Windows 11

The digital signature of a PowerShell script (*.PS1 file) allows you to verify that a known trusted publisher signs the script and that its code has not been modified. The…

Shadow connection mode in Windows allows administrators to connect to any user’s RDP/RDS session to view and interact with their desktop (with or without user consent). The Remote Desktop Shadowing…

Windows administrative shared folders are used for remote access and computer management. By default, the following administrative shares are created by Windows:

When displaying icons, shortcuts, and various file types in File Explorer, Windows attempts to retrieve their thumbnails from icon cache files. Thanks to this, Windows Explorer draws objects faster because…

Thumbs.db (thumbnail cache) is a hidden system file that is automatically created by the Windows File Explorer in folders containing image and video files when the thumbnail preview mode is…

When users connect to a corporate VPN server (AlwaysOnVPN, Windows Server RRAS, or OpenVPN server) from a home network, they may report that Internet access is unavailable while the VPN…

The HelpDesk support team requested a PowerShell script to quickly capture a screenshot of a user’s desktop from a remote computer. The main requirement is that the HelpDesk employee may…

Sometimes, local administrator permissions may not be sufficient to manage certain system files, registry keys, processes, and services in Windows. In such cases, an administrator can take ownership of files/other…

You can use file system object access event auditing to identify which user created, deleted, or modified a specific file. In this article, we’ll show you how to configure event…