Check this: https://admx.help/?Category=Chrome&Policy=Google.Policies.Chrome::ProxySettings&Language=de-de How i did it: copy the json stuff into an editor, tune your parameters and transdorm it into one single line. Then put this string into your gpo input field. It will appear in HKCU\Software\Policies\Google\Chrome\ProxySettings as REG_SZ
Policy path: System\Troubleshooting and Diagnostics\Scripted Diagnostics Allow user to access and run troubleshooting wizards System\Problembehandlung und Diagnose\Microsoft Support-Diagnosetool Benutzern den Zugriff auf die empfohlene Problembehandlung für bekannt Probleme erlauben Scope: Machine KUDOS: https://www.pwndefend.com/2022/05/30/office-microsoft-support-diagnostic-tool-msdt-vulnerability-follina/
Delete them: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{KEY2KEY2KEY2} HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\KEYKEYKEY HKCR\Installer\Products\KEYKEYKEY HKLM\SOFTWARE\Wow6432Node\SOMETHING HKLM\SOFTWARE\RegisteredApplications\SOMETHING HKLM\SOFTWARE\Clients\Mail\SOMETHINGifITdidHANDLEmail HKLM\SOFTWARE\WOW6432Node\RegisteredApplications\SOMETHING HKU\.DEFAULT\Software\Clients\Mail\SOMETHINGifITwasAmailCLIENT HKU\S-1-5-18\Software\Clients\Mail\SOMETHINGifITwasAmailCLIENT
Thunderbird is checking against C:\Program Files\Mozilla Firefox\distribution\policies.json at start. Some guys collected this for the latest version: https://fossies.org/linux/thunderbird/comm/mail/components/enterprisepolicies/schemas/policies-schema.json Thank you very much! Maybe this stuff is triggerable through the registry.
Do sysprep.exe, but you will lose activation, licenses, maybe devices. The poor mans way: Remove the SusClientID and (if exists) AccountDomainID from Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate
You Foxits opens an UAC prompt on startup? It’s a never endig foxit issue… Did this and got rid of it: GPO: use the admx and activate: ‘Disable default PDF viewer switching’ Registry: Software\Foxit Software\Foxit Reader 10.0\CollectionData DefaultPDF REG_DWORD 1 Software\Foxit Software\Foxit Reader 10.0\CollectionData AppState REG_SZ Licensed Software\Foxit Software\Foxit Reader 10.0\Preferences\Others bCheckRegister REG_SZ 0 Software\Foxit […]
When Thunderbird starts it ignores already existing registry entries. That means, if you have had deleted an extension via UI and you did not change the registry entry (deleting or modifying) afterwards TB will not install this extension again. In other words: If you have once installed an extension via registry and you delete it […]
Debug it using the Developers error console. Try using ASCII (PEM) instead of Binary (DER) certs.
Basics: https://bytesandbones.wordpress.com/2019/09/30/thunderbird-gpo-admx Via Registry: HKCU\Software\Policies\Mozilla\Thunderbird\Certificates\Install\1 = “mycert.der” or Software\Policies\Mozilla\Thunderbird\Certificates\Install\2 = “\\MYHOST\Users\username\mycert.pem” or Software\Policies\Mozilla\Thunderbird\Certificates\Install\3 = “C:\CERTS\mycert.pem” as REG_EXPAND_SZ. If you define only a file name without a path Thunderbird searches %USERPROFILE%\AppData\Local\Thunderbird\Certificates%USERPROFILE%\AppData\Roaming\Thunderbird\Certificates for your files. Via GPO: Use the user branch. Define full path file location or file names only. If you specify only a file […]
On a machine some users are always logged on with temorarary profiles only? Go to this machines registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList Check the names + note the SIDs (!) + and delete these candidates. Then go to HKEY_USERS and delete the corresponding SIDs branches.
bytes and bones 
You must be logged in to post a comment.