Group Policy Archives

Tech Optimizer

August 26, 2026

How to Protect Against Ransomware: 13 Steps [2026]

Global ransomware attacks increased by 0.8% quarter-over-quarter in Q2 2026. The group Qilin has 279 confirmed victims, maintaining its position as the leading threat actor for four consecutive quarters. The rival group The Gentlemen saw a 62% increase in victims, reaching 269. Checkpoint Research's report indicates a shift in the ransomware landscape, challenging the narrative of declining attacks. IBM's analysis shows breaches within supply chains and third-party vendors have quadrupled over the past five years. Effective ransomware protection requires administrative access to endpoints, firewalls, and backup systems, along with specific software versions and tools. The 3-2-1-1-0 backup strategy is recommended, emphasizing offline, immutable backups. Organizations should implement multi-factor authentication (MFA) across all access points and actively patch known vulnerabilities. Network segmentation is crucial to limit ransomware spread, and canary files can provide early warnings of attacks. Regular phishing simulations and a well-documented incident response plan are essential for preparedness.

Winsage

August 21, 2026

Windows 11 26H2 will auto-enable Point-in-Time Restore by default, how to check yours

Microsoft is introducing the Point-in-Time Restore feature in Windows 11 26H2, which will be enabled by default. This feature allows users to create backup points for their PCs, enabling them to revert to a previous state, including applications, settings, and files. It uses the Volume Shadow Copy Service (VSS) to create backup snapshots while applications are in use and retains backups for up to 72 hours, generating new backups every 24 hours. The feature will be automatically activated for eligible systems with a Windows OS volume of 200GB or larger when Windows 11 26H2 is released, expected between late September and early October 2026. Users can manually enable it on smaller volumes, and enterprise administrators can block it via Group Policy.

Winsage

August 17, 2026

Windows 11 movable taskbar edges closer to general release

Windows 11 has introduced a movable taskbar in the Release Preview Channel, allowing users to position it at the top, left, or right of the screen, in addition to the bottom. This feature returns after being removed from Windows 11 and follows testing in the Windows Insider Program. The Release Preview also includes a compact taskbar option with smaller icons and reduced height, customization options for the Start menu (small and large layouts), and updates to Windows Search that enhance reliability by filtering out Microsoft Store and web suggestions. Additionally, Administrator protection is now available for elevated tasks using just-in-time privileges, which can be activated through Intune or Group Policy. Microsoft has officially retired the Windows Management Instrumentation Command-line (WMIC), which has been deprecated and absent in new installations of Windows 11 versions 24H2 and 25H2. Users are advised to use PowerShell as the preferred alternative.

Winsage

August 5, 2026

How to Disable Windows Recall in Windows 11 Home and Pro

Microsoft's Windows Recall feature captures periodic snapshots of user screens on Copilot+ PCs with Neural Processing Units (NPUs) to create a visual timeline of digital activities. Users can pause, disable, or remove Windows Recall on Windows 11 Home or Pro, but system updates may reactivate it. Methods to disable Windows Recall include: 1. Settings Toggle: Users can turn off snapshot collection through the Privacy & Security settings and reset recorded history. 2. Windows Optional Features: Users can uninstall the Recall feature via the optional features menu. 3. Group Policy Management: Windows 11 Pro users can block Recall through the Group Policy Editor. 4. Registry Editor Modification: Windows 11 Home users can modify the registry to disable Recall, though this method carries risks. Each method requires specific steps and may necessitate a system restart to take effect.

Winsage

July 24, 2026

Microsoft is cracking down on Windows 11 bloatware ads, forces LG to pull McAfee popup

LG will disable the McAfee ad pop-up in its Monitor App Installer following consumer dissatisfaction and Microsoft's intervention. Users reported that the app was silently installed via Windows Update, leading to unsolicited McAfee trial ads. LG stated that McAfee is not installed without user consent and blamed Microsoft's distribution process, but many users experienced the pop-up without prior consent. Microsoft confirmed LG's agreement to disable the pop-up within three days, emphasizing a commitment to improving user experience. The incident highlights concerns over silent installations and the necessity of third-party antivirus software for Windows 11 users.

Winsage

July 23, 2026

LG monitors are reportedly automatically installing bloatware on Windows 11 PCs, but there’s an apparent fix

LG monitors are automatically installing McAfee bloatware on Windows 11 PCs without user consent, as indicated in the changelog of the LG Monitor App Installer on the Microsoft Store. This installation occurs when an LG monitor is connected, leading to a McAfee pop-up due to automatic installation triggered by Windows Update, which is logged by the Windows Reliability Monitor. Users can prevent this by enabling a setting in the Group Policy Editor to stop automatic downloads of applications linked to device metadata. It is recommended that users who have manually installed the LG monitor app remove it, as McAfee is a core component of the application. Microsoft has not commented on this issue.

Winsage

July 21, 2026

LG admits its monitor app installs bloatware via Windows Update, and Microsoft is letting it happen

A growing number of LG monitor users have reported that connecting their devices to Windows systems results in the automatic installation of the LG Monitor App Installer, which prompts users with a McAfee trial advertisement. YouTuber Gamers Nexus found that connecting an LG UltraGear monitor led to the installation of LG's driver package and the LG Monitor App Installer, with the McAfee pop-up appearing 31 times over 32 boots. This automatic installation is facilitated by device metadata, which Windows uses to download associated applications without user notification. Users must be signed into the Microsoft Store and connected to the internet for this to occur, leading to frustrations about transparency. Reports of unsolicited McAfee pop-ups have been shared on platforms like Reddit, with users confirming the app's installation was logged as part of a Windows Update. LG has acknowledged the inclusion of McAfee in their app updates, promoting a free trial, which has raised privacy concerns. The app's rating on the Microsoft Store has dropped to around 1 out of 5 due to user dissatisfaction. Users can prevent automatic installations by adjusting Group Policy settings, while macOS requires manual approval for third-party applications. Neither Microsoft nor LG has formally addressed the concerns regarding silent installations and McAfee pop-ups.

Winsage

July 20, 2026

LG’s monitors come with an unwanted addition for Windows: McAfee pop-up ads

The LG Monitor App Installer installs itself by default, resulting in unwanted ad notifications for users. When connecting a new LG UltraGear monitor to a Windows 11 PC, the LG driver updates and the Monitor App Installer are installed silently via Windows Update without user notification or permission. The app does not provide unique controls but redirects users to other LG applications and promotes McAfee antivirus. Complaints about the app's auto-installation have increased, particularly regarding large pop-up ads. Microsoft allows developers to pair a Hardware Support App with the Windows Store for automatic installation, but this can confuse users. Similar practices exist with Dell's Alienware Command Center app. Users can prevent the LG app from auto-installing through group policy settings or by opting out of automatic downloads in system settings. The LG Monitor App Installer requests extensive permissions and collects device data, internet activity, and geolocation information without explicit user consent.

Winsage

July 20, 2026

Enable BitLocker on Windows 11: 11 Steps, 45 Min [2026]

A stolen laptop can lead to a significant data breach, particularly when taken from public places. Windows 11 has introduced BitLocker, a full-disk encryption feature that became mandatory for Australian businesses in 2026. The Office of the Australian Information Commissioner reported 766 notifiable data breaches in the latter half of 2024, with unauthorized access to devices being a major cause. Full-disk encryption is crucial for compliance with the Essential Eight framework, which mandates data protection on portable devices. BitLocker ensures that data on an encrypted drive becomes unreadable if the drive is removed and connected to another computer. It aligns with the Essential Eight framework, requiring evidence of encryption rather than just claims of protection. There are three types of encryption on Windows 11: Device Encryption, BitLocker Drive Encryption, and File-Level Encryption. BitLocker is available only on Windows 11 Pro and higher editions. To use BitLocker, certain prerequisites must be met, including having Windows 11 Pro or higher, a Trusted Platform Module (TPM) 2.0, UEFI firmware with Secure Boot enabled, and local administrator rights. The process to enable BitLocker involves confirming the edition, checking TPM status, enabling BitLocker through Windows Settings or PowerShell, and backing up the recovery key. Organizations can deploy BitLocker fleet-wide using Microsoft Intune, and additional security measures like TPM+PIN can be implemented for pre-boot authentication. Common pitfalls during BitLocker rollout include skipping recovery key backup and assuming that Home edition machines are covered. Troubleshooting common BitLocker issues involves identifying symptoms and applying appropriate fixes. Advanced tips for enhancing security include suspending BitLocker before maintenance and auditing compliance at the fleet level. BitLocker is integral to protecting data on portable devices, and compliance documentation is essential for proving that every device has an active recovery key.

Winsage

July 20, 2026

July 2026 Patch Tuesday: KB5101650 Windows 11 Update

On July 14, 2026, Microsoft released cumulative update KB5101650 for Windows 11 versions 25H2 and 24H2, addressing OS Builds 26200.8875 and 26100.8875. This update includes essential security fixes, updates to Secure Boot certificates, and enhanced Remote Desktop Protocol (RDP) defenses against phishing attacks. It consolidates July 2026's security content, addressing known vulnerabilities and introducing functional improvements. The update is critical for minimizing exposure to identified threats and is prioritized for systems managing remote access or nearing certificate expiration. The update enhances Remote Desktop security by supporting SHA-2 certificate thumbprints while retaining SHA-1 for legacy compatibility. It includes new Group Policy options to mitigate phishing risks associated with malicious .rdp files. The curl upgrade to version 8.21.0 incorporates security patches for command-line tools in Windows environments. Secure Boot certificates are automatically updated through Windows updates, ensuring boot security across various hardware. KB5101650 installs primarily through the Windows Update interface, requiring a restart to activate changes. Enterprise environments can use the Microsoft Update Catalog for manual distribution. A temporary restriction affects certain Dell devices with Intel Innovation Platform Framework drivers, which Microsoft plans to address in a future update. The cumulative update resolves a total of 622 Microsoft CVEs, including 416 affecting Windows components. Users are advised to verify and install the update promptly to secure the full suite of improvements.