Policy path: System\Troubleshooting and Diagnostics\Scripted Diagnostics Allow user to access and run troubleshooting wizards System\Problembehandlung und Diagnose\Microsoft Support-Diagnosetool Benutzern den Zugriff auf die empfohlene Problembehandlung für bekannt Probleme erlauben Scope: Machine KUDOS: https://www.pwndefend.com/2022/05/30/office-microsoft-support-diagnostic-tool-msdt-vulnerability-follina/
Situation: Your machine lives in a corporate environment and uses your corporates own DNS resolver who’s located in your own LAN/IPsubnet. You didn’t define a default gateway in your IPv4 settings for security reasons. Resolving names via nslookup works fine, but windows himself (i.e ping) and third party software (like datev) run into resolve problems […]
Delete them: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{KEY2KEY2KEY2} HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\KEYKEYKEY HKCR\Installer\Products\KEYKEYKEY HKLM\SOFTWARE\Wow6432Node\SOMETHING HKLM\SOFTWARE\RegisteredApplications\SOMETHING HKLM\SOFTWARE\Clients\Mail\SOMETHINGifITdidHANDLEmail HKLM\SOFTWARE\WOW6432Node\RegisteredApplications\SOMETHING HKU\.DEFAULT\Software\Clients\Mail\SOMETHINGifITwasAmailCLIENT HKU\S-1-5-18\Software\Clients\Mail\SOMETHINGifITwasAmailCLIENT
Export on a proper machine and edit: Then do the GPO thing: Open your Group Policy editor and go to the Computer Configuration\Administrative Templates\Windows Components\File Explorer\Set a default associations configuration file setting.
disable this. Feature Packs: Specifies new product functionality that is first distributed outside of a product release and that’s typically included in the next full product release.
Thunderbird is checking against C:\Program Files\Mozilla Firefox\distribution\policies.json at start. Some guys collected this for the latest version: https://fossies.org/linux/thunderbird/comm/mail/components/enterprisepolicies/schemas/policies-schema.json Thank you very much! Maybe this stuff is triggerable through the registry.
You can’t connect to a samba server configured with map to guest = Bad User Don’t try this at home: Re-Enable the guest account fallback Your risky solution: Tune your GPO. Computer Configuration\Administrative Templates\Network\LanMan Workstation\Enable Insecure Guest Logons ATTENTION:I’ve had faced situation when this didn’t do the trick. I hat to tune the registy: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters] […]
0x1 + 0x8 = 0x9 [ 0x1: special interval | 0x8: force as client] Edit: Tested with0x1 Computer Configuration > Administrative Templates > System > Windows Time Service > Time Providers. Server: ntp.myserver.org Type: NTP Keep the Windows time service running. Read this: https://docs.microsoft.com/de-de/windows-server/networking/windows-time-service/windows-time-service-tools-and-settings
Check your Windows Update GPO’s and deactivate ‘Do not connect to any Windows Update Internet location‘
Do sysprep.exe, but you will lose activation, licenses, maybe devices. The poor mans way: Remove the SusClientID and (if exists) AccountDomainID from Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate
bytes and bones 
You must be logged in to post a comment.