none
Keyboard Filter on Windows 10 LTSB (1607) RRS feed

  • Question

  • I've some problem with Keyboard Filter feature. I've a system with Windows 10 LTSB (1607), I think the feature is properly configured: MsKeyboardFilter running and keyboard key enabled. I've use this powershell script to add block:

    https://docs.microsoft.com/en-us/windows-hardware/customize/enterprise/keyboardfilter-add-blocked-key-combinations

    and if i list all configured key combination:

    https://docs.microsoft.com/en-us/windows-hardware/customize/enterprise/keyboardfilter-list-all-configured-key-combinations

    i get the right list. Also, I check the key register (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Embedded\KeyboardFilter) and i found the right value keys. 

    the user is an administrator and i enabled key filter for administrator, but the keyboard combination (like Ctrl+Shift+Esc) is always active. 

    Do you have any suggestions to point me to solve the problem ?

    Tuesday, October 24, 2017 9:00 AM

All replies

  • I never tried the scripts, but you say you can see the key combination that are blocked in the registry, is that correct?

    And you are sure the MsKeyboardFilter service is running? and setting to auto start on reboot?

    Did you create an answer file with SIM? You can set the keyboard filter settings in the answer file and enable the service.


    Sean Liming - Book Author: Starter Guide Windows 10 IoT Enterprise - www.annabooks.com / www.seanliming.com

    Wednesday, October 25, 2017 3:18 AM
    Moderator
  • assumption here is that you are using WSIM to build your answer file and then deploy your OS.


    The keyboard filter was omitted from the initial release of Windows 10, with the recent release of the 1607 version it has been returned to the tool suite.
    Of course nothing is plain sailing and by default it is actually disabled within the Deployment of the OS, so you need to add a couple of commands to activate the filter.
    Within WSIM 
    Add Microsoft-Windows-Foundation-Package to the Answer file
            Locate the Client-DeviceLockdown section on the right hand pane
       Ensure 
            Client-DeviceLockdown is set to Enabled
    Client-KeyboardFilter is set to Enabled
    From the components section 
             Add – Windows-Embedded-KeyboardFilterService – Pass 2 Offlineservicing
             Within the Properties section (Far Right Hand Pane) You choose which keys to block.
    Under the main component for the Keyboard Filter service you can set
    CustomFilters
    CustomScancodes
    Right clicking on these will open a selection dialog where you can 
    Insert New FilterRule

    Up to the Top Menu Bar 
              Select Synchronous Command > Pass 7 oobeSystem
              Type the following command
                            Sc.exe config MsKeyboardFilter start=auto
              Again add another Synchronous Command > Pass 7 oobeSystem
              Type the following command
                           Sc.exe start MsKeyboardFilter

    then you can create your answer file and deploy to your hardware


    http://www.avnet-embedded.eu/ MCTS WES2009 MCTS WES7 http://www.eaton-family.info

    Friday, October 27, 2017 9:42 AM