Powershell
Uses a modified version of the Datto mitigation script to work with Kaseya. This runs a scan (using YARA) of the home drive on the local machine for potential Log4j. can report using $Log4j$, $Log4jOOD$. Emails YARA failures and scan detections to Kaseya admin.
Read MoreScript Installs AD Tools, then installs the Powershell AD module. Uses the module to pull the AD computer description and put it into a custom field (CF – AD Description). Field must be created before importing script. Requires user to be logged in, will self-reschedule every 60m if no user logged in.
Read MoreSets the size, alignment, and snap assist settings for the Win11 taskbar. Configured to set the taskbar to be left aligned and medium size (default is centered, medium size). Can change this behavior by editing the first few lines of the script, if desired.
Read MoreSets the position for the Win11 taskbar. Configured to set the taskbar to the bottom. Can change this behavior by editing the first line of the script, if desired.
Read MoreDownloads a powershell script to check OS, CPU, RAM, HDD, TPM, and SECUREBOOT compatibility requirements for Windows 11 installation. Writes result to procedure log, can report using $Win11check$, $Win11yes$, $Win11no$. Also write results to custom field "CF – Win11 Ready".
Read MoreDownloads powershell script that lists all local accounts in the Administrators and Users groups. Can report using $LocalUsers$, $LocalAdmins$, $LocalUsersAdmins$.
Read MoreCompares hosts file to last time script was run, or empty/clean hosts file on first run. Can report using $HostsFile$. Will email if change is detected, can set email address by editing first line of this script (default is the registered admin’s email who scheduled).
Read MoreMust be run on a domain controller. Compares Domain Admins to the last time script was run and reports result to the procedure log. Sends alert if admin is added or admin account is enabled. Can report using $ADAdmins$
Read MoreCompares Administrator accounts to the last time script was run and reports result to the procedure log. Sends alert if admin is added or admin account is enabled. Can report using $LocalAdmins$
Read MoreRemoves ACL change in the ‘PrintNightmare – ACL lock’ script.
Read More