Category Archives: IT Notes

Notes I’ve come across or worked out myself to help me solve IT issues. Credit where credit is due. Not everything here (in fact most of it won’t be) stuff I’ve worked out. So credit is where credit is due. This section is for my own notes, to help me out when out in the field, so you may not see a credit where I got the info from because I’ve just slapped it on the site for personal reference.

Server 2022 Activate Directory – Exchange bits

Posted on by

For SMTP bits in AD you need the exchange tools. These are for my notes so make sense to me.

Your account needs to be in the enterprise admins and schema admins group.
You need to install the exchange bits so run this command but you also need to mount an exchange ISO. I used Exchange 2019

d:\Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataON /PrepareAD /OrganizationName:”Contoso Corporation”

We’re not installing or setting up exchange, just need it to put in all the extra exchange stuff in AD for the mailNickname bits

If you don’t need any of the exchange fields you can ignore all this.

Server 2022 – Disable reboot warning

Posted on by

https://www.softwareok.com/?seite=faq-Windows-Server&faq=19

1.) Method: Group Policy

  1. Open Group Policy Editor :
  • Press Win + R, type gpedit.msc and hit Enter .
  1. Navigate to:
    Computer Configuration → Administrative Templates → System .
  2. Find the policy “Disable shutdown event logging” .
  3. Double click on it and set the policy to “Enabled” .
  4. Click OK and close Group Policy Editor.

Windows 10 official ISO vulnerable

Posted on by

Annoying that the arses at MS haven’t bothered to patch the Windows 10 ISOs to the Blacklotus Malware so the recent official ISOs are flagged when using Rufus to create an image. These are ISOs even from the official Microsoft Volume License ISOs. They are clearly attempted to force people move to Windows 11 because those ISOs don’t have the issues.

Disable Windows Defender permanently

Posted on by

Run gpedit from the start menu.

Go to Computer Configuration/Administrative Templates/Windows Components/Microsoft Defender Antivirus/

Set “Turn off Microsoft Defender Antivirus” to ENABLED. If you do this WON’T work, even with tamper protection off. Its supposed to enter a reg settings but doesn’t and when you open gpedit again you’ll see its not set again.

Instead I go to

Computer Configuration/Administrative Templates/Windows Components/Microsoft Defender Antivirus/Real-time Protection

And set “turn off real-time protection” to ENABLED. That seems to survive the settings change and turns of real time protection so you can do what you need when its incorrectly blocking files.