Friday, April 26, 2013

Disable SSV.DLL and JP2SSV.DLL

Overview

ssv.dll
jp2ssv.dll

These two files are installed with the installation of a full Java client.

When Internet Explorer is launched, these two add-ins cause the registry to be repeatedly queried for Java version information. If this happens on a Terminal Server (Remote Desktop Server, Citrix XenApp server) where there are multiple users logged on simultaneously, these queries will severely impact server performance as more users log on to the servers and launch IE.



Resolution
To resolve (and prevent) this issue, configure "Everyone: No access" NTFS permissions on these files.

This will benefit servers and PC desktops.



Applies to
This applies to the Java client installation on any Windows desktop or server OS.

Windows Server 2003
Windows Server 2008
Windows XP
Windows Vista
Windows 7


Script to disable
DisableJavaSsvDll.CMD

@echo off
CLS
Echo.
Echo There are 2 versions of SSV.DLL:
Echo    One is named SSV.DLL
Echo    Another is named JP2SSV.DLL
Echo.
Echo This script will find and disable all instances of *SSV.DLL on C:
Echo This is accomplished by giving "EVERYONE" "DENY FC" access to these files
Echo.
Pause

Echo.
Echo Checking C:
for /f "delims=" %%x in ('dir /s /b C:\ssv.dll') do (
   @echo.
   @echo Modifying "%%x"
   @cacls "%%x" /E /P EVERYONE:N
   )

for /f "delims=" %%x in ('dir /s /b C:\jp2ssv.dll') do (
   @echo.
   @echo Modifying "%%x"
   @cacls "%%x" /E /P EVERYONE:N
   )

Echo.
Echo %Date% %Time%
Echo Script ran to completion
pause

Wednesday, April 24, 2013

Improve logon performance on XP, Windows 7, Windows 2003, Windows 2008

Disable (bypass) domain logon scripts (XP/2003)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\custom\\Scripts\\UserInitLogonScript.cmd,"

UserInitLogonScript.cmd
@echo off
Set UserInitLogonScript=
Start %systemroot%\system32\userinit.exe
exit




Disable USERENV logging (XP/2003)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"UserEnvDebugLevel"=dword:00000000



Disable RSOP logging (Resultant Set of Policy) (All OSs)
(Configured via Group Policy)



Disable WMI filtering on Group Policy Objects (All OSs)



Resolve issue with IE8 branding (20 second delay) (All OSs)
http://support.microsoft.com/kb/941158

To deploy to multiple servers:
1) List all computer names in a file named SERVERS.TXT

2) Run this command:
for /f %x in (servers.txt) do reg add "\\%x\HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PARSING_BRANDING_CMDLINE_FLAGS_KB941158" /v "*" /t REG_DWORD /d 1