PROBLEM: PIN Sign-in is disabled on domain joined W10 machine

On Local Group Policy Editor enable this GPO:

Computer Configuration -> Administrative Templates -> System -> Logon -> Turn on pin sign-in

Or add this Reg Key:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
“AllowDomainPINLogon”=dword:00000001

Enabling PIN is also necessary for user/enable Windows Hello. If Windows Hello is grey, add this key.

Advertisements

Problem: Windows 10 CU – Sync Settings not available

Starting from Windows 10 Build 1703 you can’t anymore sync settings with a Microsoft account if the computer is joined to an AD domain.

“If your machine is domain joined, you will notice your “Sync my settings” option is disabled for your MSA account. Thanks for submitting feedback regarding this! We’ve removed support for syncing of settings for MSA accounts on domain joined machines

I found a nice solution for that but you need a machine where the sync is working, so backup your reg for the future :-)

1- Export the key:
HKEY_USERS.DEFAULT\Software\Microsoft\IdentityCRL\StoredIdentities[MSA account]
2- and import it to the new installed windows 10 CU machine.
3- Reboot

Via: https://social.technet.microsoft.com/Forums/en-US/800efd49-5252-4d80-9c02-ce82d6f47af4/sync-settings-not-available-for-windows-10-build-1703-for-workplace-domain-joined-desktops?forum=win10itprogeneral

Problem: Can’t move the folder because there is a folder in the same location that can’t be redirected. Access is denied.

On a Windows 10 CU I was no more able to redirect “Documents” folder to default.

The error was:

Can’t move the folder because there is a folder in the same location that can’t be redirected. Access is denied.

Follow this KB for solve the problem:
https://support.microsoft.com/en-us/help/2936105/operation-to-change-a-personal-folder-location-fails-in-windows

How to Write on the same line with Write-Output

Powershell cmdlet Write-Output on some case is preferable instead of Write-Host; I need to use Start-Transcript and (probably a bug) Write-Host do not make any entry on transcript file.

But Write-Output is missing some nice features like -nonewline.. I need to append a string on the same line of previous output:

try {
    start-transcript -path C:\transcript.txt -Append
    # My Job
    Write-Output "1 - Job one"
    [console]::setcursorposition($([console]::Cursorleft + 25),$([console]::CursorTop - 1))
    Move-Item C:\Test.txt C:\TestDone.txt -force -ea Stop
    Write-Output "    [OK]"
}
catch [Exception] {
    Write-Output "    [FAIL]"
    $ScriptError = $_.Exception.Message
    Write-Warning $ScriptError
}
finally {
    Stop-Transcript
}

The trick was done by:

[console]::setcursorposition

[console]::Cursorleft is your current column
[console]::CursorTop is you current line

Probably with the same trick you can overwrite the previews output…