Microsoft

IE enable new ActiveX control installs

Uses registry keys to re-allow installation of new ActiveX controls. Reboot may be required for changes to take effect.

Read More

IE disable new ActiveX control installs

Uses registry keys to prevents installation of new ActiveX controls as a security measure. Then restarts the computer after 5 minutes. Addresses the vulnerability listed here.

Read More

Hosts File Changed Audit

Compares hosts file to last time script was run, or empty/clean hosts file on first run. Can report using $HostsFile$. Will email if change is detected, can set email address by editing first line of this script (default is the registered admin’s email who scheduled).

Read More

AD Admins Changed Audit

Must be run on a domain controller. Compares Domain Admins to the last time script was run and reports result to the procedure log. Sends alert if admin is added or admin account is enabled. Can report using $ADAdmins$

Read More

Local Admins Changed Audit

Compares Administrator accounts to the last time script was run and reports result to the procedure log. Sends alert if admin is added or admin account is enabled. Can report using $LocalAdmins$

Read More

Windows 11 Upgrade Compatibility to Custom Field

Check OS, CPU and TPM compatibility requirements for Windows 11 installation. Writes result to procedure log, can report using $Win11check$, $Win11yes$, $Win11no$. Also write results to custom field "CF – Win11 Ready".

Read More

Windows 10 Taskbar weather and news feeds (disable)

Sets registry key to disable the "Enable news and interests on the taskbar" local group policy setting.

Read More

Windows 10 Taskbar weather and news feeds (enable)

Removes registry key to disable the "Enable news and interests on the taskbar" local group policy setting.

Read More

Windows 10 Builds and Updates

This includes a large folder of script that modify Local Group Policy through registry keys as well as the Office 365 auto update settings. The LGP settings these scripts change include: Windows Update for Business Configure Automatic Updates Turn off auto-restart for updates during active hours Do not include drivers with Windows Updates Display Options…

Read More

Sysprep reset SID

Executes sysprep.exe as outlined in this article: https://bartsimons.me/sysprep-generalize-windows-image-without-oobe/

Read More