Posts

  • Mitigate the impact of malware for free with Microsoft Defender attack surface reduction rules

    Attack surface reduction rules are normally talked about in relation to Defender for Endpoint - a premium offering requiring E5/A5 or an add-on subscription to E3/A3. However, the core asr rules functionality is built into the Defender engine on Windows 10, and you can still use it on the following...
  • SQL Server Express LocalDB

    SQL Server Express LocalDB is a strange offering from Microsoft. A cut down version of SQL Server Express intended for developers that doesn’t get security updates. Wait, what? No security updates? From the documentation at docs.microsoft.com LocalDB cannot be patched beyond Service Packs. CUs and Security Updates cannot be applied...
  • Solidworks - disabling add-ins via the registry

    We recently saw an error with Solidworks 2019 in our Windows Virtual Desktop environment. On launch the app would pop up a dialog with the error Class not registered (Exception from HRESULT: 0x80040154 (REGDB_E_CLASSNOTREG)) Dismissing the dialog allowed the app to continue loading but it was a cause for concern....
  • WVD Scaling Tool Daylight Savings Time Issue

    Microsoft provide a scaling solution for Windows Virtual Desktop at docs.microsoft.com. It is not as fully featured as other scaling solutions but it does a decent job of powering off and powering on the virtual machines during peak and off peak hours. One thing it doesn’t do is adjust the...
  • Deploying Company Portal without using Microsoft Store for Business

    Microsoft are positioning the Company Portal app as a cross-platform portal for Microsoft Endpoint Manager. This will dramatically improve the user experience on co-managed devices. It surprised me that there’s no easy way to install Company Portal on a device automatically. Windows Store apps can only be made available in...
  • Windows 10 multi-session app install failure - Windows Installer Coordinator

    Deploying apps to Windows 10 multi-session is almost the same as deploying apps to normal Windows 10 but there are some quirks. One of these quirks can cause some MSI installers to fail. I first saw this installing IBM SPSS 26 for use in WVD Windows Installer Coordinator Please wait...
  • Using WIM files to speed up application deployment

    Deploying large applications can be a soul crushing job. The time to install a huge application can be bad enough but it is often made worse by how long it takes to copy tens of thousands of files around the network. Occasionally an idea will appear out of nowhere that...
  • Check a successful Azure AD Join and Intune enrolment with one line of PowerShell

    This line will output the contents of the local machine certificate store. Depending on the environment there might be a number of certificates displayed, but you only need to care about three to make sure the join and enrolment are working. For a successful Azure AD join the following certificates...

subscribe via RSS