Paul wrote:
> On 12/28/2023 8:58 AM, Robert in CA wrote:
>> Paul wrote:
>>> On 12/28/2023 3:56 AM, Robert in CA wrote:
>>>
>>>> I have a Microsoft 4000 ergonomic keyboard on my 8500 and the780 also had one but the 'L' key didn't work so I had to type let as Iet. So I switched keyboards for a basic Microsoft ergonomic keyboard. There's no model number on it or anything and it sits flat.
>>>>
>>>> I switched the keyboards and used a Microsoft 4000 keyboard but still nothing and I tried the shift-control-enter on both sides of both keyboards and still nothing.
>>>>
>>>> I'm not following you on your example of the keyboard diagnosis
>>>>
>>>> I tried to run the MediaCreationTool via the Rob User Account and put it on a Patriot.
>>>> but it didn't work. For some reason Postimage isn't working,.. anyway it gave me these error messages.
>>>>
>>>> There was a problem starting Setup. Close the tool , restart your PC and then try running the tool again.
>>>>
>>>> I did and then got this
>>>>
>>>> There was a problem downloading some files.
>>>>
>>>> We weren't able to download all the necessary files. Check to make sure you're connected to the internet and try running the tool again. Error code 0x80072EE2 - 0x20000
>>>>
>>>> Seems like nothing is working,..
>>>>
>>>> Robert
>>>
>>> I have a suspicion, that a common area that would get used by both
>>> Rob and TEMP, has leftovers from a previous MediaCreationTool22H2 attempt.
>>>
>>>     C:\$Windows.~WS\Sources\Panther     # Perhaps some control happens here.
>>>
>>>     C:\ESD\Downloads\BITB023.tmp        # This BITS background transfer operation represents
>>>                                         # a good portion of the 4.7GB. It would be around 4.1GB.
>>>                                         # The BITS transfer jobs are done sequentially, so the "023"
>>>                                         # number will be different on your machine.
>>>
>>> We can use the Windows Error Lookup thing for this.   0x80072EE2 - 0x20000
>>>
>>> The program still seems to have the same name as before.
>>>
>>> https://learn.microsoft.com/en-us/windows/win32/debug/system-error-code-lookup-tool
>>>
>>>     https://download.microsoft.com/download/4/3/2/432140e8-fb6c-4145-8192-25242838c542/Err_6.4.5/Err_6.4.5.exe
>>>
>>>     Name: Err_6.4.5.exe
>>>     Size: 2294520 bytes (2240 KiB)
>>>     SHA256: 88739EC82BA16A0B4A3C83C1DD2FCA6336AD8E2A1E5F1238C085B1E86AB8834A
>>>
>>> PS D:\>    .\Err_6.4.5.exe  0x80072EE2
>>>
>>> # for hex 0x80072ee2 / decimal -2147012894
>>>    WININET_E_TIMEOUT                                              winerror.h
>>> # The operation timed out
>>> # 1 matches found for "0x80072EE2"
>>> PS D:\>
>>>
>>> The transfer failed somewhere during the attempt. 20002 is the "phase", but no info
>>> is available about that.
>>>
>>> *******
>>>
>>> The best thing to do at this point, is take  MediaCreationTool22H2.exe with you
>>> to another machine, and attempt a run with another OS. Like, if you are doing
>>> this on the 780, do it on the 8500.
>>>
>>> It does not matter whether you do it on the 780 or the 8500.
>>>
>>> For example, it does not seem to rely on .NET , so we don't have to
>>> worry about that. There might be a Visual Studio runtime missing.
>>> It seems to be compiled with VS2017.
>>>
>>> This is what I got. It is 193,000,000 bytes too big for a single-layer DVD.
>>> Took about 45 minutes or so. This file is also bigger than the 22H2 I got
>>> some time ago.
>>>
>>> Name: Windows.iso
>>> Size: 4,893,900,800 bytes (4667 MiB)
>>> SHA256: 4540A202FE7D8DC1034B3DE408FC005EE2549127EF15441D169140ED3CA91658
>>>
>>> Try on another machine. I'm sure you can get elevated on another of your setups.
>>>
>>>     Paul
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>> I had to post this  to you,.... you'll understand in the last section.
>>
>> I just had a  thought, couldn't we use the Macrium Rescue CD to gain access to the C: prompt so I can enter the commands? That's how we did everything before. Not by the cmd.exe
>>
>> I was just about to start the download procedure when the screen started scrolling on it own ! and I tried alt-tab and the screens were going crazy. So I closed everything down.
>> I opened Task Manager to see if there was another User logged on but it only showed me.
>>
>> It sure acted like someone had hacked into my computer and was a bit frightening.
>>
>>
>> Robert
>
> Do you think this was related to your visit to PostImage ?
> The scrolling behavior.
>
> To do an offline scan with Windows Defender, there are instructions here.
> The machine will reboot, and the scan results are shown in the listed filenames
> in the article. I've tried this, but wasn't particularly impressed. Offline
> scans can only work on signatures, and they cannot detect hooks that might
> be used when the OS is actually running. Depending on the disk size,
> this could take at least a couple hours.
>
> https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>
> *******
>
> As for Macrium, I tested it, and MediaCreationTool22H2.exe just
> returns without doing anything. I don't think WinPE has a BITS subsystem
> (which is something Windows Update would use).
>
> The only other way to do this, might be to set up a virtual machine
> and do it from there.
>
> *******
>
> If you're running with the TEMP account, double clicking the MediaCreationTool22H2.exe
> should just work. There should be a UAC prompt, and then it should carry on. You don't
> need an elevated Command Prompt for it to work. The UAC should pop up when
> it needs approval to elevate. Select the option to make media for another
> machine, and that should just be a download.
>
> Paul
>

Newegg cancelled my oder for the DVD+RDL's

https://postimg.cc/MvmVqVM9

What are we using the DVD+RDL's for again?

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

Paul wrote:
> On 12/28/2023 8:58 AM, Robert in CA wrote:
>> Paul wrote:
>>> On 12/28/2023 3:56 AM, Robert in CA wrote:
>>>
>>>> I have a Microsoft 4000 ergonomic keyboard on my 8500 and the780 also had one but the 'L' key didn't work so I had to type let as Iet. So I switched keyboards for a basic Microsoft ergonomic keyboard. There's no model number on it or anything and it sits flat.
>>>>
>>>> I switched the keyboards and used a Microsoft 4000 keyboard but still nothing and I tried the shift-control-enter on both sides of both keyboards and still nothing.
>>>>
>>>> I'm not following you on your example of the keyboard diagnosis
>>>>
>>>> I tried to run the MediaCreationTool via the Rob User Account and put it on a Patriot.
>>>> but it didn't work. For some reason Postimage isn't working,.. anyway it gave me these error messages.
>>>>
>>>> There was a problem starting Setup. Close the tool , restart your PC and then try running the tool again.
>>>>
>>>> I did and then got this
>>>>
>>>> There was a problem downloading some files.
>>>>
>>>> We weren't able to download all the necessary files. Check to make sure you're connected to the internet and try running the tool again. Error code 0x80072EE2 - 0x20000
>>>>
>>>> Seems like nothing is working,..
>>>>
>>>> Robert
>>>
>>> I have a suspicion, that a common area that would get used by both
>>> Rob and TEMP, has leftovers from a previous MediaCreationTool22H2 attempt.
>>>
>>>     C:\$Windows.~WS\Sources\Panther     # Perhaps some control happens here.
>>>
>>>     C:\ESD\Downloads\BITB023.tmp        # This BITS background transfer operation represents
>>>                                         # a good portion of the 4.7GB. It would be around 4.1GB.
>>>                                         # The BITS transfer jobs are done sequentially, so the "023"
>>>                                         # number will be different on your machine.
>>>
>>> We can use the Windows Error Lookup thing for this.   0x80072EE2 - 0x20000
>>>
>>> The program still seems to have the same name as before.
>>>
>>> https://learn.microsoft.com/en-us/windows/win32/debug/system-error-code-lookup-tool
>>>
>>>     https://download.microsoft.com/download/4/3/2/432140e8-fb6c-4145-8192-25242838c542/Err_6.4.5/Err_6.4.5.exe
>>>
>>>     Name: Err_6.4.5.exe
>>>     Size: 2294520 bytes (2240 KiB)
>>>     SHA256: 88739EC82BA16A0B4A3C83C1DD2FCA6336AD8E2A1E5F1238C085B1E86AB8834A
>>>
>>> PS D:\>    .\Err_6.4.5.exe  0x80072EE2
>>>
>>> # for hex 0x80072ee2 / decimal -2147012894
>>>    WININET_E_TIMEOUT                                              winerror.h
>>> # The operation timed out
>>> # 1 matches found for "0x80072EE2"
>>> PS D:\>
>>>
>>> The transfer failed somewhere during the attempt. 20002 is the "phase", but no info
>>> is available about that.
>>>
>>> *******
>>>
>>> The best thing to do at this point, is take  MediaCreationTool22H2.exe with you
>>> to another machine, and attempt a run with another OS. Like, if you are doing
>>> this on the 780, do it on the 8500.
>>>
>>> It does not matter whether you do it on the 780 or the 8500.
>>>
>>> For example, it does not seem to rely on .NET , so we don't have to
>>> worry about that. There might be a Visual Studio runtime missing.
>>> It seems to be compiled with VS2017.
>>>
>>> This is what I got. It is 193,000,000 bytes too big for a single-layer DVD.
>>> Took about 45 minutes or so. This file is also bigger than the 22H2 I got
>>> some time ago.
>>>
>>> Name: Windows.iso
>>> Size: 4,893,900,800 bytes (4667 MiB)
>>> SHA256: 4540A202FE7D8DC1034B3DE408FC005EE2549127EF15441D169140ED3CA91658
>>>
>>> Try on another machine. I'm sure you can get elevated on another of your setups.
>>>
>>>     Paul
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>> I had to post this  to you,.... you'll understand in the last section.
>>
>> I just had a  thought, couldn't we use the Macrium Rescue CD to gain access to the C: prompt so I can enter the commands? That's how we did everything before. Not by the cmd.exe
>>
>> I was just about to start the download procedure when the screen started scrolling on it own ! and I tried alt-tab and the screens were going crazy. So I closed everything down.
>> I opened Task Manager to see if there was another User logged on but it only showed me.
>>
>> It sure acted like someone had hacked into my computer and was a bit frightening.
>>
>>
>> Robert
>
> Do you think this was related to your visit to PostImage ?
> The scrolling behavior.
>
> To do an offline scan with Windows Defender, there are instructions here.
> The machine will reboot, and the scan results are shown in the listed filenames
> in the article. I've tried this, but wasn't particularly impressed. Offline
> scans can only work on signatures, and they cannot detect hooks that might
> be used when the OS is actually running. Depending on the disk size,
> this could take at least a couple hours.
>
> https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>
> *******
>
> As for Macrium, I tested it, and MediaCreationTool22H2.exe just
> returns without doing anything. I don't think WinPE has a BITS subsystem
> (which is something Windows Update would use).
>
> The only other way to do this, might be to set up a virtual machine
> and do it from there.
>
> *******
>
> If you're running with the TEMP account, double clicking the MediaCreationTool22H2.exe
> should just work. There should be a UAC prompt, and then it should carry on. You don't
> need an elevated Command Prompt for it to work. The UAC should pop up when
> it needs approval to elevate. Select the option to make media for another
> machine, and that should just be a download.
>
> Paul
>

I was reading through the Windows Denfender offline instructions
and it has to be used on a elevated Admin Account. So we can't do
it.

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

Paul wrote:
> On 12/28/2023 8:58 AM, Robert in CA wrote:
>> Paul wrote:
>>> On 12/28/2023 3:56 AM, Robert in CA wrote:
>>>
>>>> I have a Microsoft 4000 ergonomic keyboard on my 8500 and the780 also had one but the 'L' key didn't work so I had to type let as Iet. So I switched keyboards for a basic Microsoft ergonomic keyboard. There's no model number on it or anything and it sits flat.
>>>>
>>>> I switched the keyboards and used a Microsoft 4000 keyboard but still nothing and I tried the shift-control-enter on both sides of both keyboards and still nothing.
>>>>
>>>> I'm not following you on your example of the keyboard diagnosis
>>>>
>>>> I tried to run the MediaCreationTool via the Rob User Account and put it on a Patriot.
>>>> but it didn't work. For some reason Postimage isn't working,.. anyway it gave me these error messages.
>>>>
>>>> There was a problem starting Setup. Close the tool , restart your PC and then try running the tool again.
>>>>
>>>> I did and then got this
>>>>
>>>> There was a problem downloading some files.
>>>>
>>>> We weren't able to download all the necessary files. Check to make sure you're connected to the internet and try running the tool again. Error code 0x80072EE2 - 0x20000
>>>>
>>>> Seems like nothing is working,..
>>>>
>>>> Robert
>>>
>>> I have a suspicion, that a common area that would get used by both
>>> Rob and TEMP, has leftovers from a previous MediaCreationTool22H2 attempt.
>>>
>>>     C:\$Windows.~WS\Sources\Panther     # Perhaps some control happens here.
>>>
>>>     C:\ESD\Downloads\BITB023.tmp        # This BITS background transfer operation represents
>>>                                         # a good portion of the 4.7GB. It would be around 4.1GB.
>>>                                         # The BITS transfer jobs are done sequentially, so the "023"
>>>                                         # number will be different on your machine.
>>>
>>> We can use the Windows Error Lookup thing for this.   0x80072EE2 - 0x20000
>>>
>>> The program still seems to have the same name as before.
>>>
>>> https://learn.microsoft.com/en-us/windows/win32/debug/system-error-code-lookup-tool
>>>
>>>     https://download.microsoft.com/download/4/3/2/432140e8-fb6c-4145-8192-25242838c542/Err_6.4.5/Err_6.4.5.exe
>>>
>>>     Name: Err_6.4.5.exe
>>>     Size: 2294520 bytes (2240 KiB)
>>>     SHA256: 88739EC82BA16A0B4A3C83C1DD2FCA6336AD8E2A1E5F1238C085B1E86AB8834A
>>>
>>> PS D:\>    .\Err_6.4.5.exe  0x80072EE2
>>>
>>> # for hex 0x80072ee2 / decimal -2147012894
>>>    WININET_E_TIMEOUT                                              winerror.h
>>> # The operation timed out
>>> # 1 matches found for "0x80072EE2"
>>> PS D:\>
>>>
>>> The transfer failed somewhere during the attempt. 20002 is the "phase", but no info
>>> is available about that.
>>>
>>> *******
>>>
>>> The best thing to do at this point, is take  MediaCreationTool22H2.exe with you
>>> to another machine, and attempt a run with another OS. Like, if you are doing
>>> this on the 780, do it on the 8500.
>>>
>>> It does not matter whether you do it on the 780 or the 8500.
>>>
>>> For example, it does not seem to rely on .NET , so we don't have to
>>> worry about that. There might be a Visual Studio runtime missing.
>>> It seems to be compiled with VS2017.
>>>
>>> This is what I got. It is 193,000,000 bytes too big for a single-layer DVD.
>>> Took about 45 minutes or so. This file is also bigger than the 22H2 I got
>>> some time ago.
>>>
>>> Name: Windows.iso
>>> Size: 4,893,900,800 bytes (4667 MiB)
>>> SHA256: 4540A202FE7D8DC1034B3DE408FC005EE2549127EF15441D169140ED3CA91658
>>>
>>> Try on another machine. I'm sure you can get elevated on another of your setups.
>>>
>>>     Paul
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>> I had to post this  to you,.... you'll understand in the last section.
>>
>> I just had a  thought, couldn't we use the Macrium Rescue CD to gain access to the C: prompt so I can enter the commands? That's how we did everything before. Not by the cmd.exe
>>
>> I was just about to start the download procedure when the screen started scrolling on it own ! and I tried alt-tab and the screens were going crazy. So I closed everything down.
>> I opened Task Manager to see if there was another User logged on but it only showed me.
>>
>> It sure acted like someone had hacked into my computer and was a bit frightening.
>>
>>
>> Robert
>
> Do you think this was related to your visit to PostImage ?
> The scrolling behavior.
>
> To do an offline scan with Windows Defender, there are instructions here.
> The machine will reboot, and the scan results are shown in the listed filenames
> in the article. I've tried this, but wasn't particularly impressed. Offline
> scans can only work on signatures, and they cannot detect hooks that might
> be used when the OS is actually running. Depending on the disk size,
> this could take at least a couple hours.
>
> https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>
> *******
>
> As for Macrium, I tested it, and MediaCreationTool22H2.exe just
> returns without doing anything. I don't think WinPE has a BITS subsystem
> (which is something Windows Update would use).
>
> The only other way to do this, might be to set up a virtual machine
> and do it from there.
>
> *******
>
> If you're running with the TEMP account, double clicking the MediaCreationTool22H2.exe
> should just work. There should be a UAC prompt, and then it should carry on. You don't
> need an elevated Command Prompt for it to work. The UAC should pop up when
> it needs approval to elevate. Select the option to make media for another
> machine, and that should just be a download.
>
> Paul
>

Newegg cancelled my order for the DVD+RDL's

https://postimg.cc/MfbKXtKs

What did I need them for again? I thought we were
going to use them to burn a MediaCreationTool on
them?

If so, do I right click the link to do so?

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

On 12/28/2023 11:52 PM, Robert in CA wrote:
> Paul wrote:
>> On 12/28/2023 8:58 AM, Robert in CA wrote:
>>> Paul wrote:
>>>> On 12/28/2023 3:56 AM, Robert in CA wrote:
>>>>
>>>>> I have a Microsoft 4000 ergonomic keyboard on my 8500 and the780 also had one but the 'L' key didn't work so I had to type let as Iet. So I switched keyboards for a basic Microsoft ergonomic keyboard. There's no model number on it or anything and it sits flat.
>>>>>
>>>>> I switched the keyboards and used a Microsoft 4000 keyboard but still nothing and I tried the shift-control-enter on both sides of both keyboards and still nothing.
>>>>>
>>>>> I'm not following you on your example of the keyboard diagnosis
>>>>>
>>>>> I tried to run the MediaCreationTool via the Rob User Account and put it on a Patriot.
>>>>> but it didn't work. For some reason Postimage isn't working,.. anyway it gave me these error messages.
>>>>>
>>>>> There was a problem starting Setup. Close the tool , restart your PC and then try running the tool again.
>>>>>
>>>>> I did and then got this
>>>>>
>>>>> There was a problem downloading some files.
>>>>>
>>>>> We weren't able to download all the necessary files. Check to make sure you're connected to the internet and try running the tool again. Error code 0x80072EE2 - 0x20000
>>>>>
>>>>> Seems like nothing is working,..
>>>>>
>>>>> Robert
>>>>
>>>> I have a suspicion, that a common area that would get used by both
>>>> Rob and TEMP, has leftovers from a previous MediaCreationTool22H2 attempt.
>>>>
>>>>      C:\$Windows.~WS\Sources\Panther     # Perhaps some control happens here.
>>>>
>>>>      C:\ESD\Downloads\BITB023.tmp        # This BITS background transfer operation represents
>>>>                                          # a good portion of the 4.7GB. It would be around 4.1GB.
>>>>                                          # The BITS transfer jobs are done sequentially, so the "023"
>>>>                                          # number will be different on your machine.
>>>>
>>>> We can use the Windows Error Lookup thing for this.   0x80072EE2 - 0x20000
>>>>
>>>> The program still seems to have the same name as before.
>>>>
>>>> https://learn.microsoft.com/en-us/windows/win32/debug/system-error-code-lookup-tool
>>>>
>>>>      https://download.microsoft.com/download/4/3/2/432140e8-fb6c-4145-8192-25242838c542/Err_6.4.5/Err_6.4.5.exe
>>>>
>>>>      Name: Err_6.4.5.exe
>>>>      Size: 2294520 bytes (2240 KiB)
>>>>      SHA256: 88739EC82BA16A0B4A3C83C1DD2FCA6336AD8E2A1E5F1238C085B1E86AB8834A
>>>>
>>>> PS D:\>    .\Err_6.4.5.exe  0x80072EE2
>>>>
>>>> # for hex 0x80072ee2 / decimal -2147012894
>>>>     WININET_E_TIMEOUT                                              winerror.h
>>>> # The operation timed out
>>>> # 1 matches found for "0x80072EE2"
>>>> PS D:\>
>>>>
>>>> The transfer failed somewhere during the attempt. 20002 is the "phase", but no info
>>>> is available about that.
>>>>
>>>> *******
>>>>
>>>> The best thing to do at this point, is take  MediaCreationTool22H2.exe with you
>>>> to another machine, and attempt a run with another OS. Like, if you are doing
>>>> this on the 780, do it on the 8500.
>>>>
>>>> It does not matter whether you do it on the 780 or the 8500.
>>>>
>>>> For example, it does not seem to rely on .NET , so we don't have to
>>>> worry about that. There might be a Visual Studio runtime missing.
>>>> It seems to be compiled with VS2017.
>>>>
>>>> This is what I got. It is 193,000,000 bytes too big for a single-layer DVD.
>>>> Took about 45 minutes or so. This file is also bigger than the 22H2 I got
>>>> some time ago.
>>>>
>>>> Name: Windows.iso
>>>> Size: 4,893,900,800 bytes (4667 MiB)
>>>> SHA256: 4540A202FE7D8DC1034B3DE408FC005EE2549127EF15441D169140ED3CA91658
>>>>
>>>> Try on another machine. I'm sure you can get elevated on another of your setups.
>>>>
>>>>      Paul
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>> I had to post this  to you,.... you'll understand in the last section.
>>>
>>> I just had a  thought, couldn't we use the Macrium Rescue CD to gain access to the C: prompt so I can enter the commands? That's how we did everything before. Not by the cmd.exe
>>>
>>> I was just about to start the download procedure when the screen started scrolling on it own ! and I tried alt-tab and the screens were going crazy. So I closed everything down.
>>> I opened Task Manager to see if there was another User logged on but it only showed me.
>>>
>>> It sure acted like someone had hacked into my computer and was a bit frightening.
>>>
>>>
>>> Robert
>>
>> Do you think this was related to your visit to PostImage ?
>> The scrolling behavior.
>>
>> To do an offline scan with Windows Defender, there are instructions here.
>> The machine will reboot, and the scan results are shown in the listed filenames
>> in the article. I've tried this, but wasn't particularly impressed. Offline
>> scans can only work on signatures, and they cannot detect hooks that might
>> be used when the OS is actually running. Depending on the disk size,
>> this could take at least a couple hours.
>>
>>      https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>>
>> *******
>>
>> As for Macrium, I tested it, and  MediaCreationTool22H2.exe  just
>> returns without doing anything. I don't think WinPE has a BITS subsystem
>> (which is something Windows Update would use).
>>
>> The only other way to do this, might be to set up a virtual machine
>> and do it from there.
>>
>> *******
>>
>> If you're running with the TEMP account, double clicking the MediaCreationTool22H2.exe
>> should just work. There should be a UAC prompt, and then it should carry on. You don't
>> need an elevated Command Prompt for it to work. The UAC should pop up when
>> it needs approval to elevate. Select the option to make media for another
>> machine, and that should just be a download.
>>
>>     Paul
>>
>
>
> I tried to do the Err_6.4.5.exe command tool on the 780 Win 7 but it also has the same problem of C:\\ UserRob and I can't get it to the C: prompt. I checked and the 8500 has the same problem.
>
> We can't get either computer to the C: prompt unless we use the Macrium Rescue CD. That's  how we hacked it but it's not letting us change the User.Rob Account's to the C:
> prompt and both computers have this. I just checked the the 8500 Admin Account is the same way. All the computers are on un-elevated accounts and we can't elevate them
>
> btw in Win 10 you had me right click then click run and enter cmd but how do I do it in Win 7 ? The only way I know of is to use the search box that's why I did it in Win 10.
>
> Postimage is working again, here's the images I wanted to show you.
>
> https://postimg.cc/62tqSjL9 UAC prompt from Rob account, to run MediaCreationTool
>
> https://postimg.cc/7CmrHKrP File Explorer -- where MediaCreationTool is located
>
> https://postimg.cc/SjY33SRx Problem downloading files 0x80072EE2-20000
>
> https://postimg.cc/D8VHK94d
>
> However, as I said, I was able to finally download the MedicaCreationTool and put it on the Patriot.
>
> I don't know if the scrolling was related to it,..I had been scrolling down the page
> looking for your link to download and had found it and was reading the screen and my hand was off the mouse when it started scrolling on its own! That was weird! and the screens going crazy all on their own I didn't touch anything.
>
> Like I said I opened Task Manager to check but I was the only one logged on. After that everything was normal again. It's like I had a Close Encounter *L*
>
> Did you want me to run the Windows Defender scan?
>
> So your saying we don' need to do a command prompt etc for the MediaCreationTool that was only for the Err_6.4.5.exe command tool? Understood, but you don't actually want me to insert the Patriot and run it do you ? it would write over the OS.
>
> Robert

On 12/29/2023 12:50 AM, Robert in CA wrote:

>
> Newegg cancelled my oder for the DVD+RDL's
>
> https://postimg.cc/MvmVqVM9
>
> What are we using the DVD+RDL's for again?
>
> Robert

If you want to make a Windows 10 installer DVD, from the
MediaCreationTool22H2.exe "Windows.iso" file, then you
need media big enough for the job. That is a dual-layer DVD.

You don't have to buy these with Jewel boxes. I selected these
particular ones, to keep the media clean. Spindles of disc blanks
gets you more blanks, but then you have to manage the media storage
yourself. You might be able to get a cake box of 25 of these, without
covers, for about the same price.

Verbatim 95311 5 discs
https://www.amazon.com/Verbatim-DVD-8-5GB-Branded-Surface/dp/B000F0ELOG

Verbatim 94178, is a separate package of 50 jewel boxes,
which is another way to keep media clean. I got a box of these
at the local computer store, a week ago, but the staff had fun
finding them in the store. The clerk thought they were in the cage,
but they were up at the cash. I've been out of jewel boxes for
years, and have been tossing old media, to free up boxes :-)

https://www.verbatim.com/prod/accessories/storage-cases/cd-dvd-storage-cases/cd-dvd-slim-cases-sku-94178/

The purpose of the 95311, is so you'd have just a few discs + jewel boxes,
and not a lot of leftovers, and it would not take a lot of storage space.
If you buy a 50-pack of jewel boxes, that takes up more room.
And if you don't like jewel boxes, it's an unnecessary purchase.

I buy jewel boxes out of sync with media. I bought a 100 cake box
of discs (since all I've got here is some bad CMC to work with),
and I picked up a 50 jewel box to go with it. Some of the cake box
will get tossed in time, so maybe the 50 jewel box will be enough.
I don't really burn enough media per year, to make a dent in that,
so that's a "lifetime supply" for me :-)

Paul

On 12/29/2023 2:35 AM, Robert in CA wrote:

>>
>>      https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>
> I was reading through the Windows Denfender offline instructions
> and it has to be used on a elevated Admin Account. So we can't do
> it.
>
> Robert

You can log into the TEMP account and run it there.

Paul

Paul wrote:
> On 12/29/2023 2:35 AM, Robert in CA wrote:
>
>>>
>>>      https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>>
>> I was reading through the Windows Denfender offline instructions
>> and it has to be used on a elevated Admin Account. So we can't do
>> it.
>>
>> Robert
>
> You can log into the TEMP account and run it there.
>
> Paul
>
>
>

I understand that if I run the MediaCreationTool that it has safeguards
to prevent it from overwriting the current OS but are you asking me to
run it and is that what you wanted me to do and put it on the DVD+RDL's
? If so, I need to re-order them.

I understand the Err_6.4.5.exe but we cannot get to the command prompt
except via Macrium and the Rescue CD.

I still propose we use the Macrium Rescue CD to get to the command
prompt and let me finish the Lieutentant Admin Account with a new
password which it should accept.

C:
C:\\WINDOWS\system32> net user Lieutenant XXXXXX /ADD
C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant TEMP /ADD

So I need to fix the error code in the MediaCreationTool first?

I watched most of the video,, whew!!!
OK, it's simplified and as you say I can do my MediaCreationTool on the
Admin Account to elevate it but again if I run it where is it going to?

I also need to switch hd's again for all this.

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

Paul wrote:
> On 12/29/2023 2:35 AM, Robert in CA wrote:
>
>>>
>>>      https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>>
>> I was reading through the Windows Denfender offline instructions
>> and it has to be used on a elevated Admin Account. So we can't do
>> it.
>>
>> Robert
>
> You can log into the TEMP account and run it there.
>
> Paul
>
>
>

OK, so I do have it right,... then we need to wait
to do this because they cancelled my order.

I can't use Amazon because there's a snafu with my
account and the RAM I tried to buy through them. I
like jewel boxes, it keeps the disks clean.

I could try driving to Staples tomorrow see if they
have some Verbatim 8.5 GB DVD+RDL's and I'll get some
sd-cards.

In the meantime we can finish creating my Admin Account.
for Lieutenant.

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

Paul wrote:
> On 12/29/2023 2:35 AM, Robert in CA wrote:
>
>>>
>>>      https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>>
>> I was reading through the Windows Denfender offline instructions
>> and it has to be used on a elevated Admin Account. So we can't do
>> it.
>>
>> Robert
>
> You can log into the TEMP account and run it there.
>
> Paul
>
>
>

I'll have to re-read the instructions but in
any case I have to switch hd's again and I
would rather wait until after I do my monthly
mrimgs on the 1st.

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

On 12/29/2023 9:40 AM, Robert in CA wrote:
> Paul wrote:
>> On 12/29/2023 2:35 AM, Robert in CA wrote:
>>
>>>>
>>>>       https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>>>
>>> I was reading through the Windows Denfender offline instructions
>>> and it has to be used on a elevated Admin Account. So we can't do
>>> it.
>>>
>>> Robert
>>
>> You can log into the TEMP account and run it there.
>>
>>     Paul
>>
>>
>>
>
>
> I understand that if I run the MediaCreationTool that it has safeguards to prevent it from overwriting the current OS but are you asking me to run it and is that what you wanted me to do and put it on the DVD+RDL's ? If so, I need to re-order them.

The idea here, is I want you to have a Windows 10 OS installer *file*
for when you need it in future. The file will not be available for
download, past 2025.

If you have an incident, where you need to reinstall the OS, you need to
be ready. Windows 10 might be the last OSes these machines see.

Also, having re-installation as an option, knowing you have the materials,
may change your mind as to what to do, in some problem-situations.

>
> I understand the Err_6.4.5.exe but we cannot get to the command prompt except via Macrium and the Rescue CD.
>
> I still propose we use the Macrium Rescue CD to get to the command prompt and let me finish the Lieutentant Admin Account with a new password which it should accept.

Terminals are available from the right-click of the Start button.

You can use the Settings program, to modify what terminal type is offered.
It may default to Powershell, but you can also change from Powershell to Command Prompt.

>
> C:
> C:\\WINDOWS\system32> net user Lieutenant  XXXXXX  /ADD
> C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant TEMP /ADD

net user Lieutenant XXXXXX /ADD # This looks good

net LOCALGROUP Administrators Lieutenant /ADD # Don't really need the word TEMP in there

>
> So I need to fix the error code in the MediaCreationTool first?

It could be a Windows Update problem.

Part of the support system for Windows Update, includes BITS.
BITS and DoSVC are the two downloading systems that Windows Update
can use. BITS is the older scheme. And MediaCreationTool is using
BITS for some reason, and that may mean it is calling WGet for the work.
WGet is a powershell routine, and it calls BITS.

You see, some day, we'll have OS repair capabilities... if we ever
get this Windows.iso file :-) Do you see the circular logic I'm
shielding you from ?

Switch to a Windows 7 setup if you have to, and use your elevated
account, to get this job done.

> I watched most of the video,, whew!!!
> OK, it's simplified and as you say I can do my MediaCreationTool on the Admin Account to elevate it but again if I run it where is it going to?
>
> I also need to switch hd's again for all this.    
>
> Robert

You can start by storing the Windows.iso on the HDD you're booted
from. You can make a copy of it, to at least a second HDD.
But I also recommend changing the file name Win10-x64-22H2.iso
so you will know later, what that file is.

Paul

On 12/29/2023 9:53 AM, Robert in CA wrote:
> Paul wrote:
>> On 12/29/2023 2:35 AM, Robert in CA wrote:
>>
>>>>
>>>>       https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>>>
>>> I was reading through the Windows Denfender offline instructions
>>> and it has to be used on a elevated Admin Account. So we can't do
>>> it.
>>>
>>> Robert
>>
>> You can log into the TEMP account and run it there.
>>
>>     Paul
>>
>>
>>
>
> OK, so I do have it right,... then we need to wait
> to do this because they cancelled my order.
>
> I can't use Amazon because there's a snafu with my
> account and the RAM I tried to buy through them. I
>  like jewel boxes, it keeps the disks clean.
>
> I could try driving to Staples tomorrow see if they
> have some Verbatim 8.5 GB DVD+RDL's and I'll get some
> sd-cards.
>
> In the meantime we can finish creating my Admin Account.
> for Lieutenant.
>
> Robert

There's no rush for this.

Work on it as time permits.

Securing the file is one step.

If optical media was not available, you can put
boot materials on a USB flash stick. Which is a
more expensive method than the cost of a single DVD.
But if some day, optical media is less available out
there, a USB stick will still work.

Paul

Paul wrote:
> On 12/29/2023 9:53 AM, Robert in CA wrote:
>> Paul wrote:
>>> On 12/29/2023 2:35 AM, Robert in CA wrote:
>>>
>>>>>
>>>>>       https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>>>>
>>>> I was reading through the Windows Denfender offline instructions
>>>> and it has to be used on a elevated Admin Account. So we can't do
>>>> it.
>>>>
>>>> Robert
>>>
>>> You can log into the TEMP account and run it there.
>>>
>>>     Paul
>>>
>>>
>>>
>>
>> OK, so I do have it right,... then we need to wait
>> to do this because they cancelled my order.
>>
>> I can't use Amazon because there's a snafu with my
>> account and the RAM I tried to buy through them. I
>>  like jewel boxes, it keeps the disks clean.
>>
>> I could try driving to Staples tomorrow see if they
>> have some Verbatim 8.5 GB DVD+RDL's and I'll get some
>> sd-cards.
>>
>> In the meantime we can finish creating my Admin Account.
>> for Lieutenant.
>>
>> Robert
>
> There's no rush for this.
>
> Work on it as time permits.
>
> Securing the file is one step.
>
> If optical media was not available, you can put
> boot materials on a USB flash stick. Which is a
> more expensive method than the cost of a single DVD.
> But if some day, optical media is less available out
> there, a USB stick will still work.
>
> Paul
>

I went to Staples, Target and Walmart looking
for the Verbatim 5.8 DVD+RDL's and none of them
had any. Only DVD-R's and damn few. They were
all very under stocked. So I ordered them through
eBay the same way I bought the RAM. I did
manage to get two 64 GB SD- Cards.

When you say to have a Windows 10 installer file
you mean on the DVD+RDL's correct? That's why you
want me to run the MediaCreationTool.

I have the MedicaCreationTool on the Patriot and
as soon as I get the DVD+RDL's we can start the
process of running it and downloading it to create
the Win 10 installer file on Win 7 Admin Account
so its elevated.

On the 8500 when I right click the Start button
it says Properties and Open Windows Explorer

I thought Powershell was cmd prompt based?

Is this Powershell?
C:
C:\\WINDOWS\system32> net user Lieutenant XXXXXX /ADD
C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant /ADD

Of course I will replace the XXXXXX with a
more secure password so the program will
accept it this time.

Let me re-read the Windows Defender
instructions, and I'll do that.

Thoughts/suggestions
Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

On 12/29/2023 3:21 PM, Robert in CA wrote:

> I went to Staples, Target and Walmart looking
> for the Verbatim 5.8 DVD+RDL's and none of them
> had any. Only DVD-R's and damn few. They were
> all very under stocked. So I ordered them through
> eBay the same way I bought the RAM. I did
> manage to get two 64 GB SD- Cards.
>
> When you say to have a Windows 10 installer file
> you mean on the DVD+RDL's correct? That's why you
> want me to run the MediaCreationTool.
>
> I have the MedicaCreationTool on the Patriot and
> as soon as I get the DVD+RDL's we can start the
> process of running it and downloading it to create
> the Win 10 installer file on Win 7 Admin Account
> so its elevated.
>
> On the 8500 when I right click the Start button
> it says Properties and Open Windows Explorer
>
> I thought Powershell was cmd prompt based?
>
> Is this Powershell?
> C:
> C:\\WINDOWS\system32> net user Lieutenant  XXXXXX  /ADD
> C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant /ADD
>
> Of course I will replace the XXXXXX with a
> more secure password so the program will
> accept it this time.
>
> Let me re-read the Windows Defender
> instructions, and I'll do that.
>
>
> Thoughts/suggestions
> Robert

A shell, is an environment for running programs.

The Command Prompt shell, has a few convenience features

cd /d %userprofile% # Puts you in the Rob home directory
cd Downloads # Now we're near the error program we downloaded.
Err_6.4.5.exe 0xC0000005 # The current working directory, is a candidate for executables.
# The computer looks for Err_6.4.5 in Downloads. Very convenient.
# The %path% includes the current working directory

The Powershell shell, does not include the current working directory in the path.
I'm sure there is a tricksy way of getting to the right place, but
I don't know it at the moment.

C:
cd Users\Rob\Downloads
.\Err_6.4.5.exe 0xC0000005 # The .\ helps the computer to look in the current working directory
# In Powershell window, if you don't put the .\ then there will be gobs
# of red error text to read.

The syntax is different. And it's a matter of what you are familiar
with, as to which shell you might want as a default.

*******

You can modify the menu, so the Command Prompt is waiting for you.
The two flavors (one elevated) are on offer. Of course there
will be a UAC prompt, which either requires a password or does
not require a password, when you try to open the elevated one.

https://www.tenforums.com/tutorials/22882-show-command-prompt-windows-powershell-win-x-menu-windows-10-a.html

In Command Prompt, you can type this to get to Powershell

powershell.exe

In Powershell, you can type this to get to Command Prompt

cmd.exe # I put the EXE on some items, to emphasize these are programs.

They put them in weird places. You don't have to know this, because the path is already
wired to pick this up.

C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe

These commands might work in both shells. But occasionally, I try to do something
like this in Powershell, it silently fails, and I'm left to wonder what it
was about the syntax that caused a malfunction. That's why I still have
a bit of a bias to using Command Prompt. Stuff usually works there.
These commands do not access the current working directory. We don't
need to CD anywhere, to run these. We could even be in the X: partition for example,
and these would still run.

net user Lieutenant XXXXXX /ADD
net LOCALGROUP Administrators Lieutenant /ADD

*******

Just remember this part.

*Don't* drag-and-drop Windows.iso onto the DVD drive.

If you use an application like Imgburn, it "converts" the ISO
file into a bootable DVD.

MediaCreationTool22H2 has its own converter too. If you make it
handle the Windows.iso file for you, it can burn write-once
media. The built-in converter, works less well with re-writeable
media, and I don't know if Microsoft ever fixed that.

But I like saving the Windows.iso for later. For example, if you
are doing a Repair Install, you can right click the ISO and select
mount. Or, you can go into File Explorer, select an ISO and select "Open",
and that causes the ISO to mount too. Once mounted, you can run Setup.exe
off the ISO, and that kicks off a Repair Install. In a Repair Install
then, you don't need your DVD media, as you can run the install right
off the ISO file itself.

It's for Clean Installs, or if you need to do some maintenance (CHKDSK
when computer is broken), that's when we need some boot media for the job.

At the current time, the signs are, your OS is not clean. It had the
foreign account in it, which tells me the OS started life on someone
elses computer. If you make backup copies of it, if you make emergency
boot OSes based on it, well, it's history is not clean. We don't really
know how much malware is on there, if any.

I'm trying to make sure you have materials on hand, for a *meltdown*. OK ?

I'm not claiming anything is melted right now. But like having boats to lower
on a ship, I want emergency equipment which is ready to use :-)

I probably have around a terabyte of ISOs on the computers here.
There are lots of things I can boot or burn, when needed. Much of
it is junk, but I don't throw it away. by now, I probably have ten or fifteen
Windows.iso files, each one with the version recorded in the name. If
someone says "what was the OS like in 2015", I have the media to check that.

I'm not making you collect media to be the Smithsonian. I want you
to have one disc as a "life raft".

Paul

Paul wrote:
> On 12/29/2023 3:21 PM, Robert in CA wrote:
>
>> I went to Staples, Target and Walmart looking
>> for the Verbatim 5.8 DVD+RDL's and none of them
>> had any. Only DVD-R's and damn few. They were
>> all very under stocked. So I ordered them through
>> eBay the same way I bought the RAM. I did
>> manage to get two 64 GB SD- Cards.
>>
>> When you say to have a Windows 10 installer file
>> you mean on the DVD+RDL's correct? That's why you
>> want me to run the MediaCreationTool.
>>
>> I have the MedicaCreationTool on the Patriot and
>> as soon as I get the DVD+RDL's we can start the
>> process of running it and downloading it to create
>> the Win 10 installer file on Win 7 Admin Account
>> so its elevated.
>>
>> On the 8500 when I right click the Start button
>> it says Properties and Open Windows Explorer
>>
>> I thought Powershell was cmd prompt based?
>>
>> Is this Powershell?
>> C:
>> C:\\WINDOWS\system32> net user Lieutenant  XXXXXX  /ADD
>> C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant /ADD
>>
>> Of course I will replace the XXXXXX with a
>> more secure password so the program will
>> accept it this time.
>>
>> Let me re-read the Windows Defender
>> instructions, and I'll do that.
>>
>>
>> Thoughts/suggestions
>> Robert
>
> A shell, is an environment for running programs.
>
> The Command Prompt shell, has a few convenience features
>
> cd /d %userprofile% # Puts you in the Rob home directory
> cd Downloads # Now we're near the error program we downloaded.
> Err_6.4.5.exe 0xC0000005 # The current working directory, is a candidate for executables.
> # The computer looks for Err_6.4.5 in Downloads. Very convenient.
> # The %path% includes the current working directory
>
> The Powershell shell, does not include the current working directory in the path.
> I'm sure there is a tricksy way of getting to the right place, but
> I don't know it at the moment.
>
> C:
> cd Users\Rob\Downloads
> .\Err_6.4.5.exe 0xC0000005 # The .\ helps the computer to look in the current working directory
> # In Powershell window, if you don't put the .\ then there will be gobs
> # of red error text to read.
>
> The syntax is different. And it's a matter of what you are familiar
> with, as to which shell you might want as a default.
>
> *******
>
> You can modify the menu, so the Command Prompt is waiting for you.
> The two flavors (one elevated) are on offer. Of course there
> will be a UAC prompt, which either requires a password or does
> not require a password, when you try to open the elevated one.
>
> https://www.tenforums.com/tutorials/22882-show-command-prompt-windows-powershell-win-x-menu-windows-10-a.html
>
> In Command Prompt, you can type this to get to Powershell
>
> powershell.exe
>
> In Powershell, you can type this to get to Command Prompt
>
> cmd.exe # I put the EXE on some items, to emphasize these are programs.
>
> They put them in weird places. You don't have to know this, because the path is already
> wired to pick this up.
>
> C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
>
> These commands might work in both shells. But occasionally, I try to do something
> like this in Powershell, it silently fails, and I'm left to wonder what it
> was about the syntax that caused a malfunction. That's why I still have
> a bit of a bias to using Command Prompt. Stuff usually works there.
> These commands do not access the current working directory. We don't
> need to CD anywhere, to run these. We could even be in the X: partition for example,
> and these would still run.
>
> net user Lieutenant XXXXXX /ADD
> net LOCALGROUP Administrators Lieutenant /ADD
>
> *******
>
> Just remember this part.
>
> *Don't* drag-and-drop Windows.iso onto the DVD drive.
>
> If you use an application like Imgburn, it "converts" the ISO
> file into a bootable DVD.
>
> MediaCreationTool22H2 has its own converter too. If you make it
> handle the Windows.iso file for you, it can burn write-once
> media. The built-in converter, works less well with re-writeable
> media, and I don't know if Microsoft ever fixed that.
>
> But I like saving the Windows.iso for later. For example, if you
> are doing a Repair Install, you can right click the ISO and select
> mount. Or, you can go into File Explorer, select an ISO and select "Open",
> and that causes the ISO to mount too. Once mounted, you can run Setup.exe
> off the ISO, and that kicks off a Repair Install. In a Repair Install
> then, you don't need your DVD media, as you can run the install right
> off the ISO file itself.
>
> It's for Clean Installs, or if you need to do some maintenance (CHKDSK
> when computer is broken), that's when we need some boot media for the job.
>
> At the current time, the signs are, your OS is not clean. It had the
> foreign account in it, which tells me the OS started life on someone
> elses computer. If you make backup copies of it, if you make emergency
> boot OSes based on it, well, it's history is not clean. We don't really
> know how much malware is on there, if any.
>
> I'm trying to make sure you have materials on hand, for a *meltdown*. OK ?
>
> I'm not claiming anything is melted right now. But like having boats to lower
> on a ship, I want emergency equipment which is ready to use :-)
>
> I probably have around a terabyte of ISOs on the computers here.
> There are lots of things I can boot or burn, when needed. Much of
> it is junk, but I don't throw it away. by now, I probably have ten or fifteen
> Windows.iso files, each one with the version recorded in the name. If
> someone says "what was the OS like in 2015", I have the media to check that.
>
> I'm not making you collect media to be the Smithsonian. I want you
> to have one disc as a "life raft".
>
> Paul
>

I switched hd's in the 780 and now Win 10 is back in. I used the macrium
Rescue CD to enter the command:

C:\\WINDOWS\system32> net user Lieutenant XXXXX /ADD

with the password replacing the XXXXX's and was successful. However it
didn't show up after I restarted. Just the 2 Rob's and Temp Accounts.

https://postimg.cc/4KB2PnsN

https://postimg.cc/K1b9ytY8

I noticed it was at C:\\Windows\system32> when I clicked the cmd prompt
not C:\\ so how do I get it back?

Can I run the Err_6.4.5.exe via macrium?

I followed your link and changed Win10 so I have the command prompt
options now instead of Windows Powershell. I'm still trying to wrap my head
around it. So the command prompt and Windows Powershell are essentially the
same thing but have different commands to execute programs?

I'm reading through your posts,... whew,.allot to comprehend,..I'm
trying to follow
along.

If I remember correctly, the 780 was a computer supposedly used at a bank.
and I do run all the scans constantly on both computers,...I do have Win
10 ISO on the SD-Card that I used with the USB Adaptor.

I understand where were going with all this and I appreciate it.

I'll switched the hd's again when I do the mrimgs.

I'll re-read your Windows Defender instructions,...

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

Paul wrote:
> On 12/29/2023 3:21 PM, Robert in CA wrote:
>
>> I went to Staples, Target and Walmart looking
>> for the Verbatim 5.8 DVD+RDL's and none of them
>> had any. Only DVD-R's and damn few. They were
>> all very under stocked. So I ordered them through
>> eBay the same way I bought the RAM. I did
>> manage to get two 64 GB SD- Cards.
>>
>> When you say to have a Windows 10 installer file
>> you mean on the DVD+RDL's correct? That's why you
>> want me to run the MediaCreationTool.
>>
>> I have the MedicaCreationTool on the Patriot and
>> as soon as I get the DVD+RDL's we can start the
>> process of running it and downloading it to create
>> the Win 10 installer file on Win 7 Admin Account
>> so its elevated.
>>
>> On the 8500 when I right click the Start button
>> it says Properties and Open Windows Explorer
>>
>> I thought Powershell was cmd prompt based?
>>
>> Is this Powershell?
>> C:
>> C:\\WINDOWS\system32> net user Lieutenant  XXXXXX  /ADD
>> C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant /ADD
>>
>> Of course I will replace the XXXXXX with a
>> more secure password so the program will
>> accept it this time.
>>
>> Let me re-read the Windows Defender
>> instructions, and I'll do that.
>>
>>
>> Thoughts/suggestions
>> Robert
>
> A shell, is an environment for running programs.
>
> The Command Prompt shell, has a few convenience features
>
> cd /d %userprofile% # Puts you in the Rob home directory
> cd Downloads # Now we're near the error program we downloaded.
> Err_6.4.5.exe 0xC0000005 # The current working directory, is a candidate for executables.
> # The computer looks for Err_6.4.5 in Downloads. Very convenient.
> # The %path% includes the current working directory
>
> The Powershell shell, does not include the current working directory in the path.
> I'm sure there is a tricksy way of getting to the right place, but
> I don't know it at the moment.
>
> C:
> cd Users\Rob\Downloads
> .\Err_6.4.5.exe 0xC0000005 # The .\ helps the computer to look in the current working directory
> # In Powershell window, if you don't put the .\ then there will be gobs
> # of red error text to read.
>
> The syntax is different. And it's a matter of what you are familiar
> with, as to which shell you might want as a default.
>
> *******
>
> You can modify the menu, so the Command Prompt is waiting for you.
> The two flavors (one elevated) are on offer. Of course there
> will be a UAC prompt, which either requires a password or does
> not require a password, when you try to open the elevated one.
>
> https://www.tenforums.com/tutorials/22882-show-command-prompt-windows-powershell-win-x-menu-windows-10-a.html
>
> In Command Prompt, you can type this to get to Powershell
>
> powershell.exe
>
> In Powershell, you can type this to get to Command Prompt
>
> cmd.exe # I put the EXE on some items, to emphasize these are programs.
>
> They put them in weird places. You don't have to know this, because the path is already
> wired to pick this up.
>
> C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
>
> These commands might work in both shells. But occasionally, I try to do something
> like this in Powershell, it silently fails, and I'm left to wonder what it
> was about the syntax that caused a malfunction. That's why I still have
> a bit of a bias to using Command Prompt. Stuff usually works there.
> These commands do not access the current working directory. We don't
> need to CD anywhere, to run these. We could even be in the X: partition for example,
> and these would still run.
>
> net user Lieutenant XXXXXX /ADD
> net LOCALGROUP Administrators Lieutenant /ADD
>
> *******
>
> Just remember this part.
>
> *Don't* drag-and-drop Windows.iso onto the DVD drive.
>
> If you use an application like Imgburn, it "converts" the ISO
> file into a bootable DVD.
>
> MediaCreationTool22H2 has its own converter too. If you make it
> handle the Windows.iso file for you, it can burn write-once
> media. The built-in converter, works less well with re-writeable
> media, and I don't know if Microsoft ever fixed that.
>
> But I like saving the Windows.iso for later. For example, if you
> are doing a Repair Install, you can right click the ISO and select
> mount. Or, you can go into File Explorer, select an ISO and select "Open",
> and that causes the ISO to mount too. Once mounted, you can run Setup.exe
> off the ISO, and that kicks off a Repair Install. In a Repair Install
> then, you don't need your DVD media, as you can run the install right
> off the ISO file itself.
>
> It's for Clean Installs, or if you need to do some maintenance (CHKDSK
> when computer is broken), that's when we need some boot media for the job.
>
> At the current time, the signs are, your OS is not clean. It had the
> foreign account in it, which tells me the OS started life on someone
> elses computer. If you make backup copies of it, if you make emergency
> boot OSes based on it, well, it's history is not clean. We don't really
> know how much malware is on there, if any.
>
> I'm trying to make sure you have materials on hand, for a *meltdown*. OK ?
>
> I'm not claiming anything is melted right now. But like having boats to lower
> on a ship, I want emergency equipment which is ready to use :-)
>
> I probably have around a terabyte of ISOs on the computers here.
> There are lots of things I can boot or burn, when needed. Much of
> it is junk, but I don't throw it away. by now, I probably have ten or fifteen
> Windows.iso files, each one with the version recorded in the name. If
> someone says "what was the OS like in 2015", I have the media to check that.
>
> I'm not making you collect media to be the Smithsonian. I want you
> to have one disc as a "life raft".
>
> Paul
>

I just realized I should of entered both lines for it to work.

C:\\WINDOWS\system32> net user Lieutenant XXXXXX /ADD
C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant /ADD

Is this correct?

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

Paul wrote:
> On 12/29/2023 3:21 PM, Robert in CA wrote:
>
>> I went to Staples, Target and Walmart looking
>> for the Verbatim 5.8 DVD+RDL's and none of them
>> had any. Only DVD-R's and damn few. They were
>> all very under stocked. So I ordered them through
>> eBay the same way I bought the RAM. I did
>> manage to get two 64 GB SD- Cards.
>>
>> When you say to have a Windows 10 installer file
>> you mean on the DVD+RDL's correct? That's why you
>> want me to run the MediaCreationTool.
>>
>> I have the MedicaCreationTool on the Patriot and
>> as soon as I get the DVD+RDL's we can start the
>> process of running it and downloading it to create
>> the Win 10 installer file on Win 7 Admin Account
>> so its elevated.
>>
>> On the 8500 when I right click the Start button
>> it says Properties and Open Windows Explorer
>>
>> I thought Powershell was cmd prompt based?
>>
>> Is this Powershell?
>> C:
>> C:\\WINDOWS\system32> net user Lieutenant  XXXXXX  /ADD
>> C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant /ADD
>>
>> Of course I will replace the XXXXXX with a
>> more secure password so the program will
>> accept it this time.
>>
>> Let me re-read the Windows Defender
>> instructions, and I'll do that.
>>
>>
>> Thoughts/suggestions
>> Robert
>
> A shell, is an environment for running programs.
>
> The Command Prompt shell, has a few convenience features
>
> cd /d %userprofile% # Puts you in the Rob home directory
> cd Downloads # Now we're near the error program we downloaded.
> Err_6.4.5.exe 0xC0000005 # The current working directory, is a candidate for executables.
> # The computer looks for Err_6.4.5 in Downloads. Very convenient.
> # The %path% includes the current working directory
>
> The Powershell shell, does not include the current working directory in the path.
> I'm sure there is a tricksy way of getting to the right place, but
> I don't know it at the moment.
>
> C:
> cd Users\Rob\Downloads
> .\Err_6.4.5.exe 0xC0000005 # The .\ helps the computer to look in the current working directory
> # In Powershell window, if you don't put the .\ then there will be gobs
> # of red error text to read.
>
> The syntax is different. And it's a matter of what you are familiar
> with, as to which shell you might want as a default.
>
> *******
>
> You can modify the menu, so the Command Prompt is waiting for you.
> The two flavors (one elevated) are on offer. Of course there
> will be a UAC prompt, which either requires a password or does
> not require a password, when you try to open the elevated one.
>
> https://www.tenforums.com/tutorials/22882-show-command-prompt-windows-powershell-win-x-menu-windows-10-a.html
>
> In Command Prompt, you can type this to get to Powershell
>
> powershell.exe
>
> In Powershell, you can type this to get to Command Prompt
>
> cmd.exe # I put the EXE on some items, to emphasize these are programs.
>
> They put them in weird places. You don't have to know this, because the path is already
> wired to pick this up.
>
> C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
>
> These commands might work in both shells. But occasionally, I try to do something
> like this in Powershell, it silently fails, and I'm left to wonder what it
> was about the syntax that caused a malfunction. That's why I still have
> a bit of a bias to using Command Prompt. Stuff usually works there.
> These commands do not access the current working directory. We don't
> need to CD anywhere, to run these. We could even be in the X: partition for example,
> and these would still run.
>
> net user Lieutenant XXXXXX /ADD
> net LOCALGROUP Administrators Lieutenant /ADD
>
> *******
>
> Just remember this part.
>
> *Don't* drag-and-drop Windows.iso onto the DVD drive.
>
> If you use an application like Imgburn, it "converts" the ISO
> file into a bootable DVD.
>
> MediaCreationTool22H2 has its own converter too. If you make it
> handle the Windows.iso file for you, it can burn write-once
> media. The built-in converter, works less well with re-writeable
> media, and I don't know if Microsoft ever fixed that.
>
> But I like saving the Windows.iso for later. For example, if you
> are doing a Repair Install, you can right click the ISO and select
> mount. Or, you can go into File Explorer, select an ISO and select "Open",
> and that causes the ISO to mount too. Once mounted, you can run Setup.exe
> off the ISO, and that kicks off a Repair Install. In a Repair Install
> then, you don't need your DVD media, as you can run the install right
> off the ISO file itself.
>
> It's for Clean Installs, or if you need to do some maintenance (CHKDSK
> when computer is broken), that's when we need some boot media for the job.
>
> At the current time, the signs are, your OS is not clean. It had the
> foreign account in it, which tells me the OS started life on someone
> elses computer. If you make backup copies of it, if you make emergency
> boot OSes based on it, well, it's history is not clean. We don't really
> know how much malware is on there, if any.
>
> I'm trying to make sure you have materials on hand, for a *meltdown*. OK ?
>
> I'm not claiming anything is melted right now. But like having boats to lower
> on a ship, I want emergency equipment which is ready to use :-)
>
> I probably have around a terabyte of ISOs on the computers here.
> There are lots of things I can boot or burn, when needed. Much of
> it is junk, but I don't throw it away. by now, I probably have ten or fifteen
> Windows.iso files, each one with the version recorded in the name. If
> someone says "what was the OS like in 2015", I have the media to check that.
>
> I'm not making you collect media to be the Smithsonian. I want you
> to have one disc as a "life raft".
>
> Paul
>
My mistake, I have PE10 on the SD-card.

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

Paul wrote:
> On 12/29/2023 3:21 PM, Robert in CA wrote:
>
>> I went to Staples, Target and Walmart looking
>> for the Verbatim 5.8 DVD+RDL's and none of them
>> had any. Only DVD-R's and damn few. They were
>> all very under stocked. So I ordered them through
>> eBay the same way I bought the RAM. I did
>> manage to get two 64 GB SD- Cards.
>>
>> When you say to have a Windows 10 installer file
>> you mean on the DVD+RDL's correct? That's why you
>> want me to run the MediaCreationTool.
>>
>> I have the MedicaCreationTool on the Patriot and
>> as soon as I get the DVD+RDL's we can start the
>> process of running it and downloading it to create
>> the Win 10 installer file on Win 7 Admin Account
>> so its elevated.
>>
>> On the 8500 when I right click the Start button
>> it says Properties and Open Windows Explorer
>>
>> I thought Powershell was cmd prompt based?
>>
>> Is this Powershell?
>> C:
>> C:\\WINDOWS\system32> net user Lieutenant  XXXXXX  /ADD
>> C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant /ADD
>>
>> Of course I will replace the XXXXXX with a
>> more secure password so the program will
>> accept it this time.
>>
>> Let me re-read the Windows Defender
>> instructions, and I'll do that.
>>
>>
>> Thoughts/suggestions
>> Robert
>
> A shell, is an environment for running programs.
>
> The Command Prompt shell, has a few convenience features
>
> cd /d %userprofile% # Puts you in the Rob home directory
> cd Downloads # Now we're near the error program we downloaded.
> Err_6.4.5.exe 0xC0000005 # The current working directory, is a candidate for executables.
> # The computer looks for Err_6.4.5 in Downloads. Very convenient.
> # The %path% includes the current working directory
>
> The Powershell shell, does not include the current working directory in the path.
> I'm sure there is a tricksy way of getting to the right place, but
> I don't know it at the moment.
>
> C:
> cd Users\Rob\Downloads
> .\Err_6.4.5.exe 0xC0000005 # The .\ helps the computer to look in the current working directory
> # In Powershell window, if you don't put the .\ then there will be gobs
> # of red error text to read.
>
> The syntax is different. And it's a matter of what you are familiar
> with, as to which shell you might want as a default.
>
> *******
>
> You can modify the menu, so the Command Prompt is waiting for you.
> The two flavors (one elevated) are on offer. Of course there
> will be a UAC prompt, which either requires a password or does
> not require a password, when you try to open the elevated one.
>
> https://www.tenforums.com/tutorials/22882-show-command-prompt-windows-powershell-win-x-menu-windows-10-a.html
>
> In Command Prompt, you can type this to get to Powershell
>
> powershell.exe
>
> In Powershell, you can type this to get to Command Prompt
>
> cmd.exe # I put the EXE on some items, to emphasize these are programs.
>
> They put them in weird places. You don't have to know this, because the path is already
> wired to pick this up.
>
> C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
>
> These commands might work in both shells. But occasionally, I try to do something
> like this in Powershell, it silently fails, and I'm left to wonder what it
> was about the syntax that caused a malfunction. That's why I still have
> a bit of a bias to using Command Prompt. Stuff usually works there.
> These commands do not access the current working directory. We don't
> need to CD anywhere, to run these. We could even be in the X: partition for example,
> and these would still run.
>
> net user Lieutenant XXXXXX /ADD
> net LOCALGROUP Administrators Lieutenant /ADD
>
> *******
>
> Just remember this part.
>
> *Don't* drag-and-drop Windows.iso onto the DVD drive.
>
> If you use an application like Imgburn, it "converts" the ISO
> file into a bootable DVD.
>
> MediaCreationTool22H2 has its own converter too. If you make it
> handle the Windows.iso file for you, it can burn write-once
> media. The built-in converter, works less well with re-writeable
> media, and I don't know if Microsoft ever fixed that.
>
> But I like saving the Windows.iso for later. For example, if you
> are doing a Repair Install, you can right click the ISO and select
> mount. Or, you can go into File Explorer, select an ISO and select "Open",
> and that causes the ISO to mount too. Once mounted, you can run Setup.exe
> off the ISO, and that kicks off a Repair Install. In a Repair Install
> then, you don't need your DVD media, as you can run the install right
> off the ISO file itself.
>
> It's for Clean Installs, or if you need to do some maintenance (CHKDSK
> when computer is broken), that's when we need some boot media for the job.
>
> At the current time, the signs are, your OS is not clean. It had the
> foreign account in it, which tells me the OS started life on someone
> elses computer. If you make backup copies of it, if you make emergency
> boot OSes based on it, well, it's history is not clean. We don't really
> know how much malware is on there, if any.
>
> I'm trying to make sure you have materials on hand, for a *meltdown*. OK ?
>
> I'm not claiming anything is melted right now. But like having boats to lower
> on a ship, I want emergency equipment which is ready to use :-)
>
> I probably have around a terabyte of ISOs on the computers here.
> There are lots of things I can boot or burn, when needed. Much of
> it is junk, but I don't throw it away. by now, I probably have ten or fifteen
> Windows.iso files, each one with the version recorded in the name. If
> someone says "what was the OS like in 2015", I have the media to check that.
>
> I'm not making you collect media to be the Smithsonian. I want you
> to have one disc as a "life raft".
>
> Paul
>

I tried to do the troubleshooting on Win 10 but my
Control Panel looks allot different than yours and
there's no Troubleshooting.

https://postimg.cc/MM7Q83Ks

I started reading the offline Windows Defender(Microsoft Defender)
scan and it sure is involved. I tried to follow the file path to start it
C:\Windows\MicrosoftAntimalware\Support but I don't have
a Antimalware folder/file that I can see.

https://postimg.cc/WDGJrfLM

I'm not following the instructions at all or the elevated Powershell.
I already am logged in the Admin Account. Also, I did not see a
D:ProgramData\Microsoft\Windows Defender\Offline Scanner
at the top of the page on the example.

This is all very confusing and they are talking about an elevated
command prompt when we can't get the C: back from C:\\User Temp.

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

On 12/30/2023 3:26 AM, Robert in CA wrote:

> I switched hd's in the 780 and now Win 10 is back in. I used the macrium
> Rescue CD to enter the command:
>
>  C:\\WINDOWS\system32> net user Lieutenant  XXXXX  /ADD
>
> with  the password replacing the XXXXX's and was successful. However it
> didn't show up after I restarted. Just the 2 Rob's and Temp Accounts.

When the Macrium CD is running, the "operating system" is X: .

Your command added entries to the X: partition. When the computer
is shut down, the X: no longer exists, and your work is lost.

>
> https://postimg.cc/4KB2PnsN # Stored in X: , not in C: , command does not use the file path to complete itself
>
> https://postimg.cc/K1b9ytY8 # Password must be corrected in the netplwiz entry, to reduce the two Robs to one Rob.
>
> I noticed it was at C:\\Windows\system32> when I clicked the cmd prompt
> not C:\\ so how do I get it back?

cd \ # Reduce current working directory to just the drive letter.

>
> Can I run the Err_6.4.5.exe via macrium?

Yes. It is a simple-minded lookup application that does not rely
upon %path%, %cwd%, or anything else. It just works. You need to CD
to where the executable is stored, of course. It might be on the C: drive
for example.

C: # Change from X: to C:

cd \ # Remove the "Stuff" after C:

cd Users\Rob\Downloads # Build the path to the executable, so the loader can find it.

Err_6.4.5.exe 0xC0000005 # A common error code, we are looking up

>
> I followed your link and changed Win10 so I have the command prompt
> options now instead of Windows Powershell. I'm still trying to wrap my head
> around it. So the command prompt and Windows Powershell are essentially the
> same thing but have different commands to execute programs?

They are different shells, with different annoying habits.

>
> I'm reading through your posts,... whew,.allot to comprehend,..I'm trying to follow
> along.
>
> If I remember correctly, the 780 was a computer supposedly used at a bank.
> and I do run all the scans constantly on both computers,...I do have Win 10 ISO on the SD-Card that I used with the USB Adaptor.
>
> I understand where were going with all this and I appreciate it.
>
> I'll switched the hd's again when I do the mrimgs.
>
> I'll re-read your Windows Defender instructions,...
>
> Robert

Yes, eventually we will return to the Defender Offline Scan.

Paul

On 12/30/2023 3:31 AM, Robert in CA wrote:

> I just realized I should of entered both lines for it to work.
>
> net user Lieutenant  XXXXXX  /ADD
> net LOCALGROUP Administrators Lieutenant /ADD
>
> Is this correct?

If you do it from Macrium CD, the password change and the elevation change,
are stored in the (transient) X: partition that Macrium uses as an OS.

This does not serve a useful purpose for us.

*******

*If* the commands had an "offline mode", we could have fixed this.
But, for commands that are only intended to be set while the
real OS is running, we cannot expect to bodge the thing when C:
is not running.

You could - go to the menu while the Win10 regular OS is running,
start the Administrator Command Prompt from there.

When prompted, enter the password for the TEMP account (because the
UAC will be asking you to use TEMP now). Which you have written down, so
as to not lose control of the machine. Now, we have an elevated Command Prompt,
and when these commands execute, they change the state of our C: partition.

net user Lieutenant XXXXXX /ADD
net LOCALGROUP Administrators Lieutenant /ADD

If, for example, the information was stored in the Registry, we could
use an offline registry editor, to make the changes without using the command.

However, these commands are "powerful", and they can be doing a little work
or a lot of work for us.

We could even use the hack on the Win10 partition, press the shift key five
times, and if an administrator pops up there, issue the two commands. But
that is unlikely to work, without Safe Mode. Or so I'm told. It used to
work without Safe Mode being one of the ingredients.

This is why I warn about attempts to change the account-name of an account.
The reason you cannot do that, is only Microsoft has a list of all the
places where the name must change. It could be a hundred places. And
a human could never get every one of them. Some of them are disguised
with GUIDs and other crap. Once you start installing programs for example,
it's possible your name is part of a path stored in the program installation
section. Even the way your name is stored can vary, some places it is "Rob",
other places it is "R o b ". This is why humans doing it manually, is
a non-starter. Too much work.

Paul

Paul wrote:
> On 12/30/2023 3:31 AM, Robert in CA wrote:
>
>> I just realized I should of entered both lines for it to work.
>>
>> net user Lieutenant  XXXXXX  /ADD
>> net LOCALGROUP Administrators Lieutenant /ADD
>>
>> Is this correct?
>
> If you do it from Macrium CD, the password change and the elevation change,
> are stored in the (transient) X: partition that Macrium uses as an OS.
>
> This does not serve a useful purpose for us.
>
> *******
>
> *If* the commands had an "offline mode", we could have fixed this.
> But, for commands that are only intended to be set while the
> real OS is running, we cannot expect to bodge the thing when C:
> is not running.
>
> You could - go to the menu while the Win10 regular OS is running,
> start the Administrator Command Prompt from there.
>
> When prompted, enter the password for the TEMP account (because the
> UAC will be asking you to use TEMP now). Which you have written down, so
> as to not lose control of the machine. Now, we have an elevated Command Prompt,
> and when these commands execute, they change the state of our C: partition.
>
> net user Lieutenant XXXXXX /ADD
> net LOCALGROUP Administrators Lieutenant /ADD
>
> If, for example, the information was stored in the Registry, we could
> use an offline registry editor, to make the changes without using the command.
>
> However, these commands are "powerful", and they can be doing a little work
> or a lot of work for us.
>
> We could even use the hack on the Win10 partition, press the shift key five
> times, and if an administrator pops up there, issue the two commands. But
> that is unlikely to work, without Safe Mode. Or so I'm told. It used to
> work without Safe Mode being one of the ingredients.
>
> This is why I warn about attempts to change the account-name of an account.
> The reason you cannot do that, is only Microsoft has a list of all the
> places where the name must change. It could be a hundred places. And
> a human could never get every one of them. Some of them are disguised
> with GUIDs and other crap. Once you start installing programs for example,
> it's possible your name is part of a path stored in the program installation
> section. Even the way your name is stored can vary, some places it is "Rob",
> other places it is "R o b ". This is why humans doing it manually, is
> a non-starter. Too much work.
>
> Paul
>

I went back and used the Macrium Rescue CD to
gain access to the cmd prompt and entered the
last string :

C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant /ADD

https://postimg.cc/CdCHWgJp

but when I rebooted the 780 it didn't show the
Lieutenant Admin Account. It's still the 2 Rob's
and TEMP Accounts.

https://postimg.cc/5XrwwN9L

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

On 12/30/2023 4:17 AM, Robert in CA wrote:

> I tried to do the troubleshooting on Win 10 but my
> Control Panel looks allot different than yours and
> there's no Troubleshooting.
>
> https://postimg.cc/MM7Q83Ks

This could be a side-effect of using the un-elevated Rob account.

You might want to bookmark this one.

https://www.thewindowsclub.com/how-to-run-a-troubleshooter-from-the-command-line-in-windows-10

# Administrator (elevated) shell of some sort

msdt.exe /id WindowsUpdateDiagnostic # The article has the names in the list near the bottom.

>
> I started reading the offline Windows Defender(Microsoft Defender)
> scan and it sure is involved. I tried to follow the file path to start it
> C:\Windows\MicrosoftAntimalware\Support but I don't have
> a Antimalware folder/file that I can see.

Would that have been some Windows 7 era info ?

> https://postimg.cc/WDGJrfLM
>
> I'm not following the instructions at all or the elevated Powershell.
> I already am logged in the Admin Account. Also, I did not see a
> D:ProgramData\Microsoft\Windows Defender\Offline Scanner
> at the top of the page on the example.
>
> This is all very confusing and they are talking about an elevated
> command prompt when we can't get the C: back from C:\\User Temp.

The curse of it is, back in Windows 7 era, you just downloaded an ISO
and made a scanner CD for the job. All this GUI-method has done is
made a nuisance for users.

This article, tells us which file(s) have our results, after the scan is finished.
That's why this article has value.

https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html

# This is the procedure. It's in the blue-ball security interface, blue-ball hiding in the Caret on the Taskbar

https://www.tenforums.com/attachments/tutorials/284639d1592839239-how-run-microsoft-defender-offline-scan-windows-10-a-microsoft_defender_offline_scan-3.png

The Microsoft article has the same picture and steps. if you view the page on a Windows 10 setup.
The instructions on finding the scan results are not all that easy.
(The instructions for Windows 7 are at the bottom of the page, in a drop-down menu)

https://support.microsoft.com/en-us/windows/help-protect-my-pc-with-microsoft-defender-offline-9306d528-64bf-4668-5b80-ff533f183d6c

https://support.content.office.net/en-us/media/ca22c8e5-7b8d-63c1-00cb-62ed2c80f51f.png # Not-colorful picture

The basic operation then, is pretty easy... once you get the blue-ball Security window open.
And the Microsoft recipe has you do that, starting from Settings.

It's where they hid it, that doesn't make it easy. The actual two-button-clicks are easy.

Paul

On 12/30/2023 6:44 AM, Robert in CA wrote:

> I went back and used the Macrium Rescue CD to
> gain access to the cmd prompt and entered the
> last string :
>
> C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant /ADD
>
> https://postimg.cc/CdCHWgJp
>
> but when I rebooted the 780 it didn't show the
> Lieutenant Admin Account. It's still the 2 Rob's
> and TEMP Accounts.
>
> https://postimg.cc/5XrwwN9L
>
> Robert

You have to do this, from the Windows 10 C: OS.

Log in as TEMP, enter the TEMP password.

Open an Administrator window. Enter the commands. Done.

net user Lieutenant XXXXXX /ADD
net LOCALGROUP Administrators Lieutenant /ADD

You don't even need to alter the path to do those.
Just needs an administrator window.

If the powershell window is the administrator terminal,
you can type this to switch to Command Prompt shell

# If you were in Powershell at the time...

cmd.exe

net user Lieutenant XXXXXX /ADD
net LOCALGROUP Administrators Lieutenant /ADD

Paul

Paul wrote:
> On 12/30/2023 4:17 AM, Robert in CA wrote:
>
>> I tried to do the troubleshooting on Win 10 but my
>> Control Panel looks allot different than yours and
>> there's no Troubleshooting.
>>
>> https://postimg.cc/MM7Q83Ks
>
> This could be a side-effect of using the un-elevated Rob account.
>
> You might want to bookmark this one.
>
> https://www.thewindowsclub.com/how-to-run-a-troubleshooter-from-the-command-line-in-windows-10
>
> # Administrator (elevated) shell of some sort
>
> msdt.exe /id WindowsUpdateDiagnostic # The article has the names in the list near the bottom.
>
>>
>> I started reading the offline Windows Defender(Microsoft Defender)
>> scan and it sure is involved. I tried to follow the file path to start it
>> C:\Windows\MicrosoftAntimalware\Support but I don't have
>> a Antimalware folder/file that I can see.
>
> Would that have been some Windows 7 era info ?
>
>> https://postimg.cc/WDGJrfLM
>>
>> I'm not following the instructions at all or the elevated Powershell.
>> I already am logged in the Admin Account. Also, I did not see a
>> D:ProgramData\Microsoft\Windows Defender\Offline Scanner
>> at the top of the page on the example.
>>
>> This is all very confusing and they are talking about an elevated
>> command prompt when we can't get the C: back from C:\\User Temp.
>
> The curse of it is, back in Windows 7 era, you just downloaded an ISO
> and made a scanner CD for the job. All this GUI-method has done is
> made a nuisance for users.
>
> This article, tells us which file(s) have our results, after the scan is finished.
> That's why this article has value.
>
> https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>
> # This is the procedure. It's in the blue-ball security interface, blue-ball hiding in the Caret on the Taskbar
>
> https://www.tenforums.com/attachments/tutorials/284639d1592839239-how-run-microsoft-defender-offline-scan-windows-10-a-microsoft_defender_offline_scan-3.png
>
> The Microsoft article has the same picture and steps. if you view the page on a Windows 10 setup.
> The instructions on finding the scan results are not all that easy.
> (The instructions for Windows 7 are at the bottom of the page, in a drop-down menu)
>
> https://support.microsoft.com/en-us/windows/help-protect-my-pc-with-microsoft-defender-offline-9306d528-64bf-4668-5b80-ff533f183d6c
>
> https://support.content.office.net/en-us/media/ca22c8e5-7b8d-63c1-00cb-62ed2c80f51f.png # Not-colorful picture
>
> The basic operation then, is pretty easy... once you get the blue-ball Security window open.
> And the Microsoft recipe has you do that, starting from Settings.
>
> It's where they hid it, that doesn't make it easy. The actual two-button-clicks are easy.
>
> Paul
>

I got it to switch from X to C:

https://postimg.cc/642pdwMb
then tried the commands

C:\\WINDOWS\system32> net user Lieutenant ae0r6ym /ADD
C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant /ADD

and got this:

https://postimg.cc/v10YkDjS

https://postimg.cc/5jhxZh71

DO I need to start the entire process over?

I also tried to run the Err

https://postimg.cc/S2whb9GV

https://postimg.cc/Xp4PGxXd

https://postimg.cc/342LWDTt

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

Paul wrote:
> On 12/30/2023 4:17 AM, Robert in CA wrote:
>
>> I tried to do the troubleshooting on Win 10 but my
>> Control Panel looks allot different than yours and
>> there's no Troubleshooting.
>>
>> https://postimg.cc/MM7Q83Ks
>
> This could be a side-effect of using the un-elevated Rob account.
>
> You might want to bookmark this one.
>
> https://www.thewindowsclub.com/how-to-run-a-troubleshooter-from-the-command-line-in-windows-10
>
> # Administrator (elevated) shell of some sort
>
> msdt.exe /id WindowsUpdateDiagnostic # The article has the names in the list near the bottom.
>
>>
>> I started reading the offline Windows Defender(Microsoft Defender)
>> scan and it sure is involved. I tried to follow the file path to start it
>> C:\Windows\MicrosoftAntimalware\Support but I don't have
>> a Antimalware folder/file that I can see.
>
> Would that have been some Windows 7 era info ?
>
>> https://postimg.cc/WDGJrfLM
>>
>> I'm not following the instructions at all or the elevated Powershell.
>> I already am logged in the Admin Account. Also, I did not see a
>> D:ProgramData\Microsoft\Windows Defender\Offline Scanner
>> at the top of the page on the example.
>>
>> This is all very confusing and they are talking about an elevated
>> command prompt when we can't get the C: back from C:\\User Temp.
>
> The curse of it is, back in Windows 7 era, you just downloaded an ISO
> and made a scanner CD for the job. All this GUI-method has done is
> made a nuisance for users.
>
> This article, tells us which file(s) have our results, after the scan is finished.
> That's why this article has value.
>
> https://www.tenforums.com/tutorials/42305-how-run-microsoft-defender-offline-scan-windows-10-a.html
>
> # This is the procedure. It's in the blue-ball security interface, blue-ball hiding in the Caret on the Taskbar
>
> https://www.tenforums.com/attachments/tutorials/284639d1592839239-how-run-microsoft-defender-offline-scan-windows-10-a-microsoft_defender_offline_scan-3.png
>
> The Microsoft article has the same picture and steps. if you view the page on a Windows 10 setup.
> The instructions on finding the scan results are not all that easy.
> (The instructions for Windows 7 are at the bottom of the page, in a drop-down menu)
>
> https://support.microsoft.com/en-us/windows/help-protect-my-pc-with-microsoft-defender-offline-9306d528-64bf-4668-5b80-ff533f183d6c
>
> https://support.content.office.net/en-us/media/ca22c8e5-7b8d-63c1-00cb-62ed2c80f51f.png # Not-colorful picture
>
> The basic operation then, is pretty easy... once you get the blue-ball Security window open.
> And the Microsoft recipe has you do that, starting from Settings.
>
> It's where they hid it, that doesn't make it easy. The actual two-button-clicks are easy.
>
> Paul
>

Success !

https://postimg.cc/1VFhMzwT

https://postimg.cc/FfHM8p00

Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

On 12/30/2023 7:24 AM, Robert in CA wrote:

>
> I got it to switch from X to C:
>
> https://postimg.cc/642pdwMb
> then tried the commands
>
> C:\\WINDOWS\system32> net user Lieutenant  aaaaaaa  /ADD
> C:\\WINDOWS\system32> net LOCALGROUP Administrators Lieutenant /ADD
>
> and got this:
>
> https://postimg.cc/v10YkDjS # dotNet dependency
>
> https://postimg.cc/5jhxZh71 # Looks like the shell isn't prime materials (could be an x64 CD)
>
> DO I need to start the entire process over?
>
> I also tried to run the Err
>
> https://postimg.cc/S2whb9GV # This is definitely a missing SysWOW on x64 CD. Program works, on 32-bit Macrium CD
>
> https://postimg.cc/Xp4PGxXd # This is definitely a missing SysWOW on x64 CD. Program works, on 32-bit Macrium CD
>
> https://postimg.cc/342LWDTt # What's nice, is I cannot even tell the CDs apart from the command line.
> # The 64-bit should have Program Files and Program Files (x86).

https://i.postimg.cc/yxNY9X3q/4.jpg

$ file Err_6.4.5.exe

Err_6.4.5.exe: PE32 executable (console) Intel 80386, for MS Windows

It's a 32-bit executable. it uses nothing special.

Imports
ntdll.dll
KERNEL32.dll
msvcrt.dll

What might be missing on a WinPE, is SysWOW. A 64-bit WinPE might be missing
SysWOW so 32-bit executables can run. The description here is *wrong*.

https://www.microsoft.com/en-us/download/details.aspx?id=100432

"The Error Lookup tool runs on any supported Windows operating system.
There is one version availble for download, which runs on 32-bit and 64-bit Windows: - Err_6.4.5.exe
"

Well, it won't run if an environment lacks SysWOW (Windows On Windows). it needs
a 64-bit version to run on a 64-bit WinPE (they don't offer one for download).
And I got the same error you got, when I ran the (obviously) 32-bit program
on the 64-bit WinPE. Remember that a Windpws Preinstall Environment, lacks the
subsystems of a real OS (no BITS either).

It's a bit like Safe Mode in a way, some stuff just won't work.

OK, now I switch to my 32-bit Macrium CD, and boot with that instead
of the 64-bit USB stick. And redo the test. And it works.

Paul