Replies

You ready for this?  Take your file.  Rename it to exe.  Pin the fake .exe to the taskbar.  Now go to the taskbar and rename it back to .xls or .xlsx

Of course you can install a third party menu software.  But faking it out is the “native” way to do it.

 

 

Susan Bradley Patch Lady/Prudent patcher

Note this is a “moments” release and I’ll have more info on how to control it.  It will be enabled by default in 23H2 (but controllable).

Stay tuned.

This will be in the preview release and then it rolls into the Second Tuesday security release.

Susan Bradley Patch Lady/Prudent patcher

5 users thanked author for this post.

A1ex, Cybertooth, Alex5723, Endora, GeeBeeDee

Did it work?

Susan Bradley Patch Lady/Prudent patcher

So what process did you use to ‘clean’ that system – as you just disabled uac.

 

Susan Bradley Patch Lady/Prudent patcher

P.S. Azure AD  (aka now Entra ) is not the same as a consumer Microsoft account.

Susan Bradley Patch Lady/Prudent patcher

https://learn.microsoft.com/en-us/windows/client-management/client-tools/connect-to-remote-aadj-pc

Okay now we’re getting to the bottom of this – Azure AD joined machines have a different log in process.  You have to basically auth to the cloud to get into the machine sitting right next to you.

• Launch Remote Desktop Connection from Windows Search, or by running mstsc.exe.
• Select Use a web account to sign in to the remote computer option in the Advanced tab. This option is equivalent to the enablerdsaadauth RDP property. For more information, see Supported RDP properties with Remote Desktop Services.
• Specify the name of the remote computer and select Connect.

   Note

  IP address cannot be used when Use a web account to sign in to the remote computer option is used. The name must match the hostname of the remote device in Azure AD and be network addressable, resolving to the IP address of the remote device.

• When prompted for credentials, specify your user name in user@domain.com format.
• You’re then prompted to allow the remote desktop connection when connecting to a new PC. Azure AD remembers up to 15 hosts for 30 days before prompting again. If you see this dialogue, select Yes to connect.

Susan Bradley Patch Lady/Prudent patcher

So let’s back up a bit.  Is the computer on a domain? If so the rdp log in is Domain\username and then the password.

You are remoting in from the same local network and not externally, correct?

If on a domain the firewall ports are Remote desktop usermode tcp ip /usermode udp in, make sure you not just do plain remote desktop but the specific usermode  tcp/udp rules in the firewall.

Next look in the event logs on the workstation.

Susan Bradley Patch Lady/Prudent patcher

If it on a domain has the firewall been adjusted to allow rdp?

Susan Bradley Patch Lady/Prudent patcher

The email address and password connected to the Microsoft account.

Susan Bradley Patch Lady/Prudent patcher

Note: If you have an iMac Pro or another Mac with an Apple T2 Security Chip, the data on your drive is already encrypted automatically.  However, turning on FileVault provides further protection by requiring your login password to decrypt your data.

 

Encrypt Mac data with FileVault – Apple Support

Susan Bradley Patch Lady/Prudent patcher

” I backup only keychain, calender, contacts, FindMy to iCloud”

But you then still have an icloud drive.  It’s not “file storage” in the manner  you would describe it, but you are still backing up these items to the cloud.

Susan Bradley Patch Lady/Prudent patcher

So then it’s backed up in the cloud to your icloud account similar to how Microsoft does the process.

Susan Bradley Patch Lady/Prudent patcher

https://nitter.net/uk_daniel_card/status/1704114858461962714?s=43&t=KuONIw82G4a5IlI_mSrZrg

Try that link

Susan Bradley Patch Lady/Prudent patcher

Do you start the set up with a local account?  I’m guessing that this occurs if you start with an Apple ID from the getgo. I’ll have to find more details/do some testing.

IDrive is a third party service, not connected/related to Apple.  https://www.idrive.com/

https://support.apple.com/en-us/HT204230

One doesn’t have to have an icloud email address in order to use icloud.

 

Susan Bradley Patch Lady/Prudent patcher

I just uninstalled and rebooted a sample Win11 22H2 and it’s showing as coming down from MU/WU so it hasn’t been pulled.  I’d download the KB from the catalog and do a test install and if it says “not applicable” somehow that patch as been installed.  You may have to reach out to Tanium?

Susan Bradley Patch Lady/Prudent patcher