Driver digital signature authentication issues
I am currently developing a desktop application for my company with a kernel driver (which is just a single .sys file). Since drivers must have a Microsoft digital signature to run starting with Windows 10, I have some questions about digital signature authentication. On this webpage (https://learn.microsoft.com/zh-cn/windows-hardware/drivers/dashboard/driver-signing-offerings#hardware-lab-kit-tested-and-dashboard-signed-drivers), I saw a solution for driver signing. The first method requires testing with HLK and submission to Windows Hardware Quality Labs for certification. The second method, according to its description, only requires submitting the driver for signature verification, without HLK testing. What are the differences between these two solutions? Which solution should I choose?
Windows update made dell laptop into a brick
Last security update on Jan 13th broke my laptop. Every program keeps freezing and doesn't do anything. Even when I open task manager it may run for a minute but soon it will freeze, and can't even end task. Only thing that is working is my browser. Yesterday I managed to reinstall windows using a USB and it was working again. While i was away, it forced an update and once again the same issues arise. laptop is too old to install 11, and going to try and reinstall windows again. There a way I can turn off the windows 10 update before this happens again? there is a patch, but i cannot install it. When it automated update, it bricks again and i can't install the most recent patch. it's in a never ending loop of hoping it doesn't auto update when i leave the computer on, or reinstall the OS with a usb. Dell inspiron 15 7559
Turn on Memory Integrity through Microsoft Intune
Hi, Question: How to turn on the following setting through Microsoft Intune? Windows Security > Device Security > Core isolation > Memory Integrity (It says: Memory integrity is off. Your device may be vulnerable.) Applied licenses: Microsoft Intune Suite + Microsoft Defender for Endpoint P2 Client OS: Windows 11 It has been weeks since I already applied the following through the Security Baseline Policy for Windows 10 and Later but still the Memory Integrity has not got enabled on any client: Device Guard Credential Guard: (Enabled with UEFI lock): Turns on Credential Guard with UEFI lock. Enable Virtualization Based Security: enable virtualization based security. Require Platform Security Features: Turns on VBS with Secure Boot and direct memory access (DMA). ------ Virtualization Based Technology Hypervisor Enforced Code Integrity: (Enabled with UEFI lock) Turns on Hypervisor-Protected Code Integrity with UEFI lock. The Windows Baseline Security has got applied successfully on all endpoints without any errors or conflicts. Intune Sync and device restart have been performed 100s of times but in vain. Any suggestions would be highly appreciated.Control Flow Guard caused tasks to suspend on launch
I've been tracking down the cause of a really troubling problem that started 5-6 x64 canary releases ago: running some executables would lead to a delay of 20-30 seconds before the application would actually launch. Discovered they were starting but immediately going into a suspended state (viewable in Task Manager) for up to 30 seconds, then they would appear on the screen and function normally. An example is Notepad++. I could repro the issue on demand by launching the app and then terminating it and then executing again a few times in rapid succession. Disabling Control Flow Guard (CFG) in Windows Security, App & Browser, Exploit Protection seems to resolve the issue. Reported in feedback, where there were about two other reports of similar behavior. Anybody else seeing issues with CFG ?
Windows 11 Dynamic Lock Unstable
Dynamic Lock in Windows 11 is unstable. Even when phone is connected to PC via Bluetooth, Dynamic Lock says it can't detect your phone. This screenshot shows: my phone is connected but dynamic lock shows not detected. Sometimes it works if I press the Scan for Phone option manually. But its not intended to work like that.
Windows Security Real Time Protection can't be enabled
I am currently running Windows 11 Pro Insider Preview 23H2. I tried enabling real time protection in registry by settling real time protection key to 0, I tried to set not configured for real time protection in Local Policy Group, I have alo tried enabling it using Command prompt. However, none of the steps worked. Real time protection is still off and cannot be enabled. It just keeps on toggling off even when manually toggling it to on. I do hope that next Windows Updte would have a fix to this issue.
