- Run gpedit.msc (Local Group Policy Editor)
- Next navigate to Computer Configuration\Administrative Templates\Windows Components\OneDrive.
- In the right panel, double click Prevent the usage of OneDrive for File Storage. Set it to Disable
Analyzing Microsoft’s 2016 security reports reveals that 94% of critical vulnerabilities could easily be mitigated
Have a look at this tool from Sysinternal
“C:\Program Files\Microsoft Security Client\msseces.exe”
To open the SCCM client control panel run the following command from the command prompt:
To Open the Software Center run the following command from the command prompt:
Open a Command Prompt window as an administrator.
In the new command line window that opens, to determine the USB flash drive number or drive letter, at the command prompt, type list disk, and then click ENTER. The list disk command displays all the disks on the computer. Note the drive number or drive letter of the USB flash drive.
At the command prompt, type select disk <X>, where X is the drive number or drive letter of the USB flash drive, and then click ENTER.
Type clean, and the click ENTER. This command deletes all data from the USB flash drive.
To create a new primary partition on the USB flash drive, type create part pri, and then click ENTER.
To select the partition that you just created, type select part 1, and then click ENTER.
To format the partition, type format fs=ntfs quick, and then click ENTER.
If your server platform supports Unified Extensible Firmware Interface (UEFI), you should format the USB flash drive as FAT32 rather than as NTFS. To format the partition as FAT32, type format fs=fat32 quick, and then click ENTER.
Type active, and then click ENTER.
Type exit, and then click ENTER.
When you finish preparing your custom image, save it to the root of the USB flash drive.
Show your desktop background on the Start Screen
New registry value under User Configuration\Preferences\Windows Settings\Registry
-Key Path: Software\Microsoft\Windows\CurrentVersion\Explorer\Accent
-Value name: MotionAccentId_v1.00
-Value type: REG_DWORD
-Value data: 000000DB
You can use this command to verify signature for drivers