April 7, 2011 – Page 6

April 7, 2011Windows Technologies

Prevents users from saving certain changes to the desktop

NoSaveSettings HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer Data type Range Default value REG_DWORD 0 | 1 0 Description Prevents users from saving certain changes to the desktop. Users can change the desktop, but some changes, such as the positions of open windows or the size and position of the taskbar, are not saved when users log off. Shortcuts placed on the desktop are always saved. This entry stores the setting of the Don’t save settings at exit Group Policy. Group Policy adds this entry to the registry with a value of 1 when you enable the policy. If you disable the policy or set it […]

April 7, 2011August 12, 2014Desktop

Fundamental Computer Investigation Guide For Windows

Preparing Your Organization for a Computer Investigation To prepare your organization for an internal computer investigation, you should assemble a readily available computer investigation toolkit that includes software and devices you can use to acquire evidence. Such a toolkit might contain a laptop computer with appropriate software tools, different operating systems and patches, application media, backup devices, blank media, basic networking equipment, and cables. Preparing this toolkit can be an ongoing task as you find the need for various tools and resources, depending upon the investigations you need to conduct. Use the following guidelines when building and using a […]

April 7, 2011Windows Technologies

Windows Internals: Troubleshooting Login and Logoff processes

When you log off, the "saving your settings" phase takes longer than one minute, and the user profile may not unload. You may also receive the following event message in the event log: Type: Error Event Id: 1000 Source: Userenv Description: Windows cannot unload your registry file. If you have a roaming profile, your settings are not replicated. Contact your administrator. This issue may be caused by a problem with the spooler service. There is a hotfix available from Microsoft for Windows server 2000/2003, versions. Have the hotfix installed from here and also go through the related hotfix specifically for […]