Long time reader, first poster.
We use Thin Clients in the company and while they serve a role I have always wondered can we not enable the File Based Write Filter that makes a thin client (device using windows embedded 7 or IoT) so powerful on Windows 10 Pro devices.
The cost of a thin client is roughly the same of that of an entry-mid level device (we currently buy HP MT42 and HP T520) however the specs are much lower than you would find on a full fledged PC/laptop.
So my goal of this project is to find a way to write protect a standard Windows 10 Pro device such that it functions like a thin client. We would need the ability to lock and unlock the device, requiring a reboot to do so.
Here is where I am at:
- Found this post and looks like it can be done.
I can say that its actually possible, in the Windows 10 Pro Anniversary Update, to use UWF. I have tested.
The only "thing" is that the
uwfmgr.exeis intentinally crippled (e.g. disabled), but if you use the WMI interface, or another
uwfmgr.exe, it will work flawlessly. Note that the external
uwfmgr.exedoes not need to be placed in system32 folder, it can reside anywhere.
To install UWF, press Win+R, type Control, press enter. Then navigate to Programs, and then Enable/Disable Windows features. Then scroll down to Device-Lockdown, and check UWF.
I have enabled the feature in Windows 10 pro and even found a
UWFMGR.EXEfile from an IoT device I have and placed it on the Win 10 device.
Here is where I'm stuck, the
UWFMGR.EXEfile doesn't do anything when run in CMD or double clicked. Also, I don't see the green/red lock in the taskbar.
I am looking for anyone who know a good deal about Microsoft's Microsoft Windows Embedded Unified Write Filter and how it works.