EDGE MDM FakeEnrollment Windows 10

Antworten
Guest

EDGE MDM FakeEnrollment Windows 10

Beitrag von Guest » 12.04.2023, 19:31

#moinmoin - funkt das mit den zwei *.reg für die "Edge Policies"? ;)

my-MDM-FakeEnrollment-Win10.reg

Code: Alles auswählen


Windows Registry Editor Version 5.00

; # Fake MDM-Enrollment - Key 1 of 2 - let a Win10 Machine "feel" MDM-Managed
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF] 
"EnrollmentState"=dword:00000001 
"EnrollmentType"=dword:00000000 
"IsFederated"=dword:00000000

; # Fake MDM-Enrollment - Key 2 of 2 - let a Win10 Machine "feel" MDM-Managed
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\OMADM\Accounts\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF]
"Flags"=dword:00d6fb7f
"AcctUId"="0x000000000000000000000000000000000000000000000000000000000000000000000000"
"RoamingCount"=dword:00000000
"SslClientCertReference"="MY;User;0000000000000000000000000000000000000000"
"ProtoVer"="1.2"

(Beispiel:) my-EdgeChromium-Policies-Mandatory.reg

Code: Alles auswählen


Windows Registry Editor Version 5.00

# You need to apply the "MDM-FakeEnrollment" to get these Policies working! Without Fake-MDM-Enrollemnt they are ignored
# Policy Guide: https://docs.microsoft.com/en-us/deployedge/microsoft-edge-policies

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"HubsSidebarEnabled"=dword:00000000
"ShowAcrobatSubscriptionButton"=dword:00000000
"SearchSuggestEnabled"=dword:00000000
"SyncDisabled"=dword:00000001
"SavingBrowserHistoryDisabled"=dword:00000001
"AutofillCreditCardEnabled"=dword:00000000
"EditFavoritesEnabled"=dword:00000000
"ForceYouTubeRestrict"=dword:00000002
"BrowserSignin"=dword:00000000
"PasswordManagerEnabled"=dword:00000000
"SitePerProcess"=dword:00000001
"AutoplayAllowed"=dword:00000000
"BlockThirdPartyCookies"=dword:00000001
"DefaultWebBluetoothGuardSetting"=dword:00000002
"AdsSettingForIntrusiveAdsSites"=dword:00000002
"Disable3DAPIs"=dword:00000001
"SearchInSidebarEnabled"=dword:00000002
"UserAgentReduction"=dword:00000002
"ApplicationGuardUploadBlockingEnabled"=dword:00000001
"LocalProvidersEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"WebCaptureEnabled"=dword:00000000
"ConfigureShare"=dword:00000001
"DefaultPopupsSetting"=dword:00000002
"DefaultGeolocationSetting"=dword:00000002
"NetworkPredictionOptions"=dword:00000002
"DefaultSearchProviderEnabled"=dword:00000001
"DefaultSearchProviderSearchURL"="{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}"
"DefaultSearchProviderName"="Google-Policy-Locked"
"RestoreOnStartup"=dword:00000004
"ShowHomeButton"=dword:00000001
"HomepageLocation"="about:blank"
"NewTabPageLocation"="about:blank"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs]
"1"="about:blank"
"2"="about:blank"


Tante Google

EDGE MDM FakeEnrollment Windows 10

Beitrag von Tante Google » 12.04.2023, 19:31


Benutzeravatar
moinmoin
★ Team Admin ★
Beiträge: 61942
Registriert: 14.11.2003, 11:12
Hat sich bedankt: 166 Mal
Danke erhalten: 911 Mal
Gender:

Re: EDGE MDM FakeEnrollment Windows 10

Beitrag von moinmoin » 13.04.2023, 06:56

Erstelle ein Backup und probiere es aus.
Dann kannst du auch gleich sehen, ob du mit der Konfiguration überhaupt glücklich werden würdest.

Benutzeravatar
Holgi
Guru
Guru
Beiträge: 3084
Registriert: 12.05.2018, 12:33
Hat sich bedankt: 390 Mal
Danke erhalten: 504 Mal
Gender:

Re: EDGE MDM FakeEnrollment Windows 10

Beitrag von Holgi » 13.04.2023, 09:06

@Guest:
auch jemand, der von dem ganzen MS Edge Chromium Gedöns genervt ist?
MDM-FakeEnrollment nutze ich auch.
Deine Regs funktionieren bei mir soweit. Gerade mal in einer neu aufgesetzen Windows 11 VM getestet.
Der für mich wichtigste Eintrag fehlt noch: "HideFirstRunExperience"=dword:00000001
Meine Edge REG sieht mittlerweile wie folgt aus (so richtig los geht es bei [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]):

Code: Alles auswählen

Windows Registry Editor Version 5.00

;DarkTheme
; Pitch Black Theme preset by AveYo, AccentPalette idea by /u/Egg-Tricky
; for Ctrl+Alt+Del, Logon, Taskbar, Start Menu, Action Center (10 & 11)
; revised 2022-06-16: show active taskbar button in accent color

[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Accent]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Accent]
"AccentColorMenu"=dword:aa000000      ; Window borders and titlebar
"StartColorMenu"=dword:aa202020       ; Modals in UWP ex. Apply new refresh rate in 10
"AccentPalette"=hex:\
    00,9d,ff,aa,\                     ; Links in action center and apps
    00,9d,ff,aa,\                     ; Taskbar icons underline
    00,9d,ff,aa,\                     ; Start button hover
    00,9d,ff,aa,\                     ; Settings icons and links [Blue]
    00,00,00,aa,\                     ; Startmenu background / Active taskbar button - IF "EnableTransparency"=dword:00000000
    00,00,00,aa,\                     ; Taskbar front and Folders on start list background [None]
    00,00,00,aa,\                     ; Taskbar background - IF "EnableTransparency"=dword:00000001
    00,00,00,aa                       ; Unused

[-HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Accent]
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Accent]
"AccentColorMenu"=dword:aa000000      ; Window borders and titlebar, where [aabbggrr] aa = alpha, ignored
"StartColorMenu"=dword:aa202020       ; Modals in UWP ex. Apply new refresh rate in 10
"AccentPalette"=hex:\
    00,9d,ff,aa,\                     ; Links in action center and apps, where [rr,gg,bb,aa] aa = alpha, ignored
    00,9d,ff,aa,\                     ; Taskbar icons underline
    00,9d,ff,aa,\                     ; Start button hover
    00,9d,ff,aa,\                     ; Settings icons and links [Blue]
    00,00,00,aa,\                     ; Startmenu background / Active taskbar button - IF "EnableTransparency"=dword:00000000
    00,00,00,aa,\                     ; Taskbar front and Folders on start list background [None]
    00,00,00,aa,\                     ; Taskbar background - IF "EnableTransparency"=dword:00000001
    00,00,00,aa                       ; Unused

[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM]
"ColorPrevalence"=dword:00000000      ; Show accent color on Title bars and window borders []
"AccentColor"=dword:aa000000          ; Active title bars - black unsupported in the UI but works with AccentPalette
"AccentColorInactive"=dword:aa202020  ; Inactive title bars

[-HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\DWM]
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\DWM]
"ColorPrevalence"=dword:00000000      ; Show accent color on Title bars and window borders []
"AccentColor"=dword:aa000000          ; Active title bars - black unsupported in the UI but works with AccentPalette
"AccentColorInactive"=dword:aa202020  ; Inactive title bars

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Dwm]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Dwm]
"ForceEffectMode"=dword:00000001      ; Dark Start and Taskbar while Transparency is on - needed for highlight active button

[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize]
"ColorPrevalence"=dword:00000001      ; Show accent color on Start, taskbar and action center [x]
"AppsUseLightTheme"=dword:00000000    ; Apps mode [Dark]
"SystemUsesLightTheme"=dword:00000000 ; Windows mode [Dark]
"EnabledBlurBehind"=dword:00000000    ; Blur []
"EnableTransparency"=dword:00000000   ; Transparency [x] needed for highlight active button

[-HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize]
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize]
"ColorPrevalence"=dword:00000001      ; Show accent color on Start, taskbar and action center [x]
"AppsUseLightTheme"=dword:00000000    ; Apps mode [Dark]
"SystemUsesLightTheme"=dword:00000000 ; Windows mode [Dark]
"EnabledBlurBehind"=dword:00000000    ; Blur []
"EnableTransparency"=dword:00000001   ; Transparency [x] needed for highlight active button

[-HKEY_CURRENT_USER\Control Panel\Colors]
[HKEY_CURRENT_USER\Control Panel\Colors]
"Hilight"="0 157 255" ; [Blue]
"HotTrackingColor"="0 157 255"
"MenuHilight"="0 157 255"
"ActiveBorder"="0 0 0"

[-HKEY_USERS\.DEFAULT\Control Panel\Colors]
[HKEY_USERS\.DEFAULT\Control Panel\Colors]
"Hilight"="0 157 255" ; [Blue]
"HotTrackingColor"="0 157 255"
"MenuHilight"="0 157 255"
"ActiveBorder"="0 0 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Background"="0 0 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"DisableAcrylicBackgroundOnLogon"=dword:00000001 ; AveYo: enable pure black logon on 11
"DisableLogonBackgroundImage"=- ; keep logon picture - separate y_solid_color_lockscreen.reg provided

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization]
"PersonalColors_Background"="#000000" ; AveYo: this is what was missing to make Ctrl+Alt+Del background black as well
"PersonalColors_Accent"=-
"NoLockScreen"=- ; keep lock screen - separate y_no_lockscreen.reg provided

[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DWM]
; done - log off and back on to see all changes 


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"AADWebSiteSSOUsingThisProfileEnabled"=dword:00000000
"AccessibilityImageLabelsEnabled"=dword:00000000
"AddressBarMicrosoftSearchInBingProviderEnabled"=dword:00000000
"AdsSettingForIntrusiveAdsSites"=dword:00000002
"AllowSurfGame"=dword:00000000
"AllowGamesMenu"=dword:00000000
"AlternateErrorPagesEnabled"=dword:00000000
"AudioCaptureAllowed"=dword:00000000
"AutofillAddressEnabled"=dword:00000000
"AutofillCreditCardEnabled"=dword:00000000
"AutoImportAtFirstRun"=dword:00000000
"AutoLaunchProtocolsComponentEnabled"=dword:00000000
"AlwaysOpenPdfExternally"=dword:00000001
"ApplicationGuardPassiveModeEnabled"=dword:00000001
"ApplicationGuardUploadBlockingEnabled"=dword:00000001
"BackgroundModeEnabled"=dword:00000000
"BingAdsSuppression"=dword:00000001
"BlockExternalExtensions"=dword:00000001
"BlockThirdPartyCookies"=dword:00000001
"BrowserCodeIntegritySetting"=dword:00000002
"BrowserNetworkTimeQueriesEnabled"=dword:00000000
"BrowserSignin" = dword:00000000
"ConfigureDoNotTrack"=dword:00000001
"ControlDefaultStateOfAllowExtensionFromOtherStoresSettingEnabled"=dword:00000001
"CryptoWalletEnabled"=dword:00000000
"DefaultBrowserSettingEnabled"=dword:00000000
"DefaultBrowserSettingsCampaignEnabled"=dword:00000000
"DefaultGeolocationSetting"=dword:00000002
"DefaultNotificationsSetting"=dword:00000002
"DefaultSearchProviderEnabled"=dword:00000001
"DefaultSearchProviderSearchURL"="{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}"
"DefaultSearchProviderName"="Google-Policy-Locked"
"DiagnosticData"=dword:00000000
"DnsOverHttpsMode"="secure"
"DnsOverHttpsTemplates"="https://chrome.cloudflare-dns.com/dns-query"
"DownloadDirectory"="%homepath%\\Downloads"
"DownloadRestrictions"=dword:00000000
"EdgeCollectionsEnabled"=dword:00000000
"EdgeFollowEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"EdgeWalletCheckoutEnabled"=dword:00000000
"EdgeWorkspacesEnabled"=dword:00000000
"ExemptFileTypeDownloadWarnings"="[{\"domains\":[\"*\"],\"file_extension\":\"exe\"},{\"domains\":[\"*\"],\"file_extension\":\"com\"},{\"domains\":[\"*\"],\"file_extension\":\"cab\"},{\"domains\":[\"*\"],\"file_extension\":\"msi\"},{\"domains\":[\"*\"],\"file_extension\":\"zip\"},{\"domains\":[\"*\"],\"file_extension\":\"rar\"},{\"domains\":[\"*\"],\"file_extension\":\"7z\"},{\"domains\":[\"*\"],\"file_extension\":\"msu\"},{\"domains\":[\"*\"],\"file_extension\":\"msix\"},{\"domains\":[\"*\"],\"file_extension\":\"msixbundle\"},{\"domains\":[\"*\"],\"file_extension\":\"eappx\"},{\"domains\":[\"*\"],\"file_extension\":\"eappxbundle\"},{\"domains\":[\"*\"],\"file_extension\":\"blockmap\"},{\"domains\":[\"*\"],\"file_extension\":\"appx\"},{\"domains\":[\"*\"],\"file_extension\":\"appxbundle\"}]"
"ExtensionSettings"="{\"odfafepnkmbhccpbejgmiehpchacaeak,ddlimelbabkhbgghepggfibfmmecbjfg,oholpbloipjbbhlhohaebmieiiieioal\":{\"toolbar_state\":\"force_shown\"}}"
"EfficiencyModeEnabled"=dword:00000000
"EnableMediaRouter"=dword:00000000
"ForceGoogleSafeSearch"=dword:00000000
"FamilySafetySettingsEnabled"=dword:00000000
"FavoritesBarEnabled"=dword:00000000
"HideFirstRunExperience"=dword:00000001
"HideRestoreDialogEnabled"=dword:00000001
"HomepageLocation"="https://www.google.de/"
"HomepageIsNewTabPage"=dword:00000001
"HubsSidebarEnabled"=dword:00000000
"ImageEditorServiceEnabled"=dword:00000000
"ImplicitSignInEnabled"=dword:00000000
"ImportOnEachLaunch"=dword:00000000
"InAppSupportEnabled"=dword:00000000
"KioskSwipeGesturesEnabled"=dword:00000001
"KioskDeleteDownloadsOnExit"=dword:00000001
"KioskAddressBarEditingEnabled"=dword:00000000
"LocalProvidersEnabled"=dword:00000000
"MAMEnabled"=dword:00000000
"MathSolverEnabled"=dword:00000000
"MediaRouterCastAllowAllIPs"=dword:00000001
"MicrosoftOfficeMenuEnabled"=dword:00000000
"MicrosoftEdgeInsiderPromotionEnabled"=dword:00000000
"MicrosoftEditorProofingEnabled"=dword:00000000
"NetworkPredictionOptions"=dword:00000002
"NewPDFReaderEnabled"=dword:00000000
"NewTabPageAllowedBackgroundTypes"=dword:00000003
"NewTabPageAppLauncherEnabled"=dword:00000000
"NewTabPageContentEnabled"=dword:00000000
"NewTabPageHideDefaultTopSites"=dword:00000001
"NewTabPageLocation"="https://www.google.de/"
"NewTabPagePrerenderEnabled"=dword:00000000
"NewTabPageQuickLinksEnabled"=dword:00000000
"NewTabPageSearchBox"="redirect"
"PasswordGeneratorEnabled"=dword:00000000
"PasswordManagerEnabled"=dword:00000000
"PasswordMonitorAllowed"=dword:00000000
"PaymentMethodQueryEnabled"=dword:00000000
"PersonalizationReportingEnabled"=dword:00000000
"PerformanceDetectorEnabled"=dword:00000000
"PinBrowserEssentialsToolbarButton"=dword:00000000
"PreventSmartScreenPromptOverride"=dword:00000000
"PreventSmartScreenPromptOverrideForFiles"=dword:00000000
"PromotionalTabsEnabled"=dword:00000000
"PromptForDownloadLocation"=dword:00000000
"QuickViewOfficeFilesEnabled"=dword:00000000
"QuickSearchShowMiniMenu"=dword:00000000
"QRCodeGeneratorEnabled"=dword:00000000
"ResolveNavigationErrorsUseWebService"=dword:00000000
"RestoreOnStartup"=dword:00000004
"SavingBrowserHistoryDisabled"=dword:00000001
"SearchInSidebarEnabled"=dword:00000000
"SearchbarIsEnabledOnStartup"=dword:00000000
"SharedLinksEnabled"=dword:00000000
"ShowAcrobatSubscriptionButton"=dword:00000000
"ShowHomeButton"=dword:00000001
"ShowMicrosoftRewards"=dword:00000000
"ShowPDFDefaultRecommendationsEnabled"=dword:00000000
"ShowRecommendationsEnabled"=dword:00000000
"SiteSafetyServicesEnabled"=dword:00000000
"SmartScreenEnabled"=dword:00000000
"SleepingTabsEnabled"=dword:00000001
"SmartScreenForTrustedDownloadsEnabled"=dword:00000000
"SmartScreenPuaEnabled"=dword:00000000
"SpeechRecognitionEnabled"=dword:00000000
"SplitScreenEnabled"=dword:00000000
"SpotlightExperiencesAndRecommendationsEnabled"=dword:00000000
"StandaloneHubsSidebarEnabled"=dword:00000000
"StartupBoostEnabled"=dword:00000000
"SuppressUnsupportedOSWarning"=dword:00000001
"SyncDisabled"=dword:00000001
"TabServicesEnabled"=dword:00000000
"TrackingPrevention"=dword:00000003
"TranslateEnabled"=dword:00000000
"TyposquattingCheckerEnabled"=dword:00000000
"UserFeedbackAllowed"=dword:00000000
"VerticalTabsAllowed"=dword:00000000
"VisualSearchEnabled"=dword:00000000
"WebWidgetAllowed"=dword:00000000
"WebWidgetIsEnabledOnStartup"=dword:00000000
"WindowsHelloForHTTPAuthEnabled"=dword:00000000
"WindowOcclusionEnabled"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs]
"1"="https://www.google.de/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\EdgeUpdate]
"CreateDesktopShortcutDefault"=dword:00000000
"RemoveDesktopShortcutDefault"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\CookiesAllowedForUrls]
"1"="[*.]google.com"
"2"="[*.]google.de"
"3"="[*.]msn.com"
"4"="[*.]msn.de"
"5"="[*.]deskmodder.de"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\SaveCookiesOnExit]
"1"="[*.]google.com"
"2"="[*.]google.de"
"3"="[*.]msn.com"
"4"="[*.]msn.de"
"5"="[*.]deskmodder.de"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist]
"1"="ofefcgjbeghpigppfmkologfjadafddi"
"2"="ghbmnnjooekpmoecnnnilnnbdlolhkhi"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist]
; UBlock Origin
"1"="odfafepnkmbhccpbejgmiehpchacaeak;https://edge.microsoft.com/extensionwebstorebase/v1/crx"
; I don't care about cookies
"2"="oholpbloipjbbhlhohaebmieiiieioal;https://edge.microsoft.com/extensionwebstorebase/v1/crx"
; No-Script Suite Lite
"3"="ddlimelbabkhbgghepggfibfmmecbjfg;https://edge.microsoft.com/extensionwebstorebase/v1/crx"
; Amazing Dark Mode
;"4"="ncefecfklnliokjogbaaejkllpphefdp;https://edge.microsoft.com/extensionwebstorebase/v1/crx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\InsecureContentAllowedForUrls]
"1"="\"[*.]microsoft.com\""
"2"="\"[*.]windowsupdate.com\""
"3"="https://www.catalog.update.microsoft.com/"
"5"="https://store.rg-adguard.net/"

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}]


; # Fake MDM-Enrollment - Key 1 of 2 - let a Win10 Machine "feel" MDM-Managed


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF] 
"EnrollmentState"=dword:00000001 
"EnrollmentType"=dword:00000000 
"IsFederated"=dword:00000000

; # Fake MDM-Enrollment - Key 2 of 2 - let a Win10 Machine "feel" MDM-Managed

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\OMADM\Accounts\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF]
"Flags"=dword:00d6fb7f
"AcctUId"="0x000000000000000000000000000000000000000000000000000000000000000000000000"
"RoamingCount"=dword:00000000
"SslClientCertReference"="MY;User;0000000000000000000000000000000000000000"
"ProtoVer"="1.2"

; wenn ie laufen soll:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"SuppressUnsupportedOSWarning"=dword:00000001


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\Recommended]
"NewPDFReaderEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"SearchSuggestEnabled"=dword:00000000
"TranslateEnabled"=dword:00000000
"LocalProvidersEnabled"=dword:00000000
"BlockThirdPartyCookies"=dword:00000001
"BackgroundModeEnabled"=dword:00000000
"AlternateErrorPagesEnabled"=dword:00000000
"SmartScreenPuaEnabled"=dword:00000000
"NewTabPagePrerenderEnabled"=dword:00000000
"HubsSidebarEnabled"=dword:00000000
"SmartScreenEnabled"=dword:00000000
"NetworkPredictionOptions"=dword:00000002
"StartupBoostEnabled"=dword:00000000
"WindowsHelloForHTTPAuthEnabled"=dword:00000000
"ShowMicrosoftRewards"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Addons]
"FlashPlayerEnabled"=dword:00000000


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
"{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}"="0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\BooksLibrary]
"UseSharedFolderForBooks"=dword:00000000
"EnableExtendedBooksTelemetry"=dword:00000000
"AllowConfigurationUpdateForBooksLibrary"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main]
"Use FormSuggest"="no"
"AlwaysEnableBooksLibrary"=dword:00000000
"SyncFavoritesBetweenIEAndMicrosoftEdge"=dword:00000000
"SendIntranetTraffictoInternetExplorer"=dword:00000000
"Cookies"=dword:00000001
"FormSuggest Passwords"="no"
"AllowPrelaunch"=dword:00000000


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter]
"EnabledV9"=dword:00000000


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\SearchScopes]
"ShowSearchSuggestionsGlobal"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\ServiceUI]
"ShowOneBox"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader]
"AllowTabPreloading"=dword:00000000


[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\PhishingFilter]
"EnabledV9"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EdgeUI]
"DisableHelpSticker"=dword:00000001

; Wenn kein EDGE:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EdgeUpdate]
"DoNotUpdateToEdgeWithChromium"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"DisableEdgeDesktopShortcutCreation"=dword:00000001


; zusätzlich (nicht Edge spezifisch)
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer]
"DisableSearchBoxSuggestions"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search]
"BingSearchEnabled"=dword:00000000
Zuletzt geändert von Holgi am 18.06.2024, 10:23, insgesamt 2-mal geändert.
PDF24 angepasste Installation (nur PDF Druckertreiber) per Script: viewtopic.php?t=30284
Winget (Desktop App Installer) für Windows Versionen ohne Store installieren (HowTo): viewtopic.php?t=26214
Vorstellung: tiny11builder; Script zur Verschlankung von Windows 11: viewtopic.php?t=30134
Windows StartMenü Empfohlen (Recommended Section) komplett ausblenden: viewtopic.php?t=30574
Hyper-V VM per Script erstellen viewtopic.php?t=25114

gerd87

Re: EDGE MDM FakeEnrollment Windows 10

Beitrag von gerd87 » 21.04.2023, 11:47

Danke holgi!

btw:
Es geht auch noch immer, Edge und Defender in der Win10 22h2 völlig zu deinstallieren.

Test vom 20.04.23

Edge deinstallieren: [cmd als Administrator]

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --uninstall --system-level --verbose-logging --force-uninstall

und [Powershell als Administrator]
]
install_wim_tweak.exe /o /r /c Microsoft-Windows-Internet-Browser

---------------------------------------

Windows Defender deinstallieren und völlig abschalten nur unter abgesicherten Start möglich.

Mit der Defoff.reg und (Regedit) und gpedit - siehe Bilder

Windows Defender Alternative (zum nicht ständigen mitlaufen AV)
https://docs.microsoft.com/de-de/window ... r-download

Code: Alles auswählen

https://abload.de/img/unbenanntvmca5.jpg

https://abload.de/img/unbenannt1p0fad.jpg

https://abload.de/img/unbenannt2w1iyn.jpg
:)

Benutzeravatar
Scoty
Poweruser
Poweruser
Beiträge: 617
Registriert: 26.10.2009, 15:41
Hat sich bedankt: 190 Mal
Danke erhalten: 30 Mal
Gender:

Re: EDGE MDM FakeEnrollment Windows 10

Beitrag von Scoty » 18.06.2024, 05:40

@Holgi tolle reg. Gkleich mal getestet und tut was sie soll. Habe alles was mit Themes was obern alles ist rausgenommen und nur alles was mit Edge zu tun hat gelassen.
Bild

Benutzeravatar
SirValek
Fragensteller
Fragensteller
Beiträge: 15
Registriert: 05.10.2020, 07:04
Danke erhalten: 2 Mal

Re: EDGE MDM FakeEnrollment Windows 10

Beitrag von SirValek » 23.06.2024, 08:02

Scoty hat geschrieben: 18.06.2024, 05:40 @Holgi tolle reg. Gkleich mal getestet und tut was sie soll. Habe alles was mit Themes was obern alles ist rausgenommen und nur alles was mit Edge zu tun hat gelassen.
Kannst du Reg mal einstellen ?

Benutzeravatar
Holgi
Guru
Guru
Beiträge: 3084
Registriert: 12.05.2018, 12:33
Hat sich bedankt: 390 Mal
Danke erhalten: 504 Mal
Gender:

Re: EDGE MDM FakeEnrollment Windows 10

Beitrag von Holgi » 23.06.2024, 13:28

steht doch alles oben!
Wenn du auf das dunkle Design verzichten magst, dann sieht die REG halt so aus:

Code: Alles auswählen

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"AADWebSiteSSOUsingThisProfileEnabled"=dword:00000000
"AccessibilityImageLabelsEnabled"=dword:00000000
"AddressBarMicrosoftSearchInBingProviderEnabled"=dword:00000000
"AdsSettingForIntrusiveAdsSites"=dword:00000002
"AllowSurfGame"=dword:00000000
"AllowGamesMenu"=dword:00000000
"AlternateErrorPagesEnabled"=dword:00000000
"AudioCaptureAllowed"=dword:00000000
"AutofillAddressEnabled"=dword:00000000
"AutofillCreditCardEnabled"=dword:00000000
"AutoImportAtFirstRun"=dword:00000000
"AutoLaunchProtocolsComponentEnabled"=dword:00000000
"AlwaysOpenPdfExternally"=dword:00000001
"ApplicationGuardPassiveModeEnabled"=dword:00000001
"ApplicationGuardUploadBlockingEnabled"=dword:00000001
"BackgroundModeEnabled"=dword:00000000
"BingAdsSuppression"=dword:00000001
"BlockExternalExtensions"=dword:00000001
"BlockThirdPartyCookies"=dword:00000001
"BrowserCodeIntegritySetting"=dword:00000002
"BrowserNetworkTimeQueriesEnabled"=dword:00000000
"BrowserSignin" = dword:00000000
"ConfigureDoNotTrack"=dword:00000001
"ControlDefaultStateOfAllowExtensionFromOtherStoresSettingEnabled"=dword:00000001
"CryptoWalletEnabled"=dword:00000000
"DefaultBrowserSettingEnabled"=dword:00000000
"DefaultBrowserSettingsCampaignEnabled"=dword:00000000
"DefaultGeolocationSetting"=dword:00000002
"DefaultNotificationsSetting"=dword:00000002
"DefaultSearchProviderEnabled"=dword:00000001
"DefaultSearchProviderSearchURL"="{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}"
"DefaultSearchProviderName"="Google-Policy-Locked"
"DiagnosticData"=dword:00000000
"DnsOverHttpsMode"="secure"
"DnsOverHttpsTemplates"="https://chrome.cloudflare-dns.com/dns-query"
"DownloadDirectory"="%homepath%\\Downloads"
"DownloadRestrictions"=dword:00000000
"EdgeCollectionsEnabled"=dword:00000000
"EdgeFollowEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"EdgeWalletCheckoutEnabled"=dword:00000000
"EdgeWorkspacesEnabled"=dword:00000000
"ExemptFileTypeDownloadWarnings"="[{\"domains\":[\"*\"],\"file_extension\":\"exe\"},{\"domains\":[\"*\"],\"file_extension\":\"com\"},{\"domains\":[\"*\"],\"file_extension\":\"cab\"},{\"domains\":[\"*\"],\"file_extension\":\"msi\"},{\"domains\":[\"*\"],\"file_extension\":\"zip\"},{\"domains\":[\"*\"],\"file_extension\":\"rar\"},{\"domains\":[\"*\"],\"file_extension\":\"7z\"},{\"domains\":[\"*\"],\"file_extension\":\"msu\"},{\"domains\":[\"*\"],\"file_extension\":\"msix\"},{\"domains\":[\"*\"],\"file_extension\":\"msixbundle\"},{\"domains\":[\"*\"],\"file_extension\":\"eappx\"},{\"domains\":[\"*\"],\"file_extension\":\"eappxbundle\"},{\"domains\":[\"*\"],\"file_extension\":\"blockmap\"},{\"domains\":[\"*\"],\"file_extension\":\"appx\"},{\"domains\":[\"*\"],\"file_extension\":\"appxbundle\"}]"
"ExtensionSettings"="{\"odfafepnkmbhccpbejgmiehpchacaeak,ddlimelbabkhbgghepggfibfmmecbjfg,oholpbloipjbbhlhohaebmieiiieioal\":{\"toolbar_state\":\"force_shown\"}}"
"EfficiencyModeEnabled"=dword:00000000
"EnableMediaRouter"=dword:00000000
"ForceGoogleSafeSearch"=dword:00000000
"FamilySafetySettingsEnabled"=dword:00000000
"FavoritesBarEnabled"=dword:00000000
"HideFirstRunExperience"=dword:00000001
"HideRestoreDialogEnabled"=dword:00000001
"HomepageLocation"="https://www.google.de/"
"HomepageIsNewTabPage"=dword:00000001
"HubsSidebarEnabled"=dword:00000000
"ImageEditorServiceEnabled"=dword:00000000
"ImplicitSignInEnabled"=dword:00000000
"ImportOnEachLaunch"=dword:00000000
"InAppSupportEnabled"=dword:00000000
"KioskSwipeGesturesEnabled"=dword:00000001
"KioskDeleteDownloadsOnExit"=dword:00000001
"KioskAddressBarEditingEnabled"=dword:00000000
"LocalProvidersEnabled"=dword:00000000
"MAMEnabled"=dword:00000000
"MathSolverEnabled"=dword:00000000
"MediaRouterCastAllowAllIPs"=dword:00000001
"MicrosoftOfficeMenuEnabled"=dword:00000000
"MicrosoftEdgeInsiderPromotionEnabled"=dword:00000000
"MicrosoftEditorProofingEnabled"=dword:00000000
"NetworkPredictionOptions"=dword:00000002
"NewPDFReaderEnabled"=dword:00000000
"NewTabPageAllowedBackgroundTypes"=dword:00000003
"NewTabPageAppLauncherEnabled"=dword:00000000
"NewTabPageContentEnabled"=dword:00000000
"NewTabPageHideDefaultTopSites"=dword:00000001
"NewTabPageLocation"="https://www.google.de/"
"NewTabPagePrerenderEnabled"=dword:00000000
"NewTabPageQuickLinksEnabled"=dword:00000000
"NewTabPageSearchBox"="redirect"
"PasswordGeneratorEnabled"=dword:00000000
"PasswordManagerEnabled"=dword:00000000
"PasswordMonitorAllowed"=dword:00000000
"PaymentMethodQueryEnabled"=dword:00000000
"PersonalizationReportingEnabled"=dword:00000000
"PerformanceDetectorEnabled"=dword:00000000
"PinBrowserEssentialsToolbarButton"=dword:00000000
"PreventSmartScreenPromptOverride"=dword:00000000
"PreventSmartScreenPromptOverrideForFiles"=dword:00000000
"PromotionalTabsEnabled"=dword:00000000
"PromptForDownloadLocation"=dword:00000000
"QuickViewOfficeFilesEnabled"=dword:00000000
"QuickSearchShowMiniMenu"=dword:00000000
"QRCodeGeneratorEnabled"=dword:00000000
"ResolveNavigationErrorsUseWebService"=dword:00000000
"RestoreOnStartup"=dword:00000004
"SavingBrowserHistoryDisabled"=dword:00000001
"SearchInSidebarEnabled"=dword:00000000
"SearchbarIsEnabledOnStartup"=dword:00000000
"SharedLinksEnabled"=dword:00000000
"ShowAcrobatSubscriptionButton"=dword:00000000
"ShowHomeButton"=dword:00000001
"ShowMicrosoftRewards"=dword:00000000
"ShowPDFDefaultRecommendationsEnabled"=dword:00000000
"ShowRecommendationsEnabled"=dword:00000000
"SiteSafetyServicesEnabled"=dword:00000000
"SmartScreenEnabled"=dword:00000000
"SleepingTabsEnabled"=dword:00000001
"SmartScreenForTrustedDownloadsEnabled"=dword:00000000
"SmartScreenPuaEnabled"=dword:00000000
"SpeechRecognitionEnabled"=dword:00000000
"SplitScreenEnabled"=dword:00000000
"SpotlightExperiencesAndRecommendationsEnabled"=dword:00000000
"StandaloneHubsSidebarEnabled"=dword:00000000
"StartupBoostEnabled"=dword:00000000
"SuppressUnsupportedOSWarning"=dword:00000001
"SyncDisabled"=dword:00000001
"TabServicesEnabled"=dword:00000000
"TrackingPrevention"=dword:00000003
"TranslateEnabled"=dword:00000000
"TyposquattingCheckerEnabled"=dword:00000000
"UserFeedbackAllowed"=dword:00000000
"VerticalTabsAllowed"=dword:00000000
"VisualSearchEnabled"=dword:00000000
"WebWidgetAllowed"=dword:00000000
"WebWidgetIsEnabledOnStartup"=dword:00000000
"WindowsHelloForHTTPAuthEnabled"=dword:00000000
"WindowOcclusionEnabled"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs]
"1"="https://www.google.de/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\EdgeUpdate]
"CreateDesktopShortcutDefault"=dword:00000000
"RemoveDesktopShortcutDefault"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\CookiesAllowedForUrls]
"1"="[*.]google.com"
"2"="[*.]google.de"
"3"="[*.]msn.com"
"4"="[*.]msn.de"
"5"="[*.]deskmodder.de"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\SaveCookiesOnExit]
"1"="[*.]google.com"
"2"="[*.]google.de"
"3"="[*.]msn.com"
"4"="[*.]msn.de"
"5"="[*.]deskmodder.de"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist]
"1"="ofefcgjbeghpigppfmkologfjadafddi"
"2"="ghbmnnjooekpmoecnnnilnnbdlolhkhi"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist]
; UBlock Origin
"1"="odfafepnkmbhccpbejgmiehpchacaeak;https://edge.microsoft.com/extensionwebstorebase/v1/crx"
; I don't care about cookies
"2"="oholpbloipjbbhlhohaebmieiiieioal;https://edge.microsoft.com/extensionwebstorebase/v1/crx"
; No-Script Suite Lite
"3"="ddlimelbabkhbgghepggfibfmmecbjfg;https://edge.microsoft.com/extensionwebstorebase/v1/crx"
; Amazing Dark Mode
;"4"="ncefecfklnliokjogbaaejkllpphefdp;https://edge.microsoft.com/extensionwebstorebase/v1/crx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\InsecureContentAllowedForUrls]
"1"="\"[*.]microsoft.com\""
"2"="\"[*.]windowsupdate.com\""
"3"="https://www.catalog.update.microsoft.com/"
"5"="https://store.rg-adguard.net/"

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}]


; # Fake MDM-Enrollment - Key 1 of 2 - let a Win10 Machine "feel" MDM-Managed


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF] 
"EnrollmentState"=dword:00000001 
"EnrollmentType"=dword:00000000 
"IsFederated"=dword:00000000

; # Fake MDM-Enrollment - Key 2 of 2 - let a Win10 Machine "feel" MDM-Managed

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\OMADM\Accounts\FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF]
"Flags"=dword:00d6fb7f
"AcctUId"="0x000000000000000000000000000000000000000000000000000000000000000000000000"
"RoamingCount"=dword:00000000
"SslClientCertReference"="MY;User;0000000000000000000000000000000000000000"
"ProtoVer"="1.2"

; wenn ie laufen soll:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"SuppressUnsupportedOSWarning"=dword:00000001


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\Recommended]
"NewPDFReaderEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"SearchSuggestEnabled"=dword:00000000
"TranslateEnabled"=dword:00000000
"LocalProvidersEnabled"=dword:00000000
"BlockThirdPartyCookies"=dword:00000001
"BackgroundModeEnabled"=dword:00000000
"AlternateErrorPagesEnabled"=dword:00000000
"SmartScreenPuaEnabled"=dword:00000000
"NewTabPagePrerenderEnabled"=dword:00000000
"HubsSidebarEnabled"=dword:00000000
"SmartScreenEnabled"=dword:00000000
"NetworkPredictionOptions"=dword:00000002
"StartupBoostEnabled"=dword:00000000
"WindowsHelloForHTTPAuthEnabled"=dword:00000000
"ShowMicrosoftRewards"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Addons]
"FlashPlayerEnabled"=dword:00000000


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
"{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}"="0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\BooksLibrary]
"UseSharedFolderForBooks"=dword:00000000
"EnableExtendedBooksTelemetry"=dword:00000000
"AllowConfigurationUpdateForBooksLibrary"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main]
"Use FormSuggest"="no"
"AlwaysEnableBooksLibrary"=dword:00000000
"SyncFavoritesBetweenIEAndMicrosoftEdge"=dword:00000000
"SendIntranetTraffictoInternetExplorer"=dword:00000000
"Cookies"=dword:00000001
"FormSuggest Passwords"="no"
"AllowPrelaunch"=dword:00000000


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter]
"EnabledV9"=dword:00000000


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\SearchScopes]
"ShowSearchSuggestionsGlobal"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\ServiceUI]
"ShowOneBox"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader]
"AllowTabPreloading"=dword:00000000


[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\PhishingFilter]
"EnabledV9"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EdgeUI]
"DisableHelpSticker"=dword:00000001

; Wenn kein EDGE:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EdgeUpdate]
"DoNotUpdateToEdgeWithChromium"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"DisableEdgeDesktopShortcutCreation"=dword:00000001

; zusätzlich (nicht Edge spezifisch)
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer]
"DisableSearchBoxSuggestions"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search]
"BingSearchEnabled"=dword:00000000
PDF24 angepasste Installation (nur PDF Druckertreiber) per Script: viewtopic.php?t=30284
Winget (Desktop App Installer) für Windows Versionen ohne Store installieren (HowTo): viewtopic.php?t=26214
Vorstellung: tiny11builder; Script zur Verschlankung von Windows 11: viewtopic.php?t=30134
Windows StartMenü Empfohlen (Recommended Section) komplett ausblenden: viewtopic.php?t=30574
Hyper-V VM per Script erstellen viewtopic.php?t=25114

Antworten