UWF (Unified Write Filter) is a special file system write filter in Windows 10 that allows you to protect Windows system and user files on the local drive from any changes. When the UWF filter is enabled, any write operations to a protected disk or to the system registry are intercepted by the UWF filter driver and placed in a separate virtual space (overlay). After restarting Windows, all changes on protected drives are not saved, i.e. Windows always reverts to its original state when the UWF filter was enabled.
- Active DirectoryGroup PoliciesSecurityWindows Server 2012 R2Windows Server 2016
Zerologon (CVE-2020-1472): Critical Active Directory Vulnerability
May 11, 2023In August 2020, Microsoft released an update to fix a critical Windows Server vulnerability in Active Directory — CVE-2020-1472 (more known as Zerologon) . This update was successfully installed on…
- Windows 10Windows Server 2012 R2Windows Server 2016
How to Run CMD/Program under SYSTEM (LocalSystem) in Windows?
June 7, 2023To perform some actions in Windows, it’s not enough to have administrator privileges. For example, you cannot replace or delete system files and some registry keys, stop system services or…
- Group PoliciesWindows 10Windows Server 2016
How to Disable/Change User Account Control with Group Policy?
October 19, 2023(User Account Control) is an important component of the Windows security. When you run any application or process that requires administrator privileges, trying to change system settings, protected registry keys…
- Active DirectoryGroup PoliciesWindows 10Windows Server 2016
Windows: Block Remote Network Access for Local User Accounts
February 27, 2023Using local accounts (including the local administrator) to access another computer over network in Active Directory environments is not recommended on a number of reasons. The same local administrator username…
Zabbix is an enterprise-level open-source monitoring system. Currently, Zabbix is one of the most popular and powerful free monitoring systems. Due to its simple installation and configuration, Zabbix may be…
- Group PoliciesPowerShellWindows 10Windows Server 2016
How to Detect Who Deleted a File on Windows Server with Audit Policy?
May 10, 2023You can use file system object access event auditing to identify a specific user who created, deleted, or modified a specific file. In this article, we’ll show you how to…
vMotion allows to migrate a running VMWare virtual machine from one physical ESXi host to another one without interrupting its operation and stopping any services. In this article we’ll discuss…
In this article we will discuss all effective ways to connect to a Microsoft SQL Server and run SQL queries from PowerShell. There are many ways how you can work…
- Active DirectoryGroup PoliciesPowerShellWindows 10Windows Server 2016
Password Change Notification When an AD User Password is About to Expire
April 18, 2022In this article we’ll show how to find out when a password of an Active Directory user account expires using PowerShell, how to set a password to never expire (PasswordNeverExpires…