Legacy Boot Preparation for Windows 11
Before upgrading a PC that does not have secure boot running and TMP enabled, you need to prepare it in person with the following BIOS changes:
Category Archives: Windows
Junction Redirect
It is not always possible to change to the storage location used by an application. This can be fixed by using a Junction that will redirect applications to the new locations. Junctions are per user. The origin folder must be deleted before creating the junction Here are some examples.
Migrating a Windows 10 VM to11
To upgrade a VM to Windows 11 follow these steps:
Remove Dell Bloatware
This removes all Dell apps except Command Update $apps = Get-WmiObject win32_product | ? {$_.vendor -like “Dell*” -and $_.name -notlike “Dell Command*”};$apps foreach($app in $apps){ $Result = $app.uninstall() | Select-Object -Property returnvalue if(($Result).returnvalue -eq 0){Write-host $app.name}Else{Write-host “$PC Fail”}}
Reset DSRM Password
When adding a new Windows Active Directory Server the verification of Safe mode password fails. If you do not have access to the existing password, use NTDSUTIL to change the DSRM password on the current domain controller.
Start Menu and Taskbar Issues
If the start menu stops opening or you cannot use icons from the taskbar, you can reinstall the Windows taskbar: Press Windows Key+X > Click Powershell (Admin) > Copy the below and paste into Powershell > Enter > Reboot your computer Get-AppXPackage -Name Microsoft.Windows.ShellExperienceHost | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\AppXManifest.xml”} To restart the explorer: Press CTRL+SHIFT+ESC > Locate… Read More »
Install & Update Exchange Module
Install-Module -Name ExchangeOnlineManagement -RequiredVersion 3.0.0 Find-Module ExchangeOnlineManagement -AllVersions -AllowPrerelease Get-InstalledModule ExchangeOnlineManagement | Format-List Name,Version,InstalledLocation Update-Module -Name ExchangeOnlineManagement
Windows Time
This command will cause the system clock to sync with Internet time servers. It is useful when an older server is losing time. $Time = w32tm /stripchart /computer:time.windows.com /samples:1 /dataonly Write-host ($Time[2]) -ForegroundColor Green Write-host “The PC time is “(get-date) -ForegroundColor Yellow Write-host “NTP Status:” -ForegroundColor Yellow Write-host (w32tm /query /status) -ForegroundColor Yellow Write-host (w32tm /query /source) -ForegroundColor… Read More »
Remote MSI Installation
WinRS can be used when installing software on remote systems. If you want to quietly install an application using an MSI file onto a remote machine, use the following syntax. This syntax assumes the MSI file has already been deposited into the C:\ folder. winrs -r:machinename msiexec.exe /i c:\install.msi /quiet
Autoruns
When looking at PC performance it is important to understand what is running behind the scenes. Autoruns will show what is in the registry, startup items, scheduled tasks, etc. It can be helpful when looking at system delays (the blue spinning wheel showing up next to your cursor every two seconds). Autoruns for Windows – Sysinternals | Microsoft… Read More »
Teams Hanging
If teams hangs: 1) Log out and quit Teams 2) Go to %appdata%\Microsoft\teams
AD: BitLocker Recovery Key
Many laptops ship with BitLocker enabled by default. Without the key, there is no possible way to access the data in the event that the PC fails. To Backup this key run this in PowerShell: manage-bde -protectors -get C: The Key is stored in AD and can be viewed with his: $objComputer = Get-ADComputer LAP001 $Bitlocker_Object = Get-ADObject… Read More »
Block Outlook from connecting to 365
Beginning with Office 2016 Outlook auto-connects to 365 upon opening. This causes users to be prompted for credentials if their account is on-premise. To disable this, run this in PowerShell as the user: Set-ItemProperty -Path HKCU:\software\Microsoft\Office\16.0\Outlook\AutoDiscover -Name ‘ExcludeExplicitO365Endpoint’ -Value 1 -Type DWord -Force
Group Policy & Fast Logon Optimization
Some GPOs can take two logins to be implemented and also trigger a longer logon cycle. This is because there are two types of GPOs.
Gaming Control Panel
Users are suddenly seeing a new “Gaming Control Panel” open on their system. To turn it off manually press Win + I > Gaming > deselect “On” The Control Panel is opened by pressing Win + G and looks like this:
Advanced System Settings
Microsoft continues to dumb down the Control Panel GUI. To access the now missing” traditional” System control panel, go to Run and enter: SystemPropertiesAdvanced.exe
Powershell posting with color
To add Powershell to a WordPress post with color: Copy the code from the Powershell ISE > Paste it into Word > Copy it from Word and Paste it into OneNote > Copy it from OneNote and paste it into WordPress The first steps will let you record in OneNote with color as well.
Remotely Join a PC to Domain
Rename PC > Reboot Connect VPN > Join Domain > Reboot Login to local account > Connect VPN > Switch User > Login as domain admin (causes VPN to close) > Logoff Login to local account > Reconnect VPN > Switch User >Login as domain user
Keep Mapped Location Open
If windows continually drops a remote location you can keep it open with this: do{start-process \\server\path ;start-sleep 5 $a = (New-Object -comObject Shell.Application).Windows() |?{$_.FullName -ne $null} |? {$_.FullName.toLower().Endswith(‘\explorer.exe’)} $a | % { $_.Quit() }Start-sleep 3600}while ($True)
Broken OneNote Links
These changes in the cloud will break access to OneNote and risk data loss: Username changes involving the domain name. Moving, or renaming a OneNote notebook When this happens, notebook owners will need to reshare their notebooks and all users should look for unlinked notebooks after a domain change.
Wake on LAN (WOL)
Migrating PhotoShop Settings
To Migrate a users custom settings: On the Source PC: Backup Presets & Adobe Photoshop [version] Settings from: %appdata%/Adobe/Adobe Photoshop [version]/ On the Destination PC: Restore the above folders to: %appdata%/Adobe/Adobe Photoshop [version]/
RDP Security Error
To bypass the error, merge this into the registry: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters] “AllowEncryptionOracle”=dword:00000002
IPCONFIG – Remotely Release and Renew
ipconfig /release && ipconfig /renew If run remotely “ipconfig /release” will disconnect the session and prevent running “ipconfig /renew”. These can be run consecutively from a single line by, connecting the two commands with “&&”.
Uninstall Software via Powershell
Outlook OST/PST scan reset
Outlook requires a data file be scanned when it has detected corruption. This can prevent users from accessing the program. To bypass this requirement the following registry key can be altered.
Variables
This is a list of windows variables:
File Paths
Adobe PDF DLL for x64 install C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Xtras\AdobePDF\AMD64 Apple iTunes iOS Backups: %APPDATA%\Apple Computer\MobileSync AutoCAD License Info %AppData%(All Users)\Autodesk\AutoCAD LT 2006\R11\Adlm\ *html file C:\ProgramData\Autodesk\Adlm\REVITS2011en_USRegInfo.html Client license – Network c:\program files\Autocad 2010\licpath.lic c:\program files\Autocad\Product 20nn\licpath.lic Client license – Subscription C:\ProgramData\Autodesk\CLM\LGS Google Chrome Bookmarks: C:\Users\hmg\AppData\Local\Google\Chrome\User Data\Profile n\Bookmarks Java MSI Files: C:\Users\%username%\AppData\LocalLow\Sun\Java\ Microsoft Office Outlook PSTs: %LocalAppData%\Microsoft\Outlook\*.pst NK2 Autofill:… Read More »
Enable RDP via PowerShell
To Enable Remote Desktop from PowerShell run:
Remote Desktop with Multiple Screens
If your remote PC is running Windows 10, you can use multiple screens when you remote into the system. To enable this:
Upgrade Windows 10 from the Network
Batch file for upgrading Windows 10 from the network or C:\Win10: start /wait \\Server\win10\setup.exe /auto upgrade /migratedrivers all /dynamicupdate enable /priority normal /showoobe none /compat ignorewarning /copylogs C:\Temp\Win10Upgrade.log /pkey YDC6P-XXXXX-XR66V-XXXXX-BBH3B
Windows Automatic Logon
Create a text file with ext .reg > update the contents with the below > then import it: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] “DefaultPassword”=”Password” “AutoAdminLogon”=”1” “DefaultDomainName”=”Domain” “DefaultUserName”=”User”
Mailbox Sent Items Configuration
Set-MailboxSentItemsConfiguration Enables you to configure the Sent Items folder to which a message is copied. Set-MailboxSentItemsConfiguration
Windows 10 User Migration Tool
Use the User State Migration Tool (USMT) to migrate users on Windows 10.
Windows 10 Fake Restart
I recently witnessed a Windows 10 PC restart, only to find that WMIC was reporting it had not been rebooted in a month. This false restart was causing the users VPN to fail. After multiple “Restarts” that appeared to complete, I finally ran restart /f /r /t3 from command. This forced restart took longer, updated the last bootup… Read More »