Windows – Firewall Group Policy
Firewall Group Policy KB ID 0000979 Problem For everyone who simply does not disable the Windows firewall, then you need to be able to manage what ports are open on your machines. The simplest way to do this is via firewall group policy. This week I had to open TCP port 9503 on the local firewall of my McAfee Move Offload Servers. Below I will open that port on all my machines, but in production I will only apply the GPO to...
Disable Lock Screen
KB ID 0000965 Problem Note: This is for older versions of Windows Server, you may want to go to the following article. Windows – Disable the ‘Lock Screen’ Firstly, the lock screen is there for a valid security reason, so I would not advocate doing this on a production network. But on my test network when I’m jumping between multiple servers all the time, it’s annoying to have to press CTRL+ALT+DELETE and tap the password...
Logging Powershell Execution
Logging PowerShell KB ID 0001903 Problem Monitoring PowerShell execution, (especially on critical servers like domain controllers), is essential for detecting potential malicious activity. PowerShell activities generate specific Event IDs in the Windows Event Log. Solution : Logging Powershell The following Event IDs are logged connected to PowerShell execution. Command Line Auditing: Event ID 800 (Microsoft-Windows-Sysmon/Operational...
Printers “Some Of These Settings are Managed By Your Organisation”
Managed By Your Organisation KB ID 0001899 Problem When attempting to add a printer, or engage with the printer settings dialog, you may see. Some Of These Settings are Managed By Your Organisation Solution : Managed By Your Organisation This is usually because a policy is being applied, (or has been applied) that is making a change in your registry, to the following key. HKEY_CURRENT_USER > Software > Microsoft > Windows...
Windows 11 – Remove Search Adverts
‘Remove Search Adverts KB ID 0001897 Problem Why this has to be a ‘thing’ in a business version of Windows I’m not really sure, but if you want to remove these adverts from the Windows Search function. They are called ‘Search Highlights’ or ‘Dynamic Search Box’. Solution: Remove Search Adverts Option 1 Remove Search Adverts with Domain Group Policy In a domain envronment we can simply...