Eureka Moment windows:misc

windows:misc:allow_user_printer

Anonymous (anonymous@undisclosed.example.com) — 2019-10-31T09:06:00+00:00

Allow plain users to install printer drivers If you need to allow any of your users to install printer drivers on the Windows box, follow these steps. Remote Server Administration Tools for Windows 7 Below are sample GPO settings for all kind of printer installations just for your reference: Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Devices: Prevent users from installing printer drivers - Disabled Computer Configuration\Policies\Windo…

windows:misc:bitlocker_no_tpm

Anonymous (anonymous@undisclosed.example.com) — 2019-10-31T09:06:00+00:00

BitLocker: Lock drives w/o TPM device “Nay!” they say; “It's not possible!” they say; “You can't lock a drive with BitLocker without a TPM device!” they say... “Bah!” I say, what a load of “#$%*&! That said (pun intended) do read on and find out a simple way to encrypt that which matters most and get away with it without the use of

windows:misc:change_registered_owner_information

Anonymous (anonymous@undisclosed.example.com) — 2023-12-21T10:01:21+00:00

Change Registered Owner and Organization Information Modify in registry (create if missing): Location: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion Type: String Name: RegisteredOwner Name: RegisteredOrganization Value: desired text

windows:misc:disable_admin_shares

Anonymous (anonymous@undisclosed.example.com) — 2019-10-31T09:06:00+00:00

How to disable administrative shares in Windows A lot of system admins tend to ask me a simple question: How to do what's in the title? Well it's simple really: All you need is a small Registry hack and You're on Your merry way. That said, just do the following: Open regedit and add this DWORD with Value 0 at the branch bellow (or You can just merge this into Your Registry - be mindful and backup the Registry before you do any of this):

windows:misc:disable_login_screen_background

Anonymous (anonymous@undisclosed.example.com) — 2023-12-21T09:59:08+00:00

Disable login screen background image in Windows 11 Create registry key Location: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System Type: DWORD 32 Name: DisableLogonBackgroundImage Value: 1

windows:misc:disable_searchbox_suggestions

Anonymous (anonymous@undisclosed.example.com) — 2023-12-21T09:53:13+00:00

Remove Bing from Start Menu Search on Windows 11 Create a registry key, and reboot OS: Location: Computer\HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\DataCollection Type: DWORD32 Name: DisableSearchboxSuggestions Value: 1

windows:misc:diskpart

Anonymous (anonymous@undisclosed.example.com) — 2019-10-31T09:06:00+00:00

Using DiskPart to initialize a new disk on Windows Server Core If you have added a new disk to Windows Server Core, there are only two ways to initialize the disk. Through Computer management snap-in in the MMC, or using DiskPart in the console. Using the console, run DiskPart and execute the following commands:

windows:misc:lock_bitlocker

Anonymous (anonymous@undisclosed.example.com) — 2019-10-31T09:06:00+00:00

Locking Bitlocker encrypted drive (from Windows Explorer and Console) The problem with Bitlocker is that it doesn't lock your drive when you lock your workstation. I don't know for you, but I find that disturbing because someone can log in with another user and access the said drive. What I find even more problematic that there isn't any 'obvious' way to lock the drive - at least not in the way it can be unlocked.Here is how you can lock your drive manually (Lets assume that the drive letter is…

windows:misc:log_on_as_a_service

Anonymous (anonymous@undisclosed.example.com) — 2019-10-31T09:06:00+00:00

Grant Log on as a service privilege o add the “Log on as a service” right to an account for a Group Policy object, when you are on a server that is joined to a domain or a domain controller * Click Start, point to Run, type mmc, and then click

windows:misc:mstsc_on_server_core

Anonymous (anonymous@undisclosed.example.com) — 2019-10-31T09:06:00+00:00

mstsc on server core There is no “install feature” method of doing this and I can imagine it's not supported by Microsoft. But you can add the RDP Client (mstsc) to server core by copying the following files from a server (preferably the same OS

windows:misc:rdp_oracle_err

Anonymous (anonymous@undisclosed.example.com) — 2019-10-31T09:06:00+00:00

RDP error - CredSSP encryption oracle remediation Open gpedit.msc Navigate to Computer Configuration / Administrative Templates / System / Credentials Delegation Set Encryption Oracle Remeditation to enabled and protection level to vunerable

windows:misc:start

Anonymous (anonymous@undisclosed.example.com) — 2019-10-31T09:06:00+00:00

Misc * Allow plain users to install printer drivers * BitLocker: Lock drives w/o TPM device * Change Registered Owner and Organization Information * Disable login screen background image in Windows 11 * Get event data from event triggered task * Grant Log on as a service privilege * How to disable administrative shares in Windows * Locking Bitlocker encrypted drive (from Windows Explorer and Console) * mstsc on server core * RDP error - CredSSP encryption oracle remediation * Remo…

windows:misc:takeown_fail

Anonymous (anonymous@undisclosed.example.com) — 2021-03-01T12:10:00+00:00

Takeown command fails with Access Denied message So you wanted to take ownership over some files and the Takeown command failed with 'Access Denied' message. You have already checked if the file is open by another user or some hung process. You are loged in with the user who has the highest possible privileges on the system. Well, almost

windows:misc:task_schedule_trigger_on_event_and_get_data

Anonymous (anonymous@undisclosed.example.com) — 2022-11-08T13:05:49+00:00

Get event data from event triggered task * Create task * Export task into XML * Add the following: into Task/Triggers/EventTrigger Event/EventData/Data[@Name='TargetUserName'] Event/EventData/Data[@Name='TargetDomainName']