cannot cancel install after making the changes and expect to logon with your new password.

Cancelling will just result in Setup resuming at bootup and your changes will be lost.

Ok, now that your logon problem is fixed, you should make a point to prevent it from ever happening again by creating a Password Reset Disk. This is a floppy disk you can use in the event you ever forget your log on password. It allows you to set a new password.

Here's how to create one if your computer is NOT on a domain:

  • Go to the Control Panel and open up User Accounts.
  • Choose your account (under Pick An Account to Change) and under Related Tasks, click "Prevent a forgotten password".
  • This will initiate a wizard.
  • Click Next and then insert a blank formatted floppy disk into your A: drive.
  • Click Next and enter your logon password in the password box.
  • Click Next to begin the creation of your Password disk.
  • Once completed, label and save the disk to a safe place

How to Log on to your PC Using Your Password Reset Disk

Start your computer and at the logon screen, click your user name and leave the password box blank or just type in anything. This will bring up a Logon Failure box and you will then see the option to use your Password Reset disk to create a new password. Click it which will initiate the Password Reset wizard. Insert your password reset disk into your floppy drive and follow the wizard which will let you choose a new password to use for your account.

Note: If your computer is part of a domain, the procedure for creating a password disk is different.