Recent content by JagoWu

Oh ok. Thanks Brink. One more question, What I usually see from Windows Update is this message: How can I change that out to say the below instead: Or are messages dependant on the type of update that got installed? CU vs Feature Update that dictates the message? I would really like to use...

Will users see the pop up message out of the blue one day? that could be a reason to disable it.

I have seen this happen if the client PC is recieving WSUS GPOs or is already set in the local gpedit.msc.

I installed Googlechromeenterprise64bit.msi only on a laptop and did not sign into google or sync. Two days later on the Start menu was "Chrome Apps". Each shortcut in the Chrome Apps folder points to chrome_proxy.exe. It auto downloaded the shortcuts it seems.

thank you for the info. So this means if I just upgrade ADK to this latest patched version then update boot images in CM, should be nothing left to do on the "patch boot images" side right?

I hope they make GPOs to lock CoPilot down for Enterprise :)

Garlin, How can we tell if we have Google Sync installed? Also, if we do, is there there a silent uninstall command? Thank You

I am curios on how to handle domain joined machines with this CVE. Once MS enforces the changes, from that moment on, any boot media has to be patched in order for the client machine to load it but is there anything to do with the all the existing, everyday, windows users whether it be at home /...

You are welcome hsehestedt. I am about to update my HP laptop to Win11 Enterprise to 22H2 and full patch. Then i'll be ready to join the Lab domain and then test the unpatched boot.wim (which should work) then install the reg key on the HP laptop and reboot, wait 10 mins, reboot, then test the...

Not sure why there's isn't a simple tool to validate this <-- like a POP UP since MS is known for that. :) Thank The Good Lord for people like you to explain it down for people like me. Also, the simply DISM batch file! I was very weary of using the Powershell scripts others made. This .bat...

Opps Sorry. No idea why I was thinking TPM on that one. I do have an HP laptop that I can use for a client. I need to give it a static ip, join my domain, then patch it as it has Windows 11 22H2 with the same LCU, install the reg key, reboot, wait 10 mins, reboot again. At that point, if i try...

Here goes nothing: C:\Windows\System32>reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Secureboot /v AvailableUpdates /t REG_DWORD /d 0x30 /f The operation completed successfully. My VM has a virtual TPM. Will this not work?

Essentially Yes. I use the latest VL, patch to the latest for the Win11 22H2 Client OS. For the PXE-Boot, I'm just updating the custom boot.wim and the latest ADK11 WinPE. Funny thing is I want to do this in such an order that the VM fails to boot from the unpatched boot image then tell it to...

Hi hsehestedt, I am testing out the batch scripts now. Using the Windows 11 22H2 Sept LCU instead of July. So far it patched the SCCM Custom Boot image fine. I then uploaded it back to SCCM to test later. I will next try to patch the ADK WinPE that is installed (backups of course first). On...

Brink, If we add a /NoRestart to the end of the add or remove capability command, would that supress the reboot question?