How to enable Ping in Windows Server

For Windows Server to respond to PING requests, you must enable them in the firewall.

To do this, open the rule in the firewall “File and Printer Sharing (Echo Request — ICMPv4-In)” and tick the “Enabled(Enabled)“, similarly for the sixth version “File and Printer Sharing (Echo Request — ICMPv6-In)“.

In order for the system to respond to PING requests only for specific IP, there is also a rule in the tab in the settings “Scope“, where “Remote IP Address” pushing “Add” specify the desired IP-addresses.

From the command line, you can configure this rule like this:

netsh advfirewall firewall set rule name= "File and Printer Sharing (Echo Request — ICMPv4-In)" new enable=yes action=allow profile=any remoteip=192.168.5.0/24

Either (on / off):

netsh firewall set icmpsetting 8
netsh firewall set icmpsetting 8 disable

From PowerShell like this:

Set-NetFirewallRule -Name FPS-ICMP-ERQ-In -Enabled True -Profile Any -Action Allow

The solution to the error “Virtual machine could not be started because the hypervisor is not running”

I noticed once on one HP server, after installing Hyper-V, that virtual workstations are not being launched, giving the following error:

Hyper-V Manager
An error occurred while attempting to start the selected virtual machine(s).

Virtual machine could not be started because the hypervisor is not running.

As it turned out, the problem was in the Intel (R) Virualization Tech not activated in BIOS, after changing from “Disabled” to “Enabled” and start the system, the virtual workstations were successfully launched.

Configuring a VPN Server in Windows Server

On the test I give an example of setting up a VPN server in Windows Server 2008 R2.

First of all, install the role:

1) Open the server manager and click on the link “Add role“.

2) Select the Network Policy and Access Services role and click “Next“.

3) Select “Remote Access” and click “Next“.

4) Click “Install” and after the installation is complete, click the “Close” button.

Now go to the setup:

1) Open the server manager, open the “Roles” branch, select the Network Policy and Access Services role, right-click on “Routing and Remote Access“, select “Configure and enable routing and remote access“.

2) In the first window click “Next“, in the next we’ll select “Custom configuration“, click the “Next” button, tick three items: Network Address Translation (NAT) and Local Area Networking (LAN routing), click Next and “Done“.
In the window that appears, click “Launch service“.

3) We’ll add an address pool for clients by opening the “Server Manager” – “Roles” – “Network Policy and Access Services“, right-click on “Routing and Remote Access” and select “Properties“.
In the “IPv4 tab, select” Static address pool “and add any range after clicking the “Add” button.
In order to be able to connect to a VPN server, for example, from the iPhone (via L2TP), in the “Security” tab, tick “Allow custom IPSec policies for L2TP connection” and specify the key .

4) Now configure permissions for users. Go to “Server Manager – Configuration – Local Users and Groups – Users“:
Open “Properties” of the desired user and on the Dial-in tab, where “Network Access permission” select “Allow access“.

5) Add NAT rules, the necessary routes and restart the service by right-clicking on “Routing and Remote Access” – “All Tasks” – “Restart “.

For the VPN to work, ports are used and should be opened:
TCP 1723 (for PPTP)
TCP 1701 and UDP 500 (for L2TP)
TCP 443 (for SSTP)

Done.

Connection logs can be seen in the C:\Windows\System32\LogFiles directory

How to disable Windows 10 updates

I’ll describe several options for disabling Windows 10 updates:

1) Disable the update service.
Open the “ Services ” window through the Control Panel, or press the Win+R key combination and in the “ Run ” window, enter:

services.msc

In the list of services, usually at the end, we find “ Windows Update” , click on it with the left mouse button twice, in the opened window, select “ Startup Type: Disabled “and click the” Stop “button, then click” OK “and close the windows.

2) You can disable the automatic downloading of drivers from the Internet.
Using the Win+R keys, open the “ Run ” window and enter:

rundll32 newdev.dll,DeviceInternetSettingUi

In the window that opens, select “ No, give the option to select “, then for example “ Never install drivers from Windows Update ” and click the “ Save “.

3) You can hide updates by running the official utility Show or hide updates and tapping “Hide updates“.

4) You can also turn on the “ Set as limit connection ” radio button for any network connection by going to “ Settings ” – “ Network and Internet ” and selecting the network connection, after that Windows will not download updates via this network connection.

5) Open the “Local Group Policy Editor” by pressing the Win+R keys and typing:

gpedit.msc

Select “ Computer Configuration ” -> “ Administrative Templates ” -> “ Windows Components ” -> “ Windows Update “, then on the right” Set up automatic updates “. In the window that opens, select “ Enabled ” and the desired option, for example, “ Download notification and Automatic installation “.

How to disable Windows Defender in Windows 10?

I’ll describe several options for disabling the Windows Defender in Windows 10:

1) The easiest option is to open the menu “Start“, then “ Settings ” (small gear) – “ Update and Security “, on the left, select the section “ Windows Defender ” and turn off real-time protection.

2) The second option, press the combination of keys Win+R and enter the command “ gpedit.msc “, the editor of the group local policy will open.
Then go to “ Computer Configuration ” – “ Administrative Templates ” – “ Windows Components ” – “ Endpoint Protection ” , right-click on “ Disable Endpoint Protection ” and “ Change “, select “ Enabled ” in the opened window and click “ OK “(to select it back you need to select “Not set”).

3) Click Win+R and type “ regedit ” to start the Registry Editor.
In the Registry Editor window, select “ HKEY_LOCAL_MACHINE ” – “ SOFTWARE ” – “ Policies ” – “ Microsoft ” – Windows Defender “.
In the right part of the window, right-click on “ DisableAntiSpyware ” and “ Change “, and set the value to 1 (to turn on Windows Defender return 0).
If “DisableAntiSpyware” is not present, then right-click on “Windows Defender” – “Create” – “DWORD parameter (32 bits)”, enter “DisableAntiSpyware” and set the value to 1.

How to add a Windows user from the command line

It took one day to add a user to Windows 10 from the command line, because nothing happened when the add button was pressed from the control panel.

The first step is to start the command prompt as administrator, for this, in the start menu, type “cmd” or simply find the shortcut “Command line” and click on it with the right mouse button select “Run as administrator “.

At the command prompt, execute the add user command (where NAME is the user name):

net user NAME /add

Finish, the new user can already be seen in the “Control Panel\User Accounts\User Accounts\Account Management