This site is now a static archive. No new posts or comments can be made.
Device prompts for Bitlocker recovery key at every restart If the device is a HP Elitebook 840 G9 (my example - but from what im seeing, this is affect other models as well) - and running BIOS version 1.18 The event log “Applications and services -> Microsoft -> Windows -> Bitlocker API -> Management” shows…
Continue readingI've seen a few guides around the about this - but they seem to mainly focused on using Intune - which has the significant downside of not being able to handle systems which aren't supported by Intune, such as servers and air-gapped systems. Now - this is just the way ive been doing it…
Continue readingA while back, one of the main vendors for the organisation im now working for had a bit of an indignant chuckle when i asked for their supposed enterprise-grade software to have a silent install.... "Just use the click-once version - its fine for everyone else" Well - needless to say, i saw red, what…
Continue readingAfter the Crowdstrike BSOD's on 19/07/2024 - we have seen a significant uptick on clients not refreshing group policy. The machines in question can be identified via: The last update file date on C:\Windows\System32\GroupPolicy\Machine\registry.pol being on or around 19/07/2024 (some were on the 20th or 21st for us) Event ID 1096 in the system event…
Continue readingIf your anything like me - the amount of environments that you are now accessing via a variety of nested citrix/RDP/VPN/Hyper-V Console/JumpBox's etc - well.... its now 100% of what you deal with. One of the pains of nested sessions (apart from the clipboard) is pressing Ctrl + Alt + Del for tasks such as…
Continue readingA client recently had an issue where they had lost the administrator password on their offline root CA. The well known method of copying cmd.exe over utilman.exe was not working When trying to reset the administrator password, it appeared to work, but on reboot, the new password was not accepted. To that end i utilise…
Continue readingAll I want for Christmas is a new security update to patch a zero day IE exploit ....... Microsoft have today released a new out of band update for an Internet Explorer vulnerability that is currently being abused in the wild. Just in time for all those Admins planning to have some time off and…
Continue readingAs I’m sure you’re all aware, there was another vulnerability advertised to the general public over the Christmas new year period, and if you’ve been following the details, the patches to fix this specific vulnerability have been recalled. The advice from Intel and other vendors currently is, “ don’t deploy the patch as it can…
Continue readingHi all, For many of you that switched off over the xmas break (like me), you may have missed that there are now patches (released Jan 3rd 2018) for the creatviely (almost bond movie like) named vulnerabilities of "meltdown" and "spectre". You can find more detail on these Vulnerabilities here - https://meltdownattack.com/ Advice for Microsoft…
Continue readingIntel released a security advisory yesterday (22/11/2017) advising of vulnerabilities with their management engine firmware - which can he found here The reason why this is concerning for corporate customers is that basically every PC, Server and laptop that you have, most likely will be exposed, as the vast majority of corporate level hardware contains…
Continue reading