The script library
PowerShell and automation, with the context behind the code.
Force an immediate local admin password rotation on every machine in a collection, with Windows LAPS doing the password part so no script ever sees one.
Local admin, done right · Note 3 ↗A gpupdate wrapper that checks the domain trust first, never bounces anyone's session, and reports a real success or failure back to ConfigMgr.
Packaging with ConfigMgr · Note 4 ↗Feed it a list or an OU, and it deletes (or disables) only the computers that are genuinely stale, logs every decision to CSV, and shows you the plan first with -WhatIf.
Keeping Active Directory tidy · Note 5 ↗Feed it a list of computers and a service name, get back one row per machine saying whether it's installed, running, and how it starts.
PowerShell craft · Note 4 ↗
