Windows Workstation

MS Stack Audit (May 2019)

Servicing Stack Updates are updates made to the tools Windows uses to update your machine. Historically, these updates are not very common though we have seen four updates in a row between December 2018 and May 2019. This script is updated when new SSU updates are released. It is very important that you install the latest…

Read More

July 2018 patches

This is a folder of scripts that apply a set of Windows patches for July 2018. The scripts in this folder are: Apply Patch: Runs appropriate patch script, if applicable. KB4345397 Install (Server 2008, July 2018 patch): Script Desc: Attempts to silently install kb patch for Server 2008. Can report using $KBinstall$ and $KB4345397$. KB4345424…

Read More

Reboot to Normal Mode

Reboots Windows workstation, and removes any safemode boot options. Only works on Windows Vista/7/8/10.

Read More

Reboot to Safe Mode with Networking

Reboots Windows workstation, and adds safemode with networking boot option. Only works on Windows Vista/7/8/10. To reboot back to normal mode, use this script.

Read More

Slack Machine-Wide Installer Silent Install

Downloads txt files with current download location. Script then determines if Slack Machine Wide Installer is present. If not, script will download and install it.

Read More

Domain Expiration Check

This script runs on an endpoint to check the expiration of domain. Recommended to run this script once per month on an internal endpoint for each domain you wish to monitor. This is a good reminder for domains which might be managed by third parties so you can cover for your clients in case a…

Read More

KB3191849 install (Outlook 2013)

Attempts to silently install kb patch for Office 2013. Office 2010 Script here.

Read More

Dell Digital Delivery Silent Install

Downloads file containing url for the DDD installer. Then downloads the installer and executes a silent install.

Read More

SmbServerNameHardeningLevel Workaround (KB3161561)

KB3161561 is causing issues with file sharing. This script changes some registry entries that resolves the problem. Sets the SmbServerNameHardeningLevel registry entry to 0. For more information about how to configure the SmbServerNameHardeningLevel entry, see the “Workarounds” section of Microsoft Security Bulletin MS15-083. See June’s Patch Blog for more details.

Read More

Office 365 (O365) Audit

Checks for the existence of both Office 2013 and  Office 2016 “Click to run” keys, indicating Office 365 is present,  and writes to the Agent procedure log with $O365-16$ or $O365-13$ tags.    Use a Legacy Log report (Agent Procedure Log), and filter on ” *$O365* ” to get all the results, or the individual tags…

Read More