Netflix from a PC

To get around Zone restrictions you need to browse from an IP address in the United States.

This procedure goes through the step I use to connect to Netflix. As of this point of time this is legal if this changes I will stop using it.

Creating a SOCKS proxy

While creating a SOCKS proxy from a Mac is easier it is possible to do it from a PC.

What you need is PuTTY, preferably Firefox to use as your dedicated browser, and you need an Account with Amazon Web Services. Refer to them for the latest procedure on joining.

The first step is to get your AWS instance going. Amazon Linux it a good choice for the type of instance.

You will need to download a key pair

Then you need to download PuTTY also make sure you download the SSH key Generator.


Open the Putty key generator.


click load and navigate to where you stored the pem file.

You will need to change to view all files to see it.


Click OK


Click Save private key


Click Yes


Now open PuTTY


Enter the username@ipaddress  typically it will be something like ec2-user@


The next step is to navigate down to Connection > SSH > Tunnels

Here type in a source port 8080 is not a bad choice click Dynamic and then click Add


Next navigate to Connection > SSH > Auth


Here click on Browse find the .ppk file that you created earlier and click open.

If all has gone well you should now be connected to your instance.


Open Firefox

Click on the alt button if you can not see the navigation buttons and navigate to Tools > Options.


Go to the advanced tab and click on settings


Under Proxies make sure the Manual proxy configuration is selected and under SOCKS Host enter the loopback address and enter the port you entered into PuTTY earlier. In this case 8080. Make sure SOCKS v4 is selected.

Click on OK.

Now you can use this browser to surf the internet like you were located in America because that is where the traffic is coming from as far as they are concerned. Now if you go to you don’t get the sorry we don’t service your region message.

If you are going to join Netflix use a credit card not PayPal and enter a Zip Code that really is in America. I also recommend checking out

If you are having trouble with this procedure and you would like me to set this up for you and you live on the Gold Coast.

Feel free to visit my other site Computer Trouble in Paradise to make an appointment for me to set this up in your place.

How I study for Microsoft Certification

When I study for Microsoft certification I use the following resources:


First I use CBT Nuggets. I start by watching the videos in double time. Then in single time I go through and make notes using OneNote. I find it good to paste from the screen straight into OneNote, make my own notes and create links to relevant resources like Technet.

Next where there are procedures I go through and do them on servers that I provision on AWS. I used to use VMware for this but I am limited on how many servers I can bring up at the same time. Having said that I do use VMware for anything relating to hyper v as it is not possible to install on an AWS instance.

After I have made my notes from CBT Nuggets and done the examples I go and buy a practice exam. Whatever questions I get wrong I make notes on and anything that involves a procedure I make sure that I do on a virtual machine.

When I am scoring around 95% consistently then I go sit the exam.


Using Performance monitor



Performance monitor can be opened by typing perfmon.msc or from the tools menu.


Under monitoring tools you have performance monitor. By default it monitors CPU usage only but you can add counters by pressing the green +.



Click on what you want to measure then click add.

It is common to use counters for Disk CPU and Memory.

Collect the counters that you want and click Ok.


To get a better view of a particular counter click on it and press control h on your keyboard and it appears highlighted. This is good because some of the counters are hard to see individually.


You can change the graph view by pressing the highlighted button.


The choices are line (the default)

Histogram Bar


And report which is good for showing actual values.

Performance monitor is good for showing live values.

For monitoring over a period of time it is better to use data collection sets.

There are two types of data collections user defined and system.

You can start a data collection set by right clicking on it and clicking start.


Once it has been run you can view the results from the report section.


Creating a user defined data collector set


right click user defined > New > Data Collector Set


Give it a name and choose from template or manually. I am doing manually.


click Add to add counters



Select counters that you want to measure and click Ok.


Select a sample interval that suits your purpose and click next.

Select where you want to keep the data and click next.



You can choose who you want the set to run as and and you can choose to open the properties, run the collector set now, or just save it.


I would normally add a description here.


The Schedule tab allows you to create a schedule to run this collector set. You might want to run it at a particular time of day.


The stop condition determines how long you want to run this set.

and the task tab allows you to run a task like a script after the set finishes.


You can start it by right clicking and selecting start.


this should run for 45 seconds in line with the stop condition.


There is a visual indicator that it is running.


When it finishes you can view the report.


Setting up local account policies

The first way to manage local account policies is through the Local Group Policy Editor.

you open it by typing gpedit.msc at the run prompt.


From here you can set Password policy and Account Lockout Policy.



Set these setting as required by double clicking on any setting and changing the setting as required.


The explain tab explains what the setting does.


Another way of doing this is using local security policy type secpol.msc at a prompt to open it.


This displays the same security settings as the local group policy editor and they are edited in much the same way.

Another way is to use security templates.

Open an MMC console and add:

Security Configuration and Analysis and Security Templates.



start with the security template




Make changed to the template as required.

Then go to security configuration and analysis and right click and choose open database.





select the example.inf created previously and click open.


Now either choose Analyse computer now which will tell you where your computer is different to the template or Configure computer now which will configure your computer as per the template.

Setting Firewall profiles

You can use the PowerShell cmdlet Set-NetFirewallProfile to turn firewall profiles on and off.

There are three profiles Domain Public and Private.

Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled True

If you wanted to temporarily turn off the domain profile on one of your computers you could use the following command.

Set-NetFirewallProfile -Profile Domain  -Enabled False

This would just turn off the domain profile you could do testing or whatever task you needed to do and then turn it back on again with

Set-NetFirewallProfile -Profile Domain  -Enabled True.

Another way to do this is with netsh

netsh advfirewall set allprofiles state on

netsh advfirewall set public state off

netsh advfirewall set private state off

netsh advfirewall set domain state on

Multiple Local Group Policy

New to windows 2012 server is the ability to create multiple local group policies. previously local group policies applied to everyone now you can create different policies base on group membership. You might want to create a separate set of policies for administrators and one for everybody else.

To use multiple local group policy. You need to open the MMC add a snap pin for local group policy as normal and add one specific to a user or group.

From the run menu type in MMC


Select add or remove snap in



Select Group Policy Object and press Add


To Select the local computer click finish

Press add again so that you can create a local group for administrators (or any other group)

To select the administrators group select browse.


Select administrators and Ok.


then finish.



Resetting the secure channel for a computer in a domain

Every now and then a computer will lose it’s security association with the domain controller.

This happens a lot when you use virtual machines and snapshots.

You can fix this in a number of ways.

The manual way is to reset the computer account in Active Directory Users and Computers.

Join a workgroup then rejoin the domain.

A better way is to use DSMOD

dsmod computer “cn=W8WS1,ou=test,ou=testdomain,ou=com” -reset

then restart the computer.

Another good way is to use nltest

nltest /server:W8WS01 /sc_reset:testdomain\dc01

This has the advantage of not needing to restart the computer.

And finally with PowerShell you can use:

Test-ComputerSecureChannel -Repair

This also does not require a restart.

Offline Domain join

First you need to provision a blob file to connect a particular machine.
You need to use a seperate blob file for each machine that you want to join offline.

djoin /provision /domain /machine Win8example01 /savefile c:\folder\blob.txt

Then you need to sneaker net the blob file to the target computer

and on the client computer

djoin /requestODJ /loadfile c:\folder\blob.txt /windowspath %SystemRoot% /localOS

reboot the computer and it will join the domain.

Adding a user to a local group

The GUI way


Right click on My Computer

Click Manage

or type compmgmt.msc in start menu.



from computer management select local users and groups

select users

find the user you want to add to a group and select properties

Select the Member Of tab click Add and select the group you want to add them to.


A quicker and batch scriptable way of doing this is

net localgroup GROUPNAME /add paul

The batch script adds a user called itadmin adds it to the Administrators group and removes it from the users local group all in a fraction of the time it would take using the GUI.

net user itadmin P@ssw0rd /add /fullname:itadmin /expires:NEVER /passwordchg:no                        /usercomment:”Administrator account”

net localgroup administrators itadmin /add

net localgroup users itadmin /delete