Run Classic MSPaint On a Locked Down Windows 11 PC

My workplace updated the corporate laptop I use with Windows 11.

While it has its quirks, overall it hasn't been disruptively annoying or infuriating so far, just minorly so. 

The taskbar in a distinctly Apple-esque way has the icons horizontally centered by default. The calendar opens only on your primary monitor in a multi-monitor setup (a particularly trivial habit to be forced to break).

My only real (and slight) annoyance, which I address here, is that good old MSPaint has been replaced with a more frills tool, Paint. If accustomed to the old school tool, you may as I did find yourself aggravated that the workflow is a step or few more convoluted for the kind of elementary stuff you might do. 

By elementary, I mean stuff you want to do in the second or few you're accustomed to. Yes, there's the snipping tool, yes, there's Photoshop and Paint.net and myriad others, but no, this is about MSPaint, damn it!

Complicating this is that I lack admin permissions on my work machine. That means installing Classic Paint and pretty much anything else is a no-go. However, I found a workaround.

My first attempt involved trying to use the mspaint.exe executable from a Windows 10 laptop. To make that happen, I took a copy of that file, renamed it to mspaint.txt to avoid triggering any potential email filtering, and emailed that roughly 917KB file to my corporate inbox. 

From there, I saved the file to my Windows 11 machine, then renamed it to change the file extension from TXT to EXE, and tried running it. However, that yielded "Unable to create new document." I know Windows 10's version of mspaint.exe had a few changes since the Windows 7 "era", and likely some dependencies tied to Windows 10 itself, so this wasn't surprising. 

Notably, however, despite Windows 11 being locked down by group policy and antimalware measures, it didn't balk at attempting to start up its older Microsoft-published cousin. Anyway, out of sheer laziness, I then did a google search for web servers with directory browsing enabled using the following criteria:

"Index of /" mspaint.exe

That yielded among others a site down under in Australia somewhere that hadn't bothered to lock down their folder structure hosting an earlier version of the file, this one a mere 335KB or so.

That file I poached and went ahead and uploaded here. Those wishing to verify it's safe can run it past VirusTotal, but as far as Microsoft is concerned, it ran without a hitch.

Count on Microsoft, Inc., or any other corporate entity in IT to inflict the maxim that time marches on upon its users, by periodically and irrevocably changing things up in often annoying, inconvenient, arguably unnecessary ways.

That's perhaps the one constant right behind change itself in the industry today. 

Pool Deck Drain Cleaning, Mechanical and Biological

Now for something completely different, a cobbled-together "solution" for a clogged pool deck drain!

Hurricanes Helene and now Milton have had their way and then some with my area of Florida. As a result, various compostable debris off my roof has found its way down onto my pool (or bacta tank, if you're that hardcore) deck and through the plastic drain. Similar to this one except the drain lives at the corner of the concrete deck and concrete block wall.

Heavy rain led to water intrusion into my garage underneath the back porch due to a compromised door threshold with rotting wood thanks to one and done sketchy, sloppy workmanship by a contractor who shall remain nameless (not out of compassion, it's just been so long I've forgotten, lucky them). 

So, inspired by madness and various other factors, and rather than pay some handyperson to do the job for me, I put together a selection of goods to handle things brutishly.

First, a wood augur, this one.

Next, a 1/2 inch hex socket to hold the augur in place.

Then, a couple of TEKTON 1/2 Inch Drive socket extensions, 24 inches each.

Next, a socket adapter to enable my cordless drill to hook up with this maniacal assembly. 

And, finally, OG Duck Tape to literally seal the deal. 

The idea here is to connect these pieces into basically a long, heavy drill bit that will see the auger power through what gunk and dirt lives in the deck drain and extract it. 

Here's the end result, Ryobi drill for scale.

Months prior to devising this thing, I deployed a liquid biological dethatcher, basically a concoction of beneficial bacteria and microbes to go after accumulated organic matter and start to break it downl. This is similar to the notion of  creating compost, where bulky leaves and branches and grass clippings and whatnot are deconstructed into humus, ideal for gardening among other things.

To help my new microbial friends do their job, I also every few weeks in added some compost accelerator to speed up and promote the bacteria's growth.

Before this enterprise, the rotting threshold saw water intrusion leading to small puddles of water collecting in the area indoors just behind the back door leading to the pool deck.

After a few goes over a couple weeks with this super-lengthened augur, proper drainage has been restored, and despite the inches upon inches of rainfall, water has yet to accumulate. This is buying me some time so that repairs can commence to the threshold once the nice, agonizingly brief spell of cool fall weather sets in.

Following drilling into the muck and seeing the auger capture and help me extract foul-smelling, increasingly soil-like gunk, I took a regular garden hose to the drain and did a once over with it down the length of it. As I did so, very fine organic matter with roughly the same dark hue (and odor) as the dethatching agent would bubble up through the drain as I went, suggesting the bacteria had well established itself and been gobbling up the stuff in advance nicely.

Not exactly within the purview of information technology, but at the same time a nice side project to pursue to take unclogging clogs into my own hands.

Gateway vs Router: T-Mobile 5G Home Internet and Wifi Network Contention

A couple of years ago T-Mobile 5G Home Internet finally became available in my area of Florida, enabling me to ditch longtime but miserly AT&T with their paltry "legacy" DSL (6 Mbps down / ~384 Kbps [!] up), for upwards of 170+ Mbps down / 3-6 Mbps up on 5G.

In the wake of the afterglow of comparatively fantastic speed, following hurricane Debby that blew through my area of Florida in August 2024, I experienced significantly decreased internet bandwidth with my wireless devices only.

Devices hardwired via ethernet cable, like my desktop PC, were unaffected, and speed tests for those showed around the expected bandwidth. My laptops (plural), tablets (ditto), and others though were definitely having issues. Why?

I called T-Mobile and they informed me that one 5G tower of theirs was down for repairs while at least one other was undergoing maintenance and awaiting parts. I proceeded to reach out over a dozen times by message back and forth with T-Mobile support via former Twitter and Facebook, tracking their progress and advising of changes on my end. My 5G gateway has been facing out a south-facing window of my home, and the nearest tower they recommended was E-SE, so I oriented the front face (where the 5G antennas live for this Sagemcom Fast 5688W gateway) as best I could in that general direction.

Now, here's the thing. When I first set up the gateway using the T-Life mobile app for Android, I configured it (innocently enough) with the same wifi SSID and password as that used by my TP-Link router (which supports the newer WIFI 6 standard, as does the 5G gateway). Therein lies the problem, as I found out with reasonable certainty. 

The wifi 6 standard among other benefits enables you to not have to create unique SSIDs to use around your house, say. Instead of creating one SSID for say each wifi extender you might have on every compass point of your home as you might have with wifi 5 and older, now you can use a single SSID to be smartly managed by the router in a mesh setup (as I delve into here).

However, as I discovered, that does NOT mean that separate wifi 6 gateways or routers play nice, wifi wise, with each other. Computers, tablets, even wifi extenders all cope nicely within the wifi 6 standard, but "royalty" in the form of gateways and routers that actually serve as upper management for your local wifi device community can clash.

I followed steps in the T-Life app to do the following:

1. From the Overview => My Wi-fi screen, create a new wifi network named TMobile (with SSID hidden).
   
   
2. From under My Networks, tap the current SSID I originally configured on both my gateway and router, let's call it DARTH.
   
   
3. Tap on DARTH, and on the Network Details screen, tap Delete Network, and confirm. Note also the reminder from T-Mobile, you must have at least one Wi-Fi network to be able to access the gateway from the T-Life app itself. 

In retrospect, that little warning T-Mobile provides turned out to be prophetic, and I wish I took the hint early on that hey, maybe dueling wifi networks are part of the problem, here. Indeed, by setting up the T-Mobile gateway to use the exact same wifi network as my router, I can only imagine the constant radio frequency duel going on between the two devices, each with the same valid credentials and security, each vying for control of the wifi devices on my LAN.

Now, having that TMobile network on the gateway, not only hidden but completely unique to DARTH which my router manages exclusively, and the T-Life app connecting by wifi from the former network's only connected device, my phone, I now am enjoying bandwidth much like my desktop PC from my laptop.

Much better! At this point the only things stifing connectivity are what you'd expect, obstacles impeding signal between the wifi extenders and the router, the relatively elderly Intel Centrino onboard adapter this particular laptop uses, etc. Not a pitched battle between gateway and router over which one serves as the official conduit for local network traffic.

Start Menu or Taskbar "Bulge" Follows Cursor

In Windows 10, have you noticed recently that if you happen to click the Start Menu or right-click the Taskbar, then and hover left or right over any one of the listed items, a sort of "bulge" appears to be following your cursor?

This appeared to start happening by default for my otherwise ordinary display settings as of a month or few ago, and it was just one of those things that's mildly infuriating if like me you both are an acutely visual and detail-oriented person, and prefer an absolutely no-frills Windows desktop experience.

After poking around I found the solution. Settings => Color Settings reveals that Transparency effects is the offender. 

By setting this to Off, no more bulge, no more seething with apoplectic rag-- I mean, annoyance.

The only minor and to me inconsequential issue is that the background is a tad darker thanks to the now fully obscured transparency. No big deal, and far better than yet another decision casually inflicted by Microsoft upon its userbase.

Hard Drive Replacement and USB

Just got a shiny new Western Digital Black 10TB hard drive to replace my somewhat ailing WD 6TB Blue with just over 10 years of solid 24/7 performance. 

Electromechanical hard drives like many electronics in general will likely go the distance if no failures develop in the first few days, weeks, months of use, but over time they do simply begin to wear out. My venerable drive for games and media was beginning to develop subtle issues, like large copy operations interrupted with occasional retries but finally completing, or files that suddenly proved unreadable when trying to access them.

S.M.A.R.T. software on board reported no anomalies other than some higher than normal temperatures (mostly due to a dead case fan I replaced along with the drive) and a couple hundred sector reallocations indicating the drive found some  physically bad sectors and moved what data it could to different ones.

I decided to go the relatively lazy route of taking the old drive out, installing the new one, and planning to transfer the data via USB 3.0. Lazy, mainly because given I'd already installed the new drive and put my rig back together I didn't want to crack the case open again despite the significantly faster direct SATA transfer speeds. That prompted a series of irritating events and I wouldn't be sharing them here otherwise, in case you, dear reader, have recently experienced the following yourself, so there's that.

Upon rebooting my Windows 10 system, all was well for the most part except for the fact that upon opening Disk Management to initialize, allocate partitions, and format the drive, my system suffered its first BSOD of the afternoon, citing a file mrcbt.sys which belongs to backup software I use, Macrium Reflect. Simply restarting afterward seems to have gotten around that issue and my setup booted normally with the newly partitioned and formatted 10TB drive online.

New drive up and running in Disk Management.

Here's where things got irritating. Using a decent USB 3 external hard drive bay by Sabrent I installed my old drive, powered the enclosure up, then plugged it into my USB 3 hub. Immediate BSOD, citing "memory management" issues with no mention of specific files.

I fell back to review my options after a couple more tries leading to the same outcome. I could hook the enclosure up to my wife's PC on our LAN, share it from there, and transfer over the wire. This though would add a lot more time and overhead on top of asking a lot of my senior citizen hard drive in its time of subtle decline. Also, could've hooked it up to a laptop but that would take even longer for transfer of the over 4 TB of data and burden the old drive further.

Ultimately I paid for my laziness and ended up cracking the case open, and as I type the old drive is resting a bit precariously but securely on the floor beside the case providing data to the new drive. Meanwhile I wondered why memory, in this case, was cited as the culprit.

Even after decades of supporting it, Windows to me is largely a black box, even with almost a decade of software and database development on Windows systems. I don't care to delve into the plumbing and avoid doing so whenever possible, but one thing I recalled is the fact that I had been using the old drive to host my system's page file as well as the go-to place for applications and the OS to store temporary files.

From my wife's PC I plugged the drive enclosure in with the old drive on board and tried to delete the TEMP folder. Curiously, Windows wouldn't allow me to do so, presumably because my user account on my PC was owner of that folder. Okay, so I took ownership of the TEMP folder, and then tried to delete all the contents. Curiously, even this didn't quite work. As is typical when trying to delete files from your page file and temp file folder in this case one file refused to be deleted from Windows Explorer.

I opened an administrator authorized Command Prompt, and curiously it not only didn't allow me to delete the file, but kept complaining the file could not be found. What? It's right there, what gives?? I found even after taking ownership, even after being allowed in Explorer to rename the TEMP folder, that one file, a GUID named one resembling daf2743a-311f-4315-9272-be2dca1fa178.tmp, refused to die. Even deleting the folder failed though renaming worked. Weird!

Sabrent USB 3 drive enclosure, for 2.5" and 3.5" drives / SSDs.

I'm used to situations where a Windows PC might BSOD if certain types of USB thumb drives or other peripherals are plugged in and powered on at boot, but this wasn't the case here as the system BSOD'd whether the drive was connected via USB at boot or after the fact. That on a foreign system Windows seemingly "respected" the other system's TEMP folder as seems the case here is curious, but perhaps something prompted for security reasons. 

Maybe for Microsoft it was sort of a quick and dirty remediation for a security vulnerability involving bad actors trying to recover data from a stolen operating system drive, where that TEMP folder would typically reside. This though just happened to be a case where instead of using my main SSD with the operating system for it I was using my media drive to house the pagefile and temp files, so perhaps that's why events conspired to not allow that magic to happen via USB.

Simply connecting the old drive directly via SATA to my rig to do the transfer has been operating for minutes now without issue, and given the old drive's TEMP folder still lingers, USB may be the extra ingredient that frustrated my initial, lazy attempts.

Troubleshooting a Tablet with a Teeny, Tiny Tile

Tablet or smartphone repair is not fun, I hate it! That said, I managed a creative solution for my old Samsung Galaxy E 9.6 which I'd recently had to replace the battery on.

Removing the old battery and installing a new one was relatively easy. Carefully pry open the tablet, taking care to not damage its electronic internals, remove the old battery, install the new one, then close it up. Right?

Unfortunately, that turned out to be a best case scenario which was made worse thanks to the ribbon connector circled below. 

It wasn't the connector itself (fortunately the individual pins were intact), but the incredibly, aggravatingly delicate piece of plastic designed to snap atop the cable to connect solidly to the motherboard pins, also known formally as a ribbon cable snap.

I spent about an hour with a jeweler's loupe which clips on to a temple piece of your eyeglasses making like Popeye the sailor man and zooming in with one eye on the incredibly tiny pins trying to get a replacement ribbon connector clip (cannibalized from a nearly identical tablet purchased cheap off eBay due to a cracked and dead LCD screen) to assume the position.

Thanks to my frustration and a not quite true pair of forceps, I got nowhere. While the ribbon cable would slide in perfectly, without that infuriating clip in place I was unable to snap it down to make the connection hug between connector and motherboard. On top of that, the design of my tablet and the busted one was almost, but not quite, identical, and for all I knew the clip I salvaged might've been for a different type ribbon connector.

After that, I reflected on the fact that for a silly crafts-related idea I purchased a bag of miniature clay roof tiles meant for things like birdhouses, dollhouses, fake houses, train sets, and other realistic depictions of life in a smaller scale.

If you examine one of these tiles on its side, you'll notice it has a couple of curved sections, one around a quarter inch long, and another a bit less round and rather straight, with just a gentle curve. 

The latter got me thinking. What if I could carefully snap that piece off, and use it as a surrogate ribbon cable holder along with some duct tape (what else??) to secure it into place?

Turns out, it worked!

Using one of the tools out of a kit I got specifically for performing surgery on a tablet, I used a very thin and flexible metal pry tool as a firm edge against which to hold the small piece down, then gently but firmly applied force to snap it away.

Next, I carefully inserted the ribbon cable in its socket on the tablet board and ensured it was in under the pins as level and far as possible. At bottom in the photo above is a similar sliver of tile which I placed so that the curve was facing up as shown below, and so the rather cylindrical little edge (referenced by red arrow) was applying pressure to the ribbon cable just like the flimsy plastic connector would by design.

Success! Upon first verifying my touchscreen was working properly by carefully applying pressure with my fingers to the top of this improvised "clip", I then stuck the tablet motherboard and its connected components and snapped things back into place. The curve of the tile fragment seems adequate, at least, to ensure a nice, firm connection far more resilient than electrical or duct tape alone.

Aside from being nonconductive like its flimsy counterpart, the clay tile more importantly provides a sort of firm, structural pressure along the length of the pins to ensure they're firmly connected. For the touchscreen to work fully, all pins must be engaged, and without either the manufacturer's flimsy clip or this improvised solution, that wouldn't happen.

When Your Smart TV Complains, "Unsupported Codec"

Sometimes in life we realize something after the fact that would be a superior solution to a compromise made early on out of haste or impatience.

Case in point, my Samsung "smart" TV's inability to support various video codecs for digital media like movies, TV shows, and other files. Up until now given this happens relatively rarely (but still happens), I've simply found another format or used the excellent and free tool Handbrake to re-encode the video into a more conventional one like MP4. However, upon trying to play and stream to my TV a set of old movies I'd obtained over a decade ago, all but a couple of these returned "unsupported codec" and were unplayable.

Enter the excellent gift my brother-in-law gave my wife and I, an Amazon Fire Stick. At under $30 this remarkably versatile device plugs into an available HDMI port on your TV and comes with its own remote with voice recognition to boot, as well as interoperability with Alexa if that's your thing (it's not mine).

Basically, you plug the Stick itself into the TV's HDMI, then run a USB cable from the provided AC adapter to a micro USB plug on the side of the Fire Stick. Then, turn on your smart TV and select the HDMI port your Fire Stick is plugged into as the video source. 

While it has lots of features including integration with numerous free and pay streaming services, the one that turned out to help in my situation tremendously is the fact that while depending on what smart TV you have, it may or may not allow you easy access in order to install Android apps, for example. Unfortunately, my model of Samsung TV is locked down pretty tight with its proprietary operating system and interface, and has a relatively slim collection of apps to choose from.

For example, I tried first to find a way to access files that are not video, audio, or photos from say a USB stick plugged into the TV. No joy there, only those specific files types are visible, precluding simply downloading a (hopefully) compatible .APK for VLC and installing it. Sure, while Samsung exposes an API for their TVs and other devices, I'm not inclined to break out my favorite IDE and trudge through the weeds of an unfamiliar platform just for a one-off workaround. 

However, thankfully the Fire Stick enables you to download any available apps on the Amazon app store, including VLC, and that's excellent, because VLC is a great app! The player is completely free thanks to the generosity of its developer team VideoLAN, a nonprofit organization.

Once the Fire Stick is set up with your wifi connection details, you can access streaming services and other network resources, including your networked NAS device, PCs, etc. on your home network. In my case I have most of my media on a Synology NAS, so in VLC I'm able to browse its shared folders and pick what to play from its directory.

Since setting up the Fire Stick, all the video files I mentioned that the Samsung TV's own media player balked at were completely playable by VLC. That's one of my favorite things about VLC, it plays virtually every codec you might throw at it. It's got that comprehensive a collection of codecs that among the hundreds or thousands of videos I've played with it, I could count on one hand those I've had it fail to play (don't worry, not a mutant with more than five per hand).

Bonus, VLC enables you to seek out subtitles for your hearing impaired or hungover audience members, and will let you download multiple ones from the internet and pick and choose until you find one that syncs properly with your media's audio. 

One tip with that, when trying a particular set of subtitles, once you select it in VLC it will take just a few seconds before the subtitle text appears during playback. Don't hurry, just wait a bit so you can verify whether the subs are proper, and if not, download or pick another set, try again, and once you find one, off you go.

Zoom Cannot Start Video With Older Webcams in Windows 10

I've had a Logitech QuickCam Fusion webcam since around the time Windows 7 was still mainstream. Other than from my work laptop I don't do online meetings so the camera largely went unused on my home desktop, even after upgrading to Windows 10. 

Then, one day my wife and I installed Zoom and wanted to test it out prior to her joining some Zoom calls with some of her old high school classmates. While her setup with Windows 10 and a relatively new (ca. 2021) webcam worked flawlessly, mine did not. Repeatedly Zoom would complain whether in the video settings or upon joining a meeting, "Cannot start video":

My solution took some trial and error but ultimately worked. First, unplug your webcam from its USB port, and then open Device Manager, and under Imaging devices, right-click on Logitech QuickCam Fusion (or whatever your older webcam is):

Ensure "Delete the driver software for this device" is checked so that whatever driver Windows may have initially used is removed, then click Uninstall and follow any prompts to remove the drivers:

Next, download and install the latest available drivers you can find for your old webcam, ideally for Windows 10, but at least for Windows 7. With some older webcams it's entirely possible you won't find any drivers let alone ones for Windows 7 or newer. If that's the case, skip the following.

Otherwise, on Logitech's site, upon searching for QuickCam Fusion, you'll notice the default operating system is set to Windows 11. Click and choose the only other option, Windows 7, and you'll be prompted to download the newest Windows drivers. 

Plug the webcam into a free USB port, and Windows will proceed to install either the driver you found and installed, or a compatible driver included with Windows. Assuming all goes well, from the Start menu type "Camera privacy settings" and ensure "Allow apps to access your camera" is set to On:

Further down the screen, ensure all apps (except Zoom, if listed) are set to Off:

Now, ensure "Allow desktop apps to access your camera" is set to On:

If you haven't already, install the latest Zoom desktop client. Before you proceed, go ahead and restart your PC to let Windows complete any post-configuration or housekeeping stuff that may linger. Then, once back at the desktop, create a system restore point to preserve things in case something blows up (unlikely, but always a possibility; my system decided to BSOD at least once during the process, better safe than sorry).

That's it. Upon opening Zoom and going into Settings => Video, you should see your face or whatever your webcam is currently seeing, and in meetings with video enabled things should proceed just fine.

Mouse Back/Forward Buttons Stop Working in Windows 10

Recently, inexplicably, my wireless bluetooth iClever mouse decided that its thumb buttons used for stuff like forward and back in browsers and Windows Explorer and other applications should no longer work.

No idea if a recent Windows 10 update was the culprit or what, but I found a very simple solution via a post on Reddit. Simply unplug the mouse's little USB transceiver and plug it into a different USB port on your PC. 

That's it. That's the post.

I'd already tried removing all bluetooth devices from Device Manager including hidden ones and rebooting, no joy. No clue if should this happen enough times if I might eventually run out of USB ports my mouse deigns to allow control of it. 

Prevent Docker for Windows Auto Update

I recently installed Docker Desktop in order to then install PiHole on my Windows 10 desktop PC. PiHole is a cool and free little utility that you can install as a Docker container to provide ad blocking capability that goes a step further than a browser ad blocker add-on like say UBlock Origin. Once installed you can have your PC serve as a sort of DNS proxy for your entire network which bypasses a wide array of blacklisted IP addresses and domains.

One annoying and frankly impolite "feature" of Docker Desktop in general is that some time ago (possibly after version 2.5 or thereabouts) they removed an option through the GUI to disable automatic updates. This is irritating because what you might expect happened to me; a newer, buggy version once installed caused Docker to behave erratically and crash frequently. 

I took a quick look at the Docker documentation (Dockermentation??) and while there are command line options to disable auto updates in the Docker daemon I haven't got the patience to figure out what syntax to use; I mean come on, I'm so lazy I'm using Windows 10, right?

Instead I tried to find out where Docker downloads its updated versions, and I believe I found that folder as shown below. From the Start menu you can type in C:\Users\<Windows username>\AppData\Local\Docker Desktop Installer:

Docker's systray icon will conspicuously show a little "i" to inform you of a looming upgrade, and at the next restart of Docker Desktop the upgrade ordinarily will be installed. However, in lazily taking a stab at preventing this behavior I decided to alter the file system attributes of the folder containing the updates to make it and its contents read-only.

The idea is to both prevent updates from being downloaded in the first place, and in case Docker normally attempts to write any temp files to that folder as part of the upgrade process to kneecap its ability to do so and maybe indicate to that logic something's up that makes upgrading a bad idea.

I altered the folder attributes and applied them, then exited Docker via the systray icon and after a minute or so opened the shortcut. I checked the version first of all:

I was rewarded not with Docker dictating the 3.2.x version I'd use going forward, but rather the previous 3.1.x version I downgraded to in order to not get stuck with the buggy behavior of the newer but less stable version. Success!

I also noticed the conspicuous "i" was gone, as if the logic quietly decided the attempt to upgrade never even happened, which is fine by me.

Of course this isn't the optimal way to prevent software from doing its thing despite user preference, but in these "challenging" times laziness reigns supreme in my headspace. Possible caveats may be that the next time you manually upgrade to a newer version you might need to reapply this change to your file system (too lazy to post a batch file to do it, sorry!) but that's minor compared to browsing on my tablet across the house from my PC and having Docker crash and take out my PiHole.