Recent content by bimmerdriver

I have been able to successfully disable Real-time protection, including after rebooting, by using the following method: Disable Tamper Protection. Using gpedit, set "Turn off real-time protection", which is located in Local Computer Policy, Computer Configuration, Administrative Templates...

I ran Update_UEFI-CA2023 -Revoke and it was successful! I reran Check_UEFI-CA2023 -Verbose and here is the output: I'm not clear why the 2011 certificates are still present after running -Revoke.

If I run it with the -Revoke flag, won't that cause a problem for bootmgr and memtest because they are signed using Microsoft Windows Production PCA 2011 rather than Windows UEFI CA 2023? Also, I ran Check_DBXUpdate.bin and here is the output: Do the missing signatures come from Windows Update?

Thanks for the quick reply! I ran the updated script and here is the output: After rebooting, I followed the instructions to install the PK and append it to the KEK. I reran Check_UEFI-CA2023 and here is the output: Is it expected that there should be no DBX certificates? I'm not clear...

I deleted all of the keys from the BIOS and rebooted. After that, I ran Check_UEFI-CA2023. Here is the output: Here is the output from running Update_UEFI-CA2023: I didn't know what it wanted for MountPoint[0], so I pressed <Enter>. After that, I ran Check_UEFI-CA2023 again. Here is the...

They didn't call it a "private BIOS". I think they referred to it as a pre-release or beta or something. I would have to see if the messages are still in the support website to be sure. I guess it doesn't matter. I like the idea of wiping all of the keys and installing the Microsoft keys from...

Thank you very much for your reply. It's interesting, all right. 1. The "To be filled by O.E.M." garbage is actually in the BIOS. When I go into the BIOS, I can see it. I found DMI Edit via Windows or EFI for AMI BIOS, which can be used to dump and edit all of these fields. Here is a dump of...

@garlin I can't thank you enough for developing these scripts and for taking questions from so many people. I have an old PC running Windows 10. The system board is a Gigabyte F2A88XM-D3HP with an AMI BIOS from 2014. It's been unsupported by Gigabyte for several years. Despite its age, it's...

Thank you for the suggestion. I haven't tried it yet, but I will give it a try and report back.

Thank you for the reply. You might be on to something. I checked the properties of Users/Public and Users/Public/Documents. Both are owned by SYSTEM, but the user account has exactly the same effective access as SYSTEM. However, I tried to relocate the documents folder in two different user...

Thank you for the reply. If Microsoft did this intentionally, I wonder why they didn't completely delete the feature, rather than break it. If they genuinely don't want people to have the ability to relocate the Public folders, they should have removed the Location tab, like they did for the...

It's possible to move certain User folders such as Desktop, Documents, Downloads, Music, Pictures and Videos, to another location (e.g., another drive), but it seems to not be possible to move Public folders. It was possible to do this in Windows 10. In Windows 11, the Location tab is still...