Local Group Policy Editor

Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Remote Session Environment > RemoteFX for Windows Server

Configure RemoteFX  – Enabled
Optimize visual experience when using RemoteFX  – Enabled
Optimize visual experience for Remote Desktop Service Session – Enabled

Use the hardware default graphics adapter for all Remote Desktop Services Sessions  – Enabled
Configure compression for RemoteFX data – Enabled
Use WDDM graphics display driver for Remote Desktop Connections – Disabled

https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3?tabs=server

Detect Audit:

Get-SmbServerConfiguration | Select AuditSmb1Access

Enable Audit:

Set-SmbServerConfiguration -AuditSmb1Access $true

Disable Audit:

Set-SmbServerConfiguration -AuditSmb1Access $false

https://www.mcbsys.com/blog/2010/10/hyper-v-virtual-machine-failed-to-start-after-copying-vhd/

http://support.microsoft.com/kb/2249906

icacls <Path of .vhd file> /grant “NT VIRTUAL MACHINE\<Virtual Machine SID>”:F

SID via XML or Event Log

gpedit.msc
Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives
Require Additional Authentication at startup
Enable then Configure TPM Startup Key
Require Startup Key With TPM
manage-bde -protectors -add c: -TPMAndStartupKey [USB DRIVE LETTER]
manage-bde -status

azcopy.exe copy “k:\PST\mk.pst” “URL”

[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\AutoDiscover]
“ExcludeExplicitO365Endpoint”=dword:00000001

New-ManagementRoleAssignment –Role “Mailbox Import Export” –User “user name”

New-ManagementRoleAssignment -Role “Mailbox Import Export” -SecurityGroup “Organization Management” -Name “Import Export Org Management”

Might need:

Enable-OrganizationCustomization

Lots of tips & tricks:
https://notes.ponderworthy.com/

A free real-time log file monitoring tool:
https://www.baremetalsoft.com/baretail/

Lots of PSEXEC uses:
https://techexpert.tips/windows/windows-using-psexec-examples/

https://sdmsoftware.com/tips-tricks/removing-extra-registry-settings-from-gpos/

Remove-GPRegistryValue -Name “Default Domain Controllers Policy” -Key “HKLM\Software\Policies\Microsoft\W32time\”