Windows 10 11 Enterprise Restrict access to MS Store via group policy
Issue presented: Multiple users are downloading and installing Remote Access tools that are deemed not supported as well as other applications in the environment. We want to restrict access to the MS Store to Administrators or a specific AD group without using AppLocker or InTune. I have seen various threads in multiple sources that are conflicting about disabling the store or setting to the Company Portal for Windows 10/11. If you set the MS Store to Company Portal, in Windows 11 it disables the store. Turn off the Store application GPO: Denies or allows access to the Store application. If you enable this setting, access to the Store application is denied. Access to the Store is required for installing app updates. Other threads as well as the gpo verbiage itself indicate that if you disable the store, all installed applications will no longer update. There are some threads that state the opposite. https://learn.microsoft.com/en-us/windows/configuration/store/?tabs=gpo Has anyone configured a way to restrict users or a specific group of users from using the MS Store while allowing existing applications the ability to update?
Password reset and recovery fail
Hi there, good morning. First i appreciate any ones assistance here, its been a little frustrating. My regular windows account, for purchases, family content etc is "email address removed for privacy reasons". I cant sign in to that one any more. it is under 2fa with a code generator (I have that and the code is fine etc), it has a phone number (i have that!), and email account of course. I tried to enter the password to login to microsoft account - account.microsoft.com - and it gives the error "there have been too many failed login attempts". So i go through the password reset and works fine and i have a new password. I try again straight away and it fails with the same error. I try again for password reset... see above.. So i try for account recovery and go through the form - but i get an email saying because i have 2fa this is ignored and done automatically. However the automatic process does not seem to work - as indicated above. I tried to find a microsoft chat to have a live session, but it says i need to login... so i have logged in with a secondary account. I cant find the live chat sessions though. So i am posting here for any help - if i have the wrong forum i apologize - it was confusing to me about where i should actually make a post... this is making me feel old...lol... thanks Dan
Moved 2.5"ssd from old Intel NUC to new Intel Nuc, can't find docs/pics
So not sure if this is the right place after wading through all the options so here goes: I moved a ssd from my old NUC that was on it's last legs (pwr supply). It was windows 10 and I needed a new system as the hardware was too old to upgrade to WN11 and the pwr supply was on the blink anyways. I installed two brand new SSD's in the new NUC and installed a new version of WN11 on one (Linux mint on the other). I got the new system up running both OS's w/o much trouble (other than my old HP laser printer which is so old that HP doesn't support it anymore). I took the old 2.5" ssd out of the failing nuc and connected it to the new system via usb-c. wn11 recognizes it as drive F but show two identical F drives...? why two F's? I can open it via File explorer but I can't find any of my word docs. Doing a search in the search box with drive F selected, all wn11 does is state : "working on it" and never finds anything (the little spinning circle spins itself senseless) and I finally give up and end the task :) If I boot my Linux ssd, I can find the docs and also pics too. What am I doing wrong? I can find docs using the linux OS but I can't in the OS that they originally were created in (windows/word)Windows 10 21H2 and Windows 11 21H2 both show up as "2009" release
I'm not real sure where to post this, so will try here. I have noticed that for both Windows 10 - 21H2 and Windows 11 - 21H2, the "ReleaseID" value in the Registry is incorrectly shown as "2009". (We are using Windows 10/11 Enterprise.) This is located at this key in the registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion We rely on inventorying this value to determine which computers have which "Feature Update" installed, and therefore, which computers we still need to update. Has Microsoft migrated away from using this value to indicate which Feature Update is installed? Do we need to change our approach to look at the "DisplayVersion" instead of the "ReleaseID"? Or some other value in the registry? Also, Windows 11 has another issue. In the same registry key location, the "ProductName" value is listed as "Windows 10 Enterprise", which of course is incorrect. Are others seeing these same results with these items? Anyone heard if Microsoft has plans to fix these issues?GPO stettings for Privacy Windows 10 and Windows 11
Hello, I have set a security policy in GPO for some privacy & security settings. But I cannot find these settings in GPO. I don't want to edit this using the Windows registry, does anyone perhaps know where these settings are available? Let apps show me personalized ads by using my advertising ID Let websites show me locally relevant content by accessing my language list Let windows improve start and search results by tracking app launches Show me suggested content in the Settings app
Prevent Windows 11 upgrade, but allow Windows 10 feature packs
I am looking for a Script, GPO, or Registry key that will prevent Windows 10 from upgrading to Windows 11, but still allow the endpoint to upgrade to the latest feature pack. I have already investigated using the 'select target feature pack' GPO or registry key, but management doesn't want us to have to manually maintain the version. We currently do not use WSUS or another management software. Any suggestions are appreciated ThanksChanging MAC address without using third-party app.
Hi, For changing MAC address without using third-party app, following options I found in most articles: A. Using Device Manager B. Using Random Hardware Addresses in Windows 10 and Windows 11 There are multiple queries and doubts related to changing MAC address as below: 1. I know, MAC address is a 48-bit hardware address in 12-digit format of hexadecimal number. How can I calculate random number for the value of Locally Administered Address, if we want to change the MAC address using Device Manager? 2. In case of Random Hardware Addresses in Windows 10 and Windows 11, Windows 10 and Windows 11 have different options as below; Windows 10 Windows 11 Like Windows 10, can I setup Change daily in Windows 11? 3. Random Hardware Addresses option is available only, if system is connected with Wi-Fi. The option is not available, if system is connected with an Ethernet cable. Can I enable Random Hardware Addresses option, if system is connected with an Ethernet cable? 4. After changing the MAC address, how do I know the actual MAC address which is engraved on the network adapter? Please resolved queries. I'll be thankful for your assistance. With Regards NndnG
