New Win7 64-bit install done and (mostly) tuned

[nzemke]

Running the windows 10 preview here and really liking it. It gives you back the pre windows 8 start menu (sort of) with lots of stream lined new toys. I would recommend it to anyone that hates the windows 8 but still wants to take advantage of newer hardware features.

I have a computer I built in 2005 (first gen 64bit system) that I am running windows 7 on and it runs as my server box No monitor, purely remote desktop connections. As soon as the windows 2010 full version comes out I plan to upgrade it. The key to keeping your systems running long lives is basically

• replacing the fans in the system every couple years
• Rgularly blow out the dust bunnies
• keep up on your drivers
• Re-install your operating system every couple years to clean out rogue registries.
• DONT BLOCK THE AIR VENTS

[3Phase]

nzemike, that's excellent advice, especially the part about the fans! For identical tasks, this machine with Win7 x64 uses 10 to 50 Watts above what it uses for XP Pro x86.

Doublecheck the processor ID and the instruction set requirements before you stick Windows 10 on the old machine. Mine can run Win8/8.1 but 10 would need a new processor.

T.C.,

The reason for using Pro instead of Home is the ability to access and use the Security features. I don't need Ultimate but for the difference in price between the Home and Pro versions, Home is not a good choice.

Win7 Pro
The Security tab is available wherever necessary
The Group Policy Editor gpedit.msc is available for setting the Local Security Policy

Win7 Home
The Security tab is available only in Safe Mode
There is no Group Policy Editor, the Local Security Policy is fixed and you can break the installation trying to change it.


I had to go through a bunch of contortions to fix a printer in XP Home that wouldn't print in any User account, only in an Administrator account. The advice from Microsoft was to boot into Safe Mode, then use the Security tab to take Ownership of the printer and assign more rights to the User account.

That seems like a fairly simple task, right? The brain trust at MS sort of forgot that printers do not load in Safe Mode because Safe Mode is supposed to be Safe. There is no Security tab on the printer in Safe Mode because there is no printer.

I forget what I had to do to get the printer to show up in Safe Mode but is was too awkward and convoluted for a simple job that would have taken a few seconds in XP Pro. The Home versions of Win7 do include the ICACLS.exe utility that can be used in normal desktop mode to set file and directory permissions and inheritance from the command line. Good luck!

.

[Bigfoot]

I did the beta on Win 10 and loved it. Did run into an update the my computer didn't like so I went back to 7 but I will upgrade it once the final release comes out. BTW, if you have 7 or 8 it will be a free upgrade.

[3Phase]

Harry,

If I do go with a Win2 subscription I'll just drop in a new board with a current i7 processor and let it rip. There's just too much missing with the board and processor I'm using right now and I think it's done it job; almost time for it to go to Silicon Heaven.

.

[TopCatGr58]

Hey Harry,

Thanks for that...they say "QUALIFIED" versions of WIn7/8.1...then at the *, it's explained that Enterprise/RT versions do not qualify...so it looks like if I get a LEGAL version of Win7 that I'll be able to TRY OUT Win10 when it gets released!

I just looked up the System Requirements...and after some net searching found that my Intel E8400 has the special features to allow Win10...stuff I hadn't really heard of or remembered...but thankfully they were built into my processor even from 1Q 2008!!! And Intel is still supporting it..says LAUNCHED, not "End of Interactive Support", or "End of Life"...so I picked a good one!

Scott, I looked up the differences for Win7 Home vs Pro...and I can't see the need for the fancy security features you spoke of....Network stuff!? And I don't plan on installing a Virtual XP machine. I just found and downloaded the last update from Nero for ver 7 Ult that made it Win7 compatible...only had to pay $4.99 to their download site....was surprised they charged for it, guess they are taking their ideas from the Airlines? And I found a Youtube video showing being able to install and run my Ulead VideoStudio Ver11, so that covers the main programs I wanted to run. I already have the Win7 Video Drivers for my Vid Card, and hopefully I can find the same for my Vid. Capture/TV Tuner card??? I'm off to check with my Mobo company for chipset drivers to run my Nic/Soundcard and such.

T.C.

[TopCatGr58]

Another interesting thing I just found. As I stated I'm running the Core2 Duo CPU E8400 3.0 Ghz. My video editting program supports dual cpu. I don't do much gaming on it, however the Win10 preview mentioned about Xbox Gaming on your 'puter, but I don't know if I would have to get a special DVD drive to be able to recognize the XBox formated DVD's??

Anyways....found this item on eBay:

http://www.ebay.com/itm/Intel-Quad-C...ht_9533wt_1133

Hmmmm? The price is right, and my Mobo can support the Qcore CPU that the Xeon modded on is suppose to be equivalent to.

T.C.

[Bigfoot]

Interesting, hmmm i think I have a couple xeons laying around here somewhere.

[3Phase]

Well, you asked which version I installed and why.

To me the Security tools aren't fancy, they're absolutely necessary and I use them all the time. I can't imagine using a Home version with no tools, it'd be like riding an XS11 while wearing a straightjacket -- not that I've ever worn a straightjacket you understand! It's just a comparison! I mean....

What type of video tuner/capture card do you have? Windows has a built-in Media Center that should work with your card if you can find drivers. They've been busy little beavers at Redmond and Windows may already have drivers for the video, NIC and the sound card.

Some of the networking tools and services you get with Pro I don't use because I don't have a Domain at home to join. I'm not planning to set one up, either, and if one suddenly showed up one day in the local wireless neighborhood I wouldn't join it on a bet.

I have Nero 7 fully patched for Windows 7 too but it's 32-bit. I haven't had a chance to explore the native CD/DVD/Blue-Ray tools that came with Win7 but I added a new dual-layer DVD writer last month and Nero didn't like it. Windows shrugged and asked me what I wanted to do with it. EAC didn't mind either. After I got the offset dialed in for the drive EAC ripped three CDs without batting an eye. I may not need Nero but I'd hate to waste the money I spent on Ultimate too.

There are a lot of important things that are included with Windows now that let me leave behind paid applications like Ghost so I'm hoping I can ditch Nero. Ghost has been a faithful companion for years and replaced Powerquest's Drive Image. Both have saved me from disaster several times but Windows Backup makes system images now in addition to regular file backups. I ran Windows through its backup and restore hoops to make sure it worked and that I understood the process. Windows restore worked fine and nothing was lost. Later days, Ghost!

.

[3Phase]

Ransomeware = Why You Need Group Policy and Security Tools

Stopping CryptoLocker and other ransomware:-

https://4sysops.com/archives/stoppin...er-ransomware/

Ransomware can lock away your documents and kill a business. Learn how to prevent CryptoLocker and related malware with this step-by-step guide.

Contents of this article

Using AppLocker to stop CryptoLocker
Local administrators: your weakest link
Other security changes to make

CryptoLocker is a vicious form of ransomware. It doesn’t require administrative permissions to run. Once started, it will slowly encrypt any business-related files that are stored locally or on network drives. If a user’s profile is infected on Friday, it is possible that all shared Office documents, PDFs, and databases will be encrypted and unavailable on Monday. Your business is down.

Ransomware, including CryptoLocker, can be stopped. With a little planning, it can be stopped fairly easily. Our first layer of defense is blocking the EXE.

[more]

.

[jwhughes3]

I deal with Microshaft stuff at work all the time.

At home I run a little used Macbook Pro. Mostly iPad and iPhone surfing these days. Uploading pics to posts here is easier on a computer.

I never run anything. Or install anything. Or backup anything. My 3TB Time Capsule does it for me.

When this Mac runs too slow in a decade or so I will buy another and it will automatically access my programs on the Time Capsule. I may need to crack a beer for that kind of hard work.

I used to do and keep up with all that stuff Scott. Now I just don't care enough anymore to try and keep up.

I wanna ride

John

[3Phase]

John, I don't worry about that stuff any more either but it's because I turn off the filesystem when I done riding it and put it in the garage. Basically, I use the permissions and Group Policy like the keys to my XS11.

The Cryptolocker critter hit T.C. a little while ago. I don't know if he got all of his stuff back but it wouldn't have worked on my files because the filesystem would have told it to parse off.

I set the file and directory permissions to Read on the data drives and directories and Deny Execute. If nothing has permission to Write, Modify or Execute, nothing can mess with the files.

When I want to add or modify anything I just fire up the filesystem and do what I want, then put it back in the garage and remove the key when I'm done.

Booting into Safe Mode to make a two-second toggle or trying to hack the Local System Policy in a limited version OS would drive me up the wall so I'd just forget about it too.

Don't get to comfortable with Apple's version of UNIX and FreeBSD. You don't have to run Windows to get whacked, it's done with drivebys and the iWoz will happily put hammered files into the Time Capsule right along with the good ones. People have been rooting and hacking and cracking UNIX ever since it was written back in the '70s and there are often more security alerts and exploits now for the different flavors and branches and their applications than there are for Windows.

.

[Bigfoot]

Scott, that seems like a whole lot of trouble when you could just turn it off and if really paranoid, unplug it when you aren't using it. Use a good antivirus and the paid version of Malwarebytes is outstanding and will warn you if anything malicious is trying to execute.

[3Phase]

Harry, they're all internal drives (six of them) that can't be turned off or disconnected and one of them is the boot drive.

Eventually the knuckleheads and script kiddies are going to figure out how to get past the Secure UAC prompt, permissions and policies. That day isn't here yet so I've got a dog-eared old 'tuit for buying a few external drives and moving the files over.

I've got several excellent antivirus and antimalware programs but the new bad stuff can go right past them. The only way to keep your files is to make sure they're not on the machine. In the meantime, I put data files in a data partition, then set the filesystem to Read but Deny everything else.

It probably sounds more difficult than it is but it's not something I have to do every day, just when I change something. This is essentially what I've been doing since the MS DOS days with the SWEEP utility, ATTRIB and the ReadOnly bit for files and directories. Permissions are sort of the same but better because you can't even look at a file or directory without permission, much less read it.

It's no different than taking off your helmet, putting your XS in the garage, closing the door and putting the key on your pocket. It's hidden from Everyone but you and people you allow into the garage can all look at it as often as you like. To fire it up and ride it you have to use the key, make sure you open the garage door and put on your helmet.

.

[Rasputin]

Ok somebody correct me if I am wrong, but does not Windows 10 only come free for the first year? After that one must pay a subscription rate for it yearly? Just some stuff I have heard and am not quite sure of.

[Bigfoot]

Win 10 will not have a subscription fee. It will be just like 7 is now in terms of license.

Scott, i was confused what you were saying you were doing. I thought you meant everytime you weren't using you computer you locked everything down. I was saying would be easier if that was the case just to un plug it.