Open "Find Printers" by Hyperlink

Microsoft Edge

# AutoOpenFileTypes: qds

GPO: Computer Configuration → Administrative Templates → Microsoft Edge → List of file types that should be automatically opened on download

New-Item -Path "HKLM:\SOFTWARE\Policies\Microsoft\Edge\AutoOpenFileTypes" -Force | Out-Null

New-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Edge\AutoOpenFileTypes" -Name "1" -Value "qds" -PropertyType String -Force | Out-Null

# AutoOpenAllowedForURLs: 只允許 intranet.contoso.com

GPO: Computer Configuration → Administrative Templates → Microsoft Edge → URLs where AutoOpenFileTypes can apply

New-Item -Path "HKLM:\SOFTWARE\Policies\Microsoft\Edge\AutoOpenAllowedForURLs" -Force | Out-Null

New-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Edge\AutoOpenAllowedForURLs" -Name "1" -Value "intranet.contoso.com" -PropertyType String -Force | Out-Null

          Verify: edge://policy

Google Chrome

Make a Windows 11 Local Account Passwordless

Change this from 2 to 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device]
"DevicePasswordLessBuildVersion"=dword:00000000

Create a .reg file with the following:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device]

"DevicePasswordLessBuildVersion"=dword:00000000

Next:

Command: netplwiz
➨ Check: Users must enter a user name and password to use this computer

Deploy Java Deployment Rule Set (Eneterprise White List)

由於 PLM 版本太舊，其中的 Java 程式憑證過期，使用者使用時會彈出警告視窗
所以需要設定企業白名單，而白名單需要進行數位簽章，所以還要有憑證架構

jdk1.8.0_202 Download
https://master.dl.sourceforge.net/project/msi-installers/msi-archive-files/Java/v8u31/jre-8u31-windows-i586.exe

先產生 ruleset.xml

<?xml version="1.0" encoding="UTF-8"?>

<ruleset version="1.0+">

  <rule>

    <id location="https://plmap.contoso.com.tw/"/>

    <action permission="run"/>

  </rule>

  <rule>

    <id location="https://plmifs.contoso.com.tw:8080/"/>

    <action permission="run"/>

  </rule>

  <rule>

    <id/>

    <action permission="default"/>

  </rule>

</ruleset>