GPO | Create a scheduled task

Create the task on a computer. Set the executional principal to ‘NT AUTHORITY\SYSTEM’. Type the string directly or search for ‘SYSTEM’ in the computers local branch. Test it locally. Export the Task as xml. Copy the xml to an accessable network share. Create a powershell script to install the task out of this xml. Example […]

Foxit Reader | UAC prompt issue | GPO

You Foxits opens an UAC prompt on startup? It’s a never endig foxit issue… Did this and got rid of it: GPO: use the admx and activate: ‘Disable default PDF viewer switching’ Registry: Software\Foxit Software\Foxit Reader 10.0\CollectionData DefaultPDF REG_DWORD 1 Software\Foxit Software\Foxit Reader 10.0\CollectionData AppState REG_SZ Licensed Software\Foxit Software\Foxit Reader 10.0\Preferences\Others bCheckRegister REG_SZ 0 Software\Foxit […]

THUNDERBIRD | GPO or Registry | Certificate handling

Basics: https://bytesandbones.wordpress.com/2019/09/30/thunderbird-gpo-admx ¬† Via Registry: HKCU\Software\Policies\Mozilla\Thunderbird\Certificates\Install\1 = “mycert.der” or Software\Policies\Mozilla\Thunderbird\Certificates\Install\2 = “\\MYHOST\Users\username\mycert.pem” or Software\Policies\Mozilla\Thunderbird\Certificates\Install\3 = “C:\CERTS\mycert.pem” as REG_EXPAND_SZ. If you define only a file name without a path Thunderbird searches %USERPROFILE%\AppData\Local\Thunderbird\Certificates%USERPROFILE%\AppData\Roaming\Thunderbird\Certificates for your files. Via GPO: Use the user branch. Define full path file location or file names only. If you specify only a file […]

Windows 10 | WSUS update problems

Your machines can’t connect to your WSUS? Maybe you upgraded your Windows version (ie 1909 > 2004) and your old GPOs don’t fit the new version. Solution: remove your old Update GPOs, add the new admx files from an freshly upgraded windows machine to your DCs PoliciyDefinitions and reconstruct your GPOs.

Hide Shutdown + Reboot buttons in Windows 10 via GPO

These policy settings are available in Administrative Templates\Start Menu and Taskbar under User Configuration. Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands or in German: Befehle “Herunterfahren”, “Neu starten”, “Energie sparen” und “Ruhezustand” entfernen und Zugriff darauf verweigern