All posts in "Research"
Share

Command line options for Software Center

By Mattias Benninge / September 7, 2017

In SCCM CB 1706 there is a new feature that allows you to direct link an application to Software Center by pasting a link into your browser. This can be achieved by clicking the “Share” icon when you have choose the application you want to link to.

Share

How to run Microsoft Network Monitor in WinPE

By Johan Arwidmark / August 1, 2017

In this guide you learn how to run the Microsoft Network Monitor in WinPE, for example for advanced debugging of OS Deployment issues. This guide is based on the following KB article from Microsoft: http://support.microsoft.com/en-us/help/4034393/how-to-get-network-captures-from-a-task-sequence-in-windows-pe. But I’ve added some clarification steps, as well as PowerShell scripts to make the process easier (and automated).

Share

Setting up a FTP Server in the cloud – Microsoft Azure vs. Amazon Web Services

By Johan Arwidmark / June 21, 2017

This week I’ve been volunteering at an event called DreamHack, which is the largest digital festival in the world. I’ve been volunteering for this event quite many years, and this time around I was editing videos and providing support to one of the teams. During the event we learned that we needed to upload some video-material, and even though we obviously could have used OneDrive, Dropbox, etc. to share the content, I decided this was a good opportunity, and a real use case, for the cloud. Simply spinning up a VM with a FTP server for the week, and then turn off the VM once we were done at the event. Worth mentioning is that we needed to transfer 2 – 3 TB of data to/from multiple machines running multiple OS platforms during the event.

Share

PSScriptPolicyTest script gets blocked by AppLocker in the event log. Why and what are those files?!

By Mattias Benninge / June 7, 2017

If you are using AppLocker (which you should) and have enabled the function “MSI and Scripts” in AppLocker to whitelist only signed PowerShell scripts you will get some errors in the event log even though your scripts are signed. Checking the event viewer log for AppLocker events you will see that the logged on user tried to run 2 different scripts starting with __PSScriptPolicyTest and the extensions .ps1 and psm1. The full name is something like  __PSScriptPolicyTest_bavjba32.xjg.ps1 where the name is __PSScriptPolicyTest_..ps1/psm1

Share

Using File Screen to block Ransomware like WannaCry on server shares – Part 1

By Mattias Benninge / May 29, 2017

There has been a lot of talk of the WannaCry malware last couple of weeks and I will try to describe how you can add another layer of security between a infected computer and your central file storage. There is already a few write-ups within this area, most of them only use the File Screen service to block users from creating new files with know extensions or renaming existing ones. This is a good start but it does not actually prevent the user (or the malware running in user context) from deleting all the files on your servers.

Share

Setup BITS for ConfigMgr Current Branch

By Johan Arwidmark / May 28, 2017

When using ConfigMgr in distributed environments, there are times when you want to limit how much bandwidth a client is using when downloading content. In all fairness, when having techniques like Peer Cache, and BranchCache at your disposal, you may get away by not limiting the bandwidth, but for most distributed environments you probably want to configure BITS to control how much bandwidth that is used over the WAN links. BITS is after all the component that is used for the actual downloads.

Share

Using the Unified Write Filter (UWF) feature in Windows 10

By Johan Arwidmark / May 25, 2017

In the Windows 10 Enterprise (including LTSB) and Windows 10 Education editions, you can enable the Unified Write Filter (UWF) feature to prevent changes to the hard drive. This is particular useful for kiosk-type scenarios, or classroom environments where you don’t want enthusiastic students to install software etc. on to the machines 🙂

Share

The complete idiots guide to Windows as a Service

By Johan Arwidmark / May 6, 2017

For what feels like the tenth time, Microsoft is changing their terminology/strategy around Windows 10 updates. Below is a recent thread covering the topic (thanks to Ami Casto (@AdaptivaAmi) and SystemCenterDudes (@scdudes) for making me aware of the changes):

Page 3 of 21
>