- RunDll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,0
- RunDll32.exe msrating.dll,RatingSetupUI
| <# examples: | |
| # generate a baseline policy. | |
| powershell.exe -file applocker.ps1 -baseline -output c:\policies\baseline.xml | |
| # generate an application-specific policy. | |
| powershell.exe -file applocker.ps1 -application -in c:\policies\baseline.xml -out c:\policies\application.xml | |
| # generate an adhoc policy. | |
| powershell.exe -file applocker.ps1 -adhoc -in c:\path -filter *.* -out c:\policies\adhoc.xml |
| # Work in progress! | |
| # Derived from http://stackoverflow.com/questions/25709398/set-location-of-special-folders-with-powershell | |
| <# | |
| .SYNOPSIS | |
| Sets a known folder's path using SHSetKnownFolderPath. | |
| .PARAMETER Folder | |
| The known folder whose path to set. | |
| .PARAMETER Path | |
| The path. |
| # http://stackoverflow.com/a/5429048/2796058 | |
| $ToNatural = { [regex]::Replace($_, '\d+', { $args[0].Value.PadLeft(20) }) } | |
| Get-ChildItem | Sort-Object $ToNatural |
| <# | |
| .SYNOPSIS | |
| Get the latest Cumulative update for Windows | |
| .DESCRIPTION | |
| This script will return the list of Cumulative updates for Windows 10 and Windows Server 2016 from the Microsoft Update Catalog. | |
| .NOTES | |
| Copyright Keith Garner (KeithGa@DeploymentLive.com), All rights reserved. |
| <# | |
| .SYNOPSIS | |
| Performs a windows cleanup. | |
| .DESCRIPTION | |
| Performs a windows cleanup by removing volume caches, update backups, update and CCM caches. | |
| .PARAMETER CleanupOptions | |
| Supported options: | |
| "comCacheRepair" # Component Cache Repair | |
| "comCacheCleanup" # Component Cache Cleanup | |
| "volCacheCleanup" # Volume Cache Cleanup |
| <# | |
| .SYNOPSIS | |
| BoxStarter script to configure Windows 10 development PC. | |
| .DESCRIPTION | |
| Install BoxStarter: | |
| . { Invoke-WebRequest -useb http://boxstarter.org/bootstrapper.ps1 } | Invoke-Expression; get-boxstarter -Force | |
| Run by calling the following from an **elevated** command-prompt. | |
| Remove -DisableReboots parameter to allow the script to reboot as required. |
| Add-Type -TypeDefinition @" | |
| using System; | |
| using System.IO; | |
| using System.Text; | |
| using System.Drawing; | |
| using System.Windows.Forms; | |
| using System.Runtime.InteropServices; | |
| using System.Linq; | |
| using Microsoft.Win32; |
| accesschk -w -s -u Users "C:\Program Files" >> programfiles.txt | |
| accesschk -w -s -u Everyone "C:\Program Files" >> programfiles.txt | |
| accesschk -w -s -u "Authenticated Users" "C:\Program Files" >> programfiles.txt | |
| accesschk -w -s -u Interactive "C:\Program Files" >> programfiles.txt | |
| accesschk -w -s -u "This Organization" "C:\Program Files" >> programfiles.txt | |
| accesschk -w -s -u "Authentication authority asserted identity" "C:\Program Files" >> programfiles.txt | |
| accesschk -w -s -u "Mandatory Label\Medium Mandatory Level" "C:\Program Files" >> programfiles.txt | |
| accesschk -w -s -u %username% "C:\Program Files" >> programfiles.txt | |
| accesschk -w -s -u Users "C:\Program Files (x86)" >> programfilesx86.txt |
| <# | |
| .SYNOPSIS | |
| Delete obsolete/stale device objects from Microsoft Intune/Azure AD | |
| .DESCRIPTION | |
| Based on input parameters ('management agent', 'compliance state' and 'management state', 'Days last synced') the script is used to perform "housekeeping" to keep your Microsoft Intune/Azure AD clean and tidy of obsolete/stale device objects. | |
| The script deletes device objects based on their device state, device compliance state, management channel and the number of days devices hasn't synced/connected to Microsoft Intune. | |
| .AUTHORS | |
| Name: Ronny de Jong |