In addition to the simple, purely local spell checker, the two Chromium-based web browsers, Google Chrome and Microsoft Edge,...
Author Archive for: Wolfgang Sommergut
4sysops - The online community for SysAdmins and DevOps
Download and install ADMX templates for Microsoft Edge

If you take a look at the group policy settings in Windows 11 or the separately available ADMX files,...
Controlled folder access: Configure ransomware protection with Group Policy and PowerShell

Controlled folder access prevents suspicious programs from modifying or creating files in protected directories, such as Documents, Pictures, Favorites,...
Find Active Directory accounts configured for DES and RC4 Kerberos encryption

While DES has long been considered insecure, CVE-2022-37966 accelerates the departure of RC4 for the encryption of Kerberos tickets....
ESXi 8 Free: new features, hardware requirements, and licensing

VMware's hypervisor is not only a component of the vSphere platform but can also be used for individual hosts....
Block notifications in Chrome, Edge, and Firefox

Many websites ask users whether they want to receive notifications. In managed environments, this feature can be disabled via...
VMware vSphere 8: Editions, licensing, and pricing

VMware recently announced the licensing terms, editions, and pricing of vSphere 8. All components, including ESXi, vCenter, and vSAN,...
Automate file downloads with Windows FTP or curl

If you need to download files regularly from an FTP server, Windows offers two onboard tools to automate this...
When did users last change their password in Active Directory?

Changing passwords regularly is no longer recommended, and the Security Baseline for Windows doesn't include a corresponding setting. Nevertheless,...
Configuring Defender Exploit Guard network protection

One of the features of Defender Exploit Guard is network protection. It blocks communication with dangerous domains or IP...
Windows 10 22H2: New Group Policy settings and updated Security Baseline, no ADK

Microsoft released version 22H2 of Windows 10 (Windows 10 2022 Update). It offers practically no new features for end...
Configure Defender SmartScreen, activate enhanced phishing protection

Microsoft includes several Windows security components under the term "Defender." One of them is Defender SmartScreen, which aims to...
UserAccountControl attribute: Checking and configuring security settings for Active Directory accounts

The UserAccountControl attribute can be used to configure several account settings in Active Directory. This applies, for example, to...
Configuring the cloud clipboard in Windows 10/11 with Group Policy and PowerShell

In Windows 10 1809, Microsoft introduced a clipboard with multiple entries and added the ability to sync its contents...
New group policies in Windows 11 2022: Start menu, taskbar, winget, printing, Defender, and IE

The current release of Windows 11 includes over 70 new settings for group policies. Most of these serve as...
Security baseline for Windows 11 2022: New recommended settings for printing, Defender, NetBIOS, and VBS

Together with the release of Windows 11 2022, Microsoft published the corresponding security baseline. It recommends activating a whole...
Configuring Defender Antivirus: Exclusions, real-time protection, scans, and remediations

On most PCs, Defender Antivirus runs with the default settings. However, Microsoft offers admins many options to customize the...
Get updates for Windows Server 2022 in WSUS

In the past, Microsoft set up a separate product in WSUS for each version of Windows Server; this meant...
Microsoft Defender: Control updates for malware signatures using Group Policy or PowerShell

Obtaining effective protection by virus scanners requires that they always use the latest definitions. Therefore, Microsoft Defender is not...
Find AD accounts with ChangePasswordAtLogon, set and enforce password change with PowerShell

Admins can prompt users to change their password at their next login. While it is easy to see the...