Windows 11桌面圖示如何顯示我的電腦

https://www.youtube.com/watch?v=QGpqPtGS5Hs

Windows QoS 限制流量

https://woshub.com/limit-network-file-transfer-speed-windows/

需要啟用網卡的Qos Packet Scheduler

舊版本SQL Server 2012 Native Client和ODBC Driver 11 for SQL Server資料庫驅動程式不支援TLS 1.2

ODBC Driver for SQL Server最新版已經出到17
https://docs.microsoft.com/zh-tw/sql/connect/odbc/download-odbc-driver-for-sql-server?view=sql-server-ver15

SQL Server Native Client 11 (SNAC)因為已經是時代的眼淚，最新版就是QFE版
https://www.microsoft.com/en-us/download/details.aspx?id=50402

https://docs.microsoft.com/zh-tw/sharepoint/security-for-sharepoint-server/enable-tls-1-1-and-tls-1-2-support-in-sharepoint-server-2016

1.1 - 安裝 ODBC Driver 11 for SQL Server 的 TLS 1.2 支援更新

ODBC Driver 11 for SQL Server (適用於 SQL Server 的 ODBC 驅動程式 11) 預設不支援 TLS 1.1 或 TLS 1.2。您必須安裝 ODBC Driver 11 for SQL Server 的 TLS 1.2 支援更新。

• 若要安裝 ODBC Driver 11 for SQL Server 的 TLS 1.2 支援更新，請參閱＜Microsoft® ODBC Driver 11 for SQL Server® - Windows＞。

1.2 - 安裝 SQL Server 2012 Native Client 的 TLS 1.2 支援更新

SQL Server 2012 原生用戶預設不支援 TLS 1.1 或 TLS 1.2。您必須安裝 SQL Server 2012 Native Client 的 TLS 1.2 支援更新。

• 若要安裝 SQL Server 2012 Native Client 更新，請參閱＜Microsoft® SQL Server® 2012 Native Client - QFE＞。

http://net.rex.tw/2021/08/sql-server-2012-native-client-qfetls-12.html
小弟我剛好有用到SQL Server 2012 Native Client，以上這篇文章是整理的一些心得，SQL Server 2012 Native Client 需要新版的QFE版才支援TLS 1.2 

下載Microsoft® SQL Server® 2012 Native Client - QFE (支援TLS 1.2)

https://www.microsoft.com/en-us/download/details.aspx?id=50402

Version:
11.0.7001.0

Date Published:
1/19/2018

KB3135244 - Microsoft SQL Server 的 TLS 1.2 支援(必看!)

https://support.microsoft.com/zh-tw/topic/kb3135244-microsoft-sql-server-%E7%9A%84-tls-1-2-%E6%94%AF%E6%8F%B4-e4472ef8-90a9-13c1-e4d8-44aad198cdbe

檢測工具(CheckClientUpdates.ps1)
https://github.com/Microsoft/tigertoolbox/tree/master/tls1.2

CheckClientUpdates.ps1
The PowerShell Script currently supports the following:

Check if SQL Server Native Client can support TLS 1.2
Check if Microsoft ODBC Driver for SQL Server can support TLS 1.2 This script is restricted to work on x64 and x86 platforms

在AP伺服器上檢測SQL Server資料庫驅動程式是否支援TLS 1.2？

支援TLS 1.2

不支援TLS 1.2

使用 PowerShell 停用SSL、TLS1.0、TLS1.1、RC4

https://docs.microsoft.com/zh-tw/windows-server/identity/ad-fs/operations/manage-ssl-protocols-in-ad-fs

微軟、蘋果、Google及Mozilla四大瀏覽器業者將在2020年終止支援TLS 1.0、1.1
https://www.ithome.com.tw/news/126434

英文版Windows安裝注音輸入法

原來只要把繁體中文版Windows位於C:\Windows\IME\底下的IMETC資料夾複製貼上到英文版Windows一樣路徑(需重開機)就有注音輸入法了

備註一:字型檔路徑是C:\Windows\Fonts
備註二:Language Pack沒有IME，只有中文UI

參考:
https://www.youtube.com/watch?v=lvon3n16vEM

IPv6遠端桌面的port

TCP 45001

Windows10下載語言Basic typing(基本鍵入)都會0x80240438的Error code

如果只需要在 英文版Windows安裝注音輸入法可以參考http://it.rex.tw/2020/07/windows.html

因為英文版Win10安裝繁體中文language pack之後還是無法使用注音輸入法
所以還是得安裝Basic typing(基本鍵入)
Windows10下載語言Basic typing都會0x80240438的Error code
不管是透過GUI介面
還是指令(DISM.exe /Online /Add-Capability /CapabilityName:Language.Basic~~~zh-TW~0.0.1.0)
錯誤畫面如下圖:

https://docs.microsoft.com/en-us/windows/deployment/update/fod-and-lang-packs
The Specify settings for optional component installation and component repair policy, located under Computer Configuration\Administrative Templates\System in the Group Policy Editor, can be used to specify alternate ways to acquire FOD packages, language packages, and content for corruption repair. However, it’s important to note this policy only allows specifying one alternate location and behaves differently across OS versions.

https://answers.microsoft.com/en-us/windows/forum/all/traditional-chinese-ime-is-not-ready-yet-on-win10/df59048c-34e5-4835-9e96-6c972a27c913

I'm in an enterprise, and I was able to resolve this once I stumbled upon this.

https://docs.microsoft.com/en-us/windows/deployment/update/fod-and-lang-packs

"For Windows domain environments running WSUS or SCCM, change the Specify settings for optional component installation and component repair policy to enable downloading FOD and language packs from Windows Update. This setting is located in Computer Configuration\Administrative Templates\System in the Group Policy Editor."

I created a test policy, with this setting enabled, and got everything to work on my test box.

Hope this can help someone.

原因可能是因為該電腦曾經加入過網域，機碼被改成向內部WSUS更新

所以要改成直接跟微軟Windows Update更新

國外買的Windows 10切換到注音輸入法出現“Traditional Chinese IME is not ready yet”

已經安裝繁體中文Language Pack，但切換到注音輸入法出現“Traditional Chinese IME is not ready yet”


https://answers.microsoft.com/en-us/windows/forum/windows_10-other_settings/problems-using-a-japanese-or-traditional-chinese/db5a0ddf-2c50-4f0d-a961-58902f40acda

• For Traditional Chinese basic typing:

DISM.exe /Online /Add-Capability /CapabilityName:Language.Basic~~~zh-TW~0.0.1.0

如果只需要在 英文版Windows安裝注音輸入法可以參考http://it.rex.tw/2020/07/windows.html

ref:
http://www.infomate.tw/2020/01/windows10-traditional-chinese-ime-is.html

https://blog.dino9021.com/2017/02/windows-10.html
Add-WindowsCapability -Name "Language.Basic~~~zh-TW~0.0.1.0" -Online
Add-WindowsCapability -Name "Language.Handwriting~~~zh-TW~0.0.1.0" -Online
Add-WindowsCapability -Name "Language.OCR~~~zh-TW~0.0.1.0" -Online
Add-WindowsCapability -Name "Language.Speech~~~zh-TW~0.0.1.0" -Online
Add-WindowsCapability -Name "Language.TextToSpeech~~~zh-TW~0.0.1.0" -Online
Add-WindowsCapability -Name "Language.Fonts.Hant~~~und-HANT~0.0.1.0" -Online
Add-WindowsCapability -Name "International.Locale.Taiwan~~~zh-TW~0.0.1.0" -Online


 

Windows10英文版內網安裝繁體中文語系和介面

會有這個需求是因為內網電腦不能連Internet，國外只買的到英文版，但是公文和內部系統是中文，需要offline方式安裝中文Language Pack

參考這個網站作法
https://4sysops.com/archives/local-experience-packs-add-languages-to-windows-10-and-server-2019/
實測沒有LXP(LocalExperiencePack)也可以成功，不太清楚LXP的用途

安裝完Language Pack之後仍需要安裝Basic typing(基本鍵入)
請參考 http://it.rex.tw/2020/06/windows10basic-typing0x80240438error.html

(1)
到大量授權中心或是MSDN網站下載mu_windows_10_language_pack_version_1809之類的iso檔，如果是2004版的Win10請下載對應的2004版本

(2)
透過lpksetup安裝zh-TW的LanguagePack(Microsoft-Windows-Client-Language-Pack_x64_zh-tw.cab)

(3)
使用PowerShell執行以下指令
繁體中文版
Set-WinUILanguageOverride -Language zh-TW

英文版
Set-WinUILanguageOverride -Language en-US

簡體中文版
Set-WinUILanguageOverride -Language zh-CN

(4)
登出再登入Windows

備註:
不能是Single language edition的Windows 10

其他參考資料:
https://blog.miniasp.com/post/2018/10/03/PowerShell-Custom-Scripts-for-Azure-Windows-VM


https://docs.microsoft.com/zh-tw/windows-hardware/manufacture/desktop/add-language-packs-to-windows
Language Interface Packs (LIPs): Partially-localized language pack. Requires a base language pack. In Windows 10, version 1809, LIPs are delivered as Local Experience Packs (LXPs) .appx files,

CryptoAPI Cryptographic Service Providers

https://docs.microsoft.com/en-us/windows/win32/seccertenroll/cryptoapi-cryptographic-service-providers


Cryptographic Provider Names
https://docs.microsoft.com/zh-tw/windows/win32/seccrypto/cryptographic-provider-names

IIS Crypto is a free tool that gives administrators the ability to enable or disable protocols, ciphers, hashes and key exchange algorithms on Windows Server

https://www.nartac.com/Products/IISCrypto

REF:
https://cheyi.idv.tw/wp/2019/08/16/insufficient-diffie-hellman-strength/

指定 TLS 伺服器預設的 Diffie-hellman Helman 金鑰位長度，請建立ServerMinKeyBitLength

解釋:
DWORD是Unsigned integer (32-bit)，0x00000800就是2048位元，1024被認為不安全

REF:
https://docs.microsoft.com/zh-tw/windows-server/security/tls/tls-registry-settings
https://thycotic.force.com/support/s/article/TLS-Diffie-Hellman-Hardening
KB3174644
https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2016/3174644
Weak Diffie-Hellman and the Logjam Attack
https://weakdh.org

CAL購買

CAL依產品區分為Windows CAL和SQL CAL
依存取方式區分為User CAL和Device CAL
另外遠端桌面伺服器(Remote Desktop Services)有特別的RDS CAL

Windows CAL：
不同伺服器但同版本Windows只需要買一次，如果已經買過CAL了，日後採購同版本新Windows伺服器就不需要再購買

Windows Server版本升級，CAL是否需重新購買？
如果有軟體保證權益(SA)：不需要重新購買
一般零售/隨機版(沒有SA)：需要重新購買

SQL CAL：
如果是微軟SA(Software Assurance)客戶，同上
可以買Core License就不需要購買SQL CAL

用戶端存取使用權和管理授權
https://www.microsoft.com/zh-tw/licensing/product-licensing/client-access-license

https://community.spiceworks.com/topic/82004-is-it-possible-to-upgrade-server-cals

什麼是軟體保證 (SA)

https://docs.microsoft.com/zh-tw/licensing/software-assurance-faq

有問題可打微軟客服0800-008-833
https://www.microsoft.com/taiwan/newsletter/library/edm-F17/B-23contact_support_edm/

動態磁碟轉換基本磁碟(Convert Dynamic Disk to Basic Disk)

舊硬碟是500GB，原本打算用Acronis的Clone Disk把磁碟複製到新的2TB硬碟
被動態磁碟搞了一下午@@ 
Acronis在動態磁碟無法用Clone Disk
只能用備份再還原，但無法開機(no boot disk detected or the disk has failed)
DISKPART指令要先delete volume才能轉，硬碟裡面有很多資料不能刪
最後用『分区助手』先把來源磁碟轉成基本磁碟(轉換只要幾秒)
終於順利使用Acronis的Clone Disk完成

在ptt找到有人的分享
https://www.ptt.cc/bbs/Storage_Zone/M.1344084490.A.B8B.html 

AOMEI Partition Assistant和AOMEI Backupper付費的專業版似乎也可以 
都是傲梅科技的產品，『分区助手』是免費的，但只有簡體中文介面

備註:
EaseUS Partition Master專業版(付費)應該也可以，沒試過

查看Windows10安裝檔的版本資訊

需要系統管理權限
dism /Get-WimInfo /WimFile:H:\sources\install.esd /index:1

How to see which build and edition of Windows 10 the iso file contains

http://winaero.com/blog/how-to-see-which-build-and-edition-of-windows-10-the-iso-file-contains/

UNIX2DOS 與 DOS2UNIX 批次轉換換行字元

http://blog.miniasp.com/post/2010/08/20/UNIX2DOS-DOS2UNIX-Windows-Linux-Convertion.aspx

C#判斷使用者輸入的本機路徑路徑是有效的

在stackoverflow看到的一片文章:Check if a string is a valid Windows directory (folder) path
可以使用Path.GetFullPath去判斷使用者輸入的本機路徑路徑是有效的
如果是無效的會丟出System.ArgumentException
只是空白字元算有效字元，如果怕使用者誤多輸入空白，可以自己判斷
if (inputPath.Contains(" ") )

Naming Files, Paths, and Namespaces
https://msdn.microsoft.com/en-us/library/aa365247

Use any character in the current code page for a name, including Unicode characters and characters in the extended character set (128–255), except for the following:

• The following reserved characters:
  • < (less than)
  • > (greater than)
  • : (colon)
  • " (double quote)
  • / (forward slash)
  • \ (backslash)
  • | (vertical bar or pipe)
  • ? (question mark)
  • * (asterisk)
• Integer value zero, sometimes referred to as the ASCII NUL character.
• Characters whose integer representations are in the range from 1 through 31, except for alternate data streams where these characters are allowed. For more information about file streams, see File Streams.
• Any other character that the target file system does not allow.

What characters are forbidden in Windows and Linux directory names?
http://stackoverflow.com/questions/1976007/what-characters-are-forbidden-in-windows-and-linux-directory-names

Windows遠端桌面登入後黑畫面，一片漆黑

ctrl+alt+end叫出工作管理員

ref:
https://www.ptt.cc/bbs/Windows/M.1329910026.A.4B1.html

在遠端桌面連線中可以使用哪些快速鍵？

Windows System Error Codes

https://msdn.microsoft.com/en-us/library/windows/desktop/ms681382(v=vs.85).aspx

Windows 8沒有看到休眠選項

http://support2.microsoft.com/kb/2801529/zh-tw

【控制台】-> 【系統及安全性】->【電源選項】-> 【變更電源按鈕行為】