Being a vPro Uber geek I know loads about AMT. And, while I know a fair amount about Windows, it's certainly not as much as it should be. So, I've been taking the time to brush up on my Windows debugging skills...let's fix it instead of just reinstalling . One of my favorite tools so far is Autoruns from Sysinternals. Briefly, it shows everything that windows is starting and allows you to disable things...like drivers, services, start key, etc. If you don't know it, check the link. After playing with it for a bit, I realized, it can be used remotely, even for a system that will not boot. Here are the 3 ways I can think of:

 

1 - Safe Mode

Place autoruns.exe on a .iso image. Map the image to your vPro system. Using KVM Remote Control, reboot into safe mode. The .iso should be mounted under My Computer, where you can run autoruns.exe

 

2 - Remote Drive Share

Boot your vPro system to the Remote Drive Share .iso and map to it. On your help desk console open autoruns.exe. Under file choose Analyze Offline System and point it to the appropriate folders on your mapped drive.

 

3 - Win PE

Build a basic WinPE image. During the build process add autoruns.exe to the system32 directory. Use IDEr either directly or with Trigger a Recover OS or 2 Stage Boot) to boot your vPro system to WinPE. At the command prompt type autoruns. Under file choose Analyze Offline System and point it to the appropriate folders on the vPro system's hard drive.

 

So, does anyone out there (plan to) use Autoruns? Any other tools folks like and would want to use remotely?