EDGE MDM FakeEnrollment Windows 10

Antwort erstellen


Diese Frage dient dazu, das automatisierte Versenden von Formularen durch Spam-Bots zu verhindern.
Smileys
:) ;) :smile: :lol: :hihi: :D :rofl: :muahah: :( :pff: :kopfstreichel: :ohno: :betruebt: :heulen: :kopfkratz: :duckundweg: :o :? :oops: :psst: :sauer: :-P :daumenrunter: :daumen: :dankeschoen: :thx: :dafür: :gähn:
Mehr Smileys anzeigen
BBCode ist eingeschaltet
[img] ist eingeschaltet
[flash] ist ausgeschaltet
[url] ist eingeschaltet
Smileys sind eingeschaltet
Die letzten Beiträge des Themas

Ich habe die Datenschutzerklärung gelesen und bin damit einverstanden.

   

Ansicht erweitern Die letzten Beiträge des Themas: EDGE MDM FakeEnrollment Windows 10

Re: EDGE MDM FakeEnrollment Windows 10

von Holgi » 23.06.2024, 13:28

steht doch alles oben!
Wenn du auf das dunkle Design verzichten magst, dann sieht die REG halt so aus:

Code: Alles auswählen

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"AADWebSiteSSOUsingThisProfileEnabled"=dword:00000000
"AccessibilityImageLabelsEnabled"=dword:00000000
"AddressBarMicrosoftSearchInBingProviderEnabled"=dword:00000000
"AdsSettingForIntrusiveAdsSites"=dword:00000002
"AllowSurfGame"=dword:00000000
"AllowGamesMenu"=dword:00000000
"AlternateErrorPagesEnabled"=dword:00000000
"AudioCaptureAllowed"=dword:00000000
"AutofillAddressEnabled"=dword:00000000
"AutofillCreditCardEnabled"=dword:00000000
"AutoImportAtFirstRun"=dword:00000000
"AutoLaunchProtocolsComponentEnabled"=dword:00000000
"AlwaysOpenPdfExternally"=dword:00000001
"ApplicationGuardPassiveModeEnabled"=dword:00000001
"ApplicationGuardUploadBlockingEnabled"=dword:00000001
"BackgroundModeEnabled"=dword:00000000
"BingAdsSuppression"=dword:00000001
"BlockExternalExtensions"=dword:00000001
"BlockThirdPartyCookies"=dword:00000001
"BrowserCodeIntegritySetting"=dword:00000002
"BrowserNetworkTimeQueriesEnabled"=dword:00000000
"BrowserSignin" = dword:00000000
"ConfigureDoNotTrack"=dword:00000001
"ControlDefaultStateOfAllowExtensionFromOtherStoresSettingEnabled"=dword:00000001
"CryptoWalletEnabled"=dword:00000000
"DefaultBrowserSettingEnabled"=dword:00000000
"DefaultBrowserSettingsCampaignEnabled"=dword:00000000
"DefaultGeolocationSetting"=dword:00000002
"DefaultNotificationsSetting"=dword:00000002
"DefaultSearchProviderEnabled"=dword:00000001
"DefaultSearchProviderSearchURL"="{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}"
"DefaultSearchProviderName"="Google-Policy-Locked"
"DiagnosticData"=dword:00000000
"DnsOverHttpsMode"="secure"
"DnsOverHttpsTemplates"="https://chrome.cloudflare-dns.com/dns-query"
"DownloadDirectory"="%homepath%\\Downloads"
"DownloadRestrictions"=dword:00000000
"EdgeCollectionsEnabled"=dword:00000000
"EdgeFollowEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"EdgeWalletCheckoutEnabled"=dword:00000000
"EdgeWorkspacesEnabled"=dword:00000000
"ExemptFileTypeDownloadWarnings"="[{\"domains\":[\"*\"],\"file_extension\":\"exe\"},{\"domains\":[\"*\"],\"file_extension\":\"com\"},{\"domains\":[\"*\"],\"file_extension\":\"cab\"},{\"domains\":[\"*\"],\"file_extension\":\"msi\"},{\"domains\":[\"*\"],\"file_extension\":\"zip\"},{\"domains\":[\"*\"],\"file_extension\":\"rar\"},{\"domains\":[\"*\"],\"file_extension\":\"7z\"},{\"domains\":[\"*\"],\"file_extension\":\"msu\"},{\"domains\":[\"*\"],\"file_extension\":\"msix\"},{\"domains\":[\"*\"],\"file_extension\":\"msixbundle\"},{\"domains\":[\"*\"],\"file_extension\":\"eappx\"},{\"domains\":[\"*\"],\"file_extension\":\"eappxbundle\"},{\"domains\":[\"*\"],\"file_extension\":\"blockmap\"},{\"domains\":[\"*\"],\"file_extension\":\"appx\"},{\"domains\":[\"*\"],\"file_extension\":\"appxbundle\"}]"
"ExtensionSettings"="{\"odfafepnkmbhccpbejgmiehpchacaeak,ddlimelbabkhbgghepggfibfmmecbjfg,oholpbloipjbbhlhohaebmieiiieioal\":{\"toolbar_state\":\"force_shown\"}}"
"EfficiencyModeEnabled"=dword:00000000
"EnableMediaRouter"=dword:00000000
"ForceGoogleSafeSearch"=dword:00000000
"FamilySafetySettingsEnabled"=dword:00000000
"FavoritesBarEnabled"=dword:00000000
"HideFirstRunExperience"=dword:00000001
"HideRestoreDialogEnabled"=dword:00000001
"HomepageLocation"="https://www.google.de/"
"HomepageIsNewTabPage"=dword:00000001
"HubsSidebarEnabled"=dword:00000000
"ImageEditorServiceEnabled"=dword:00000000
"ImplicitSignInEnabled"=dword:00000000
"ImportOnEachLaunch"=dword:00000000
"InAppSupportEnabled"=dword:00000000
"KioskSwipeGesturesEnabled"=dword:00000001
"KioskDeleteDownloadsOnExit"=dword:00000001
"KioskAddressBarEditingEnabled"=dword:00000000
"LocalProvidersEnabled"=dword:00000000
"MAMEnabled"=dword:00000000
"MathSolverEnabled"=dword:00000000
"MediaRouterCastAllowAllIPs"=dword:00000001
"MicrosoftOfficeMenuEnabled"=dword:00000000
"MicrosoftEdgeInsiderPromotionEnabled"=dword:00000000
"MicrosoftEditorProofingEnabled"=dword:00000000
"NetworkPredictionOptions"=dword:00000002
"NewPDFReaderEnabled"=dword:00000000
"NewTabPageAllowedBackgroundTypes"=dword:00000003
"NewTabPageAppLauncherEnabled"=dword:00000000
"NewTabPageContentEnabled"=dword:00000000
"NewTabPageHideDefaultTopSites"=dword:00000001
"NewTabPageLocation"="https://www.google.de/"
"NewTabPagePrerenderEnabled"=dword:00000000
"NewTabPageQuickLinksEnabled"=dword:00000000
"NewTabPageSearchBox"="redirect"
"PasswordGeneratorEnabled"=dword:00000000
"PasswordManagerEnabled"=dword:00000000
"PasswordMonitorAllowed"=dword:00000000
"PaymentMethodQueryEnabled"=dword:00000000
"PersonalizationReportingEnabled"=dword:00000000
"PerformanceDetectorEnabled"=dword:00000000
"PinBrowserEssentialsToolbarButton"=dword:00000000
"PreventSmartScreenPromptOverride"=dword:00000000
"PreventSmartScreenPromptOverrideForFiles"=dword:00000000
"PromotionalTabsEnabled"=dword:00000000
"PromptForDownloadLocation"=dword:00000000
"QuickViewOfficeFilesEnabled"=dword:00000000
"QuickSearchShowMiniMenu"=dword:00000000
"QRCodeGeneratorEnabled"=dword:00000000
"ResolveNavigationErrorsUseWebService"=dword:00000000
"RestoreOnStartup"=dword:00000004
"SavingBrowserHistoryDisabled"=dword:00000001
"SearchInSidebarEnabled"=dword:00000000
"SearchbarIsEnabledOnStartup"=dword:00000000
"SharedLinksEnabled"=dword:00000000
"ShowAcrobatSubscriptionButton"=dword:00000000
"ShowHomeButton"=dword:00000001
"ShowMicrosoftRewards"=dword:00000000
"ShowPDFDefaultRecommendationsEnabled"=dword:00000000
"ShowRecommendationsEnabled"=dword:00000000
"SiteSafetyServicesEnabled"=dword:00000000
"SmartScreenEnabled"=dword:00000000
"SleepingTabsEnabled"=dword:00000001
"SmartScreenForTrustedDownloadsEnabled"=dword:00000000
"SmartScreenPuaEnabled"=dword:00000000
"SpeechRecognitionEnabled"=dword:00000000
"SplitScreenEnabled"=dword:00000000
"SpotlightExperiencesAndRecommendationsEnabled"=dword:00000000
"StandaloneHubsSidebarEnabled"=dword:00000000
"StartupBoostEnabled"=dword:00000000
"SuppressUnsupportedOSWarning"=dword:00000001
"SyncDisabled"=dword:00000001
"TabServicesEnabled"=dword:00000000
"TrackingPrevention"=dword:00000003
"TranslateEnabled"=dword:00000000
"TyposquattingCheckerEnabled"=dword:00000000
"UserFeedbackAllowed"=dword:00000000
"VerticalTabsAllowed"=dword:00000000
"VisualSearchEnabled"=dword:00000000
"WebWidgetAllowed"=dword:00000000
"WebWidgetIsEnabledOnStartup"=dword:00000000
"WindowsHelloForHTTPAuthEnabled"=dword:00000000
"WindowOcclusionEnabled"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs]
"1"="https://www.google.de/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\EdgeUpdate]
"CreateDesktopShortcutDefault"=dword:00000000
"RemoveDesktopShortcutDefault"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\CookiesAllowedForUrls]
"1"="[*.]google.com"
"2"="[*.]google.de"
"3"="[*.]msn.com"
"4"="[*.]msn.de"
"5"="[*.]deskmodder.de"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\SaveCookiesOnExit]
"1"="[*.]google.com"
"2"="[*.]google.de"
"3"="[*.]msn.com"
"4"="[*.]msn.de"
"5"="[*.]deskmodder.de"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist]
"1"="ofefcgjbeghpigppfmkologfjadafddi"
"2"="ghbmnnjooekpmoecnnnilnnbdlolhkhi"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist]
; UBlock Origin
"1"="odfafepnkmbhccpbejgmiehpchacaeak;https://edge.microsoft.com/extensionwebstorebase/v1/crx"
; I don't care about cookies
"2"="oholpbloipjbbhlhohaebmieiiieioal;https://edge.microsoft.com/extensionwebstorebase/v1/crx"
; No-Script Suite Lite
"3"="ddlimelbabkhbgghepggfibfmmecbjfg;https://edge.microsoft.com/extensionwebstorebase/v1/crx"
; Amazing Dark Mode
;"4"="ncefecfklnliokjogbaaejkllpphefdp;https://edge.microsoft.com/extensionwebstorebase/v1/crx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\InsecureContentAllowedForUrls]
"1"="\"[*.]microsoft.com\""
"2"="\"[*.]windowsupdate.com\""
"3"="https://www.catalog.update.microsoft.com/"
"5"="https://store.rg-adguard.net/"

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}]


; # Fake MDM-Enrollment - Key 1 of 2 - let a Win10 Machine "feel" MDM-Managed


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF] 
"EnrollmentState"=dword:00000001 
"EnrollmentType"=dword:00000000 
"IsFederated"=dword:00000000

; # Fake MDM-Enrollment - Key 2 of 2 - let a Win10 Machine "feel" MDM-Managed

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\OMADM\Accounts\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF]
"Flags"=dword:00d6fb7f
"AcctUId"="0x000000000000000000000000000000000000000000000000000000000000000000000000"
"RoamingCount"=dword:00000000
"SslClientCertReference"="MY;User;0000000000000000000000000000000000000000"
"ProtoVer"="1.2"

; wenn ie laufen soll:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"SuppressUnsupportedOSWarning"=dword:00000001


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\Recommended]
"NewPDFReaderEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"SearchSuggestEnabled"=dword:00000000
"TranslateEnabled"=dword:00000000
"LocalProvidersEnabled"=dword:00000000
"BlockThirdPartyCookies"=dword:00000001
"BackgroundModeEnabled"=dword:00000000
"AlternateErrorPagesEnabled"=dword:00000000
"SmartScreenPuaEnabled"=dword:00000000
"NewTabPagePrerenderEnabled"=dword:00000000
"HubsSidebarEnabled"=dword:00000000
"SmartScreenEnabled"=dword:00000000
"NetworkPredictionOptions"=dword:00000002
"StartupBoostEnabled"=dword:00000000
"WindowsHelloForHTTPAuthEnabled"=dword:00000000
"ShowMicrosoftRewards"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Addons]
"FlashPlayerEnabled"=dword:00000000


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
"{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}"="0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\BooksLibrary]
"UseSharedFolderForBooks"=dword:00000000
"EnableExtendedBooksTelemetry"=dword:00000000
"AllowConfigurationUpdateForBooksLibrary"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main]
"Use FormSuggest"="no"
"AlwaysEnableBooksLibrary"=dword:00000000
"SyncFavoritesBetweenIEAndMicrosoftEdge"=dword:00000000
"SendIntranetTraffictoInternetExplorer"=dword:00000000
"Cookies"=dword:00000001
"FormSuggest Passwords"="no"
"AllowPrelaunch"=dword:00000000


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter]
"EnabledV9"=dword:00000000


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\SearchScopes]
"ShowSearchSuggestionsGlobal"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\ServiceUI]
"ShowOneBox"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader]
"AllowTabPreloading"=dword:00000000


[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\PhishingFilter]
"EnabledV9"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EdgeUI]
"DisableHelpSticker"=dword:00000001

; Wenn kein EDGE:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EdgeUpdate]
"DoNotUpdateToEdgeWithChromium"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"DisableEdgeDesktopShortcutCreation"=dword:00000001

; zusätzlich (nicht Edge spezifisch)
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer]
"DisableSearchBoxSuggestions"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search]
"BingSearchEnabled"=dword:00000000

Re: EDGE MDM FakeEnrollment Windows 10

von SirValek » 23.06.2024, 08:02

Scoty hat geschrieben: 18.06.2024, 05:40 @Holgi tolle reg. Gkleich mal getestet und tut was sie soll. Habe alles was mit Themes was obern alles ist rausgenommen und nur alles was mit Edge zu tun hat gelassen.
Kannst du Reg mal einstellen ?

Re: EDGE MDM FakeEnrollment Windows 10

von Scoty » 18.06.2024, 05:40

@Holgi tolle reg. Gkleich mal getestet und tut was sie soll. Habe alles was mit Themes was obern alles ist rausgenommen und nur alles was mit Edge zu tun hat gelassen.

Re: EDGE MDM FakeEnrollment Windows 10

von gerd87 » 21.04.2023, 11:47

Danke holgi!

btw:
Es geht auch noch immer, Edge und Defender in der Win10 22h2 völlig zu deinstallieren.

Test vom 20.04.23

Edge deinstallieren: [cmd als Administrator]

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --uninstall --system-level --verbose-logging --force-uninstall

und [Powershell als Administrator]
]
install_wim_tweak.exe /o /r /c Microsoft-Windows-Internet-Browser

---------------------------------------

Windows Defender deinstallieren und völlig abschalten nur unter abgesicherten Start möglich.

Mit der Defoff.reg und (Regedit) und gpedit - siehe Bilder

Windows Defender Alternative (zum nicht ständigen mitlaufen AV)
https://docs.microsoft.com/de-de/window ... r-download

Code: Alles auswählen

https://abload.de/img/unbenanntvmca5.jpg

https://abload.de/img/unbenannt1p0fad.jpg

https://abload.de/img/unbenannt2w1iyn.jpg
:)

Re: EDGE MDM FakeEnrollment Windows 10

von Holgi » 13.04.2023, 09:06

@Guest:
auch jemand, der von dem ganzen MS Edge Chromium Gedöns genervt ist?
MDM-FakeEnrollment nutze ich auch.
Deine Regs funktionieren bei mir soweit. Gerade mal in einer neu aufgesetzen Windows 11 VM getestet.
Der für mich wichtigste Eintrag fehlt noch: "HideFirstRunExperience"=dword:00000001
Meine Edge REG sieht mittlerweile wie folgt aus (so richtig los geht es bei [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]):

Code: Alles auswählen

Windows Registry Editor Version 5.00

;DarkTheme
; Pitch Black Theme preset by AveYo, AccentPalette idea by /u/Egg-Tricky
; for Ctrl+Alt+Del, Logon, Taskbar, Start Menu, Action Center (10 & 11)
; revised 2022-06-16: show active taskbar button in accent color

[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Accent]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Accent]
"AccentColorMenu"=dword:aa000000      ; Window borders and titlebar
"StartColorMenu"=dword:aa202020       ; Modals in UWP ex. Apply new refresh rate in 10
"AccentPalette"=hex:\
    00,9d,ff,aa,\                     ; Links in action center and apps
    00,9d,ff,aa,\                     ; Taskbar icons underline
    00,9d,ff,aa,\                     ; Start button hover
    00,9d,ff,aa,\                     ; Settings icons and links [Blue]
    00,00,00,aa,\                     ; Startmenu background / Active taskbar button - IF "EnableTransparency"=dword:00000000
    00,00,00,aa,\                     ; Taskbar front and Folders on start list background [None]
    00,00,00,aa,\                     ; Taskbar background - IF "EnableTransparency"=dword:00000001
    00,00,00,aa                       ; Unused

[-HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Accent]
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Accent]
"AccentColorMenu"=dword:aa000000      ; Window borders and titlebar, where [aabbggrr] aa = alpha, ignored
"StartColorMenu"=dword:aa202020       ; Modals in UWP ex. Apply new refresh rate in 10
"AccentPalette"=hex:\
    00,9d,ff,aa,\                     ; Links in action center and apps, where [rr,gg,bb,aa] aa = alpha, ignored
    00,9d,ff,aa,\                     ; Taskbar icons underline
    00,9d,ff,aa,\                     ; Start button hover
    00,9d,ff,aa,\                     ; Settings icons and links [Blue]
    00,00,00,aa,\                     ; Startmenu background / Active taskbar button - IF "EnableTransparency"=dword:00000000
    00,00,00,aa,\                     ; Taskbar front and Folders on start list background [None]
    00,00,00,aa,\                     ; Taskbar background - IF "EnableTransparency"=dword:00000001
    00,00,00,aa                       ; Unused

[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM]
"ColorPrevalence"=dword:00000000      ; Show accent color on Title bars and window borders []
"AccentColor"=dword:aa000000          ; Active title bars - black unsupported in the UI but works with AccentPalette
"AccentColorInactive"=dword:aa202020  ; Inactive title bars

[-HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\DWM]
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\DWM]
"ColorPrevalence"=dword:00000000      ; Show accent color on Title bars and window borders []
"AccentColor"=dword:aa000000          ; Active title bars - black unsupported in the UI but works with AccentPalette
"AccentColorInactive"=dword:aa202020  ; Inactive title bars

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Dwm]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Dwm]
"ForceEffectMode"=dword:00000001      ; Dark Start and Taskbar while Transparency is on - needed for highlight active button

[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize]
"ColorPrevalence"=dword:00000001      ; Show accent color on Start, taskbar and action center [x]
"AppsUseLightTheme"=dword:00000000    ; Apps mode [Dark]
"SystemUsesLightTheme"=dword:00000000 ; Windows mode [Dark]
"EnabledBlurBehind"=dword:00000000    ; Blur []
"EnableTransparency"=dword:00000000   ; Transparency [x] needed for highlight active button

[-HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize]
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize]
"ColorPrevalence"=dword:00000001      ; Show accent color on Start, taskbar and action center [x]
"AppsUseLightTheme"=dword:00000000    ; Apps mode [Dark]
"SystemUsesLightTheme"=dword:00000000 ; Windows mode [Dark]
"EnabledBlurBehind"=dword:00000000    ; Blur []
"EnableTransparency"=dword:00000001   ; Transparency [x] needed for highlight active button

[-HKEY_CURRENT_USER\Control Panel\Colors]
[HKEY_CURRENT_USER\Control Panel\Colors]
"Hilight"="0 157 255" ; [Blue]
"HotTrackingColor"="0 157 255"
"MenuHilight"="0 157 255"
"ActiveBorder"="0 0 0"

[-HKEY_USERS\.DEFAULT\Control Panel\Colors]
[HKEY_USERS\.DEFAULT\Control Panel\Colors]
"Hilight"="0 157 255" ; [Blue]
"HotTrackingColor"="0 157 255"
"MenuHilight"="0 157 255"
"ActiveBorder"="0 0 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Background"="0 0 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"DisableAcrylicBackgroundOnLogon"=dword:00000001 ; AveYo: enable pure black logon on 11
"DisableLogonBackgroundImage"=- ; keep logon picture - separate y_solid_color_lockscreen.reg provided

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization]
"PersonalColors_Background"="#000000" ; AveYo: this is what was missing to make Ctrl+Alt+Del background black as well
"PersonalColors_Accent"=-
"NoLockScreen"=- ; keep lock screen - separate y_no_lockscreen.reg provided

[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DWM]
; done - log off and back on to see all changes 


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"AADWebSiteSSOUsingThisProfileEnabled"=dword:00000000
"AccessibilityImageLabelsEnabled"=dword:00000000
"AddressBarMicrosoftSearchInBingProviderEnabled"=dword:00000000
"AdsSettingForIntrusiveAdsSites"=dword:00000002
"AllowSurfGame"=dword:00000000
"AllowGamesMenu"=dword:00000000
"AlternateErrorPagesEnabled"=dword:00000000
"AudioCaptureAllowed"=dword:00000000
"AutofillAddressEnabled"=dword:00000000
"AutofillCreditCardEnabled"=dword:00000000
"AutoImportAtFirstRun"=dword:00000000
"AutoLaunchProtocolsComponentEnabled"=dword:00000000
"AlwaysOpenPdfExternally"=dword:00000001
"ApplicationGuardPassiveModeEnabled"=dword:00000001
"ApplicationGuardUploadBlockingEnabled"=dword:00000001
"BackgroundModeEnabled"=dword:00000000
"BingAdsSuppression"=dword:00000001
"BlockExternalExtensions"=dword:00000001
"BlockThirdPartyCookies"=dword:00000001
"BrowserCodeIntegritySetting"=dword:00000002
"BrowserNetworkTimeQueriesEnabled"=dword:00000000
"BrowserSignin" = dword:00000000
"ConfigureDoNotTrack"=dword:00000001
"ControlDefaultStateOfAllowExtensionFromOtherStoresSettingEnabled"=dword:00000001
"CryptoWalletEnabled"=dword:00000000
"DefaultBrowserSettingEnabled"=dword:00000000
"DefaultBrowserSettingsCampaignEnabled"=dword:00000000
"DefaultGeolocationSetting"=dword:00000002
"DefaultNotificationsSetting"=dword:00000002
"DefaultSearchProviderEnabled"=dword:00000001
"DefaultSearchProviderSearchURL"="{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}"
"DefaultSearchProviderName"="Google-Policy-Locked"
"DiagnosticData"=dword:00000000
"DnsOverHttpsMode"="secure"
"DnsOverHttpsTemplates"="https://chrome.cloudflare-dns.com/dns-query"
"DownloadDirectory"="%homepath%\\Downloads"
"DownloadRestrictions"=dword:00000000
"EdgeCollectionsEnabled"=dword:00000000
"EdgeFollowEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"EdgeWalletCheckoutEnabled"=dword:00000000
"EdgeWorkspacesEnabled"=dword:00000000
"ExemptFileTypeDownloadWarnings"="[{\"domains\":[\"*\"],\"file_extension\":\"exe\"},{\"domains\":[\"*\"],\"file_extension\":\"com\"},{\"domains\":[\"*\"],\"file_extension\":\"cab\"},{\"domains\":[\"*\"],\"file_extension\":\"msi\"},{\"domains\":[\"*\"],\"file_extension\":\"zip\"},{\"domains\":[\"*\"],\"file_extension\":\"rar\"},{\"domains\":[\"*\"],\"file_extension\":\"7z\"},{\"domains\":[\"*\"],\"file_extension\":\"msu\"},{\"domains\":[\"*\"],\"file_extension\":\"msix\"},{\"domains\":[\"*\"],\"file_extension\":\"msixbundle\"},{\"domains\":[\"*\"],\"file_extension\":\"eappx\"},{\"domains\":[\"*\"],\"file_extension\":\"eappxbundle\"},{\"domains\":[\"*\"],\"file_extension\":\"blockmap\"},{\"domains\":[\"*\"],\"file_extension\":\"appx\"},{\"domains\":[\"*\"],\"file_extension\":\"appxbundle\"}]"
"ExtensionSettings"="{\"odfafepnkmbhccpbejgmiehpchacaeak,ddlimelbabkhbgghepggfibfmmecbjfg,oholpbloipjbbhlhohaebmieiiieioal\":{\"toolbar_state\":\"force_shown\"}}"
"EfficiencyModeEnabled"=dword:00000000
"EnableMediaRouter"=dword:00000000
"ForceGoogleSafeSearch"=dword:00000000
"FamilySafetySettingsEnabled"=dword:00000000
"FavoritesBarEnabled"=dword:00000000
"HideFirstRunExperience"=dword:00000001
"HideRestoreDialogEnabled"=dword:00000001
"HomepageLocation"="https://www.google.de/"
"HomepageIsNewTabPage"=dword:00000001
"HubsSidebarEnabled"=dword:00000000
"ImageEditorServiceEnabled"=dword:00000000
"ImplicitSignInEnabled"=dword:00000000
"ImportOnEachLaunch"=dword:00000000
"InAppSupportEnabled"=dword:00000000
"KioskSwipeGesturesEnabled"=dword:00000001
"KioskDeleteDownloadsOnExit"=dword:00000001
"KioskAddressBarEditingEnabled"=dword:00000000
"LocalProvidersEnabled"=dword:00000000
"MAMEnabled"=dword:00000000
"MathSolverEnabled"=dword:00000000
"MediaRouterCastAllowAllIPs"=dword:00000001
"MicrosoftOfficeMenuEnabled"=dword:00000000
"MicrosoftEdgeInsiderPromotionEnabled"=dword:00000000
"MicrosoftEditorProofingEnabled"=dword:00000000
"NetworkPredictionOptions"=dword:00000002
"NewPDFReaderEnabled"=dword:00000000
"NewTabPageAllowedBackgroundTypes"=dword:00000003
"NewTabPageAppLauncherEnabled"=dword:00000000
"NewTabPageContentEnabled"=dword:00000000
"NewTabPageHideDefaultTopSites"=dword:00000001
"NewTabPageLocation"="https://www.google.de/"
"NewTabPagePrerenderEnabled"=dword:00000000
"NewTabPageQuickLinksEnabled"=dword:00000000
"NewTabPageSearchBox"="redirect"
"PasswordGeneratorEnabled"=dword:00000000
"PasswordManagerEnabled"=dword:00000000
"PasswordMonitorAllowed"=dword:00000000
"PaymentMethodQueryEnabled"=dword:00000000
"PersonalizationReportingEnabled"=dword:00000000
"PerformanceDetectorEnabled"=dword:00000000
"PinBrowserEssentialsToolbarButton"=dword:00000000
"PreventSmartScreenPromptOverride"=dword:00000000
"PreventSmartScreenPromptOverrideForFiles"=dword:00000000
"PromotionalTabsEnabled"=dword:00000000
"PromptForDownloadLocation"=dword:00000000
"QuickViewOfficeFilesEnabled"=dword:00000000
"QuickSearchShowMiniMenu"=dword:00000000
"QRCodeGeneratorEnabled"=dword:00000000
"ResolveNavigationErrorsUseWebService"=dword:00000000
"RestoreOnStartup"=dword:00000004
"SavingBrowserHistoryDisabled"=dword:00000001
"SearchInSidebarEnabled"=dword:00000000
"SearchbarIsEnabledOnStartup"=dword:00000000
"SharedLinksEnabled"=dword:00000000
"ShowAcrobatSubscriptionButton"=dword:00000000
"ShowHomeButton"=dword:00000001
"ShowMicrosoftRewards"=dword:00000000
"ShowPDFDefaultRecommendationsEnabled"=dword:00000000
"ShowRecommendationsEnabled"=dword:00000000
"SiteSafetyServicesEnabled"=dword:00000000
"SmartScreenEnabled"=dword:00000000
"SleepingTabsEnabled"=dword:00000001
"SmartScreenForTrustedDownloadsEnabled"=dword:00000000
"SmartScreenPuaEnabled"=dword:00000000
"SpeechRecognitionEnabled"=dword:00000000
"SplitScreenEnabled"=dword:00000000
"SpotlightExperiencesAndRecommendationsEnabled"=dword:00000000
"StandaloneHubsSidebarEnabled"=dword:00000000
"StartupBoostEnabled"=dword:00000000
"SuppressUnsupportedOSWarning"=dword:00000001
"SyncDisabled"=dword:00000001
"TabServicesEnabled"=dword:00000000
"TrackingPrevention"=dword:00000003
"TranslateEnabled"=dword:00000000
"TyposquattingCheckerEnabled"=dword:00000000
"UserFeedbackAllowed"=dword:00000000
"VerticalTabsAllowed"=dword:00000000
"VisualSearchEnabled"=dword:00000000
"WebWidgetAllowed"=dword:00000000
"WebWidgetIsEnabledOnStartup"=dword:00000000
"WindowsHelloForHTTPAuthEnabled"=dword:00000000
"WindowOcclusionEnabled"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs]
"1"="https://www.google.de/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\EdgeUpdate]
"CreateDesktopShortcutDefault"=dword:00000000
"RemoveDesktopShortcutDefault"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\CookiesAllowedForUrls]
"1"="[*.]google.com"
"2"="[*.]google.de"
"3"="[*.]msn.com"
"4"="[*.]msn.de"
"5"="[*.]deskmodder.de"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\SaveCookiesOnExit]
"1"="[*.]google.com"
"2"="[*.]google.de"
"3"="[*.]msn.com"
"4"="[*.]msn.de"
"5"="[*.]deskmodder.de"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist]
"1"="ofefcgjbeghpigppfmkologfjadafddi"
"2"="ghbmnnjooekpmoecnnnilnnbdlolhkhi"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist]
; UBlock Origin
"1"="odfafepnkmbhccpbejgmiehpchacaeak;https://edge.microsoft.com/extensionwebstorebase/v1/crx"
; I don't care about cookies
"2"="oholpbloipjbbhlhohaebmieiiieioal;https://edge.microsoft.com/extensionwebstorebase/v1/crx"
; No-Script Suite Lite
"3"="ddlimelbabkhbgghepggfibfmmecbjfg;https://edge.microsoft.com/extensionwebstorebase/v1/crx"
; Amazing Dark Mode
;"4"="ncefecfklnliokjogbaaejkllpphefdp;https://edge.microsoft.com/extensionwebstorebase/v1/crx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\InsecureContentAllowedForUrls]
"1"="\"[*.]microsoft.com\""
"2"="\"[*.]windowsupdate.com\""
"3"="https://www.catalog.update.microsoft.com/"
"5"="https://store.rg-adguard.net/"

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}]


; # Fake MDM-Enrollment - Key 1 of 2 - let a Win10 Machine "feel" MDM-Managed


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF] 
"EnrollmentState"=dword:00000001 
"EnrollmentType"=dword:00000000 
"IsFederated"=dword:00000000

; # Fake MDM-Enrollment - Key 2 of 2 - let a Win10 Machine "feel" MDM-Managed

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\OMADM\Accounts\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF]
"Flags"=dword:00d6fb7f
"AcctUId"="0x000000000000000000000000000000000000000000000000000000000000000000000000"
"RoamingCount"=dword:00000000
"SslClientCertReference"="MY;User;0000000000000000000000000000000000000000"
"ProtoVer"="1.2"

; wenn ie laufen soll:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"SuppressUnsupportedOSWarning"=dword:00000001


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\Recommended]
"NewPDFReaderEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"SearchSuggestEnabled"=dword:00000000
"TranslateEnabled"=dword:00000000
"LocalProvidersEnabled"=dword:00000000
"BlockThirdPartyCookies"=dword:00000001
"BackgroundModeEnabled"=dword:00000000
"AlternateErrorPagesEnabled"=dword:00000000
"SmartScreenPuaEnabled"=dword:00000000
"NewTabPagePrerenderEnabled"=dword:00000000
"HubsSidebarEnabled"=dword:00000000
"SmartScreenEnabled"=dword:00000000
"NetworkPredictionOptions"=dword:00000002
"StartupBoostEnabled"=dword:00000000
"WindowsHelloForHTTPAuthEnabled"=dword:00000000
"ShowMicrosoftRewards"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Addons]
"FlashPlayerEnabled"=dword:00000000


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
"{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}"="0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\BooksLibrary]
"UseSharedFolderForBooks"=dword:00000000
"EnableExtendedBooksTelemetry"=dword:00000000
"AllowConfigurationUpdateForBooksLibrary"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main]
"Use FormSuggest"="no"
"AlwaysEnableBooksLibrary"=dword:00000000
"SyncFavoritesBetweenIEAndMicrosoftEdge"=dword:00000000
"SendIntranetTraffictoInternetExplorer"=dword:00000000
"Cookies"=dword:00000001
"FormSuggest Passwords"="no"
"AllowPrelaunch"=dword:00000000


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter]
"EnabledV9"=dword:00000000


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\SearchScopes]
"ShowSearchSuggestionsGlobal"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\ServiceUI]
"ShowOneBox"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader]
"AllowTabPreloading"=dword:00000000


[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\PhishingFilter]
"EnabledV9"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EdgeUI]
"DisableHelpSticker"=dword:00000001

; Wenn kein EDGE:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EdgeUpdate]
"DoNotUpdateToEdgeWithChromium"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"DisableEdgeDesktopShortcutCreation"=dword:00000001


; zusätzlich (nicht Edge spezifisch)
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer]
"DisableSearchBoxSuggestions"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search]
"BingSearchEnabled"=dword:00000000

Re: EDGE MDM FakeEnrollment Windows 10

von moinmoin » 13.04.2023, 06:56

Erstelle ein Backup und probiere es aus.
Dann kannst du auch gleich sehen, ob du mit der Konfiguration überhaupt glücklich werden würdest.

EDGE MDM FakeEnrollment Windows 10

von Guest » 12.04.2023, 19:31

#moinmoin - funkt das mit den zwei *.reg für die "Edge Policies"? ;)

my-MDM-FakeEnrollment-Win10.reg

Code: Alles auswählen


Windows Registry Editor Version 5.00

; # Fake MDM-Enrollment - Key 1 of 2 - let a Win10 Machine "feel" MDM-Managed
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF] 
"EnrollmentState"=dword:00000001 
"EnrollmentType"=dword:00000000 
"IsFederated"=dword:00000000

; # Fake MDM-Enrollment - Key 2 of 2 - let a Win10 Machine "feel" MDM-Managed
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\OMADM\Accounts\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF]
"Flags"=dword:00d6fb7f
"AcctUId"="0x000000000000000000000000000000000000000000000000000000000000000000000000"
"RoamingCount"=dword:00000000
"SslClientCertReference"="MY;User;0000000000000000000000000000000000000000"
"ProtoVer"="1.2"
(Beispiel:) my-EdgeChromium-Policies-Mandatory.reg

Code: Alles auswählen


Windows Registry Editor Version 5.00

# You need to apply the "MDM-FakeEnrollment" to get these Policies working! Without Fake-MDM-Enrollemnt they are ignored
# Policy Guide: https://docs.microsoft.com/en-us/deployedge/microsoft-edge-policies

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"HubsSidebarEnabled"=dword:00000000
"ShowAcrobatSubscriptionButton"=dword:00000000
"SearchSuggestEnabled"=dword:00000000
"SyncDisabled"=dword:00000001
"SavingBrowserHistoryDisabled"=dword:00000001
"AutofillCreditCardEnabled"=dword:00000000
"EditFavoritesEnabled"=dword:00000000
"ForceYouTubeRestrict"=dword:00000002
"BrowserSignin"=dword:00000000
"PasswordManagerEnabled"=dword:00000000
"SitePerProcess"=dword:00000001
"AutoplayAllowed"=dword:00000000
"BlockThirdPartyCookies"=dword:00000001
"DefaultWebBluetoothGuardSetting"=dword:00000002
"AdsSettingForIntrusiveAdsSites"=dword:00000002
"Disable3DAPIs"=dword:00000001
"SearchInSidebarEnabled"=dword:00000002
"UserAgentReduction"=dword:00000002
"ApplicationGuardUploadBlockingEnabled"=dword:00000001
"LocalProvidersEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"WebCaptureEnabled"=dword:00000000
"ConfigureShare"=dword:00000001
"DefaultPopupsSetting"=dword:00000002
"DefaultGeolocationSetting"=dword:00000002
"NetworkPredictionOptions"=dword:00000002
"DefaultSearchProviderEnabled"=dword:00000001
"DefaultSearchProviderSearchURL"="{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}"
"DefaultSearchProviderName"="Google-Policy-Locked"
"RestoreOnStartup"=dword:00000004
"ShowHomeButton"=dword:00000001
"HomepageLocation"="about:blank"
"NewTabPageLocation"="about:blank"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs]
"1"="about:blank"
"2"="about:blank"

Nach oben