Disable “Run” Command via GPO
Want an easy way to harden your workstations? Disable the Run box for standard users. It’s a classic, straightforward restriction that stops curious users and particular basic social…
Category
Windows
Micro$oft Windows
368 articles in this category
Veeam VSS Failure on DCs with SentinelOne
If you are backing up Windows Domain Controllers with Veeam and hitting VSS snapshot failures, and you happen to be running SentinelOne (S1), you’ve run into a specific…
Windows 11 OOBE Microsoft Account Bypass During Install
Method 1 I did it using SHIFT+F10 then using regedit.exe to delete the LaunchUserOOBE value in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE registry key. But don't close regedit yet. Additionally to create my user and make it an administrator:…
List DNS records dnscmd
This command will list all “A” records (IPv4 address mappings) for the domain domain.tld on the local DNS server. Essentially, it’s retrieving the list of IP addresses associated…
Windows Server 2025 Installation Screenshots
Windows Server 2025 went Generally Available (GA) a few days ago. I grabbed a copy from the Microsoft Evaluation Center and installed on my ESXi 8 server. Here…
Get Vendor from MAC Address
Here's a quick snippet to get the IP, MAC address and Vendor using PowerShell in Windows with the native arp -a command and curl. It is based on…
Tool: Check CBS Corruption
I hacked together a small tool in .NET that helps me quickly analyze the Component Based Servicing (CBS) log in c:\windows\logs\cbs\cbs.log for missing CSI Payloads. It will parse the log…
Tail a file in Windows
This PowerShell one-liner is a convenient way to monitor log files in real-time and quickly spot error messages. The script continuously reads the log and highlights lines that…
Change from a Microsoft account to a local account
Archived from: Wayback Machine You can use the Settings app to switch your Microsoft account to a local account. Important: Microsoft recommends using a Microsoft account, not a local…
GET /eSCL/ScannerStatus HTTP/1.1
Came across an issue with an Epson printer that kept outputting an HTTP request during printing. Seems this is a common problem, dating back into 2023, for USB…
ActiveSync EAS Broken in M365 Outlook
Update: This issue is fixed in Outlook Desktop Version 2402 Build 17328.20068 and higher Ran into an issue with an update to M365 Apps where ActiveSync FolderSync breaks…
High CPU Process Troubleshooting
Introduction High CPU usage by the "System" process can often be caused by a hardware driver issue (bug, old version, incompatility etc). The System process loads (or hosts)…
Server 2019 Error 0x800f0950
Documenting a resolution to the error received when attempting a DISM /restorehealth as well as .NET 3.5 repair. Uninstall .NET 3.5 via DISM dism /online /disable-feature /featurename:NetFX3 Add…
Server 2019 DC Dying
Running in to all sorts of problems on a 2019 DC. Here's my action plan. dcdiag / repadmin tools to verify health correcting all errors found before starting any further operations. stand…
DISM and SFC
The Component Store [%WinDir%\WinSxS] maintains a backup copy of all Windows system files, and SFC [System File Checker] & DISM [Deployment Image Servicing and Management] manage two separate, vital pieces of the Component Store and OS, with SFC relying entirely upon what DISM manages: DISM has…