HTA files just simply don't have that kind of control, you're a little better off using an app published to the MS store to run code, electron apps etc (or you could make one yourself) and either grab the .appx or just install it from the web.
You mentioned:
Dev Console - How so? Devtools?
Unblocking Websites / URLs - How? Apps like Lightspeed Filter, Securly, Impero etc run with admin on-device
Disable Admin App Blockers - If referring to Group Policy which tools like Galapagos try to exploit this simply isn't plausible
Disable Firewall - Why? Defender Firewall isn't used for filtering conventionally
Run any EXE file without Admin - If you're referring to running admin apps with RUNASINVOKER this would work unless
Open Incognito Mode - Still doesn't combat the browsing history and network requests recorded by these organisation RMMs
Install Any Extension - Possible, really only Chrome and Edge have organisational policy management - just install any other browser from the MS store website.
Add Personal Account to Chrome - Just don't use chrome
Add Personal Account to Computer (not tested) - This is possible, but it's just not as simple as even an exe file. I've done this using the YellowKey exploit, which gives me an unbitlockered Admin CMD in WinRE. Then I just used net user add to make a local account; very risky though
Unblock Devtools - Normally not blocked.
Unenroll Computer (not tested) - You'd need an actual Windows 0day for this. Good luck, unless you've got Mythos and help from the NSA haha
Crash/Clear/Delete/Reset Policy for Chrome - Sounds like ExtPrint3r and its descendents. Patched.
Crash/Clear/Delete/Reset Policy for Computer - Group policy? Needs admin
Open Admin Console (not tested) - Which console? CMD? Impero Console? Neither are plausible
Delete Any File/Folder without Admin - you'd still need admin or at least an admin CMD (no admin + blocked cmd likely), that's just how the windows filesystem works
Customizable Themes - nothing impossible
Add & Run VPN - VPN tunnels are possible to be blocked via certain methods on the router itself (OpenWRT or external hardware). They would get detected quickly
Settings and more!
HTA files just simply don't have that kind of control, you're a little better off using an app published to the MS store to run code, electron apps etc (or you could make one yourself) and either grab the
.appxor just install it from the web.You mentioned:
Dev Console - How so? Devtools?
Unblocking Websites / URLs - How? Apps like Lightspeed Filter, Securly, Impero etc run with admin on-device
Disable Admin App Blockers - If referring to Group Policy which tools like Galapagos try to exploit this simply isn't plausible
Disable Firewall - Why? Defender Firewall isn't used for filtering conventionally
Run any EXE file without Admin - If you're referring to running admin apps with
RUNASINVOKERthis would work unlessOpen Incognito Mode - Still doesn't combat the browsing history and network requests recorded by these organisation RMMs
Install Any Extension - Possible, really only Chrome and Edge have organisational policy management - just install any other browser from the MS store website.
Add Personal Account to Chrome - Just don't use chrome
Add Personal Account to Computer (not tested) - This is possible, but it's just not as simple as even an exe file. I've done this using the YellowKey exploit, which gives me an unbitlockered Admin CMD in WinRE. Then I just used net user add to make a local account; very risky though
Unblock Devtools - Normally not blocked.
Unenroll Computer (not tested) - You'd need an actual Windows 0day for this. Good luck, unless you've got Mythos and help from the NSA haha
Crash/Clear/Delete/Reset Policy for Chrome - Sounds like ExtPrint3r and its descendents. Patched.
Crash/Clear/Delete/Reset Policy for Computer - Group policy? Needs admin
Open Admin Console (not tested) - Which console? CMD? Impero Console? Neither are plausible
Delete Any File/Folder without Admin - you'd still need admin or at least an admin CMD (no admin + blocked cmd likely), that's just how the windows filesystem works
Customizable Themes - nothing impossible
Add & Run VPN - VPN tunnels are possible to be blocked via certain methods on the router itself (OpenWRT or external hardware). They would get detected quickly
Settings and more!