@EddieJennings said in Use PowerShell to Disable UAC on Windows 10:

@Obsolesce said in Use PowerShell to Disable UAC on Windows 10:

What special case needs UAC completely off?

I'm curious about this as well.

Installing malware 🙂

http://kapothi.com/switch-windows-10-license-kms-mak/

I'm not even sure this will work but try the following commands and skip step 4.
After uninstalling the KMS license, maybe running cscript slmgr.vbs /ato all you need to activate your Windows 10 upgrade license.

Jared ran into a simliar'ish problem recently... There is a thread around here somewhere.

@dbeato said in VM Windows 10 Pro Licensing On Hyper-V:

@scottalanmiller said in VM Windows 10 Pro Licensing On Hyper-V:

@dbeato said in VM Windows 10 Pro Licensing On Hyper-V:

@scottalanmiller said in VM Windows 10 Pro Licensing On Hyper-V:

@NashBrydges said in VM Windows 10 Pro Licensing On Hyper-V:

There is no AD of any kind.

This doesn't play in. AD doesn't have any licensing. It is included in Windows Server and has no licenses or requirements of its own. If you can use server, you can use it, if you can't, you can't.

Microsoft Active Directory does have licensing.

What do you mean? There's no case where it gets licensed. You license Windows Server and AD is part of it, there's no license for AD itself. Any situation where you'd use AD you already have to have Windows Server license, and nothing extra is ever needed.

Well yeah, in order to use Microsoft Active Directory you still need a Windows Server which yes has to have a CAL (Per user or per device) for using same for SQL, RDS, Sharepoint and Exchange (onprem). So you were right 🙂

Yeah, you can't use AD without a license, but there's no license for AD 🙂

@GregC No, it just keeps happening for some reason.

@syko24 said in Zerotier on Windows firewall rule question ...:

@BraswellJay - check which firewall profile is selected for your ZeroTier interface. Is it set for public on your computer or the computer you are trying to access?

They are set to work networks on both:

250ac923-99eb-4d16-bfdb-64b7cdd93799-image.png

All of the firewall rules are set to apply to all profiles:

12dac406-c669-430f-9b4a-e0be3bd85650-image.png

@brandon220 said in HP EliteDesk 800 G5/G6 mini - error on windows update:

@Dashrender I had it on a new 800 mini a few weeks ago. I clicked through it and it has been running fine since. Several reboots and it never happened again.

I just updated the OP. sadly, after rebooting, the system locked up, requiring another hard reboot, another flashing of this HP screen, hit esc to bypass and the user is back up and running.

I have postponed the laptop/desktop updates in WSUS for a week or so until this stuff is fixed. I don't want to mess with colleagues that complain they are not able to search and find something anymore 🙂

@thwr said in Disk Manager with No Search in Windows 10:

@dbeato said in Disk Manager with No Search in Windows 10:

@scottalanmiller said in Disk Manager with No Search in Windows 10:

@dbeato said in Disk Manager with No Search in Windows 10:

@scottalanmiller said in Disk Manager with No Search in Windows 10:

@Obsolesce said in Disk Manager with No Search in Windows 10:

@scottalanmiller said in Disk Manager with No Search in Windows 10:

So in our situation, we had to open PowerShell and run diskmgmt.msc and it was able to open it. You have to have the full name.

This came about because someone installed some "Classic Shell" hijack software that removes all of the Windows Vista and later functionality to find tools. So the system is almost entirely broken.

You could also hit the "Windows" key + r, then type that in the run box and hit enter.

Only if you have the full name. diskmgmt.msc will work that way, diskmgmt will not. We tried.

Correct. I am surprised this became a post. However I understand with the whole classicshell situation.

Yeah, like I never have to know the whole name. I figured it was diskmgmt.exe. Nearly every guide only has it without the extension. And I've never had to type it out before.

Yeah, most applications for Windows are .msc or .cpl that control things as below:

Services - services.msc
Programs and Features - appwiz.cpl
Disk Managment - diskmgmt.msc
Computer Management - compmgmt.msc

For Control panel you would open just "control" and that's it so it can be inconsistent.

And so forth.

I usually just start mmc.exe. Three simple characters to type (or seven), no need to remember names (I used to know them, but...) and access to all mmc's in one place.

Well we can do all that, I am just saying after a while regardless of the OS you get to find your own shortcuts. Problem with MMC is that you need to do like 5 mouse clicks to get to something.

@scottalanmiller said in Need suggestion for local Windows backup:

But the "older" Windows 7 Backup that takes an image works quite well, too. Depends on your goals really.

Yeah, it tends to work so well that over the long run, you're screwed unless you do some custom upkeep.

@BraswellJay said in SMB share from RHEL access issues ...:

I did enable SMB v1 on the windows 10 clients thinking that would be necessary but that did not have any effect.

On Windows 10, did you enable SMB v1 server or client? In this case, you would need to enable only client to make this work, assuming this is the problem.

@Dashrender said in Windows 7 End of Life Countdown:

@warren-stanley said in Windows 7 End of Life Countdown:

@Dashrender so much PC driven medical equipment out there will be affected, not to mention the EHR systems that get, at best, medical compliance patching and are stuck on older non-10 MS OS'es

The shit thing is that most have no way of knowing if the device is running Win7 embedded or not.

But they SHOULD have a way to know if their vendor is providing HIPAA required updates! If they don't, they can't deploy it.

@Dashrender said in Windows 10 Screen Shot No Longer Working:

This might help you find or reset it
http://hkcmdr.anymania.com/

Thanks, will try it.

FastStone also works fine.

https://chocolatey.org/packages/fsviewer

@Dashrender said in Remove-Item cannot remove crap in Documents folder:

@Obsolesce said in Remove-Item cannot remove crap in Documents folder:

@Dashrender said in Remove-Item cannot remove crap in Documents folder:

@Obsolesce said in Remove-Item cannot remove crap in Documents folder:

@JaredBusch
I had a little bit of fun... whether useful to you or not.

You can run this script as a regular user that has permissions to create and run scheduled tasks and create a file in specified directory.

This will create a powershell script, and a scheduled tasks to run the script as the SYSTEM account. Then it will delete the script and the scheduled task.

I could test most of it, but not some of it for obvious reasons.

<#---- CHANGE THESE VARS: ----#> # Users to exclude from profile manipulation script, separated by pipe: $excludedKnownUsers = "Administrator|SpecialUser1" # New Script: $newLocalScriptPath = "$ENV:SystemDrive\scripts" $newLocalScriptFile = "testScript.ps1" # SID ending: (likely 21 if domain users) $sidEnd = 21 # Scheduled Task Name: $TaskName = "_Test Task 1" # Scheduled Task Description: $Description = "This is a test scheduled task that runs as the SYSTEM account and will be ran and then deleted at the end of this script." <#-------- END CHANGE --------#> # New Script: $newLocalScript = "$newLocalScriptPath\$newLocalScriptFile" # Gethers list of user profile paths: $userPaths = Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\*" -ErrorAction SilentlyContinue | Where-Object {($_.PSChildName -split '-')[3] -eq $sidEnd -and ($_.ProfileImagePath -split "\\")[2] -notmatch $excludedKnownUsers} # Creates a 'script in memory': $testScript = $null foreach ($userPath in $userPaths.ProfileImagePath) { $testScript += "Remove-Item -Path "$userPath\Documents" -Force -Recurse`n" $testScript += "New-Item -ItemType Junction -Path $userPath -Name 'Documents' -Target '$userPath\Nextcloud\Documents' -Force`n" } # Create a PowerShell script and save it as specified in vars: if (-not(Test-Path $newLocalScript)) {New-Item -Force $newLocalScript} $testScript | Out-File $newLocalScript -NoNewline -Force # Task Action: $Action = New-ScheduledTaskAction -Execute "powershell.exe" -Argument "-ExecutionPolicy Bypass -File $newLocalScript" # Task Trigger: (task will be manually run immediately and then deleted, so keep 1 year out) $Trigger = New-ScheduledTaskTrigger -Once -At (Get-Date).AddYears(1) # Task Compatibility: $Compatibility = "Win8" # 'Win8' is 'Windows 10' in the GUI # Task Settings: $Settings = New-ScheduledTaskSettingsSet -Compatibility $Compatibility -StartWhenAvailable -AllowStartIfOnBatteries # Run task as local SYSTEM account with highest privileges: $Principal = New-ScheduledTaskPrincipal -UserId 'S-1-5-18' -RunLevel Highest # Create the scheduled task: Register-ScheduledTask -TaskName $TaskName -Description $Description -Action $Action -Trigger $Trigger -Settings $Settings -Principal $Principal -Force <#--------------------------#> # Run the scheduled task: Get-ScheduledTask -TaskName $TaskName | Start-ScheduledTask # Remove the created script: Remove-Item $newLocalScript -Force # Delete the scheduled task: Get-ScheduledTask -TaskName $TaskName | Unregister-ScheduledTask -Confirm:$false

This seems like a HUGE security problem - normal users can schedule a task to run as SYSTEM? Then any virus could do the same thing. So what am I missing?

I assume regular user would need elevated privileges at least... But I didn't test as a non-local admin, which is different than elevated privileges. But either way, that script can be automated and run as a user in the local admin group too with successful results.

I think your script affects every user on the machine - assuming that's Ok for the envivronment - yep, have the local admin run it - and done.

Yeah I designed it like that on purpose, because if users are using the device, whether it's one or 10 (unlikely), IMO they should all be redirected. But that can be changed no problem. But at least if it's one main person using it, it'll hit that one. If others do, they can be excluded. But you can always get the current signed on user and use that as in JB's original script, or in an automated way using other means I could add in if needed.

@scottalanmiller said in Windows Offline files:

@black3dynamite said in Windows Offline files:

@wrx7m said in Windows Offline files:

@dbeato said in Windows Offline files:

I disable Windows Offline Files for that reason, it is a pain to deal with and causes more problems than anything else. But yeah, even if it was locked out and the computer went to sleep it will mark it as offline since the computer detected a change on the network connectivity.

^^This. I have been disabling offline files for 15+ years. It never works the way people expect. #chasingghosts

It’s been about two years for me too since moving away from Windows Offline Files to Nextcloud/OneDrive.

And no regrets, I bet.

I would expect a similar situation to still exist for the situation I put forth above.

@scottalanmiller

Did you ever solve this problem? Just wondering what you solution was if you did.

@syko24 said in Can remote desktop Win10 be remotely activated somehow?:

@Pete-S said in Can remote desktop Win10 be remotely activated somehow?:

Thanks guys. I tried accessing remote registry, remote powershell and ssh but without success. I have to find out how they do their remote administration and get them to enable rdp for me. It was worth a shot though.

Try MMC and see if you can add Services for their computer. If you can add that successfully then you can enable Remote Registry and then from there enable rdp. Make sure you restart the rdp service after making the registry change.

Another method would be if you have PDQ deploy installed on another system at the location, you can try to push a ScreenConnect or similar install to the system.

There are steps one needs to take to ensure remoteability in any kind of way you are hoping for. Either through specific group policies, in the base image, during deployment, via device management software, etc. It's something they would know they did. Any MMC snap in such as remote registry will have required specific steps be taken first to ensure access that way.

The best thing to do is ask, because it takes 2 minutes to write the question, then do other things while you wait for the answer, rather than wasting time and money throwing darts in the dark.

@dbeato Yeah, great option, that really helps a lot with previous installation when you don´t have enogh space at hour HDD... thanks!

The last upgrade I did (8.1 -> 10) worked great except that Webroot got uninstalled. Which takes 90 seconds to fix, so no biggie.