Windows 10 on JanBakker.tech

Lock or sign-out when Yubikey is removed from the device

Tue, 21 Jul 2026 13:53:20 +0000

I didn’t know there was already a solution for this, and maybe you are looking for it too. I learned about this from the Blue Security Podcast.

Meet: YubiKey Locker | Yubico

With YubiKey Locker, implement a protocol-agnostic security key removal policy that seamlessly integrates across various operating systems. This is important in meeting existing smart card customer security requirements (e.g. policies for smart card removal behavior), but also enables the forward-looking customer to bridge to modern protocols like FIDO2 passkeys, while staying compliant with their existing security policies. Moreover, the capability developed by Sciber enhances overall security posture for all organizations by locking the workstation or logging off the user when a YubiKey is not present, so it’s a great capability not only for those sunsetting legacy methods or form factors.

KB- Windows 11 Advanced passkey settings

Thu, 20 Nov 2025 09:40:48 +0000

To whom it may concern.

Since Windows 11 is capable of storing passkeys, protected by Windows Hello, the Windows Security screen looks like / can look like this these days:

Set additional clocks to Windows 10 using Intune

Mon, 01 Jun 2020 06:38:14 +0000

When you work for an international company, or you have to deliver support in other timezones, you might find yourself Googling for time in different timezones from time to time. At least I did.

Then I start looking for a way to make this easier and I was thinking to use BGInfo do reflect the time on my background. When struggling with this for 2 hours, I accidentally stumbled upon this setting, where you can display 2 additional clocks:

Install Windows Package Manager (winget) using Intune

Sat, 23 May 2020 10:47:27 +0000

Microsoft released a preview of the Windows Package Manager. I’m not going into detail about the product itself, because there are a lot of (better) alternatives for this already in the market. Today, we focus on how to get this tool installed on your endpoints, so you can use it for your software distribution. In this approach I use the APPX package. Normally I would use the Business Store for this, that version does not (yet) contain the winget feature.

Going passwordless with the FEITIAN Fingerprint card

Sun, 17 May 2020 19:21:15 +0000

A quick word upfront. I’m not a salesperson. I’m interested in FIDO2 because it delivers passwordless and strong authentication. That means that you should be free using any FIDO2 security key or card you want. Whether it’s Yubico, FEITIAN, Solo, or any other brand. USB-A, USB-C, NFC, Bluetooth, Lightning, with or without biometrics. This blog is not what to buy and where to buy. This blog is about security. That being said: on with the show!

Manage Teams custom backgrounds using Intune

Thu, 16 Apr 2020 20:10:44 +0000

Update! I got some feedback on this blog. Seems that if your users are not members of the local administrator group, install will faill with error: 0x80070001. I’ve updated the article to solve this problem. I replaced the cmd files for Powershell scripts and did some minor changes to the detection and uninstall scripts. This should now work for users without admin permissions.

Windows Update for Business. "Just" a free cloud service.

Fri, 21 Feb 2020 20:44:11 +0000

Since the introduction of the “Modern Workspace,” a lot is changed when we talk about updates. Let’s face it: staying current with Windows 10 is hard. But not as hard as, for example, maintaining Windows 7. Because back then we didn’t have Windows Update for Business. Luckily for you, now we have! Let’s dive in.