Monthly Archives: April 2016

Disable GwX Notifications via SRP GPO

1. Under Computer Configuration, go to Policies, Windows Settings, Security Settings, then Software Restriction Policies.

2. If you haven’t activated Software Restriction Policies, do it now. Once done, you’ll see the following in the main area when Software Restriction Policies is clicked.

3. Right-click on Additional Rules and choose New Path Rule…

4. Create the SRP by copying my configuration below and click OK. Make sure the Path is C:WindowsSystem32GWXGWX.exe and the Security Level is Disallowed.

From here on, you can try running a gpupdate /force or restarting a computer that was affected by Microsoft’s GwX popup. The Windows 10 notification icon should be gone on those affected computers.

Find out what printers a user has mapped remotely

Well, you can take a look at the Win32_Printer WMI class,

Get-WMIObject Win32_Printer -ComputerName $Comp

But, I think this will get you even better results:

New-PSSession $Comp | Enter-PSSession
Get-ChildItem Registry::HKEY_Users$UserSIDPrintersConnections

Without using PS Remoting, you could do this instead:

$Printers = [Microsoft.Win32.RegistryKey]::OpenRemoteBaseKey(Microsoft.Win32.RegistryHive]::Users, $ServerName)

You get the idea. Basically, you need to access that user’s registry key with whatever method and enumerate whatever you find in PrintersConnections.