Flatten a Messy Media Library into A-Z Bucket Folders
A PowerShell script that sorts every show and movie in a folder into flat A-Z buckets, skips anything that would collide, and dry-runs honestly.
2 min readRead note
Across the notebook
PowerShell.
Entries sharing this tag, wherever they're filed.
Check PowerShell Scripts for Syntax Errors Without Running Them
Use PowerShell's own parser to catch typos and broken brackets in a whole folder of scripts, before anything runs.
2 min readRead note
The -WhatIf Trap Hiding in ForEach-Object
A dry run that quietly lies to you. Why ForEach-Object's property shorthand returns nothing under -WhatIf, and the one-line fix.
2 min readRead note
Monitoring Azure Resource Costs with PowerShell
Find out which resource groups are eating your Azure budget, straight from PowerShell, no portal clicking required.
2 min readRead note
Automating User Offboarding in Azure AD with PowerShell
One script that locks a departing user out, cleans up their groups and licenses, and keeps their mail, with a CSV record of every step.
2 min readRead note
Adding Domain Groups to Local Administrators on Remote PCs with PowerShell
Put a domain group into the local Administrators group on a list of computers (or take one out) over PowerShell remoting, with a result for every machine and -WhatIf first.
2 min readRead note
Check MECM Software Update Deployment Status with PowerShell
One object per update deployment with targeted, compliant, failed and unknown counts, so you can spot the deployments that need you.
1 min readRead note
Deploy the Most-Needed Updates in MECM with PowerShell
Find the updates the most machines are actually missing, bundle them into a group, and deploy them to a pilot collection, with a WhatIf preview first.
2 min readRead note
Upgrade a Windows Edition with a MAK Key from PowerShell
Install a product key, activate it and confirm the edition actually changed, without the key ever landing in a script file or a log.
2 min readRead note
Create an MECM Package and Program from PowerShell
Turn "wrap this script in a package and push it to the DPs" into one command, with a dry run before anything gets created.
2 min readRead note
Clean Reinstall of the Microsoft Graph PowerShell Modules
When Graph cmdlets start throwing assembly errors, it's almost always mixed module versions. This removes every copy and puts back one matching set.
1 min readRead note
Report on Everything an Entra ID Group Touches with Microsoft Graph
Before you rename, rescope or delete a group, find out what it's wired to. Members, owners, licenses, apps and Intune policies, in one report.
2 min readRead note
Exporting Active Directory Computer Objects to CSV
A computer inventory straight out of AD, with OS build, last logon, password age and OU in one tidy CSV, ready for audits or a stale-machine cleanup.
1 min readRead note
Convert CBR Comics to CBZ, with Optional WebP Pages
Turn a folder of CBR comics into CBZ with 7-Zip, and optionally shrink the pages to WebP with cwebp or ImageMagick, testing every file before anything is replaced.
Thread: Archive conversion workshop ↗2 min readRead note
Organizing Vintage Mac Software: How I Name and File a Classic Mac Archive
The folder layout and naming rules I use for a pile of old Mac software, and the small PowerShell script that does the renaming without losing the original names.
5 min readRead note
Convert 7z Archives to ZIP So Anyone Can Open Them
Repack .7z files as plain Deflate ZIPs with UTF-8 file names, including password-protected ones, and test every result before the original goes anywhere.
Thread: Archive conversion workshop ↗2 min readRead note
List Installed Software on Windows with PowerShell
A quick, safe software inventory from the registry, local or remote, that returns objects you can filter and export instead of a wall of colored text.
2 min readRead note
Removing Stale Windows User Profiles the Right Way
Clean old user profiles off shared PCs and servers through Win32_UserProfile, so the folder and the registry entry go together and nobody gets a TEMP profile.
2 min readRead note
Cleaning Up Abandoned Outlook OST Files
Find the old Outlook .ost files nobody is using any more and reclaim the space, without touching the ones Outlook has open.
2 min readRead note
A Safer Windows Disk Cleanup Script
Clear old temp files from the usual suspects and run Disk Cleanup unattended, with an age threshold and a -WhatIf that shows how much you'd get back.
2 min readRead note
Re-Enable Windows Update with PowerShell: Find Every Registry Block, Not Just One
When Windows Update is greyed out or just won't run, check all the policy values and services that can block it, and put them back the way Windows shipped.
2 min readRead note
Move a List of Folders to a New Drive with PowerShell and Robocopy
Hand a list of folders from several drives to robocopy in one go, keep their structure on the new drive, catch name collisions before anything moves, and get a log per folder.
2 min readRead note
Find Out Why a Windows Machine Rebooted with PowerShell
Pull shutdown, startup and crash events from the System log so you can tell a planned restart from a power cut, and see who or what asked for it.
2 min readRead note
Create a Local Administrator Account with PowerShell
A one-off local admin account done properly, with a hidden password prompt, a language-proof group lookup, and an expiry date for the temporary ones.
1 min readRead note
Create a Dedicated Local Admin Account for Windows LAPS to Manage
Roll out a named local admin account with a random password nobody knows, ready for Windows LAPS to take over, and optionally retire the built-in Administrator.
2 min readRead note
Emptying the Recycle Bin from PowerShell, Quietly
Empty the Recycle Bin with no prompt, for one user or everyone on the machine, and optionally keep anything deleted recently.
2 min readRead note
Count KACE Devices by Location from a CSV Export
Export your KACE device inventory to CSV and get a per-location (or per-label) device count, optionally just the machines added this week.
2 min readRead note
Collecting Windows Update Logs with an SCCM Package
On Windows 10 and 11 there's no Windows Update logging to switch on. The trick is collecting it, and this script does that in one zip per machine.
2 min readRead note
Checking WinRM Before You Patch Remotely (Packaged for SCCM)
A read-first WinRM check that tells you why remote PowerShell won't connect, fixes it only when you ask, and doubles as a ConfigMgr compliance script.
2 min readRead note
Flushing the DNS Cache on One PC or Fifty
Clear the Windows DNS client cache locally or across a list of machines, and know when a flush will actually fix anything.
2 min readRead note
Trigger Intune Automatic Enrollment on a Windows Device with PowerShell
For the Entra-joined PC that never showed up in Intune. Check it's ready, kick off enrollment, and see why it failed if it does.
Thread: Getting devices into Intune ↗2 min readRead note
Pre-Register MFA Phone Numbers for Entra ID Users with PowerShell
Load mobile numbers into Entra ID as an authentication method before users ever sign in, without stomping on numbers they've already registered.
2 min readRead note
Setting DNS Client Settings on Domain Controllers with PowerShell (and Why Loopback Goes Last)
Point each domain controller at a partner DC first and itself (127.0.0.1) last, the way Microsoft recommends, across all your DCs in one pass.
2 min readRead note
Finding and Disabling SMBv1 Without Breaking the Scanner
Audit who still talks SMBv1 to your machines, then switch it off for good, with one script and three modes.
2 min readRead note
Skip Dell Boot Password Prompts During Maintenance with Password Bypass
Turn on Dell's Password Bypass so patch reboots don't sit at a power-on password prompt all night, then turn it back off when you're done.
2 min readRead note
Take Control of Explorer's Preview Pane with PowerShell
List the preview handlers installed on a PC, see which one each file type uses, and point extensions like .log, .ps1 or .json at the handler you want.
2 min readRead note
Building a Tier 2 OU Structure and Admin Group with PowerShell
Create the Tier 2 OU, its sub-OUs and the group that manages them, and delegate just enough rights for workstation and user admin work.
2 min readRead note
Exporting Active Directory OUs to CSV (With Paths You Can Actually Read)
Dump every OU in the domain to a spreadsheet, with a readable path, depth, GPO link count and, if you want, how many objects live in each one.
2 min readRead note
Getting the Console Width in PowerShell (Even When There Isn't One)
A width check that works in a real console, in VS Code, and in scheduled tasks and CI runners where there's no window to measure.
1 min readRead note
WSUS, WUfB or Windows Update? Check (and Reset) Where a PC Gets Its Updates
One script that reads the WSUS, scan-source and Windows Update for Business settings on a device and tells you where it's really getting updates from, with a safe reset for leftovers.
2 min readRead note
Check Whether Two Files (or Two Folders) Are Really Identical
Compare files, whole folder trees, or a download against its published checksum with Get-FileHash, and get back a clear Match or Different for every file.
2 min readRead note
Opting Devices In to Microsoft Update with an SCCM Package
Register the Microsoft Update service through the Windows Update Agent's own COM API, so devices pick up Office and other Microsoft product updates, not just Windows.
2 min readRead note
Auditing Active Directory Service Accounts with PowerShell (gMSAs Included)
One report for every kind of service account, gMSAs and old-school user accounts alike, showing password age, SPNs, delegation and who can read the gMSA password.
2 min readRead note
Delegating Your Tier 0 OU to a Dedicated Admin Group with PowerShell
Create a Tier 0 admin group, keep it where only Tier 0 can touch it, and give it full control of the Tier 0 OU. Preview the whole thing with -WhatIf first.
2 min readRead note
Set or Rotate the Dell BIOS Admin Password Without Baking It Into a Package
Put a BIOS admin password on new Dells, or change the old one across the fleet, with both passwords handed over at runtime.
2 min readRead note
Convert ZIP Files to 7z, but Only When It Actually Saves Space
Repack ZIPs as 7z, see exactly how much space each one saved, and keep the ZIP when the 7z wouldn't be any smaller.
Thread: Archive conversion workshop ↗2 min readRead note
Zip Up Folders Nobody Has Touched in Months
Find project folders that haven't changed in N days, zip each one to an archive location with the date of its last change, verify it, and optionally clear out the original.
2 min readRead note
Setting a High Performance Power Plan with an SCCM Package
Switch workstations to High Performance (or Ultimate Performance) by GUID, restore the plan if the image hid it, and don't end up with five copies of it.
2 min readRead note
Test and Convert a Folder of Mixed Archives with 7-Zip
Integrity-test every ZIP, 7z, RAR and TAR in a folder, then optionally repack the good ones into a single format. Broken archives never get touched.
Thread: Archive conversion workshop ↗2 min readRead note
Remove a Dell BIOS Admin Password with PowerShell and ConfigMgr
Clear the BIOS setup password on Dell PCs and see exactly what changed, with the password supplied at runtime instead of sitting in a package.
2 min readRead note
Silently Uninstall Any App by Name with a ConfigMgr Package
One uninstall script for every retired app. Give it a display name and it finds the right uninstall command, MSI or not, and runs it quietly.
2 min readRead note
Checking (and Nudging) Google Chrome Updates with PowerShell
Find out which Chrome version a machine is really running, whether an update is stuck waiting on a restart, and kick Google's updater into checking now.
2 min readRead note
Clearing a Stuck Print Spooler with PowerShell
Stop the spooler, clear out the wedged job files, and bring it back up, with -WhatIf and an option to leave recent jobs alone.
2 min readRead note
Clear a Dell Hard Drive Password with PowerShell and ConfigMgr
Remove the internal drive password from Dell PCs with Dell's PowerShell provider, without ever writing the password into a script or package.
2 min readRead note
Set Extension Attributes on Entra ID Users with PowerShell
Write extensionAttribute1-15 on cloud-only Entra ID users from a CSV, with a clear note for every synced account it can't touch.
2 min readRead note
Rotate Local Admin Passwords Across the Fleet with Windows LAPS and ConfigMgr
Force an immediate local admin password rotation on every machine in a collection, with Windows LAPS doing the password part so no script ever sees one.
2 min readRead note
Forcing a Group Policy Refresh with PowerShell and SCCM
A gpupdate wrapper that checks the domain trust first, never bounces anyone's session, and reports a real success or failure back to ConfigMgr.
2 min readRead note
Deleting Stale Computer Accounts from Active Directory, Safely, with a CSV Log
Feed it a list or an OU, and it deletes (or disables) only the computers that are genuinely stale, logs every decision to CSV, and shows you the plan first with -WhatIf.
2 min readRead note
Audit a Windows Service Across Many Computers with PowerShell
Feed it a list of computers and a service name, get back one row per machine saying whether it's installed, running, and how it starts.
2 min readRead note
What Get-WindowsAutopilotInfo Actually Does (and How to Use It Today)
The hardware hash script behind Windows Autopilot, explained. Upload straight to Intune with -Online, or export a CSV when the device can't reach the tenant.
Thread: Getting devices into Intune ↗4 min readRead note