Patch Deployment

Meltdown/Spectre – Vulnerability Check (w/ Tags)

Imports PS module and runs powershell command Get-SpeculationControlSettings. Outputs the results to a file and reports to the procedure log. Procedure log will indicate if patching may be required. Should work on Powershell 3.0 or later. Can run report using tags: $Meltdown$, $MetldownPatch$, $NoMeltdownPatch$, $MeltdownLog$. $Meltdown$ is the same as $MeltdownPatch$ but works across multiple…

Read More

Meltdown Scripts

Folder containing all the current meltdown scripts: Meltdown Reg Key Audit Meltdown Reg Key Force Add Meltdown/Spectre Vulnerability Check Meltdown/Spectre Vulnerability Check (w/ Tags)

Read More

Meltdown Reg Key Force Add

This agent procedure will create the registry key “HKEY_LOCAL_MACHINE:\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat” Value=”cadca5fe-87d3-4b96-b7fb-a231484277cc” Type=”REG_DWORD” on any Windows machine using a powershell script. The registry key is not always required to get the Windows Update to protect against the Meltdown vulnerability. It is advised to check the list of Antivirus at: https://docs.google.com/spreadsheets/d/184wcDt9I9TUNFFbsAVLpzAtckQxYiuirADzf3cL42FQ/htmlview?sle=true#gid=0 You can find more information on this…

Read More

Meltdown Reg Key Audit

This agent procedure will check for the existence of the registry key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat\cadca5fe-87d3-4b96-b7fb-a231484277cc” using a powershell script. Can report using $Meltdown$, $MeltdownKey$, $NoMeltdownKey$. $Meltdown$ is the same as $MeltdownKey$ but works across multiple scripts. $NoMeltdownKey$ will only show machines that are missing the key.

Read More

Admin Tools Win7 (KB958830 Install)

Attempts to silently install kb patch which includes adding Win7 scripting support for bitlocker. Install confirmation is reported to the script log. KB is only for Win7.

Read More

KB3191849 install (Outlook 2013)

Attempts to silently install kb patch for Office 2013. Office 2010 Script here.

Read More

MS17-10 Audit

MS17-10 Audit script will check Windows Vista on up for the MS17-10 patch which re-mediates a vulnerability that is being used by ransomware.   Writes to agent procedure log using $MS17$ and $OOD$ tags. Limited testing has been done, please test in your environment 5-14-17 – Updated script to remove duplicate KB check. 5-15-17 – Updated…

Read More

Windows 10 Defer Major Upgrade

This agent procedure will block (defer) the Windows 10 major upgrades such as the creators updates or October 2018 update. The windows update cannot be blocked be it can be delayed for 180 days changing a few windows options via registry keys. This procedure works on Windows 10 Pro, Enterprise and Education only. If you…

Read More

KB3097877 Uninstall

Uninstalls KB3035583 from the computer.   Supports 32 and 64 bit machines.

Read More

KB3035583 Uninstall

Removes the Windows 10 invite patch KB3035583 from the computer.   Supports 32 and 64 bit machines.   (c) Copyright 2014 Network Depot, LLC (Virtual Administrator) ALL RIGHTS RESERVED. This script is the property of Network Depot, LLC (dba VirtualAdministrator), and use is restricted to active clients. Do not re-distribute without written authorization.  

Read More