The Microsoft BitLocker Administration and Monitoring (MBAM) client enables administrators to enforce and monitor BitLocker drive encryption on computers in the enterprise. Kindly refer to some of these related guides: How to query MBAM to display the report for BitLocker Recovery for a specified period of time, What are the effects of renaming an MBAM…
Read More “How to deploy MBAM Client as part of a Windows Deployment” »
Windows Defender Antivirus is the default anti-malware engine on Windows, and it protects your device and data against viruses, rootkits, ransomware, and other security threats. Please see Microsoft Endpoint Manager: How to manage Microsoft Defender Antivirus with Group Policy and Microsoft Malware Protection via the Command Line Utility, and Smart App Control and how to enable Phishing…
Read More “Configure and validate Exclusions for Microsoft Defender Antivirus scans” »
Microsoft Deployment Toolkit (MDT) is a unified collection of tools, processes, and guidance for automating desktop and server deployment. And this in turn reduces deployment time and standardizes desktop and server image deployment. In this article, you will learn how to fix an error has occurred in the script on this page: HTA applications report…
Windows Hello for Business (WHFB) is a modern two-factor authentication that replaces password authentication on devices. It uses key-based or certificate-based authentication and at least two unique factors “something the user knows (PIN) or something the user is (biometrics), combined with something they have (physical access to their device)”. WHFB offers secure, convenient single sign-on…
Read More “WHFB Hybrid Cloud Kerberos Trust Model is now available” »
Account lockout helps keep user accounts secure by preventing unauthorized users etc., from guessing the username and password. When your account is locked, you will have to wait for a specified amount of time before being able to log into your account again. Therefore, the account lockout policy “locks” the user’s account after a defined number…
Read More “Configure Local Administrators Account lockout” »
In this article, you will learn how and where to find your BitLocker recovery key on Windows. BitLocker Recovery Key is required to access a data disk encrypted with the Windows built-in encryption tool BitLocker. You can use the 48-digit password to access your disk drive. Other related guides on BitLocker: How to delegate control for Bitlocker…
Read More “How and where to find your BitLocker recovery key on Windows” »
In this guide, you will learn about when Should I Use TPM or TPM + PIN. One of the main requirements in Microsoft’s Windows, particularly Windows 11. The operating system has a little-known PC security feature known as the Trusted Platform Module. If you are looking to build your own Windows 11 PC or upgrade one…
MBAM reports compliance and other information about all of the computers it manages. The information on this topic can be used to help understand the Microsoft BitLocker Administration and Monitoring reports for enterprise and individual computer compliance and for key recovery activity. In this guide, you will learn how to query MBAM to display the BitLocker…
Read More “Query MBAM to display the BitLocker Recovery report” »
Windows Performance Toolkit is a performance monitoring tool that you can use to determine the general in-depth performance profiles of Windows operating systems. The Windows Performance Toolkit consists of tools like Windows Performance Recorder (WPR) and Windows Performance Analyzer (WPA). In this article, you will learn how to work with Windows Performance Toolkit. Please see How to…
Some security researchers have reported that attackers are currently exploiting two zero-day vulnerabilities in Microsoft Exchange Server. Microsoft has acknowledged and is currently investigating two reported zero-day vulnerabilities affecting Microsoft Exchange Server 2013, 2016, and 2019. The first to be reported is CVE-2022-41040 which is a Server-Side Request Forgery (SSRF) vulnerability, and the other one is CVE-2022-41082,…
Read More “Workaround for a zero-day vulnerability on Microsoft Exchange Server” »
The Group Policy Editor is a tool that IT administrators can use on Windows 10 and 11 to modify advanced (system and app) settings to regulate and restrict the environment for users to adhere to organizational policies. Additionally, more experienced users frequently utilize the tool to modify the desktop environment by activating and removing specific…
Read More “How to search Group Policy for a specific Setting in Windows 10 and 11” »
In this article, we will learn how to transfer Windows license from one PC to the other on Windows. While many manufacturers still provide a licensed copy of Windows 10 and 11 with new PCs, this is not the case for systems that are custom-built for a user. You will need a new license for Windows…
Read More “Transfer Windows License from one PC to the other on Windows” »
The Windows Assessment and Deployment Kit (Windows ADK) and Windows PE add-on have the tools you need to customize Windows images for large-scale deployment and to test the quality and performance of your system. In this article, we shall discuss How to uninstall and upgrade ADK, WinPE, and MDT. The Windows ADK includes the Windows…
Read More “How to uninstall and upgrade ADK, WinPE, and MDT” »
