Windows – Stop the Welcome to Internet Explorer from launching via GPO
KB ID 0000459 Problem If your’e logging on as a new user and Internet Explorer has not yet been ran, then it wants to run the “Setup Windows Internet Explorer Wizard”. On just one machine with one user that’s fine, but if you are logging in all over the place, with multiple credentials, this can get quite annoying. Also you might not want your domain users having to do this at all, for security reasons....
Windows ‘Always On’ VPN Part 1 (Domain and PKI)
KB ID 0001399 Problem Always On VPN was a bit of a misnomer when it was released, as it was only really ‘on’ when a user logged on. So when comparing it with ‘Direct Access’ it didn’t have the capacity to ‘Manage Out’. With the release of Windows 10 (1709) this has been rectified with ‘Device Tunnels’, (more on that later). The solution uses RAS, NAP (NPS), and PKI (Certificate...
Windows – Set Desktop Wallpaper From Central Server Share
KB ID 0001280 Problem You have a corporate wallpaper, and you want to set it as the desktop wallpaper on all your machines. Solution Firstly make sure you have some wallpaper! Create a hidden, (with a $ on the end) share on your server, set the share permissions to Everyone = Read. On the security tab make sure ‘Domain Users’ have read, and I would add in administrators with full control to be on the safe side. Now create...
Stop Edge Hijacking PDF Files
KB ID 0001395 Problem This question appeared in my inbox today, ‘Edge’ has a nasty habit of assigning itself the default PDF reader, particularly after a round of updates! Solution First I went and had a look at my old Experts Exchange Buddy Ramesh’s site (www.winhelponline.com) who had done the heavy lifting and worked out the registry keys; Note: I’m only concerned with .pdf files, if you want to block .htm...
Using 32 and 64 Bit WMI Filters For Group Policy
KB ID 0001341 Problem I was trying to deploy some client AV packages today, there was an x86 version (x32 Bit) and a x64 bit version of the client software. As I was deploying the software via Group Policy I needed to write a different policy for each package. Then I needed to make sure the x32 bit client only deployed to x32 bit machines, and the 64 bit client only deployed to x64 bit machines. To do that you need a simple WMI...