This is super simple, but it’s a handy option to have available in an enterprise enviroment. It’s just a simple registry key. – You can deploy this via Package / AppModel / GPO, but I like to just do it all during OSD if possible. Tested in OSD, Windows 10 – 1511 Registry File (RunAsDiffUser-HKLM.reg) … Read more
Update 12/20/2018 – Added Step to Disable Hardware Encryption after the vulnerabilities found on several SSD vendors (Screen shot taken from my non-mbam bitlocker sub TS) Add step “Run Command Line” REG ADD “HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE” /V OSAllowedHardwareEncryptionAlgorithms /T REG_DWORD /D 0 /F All Steps: Eject CD powershell.exe -NoProfile -Command “(New-Object -ComObject ‘Shell.Application’).Namespace(17).Items() | Where-Object { $_.Type … Read more
Recently I’ve been working on Paint.Net, I used to install it using the .exe, however found that it would not install under the SYSTEM context. It worked when users would install from the Catalog, but I was unable to push updated versions. Today I was able to resolve the issue by using the /createMsi feature.I … Read more