SOLVED! HOW TO - Silent Install and Uninstall Google Pinyin

If you know how to type Chinese characters, Google Pinyin Chinese Input Method shouldn't be something new to you.

For network administrator though, a headache is how to deploy such a good Chinese input method to users. Here're the steps & tips on how to silent install and silent uninstall Google Pinyin.

To silent install:

• Download the install executable file from there: http://www.google.com/intl/zh-CN/ime/pinyin/
• Save the file to a network share. 
• Create a batch file to silent install. It could be a very simple command like

          \\server\share\GooglePinyinInstaller.exe /s

• Include this in the login script for your network users, or simply send a shortcut of that batch to your users by email

To silent uninstall:

• Look for the uninstaller file at "C:\Program Files (x86)\Google\Google Pinyin 2\GooglePinyinUninstaller.exe" for 64-bit Windows or just "C:\Program Files\Google\Google Pinyin 2\GooglePinyinUninstaller.exe" for 32-bit Windows
• Just copy this file to your network share
• Similar to silent install, make a batch statement, which looks like this

          \\server\share\GooglePinyinUnInstaller.exe /s

• Include this in the login script for your network users, or simply send a shortcut of that batch to your users by email

HOW TO - Set Permanent Environment Variables in Windows 7

Sometimes, certain programs may need to set and read user or system environment variables. However, the problem is if you just run a batch to set those values, they'll only be available in the command prompt session. We need a way to write permanently the environment variables.

Some may suggest using Power shell scripts, modifying registry, or writing VB codes. However, I found using the built-in command of Windows - the setx command - the easiest and cleanest in doing the job.

Here's what Microsoft said, "[setx] Creates or modifies environment variables in the user or system environment, without requiring programming or scripting. The Setx command also retrieves the values of registry keys and writes them to text files...

...

• Setx provides the only command-line or programmatic way to directly and permanently set system environment values. System environment variables are manually configurable through Control Panel or through a registry editor. The set command, which is internal to the command interpreter (Cmd.exe), sets user environment variables for the current console window only."

Reference:
http://technet.microsoft.com/en-us/library/cc755104(v=ws.10).aspx


Setx command applies to Windows Server 2008, Windows Vista and Windows 7, these are platforms very widely used.

The exciting thing of setx is, especially for network administrators, that it supports setting environment variables remotely. Otherwise, you will have to go to each machine and adjust the Environment Variables in the Computer Properties. You may also put these setx commands in your login scripts for your Windows users to run when they logon Windows.

SOLVED - Cannot Browse or Ping to Microsoft.com

A friend's XP laptop has this very strange behavior:

• all other websites work properly, EXCEPT Microsoft.com and other antivirus vendor sites such as Trend Micro, Symantec, etc. Other websites like yahoo.com works perfectly fine
• PING Microsoft.com cannot resolve, saying "Ping request could not find host microsoft.com..."; but, NSLOOK Microsoft.com resolves IP address
• using virus removal tools, virus scan FOUND NOTHING
• HOSTS file checked ok
• TCP/IP settings good
• tried repaired WINSOCK, no help

Of course, just the point #1 above already made me feel for sure this is VIRUS INFECTION. But, it didn't leave any trace of malicious codes or signature. So, an important setting has been modified.

After hours of work, this is what I found, which solved my problem: DNS Client service. Stop it.

1. Right click on My Computer, select Manage
2. Under Services and Applications, click on Services
3. On the list, look for the service DNS Client; right click on it and choose Stop

*You may also find the Automatic Updates service not working properly. Try Restart this service.

Now, you should have your Microsoft.com back, as well as other security websites. Time to do your Windows Update, download an antivirus software, get it updates, etc.

Notes: For security-serious users, there's only one thing they will do for a compromised computer, FORMAT AND REINSTALL.

What is DNS Client - http://technet.microsoft.com/en-us/library/cc735833(v=ws.10).aspx
The DNS Client service is the client component that resolves and caches Domain Name System (DNS) domain names. When the DNS Client service receives a request to resolve a DNS name that it does not contain in its cache, it queries an assigned DNS server for an IP address for the name. If the DNS Client service receives the requested address, it stores the name and address in its cache to resolve future requests without having to query the DNS server. All computers that use DNS to resolve domain names (including DNS servers and domain controllers) use the DNS Client service for this purpose.

TIPS - Automatic Way of Push Deploy Shared Printers to Workstations Over a Network

If you're a network administrator, one big headache is to deploy shared network printers to tens or even hundreds of workstation computers. In a Windows domain environment, this mission can be easily accomplished by a login script.

To centralize your printers' pool, a good way is to setup a printer server using Windows 2008. Install printers on your Windows Server 2008 and share these printers out. One good way to setup such a printer server is to create it as a Windows 2008 virtual machine, over Hyper-V.

A batch file could be created and put inside your domain's netlogon folder, \\DOMAIN\NETLOGON. The file, maybe named printer.bat; it will look like this:

    rundll32 printui.dll PrintUIEntry /in /n "//printerservername/sharename" /q

The /in switch means to install the share printer.

For example, if your printer's share name is HP 4200 PCL and the server name is HKPR01, the command will look like this:

    rundll32 printui.dll PrintUIEntry /in /n "//hkpr01/HP 4200 PCL" /q

If you have an old printer you'd want to uninstall, this is a command to use:

    rundll32 printui.dll PrintUIEntry /dn /n "\\hkpr01\HP 5si-mx" /q

The /dn switch means to delete the share printer.

Finally, saved this login script file to \\DOMAIN\NETLOGON folder. Then, go to your Active Directory and manager your domain users with the login script applied.

TIPS - Advanced Use of Remote Desktop

Have a need to figure out how to monitor various servers in a domain, using Remote Desktop is a great idea. Here're some commonly used commands and tips that may help:

To start remote desktop client, run this command (simply stands for microsoft terminal server client):

    mstsc

If you want to set the screen size, try this:

    mstsc /w=1920 /h=1200
w is the screen width, while h is the screen height

In case the remote computer has multiple monitors, try this:

    mstsc /span

Sometimes, administrators would like to have full interaction with the remote computer. There're actually 2 modes in remote client connection, namely (1) virtual mode and (2) admin mode. If you want to start the full interaction mode:

    mstsc /admin or mstsc /console

As network administrator, often we want to monitor multiple servers at the same time. This will be very handy:

    tsmmc.msc

With tsmmc.msc, you can connect to multiple computers, save your settings and reuse connections the next time you start it.

For those who would like to check the list of active connections on a certain computer, try this:

    quser /server:RemoteServerName

For those who wants to tweak the your connection performance, check and create these subkeys of the entry if they are missing:

• HKLM\SYSTEM\CurrentControlSet\Services\TermDD\FlowControlDisable (DWORD 32bit, 1 to disable)
• HKLM\SYSTEM\CurrentControlSet\Services\TermDD\FlowControlDisplayBandwidth (DWORD 32bit, priority to display and input, default 70, maximum 255)
• HKLM\SYSTEM\CurrentControlSet\Services\TermDD\FlowControlChannelBandwidth (DWORD 32bit, priority to other data like file transfer and print job, default 30, maximum 255)
• HKLM\SYSTEM\CurrentControlSet\Services\TermDD\FlowControlChargePostCompression (bandwidth calculation based on pre-compressed size or post-compressed size, 0 is pre-compressed size)

Notes: Remote Desktop is a great way to monitor and remote control servers. But, often network administrators or computer help desk needs to view and even control a computer with the user sharing same view. Then, Windows Remote Assistance should be the tool to use. Try this command:
    msra /offerra

SOLVED! - Mapping a Network Drive on Windows 7

Many users of Windows 7 found that after upgrade, they can't find the "Map Network Drive..." option in Windows Explorer. This is because by default it's not shown on Windows 7.

Solution: Open Windows Explorer, press the Alt key. You will see the menu shows again. Under Tools menu, you should find the "Map Network Drive..." option again.

Of course, the net command still work. So, you may create a login script (for domain environment) or a batch to do that. E.g., the command should look like this:

    net use j: \\server\sharefolder /persistent:yes

    *j: is the drive letter you want

To delete a drive mapping, run the command:

    net use j: /delete

SOLVED! - Youtube Adobe Flash Player Error

Youtube videos require Adobe Flash Player to run. Sometimes, for unknown reasons, the player simply stop functioning, which results in Youtube videos unable to play.

Often uninstall and install the Adobe Flash Player will solve the problem. Go to your Windows program manager, or Add/Remove programs in your control panel.

However, in some cases, you need to reset the player. Follow these steps:

1.Uninstall your Flash player: http://download.macromedia.com/pub/flashplayer/current/uninstall_flash_player.exe

2.Download SubInACL from Microsoft from - http://www.microsoft.com/...

3.Install SubInACL.

4.Download the reset_fp10.zip file from - http://www.adobe.com/support/flashplayer/ts/documents/fb1634cb/reset_fp10.zip

5.Extract the reset_fp10.cmd file to C:\Program Files\Windows Resource Kits\Tools\.

6.Double-click reset_fp10.cmd, when it is finished you will see "Press any key to continue"

8. Download the executable installer for Flash Player from http://www.adobe.com/...

Now, try reload your Youtube video again. If this works for you, no need to thank me. This method does not come from me, just would like to share with those who are frustrated by this Youtube/Adobe program like me.

SOLVED! - eBay PayPal not working with IE9

After upgrading to IE9*, the eBay payment by PayPal is not working properly. For some reason, it keeps looping back to the login screen.

Workaround: Browse eBay using Firefox, the payment by PayPal should work properly.

Seemingly there's compatibility issue of IE 9 with eBay or PayPal.

*IE9 only available for Windows 7 or higher.

Skype being banned in China

In these couple of days many were discussing the sudden news that Skype is being banned in China. The news started on Dec 30, 2010 and quickly spread, becoming a heat topic of discussion.

The actual impact is not yet known. However, for sure under the "one country two system" policy, Hong Kong and Macao should not be affected. But, communication with friends or relatives in China will probably soon experience interruptions of Skype service. Interestingly, a few days ago Skype users had already experienced interruptions, as some "supernode" "technical problems" had caused Skype service temporary down. I believe that the incident is actually related to the China Government's new law.

From the legal point of view, China has made it illegal to use Skype in the country. This certainly restricts the growth of Skype business in China. The rationale is obviously - to protect the huge and fast growing VOIP market in China. In comparison, Skype can be 10 times cheaper than the other local telecom providers.

Technically, it may be difficult to shut down Skype completely in China, especially the Skype PC to PC calls. Even China can do it, there are still other options and people are always able to find ways to work around. Still, there are much inconvenience as nowadays people and business depend so much on Skype commmunications.

Let's keep an eye on the future development. Too bad!!

FAQ - Hong Kong Internet Services

INTERNET
The Internet market is changing all the time. Yet, I'll do my best to keep you up-to-date guidelines.

What is the broadband Internet coverage in Hong Kong?
Very high, virtually everyone has Internet access, even through multiple networks. For example, one can have a home wired broadband subscription and a 3G Internet subscription on his mobile device or a wifi account for his netbook.

Are there free internet services in Hong Kong?
Yes, many big shopping malls have free Internet service. Eating places like McDonalds and Starbucks, some MTR stations, most government building and areas. Even public transportation like buses have free wifi access. However, in most cases, free Internet access are only for web page browsing like check your web mail account but not other web apps like chat, skype, etc.

What wired Internet ISPs are available?
For office use, many will choose PCCW (http://www.pccw.com/), HGC (http://www.hgc.com.hk/), Wharf T&T (http://www.wharftt.com/), HKBN (http://www.hkbn.net/). Usually, in business areas, you will have multiple choices. For home use, PCCW, HKBN, i-Cable (http://service.i-cable.com/) are popular. Because of competition, special offers are almost always available all the time. So, quote from various ISPs and negotiate!

What wireless Internet ISPs are available?
"Three" (http://www.three.com.hk/), PCCW 3G and PCCW wifi (http://www.pccw.com/) are some options. PCCW wifi is cheaper, but the coverage is not as wide as the 3G network.

What usually the ISP will offer?
Besides the Internet connection, usually a POP mail account with webmail support. Also, a SMTP server will be provided. Fixed IP are available for business plans, usually one fixed IP or 8 fixed IP. More WAN IP addresses can be requested. Home user plans usually do not have a fixed IP address.

What is the price range of a Internet connection subscription?
Depends on various factors like bandwidth, home or business, fixed or dynamic IP address, etc. For example, an unlimited 2M/640K dynamic IP business plan could cost about HK$100-200/month. While a 100M symmetric broadband with 1 fixed IP business plan could cost you around HK$700/month. Home plans are usually much cheaper. A 100M symmetric plan costs around HK$100/month.

Of course, these figures only serve to give you an idea and they're always changing.

I want to set up a branch office in Hong Kong, what broadband Internet subscription will you recommend?
I'll recommend a 4M/4M symmetric* broadband service with one fixed IP address business plan. It costs around HK$300-400/month, which is a very reasonable price for business use. It should be stable enough in most cases whatever ISP you use.

*symmetric means the upload and download bandwidth are the same. 4M/4M is just a minimum. Actually, many ISPs can provide a higher bandwidth line with more or less the same price.

What other suggestions will you give?
Often your ISP will offer you hosting services for your email and Internet domain. However, ISPs usually charges a much higher price, but poorer quality in hosting services. For quality hosting services, search for a hosting company.

Besides, usually business plans are with a free on-loan router. However, by doing so, you will have your Internet gateway controlled by your ISP. It is good that you provide your own router and have better control of your Internet gateway.

How to Subscribe for a Hong Kong Domain Name?

Whenever companies want to start their business or set up a branch office in Hong Kong, often they ask this same question - how can I subscribe for a Hong Kong local domain name?

".com", ".com.hk" or ".hk"?
Probably you already have a name in mind, like "mycompany.com". But, some might wonder what about "mycompany.com.hk" or even "mycompany.hk"?

Tehnically speaking, all work in much the same way. But from the corporate image point of view, they're quite different in the minds of Hong Kong locals.

A ".com" domain name gives the impression that this is an international company, marketing worldwide. From the corporate image point of view, it may be good. Yet, from a product or service selling point of view, Hong Kong people might feel it too far away to be considered as far as customer service is concerned.

Both ".com.hk" and ".hk" domains are domain names solely managed by the Hong Kong Internet Registration Corporation Limited (https://www.hkirc.hk/), which is a Hong Kong-based non-profit making organization with government and academic links. ".com.hk" and ".hk" names are generally accepted by Hong Kong people as local domain names, which give people the impression that they're dealing with a local product or service provider, or the branch office of a certain international brand.

So, what's the difference of ".com.hk" and ".hk"? The application of ".com.hk" is stricter in comparison with a ".hk" domain. To apply for a ".com.hk" domain, usually the applicant needs to submit the BR (business registration) certificate issued by the HK government, to prove that the applicant is really a registered company in Hong Kong. However, it is not required for a ".hk" domain application.

In the minds of Hong Kong people, a ".com.hk" business is usually local, more official, with a longer history, whereas a ".hk" business will be newer business. Of course, this mindset is gradually changing as more and more .hk domains are being used in Hong Kong.

In short, if you're a foreign company coming to Hong Kong to open a branch office, probably you already have a ".com" domain. Simply apply a similar ".com.hk" domain to reflect the fact that you now have a local branch in Hong Kong. If you worry that someone might take your ".hk" domain, get it at the same time. For example, if you're holding "mycompany.com", apply also "mycompany.com.hk" and "mycompany.hk". You may use both ".com.hk" and ".hk" at the same time for your branch business.

If you're a new Hong Kong company and you serve mainly local market, you'll apply "mycompany.com" and "mycompany.com.hk".

If your business will go overseas, you better check for a ".com" domain and apply similar "mycompany.com" and "mycompany.com.hk" domains. You may use the whois service to check for the availability of the ".com" domain name (http://www.whois.net/)

How to Apply?
As I've said above, the HKIRC is the sole organization in Hong Kong managing the ".com.hk" and ".hk" domains. So, you can simply apply your names by using their online application service. All Hong Kong hosting service companies will also be more than happy to offer you help to apply for a domain name when you subscribe their hosting service.

Setting up a router with i-Cable

Like Hong Kong Broadband (HKBN), i-Cable can be connected simply with the DHCP mode, i.e. to automatically obtain a WAN IP address through DHCP.

Use Linksys WRT54G wireless router as an example, after login go to Setup, Basic Setup. Under Internet Connection type, select “Automatic Configuration – DHCP”.

However, in some cases, users also need to clone their PC's IP address to the router. A restriction fromthe ISP that I hate! Most routers today are smart enough to be able to “clone” your PC / laptop's IP address. Go to “Setup”, “MAC Address Clone”, select “Enable”. Press the “Clone Your PC's MAC” button. Press Save button.

If still no good news, unplug the power of the i-Cable model and plug again. This will refresh the IP  settings. See if this works.

TIPS - How to Setup your wireless router security

Wireless Internet are so common today that many will setup their own wireless network at home. But, how secure is your wireless network? Wireless router or access point must be properly set. The followings are some items you indefinitely should check.

SSID – By default, many routers have the SSID the brand name or model number of the router. Change it to give no hint of neither the brand nor the model. For example, “home-wifi”. Some attacks are targeting certain weaknesses of a particular brand or model of router.

Hide or Show the SSID – hiding your SSID gives you another layer of protection as the presence of your wireless network is not obvious. However, users will find it not so convenient to use. Broadcasting your SSID is fine as long as the wireless security settings are correct.

Encryption – a must! Do not use WEP, which is very easy to break. If possible use WPA2 with TKIP or AES (probably called WPA2 Personal on your router), or WPA if WPA2 is not available. The share key or “password” should be strong enough, e.g. 12 characters or more with combination of upper and lower case and numbers. Avoid using dictionary words.

Firmware – every router or access point will have its firmware, a piece of software burned on the hardware to make it runs. Like any other software, firmware can have bugs and so security loopholes. Download the latest firmware of your router or access point, and apply to your device. Check the user guide or visit the router's website for details of how to upgrade the firmware.

MAC filtering (optional) – it seems to be useful; however, in real life I find it very troublesome to set as I have different wireless devices from time to time. Just leave it disabled!

Remote Management – if you will use the remote management function of your router, remember to set a strong password. If possible, use “https” access, which makes your settings invisible to others when you're setting them remotely.