Using File Screen to block Ransomware like WannaCry on server shares – Part 1

There has been a lot of talk of the WannaCry malware last couple of weeks and I will try to describe how you can add another layer of security between a infected computer and your central file storage. There is already a few write-ups within this area, most of them only use the File Screen service to block users from creating new files with know extensions or renaming existing ones. This is a good start but it does not actually prevent the user (or the malware running in user context) from deleting all the files on your servers.

Continue reading >

Setup BITS for ConfigMgr Current Branch

When using ConfigMgr in distributed environments, there are times when you want to limit how much bandwidth a client is using when downloading content. In all fairness, when having techniques like Peer Cache, and BranchCache at your disposal, you may get away by not limiting the bandwidth, but for most distributed environments you probably want to configure BITS to control how much bandwidth that is used over the WAN links. BITS is after all the component that is used for the actual downloads.

Continue reading >

Fixing why Sysprep fails in Windows 10 or Windows 11 due to Windows Store updates

When creating reference images for Windows 10 or Windows 11, Sysprep is very likely to fail if the machine has Internet access, and have enough time to start updating it's built-in applications, or install new ones as part of the consumer experience feature. This post is about preventing that from happening, and is a companion to my guides on building Windows 10 and Windows 11 reference images.

Continue reading >

Managing Windows PCs using Microsoft Intune – With or without the Intune Client Software

A little while back I had to do a presentation about what options that are available from Microsoft to manage Windows PCs, and to summarize, there are only two (sort of): ConfigMgr or Intune (standalone), or combining ConfigMgr and Intune (the hybrid model). Anyway, when preparing the presentation I spent some time on testing the standalone Microsoft Intune solution, and quickly run into a question: Should you, or should you not, use the Intune client software ?

Continue reading >

Windows 10 Configurations – PowerShell and WMI Bridge vs. Provisioning Packages

In Windows 10 you have the option of creating provisioning packages to apply settings/configurations to a machine. For example upgrading a machine running Windows 10 Professional to Windows 10 Enterprise. Now, to apply a provisioning package, you can either do it automatically in WinPE via DISM.exe, or later in the running Windows operating system by double-clicking the provisioning package and walk through a quick wizard.

Continue reading >
1 6 7 8 9 10 25
Page 8 of 25
>