Cara Mengaktifkan dan Menonaktifkan Control Flow Guard (CFG) di Windows Menggunakan PowerShell

Control Flow Guard (CFG) adalah fitur keamanan yang dirancang untuk membantu melindungi sistem Anda dari eksploitasi. Dalam tutorial ini, kita akan membahas cara mengaktifkan atau menonaktifkan CFG menggunakan PowerShell di Windows.

Mengaktifkan CFG Sistem-wide

Ikuti langkah-langkah berikut untuk mengaktifkan CFG di seluruh sistem:

• Buka PowerShell dengan hak administrator.
• Untuk mengaktifkan CFG secara sistem-wide, jalankan perintah berikut:

Set-ProcessMitigation -System -Enable CFG

Untuk memeriksa apakah CFG telah diaktifkan, gunakan perintah ini:

Get-ProcessMitigation -System

Scroll ke bawah pada bagian CFG dan pastikan Enable: ON.

Setelah itu, restart PC Anda untuk menerapkan perubahan.

How to set dns.adguard.com as Private DNS in Bluestack 5

 - First download Adb tool from here : Android Debug Bridge (adb). Extract the file after the download completed. 

- Open cmd inside the adb folder.

- Enable adb debugging in Bluestack setting, then connect adb to Bluestack 5 :

adb connect 127.0.0.1:5555
adb devices

- Make sure you see 127.0.0.1:5555 device. 

- Set AdGuard as Private DNS hostname (DoT)  :

adb -s 127.0.0.1:5555 shell settings put global private_dns_mode hostname
adb -s 127.0.0.1:5555 shell settings put global private_dns_specifier dns.adguard.com

- Confirm values:

adb -s 127.0.0.1:5555 shell settings get global private_dns_mode
adb -s 127.0.0.1:5555 shell settings get global private_dns_specifier

- If it shows "hostname" and "dns.adguard.com", then it's working correctly. 

- If you want to disable dns.adguard.com, run this command with adb :

adb -s 127.0.0.1:5555 shell settings put global private_dns_mode off

- If you ever want it fully clean (no leftover values), you can optionally also run: :

adb -s 127.0.0.1:5555 shell settings put global private_dns_mode off
adb -s 127.0.0.1:5555 shell settings delete global private_dns_specifier

Heroes of Newerth: Reborn Diskless Launcher

- First, create a new document inside Juvio installation directory ( don't create inside bin folder ) and copy  paste the script below : 

@echo off
reg export "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Heroes of Newerth: Reborn" reg1.reg
reg export "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Juvio" reg2.reg
copy /Y reg*.reg juvio.reg
del reg*.reg
exit

- Then save it as "hon_update_registry.bat" . Run it once.

- Download this vcredist.exe version 14.44.35211.0 from here : VC_redist.x64.exe . Rename the file to "vcredist" and copy it to the Juvio directory folder.

- Second, create a new document again and copy paste the script below :

@echo off
vcredist.exe /install /quiet /norestart
regedit /s juvio.reg
start "" "bin\juvio.exe"
exit

- Then save it as "hon_launcher.bat" . Use it as Diskless launcher for client.

Tiktok live Diskless Launcher

- Go to %appdata% , cut "TikTok LIVE Studio" folder. Paste inside Tiktok Live Studio in your game disk drive.

- Create a new document, copy and paste the following scripts inside it. Save it as "Tiktok_live_launcher.bat"

@echo off
mklink /J "%appdata%\TikTok LIVE Studio\" "TikTok LIVE Studio"
start "" "TikTok LIVE Studio Launcher.exe"
exit

Steam Registry to make Playnite recognize the Steam installation

 Export these registry keys from your diskless server and merge it to client registry :

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Valve]
[HKEY_CURRENT_USER\Software\Valve]

New update of Steam requires a service called "Steam Client Service". First copy this folder "C:\Program Files (x86)\Common Files\Steam" to Gamedisk. Then change the service imagepath to the gamedisk e.g., "D:\Master\Steam\steamservice.exe" /RunAsService in this registry key :

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Steam Client Service]

Allow or Deny Windows and Apps Access to Camera for All Users using a REG file

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam]
"Value"="Allow"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam]
"Value"="Allow"

Value string value

Deny = Off 

Allow = On

If camera app shows error "can't start camera error code 0xa00f429f <WindowShowFailed> (0x800706D9)", open services.msc and set "Windows Camera Frame Server" startup type to manual.

Source

Pin Shortcut to Taskbar in Windows 11 for Diskless Environtment

Case : Pin Menu Order shortcut to the taskbar in Windows 11. Each Pc has a different link menu that identifies the pc name.

- First create each shortcut for all the Pc.

- Create new document, then paste the following script . Then save it as "Menu.bat" :

@echo off
if %computername% equ HIGH1 copy "Menu Order HIGH1.lnk" "%USERPROFILE%\Desktop\Menu Order.lnk" & copy "Menu Order HIGH1.lnk" "%AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Menu Order.lnk"
if %computername% equ HIGH2 copy "Menu Order HIGH2.lnk" "%USERPROFILE%\Desktop\Menu Order.lnk" & copy "Menu Order HIGH2.lnk" "%AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Menu Order.lnk"
if %computername% equ HIGH3 copy "Menu Order HIGH3.lnk" "%USERPROFILE%\Desktop\Menu Order.lnk" & copy "Menu Order HIGH3.lnk" "%AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Menu Order.lnk"
if %computername% equ HIGH4 copy "Menu Order HIGH4.lnk" "%USERPROFILE%\Desktop\Menu Order.lnk" & copy "Menu Order HIGH4.lnk" "%AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Menu Order.lnk"
if %computername% equ HIGH5 copy "Menu Order HIGH5.lnk" "%USERPROFILE%\Desktop\Menu Order.lnk" & copy "Menu Order HIGH5.lnk" "%AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Menu Order.lnk"
exit

- Boot up one of the Pc normally. Pin the shorcut manually to the taskbar.

- Export the following registry and save it as "taskbar.reg" . Then copy this reg file to Server :

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]

Razer Synapse Diskless Launcher

- First, install Razer Synapse, don't install other Razer applications.

- After the installation is completed, go to "C:\Program Files" and then cut the "Razer" folder. Paste the folder into your game disk drive.

- Create new folder, then rename it to Local.Go to %localappdata% , then cut "Razer" folder and paste it into the Local folder we created earlier.

- Go to %ProgramData% , then cut "Razer" folder and paste it inside "Razer" folder directory.

- Create new document inside the Razer directory, then rename it as "Update_Razer_registry.bat". Copy paste the script below into it, save it and run it once :

@echo off
reg export "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Razer" reg1.reg
reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Razer" reg2.reg
reg export "HKEY_CURRENT_USER\Software\Razer" reg3.reg
copy /Y reg*.reg razer.reg
del reg*.reg
exit

- Create new document  inside the Razer directory again, then rename it as "Razer_launcher.bat". Copy paste the script below into it, save it and run it once. Use this file as Diskless launcher for client :

@echo off
regedit /s razer.reg
mklink /J "C:\Program Files\Razer\" "%~dp0"
mklink /J "C:\ProgramData\Razer\" "Razer"
mklink /J "%localappdata%\Razer\" "Local\Razer"
start "" "C:\Program Files\Razer\RazerAppEngine\RazerAppEngine.exe" --url-params=apps=synapse
exit

Fix TPM Ready For Attestation : False

- First open taskschd.msc.

- Then go to this section Task Scheduler Library - Microsoft - Windows - TPM . Enable these two tasks : Tpm-HASCertRetr and Tpm-Maintenance.

Fix Shutdown bsod caused by CCU on AMD

- Open regedit , then go to this key :

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\kpowershutdown]

Change value Start to 4 like below :

"Start"=dword:00000004

- Then go to this key :

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ACPI\FixedButton\2&daba3ff&0]

Change ConfigFlags value to 20 like below :

"ConfigFlags"=dword:00000020

- Go to this key :

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\kshutdown]

Change "Start" value to 4

"Start"=dword:00000004

- Go to this key :

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ksafecenter]

Change "Start" value to 4

"Start"=dword:00000004

How to prevent FACEIT AC make "Display Card PNP" not working in CCU

- Open super user, then install Faceit AC as usual.

- When the installation completed, uncheck "Launch Faceit AC" ( do not launch Faceit AC ) and click "finished".

- Shutdown and close the super user. Then save the image in new restore poin.

- Boot the client in normal mode , then run Faceit AC until it asks the computer to restart after completing the update. Don't restart it yet.

- Open regedit , then export these two keys of "Faceit AC" and copy them to server game disk :

"[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FACEITService]"

"[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FACEIT]"

- Copy "Faceit AC" folder in "C:\Program Files" to Game disk server remotely.

- Open super user again, don't click "Faceit Ac" shorcut. Copy "Faceit AC" folder you backed up earlier to "C:\Program Files\Faceit AC".

- Merge two registry files you exported earlier.

- Shutdown and close super user. Save the restore point, and you're done.