Category: Windows

Super God Mode for Windows gives admins what Microsoft does not give them

Posted on by Martin Brinkmann

When it comes to managing a single Windows device, you often have to juggle between various administrative tools. Two of the most-used ones are the Control Panel and the Settings app.

There are dozens more, however, from the Device Manager and Registry to the Task Manager and Group Policy Editor.

Super God Mode is a free open source script for Windows that creates links to virtually all system tools and options that are linkable. Think of it as a next level God Mode.

What is God Mode? For those unaware, God Mode refers to a secret menu that you may create by naming a folder GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}. This folder includes about 200 links to various tools and settings in Windows when opened.

The developers describe Super God Mode in the following way:

This PowerShell script creates shortcuts to all special shell folders, named folders, task links, system settings, deep links, and URL protocols in Windows, providing easy access to a wide range of system settings and features.

Using Super God Mode in Windows

Super God Mode for Windows
Super God Mode’s setup window gives you numerous options

Super God Mode is open source. A PowerShell script sits at the core of the project. The easiest option to use it is the following one:

  1. Download the latest version of the PowerShell script using this link.
  2. Download the latest version of the Batch launcher using this link.
  3. Double-click on the launcher.

This opens the user interface. You can hit the “run script” button right away or use the customization options to change the output.

Tip: if you want all links that exist, check “include third-party app URL protocols” before you run the script.

Other options include changing the output folder name and directory, skip the grouping of tasks, or allowing duplicate links.

The script generates hundreds of links based on the configuration after you hit the run button.

It created more than 1300 links on a Windows 11 test system. Once done, open the Super God Mode folder on the device to use the links.

Super God Mode folder on Windows 11

If you did not disable the grouping, you find the following categories:

  • Hidden App Links — Deep links in various apps, e.g., Microsoft Store, Gamebar, or Xbox.
  • URL Protocols — These launch apps or tools for the most part, e.g., Notepad, PC Health Check, or Microsoft Defender.
  • System Settings — Deep links that point to the Settings app. These enable you to jump to specific Settings pages quickly.
  • Deep Links — Another list of links that launch tools or configuration options, for instance to troubleshoot issues.
  • All Task Links — Includes links to various tools, such as Control Panel applets, Power Options, Folder Options and many more.
  • Special Named Folders — Links to special folders, e.g., Downloads, 3D Objects, Startup, or SendTo.
  • CLSID Shell Folder Shortcuts — Even more links, some of them point to File Explorer folders, others to settings, e.g., Speech Recognition or User Accounts.

If there is one thing to criticize, it is that there are so many links that it will take time to go through them all.

It is easy enough to create a new folder to put all the links that you require into. Still, with more than a thousand links to check, it will take a while.

Closing Words

Super God Mode is a useful tool for Windows administrators who want direct access to Windows tools, directories and settings. It may be overwhelming at first, due to the sheer number of links it produces, but that is only temporary.

Instead of sifting through them all to find the ones you need, you could also use search to find them this way.

Have you used God Mode before on Windows? What is your take on Super God Mode? Feel free to write a comment down below. (via Neowin)

Office

LibreOffice 24.8: you can now block active content in documents

Posted on by Martin Brinkmann

An update for the open source cross-platform office suite LibreOffice is now available. LibreOffice 24.8 is available for all supported systems.

The new version includes over a hundred improved or new features. Several are important from a security point of view.

The details:

  • An option to disable active content and OLE automation is now available.
  • Improved WebDAV/HTTP UCP authentication with Microsoft SharePoint.
  • Improved CMIS UCP authentication with Microsoft SharePoint.
  • Option to remove personal information on saving.
  • ODF Wholesome Encryption is now available. It improves tamper and brute-force resistance, offers improved performance, and improved hiding of metadata.

Several of these options are interesting from an end-users point of view. The ability to disable active content improves security, as it prevents attacks that exploit these options.

LibreOffice 24.8 new security settings

Here is how you enable it:

  1. Open Tools > Options > LibreOffice > Security > Security Options and Warnings > Options-button.
  2. Check “Disable active contents from OLE Objects, DDE and OLE Automation”.

Note: this may impact documents that rely on these technologies.

Here, you may also enable the removal of personal information on saving.

Check “remove personal information on saving” and then what you do not want included. This is supported at the time of writing:

  • Changes information.
  • Document user information.
  • Author name and date of notes.
  • Document version information.
  • Printer settings.

You can check out the full changelog on the official Document Foundation website.

The latest version is available for download already. You can download it from the official website or from within LibreOffice by selecting Help > Check for Updates.

Do you use LibreOffice or another Office program? What is your take on the new security features? Feel free to leave a comment down below.

Is Microsoft really, finally killing the Windows Control Panel?

Posted on by Martin Brinkmann

Almost a decade ago, Microsoft said that the Settings app of the then-new operating system Windows 10 would replace the classic Control Panel of the operating system.

While Microsoft did move some options from the Control Panel to the Settings app over the years, it has, to this day, failed to migrate them all.

On the System configuration tools in Windows help page, Microsoft is now confirming what everyone knew for a long time: the classic Control Panel is deprecated.

Microsoft writes:

The Control Panel is a feature that’s been part of Windows for a long time. It provides a centralized location to view and manipulate system settings and controls. Through a series of applets, you can adjust various options ranging from system time and date to hardware settings, network configurations, and more. The Control Panel is in the process of being deprecated in favor of the Settings app, which offers a more modern and streamlined experience.

While the support page is new, it has not really been a secret that Microsoft has plans to kill the Control Panel.

The classic Windows Control Panel

Now, it is official. But that does not really answer any other questions that users may have:

  • When is Microsoft removing the Control Panel from Windows?
  • Will there be Control Panel features that won’t be ported to the Settings app?

It is quite possible that it will take years, maybe another decade, before the Control Panel is finally removed. Microsoft engineers are busy adding AI features and redesigning Recall. Moving options from Control to Settings is probably very low on the priority list at Microsoft.

Still, some of you may still live when Microsoft is pulling the plug and giving Windows what it deserves: a single app to control options and settings.

Did you know? You can still open the existing Control Panel applets directly.

Do you still use the Control Panel in Windows? Or do you prefer the Settings app, or even a third-party solution? Feel free to write a comment down below. (via Neowin)

Encryption

Windows 11: Device Encryption will be enabled automatically in these cases

Posted on by Martin Brinkmann

The next feature update for Windows 11 enables automatic device encryption for users of the operating system. This happens automatically in the background and for most users, but there are exceptions.

What is Device Encryption and how does it differ from BitLocker Drive Encryption?

Device Encryption is based on BitLocker, Microsoft’s encryption technology. It is an automatic system that will encrypt the Windows partition and other fixed drives.

In other words: most drives that are internal will be encrypted by Device Encryption.

Encryption protects data on the drives to prevent unauthorized access.

BitLocker Drive Encryption on the other hand is only available for Pro, Enterprise, and Education editions of Windows. It gives administrators control over the technology and needs to be enabled manually.

The change in Windows 11 24H2

Starting with the release of Windows 11, version 24H2, Windows 11 will encrypt drives automatically using Device Encryption in the following cases:

  • During first sign-in with a Microsoft account, or work or school account.
  • During first set up of the device, if a Microsoft account is used.

Windows 11 will start the encrypting of the drives immediately in the background.

Windows users who create a local account during set up won’t have their drives encrypted. Microsoft notes here that it is possible to do that manually though.

Note: Microsoft is making it harder and harder to set up Windows without a Microsoft account. It is still possible, but most users are probably unaware of this.

Enabling or disabling Device Encryption manually

Device Encryption setting in Windows 11
Device Encryption setting in Windows 11

You need to sign-in with an administrator account to manage Device Encryption. Also, it is possible that the feature is not supported on the device.

Here is how to find out and manage it:

  1. Select Start and then Settings to open the Settings app.
  2. Go to Privacy & security > Device Encryption.

If you do not see Device Encryption on the page, it is either unavailable on the device or you are signed-in with a standard user account.

Device Encryption offers a simple toggle to turn the feature on or off.

How to find out why Device Encryption is now available

Here is a step-by-step guide on finding out why Device Encryption is not supported.

  1. Open the Start menu.
  2. Type System Information.
  3. Select Run as adminstrator.
  4. Scroll down to Automatic Device Encryption Support or Device Encryption support.
  5. Hover over the entry to see the reason why it is not supported.

What is your take on Device Encryption? Do you use BitLocker encryption on your devices? Let us know in the comments below.

Malware

Three year old Malvertising Campaign is still going strong

Posted on by Martin Brinkmann

One of the most important skills of any Internet user is the ability to distinguish between advertising and organic links. A core reason for that is that advertising is regularly abused for malvertising campaigns.

Malvertising refers to ads that in one way or another attack the user or the user’s device. A simple example is a download ad that pushes a malicious file onto the user’s system.

Security researchers at ReasonLabs have discovered a malvertising campaign that has been around for at least three years.

The details:

  • Polymorphic campaign that installs Chrome and Edge extensions on endpoints.
  • Uses multiple attacks, including search hijacking, stealing private data, or executing commands on the user’s device.
  • At least 300,000 users fell victim to the campaign until now.

How the attack works

The attackers use advertising to push malicious downloads. They use fake download sites for legitimate applications such as YouTube, VLC, or Roblox FPS Unblocker.

Users who fall for this, you guessed it, download a malicious payload to their systems. Here is what happens next:

  1. The executable creates a scheduled task, which is designed to run a PowerShell script.
  2. The PowerShell script downloads a payload from a remote server and runs it on the user’s machine.
  3. It then begins to make changes to the user’s system:
    • Adds policies to enforce the installation of Chrome and Edge installations from the Store (which are malicious).
    • Some versions of the script uninstall browser updates.
    • Tampers with browser .lnk file to load another extension for communication with a control server and stealing search queries.
    • Communicate with command center for status reports and the next stage of execution.

The script blocks uninstallation of the installed extensions, even when Developer Mode of the browser is set to on. Users will also see the “your browser is managed by your organization” message.

The blog post offers a deep dive, which interested or affected users may check out. There is also a section on removing the malware from infected hosts.

This involves:

  • Removing the scheduled tasks.
  • Removing the planted Registry keys.
  • Deleting the malicious files.

Closing Words

The security researchers note that many of the used domains, extensions, and scripts are not detected as malicious at the time of writing. Google and Microsoft were notified according to the blog post.

Which brings us right back to the beginning. Ads are not easily distinguishable from organic results in many cases. Google, for instance, displays a simple “sponsored” text above ads. They look exactly like organic results in any other way.

While experienced users may not have any problems differentiating between the two, less tech-savvy users fall for these.

So, if you want to improve security, you better take a good look at links before you click. If you want to be safer, do not click on ads 🙂

Paint 3D end of support

Microsoft is retiring a Windows app this year that it at one time had high hopes for

Posted on by Martin Brinkmann

When it comes to the dozen or so Windows app that Microsoft ships with Windows, there are several that most users would probably never touch.

Of these, Paint 3D is probably high up on the list of the majority of Windows users. It sits there at the top with the likes of 3D Builder.

Paint 3d came out at a time when Microsoft wanted to push creativity and creating in Windows. It was set out to replace the original Paint application, which was a trustworthy, albeit basic, image editing app for Windows for a long time.

Many users were not pleased with Paint 3D and Microsoft’s course, as interface and functionality were changed. Eventually, Microsoft realized that Paint was the app that won the popularity contest and decided to deprecate Paint 3D.

Paint 3D is now beginning to show an end of support banner in its interface. First reported by Phantom of Earth on Twitter, the banner notifies users that the app will reach end of support soon.

It says:

Paint 3D won’t be available in the Microsoft Store or receive future updates on November 4, 2024.

It is a crushing defeat for the app, considering that a very similar message was displayed in the original Paint app at one time.

It said:

This version of Paint will soon be replaced with Paint 3D. Classic Paint will then become available in the Store.

Paint 3D is not getting the same treatment. The app is already no longer installed on new Windows devices. Soon, users won’t find it listed anymore on the Microsoft Store.

Microsoft does not say if it is going to remove the app if it is installed on user devices. It likely won’t, but it will certainly remind users that the app is no longer supported when it is run.

Do you have any favorites among the default Windows apps? Is Paint 3D on that list? Let us known in the comments below.

Zen Browser

Zen Browser: first look at new open source Firefox-based browser

Posted on by Martin Brinkmann

Recently, there has been a bit of a revival when it comes to forks of the Firefox browser. After Mullvad Browser, it is now Zen Browser that is trying to win the Internet by storm.

The Firefox-based browser is available as an alpha at the time of writing. Despite that, it felt very stable during tests.

The details:

  • Zen Browser is available for Windows, Linux, and macOS.
  • The browser is open source.
  • You can download an installer or a portable version.

Since it is based on Firefox, it shares many of its features with Mozilla’s browser. This includes most of the interface and settings, as well as support for extensions. The interface looks modern and clean.

Here are core differences to Firefox:

  • Tabs are displayed on the sidebar and not horizontally.
  • Split view support to display multiple sites at once.
  • Improved profile management controls.
  • Tab Groups support (coming soon)
  • Telemetry disabled by default.

There may be more. Feel free to leave a comment down below if you spot any other.

Using Zen Browser

Firefox users will feel at home when they use the browser. They can import browsing data and install Firefox add-ons in Zen Browser.

Chrome users who think Firefox looks dated may give the browser a try as well, especially since Chrome is soon disabling old extensions like uBlock Origin.

A core difference is that tabs are displayed on the sidebar on the left. There does not seem to be an option to move tabs to the classic horizontal position. Maybe that is coming at a later point.

The settings include a compact mode, which auto-hides the sidebar and displays it on hover. You may furthermore hide the top title bar as well in that mode.

Another option available is to make the URL bar floating when selected. This moves it to the middle of the browser window automatically.

The New Tab page displays just a search option by default. You can add recent shortcuts and Internet shortcuts with a click on the customize button. There is also an option to enable three types of wallpapers: solid color, abstract, or photos.

A sync feature is also available, which requires creation of an account. Major browser features, such as password management, spell checking, translations (via Firefox Translations), or Developer Tools, are also supported.

Closing Words

Zen Browser is updated regularly right now, but it is still an alpha that is in development. Most users may want to wait for the first stable release to give this browser a try, if they are interested in it.

Another thing that may need improving is that the website reveals little about the team behind the browser. While that is not always a necessity, it would improve trust in the project if that would be made clearer.

All in all, a browser to put on the watchlist to check out again in the future.

Have you tried Zen Browser? What is your take on the browser? Would you use it? Feel free to leave a comment down below.

Microsoft installs KB5001716 update on older versions of Windows

Posted on by Martin Brinkmann

If you still run an older version of Microsoft’s Windows 10 or 11 operating systems, then you may have noticed that Windows update KB5001716 was installed recently on your devices.

It is an important update, here is why:

  • KB5001716 is an update for Windows Update Service components.
  • The update enables Windows to download and install new feature updates for the device automatically.
  • It furthermore detects issues with the Windows Update service and notifies you about any that it finds.

In other words, it is designed to push new versions of Windows onto systems that are no longer supported or about to reach end of support.

Microsoft supports consumer editions of Windows for 18 months. The systems receive security updates and other updates during that time. Updates stop once the version of Windows reaches end of servicing.

Microsoft notes:

f your device is out of support, it is no longer receiving security updates from Microsoft and may become more vulnerable to security risks and viruses. For this reason, we strongly recommend that you update to the latest version of Windows. Each version of Windows is supported for 18 months. After support ends, you must update to a newer version of Windows to continue receiving Windows updates and security fixes.

Here is the (current) list of Windows versions that will receive the update:

  • Windows 11, version 21H2
  • Windows 10, version 22H2
  • Windows 10, version 21H2
  • Windows 10, version 21H1
  • Windows 10, version 20H2
  • Windows 10, version 2004

As you can see, Microsoft is pushing the update to all but the latest versions of Windows 11.

These versions of Windows do not receive the update at the time of writing:

  • Windows 11, version 23H2
  • Windows 11, version 22H2

While this won’t change anymore for Windows 10, expect Windows 11 Version 22H2 to be added to the list soon.

Most Windows users may want to upgrade to new versions of Windows, as it guarantees that security updates continue to be provided by Microsoft.

Users who do not want to upgrade yet or want to keep full control over the updating, may want to prevent the installation of KB5001716.

If the update is installed already, you may check out my guide on uninstalling Windows updates and blocking them afterwards.

Closing Words

Several Windows 10 and 11 versions reach end of servicing in the coming months. While most devices should be upgraded to a newer version by then, there will always be systems that are left behind.

In most cases, this may not be a deliberate decision and the update may help these users in keeping their systems supported.

Which version of Windows, if any, do you run currently? Any particular reason for that, if you do not run the latest version?

Windows 11 Start Menu Companion Phone Link

Microsoft should add an option to hide the Windows Start menu

Posted on by Martin Brinkmann

I use the Windows Start menu a few times per year. It is been replaced by the taskbar and other means to launch programs.

While I run a few searches per year, which open in the Start menu, I do not really use it for anything else. Also, I prefer to use the third-party tool Everything Search for searches, as it is better in most regards.

I have no need for the Start menu anymore

The Windows Start menu offers just a few functions:

  • Launch pad for installed apps.
  • Interface for search results.
  • Shutting down, logging out, or switching users.

I do not need these, with the exception of the occasional use for searches. Also, Microsoft is adding more and more elements to the Start menu that I do not need or want.

I’m talking about the recommendations section that you cannot disable fully, as well as various placements for what I would call advertisement for Microsoft-owned subscription services.

Launch pad for installed apps

All apps that I use regularly are pinned to the taskbar. To launch apps not pinned there, I have the following options:

  • Runbox: using Windows-R to launch, is fast. You need to know the name or shortcut though.
  • Terminal: not as straightforward as Runbox, still might appeal to some.
  • Search: the Search is linked to the Start menu, but it does not need it.
  • File Explorer: manually launching an executable, e.g., a portable app that is not listed in the Start menu by default anyway.

Interface for search results

Search and Start menu are two separate functions, but they are linked as they use the same hull.

It would probably be easy enough to separate them, or split them again. Also, tools like Everything offer a better search experience in many cases.

Sign out or shut down

Windows offers plenty of options to do these, including:

  • Right-clicking the Start button.
  • Using Ctrl-Alt-Del.
  • Running shutdown /f from the command prompt window.

The Start menu is not going anywhere, quite the contrary

Microsoft works constantly on changing the start menu of its Windows operating system. It introduced the dual layout of the start menu in Windows 11 and has tweaked it since then.

It is also working on adding new account functionality to the start menu and extensions, which display content on the sides.

I do not really know how many Windows users use the Start menu on a regular basis. Many might. An option to hide the Start button would be an option to give users the option.

What about you? Do you use the Start menu on Windows? If so, for what specifically? Feel free to write a comment down below.

Windows 11: Microsoft bundling controls for recommendations and offers

Posted on by Martin Brinkmann

One of the main points of criticism in regards to the ever increasing number of recommendations and offers in Microsoft’s Windows 11 operating system is that they cannot be managed from a central location.

If you want to turn them all off elegantly, you either have to go through various sections, or use a third-party application like WinAero Tweaker, or O&O’s ShutUp10++, or one of the many other tools that help users do that.

Recommendations & offers in Windows 11 Settings

Windows 11 Recommendations & Offers Setting
New group of Settings to control ads and promotions in Windows 11. Image source: Phantom of Earth

Microsoft is working on introducing a central location for recommendations and offers. While it is doubtful that this will cover all promotions that Microsoft throws at users nowadays, it at least merges related settings from various locations into a single group in the Settings app.

Discovered by Phantom of Earth and published on X, Recommendations & offers provides the following options at the time of writing:

  • Personalized offers — Get personalized tips, ads, and recommendations based on Windows activity.
  • Allow websites to access my language list.
  • Improve Start and search results — By tracking which apps get opened.
  • Show notifications in Settings.
  • Recommendations and offers in Settings — Allow Windows to show product recommendations and offers in Settings.
  • Advertising ID.

The new group is found under Settings > Privacy & Security. You do need to run the latest Beta of Windows 11 and may need to enable it by running the command .\vivetool /enable /id:49666228,48433719 from an elevated PowerShell prompt.

Closing Words

Clearly, this new group of Settings is still inferior to what tweaking apps offer. It may still expose more of these settings to users who do not use the tweakers or configure their systems using Registry tweaks or policies.

What is your take on this new group of settings? Move in the right direction? Feel free to leave a comment down below.