https://www.mcbsys.com/blog/2010/10/hyper-v-virtual-machine-failed-to-start-after-copying-vhd/

http://support.microsoft.com/kb/2249906

icacls <Path of .vhd file> /grant “NT VIRTUAL MACHINE\<Virtual Machine SID>”:F

SID via XML or Event Log

gpedit.msc
Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives
Require Additional Authentication at startup
Enable then Configure TPM Startup Key
Require Startup Key With TPM
manage-bde -protectors -add c: -TPMAndStartupKey [USB DRIVE LETTER]
manage-bde -status

azcopy.exe copy “k:\PST\mk.pst” “URL”

[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\AutoDiscover]
“ExcludeExplicitO365Endpoint”=dword:00000001

New-ManagementRoleAssignment –Role “Mailbox Import Export” –User “user name”

Lots of tips & tricks:
https://notes.ponderworthy.com/

A free real-time log file monitoring tool:
https://www.baremetalsoft.com/baretail/

Lots of PSEXEC uses:
https://techexpert.tips/windows/windows-using-psexec-examples/

https://sdmsoftware.com/tips-tricks/removing-extra-registry-settings-from-gpos/

Remove-GPRegistryValue -Name “Default Domain Controllers Policy” -Key “HKLM\Software\Policies\Microsoft\W32time\”

Help for when root shows as Local CMOS

net stop w32time
w32tm /unregister
w32tm /register
net start w32time
w32tm /config /manualpeerlist:”0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org 3.pool.ntp.org” /syncfromflags:manual /reliable:yes /update
w32tm /resync /rediscover /nowait
w32tm /config /reliable:yes

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\

Delete all

Check rearm count:
slmgr –dlv

Extend:
slmgr -rearm