Update 9/27/2016 -This post was originally written for 1511, With Win10 1607, you no longer need to add Isolated User Mode – More info Here along with another nice way to deploy it. I set this up a couple weeks ago and have been meeting to write something up. Then before I could, Peter over … Read more
OneDrive, if you’re not using it, it’s just another annoying thing in Windows 10. If you’re able to use it, awesome. But for those environments that want it gone, here is how I’ve removed it from our environment. I’m using several methods to attack this thing to drive it into submission. Update – 9/19/16 – … Read more
Updated Method for 1607 HERE, this method below still works, but Nickolaj goes through the new built in export / import method available in 1607. This one took me a little while. The hard one was Internet Explorer, which I had to do completely differently than the others. In this post I’ll give two … Read more
This is super simple, but it’s a handy option to have available in an enterprise enviroment. It’s just a simple registry key. – You can deploy this via Package / AppModel / GPO, but I like to just do it all during OSD if possible. Tested in OSD, Windows 10 – 1511 Registry File (RunAsDiffUser-HKLM.reg) … Read more
Update 12/20/2018 – Added Step to Disable Hardware Encryption after the vulnerabilities found on several SSD vendors (Screen shot taken from my non-mbam bitlocker sub TS) Add step “Run Command Line” REG ADD “HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE” /V OSAllowedHardwareEncryptionAlgorithms /T REG_DWORD /D 0 /F All Steps: Eject CD powershell.exe -NoProfile -Command “(New-Object -ComObject ‘Shell.Application’).Namespace(17).Items() | Where-Object { $_.Type … Read more