How to deploy desktop wallpaper and lock screen image to domain joined windows 10 laptops using GPO – For PCs connected via VPN and also for PCs in office LAN

Requirement: I got a request from client to deploy their organization wallpaper and lock screen image across all the domain joined workstations. Domain joined workstations also include the laptops which are not in office but connect via VPN. I have created one GPO which covers both the scenarios. Its a tested policy which is working fine on the target systems / users. Let me share the policy details which can save some time for you if you get a similar request. For Domain joined PC’s which are not in the office and connect occasionally via VPN –> I have used wallpaper.bat file which is copied on users desktop and i …

Read more

How to Uninstall different versions of WinZip software installed on Windows 10 system using Microsoft Intune

Requirement: I got the requirement from one of our client to uninstall WinZip software from all users PCs. There were different versions of WinZip installed on the systems. I have targeted WinZip 24.0.14033 and WinZip 24.0.13650 and i will show you how to uninstall these two versions by creating MS Intune Windows App (Win32) App Package. I will also show you how you can uninstall WinZip versions other than the one’s given above. Let’s start —> Check the WinZip software version on target machine on which you want to remove the software and try to find the WinZip MSI file matching this version number. If you are unable to find …

Read more

Deploy and manage custom favorites to Microsoft Edge on Windows 10 devices using Microsoft Intune

First step is to create favorites in below format. You can customize it as per your requirement to include Intranet Pages or Internal Web Portal URL. Below favorites text format will be used when you will create a Policy to configure Favorites for Microsoft Edge. Please make sure URL and name is in quotes. You can simply copy below text and modify as per your need. Change the toplevel_name value to change the Root Level Folder Name which contains all the favorites. Once you have created favorites in a text file in above format. We will now proceed on configuring it / Pushing it to users workstations. Login on Microsoft …

Read more

Create Group Policy to Lock User’s Workstation after 20 minutes of inactivity (Windows 10)

Its a best practice to lock the workstation whenever you are stepping away from the desk, whether its for few minutes or few hours. But, we know that this practice is not 100% followed leaving the workstation not secured / exposed for information leak. Therefore, you can create a Group Policy to automatically lock users workstation after X minutes of inactivity. X can be any value between 1 second to maximum of 86,400 Seconds (24 hours). Lets see how it can be configured. Create a new Group Policy e.g. Workstation_AutoLock_Policy. Edit the Group Policy -> User Configuration -> Policies -> Administrative Templates -> Control Panel -> Personalization Configure the settings: …

Read more

Disable TLS 1.0 and TLS 1.1 on Windows 10 machines through GPO

Transport Layer Security (TLS)  – TLS protocol is used to provide privacy and data integrity between two communicating applications. SSL and TLS are both cryptographic protocols but because SSL protocols does not providers sufficient level of security compared to TLS, SSL 2.0 and SSL 3.0 have been deprecated. TLS 1.0 was released in 1999, TLS 1.1 was released in 2006, TLS 1.2 was released in 2008 and TLS 1.3 was released in 2018. Most of the companies and Internet Browsers are now moving to TLS 1.2 which is having better security algorithms than TLS 1.0 and TLS 1.1. TLS is more secure than SSL. Mozilla Firefox, Google Chrome, Apple and …

Read more

Windows 10 Startup Error: Windows cannot access \\server\foldername Error code: 0x80070035 The Network path was not found.

Issue Description: When a client PC is restarted and after the user sign-in to the computer, Error message “Windows cannot Access \\<server>\<foldername>” pop-up shows on the desktop screen and user is unable to see any desktop icons and Task bar Pinned items. This issue generally occur when you have re-directed Desktop and Documents folder to a file server using Folder Redirection GPO and is usually fixed (temporarily) by performing multiple restarts of the PC. Error 1: Windows cannot access \\server\<re-directed folder> (In my case it was Desktop folder which was re-directed it to a file server (as you can see in below screenshot): Error 2: You will find Event ID …

Read more