WSUS | Hint for cloned machines.

Do sysprep.exe, but you will lose activation, licenses, maybe devices. The poor mans way: Remove the SusClientID and (if exists) AccountDomainID from Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate

Foxit Reader | UAC prompt issue | GPO

You Foxits opens an UAC prompt on startup? It’s a never endig foxit issue… Did this and got rid of it: GPO: use the admx and activate: ‘Disable default PDF viewer switching’ Registry: Software\Foxit Software\Foxit Reader 10.0\CollectionData DefaultPDF REG_DWORD 1 Software\Foxit Software\Foxit Reader 10.0\CollectionData AppState REG_SZ Licensed Software\Foxit Software\Foxit Reader 10.0\Preferences\Others bCheckRegister REG_SZ 0 Software\Foxit […]

THUNDERBIRD | GPO or Registry | Certificate handling

Basics: https://bytesandbones.wordpress.com/2019/09/30/thunderbird-gpo-admx   Via Registry: HKCU\Software\Policies\Mozilla\Thunderbird\Certificates\Install\1 = “mycert.der” or Software\Policies\Mozilla\Thunderbird\Certificates\Install\2 = “\\MYHOST\Users\username\mycert.pem” or Software\Policies\Mozilla\Thunderbird\Certificates\Install\3 = “C:\CERTS\mycert.pem” as REG_EXPAND_SZ. If you define only a file name without a path Thunderbird searches %USERPROFILE%\AppData\Local\Thunderbird\Certificates%USERPROFILE%\AppData\Roaming\Thunderbird\Certificates for your files. Via GPO: Use the user branch. Define full path file location or file names only. If you specify only a file […]

Windows | Users temporary profile mess

On a machine some users are always logged on with temorarary profiles only? Go to this machines registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList Check the names + note the SIDs (!) + and delete these candidates. Then go to HKEY_USERS and delete the corresponding SIDs branches.