Windows OS Hub for SysAdmins
863 subscribers
207 photos
401 links
Windows System Admin's Blog

🌐https://woshub.com
▶️ https://www.youtube.com/@woshub

⚙️ Detailed guides cover Windows Server, Active Directory, GPO, PowerShell, Exchange, Microsoft 365, VMware, Linux and more.
Download Telegram
📚 This step-by-step YouTube guide explains how to manually upgrade from Windows 10 to Windows 11 25H2 using an in-place upgrade on hardware that doesn't meet Windows 11's system requirements.

How to in-place upgrade from Windows 10 to Windows 11 25H2 on unsupported hardware

https://www.youtube.com/watch?v=g5hZHrS29bQ
👍5🔥53
📚 How to Completely Remove ANY Microsoft Office Version with Office Scrubber Tool

Microsoft provides access to PFE support scripts that can be used to automatically remove any previously installed Microsoft Office version and completely clean the system of leftover components.

➡️ The OffScrub (Office Scrubber) scripts' key feature is their ability to detect and remove all traces of prior Office installations, regardless of their current state or functionality. They clean up both registry entries and file system remnants, ensuring thorough removal.
Today, OffScrub is available as a part of the Microsoft Support and Recovery Assistant (SaRA) toolkit.
You can remove a specific Office version, for example Office 2019:
.\SaRAcmd.exe -S OfficeScrubScenario -AcceptEula -OfficeVersion 2019

Or remove all detected Office versions:
.\SaRAcmd.exe -S OfficeScrubScenario -AcceptEula -OfficeVersion All


These scripts are especially useful for uninstalling Office when standard methods fail or when leftover components prevent a clean installation of a newer version.

How to Uninstall Any Previous Microsoft Office Version with Removal Scripts
5👍5
⚙️ Customizing Default Drive Icons in Windows

You can change the default icons for local and network drives displayed in Windows File Explorer.

Custom drive icons can be assigned manually through the registry (including specifying a separate .ico file for each drive letter) or deployed centrally using Group Policy.

Although it may seem minor, custom icons improve user experience by enabling quick visual identification of numerous mapped drives and local disks in Windows, reducing navigation errors and time spent reading labels


How to assign custom icons to local and network drives in Windows
👌85👏3
The UAC prompt is not triggered only when an application is launched in the "Run as administrator" mode; it also appears if the executable contains an embedded manifest requiring the requireAdministrator privilege level.

In this case, application will always request elevation and Windows block its execution without confirmation. This might cause issues with legacy and third party applications written by less than careful developers who include a requireAdministrator manifest just because... why not 🤷‍♂️. As a result, such applications cannot be used under a non-admin user without triggering UAC.

⚙️ To suppress the UAC elevation prompt for a specific application, you can use the RunAsInvoker compatibility flag. There are several ways to apply it:

➡️ Create a compatibility fix using the Application Compatibility Toolkit (part of the Windows ADK) - an enterprise Microsoft solution for application compatibility management.
➡️ Add the executable path to the following registry key with the value RUNASINVOKER:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers

➡️ Create a simple .bat file to launch the application with the environment variable:
__COMPAT_LAYER=RunAsInvoker


In all cases, the program will always run in the current user context without requesting elevated privileges, effectively bypassing the UAC prompt while keeping the system-wide UAC enabled.

Disabling UAC for a Specific Program in Windows
🔥43👍2
🌐 Networking in WinPE: Driver Loading and Network Initialization

The Windows Preinstallation Environment (WinPE) is typically used for deploying Windows or performing maintenance and recovery operations against a local system. In most cases, an active network connection in WinPE is not required.

However, there are certain scenarios in which network access in Win PE or WinRE can be extremely useful. For example:

🔹Network OS deployment
🔹Restoring a system image from a network location
🔹Updating antivirus signatures for offline scanning
🔹Accessing centralized script repositories or administrative tools

🛠 This article explains how to manually load a network adapter driver and initialize networking in WinPE (WinRE), configure a static IP address, map a network drive, and manage the Windows Firewall within the WinPE environment.

Loading a Network Driver and Initializing Networking in WinPE
6👍3👌2
🔑 Updating Trusted Root Certificates in Windows

Windows devices that are connected to the internet automatically update the trusted root certificates published through the Microsoft Trusted Root Certificate Program via Windows Update.

🛠 If a computer operates in an isolated (offline) network and does not receive regular root certificate updates, users may encounter errors when launching applications or accessing HTTPS services. In such environments, administrators can manually update trusted root certificates by exporting them from an Internet-connected computer and importing them into the offline machine.

Export trusted root certificates on Windows 11:
On a Windows device with Internet access, run:
certutil.exe -generateSSTFromWU C:\CA\roots.sst

This command downloads the current set of trusted root CAs available via Windows Update and saves them to an .sst file.

Import the certificates on the offline computer
Copy the roots.sst file to the offline system and import the certificates into the Local Machine root store:
$sstStore = Get-ChildItem -Path C:\CA\roots.sst
$sstStore | Import-Certificate -CertStoreLocation Cert:\LocalMachine\Root


Legacy systems (Windows 7 / Windows XP)
For unsupported systems such as Windows 7 or Windows XP, use the updroots.exe utility:
updroots.exe  C:\CA\roots.sst


Domain environments
🔹 In Active Directory environments, administrators can use Group Policy to specify a network location from which clients can automatically retrieve updated root certificates when they encounter an unknown certificate chain.
🔹 Or, root certificates can be published directly to Active Directory. However, this method is typically only suitable for distributing a limited number of internal or custom root CAs.

This article covers both manual and automated methods for updating trusted root certificates across different Windows versions, including legacy systems.

How to Update the Trusted Root CA Store in Windows
🔥43👍3
📶 How to Setup a Mobile Hotspot on Windows

Windows has supported operating as a software-based Wi-Fi access point since Windows 7. This feature can be used to share an internet connection from a Windows device with other devices or quickly set up a small ad hoc wireless network.

🔹 Hosted Network (Legacy SoftAP)
In earlier versions of Windows, the software access point (SoftAP) mode was implemented using Virtual Wi-Fi and the Internet Connection Sharing (ICS) service.
The key limitation is that HostedNetwork mode must be supported by the wireless adapter driver. Configuration and management are performed exclusively via the command line using netsh wlan commands.

🔹 Mobile Hotspot (Windows 10 / Windows 11)
A new feature called Mobile Hotspot was introduced by Microsoft, starting with Windows 10 build 1607 and continuing in Windows 11.
It can be enabled through the GUI: Settings -> Network & Internet -> Mobile hotspot
The Mobile Hotspot feature leverages the WDI (Wi-Fi Direct Interface) and a virtual Wi-Fi Direct adapter to enable software access point functionality without requiring explicit hosted network support from the network adapter driver.

In practice, the Mobile Hotspot feature is compatible with virtually any Wi-Fi adapter. It is the recommended way to enable hotspot functionality in modern versions of Windows.


This article explains the differences between the two modes and details how to configure and run a Wi-Fi access point in Windows.

How to create a Wi-Fi hotspot and share Internet access in Windows
👍3👌21🔥1
🖨 Exporting Printer Drivers in Windows

Windows provides several tools to extract installed printer drivers from a running system. This can be useful when you need to back up print drivers, copy them to other computers, or extract drivers that are no longer available on the vendor’s website.

🔹 Print Management console (printmanagement.msc) allows you to export all printers installed on a computer along with their drivers and print queues. This method is useful when you need to fully migrate or duplicate the print subsystem configuration from one machine to another.

🔹 The pnputil /export-driver command can export a specific OEM driver from the Windows Driver Store (though it does not work with all drives).

🔹 You can also identify the printer driver INF file and manually copy its directory from:
C:\Windows\System32\DriverStore\FileRepository

Example to find the INF file used by a printer
Get-PrinterDriver -Name "Brother MFC-L2750DW" |
Select-Object Name, InfPath | Format-List


Exporting and migrating printer drivers in Windows is a practical way to preserve working drivers and simplify printer deployment across machines.

➡️ How to Extract Installed Printer Drivers on Windows
4👌4👍2👏1
📌 Programmatically Pinning Apps to the Windows Taskbar

With each new release, Microsoft has progressively restricted programmatic methods for pinning applications to the taskbar.

For example, in versions prior to Windows 10 21H2, you could pin an application simply by copying a shortcut into the user profile folder:
%AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar

Another method was to use the built-in Shell Namespace:
shell:::{4234d49b-0245-4df3-b780-3893943456e1}

These approaches were commonly used for automating the pinning of software to the taskbar via PowerShell, SCCM or Group Policy.
⚠️ However, these methods no longer work in current Windows 11 builds. Microsoft intentionally removed programmatic access to taskbar pinning, requiring either manual pinning by users or deploying a predefined taskbar layout via Group Policy.

As of Windows 11 25H2, the only practical way to programmatically pin a custom shortcut to a user’s taskbar (without locking the layout from user changes) is by using a temporary LayoutModification.xml file. The article at the above link covers implementation details.

🧰 How to pin or unpin a taskbar shortcut in Windows 11 using PowerShell
👍54👌3🔥1
📶 Using Wi-Fi Network Adapters on Windows Server

If you try to enable a plugged-in Wi-Fi adapter on a Windows Server host, you may run into an unexpected limitation. Out of the box, Windows Server does not support wireless networking, preventing you from initializing and enabling Wi-Fi adapters.
Microsoft assumes that Wi-Fi is generally unnecessary on a server platform, and in most cases this is true. However, if you require wireless connectivity, you can install the necessary components manually.

Install the Wireless LAN Service:
Install-WindowsFeature -Name Wireless-Networking


After rebooting the server, enable and run the WLAN AutoConfig service (WlanSvc):
Set-Service WlanSvc -StartupType Automatic -PassThru
Start-Service WlanSvc -PassThru


Once these steps have been completed, Windows Server will be able to recognise the plugged-in Wi-Fi adapter and connect to a wireless network.

How to Enable Wireless Network (Wi-Fi) on Windows Server
👍4🔥32👌1
🧾 Monitoring Log Files in Real Time with PowerShell

The classic Linux tail command allows you to watch file changes in real time. In Windows, the equivalent is the PowerShell command:
Get-Content -Path "C:\LogFiles\log1.txt" -Wait -Tail 20

-Tail 20 - displays only the last 20 lines instead of the entire file
-Wait - continuously monitors log file changes and outputs new lines as they appear

You can also improve readability by the highlighting log output directly in the console. For example, I will highlight errors and successful operations in red or green:
Get-Content C:\Windows\System32\LogFiles\setupcln\setupact.log -Wait -Tail 30 | ForEach-Object {
switch -Regex ($_ ) {
"ERROR" { Write-Host $_ -ForegroundColor White -BackgroundColor Red }
"Success" { Write-Host $_ -ForegroundColor Green }
default { Write-Host $_ }
}
}


➡️ Live monitor log files with PowerShell
🔥6👍32👌1
🧾 Why Windows 11 Keeps Changing Your Default Printer

In Windows 11 a special logic is used when assigning a default printer for a user. It automatically sets the last used printer as the default printer for the user. Many users forget about this default behavior.

😞 This can be frustrating when multiple printers are connected to a machine. For example, users working with a label printer, a color printer, and a standard office printer may need to double-check the selected device each time they print.

To prevent Windows from automatically changing the default printer:

🔹 Go to Settings -> Bluetooth and Printers -> Printers and Scanners and disable "Let Windows manage my default printer" option
🔹 or configure the "LegacyDefaultPrinterMode" registry item.
REG ADD "HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows"
/v LegacyDefaultPrinterMode /t REG_DWORD /d 1 /f

🔹Or enable the option Turn off Windows default printer management via Group Policy: User Configuration → Administrative Templates → Control Panel → Printers

➡️ How to Set (Change) the Default Printer in Windows 11 and 10
👍31🔥1
📁 Using the Built-in NFS Client in Windows

Both server and desktop versions of Windows (starting from Windows 10) include a built-in NFS client. It provides seamless access to Linux or NAS storage with NFS shares in heterogeneous environments without requiring third-party tools.

➡️ Install the NFS client as an optional feature:
Enable-WindowsOptionalFeature -FeatureName ServicesForNFS-ClientOnly, ClientForNFS-Infrastructure -Online -NoRestart


⚙️ After installation, you can mount an NFS volume as a network folder directly from the File Explorer GUI.
For advanced mount options, use the mount.exe tool or the PowerShell cmdlet New-PSDrive:
mount.exe -o anon \\srvfs\mnt\vd1\iso N:


For anonymous NFS connections, Windows uses UID and GID values of -2 by default, but these defaults can be overridden via the Windows registry.

It is also possible to configure identity mapping between Windows users and Linux UID (User ID) and GID (Group ID) values

This article covers how to install the NFS client in Windows, mount NFS shares via GUI, CMD, and PowerShell, and configure access control and user mapping between Windows and Unix systems.

Mounting NFS Shares in Windows Using the Built-in Client
2👌1💯1