Opting Devices In to Microsoft Update with an SCCM Package
Register the Microsoft Update service through the Windows Update Agent's own COM API, so devices pick up Office and other Microsoft product updates, not just Windows.
EXPLORE THE NOTEBOOK
Tech.
Notes from the command line, the workbench, and the vintage computer shelf.
80published notes
Latest notes
Newest first · 6 / 7Auditing Active Directory Service Accounts with PowerShell (gMSAs Included)
One report for every kind of service account, gMSAs and old-school user accounts alike, showing password age, SPNs, delegation and who can read the gMSA password.
Delegating Your Tier 0 OU to a Dedicated Admin Group with PowerShell
Create a Tier 0 admin group, keep it where only Tier 0 can touch it, and give it full control of the Tier 0 OU. Preview the whole thing with -WhatIf first.
Set or Rotate the Dell BIOS Admin Password Without Baking It Into a Package
Put a BIOS admin password on new Dells, or change the old one across the fleet, with both passwords handed over at runtime.
Convert ZIP Files to 7z, but Only When It Actually Saves Space
Repack ZIPs as 7z, see exactly how much space each one saved, and keep the ZIP when the 7z wouldn't be any smaller.
Archive conversion workshop · Note 3 ↗Zip Up Folders Nobody Has Touched in Months
Find project folders that haven't changed in N days, zip each one to an archive location with the date of its last change, verify it, and optionally clear out the original.
Setting a High Performance Power Plan with an SCCM Package
Switch workstations to High Performance (or Ultimate Performance) by GUID, restore the plan if the image hid it, and don't end up with five copies of it.
Test and Convert a Folder of Mixed Archives with 7-Zip
Integrity-test every ZIP, 7z, RAR and TAR in a folder, then optionally repack the good ones into a single format. Broken archives never get touched.
Archive conversion workshop · Note 1 ↗Remove a Dell BIOS Admin Password with PowerShell and ConfigMgr
Clear the BIOS setup password on Dell PCs and see exactly what changed, with the password supplied at runtime instead of sitting in a package.
Silently Uninstall Any App by Name with a ConfigMgr Package
One uninstall script for every retired app. Give it a display name and it finds the right uninstall command, MSI or not, and runs it quietly.
Checking (and Nudging) Google Chrome Updates with PowerShell
Find out which Chrome version a machine is really running, whether an update is stuck waiting on a restart, and kick Google's updater into checking now.
Clearing a Stuck Print Spooler with PowerShell
Stop the spooler, clear out the wedged job files, and bring it back up, with -WhatIf and an option to leave recent jobs alone.