Windows 10: User CSP MDM and Kerberos updated 2/21/24 21:47CST

I have been subject to "sophisticated" cyber issues since 2022. There is a reason but I do not fall into the political, a journalist, in the government, etc... yet even Apple has informed me they can do no more.I have struggled just to get this far reaching community assistance. Verizon tells me they do not assist with 'hacking'. Apple tells me to seek assistance via 3rd Party Security Software. It is quite complicated and has been impossible to find assistance. No one will even confirm that I have always been speaking with any 'real' representative; except when I went to the Apple store.I

:)

 

User CSP MDM and Kerberos

I have been subject to "sophisticated" cyber issues since 2022. There is a reason but I do not fall into the political, a journalist, in the government, etc... yet even Apple has informed me they can do no more.

I have struggled just to get this far reaching community assistance.

Verizon tells me they do not assist with 'hacking'. Apple tells me to seek assistance via 3rd Party Security Software.

It is quite complicated and has been impossible to find assistance. No one will even confirm that I have always been speaking with any 'real' representative; except when I went to the Apple store.

I have reason to believe and I do feel 100% that my devices have been compromised via MDM and kerberos.

It is complicated.

It began with my OneDrive being compromised (due to information in it), leading to my Azure account, Verizon, Amazon, Apple, Google, etc... my entire life.

I am not here to discuss Azure. That is now a moderately separate issue that I am working on.

That is all some background information that may be useful.

I have already tried everything I think is possible to someone without professional resources.

That applies to accounts, multiple devices, operating systems, learning code, networking, software, hardware, and more. Please just ask me if I have tried "?"

I am a very dedicated learner.

When I create passwords I am even careful about which characters, letters and numbers I start/end with and the way I combine them- just to make it more difficult to 'accidentally' execute in a script. Yes, that is extreme. I doubt someone is doing that, but that is an example of how sophisticated and persistent this has been.

I have a voluminous amount of information but I am trying to keep my posts specific.

Recently I found the following in my Windows 10 Home registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\AllowForestSearchOrder]
"admxMetadataDevice"=hex:

[I am excluding the actual decimal]

"Behavior"=dword:00000060
"mergealgorithm"=dword:00000003
"policytype"=dword:00000001
"RegKeyPathRedirect"="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\Parameters"
"RegValueNameRedirect"="UseForestSearch"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\KerberosClientSupportsClaimsCompoundArmor]
"admxMetadataDevice"=hex:

[I am excluding the actual decimal]
"Behavior"=dword:00000060
"mergealgorithm"=dword:00000003
"policytype"=dword:00000001
"RegKeyPathRedirect"="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\Parameters"
"RegValueNameRedirect"="EnableCbacAndArmor"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\RequireKerberosArmoring]
"admxMetadataDevice"=hex:

[I am excluding the actual decimal]
"Behavior"=dword:00000060
"mergealgorithm"=dword:00000003
"policytype"=dword:00000001
"RegKeyPathRedirect"="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\Parameters"
"RegValueNameRedirect"="RequireFast"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\RequireStrictKDCValidation]
"admxMetadataDevice"=hex:

[I am excluding the actual decimal]
"Behavior"=dword:00000060
"mergealgorithm"=dword:00000003
"policytype"=dword:00000001
"RegKeyPathRedirect"="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\Parameters"
"RegValueNameRedirect"="KdcValidation"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\SetMaximumContextTokenSize]
"admxMetadataDevice"=hex:

[I am excluding the actual decimal]
"Behavior"=dword:00000060
"mergealgorithm"=dword:00000003
"policytype"=dword:00000001
"RegKeyPathRedirect"="System\\CurrentControlSet\\Control\\Lsa\\Kerberos\\Parameters"
"RegValueNameRedirect"="EnableMaxTokenSize"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Kerberos\UPNNameHints]
"Behavior"=dword:00000220
"mergealgorithm"=dword:00000003
"policytype"=dword:00000001
"RegKeyPathRedirect"="System\\CurrentControlSet\\Control\\Lsa\\Kerberos\\Parameters"
"RegValueNameRedirect"="UPNNameHints"
"value"=""

I also found:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\ServerConfig\com.vzwdmserver\CustomAlertConfiguration]
"AlertData"="Y2hlY2tDb25maWd1cmF0aW9u"
"AlertDataType"=dword:00000006
"AlertSourceUri"="./Device/CheckConfiguration"
"AlertType"="org.openmobilealliance.dm.firmwareupdate.userrequest"

Asking for insight is most likely more helpful than trying to learn every single thing on my own.

 

CSP

Hi,



Thank you for writing to Microsoft Community Forums.



We understand your concern, as you are looking for an option to Custom CSP for Installing WindowsDefenderApplicationGuard.



We would like you to refer this WindowsDefenderApplicationGuard
CSP article and check if that helps you to customize CSP.



However, we would suggest you to post your query in
TechNet forums, where we have experts and support professionals
who are well equipped with the knowledge on WindowsDefenderApplicationGuard to assist you with the appropriate troubleshooting steps.



Aditya Roy


Microsoft Community – Moderator

 

Windows update stuck on 10/21/2018

I am currently running Windows 10 Ver 1803 os 17134.471 on an Acer aspire V5 x64, I noticed that Wiows update says the last time it checked for updates was 10/21/2018 so I force checked and after a while it said I am up to date with the same date (10/21/2018)
I sis SFC and its said all ok, followed by the bat file to stop services, rename directories restart services etc and still my laptop is stuck on this date for updates, does any one have any suggestions?

Merry Xmas

Ganesh