Windows 8/10 - Fix This app can't open for Built-in Administrator account

You got any of these annoying errors with Built-in Administrator account on Windows 8/10?

This app can't open

can't be opened using the Built-in Administrator account. Sign in with a 

different account and try again.

or?

This app can't open

can't open while User Account Control is turned off.

Turn on User Account Control

Here is the solution:

1. Local Security Policy - Run "secpol.msc" and modify as in screenshot 

2. Edit Registry - Run "regedit" and change the value as in screenshot

Ref: http://www.islamadel.com/en/notes/6-computer/29-win8fixadmin

Broken trust relationship between Windows 7 and domain

Broken trust relationship between Windows 7 and domain

ISSUE

When logging into a domain account in Windows 7, you receive the following error: "The trust relationship between this workstation and the primary domain failed."

This happens when the machine you are trying to access can no longer communicate securely with the AD domain to which it is joined. The machine’s private secret is not set to the same value store on the domain controller, so when you try to login with a domain account, it fails to verify the Kerberos ticket you receive from the AD against the private secret that is stored on the local machine.

RESOLUTION

1.    Log onto the machine using a local administrator login (non-domain). 
2.    Remove the computer from the domain by placing back onto a local WORKGROUP. 
3.    Rename the computer to something else. If named COMPUTERNAME01, rename to COMPUTERNAME02. This prevents the domain from using the same stored computer information on the AD, which had lost the secure connection and key. 
4.    Reboot, and place machine back onto the domain using administrative credentials. Reboot again,and you will now be able to login as domain user.

Activate Product key in Windows Server 2008 key after installing it

Step1: Go to Control Panel\System and then under Windows Activation click "Change Product Key"

Step2: enter the product key

Step3: Try rebooting and logging on.

Computer Browser Service automatically stop in Windows 2003 Server

Problem: Computer Browser Service automatically stop in Windows 2003 Server

Solution:

1. Go to Administrative Tools - Services
or Go to run and type services.msc
2. Right Click "Computer Browser" then Properties
3. Click on the Recovery tab, set the following:
First Failure = Restart the the Service
Second Failure = Restart the the Service
Subsequent Failures = Restart the the Service
Reset Fail count After = 120
Restart Service after = 0
4. Click Ok


Repeat from procedure number 2 to the Services stopped. 

Admin account has been disabled. [Solved/Closed] in Windows

Try this 1,
To go "Safe Mode" and follow these instructions.
1) Right click on "My Computer"-----> click on "Manage"--> "Computer
Management" Window will be opened.
2) At left side double click on "Local Users and Groups" ----> under it, click on
"Users"---->Now at the right click you can find all the users.
3) Now select your user and right click on it----->Select "Properties"---->then
uncheck the checkbox "Account is disabled". (Note: if account is locked option
is also selected, then uncheck that option also)
Then Click on OK--->close the computer management window
4) Restart your PC and try to login in normal mode.

How to configure ADS Active Directory Service Step by Step Guide

How to configure ADS Active Directory Service Step by Step Guide

• 

In our earlier article we have finished all necessary pre-quest. In this article we would configure 

ADS. ADS configuration wizard can be invoked by thee ways.

• By running DCPROMO.EXE command
• From Configure your server
• Manage your server

No matter which options you choose all three will launch same ADS configuration wizard. I will show all methods

Configure your server / Manage your server

To launch manage your server wizard click on start button and select manage your server option

To launch configure your server wizard click on start button and select configure your server wizard from administrator tools.

Now click on Add remove a role

Now server will check the pre-quest which we have completed in our last article. Wizard would show error message if any of pre-quest is not properly configured.

Wizard will show a list of all tasks which can be configured. Select Domain Controller (Active Directory)

It will show summary for ADS configuration wizard after checking all necessary services.

Click on next to launch ADS configuration wizard

Same wizard can be Launch directly by running DCPROMO.EXE command in run menu

On welcome screen click on next

This screen show that win95 or earlier version of win NT4.0 cannot be the clients of Server 2003 Click on Next

This is the first domain controller in our domain so select Domain controller for a new domain and click on next

This is the first domain in first forest so select domain in new forest and click on next

Give the full FQDN name of server, we are using example.com for practice you can choose your own

Wizard will automatically generate NetBIOS name of server don't change it.

ADS is installed in NTDS folder, don't change its default location.

Sysvols is a publically shared folder. It would be automatically share on all clients.

DNS is required by ADS for proper functioning Select second options install and configure DNS on this computer

If you have any pre windows 2000 client in network then select
Permission compatible with pre windows 2000 server operating systems

If you don't have any pre windows 2000 server operating systems then select
Permissions compatible only with Windows 2000 or Windows 2003 operating systems for greater security features

Now set directory services restore mode passwords. This is used when you restore directory or remove ADS.

Click on next after review the summary of your selection if need change of any option go back and change.

Now wizard will configure all the options you have selected

If you are running this wizard first time then it need to copy some files form Server 2003 CD, Insert Server 2003 CD when it is asked

We will configure DNS server separately after ADS so skip it here to save time

Click on finish to complete the installation

System reboot is required in order to take place the installation of ADS

After reboot server is a domain controller. In our next article we will learn how to verify that ADS is configured properly.

How to change the size of the virtual memory paging file

To change the size of the virtual memory paging file

1. Open System in Control Panel.
2. On the Advanced tab, under Performance, click Settings.
3. In the Performance Options dialog box, click the Advanced tab.
4. Under Virtual memory, click Change.
5. Under Drive [Volume Label], click the drive that contains the paging file you want to change.
6. Under Paging file size for selected drive, click Custom size, and type a new paging file size in megabytes in the Initial size (MB) or Maximum size (MB) box, and then click Set.
   
   If you decrease the size of either the initial or maximum page file settings, you must restart your computer to see the effects of those changes. Increases typically do not require a restart.

Notes

• To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
• To open System, click Start, click Control Panel, and then double-click System. 
• To open System from a command line as an administrator, type:

runas /user: computername \Administrator "rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl"

C:\Users\rasel>runas /user:rasel  "rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl"
Enter the password for rasel:
Attempting to start rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl as user "SAIDRASEL\rasel" ...

C:\Users\rasel>

• To have Windows choose the best paging file size, click System managed size.
• For best performance, do not set the initial size to less than the minimum recommended size under Total paging file size for all drives. The recommended size is equivalent to 1.5 times the amount of RAM on your system. You should leave the paging file at its recommended size, although you might increase its size if you routinely use programs that require a lot of memory.
• To delete a paging file, set both initial size and maximum size to zero, or click No paging file. Microsoft strongly recommends that you do not disable or delete the paging file.
• In computers with 8 or more processors that have the maximum amount of RAM installed, you might be able to gain some incremental performance improvement by splitting the paging file into multiple paging files. Each paging file must be on a separate physical disk and for reliability, each disk must be part of a hardware RAID-5 volume.
• You can remotely change the size of the virtual memory paging file using System Properties in the Computer Management snap-in. For more information, see Related Topics.

How to check if PAE is enabled? (Windows 7/2003 32 bits)

There is a registry setting that will tell you whether Physical Address Extension (PAE) is enabled.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PhysicalAddressExtension

If it is set to 1, then the kernel with PAE support was loaded at startup

WMI will give you this via the command line util 'WMIC', for example:

C:\> wmic os get PAEEnabled
PAEEnabled
TRUE

C:\>