Windows General

Audit – MS Outlook Version (by build)

Microsoft has announced that by October 31st, 2017, they will no longer support RPC over HTTP for O365. You can read about it here: https://support.microsoft.com/en-us/help/3201590/rpc-over-http-deprecated-in-office-365-on-october-31–2017 This means that only certain versions of Outlook will work. To help you identify Outlook installations that are out of compliance, we have developed this script to audit your Outlook…

Read More

BGInfo – add to startup

Adds BGInfo and a default custom file to the kworking directory. Then adds registry entry to run on startup using the custom file. Can edit line 3 to use “WriteFile” command and use your own custom BGInfo file, if desired.

Read More

Shared folder available offline

Script prompts for folder location. Then uses a “net share” command to set the folder to be available offline. May only work with shared folders that are in mounted drive locations.

Read More

Disable MS Security Center and Backup Notifications

dds registry keys to suppress notifications from the Security Center and Windows Backup. For Windows 10, requires user to be logged on and only effects that user.

Read More

Windows Defender Definitions Updated within X days

Performs a dump of protectionManagement (VBS) and/or Get-MpComputerStatus (Powershell). If either returns the Windows Defender information the script will use another VBS to pull the virus signature age and compare it to the number you will be asked to input when the script is run. Defender information does not appear to be accessible on anything…

Read More

Slack Machine-Wide Installer Silent Install

Downloads txt files with current download location. Script then determines if Slack Machine Wide Installer is present. If not, script will download and install it.

Read More

Set location of “My Documents” Folder

Sets registry key to relocate the default location and link location for “My Documents” folder. User must be logged in and only effects the logged in user.

Read More

Kaseya Agent Icon with Remote Login

Script adjusts registry so that when using RDP into a machine with an Agent running the agent icon will appear on the remote desktop.

Read More

Audit Fixed Drives

Downloads and runs Audit Fixed Drives.vbs to output Logical Fixed disks (NO USB or CDROM). Pulls data in and then writes it to NOC_FixedDrives custom System Info field. NOTE: YOU MUST CREATE THE CUSTOM FIELD “NOC_FixedDirives” BEFORE RUNNING THIS SCRIPT

Read More

RMM Detector

Downloads a VBS script and an RMM definitions file to identify potential RMM tools installed on a machine. The script uses the definition file to make matches in the registry as it looks for anything from known RMM publishers. These programs are logged and if changes are detected between runs an alert email is sent.…

Read More