I copied the Event Viewer data from last evening when I discovered the latest reboot. I took screenshots and copied the output from the "properties"...
You could also use group policy file execution blocking and Applocker polices for some of this too its an option but the above stuff should suffice....
Same here. looks like MS is not going to address it - anyone get any feed back from them? I'll do a sys restore back till March I guess and then hide...
I could say the same? You posted with out much context. All i see is that you ran a wim file from windows and booted into img 3. I was just agreeing...