Post #3815815
2026-07-14 18:58 UTC
@mttaggart@infosec.exchange @da_667@infosec.exchange @minka @cR0w@infosec.exchange I went with disabling the Run dialog and removing *PowerShell.lnk and *Prompt.lnk from %LOCALAPPDATA%\Microsoft\Windows\WinX\Group3 and %SYSTEMDRIVE%\Users\default\AppData\Local\Microsoft\Windows\WinX\Group3 – don't want to completely disable Win+X, there's other useful stuff in there.
Replies (1)
-
@mttaggart@infosec.exchange 2026-07-14 19:01
@jernej__s@infosec.exchange @da_667@infosec.exchange @minka @cR0w@infosec.exchange There is, but Win+X is a common ClickFix tactic now, so I hope your users are savvy.