GetSecureScore

How to Block Adobe Flash Player Using Active Directory Group Policy

It has been a long time coming. And we have known since 2017 that Adobe was planning to discontinue support for its once-popular Flash Player browser extension. Flash provided a way to add animation and interactive elements to web pages. But with the arrival of open standards, like HTML5 and WebGL, developers moved away from Read More

GetSecureScore

How to Deploy Attack Surface Reduction (ASR) Rules 

ASR rule to GUID matrix Rule Name Rule GUID Block abuse of exploited vulnerable signed drivers 56a863a9-875e-4185-98a7-b882c64b5ce5 Block Adobe Reader from creating child processes 7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c Block all Office applications from creating child processes d4f940ab-401b-4efc-aadc-ad5f3c50688a Block credential stealing from the Windows local security authority subsystem (lsass.exe) 9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2 Block executable content from email client and webmail be9ba2d9-53ea-4cdc-84e5-9b1eeee46550 Read More

GetSecureScore

How to Deploy Password Policies Using Intune Configuration Profiles | Device Restriction

By Anoop C Nair Let’s learn how to deploy password policies using Intune on Windows 10 devices. We use Intune device restriction profile to deploy password policies for Intune managed Windows 10 devices. Steps to Configure Device Restrictions Password Policies Login to EndPoint.Microsoft.com Navigate to Devices – Configuration Profiles – + Create Profile Select Platform as Windows 10 and Read More

GetSecureScore

Avoid Windows Task Scheduler When Running Microsoft 365 PowerShell Scripts

ByTony Redmond Better Methods Exist to Run Microsoft 365 PowerShell Scripts I am bemused when I read articles advising Microsoft 365 tenant administrators to run PowerShell scripts using the Windows Task Scheduler. I understand the reason why people use the Task Scheduler. It’s easy, built into Windows, allows scripts to run unattended (always an advantage when Read More

GetSecureScore

How to Deploy Internet Shortcut with Custom Icon on Intune

By Niels Kok   When we as IT People deploy Windows 10 AutoPilot we often get the feedback from users that they miss their shortcuts for SharePoint and such. For that reason I have created a manual which you can use to deploy this using a Win32App. Preparation Create a folder where you store the Read More

GetSecureScore

How to Use HP Connect and Intune to Update BIOS

Keeping our devices up-to-date is important. We know all about Windows and applications, but often times miss out on keeping the other layers such as firmware and BIOS up-to-date as those are typically just updated during OSD or during troubleshooting. There are a few community-made solutions out there which are working really well and in Read More