Add Firewall exceptions to WES7 answer file

Hi Folks

When building a Windows Embedded Standard 7 image you can configure the Firewall rules in order to be able to enable the Remote Desktop. The following article explain the steps to follow in Image Configuration Editor (ICE) : http://msdn.microsoft.com/en-us/library/ff794875(v=winembedded.60).aspx

The configuration of the Firewall require the identification of the functionality Identifier that is located in the FirewallAPI DLL. This identification can't be found on the internet, and some actions on your side must be performed in order to configure the Firewall to match your requirements. The identifier that should be use, is the resource identified in the library, and you can use Resource Hacker application  (http://www.angusj.com/resourcehacker/) on the  FirewallAPI.dll.mui file.

ResourceHacker in action for File and Printer Sharing

Example of IDs :
@FirewallAPI.dll,-28502 (File/Print Sharing)

@FirewallAPI.dll,-28752 (Remote Desktop)

-Nicolas

Enable custom shell per user under WES7

Hi Folks,

We are going to change the default shell launched at user logon, the idea is to have a default shell like your product application to be executed when the default user is logged, and the explorer shell when an administrator starts a session.

Registry configuration

The following MSDN article describes the configuration required under Windows Embedded Standard 2009, but it require some adjustments under Windows Embedded Standard 7.
http://msdn.microsoft.com/en-us/library/ms838576.aspx

The following registry value :

Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\IniFileMapping\system.ini\boot\Shell

should be set to :

Value: USR:Microsoft\Windows NT\CurrentVersion\Winlogon

Security considerations

The explorer shell is more user friendly for platform maintenance but open the device to its settings. By launching your application for lambda users then you ensure that the user won't mess up the system, as your application will provide the minimal set of functionality required by your product.
For security reason you can understand that we must set your application as the default user shell. And per user account configure different shell like the explorer shell for the administrator user. In case of user being able to create new user account on the system through a back door of the system or using malicious code, then this hacker will also have to configure the user account to set a different shell in order to be able to make more damages onto your device.

- Nicolas

MVP Summit 2013 preview

Hi folks,

Nicolas and I are off to this year’s Microsoft MVP Summit in Bellevue/Redmond, WA.

I am really looking forward to discuss exciting topics like Windows Embedded Compact 2013 – the successor of Windows Embedded Compact 7, Windows Embedded Standard 8, etc with the Windows Embedded team at Microsoft as well as with fellow MVPs!

Also the networking aspect with both fellow MVPs as well as with Microsoft is very important for me!

Most of those discussions are under NDA so we cannot Blog about them yet, however we will Blog as much about the MVP Summit as possible.

Have fun!

Windows Embedded Standard 7 - Webcast Session 4

The session 4, last but not least, from the WES7 webcast series is available for watching.

Maintenance and updates

• Deploy OS updates
• Install additional packages
• Power Shell
• Application updates
• Device Manager Client

This webcast has been developed in collaboration with Arrow Electronics Europe.

- Nicolas

Windows Embedded Standard 7 - Webcast Session 3

The session 3 from the WES7 webcast series is available for watching.

Advanced integration

• Adding drivers
• Install packages during system setup
• Remove operating system generated message boxes and dialogs
• Customize Windows PE
• HORM and filters

 This webcast has been developed in collaboration with Arrow Electronics Europe.

- Nicolas

Windows Embedded Standard 7 - Webcast Session 2

The session 2 from the WES7 webcast series is available for watching.

Integrate your application in Windows Embedded Standard

• Using dependency analysis
• Adding custom folders and files
• Application templates
• Start your application when the system starts

 This webcast has been developed in collaboration with Arrow Electronics Europe.

- Nicolas

Windows Embedded Standard 7 - Webcast Session 1

This article starts a series of web-cast covering the development of Windows Embedded Standard 7 runtime images for the application developers. It helps application developers to discover the reason of using the WES7 operating system on a product instead of a Windows 7.

Windows Embedded Standard 7 introduction - Session 1
• Reasons to use an embedded operating system compared to standard OEM version of Windows 7
• Overview of the Windows Embedded Standard 7 features and advantages from an application developer point of view
• Windows Embedded Standard 8 preview

This webcast has been developed in collaboration with Arrow Electronics Europe.

- Nicolas