Prepare a Windows Server 2008 image

Configure your Windows Server 2008 virtual system for analysis.

Log on to the virtual machine as administrator.
If the Manage Your Server window page appears, select Don't Display the page at logon and close the page.
Disable the shutdown event tracker:
1. Select Start → Run, type gpedit.msc, then click OK.
2. In the Local Group Policy Editor page, select Computer Configuration → Administrative Templates → System, then double-click Display Shutdown Event Tracker.
3. Select Disabled, then click OK.
4. Close the Local Group Policy Editor page.
Turn off the firewall in the virtual image:
1. Select Start → Control Panel → Windows Firewall → Turn on Windows Firewall On or Off.
2. Select Off, then click OK.
Install telnet in the virtual image:
1. Select Start → Administrative Tools → Server Manager.
2. In the Server Manager window, right-click Features and select Add Features.
3. In the Add Features Wizard, select Telnet Server.
4. Click Next, then Install.
5. Click Close after the installation succeeds.
Start the telnet service in the virtual image:
1. Select Start → Administrative Tools → Services, then double-click Telnet.
2. In the Telnet Properties (Local Computer) page, select Automatic for the Startup type, then select Apply → Start → OK.
Configure FTP settings in the virtual image:
1. Select Start → Administrative Tools → Internet Information Services(IIS) Manager.
2. In the Internet Information Services Manager page, select Sites, select Add FTP Site
3. In the Add FTP Site wizard, do the following.
  - Provide the FTP site name as root and Physical path as C:\, then click Next.
  - For Bindings and SSL Settings, select No SSL, then click Next.
  - For Authentication and Authorization Information, select Basic under Authentication, select All Users under Allow access to, select both Read and Write under Permissions.
  - Click Finish.
Set automatic logon:
1. Select Start → Run, type netplwiz, then press Enter.
2. In the User Accounts window, deselect Users must enter a user name and password to use this computer, then click Apply.
3. In the Automatically log on page, provide these credentials.
  - User name — Administrator
  - Password — cr@cker42
  - Confirm Password — cr@cker42
Disable Windows updates:
1. Select Start → Control Panel → Windows Update → Change settings.
2. Under Important updates, select Never check for updates (not recommended).
3. Deselect Recommended updates when downloading, installing, or notifying me about updates.
4. Click OK.
Configure Microsoft Office:
1. To analyze Microsoft Word, Excel, and PowerPoint files, install Microsoft Office 2003 on the virtual machine.
2. Lower the security to run macros for the Office applications. In Microsoft Word 2003 and select Tools → Macro → Security, select Low, then click OK. Do the same for other applications such as Microsoft Excel and PowerPoint.
3. Go to http://www.microsoft.com/en-us/download/details.aspx?id=3 and download the required Microsoft Office compatibility pack for Word, Excel, and PowerPoint File Formats, then install them on the virtual machine.
  You need the compatibility pack to open Microsoft Office files that were created in a newer version of Microsoft Office. For example, to open a .docx file using Office 2003, you need the corresponding compatibility pack installed.
4. In the Compatibility Pack for the 2007 Office system dialog, select Click here to accept the Microsoft Software License Terms, then click OK.
Configure Adobe Reader:
1. To analyze PDF files, download Adobe Reader to the native host and copy it to the VM.
2. Open Adobe Reader and click Accept.
3. In Adobe Reader, select Edit → Preferences → General, then remove Check for updates.
4. In Adobe Reader, select Help → Check for updates → Preferences, then deselect Adobe Updates.
Configure Java:
1. Open Java in the Control Panel.
2. In the Update tab, deselect Check for Updates Automatically.
3. In the Java Update Warning message, select Do Not Check and then click OK.
Configure system startup:
1. Run the msconfig command.
2. From the Startup tab, deselect reader_sl and jusched, then click OK.
  Note
  reader_sl is available only when Adobe Reader is installed.
3. In the System Configuration message, select Restart.
4. In the System Configuration Utility message, select Don't show this message or launch the System Configuration Utility when Windows start, then click OK.
Configure the default browser:
1. In Internet Explorer, select Tools → Internet Options.
2. In Home page select Use Blank or Use new tab based on the version of Internet Explorer.
3. From the Privacy tab, uncheck Turn on Pop-up Blocker.
4. Go to the Advanced tab of the Internet Options and locate Security, then select Allow active content to run in files on My Computer.
Note
The VM administrator password cr@cker42 is required for VM profile creation. ATD system updates it to a random string as a part of VM creation. The running sandbox VM will have a random password.