https://www.em-soft.si/myblog/elvis/?p=975

1. Boot from DVD – you need to access to Windows system drive offline – installation DVD has all tools that you need.
2. From menu select Repair your computer. This will give you the ability to change some files.
3. In the next menu select Troubleshot.
4. Select Command prompt. This is what we need – we want to modify some files.
5. Now you need to replace the file:
   1. Go to C: (supposing that C: is your system drive)
   2. Type cd \Windows\System32 – to enter into the folder
   3. Type ren osk.exe osk.old – be smart, you need to preserve the original file and put it back at the end of the process! If you don’t replace it again it means that you leave open a surface attack!!!
   4. Replace the file with a copy C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe osk.exe
6. Reboot the server in normal mode.
7. From the logon screen choose Onscreen keyboard (as in picture).
8. PowerShell window will be opened – and you are a local system user!!! You can do a lot of things.
9. Change the password with command Net user Administrator Password – where Administrator is the username of local or domain administrator and Password is the password that you want to set.
10. Login to server with the new password – just to test that it is working.
11. Reboot the server and redo all the steps from 1 to 5, but in the way to put back all things in the original state. You need to replace original onscreen keyboard:
    1. Go to C:
    2. Type cd \Windows\System32
    3. Type del osk.exe
    4. Replace a file with ren osk.old osk.exe
12. Reboot the server.

If you have Office 365 Business or can’t use Group Policy for some other reason, you can add the preventteamsinstall value to the HKEY_LOCAL__MACHINE\SOFTWARE\Policies\Microsoft\Office\16.0\common\officeupdate key in the registry. The type for preventteamsinstall is REG_DWORD and the value should be set to 1 if you don’t want Teams installed.

xcopy source destination /e /h /r /y

sc \\SERVER_NAME query type= service state= all | find “SERVICE_NAME”

Stop-Computer -ComputerName “SERVER_NAME” -Credential $a

Restart-Computer -ComputerName “SERVER_NAME ” -Credential $a

shutdown /m \\SERVER_NAME /r /t 01

pskill \\SERVER_NAME   winlogon

WBADMIN GET VERSIONS

WBADMIN DELETE BACKUP -keepVersions:5 -quiet

https://superuser.com/questions/1309756/not-able-to-access-ftp-server-from-other-machines-in-same-lan-when-windows-firew

netsh advfirewall firewall add rule name="FTP Inbound" dir=in action=allow program="%windir%\system32\svchost.exe" remoteip=any localip=any protocol=TCP localport=20,21,990,989 remoteport=20,21,990,989 profile=any

netsh advfirewall set global StatefulFTP disable

netsh advfirewall firewall add rule name="FTP Service" action=allow service=ftpsvc protocol=TCP dir=in profile=any

reg add “HKLM\SOFTWARE\Microsoft\Windows Server\ClientDeployment” /v SkipDomainJoin /t REG_DWORD /d 1

Then setup as admin when prompted for user

http://www.surfacetablethelp.com/2018/07/install-microsoft-digital-image-suite-on-windows-10.html

Install app
* First close all running programs and open documents.
* Double click on the Digital Image Suite setup file from you original disk.
* If the User Account Control promptes you to give permission, just authorize it.
* Select a few options available. When it says “The Windows Update: Internet Explorer and Internet Tools cannot be installed on this computer. This product does not install on 64-bit platforms.” message, click OK button to contunie.
* You will get the second usual error “Setup has detected that Microsoft Internet Explorer 6.0 installation was not completed. The installation may have been cancelled, or you may not have enough free space on your disk.” Don’t click it.
Return to your desktop, press the Win+X from your keyboard, click on Shut down or sign out > Sign out.
* Window 10 wait for intervention and cannot carry the operation. Wait a few seconds to sign in again, click on Cancel button > OK. Now the installation runs well.

reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f

icacls %temp% /inheritance:r
icacls %temp% /grant %username%:(OI)(CI)F /T /C
icacls %temp% /grant Administrators:(OI)(CI)F /T /C
icacls %temp% /grant System:(OI)(CI)F /T /C
md %temp%\Low
icacls %temp%\Low /setintegritylevel (OI)(CI)low