Category: Windows

Encryption

Windows 11: Device Encryption will be enabled automatically in these cases

Posted on by Martin Brinkmann

The next feature update for Windows 11 enables automatic device encryption for users of the operating system. This happens automatically in the background and for most users, but there are exceptions.

What is Device Encryption and how does it differ from BitLocker Drive Encryption?

Device Encryption is based on BitLocker, Microsoft’s encryption technology. It is an automatic system that will encrypt the Windows partition and other fixed drives.

In other words: most drives that are internal will be encrypted by Device Encryption.

Encryption protects data on the drives to prevent unauthorized access.

BitLocker Drive Encryption on the other hand is only available for Pro, Enterprise, and Education editions of Windows. It gives administrators control over the technology and needs to be enabled manually.

The change in Windows 11 24H2

Starting with the release of Windows 11, version 24H2, Windows 11 will encrypt drives automatically using Device Encryption in the following cases:

  • During first sign-in with a Microsoft account, or work or school account.
  • During first set up of the device, if a Microsoft account is used.

Windows 11 will start the encrypting of the drives immediately in the background.

Windows users who create a local account during set up won’t have their drives encrypted. Microsoft notes here that it is possible to do that manually though.

Note: Microsoft is making it harder and harder to set up Windows without a Microsoft account. It is still possible, but most users are probably unaware of this.

Enabling or disabling Device Encryption manually

Device Encryption setting in Windows 11
Device Encryption setting in Windows 11

You need to sign-in with an administrator account to manage Device Encryption. Also, it is possible that the feature is not supported on the device.

Here is how to find out and manage it:

  1. Select Start and then Settings to open the Settings app.
  2. Go to Privacy & security > Device Encryption.

If you do not see Device Encryption on the page, it is either unavailable on the device or you are signed-in with a standard user account.

Device Encryption offers a simple toggle to turn the feature on or off.

How to find out why Device Encryption is now available

Here is a step-by-step guide on finding out why Device Encryption is not supported.

  1. Open the Start menu.
  2. Type System Information.
  3. Select Run as adminstrator.
  4. Scroll down to Automatic Device Encryption Support or Device Encryption support.
  5. Hover over the entry to see the reason why it is not supported.

What is your take on Device Encryption? Do you use BitLocker encryption on your devices? Let us know in the comments below.

Malware

Three year old Malvertising Campaign is still going strong

Posted on by Martin Brinkmann

One of the most important skills of any Internet user is the ability to distinguish between advertising and organic links. A core reason for that is that advertising is regularly abused for malvertising campaigns.

Malvertising refers to ads that in one way or another attack the user or the user’s device. A simple example is a download ad that pushes a malicious file onto the user’s system.

Security researchers at ReasonLabs have discovered a malvertising campaign that has been around for at least three years.

The details:

  • Polymorphic campaign that installs Chrome and Edge extensions on endpoints.
  • Uses multiple attacks, including search hijacking, stealing private data, or executing commands on the user’s device.
  • At least 300,000 users fell victim to the campaign until now.

How the attack works

The attackers use advertising to push malicious downloads. They use fake download sites for legitimate applications such as YouTube, VLC, or Roblox FPS Unblocker.

Users who fall for this, you guessed it, download a malicious payload to their systems. Here is what happens next:

  1. The executable creates a scheduled task, which is designed to run a PowerShell script.
  2. The PowerShell script downloads a payload from a remote server and runs it on the user’s machine.
  3. It then begins to make changes to the user’s system:
    • Adds policies to enforce the installation of Chrome and Edge installations from the Store (which are malicious).
    • Some versions of the script uninstall browser updates.
    • Tampers with browser .lnk file to load another extension for communication with a control server and stealing search queries.
    • Communicate with command center for status reports and the next stage of execution.

The script blocks uninstallation of the installed extensions, even when Developer Mode of the browser is set to on. Users will also see the “your browser is managed by your organization” message.

The blog post offers a deep dive, which interested or affected users may check out. There is also a section on removing the malware from infected hosts.

This involves:

  • Removing the scheduled tasks.
  • Removing the planted Registry keys.
  • Deleting the malicious files.

Closing Words

The security researchers note that many of the used domains, extensions, and scripts are not detected as malicious at the time of writing. Google and Microsoft were notified according to the blog post.

Which brings us right back to the beginning. Ads are not easily distinguishable from organic results in many cases. Google, for instance, displays a simple “sponsored” text above ads. They look exactly like organic results in any other way.

While experienced users may not have any problems differentiating between the two, less tech-savvy users fall for these.

So, if you want to improve security, you better take a good look at links before you click. If you want to be safer, do not click on ads 🙂

Paint 3D end of support

Microsoft is retiring a Windows app this year that it at one time had high hopes for

Posted on by Martin Brinkmann

When it comes to the dozen or so Windows app that Microsoft ships with Windows, there are several that most users would probably never touch.

Of these, Paint 3D is probably high up on the list of the majority of Windows users. It sits there at the top with the likes of 3D Builder.

Paint 3d came out at a time when Microsoft wanted to push creativity and creating in Windows. It was set out to replace the original Paint application, which was a trustworthy, albeit basic, image editing app for Windows for a long time.

Many users were not pleased with Paint 3D and Microsoft’s course, as interface and functionality were changed. Eventually, Microsoft realized that Paint was the app that won the popularity contest and decided to deprecate Paint 3D.

Paint 3D is now beginning to show an end of support banner in its interface. First reported by Phantom of Earth on Twitter, the banner notifies users that the app will reach end of support soon.

It says:

Paint 3D won’t be available in the Microsoft Store or receive future updates on November 4, 2024.

It is a crushing defeat for the app, considering that a very similar message was displayed in the original Paint app at one time.

It said:

This version of Paint will soon be replaced with Paint 3D. Classic Paint will then become available in the Store.

Paint 3D is not getting the same treatment. The app is already no longer installed on new Windows devices. Soon, users won’t find it listed anymore on the Microsoft Store.

Microsoft does not say if it is going to remove the app if it is installed on user devices. It likely won’t, but it will certainly remind users that the app is no longer supported when it is run.

Do you have any favorites among the default Windows apps? Is Paint 3D on that list? Let us known in the comments below.

Zen Browser

Zen Browser: first look at new open source Firefox-based browser

Posted on by Martin Brinkmann

Recently, there has been a bit of a revival when it comes to forks of the Firefox browser. After Mullvad Browser, it is now Zen Browser that is trying to win the Internet by storm.

The Firefox-based browser is available as an alpha at the time of writing. Despite that, it felt very stable during tests.

The details:

  • Zen Browser is available for Windows, Linux, and macOS.
  • The browser is open source.
  • You can download an installer or a portable version.

Since it is based on Firefox, it shares many of its features with Mozilla’s browser. This includes most of the interface and settings, as well as support for extensions. The interface looks modern and clean.

Here are core differences to Firefox:

  • Tabs are displayed on the sidebar and not horizontally.
  • Split view support to display multiple sites at once.
  • Improved profile management controls.
  • Tab Groups support (coming soon)
  • Telemetry disabled by default.

There may be more. Feel free to leave a comment down below if you spot any other.

Using Zen Browser

Firefox users will feel at home when they use the browser. They can import browsing data and install Firefox add-ons in Zen Browser.

Chrome users who think Firefox looks dated may give the browser a try as well, especially since Chrome is soon disabling old extensions like uBlock Origin.

A core difference is that tabs are displayed on the sidebar on the left. There does not seem to be an option to move tabs to the classic horizontal position. Maybe that is coming at a later point.

The settings include a compact mode, which auto-hides the sidebar and displays it on hover. You may furthermore hide the top title bar as well in that mode.

Another option available is to make the URL bar floating when selected. This moves it to the middle of the browser window automatically.

The New Tab page displays just a search option by default. You can add recent shortcuts and Internet shortcuts with a click on the customize button. There is also an option to enable three types of wallpapers: solid color, abstract, or photos.

A sync feature is also available, which requires creation of an account. Major browser features, such as password management, spell checking, translations (via Firefox Translations), or Developer Tools, are also supported.

Closing Words

Zen Browser is updated regularly right now, but it is still an alpha that is in development. Most users may want to wait for the first stable release to give this browser a try, if they are interested in it.

Another thing that may need improving is that the website reveals little about the team behind the browser. While that is not always a necessity, it would improve trust in the project if that would be made clearer.

All in all, a browser to put on the watchlist to check out again in the future.

Have you tried Zen Browser? What is your take on the browser? Would you use it? Feel free to leave a comment down below.

Microsoft installs KB5001716 update on older versions of Windows

Posted on by Martin Brinkmann

If you still run an older version of Microsoft’s Windows 10 or 11 operating systems, then you may have noticed that Windows update KB5001716 was installed recently on your devices.

It is an important update, here is why:

  • KB5001716 is an update for Windows Update Service components.
  • The update enables Windows to download and install new feature updates for the device automatically.
  • It furthermore detects issues with the Windows Update service and notifies you about any that it finds.

In other words, it is designed to push new versions of Windows onto systems that are no longer supported or about to reach end of support.

Microsoft supports consumer editions of Windows for 18 months. The systems receive security updates and other updates during that time. Updates stop once the version of Windows reaches end of servicing.

Microsoft notes:

f your device is out of support, it is no longer receiving security updates from Microsoft and may become more vulnerable to security risks and viruses. For this reason, we strongly recommend that you update to the latest version of Windows. Each version of Windows is supported for 18 months. After support ends, you must update to a newer version of Windows to continue receiving Windows updates and security fixes.

Here is the (current) list of Windows versions that will receive the update:

  • Windows 11, version 21H2
  • Windows 10, version 22H2
  • Windows 10, version 21H2
  • Windows 10, version 21H1
  • Windows 10, version 20H2
  • Windows 10, version 2004

As you can see, Microsoft is pushing the update to all but the latest versions of Windows 11.

These versions of Windows do not receive the update at the time of writing:

  • Windows 11, version 23H2
  • Windows 11, version 22H2

While this won’t change anymore for Windows 10, expect Windows 11 Version 22H2 to be added to the list soon.

Most Windows users may want to upgrade to new versions of Windows, as it guarantees that security updates continue to be provided by Microsoft.

Users who do not want to upgrade yet or want to keep full control over the updating, may want to prevent the installation of KB5001716.

If the update is installed already, you may check out my guide on uninstalling Windows updates and blocking them afterwards.

Closing Words

Several Windows 10 and 11 versions reach end of servicing in the coming months. While most devices should be upgraded to a newer version by then, there will always be systems that are left behind.

In most cases, this may not be a deliberate decision and the update may help these users in keeping their systems supported.

Which version of Windows, if any, do you run currently? Any particular reason for that, if you do not run the latest version?

Windows 11 Start Menu Companion Phone Link

Microsoft should add an option to hide the Windows Start menu

Posted on by Martin Brinkmann

I use the Windows Start menu a few times per year. It is been replaced by the taskbar and other means to launch programs.

While I run a few searches per year, which open in the Start menu, I do not really use it for anything else. Also, I prefer to use the third-party tool Everything Search for searches, as it is better in most regards.

I have no need for the Start menu anymore

The Windows Start menu offers just a few functions:

  • Launch pad for installed apps.
  • Interface for search results.
  • Shutting down, logging out, or switching users.

I do not need these, with the exception of the occasional use for searches. Also, Microsoft is adding more and more elements to the Start menu that I do not need or want.

I’m talking about the recommendations section that you cannot disable fully, as well as various placements for what I would call advertisement for Microsoft-owned subscription services.

Launch pad for installed apps

All apps that I use regularly are pinned to the taskbar. To launch apps not pinned there, I have the following options:

  • Runbox: using Windows-R to launch, is fast. You need to know the name or shortcut though.
  • Terminal: not as straightforward as Runbox, still might appeal to some.
  • Search: the Search is linked to the Start menu, but it does not need it.
  • File Explorer: manually launching an executable, e.g., a portable app that is not listed in the Start menu by default anyway.

Interface for search results

Search and Start menu are two separate functions, but they are linked as they use the same hull.

It would probably be easy enough to separate them, or split them again. Also, tools like Everything offer a better search experience in many cases.

Sign out or shut down

Windows offers plenty of options to do these, including:

  • Right-clicking the Start button.
  • Using Ctrl-Alt-Del.
  • Running shutdown /f from the command prompt window.

The Start menu is not going anywhere, quite the contrary

Microsoft works constantly on changing the start menu of its Windows operating system. It introduced the dual layout of the start menu in Windows 11 and has tweaked it since then.

It is also working on adding new account functionality to the start menu and extensions, which display content on the sides.

I do not really know how many Windows users use the Start menu on a regular basis. Many might. An option to hide the Start button would be an option to give users the option.

What about you? Do you use the Start menu on Windows? If so, for what specifically? Feel free to write a comment down below.

Windows 11: Microsoft bundling controls for recommendations and offers

Posted on by Martin Brinkmann

One of the main points of criticism in regards to the ever increasing number of recommendations and offers in Microsoft’s Windows 11 operating system is that they cannot be managed from a central location.

If you want to turn them all off elegantly, you either have to go through various sections, or use a third-party application like WinAero Tweaker, or O&O’s ShutUp10++, or one of the many other tools that help users do that.

Recommendations & offers in Windows 11 Settings

Windows 11 Recommendations & Offers Setting
New group of Settings to control ads and promotions in Windows 11. Image source: Phantom of Earth

Microsoft is working on introducing a central location for recommendations and offers. While it is doubtful that this will cover all promotions that Microsoft throws at users nowadays, it at least merges related settings from various locations into a single group in the Settings app.

Discovered by Phantom of Earth and published on X, Recommendations & offers provides the following options at the time of writing:

  • Personalized offers — Get personalized tips, ads, and recommendations based on Windows activity.
  • Allow websites to access my language list.
  • Improve Start and search results — By tracking which apps get opened.
  • Show notifications in Settings.
  • Recommendations and offers in Settings — Allow Windows to show product recommendations and offers in Settings.
  • Advertising ID.

The new group is found under Settings > Privacy & Security. You do need to run the latest Beta of Windows 11 and may need to enable it by running the command .\vivetool /enable /id:49666228,48433719 from an elevated PowerShell prompt.

Closing Words

Clearly, this new group of Settings is still inferior to what tweaking apps offer. It may still expose more of these settings to users who do not use the tweakers or configure their systems using Registry tweaks or policies.

What is your take on this new group of settings? Move in the right direction? Feel free to leave a comment down below.

Ice

This free Windows app promises to make your PC run cooler

Posted on by Martin Brinkmann

Heat is a major problem for electronic devices, especially in the Summer months. Overheating may lead to a whole range of issues, including crashes or reduced performance.

To combat this, PC users have discovered thousands of solutions. From pointing a fan at the PC during the hottest hours to liquid cooling systems or reducing the voltage and frequency of core components such as the processor.

Camomile is a free app that promises to do the latter. It reduces voltage and frequency of the processor to bring down its temperature. I took the app for a test and it surely dropped the temp from 43 degrees Celsius to 36 degrees Celsius in a matter of minutes.

The app displays the current temperature in its interface. I ran several other temperature apps beside it to check the accuracy, and it was good.

Camomile App for Windows interface
App drops temperature of the processor when run

This comes with a bit of a trade-off, as it works similarly to energy-saving techniques. In short, performance may drop slightly when the app is doing its work.

Still, if you are in a dire situation, with CPU temps reaching much higher degrees than I experienced, then you may not mind as much.

Lowering has additional positive effects, including:

  • It may extend battery life.
  • It may reduce the fan noise.

Wayne mentioned the app over on Betanews. Some users reported that Malwarebytes was flagging it as a PUP. Similarly, Dr.Web and CrowdStrike Falcon are flagging the software as well. I did not notice any issues during installation of afterwards.

It does not offer much in terms of functionality. You can enable cooling mode and disable it. Other than that, it displays a temperature graph and temperature information for other components.

Closing Words

There are numerous ways to cool down PC components, especially in the Summer months. Sometimes, all that is needed is to get rid of the pesky dust to get the fans operating at full capacity again.

At other times, you could consider installing more fans or fans that are more powerful than what you have currently. While water-based cooling solutions are cool, they also require a level of expertise that many PC users shy away from.

An app like Camomile may also be sufficient. Surely, you may also use different tools for the same purpose. With that said, Camomile is easy to use and it certainly does reduce the temperature of the processor by a few degrees when run.

What about you? How do you fight heat in Summer to keep your PCs and devices going?

Microsoft continues to abuse Windows for advertising

Posted on by Martin Brinkmann

If you’d ask a 100 Windows users whether they wanted ads displayed to them on a regular basis, chance is that the vast majority would answer with “no”.

This is not keeping Microsoft from pushing the boundaries and introduces more ads in Windows. While Microsoft uses terms such as recommendations, many of them are at their core still ads.

Up until now, most recommend to use Microsoft services, including Game Pass, OneDrive, or Microsoft 365. These are all subscription-based services. While they offer value, it is clearly not for everyone.

Microsoft is already pushing OneDrive via the recently introduced Windows Backup feature. This is not a full backup solution, as it limits backups to a few folders and some data.

While free to use, apart from the Microsoft account requirement, Microsoft is pushing two services with its recommendations:

  • Microsoft accounts, as these are required to make use of the OneDrive backup feature.
  • Microsoft 365 and OneDrive subscriptions, to increase the default 5 gigabytes of storage.

The first is obvious. You need a Microsoft account to use it. Microsoft has not made it a secret that it prefers this account type over local accounts. Among the reasons are better customer retention and that it gathers more data about customers.

The default 5 gigabyte limit is shared across several services, with backup being one of them. It is relatively easy to get near the limit, considering that Pictures, Music, and Video folders can be backed up.

Add the fact that backups will run automatically starting with Windows 11 version 24H2, and you end up with lots of customers who need more storage for the backup solution. This in term brings in revenue for Microsoft, as subscriptions increase.

Backup ads in the Notification area

Reports suggest that Microsoft is pushing a rather scary sounding notification to user systems. It states “Your PC is not fully backed up” and shows a yellow exclamation-mark image.

It is interesting to note that Windows Backup will never fully back up the system. Microsoft’s notification may lull some users into a sense of security when they activate the “back up now” button.

These backups won’t help if Windows fails to boot, for instance after a botched security or Windows update.

You need a full backup solution for that, and that is something that Microsoft does not offer.

While you can dismiss the notification, it will reemerge eventually. There does not seem to be an option to turn it off entirely, at least not in the Windows Settings or in the Backup app.

Closing Words

The recommendations seem to generate enough revenue or other positive effects for Microsoft to ignore the criticism surrounding them. Whether there will be a breaking point remains to be seen.

For now, expect more recommendations / ads in Windows going forward.

Do you mind this on your systems, or are you unaffected?

How to use Windows’ emergency restart feature

Posted on by Martin Brinkmann

If you are a Windows user, you may have encountered situations where the system appears to be stuck. Programs do not open at all anymore or very slowly, or you see a dreaded loading animation on the screen that does not go away, no matter how long you wait.

The good old “have you tried turning it off and on again” fixes these kinds of issues often.

The IT Crowd: Have you tried turning it off and on again

Sometimes however, turning off the computer or restarting it is not as easy as it may sound. What if clicking on the Start icon does nothing? While there are numerous ways of turning off the PC, not all are equal.

Note: if nothing works, pressing and holding the power button of the PC will restart the computer eventually.

Emergency Restart in Windows

One of the ways that users tackle an unresponsive PC is by pressing Ctrl-Alt-Del. This keyboard combination displays several actions in a fullscreen window.

The main actions are lock, switch user, sign out, and cancel. There is also a power button in the lower right corner, which you may use to restart or shut down the PC.

The Ctrl-Alt-Del window of the Windows operating system

What many may not know is that there is also an emergency restart option hidden on the screen. All you have to do to activate it is to hold down the Ctrl-key on the keyboard before clicking on the power button.

Instead of displaying the restart and shut down options, Windows shows the emergency restart screen.

The Emergency restart option of the Windows operating system

Here, you simply click on the ok button to restart the PC immediately.

Windows informs you that any work that has not been saved may be lost during the process. It even warns, rather dramatically, that this should only be used as the last resort.

Closing Words

So, if you run into a situation where the usual options to restart the Windows PC may not work, you could give this emergency restart option a try, provided that you can still get into the Ctrl-Alt-Del interface.

What is your preferred way of restarting or shutting down Windows when things do not work anymore?