Stop Windows 11 Upgrade
KB ID 0001773 Problem I have no problem with Windows 11, In fact I prefer its UI. But if experience has taught me anything, it’s that businesses will not be as quick to adapt Windows 11 as the general public. Some private companies spend ‘ages’ testing production OS’s with various applications, and getting a change to that config can be a ‘challenge’. So there are valid reasons for wanting to stop a...
Windows Server – Install and Configure NDES
KB ID 0000947 Problem NDES, is the name for what we used to call MSCEP, which was an ‘add-on’ for the Server 2003 family of servers. In Server 2008 it was renamed to NDES. It is a role service that runs on a Certificate Services Server, and is used to create a registration authority (RA) that can issue certificates from your PKI infrastructure to network devices, i.e. Routers, Firewalls and Switches. Solution Installing...
Find The Azure AD Join Type
KB ID 0001597 Problem I recently did a post about Joining Azure AD. while working on that I found out there were three different Azure AD ‘States’ (see below). But how do you pingd out your Azure AD Join Type? Azure AD Joined: Aimed at Corporate owned machines joined to Azure AD, (or CYOD devices). Azure AD Registered (Was called Workplace Joined, and still is if you work in PowerShell). Aimed at BYOD devices. Azure Hybrid...
Enable Remote Desktop (Remotely)
KB ID 0001747 Problem Let’s say you want to RDP to a remote server (imagine such a thing!) But some doofus didn’t enable RDP? Well you can enable Remote Desktop via group policy and wait a while. I used to connect to the registry remotely and change the key that enabled RDP, but now you can do it with a simple PowerShell command. Not only will it enable Remote Desktop, it will also allow RDP on the Windows firewall (if...
Windows Server – Disable ‘Defender’
KB ID 0001710 Problem I got a call last night to help out a colleague, this involved using a ‘dubious’ piece of software that is very old, (I wont elaborate further). But to run it on a modern Windows Server is nearly impossible. The host detects the software as being infected (It may well be, but I’ve never suffered). So I need to keep the software in a password protected Zip file. And only extract it on a Virtual...