Recent content by wingers

With it disabled you do lose some useful functionality e.g. startup repair I believe, and with lots of my workforce still working remotely spread over hundreds of miles things like that have often proved useful when a computer fails to boot and it fixes itself etc, without it would mean several...

The amount of times I walk around a workplace and see users leaving machines left unlocked. And we all know of tools that can be run on an unlocked machine whether you have admin rights or not that will allow you to raise privleges or gain access to the file system etc, so re-enabling the...

Fair enough, but even if you do disable it, what is stopping someone if they gain access somehow (e.g. like I said via a machine which has been left unlocked for example) enabling it again, and copying an unpatched winre.wim - and then you are back to square one - a vulnerable machine. The...

I was answering somebody elses point about the vulnerability, just meaning if unlocked and have access then too easy to replace the patched winre.wim with an unpatched one etc. I fully understand how the exploit works and what we have here thanks, been part of the discussion since the start...

You have only quoted part of what I said - I clearly said "...e.g. if they have physical access AND workstation left unlocked etc".

No probs Yes that is a separate issue, but if they have physical access then they have access to your data anyway potentially so the problem is more than just this vulnerability e.g. if they have physical access and workstation left unlocked etc

If all of your machines are running the same build of Windows then just follow steps on first machine to create an update winre.wim and then deploy that wim file to the remaining machines, you don't need to follow all the steps on all the machines, that saves a lot of time, that is what I did to...

I haven't seen any sites that say that and the official information on MS site still says you have to update the recovery partition manually. Can't see how they can do it automatically to be honest, especially going on how many different issue I hit when trying to do it manually, they was...

In a nutshell the update MS rolls out only updates the files within Windows itself, to update the files on the recovery partition you have to manually follow the procedures as outlined on MS website and on this forum thread.

No they mean one of these - Microsoft Update Catalog So yes the latest one would be the one from 8th November - that is what I applied along with January CU following @hsehestedt steps in earlier post

Updated version of my script (now on GitHub) - really annoying you can't edit original posts after 60 minutes...... :mad: Perhaps mod can delete original post (112) --- Simple script you can use to scan your network to check for computers which need the patch. You can either scan all...

Simple script below you can use to scan your network to check for computers which need the patch. You can either scan all computers in AD - filters for computers used in last x days (set to 365) and excluding servers as I was just looking for client machines for now. Or you can specify list of...

Amended instructions to get the size of an updated winre.wim down to fit on an existing 500mb partitions: 1) Remove unnecessary features / packages from your mounted WinRE.wim - I have gone through all the features in WinRE to see what can safely be removed, most items e.g. Audio, Narrator...

I am using the Jan one as that is the latest and as updates are cumulative it would include all changes from Nov anyway.

Useful links for scripts to check if machine has updated WinRE.wim on recovery partition and also to deploy a patched WIM - thought might be useful as script also does check to ensure partition big enough to hold the WIM https://gist.github.com/jones948/2473df8eced9cc5728d349a58edd1e1e...