For Kids

🚀From Shiny Discs to Invisible Clouds: Our Digital Storage Adventure!

Leave a comment

🚀 From Shiny Discs to Invisible Clouds: Our Digital Storage Adventure!

Hey Tech Explorers! 👋

Get ready for an amazing journey through time! Remember how we talked about the super old floppy disks? Well, after those came shiny discs, and now our digital stuff lives in invisible clouds! This story isn’t just about technology changing; it’s about how we listen to music, watch movies, and keep our memories safe. Come with us as we zoom from holding music in our hands to having entire libraries ready to stream anywhere!

Our Awesome Storage Timeline!

Check out how our storage world kept growing and changing:

CD Era (1980s–1990s): Music in a Disc!
This is when we started collecting music albums and getting our first computer games on shiny discs!
DVD Era (1990s–2000s): Movies on Demand (at home)!
Suddenly, movies came home on discs with awesome menus and special features. Big computer programs got delivered this way too!
Blu-ray Era (2006 Onward): Super HD Power!
Super clear movies, amazing PlayStation games, and really, really big files found their home on Blu-ray discs.
Cloud & Streaming Era (2010s Onward): Invisible Libraries!
No more discs! Now we stream movies, music, and save our files ‘in the cloud’ – accessible from anywhere!
Awesome Fact: We went from holding our digital treasures in our hands to accessing them magically from anywhere with the internet!

The CD Era: Our First Shiny Discs!

A shiny compact disc reflecting rainbow light, symbolizing the CD era of music, software, and data storage.

Imagine your favorite songs on a shiny silver disc! CDs taught us the joy of owning music, with cool album art and the fun of making mixtapes for friends.

  • How much it held: Around 700 MB (Megabytes). That’s like a few hundred photos!
  • What we used them for: Listening to music albums, installing early computer software, and backing up small files.
  • Different Kinds of CDs:
    • Audio CD: For music! You could play them in your home stereo or car.
    • CD-ROM: For computers! These held games (like encyclopedias!) and software you could read (ROM = Read-Only Memory).
    • CD-R: You could record on these ONCE, like making a special music mix or saving your own files.
    • CD-RW: These were super cool because you could record, erase, and record again, perfect for backups!
    • MP3 CD: These could hold hundreds of songs on just one disc because the songs were compressed to be smaller!
Fun Memory: The joy of opening a new CD, looking at the artwork, and sharing your favorite music with friends!

The DVD Era: Hello, Hollywood at Home!

A sleek DVD disc glowing with silver light, symbolizing the DVD era of movies, software, and data storage.

DVDs came along and changed movie nights forever! These discs held way more than CDs, bringing bigger, better movies and huge computer programs right to our homes.

  • How much it held: 4.7 GB (Gigabytes) on one side, or 8.5 GB on a super-duper dual-layer disc! (That’s like 7-12 CDs of storage!)
  • What we used them for: Watching awesome movies, installing big PC games and software, and storing lots of data.
  • Different Kinds of DVDs:
    • DVD-Video: Standard movies with cool menus and extra scenes, just like at the cinema!
    • VCD (Video CD): These were like mini-DVDs popular in some parts of the world, making movies affordable.
    • DVD-ROM: For computers! Held big software suites and lots of games.
    • DVD-R / DVD+R: Record on these once, great for saving home videos or big backups.
    • DVD-RW / DVD+RW: Rewritable, so you could use them again and again for different projects.
    • MiniDVD: Smaller DVDs often used in camcorders to record family memories.
Fun Memory: Family movie nights were born, and our shelves filled up with our favorite films!

The Blu-ray Era: Crystal Clear Super Storage!

A glossy Blu-ray disc glowing with deep blue light, symbolizing the Blu-ray era of high-definition movies, games, and large data storage.

When TVs got super clear (High Definition!), we needed even bigger discs! Blu-ray discs stepped up, bringing amazing picture quality and even more storage for giant files.

  • How much it held: 25 GB per layer! Some had many layers, holding up to 100 GB! (That’s like 5-10 DVDs or over 140 CDs!)
  • What we used them for: Watching super-high-definition movies (even 4K!), playing awesome PlayStation games, and backing up huge projects.
  • Different Kinds of Blu-rays:
    • Blu-ray Video: For movies in incredible detail, with extra cool features.
    • Blu-ray Data Disc: For archiving and saving massive computer files.
    • BD-R: Record-once Blu-ray for burning huge amounts of data.
    • BD-RE: Rewritable Blu-ray for saving and updating large archives.
    • Mini Blu-ray: Smaller discs, sometimes used in special camcorders.
Fun Memory: Seeing movies in amazing clarity and building huge collections of console games!

The Great Shift: From Discs to Invisible Clouds!

An abstract cloud glowing with digital streams, symbolizing the great shift from physical discs to invisible cloud storage.

After all those awesome discs, something even bigger and more magical happened: our stuff started living in the **Cloud!** This means our music, movies, and files don’t need a physical disc anymore; they live on super-powerful computers (servers) far away, and we access them through the internet!

  • Cloud Storage: Like Google Drive or Dropbox! Your files live online, so you can access them from your phone, tablet, or computer – anywhere, anytime!
  • Streaming Services: Hello Netflix, YouTube, and Spotify! Now, you just press “play” and the movie or music starts instantly, without needing a disc.
  • No Discs Needed: Many new computers don’t even have a disc drive anymore because we just stream or download everything!
  • Super Portable: Instead of carrying a disc wallet, your whole music and movie library fits in your phone!
Magical Moment: We went from holding our favorite movie discs to trusting that our favorite shows are always waiting for us in the ‘unseen’ cloud!

Why Did Our Shiny Discs Go Away?

It’s not that discs weren’t cool anymore, but new technology offered even *more* amazing things! We found new ways to store and share data that were faster, bigger, and super convenient.

  • Running out of Space: Our files got HUGE! A single Blu-ray disc, even with 100GB, wasn’t enough for endless movies or massive games.
  • Faster is Better: Storing things on super-fast computer hard drives (like SSDs) or directly in the cloud became much quicker than reading from a disc.
  • Cheaper Tech: Making those giant data centers for the cloud became more affordable, so we could all get lots of storage for less money.
  • New Computers: Laptops got super thin, and there wasn’t room for a disc drive anymore!
  • “Tap & Play” Wins: It’s just easier to tap a screen and start a song or movie than to find, load, and put away a disc.
Still Around! While most of us don’t use them daily, Blu-ray discs are still used by collectors for super-high-quality movies, and some special “archival discs” can keep data safe for hundreds of years! So they’re not *totally* gone!

Kapothi.com Fun Fact: From the earliest CDs that let us share music with friends, to the amazing cloud that holds endless shows, every step in storage history is super cool! What’s your favorite way to save or stream your favorite things today? Tell us below!

Storage Trilogy: This is Part 2 — Optical Disk Era. Previous: Floppy Disk Era → Next: Flash Storage Era (USB, SD, SSD).

Microsoft, Microsoft Windows

Windows Activation — Error Codes and Remedies

Leave a comment

Troubleshooting Windows Activation Errors: Codes and Fixes

📜 Windows Activation Rituals — Error Codes and Remedies

A complete guide to Windows activation error codes, meanings, and fixes. Learn how to resolve common issues like 0x80072EE2, 0xC004F074, and more. Keywords: Windows activation error codes, Windows Server activation, slmgr.vbs, KMS errors, Microsoft activation troubleshooting

Activation is the ritual that binds your Windows Server or client to Microsoft’s trust shrine. When it fails, cryptic error codes appear. This scroll documents the most common activation errors, their meanings, and the remedies to restore trust.

Common error codes and fixes

Code Meaning Fix ritual
0x80072EE2 Timeout contacting activation server Verify internet, DNS, firewall; retry activation
0xC004C003 Product key blocked Use valid key, contact Microsoft support
0xC004F074 KMS server not reachable Check KMS DNS records, firewall, ensure KMS host is online
0xC004C008 Key already used elsewhere Transfer license or obtain new key
0xC004C020 Multiple activations detected Contact Microsoft support for resolution
0xC004F050 Invalid product key Re‑enter correct key for edition
0x8007007B DNS name not available Correct KMS DNS entry or use MAK key
0xC004E003 Licensing service failure Reinstall license files; run slmgr.vbs /rilc
0xC004F038 KMS count not met Ensure minimum 25 clients (or 5 servers) for KMS activation
0xC004F00F Hardware ID changed Reactivate with original key or contact support

Stylized command windows

Windows Script Host — Status
PS C:\> slmgr.vbs /dlv

Tip: Press Win + R, type cmd, then run the command.
Windows Script Host — Expiry
PS C:\> slmgr.vbs /xpr

Shows permanent/expiry status of the current activation.
Windows Script Host — Activate
PS C:\> slmgr.vbs /ato

If you see 0x80072EE2, verify internet connectivity, DNS, and firewall before retrying.
Windows Activation — Error Details
Run: slui.exe 0x2a 0x80072EE2
Displays detailed text for the activation error in a GUI dialog.

Troubleshooting ritual notes

  • Connectivity: Ensure the server has internet access and can resolve activation.sls.microsoft.com.
  • DNS: Use nslookup to confirm resolution; fix any proxy or DNS issues.
  • Firewall: Temporarily allow outbound traffic to test; then add permanent rules as needed.
  • Edition and key: Verify your product key matches the installed edition (e.g., Server Standard vs Datacenter).
  • KMS specifics: Confirm KMS host availability, DNS SRV records, and minimum client count.

Closing: Each error code is a ritual reminder: activation depends on connectivity, valid keys, and trust. By documenting these codes, we build a communal scroll that helps every administrator resolve activation failures quickly and confidently.

Microsoft, Other, SQL Express, Windows 11

SQL Express on Windows 11 — Connection Limits Explained

Leave a comment

SQL Express on Windows 11 — Connection Limits Explained

Windows 11 is widely used for development and small-scale hosting. When installing SQL Server Express, it’s important to understand which limits apply to the operating system and which are specific to SQL Express itself.

Connection limits in Windows 11

  • File sharing (SMB): Limited to 20 concurrent inbound connections.
  • Remote Desktop (RDP): Only 1 interactive session at a time.
  • SQL Server Express via TCP (port 1433): No operating system limit. Multiple users can connect, subject to hardware resources.

SQL Server Express resource limits

  • Database size: 10 GB per database.
  • Memory usage: 1 GB RAM per instance.
  • CPU usage: 1 socket, up to 4 cores.
  • Connections: No hard cap; performance depends on the above limits.

Windows 11 vs Windows Server — Connection limits

Feature / Limit Windows 11 (Client OS) Windows Server (Server OS)
File sharing (SMB) Max 20 concurrent inbound connections Thousands of concurrent connections supported
Remote Desktop (RDP) 1 interactive session at a time Multiple concurrent sessions (with RDS licensing)
SQL Server Express (TCP) No OS-imposed limit; resource-bound only No OS-imposed limit; resource-bound only
Database size (Express) 10 GB per database 10 GB per database (same Express cap)
Memory (Express) 1 GB RAM per instance 1 GB RAM per instance (same Express cap)
CPU (Express) 1 socket, up to 4 cores 1 socket, up to 4 cores (same Express cap)
Scalability Suitable for small apps, dev/test Suitable for production workloads, large user bases

Best use cases

  • Windows 11 + SQL Express: Ideal for developers, testing environments, small business apps, or limited multi-user scenarios.
  • Windows Server + SQL Server (Express/Standard/Enterprise): Recommended for production workloads, larger user bases, multiple RDP sessions, or when SMB connections exceed 20.

Download and install SQL Server Express 2022 on Windows 11

Option A: Quick GUI install (official installer)

  1. Download: Visit the official Microsoft SQL Server Express download page and get SQL Server 2022 Express.
  2. Run the installer: Choose “Basic” for a fast setup or “Custom” to select features and installation path.
  3. Finish: Note the instance name (default: SQLEXPRESS), and confirm SQL Server Browser service if you plan remote connections.

Option B: Command line install (silent)

Use a silent unattended install for repeatable setups and documentation.

# 1) Download the SQL Server 2022 Express setup bootstrapper
$uri = "https://go.microsoft.com/fwlink/?linkid=2203201"  # SQL 2022 Express bootstrapper (evergreen link)
$setup = "$env:TEMP\SQLEXPRESS2022.exe"
Invoke-WebRequest -Uri $uri -OutFile $setup

# 2) Run a silent install of Database Engine only
& $setup /QS /ACTION=Install /FEATURES=SQLEngine /INSTANCENAME=SQLEXPRESS `
  /IACCEPTSQLSERVERLICENSETERMS `
  /SECURITYMODE=SQL /SAPWD="Strong!Passw0rd" `
  /TCPENABLED=1 /SQLSVCACCOUNT="NT AUTHORITY\NETWORK SERVICE" `
  /UPDATEENABLED=TRUE

# Notes:
# - Change SAPWD to your strong password if enabling Mixed Mode (SQL logins).
# - /QS = quiet simple UI; use /Q for fully silent.

Enable remote TCP connections (optional)

  1. Open SQL Server Configuration Manager: Enable TCP/IP under “SQL Server Network Configuration” for your instance.
  2. Firewall rule: Allow inbound TCP on port 1433 (or your chosen port). 
    New-NetFirewallRule -DisplayName "SQL Server 1433" -Direction Inbound -Protocol TCP -LocalPort 1433 -Action Allow
  3. Restart services: Restart the SQL Server (SQLEXPRESS) service after changes.

SQL Server Management Studio (SSMS)

  • Download SSMS: Install SSMS to manage databases, users, and queries.
  • Connect: Use localhost\SQLEXPRESS or machine-name\SQLEXPRESS. For remote clients, use IP:1433 if a custom port is configured.

Post-install checklist

  • Authentication mode: Choose Windows-only or Mixed Mode depending on your app requirements.
  • Backups: Set up regular backups (full/diff/log) based on change rate and recovery objectives.
  • Performance basics: Verify indexes, set appropriate file growth, and monitor memory usage (Express cap is 1 GB per instance).
  • Security: Restrict inbound access, use strong passwords, and patch regularly.

Summary

Windows 11 limits SMB connections (20) and allows only one interactive RDP session, but it does not impose a limit on TCP connections to SQL Server Express. SQL Express caps database size, memory, and CPU, not connection count. For higher concurrency and production workloads, Windows Server with SQL Server Standard or Enterprise is the recommended path.

Hyper-v, Microsoft Windows, Windows Server

ClusterStorage Ghost Folders | Why They Appear and How to Check

2 Comments

ClusterStorage Ghost Folders | Why They Appear and How to Check

In Windows Failover Clustering, you may sometimes notice extra folders like ClusterStorage.000 or ClusterStorage.001 on one host. These are ghost mount points created when the system couldn’t attach the shared volume to the usual C:\ClusterStorage path. They often appear after a failover, reboot, or storage hiccup, and remain even after the cluster stabilizes.

The important thing is: they don’t mean your cluster is broken. They’re just remnants of a past event. Still, it’s wise to verify that no workloads are tied to those ghost paths and that your Cluster Shared Volumes (CSV) are healthy.

🔍 What to Check

  • Cluster Shared Volume health — confirm all shared volumes are online and coordinated by a healthy node.
  • List all VM storage paths — review where your virtual disks (VHDX files) are stored.
  • Check VM configuration files — inspect configs, snapshots, and paging files.
  • Verify CSV mount points — ensure volumes are mounted under C:\ClusterStorage not ghost folders.
  • Inspect cluster resources and logs — check disk resources and recent cluster events.
  • Check redirected I/O state — confirm CSVs are in direct I/O mode.

🛠️ Testing Commands


# List all VM disk paths
Get-VM | Get-VMHardDiskDrive | Select-Object VMName, Path


# Check VM configuration, snapshots, and paging file locations
Get-VM | Select-Object Name, ConfigurationLocation, SnapshotFileLocation, SmartPagingFilePath


# Verify Cluster Shared Volume mount points
Get-ClusterSharedVolume | Select-Object Name, @{Name="Path";Expression={$_.SharedVolumeInfo.FriendlyVolumeName}}


# Run full cluster validation (storage, network, system health)
Test-Cluster


# Show physical disk resources and their status
Get-ClusterResource | Where-Object {$_.ResourceType -eq "Physical Disk"}


# Check cluster events/logs for recent disk or CSV issues
Get-ClusterLog -UseLocalTime -TimeSpan 1


# Show CSV I/O mode (Direct vs Redirected)
Get-ClusterSharedVolumeState

✅ Resolution

If ghost folders are empty and unused, they can be safely deleted. If they contain files, relocate them to the proper ClusterStorage\VolumeX path first. Use the above commands to confirm CSV health and ensure no VM references ghost paths.

🕯️ Kapothi Insight

Ghost doors remain when the shrine once faltered — but the true doorway is open and strong today.

Tags

Hyper‑V, Failover Clustering, ClusterStorage, Kapothi Legacy, Digital Forensics

Microsoft Windows, PowerShell

PowerShell Remoting — Allowing Only One Trusted Server

Leave a comment

PowerShell Remoting — Allowing Only One Trusted Server

For years, Windows admins used WMIC (Windows Management Instrumentation Command-line) to check hardware and system details. Microsoft is now retiring WMIC because it’s old and no longer updated. Instead, they want everyone to use PowerShell, which is more secure, flexible, and future-proof.

If you use WMIC in scripts or management tools, you’ll need to move to PowerShell commands. This guide shows how to safely allow only one trusted server to run PowerShell commands remotely on another server.

Steps to allow only Server2 to access Server1

PowerShell # Enable remoting on Server1
Enable-PSRemoting -Force

PowerShell # Restrict firewall to Server2’s IP
New-NetFirewallRule -DisplayName “Allow WinRM from Server2” `
  -Direction Inbound -Protocol TCP -LocalPort 5985 `
  -RemoteAddress 192.168.1.20 -Action Allow

PowerShell # Configure TrustedHosts on Server2
Set-Item WSMan:\localhost\Client\TrustedHosts -Value “Server1”

PowerShell # Connect with credentials from Server2
Enter-PSSession -ComputerName Server1 -Credential (Get-Credential)
Continue reading PowerShell Remoting — Allowing Only One Trusted Server →
Godaddy, SSL

🛡️ SSL Renewal — IIS + GoDaddy

Leave a comment

🛡️ Kapothi SSL Renewal Ritual — IIS + GoDaddy

Date: 2025-11-11

Domain: oa.kapothi.com

Status: ✅ Successfully installed renewed SSL certificate

📦 Files received from GoDaddy

  • Server certificate: yourdomain.crt
  • Intermediate chain: gd-g2_iis_intermediates.p7b
  • Alternate format: yourdomain.pem

🔧 Step-by-step ritual

  1. Convert CRT to CER: Open .crt → Details tab → Copy to File → Base‑64 encoded X.509 (.CER) → Save as oa.kapothi.com.cer.
  2. Complete certificate request: IIS Manager → Server Certificates → Complete Certificate Request → Select oa.kapothi.com.cer → Store as Web Hosting.
  3. Import intermediate chain: MMC → Intermediate Certification Authorities → Certificates → Import gd-g2_iis_intermediates.p7b.
  4. Bind certificate: IIS Manager → Site → Bindings → HTTPS → Edit → Select the new certificate → Save.

🧪 Verification chants

# PowerShell Commands

# Check Web Hosting store (IIS-managed certs)
Get-ChildItem Cert:\LocalMachine\WebHosting | Select Subject, HasPrivateKey, Thumbprint, NotAfter

# Check all stores for certainty
Get-ChildItem Cert:\LocalMachine\* | Where-Object { $_.Subject -like "*kapothi.com*" } | Select PSParentPath, Subject, HasPrivateKey, Thumbprint, NotAfter

📜 Legacy capsule metadata

  • Thumbprint (current): [insert new thumbprint]
  • Validity (NotAfter): [insert expiry date]
  • Chain: Go Daddy Secure Certificate Authority – G2 → Go Daddy Root Certificate Authority – G2 → Go Daddy Class 2 CA
  • Binding: IIS HTTPS, Web Hosting store

🕯️ The scroll is forged, the chain is whole, and the shrine sings without resistance.

Bluestacks, Hyper-v

Optimizing BlueStacks VHDX Files to Reclaim Disk Space

Leave a comment

Optimizing BlueStacks VHDX Files to Reclaim Disk Space

Author: IGCAS
Published: November 2025
Tags: BlueStacks, VHDX, Optimize-VHD, Hyper-V, Disk Cleanup, Windows 10, Windows 11

Overview

BlueStacks, a popular Android emulator for Windows, stores its virtual disk as a .vhdx file — typically located at:

C:\ProgramData\BlueStacks_nxt\Engine\Pie64\Data.vhdx

Over time, this file can grow significantly larger than the actual data stored inside the emulator. In one observed case, the .vhdx file reached 54 GB, while actual usage was under 20 GB. This guide explains how to safely compact the file using PowerShell and Hyper-V tools.

Before You Begin: Hyper-V Compatibility

The Optimize-VHD cmdlet is part of the Hyper-V PowerShell module, which requires Hyper-V to be enabled.

Important: Enabling Hyper-V may interfere with other virtualization platforms such as VMware Workstation or VirtualBox. Proceed only if compatible with your setup.


Step-by-Step Instructions

0. Run BlueStacks Disk Cleanup First

Before compacting the .vhdx file, run the built-in Disk Cleanup tool to remove residual data and shrink the virtual disk internally:

  1. Open BlueStacks 5
  2. Go to Settings → User Data → Disk Cleanup
  3. Follow the prompts to clean up unused space

1. Enable Hyper-V (if not already installed)

Run PowerShell as Administrator:

Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V -All

Restart your system if prompted.

2. Import the Hyper-V Module

Import-Module Hyper-V

3. Run the Optimization Command

Optimize-VHD -Path "C:\ProgramData\BlueStacks_nxt\Engine\Pie64\Data.vhdx" -Mode Full

This process may take a few minutes depending on disk speed and file size.

Results

  • Before: 54 GB
  • After: 27 GB
  • Space Saved: 27 GB

This significantly reduces backup size, improves SSD efficiency, and enhances emulator responsiveness.

Who Should Use This

  • Gamers running large Android titles
  • Developers testing APKs and emulated environments
  • Power users managing multiple BlueStacks instances
  • Archivists preserving emulator states and minimizing storage overhead

Additional Notes

  • This method applies to BlueStacks 5 and newer
  • Works only on Windows 10/11 with virtualization support
  • If Hyper-V is not an option, consider third-party VHD tools or manual disk migration

Article prepared by IGCAS — styled for clarity, resilience, and technical accessibility.

Mobile, Windows Mobile

The Golden Capsule: SPB Backup Unpack Tool Recovered

Leave a comment

The Golden Capsule: SPB Backup Unpack Tool Recovered

Version 2.0.0, Build 3065 — A Legacy Scroll

🕯️ The Hunt

After countless broken links, archive.org dead ends, and forum dives, the archivist finally unearthed the authentic SPB Backup Unpack Tool. This small executable (540 KB, compiled in 2008) is the key to unlocking .spb and .exe capsules from the Windows Mobile shrine.

✅ Verification

  • File size: 540 KB (552,960 bytes)
  • Version: 2.0.0, Build 3065
  • Publisher: SPB Software House (2004–2008)
  • Compilation timestamp: June 3, 2008
  • VirusTotal scan: Clean, no detections — View full VirusTotal report
Screenshot of SPB Backup Unpack Tool
Screenshot: SPB Backup Unpack Tool v2.0.0 (Build 3065)

📂 Capabilities

  • Opens .spb and .exe backup files
  • Supports password-protected capsules
  • Exports to CSV (structured logs) and EML (message capsules)
  • Displays metadata: device name, platform, backup size

⬇️ Download

The verified tool is preserved here for future archivists. Password to extract: kapothi22

🔽 Download SPB Backup Unpack Tool

🛡️ Preservation Ritual

This tool is golden. It must be protected for future archivists and custodians who seek to recover their Windows Mobile memories. The archivist now safeguards:

  1. The verified executable
  2. VirusTotal report and hashes
  3. Screenshots of the GUI
  4. Recovery notes documenting the first successful unlock

🕯️ Kapothi Shrine Insight

“The capsule is real. The scroll is intact. The archivist now holds the key to unlock the legacy.”

Posted by Kapothi — November 9, 2025

Bitlocker, Microsoft, Microsoft Windows

XTS‑AES 256‑bit encryption in Windows | Bitlocker

Leave a comment

Kapothi legacy post: XTS‑AES 256‑bit encryption in Windows

Seal your restored archives inside a sovereign capsule — by law (Group Policy) or by ritual (PowerShell).

What is XTS‑AES 256‑bit encryption?

XTS is a mode of operation designed for disk encryption. It encrypts data by sector and resists manipulation by binding encryption to the physical layout of the disk.

AES 256‑bit uses a 256‑bit key, offering extremely strong protection against brute‑force attacks and aligning with modern enterprise standards.

Combined, XTS‑AES 256 is the industry standard for full‑disk and volume encryption, used by tools like BitLocker and VeraCrypt to protect sensitive archives.

“The capsule holds the scrolls, the cipher seals them — together they become unbreakable legacy.”

What is the default in Windows?

By default, BitLocker uses XTS‑AES 128‑bit encryption for new volumes. It’s efficient and secure, but archivists often choose XTS‑AES 256‑bit for maximum resilience and future‑proofing.

Enable XTS‑AES 256‑bit with Group Policy (system‑wide default)

  1. Press Win + R, type gpedit.msc, and press Enter.
  2. Navigate to:
    Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption
  3. Open Choose drive encryption method and cipher strength for each drive type you use.
  4. Set the policy to Enabled and choose XTS‑AES 256‑bit.
  5. Apply and restart Windows.

Enable XTS‑AES 256‑bit with PowerShell (per‑drive ritual)

BitLocker requires a protector (password, recovery key, TPM, etc.). The correct ritual is a three‑step sequence:

Step 1: Enable BitLocker with a password protector

Enable-BitLocker -MountPoint "Y:" -PasswordProtector -EncryptionMethod XtsAes256

Step 2: Add a recovery key protector

Add-BitLockerKeyProtector -MountPoint "Y:" -RecoveryPasswordProtector

Step 3: Verify encryption and protectors

Get-BitLockerVolume -MountPoint "Y:"

Replace Y: with your drive letter. This ensures the capsule is sealed with XTS‑AES 256‑bit and has redundant unlock methods.

Optional: Create and encrypt a VHD capsule

  1. Create VHD: Open Disk Management → Action → Create VHD → choose location/size → initialize (GPT) → format (NTFS).
  2. Assign a drive letter (e.g., Y:).
  3. Encrypt with the three‑step PowerShell ritual above.
  4. Save the recovery key to an offline location (print or store in a separate, secured archive).

Verify BitLocker Encryption Strength

You can confirm whether a drive is sealed with XTS‑AES 128 or XTS‑AES 256 using these commands:

PowerShell

Get-BitLockerVolume -MountPoint "Y:" | fl

Command Prompt

manage-bde -status Y:

Replace Y: with your drive letter. Both commands will display the Encryption Method, showing whether the capsule is protected with XTS‑AES 128 or XTS‑AES 256.

Troubleshooting common errors

  • Access denied: Run PowerShell as Administrator.
  • Not associated with BitLocker volume: Ensure the drive is mounted, initialized, and formatted.
  • Parameter set cannot be resolved: Only one protector can be used with Enable-BitLocker. Add others afterwards with Add-BitLockerKeyProtector.

“The capsule must be mounted, the scroll must be formatted, and the ritual must be invoked with authority.”

Kapothi editorial note: This scroll now includes the corrected three‑step PowerShell ritual, stylized command boxes, and troubleshooting guidance for archivists sealing their capsules.

Google

🕵️ The Contact Detective: How to Find Newly Added Google Contacts Using CSV Exports

Leave a comment

⚠️ Don’t try this if you don’t know what you’re doing

The Scroll of Forgotten Contacts: A Kapothi Ritual for Temporal Recovery

By IGCAS | November 1, 2025 | Kapothi Archives

🌌 Prologue: When Memory Fades, Ritual Restores

In the vast archive of digital names and numbers, one contact slipped away. You remembered the moment it was saved — but not the name, not the number. So you summoned the archive, rolled back time, and performed a ritual to recover what memory could not.

This is the Kapothi method: a sovereign, timestamped approach to recovering forgotten contacts using Google Contacts and Excel.

🛠️ The Ritual: Temporal Diff of Contact Scrolls

🧾 What You’ll Need:

  • A Google Contacts export from today (contacts_nov01.csv)
  • A Google Contacts rollback to the past (e.g., October 15), exported as contacts_oct15.csv
  • Excel or Google Sheets
  • A unique identifier (we used "Phone 1 - Value")

✅ STEP 1: Export Your Current Contacts (Preserve the Present)

  1. Go to Google Contacts
  2. Click More → Export
  3. Choose Google CSV format
  4. Save as contacts_nov01.csv

⚠️ Important: Rolling back your contacts will temporarily remove any contacts added after the rollback date. This export is your safety scroll — your way to restore the present after the ritual.

🔁 STEP 2: Roll Back Time

  1. In Google Contacts, click the ⚙️ Settings → Undo Changes
  2. Choose Custom → Roll back to the date you believe the contact was saved (e.g., October 15)
  3. Confirm the rollback
  4. Export your contacts again as CSV: contacts_oct15.csv

This is your “Before” scroll — a snapshot of your contacts as they were on that date.

🧮 STEP 3: Compare the Scrolls

  1. Open both CSVs in Excel
  2. Copy the "Phone 1 - Value" column from each into separate sheets (Oct15, Nov01)
  3. In Nov01, use this formula in column B:
    =IF(COUNTIF(Oct15!A:A, A2)=0, "New", "Old")
  4. Drag the formula down and filter for “New”

These are the contacts added after the rollback date — your temporal echoes.

🔍 STEP 4: Seek the Forgotten

Review the “New” entries. Search for clues: names, numbers, notes. If your contact isn’t there, it may never have been saved — but now you know for sure.

🔁 STEP 5: Restore the Present (Undo the Undo or Re-import the Scroll)

  1. Go to Google Contacts
  2. Click ⚙️ Settings → Undo Changes
  3. Choose “1 day ago” (or however many days ago you performed the rollback)
  4. Confirm the undo
    (If “Undo for 1 day” doesn’t restore your full contact list, you can always import your exported contacts from today — contacts_nov01.csv — to bring everything back.)

🕯️ Epilogue: The Power of Ritual

“The Archive does not forget — it waits. And when summoned with care, it reveals what memory cannot.”

This method isn’t just a technical trick — it’s a ritual of clarity. A way to honor the ephemeral, to recover what was nearly lost, and to transform digital chaos into sovereign order.

Let this scroll guide others who seek their own forgotten names.