Category: Scripting - Page 2

CRUNCH Deployment DLP | Data Loss Prevention ENS | Endpoint Security Exchange 2010 Exchange 2013 Exchange 2016 Exchange 2019 FW Fortigate FW Sophos Intunes M365 - Exchange Online Mcafee/Trellix Microsoft Exchange Microsoft SCCM,MEM,MDT Microsoft Server OS MSME | Security for Exchange Scripting SECURITY Server 2016 Server 2022 [21H2/22H2/32H2] TIE/ATD/ATP | Sandbox - Advanced Threat Protection Tools we made VMWare W10

CRLcheck.exe Certificate Revocation List Check Tool to verify all CRL and OCSP on Windows client

23.03.2024 admin

CRLcheck.exe, Certificate Revocation List Check Tool to automatic verify CRL and OCSP internet reachability of all your EXE files that your client runs. Download 01.01.2026, NEW Release 2.2.0.0 rebuilt for server and small display resolutions like VM’s Version 2.2.0.0 Download from our Server or different software portals: https://www.butsch.ch/wp-content/uploads/tools/crlcheck/latest/crlcheck.7z https://www.softpedia.com/get/Security/Security-Related/Certificate-Revocation-List-Check-Tool.shtml https://www.majorgeeks.com/files/details/certificate_revocation_list_check_tool.html Over the past […]

Deployment Intunes M365,AZURE,INTUNE Scripting

INTUNES-MEM: 32 or 64-bit Runtime and Registry Hive explained (WOW6432Node)

27.01.2024 admin

The normal Intunes Agent that is running on a Windows 10/11 64-bit OS is a 32-bit Agent. INTUNES-MEM: 32 or 64-bit Runtime and Registry Hive explained (WOW6432Node) Short sample why you maybe landed here…. What is the problem that we often see: A Win32APP with import_registry.cmd or import_registry.ps1 is run via Intunes. Before deployment […]

Deployment Scripting

Powershell, Retrieve DisplayName,DisplayVersion,Publisher from Registry or export.REG

05.09.2023 admin

Hello, You need and easy way to get an inventory list of software installed on a machine via Powershell. What we need for a list is: DisplayName;DisplayVersion;Publisher We have two version of the scripts: Version 1 Use regedit and export the HIVES into .REG Files. Copy to your admin machine an then parse the two […]

Deployment Scripting

Eventviewer, eventvwr.exe commandline filter XML query buildingm (Call and pre filter view with one line)

28.07.2023 admin

Introduction: Event logs provide valuable insights into system operations, allowing IT professionals to monitor and troubleshoot potential issues. When dealing with Windows event logs, PowerShell is a powerful tool that enables event filtering, but it may not be everyone’s preferred choice due to complexity and perceived security concerns. In this blog post, we will explore […]

M365,AZURE,INTUNE Scripting

M365/Power Automate/Flow: PA is in wrong language as example German/Deutsch Syntax GO TO missing, change language

04.02.2023 admin

Some braindumps from trying to learn new M365 things. Automation of Blender with Power Automate Desktop. I have long experience in AUTOIT but wanted to try the MS solution for once. If you Install Power Automate desktop the Menu, content and also the Commands are in the primary APP language you have under […]

Deployment Ivanti Frontrange Enteo Microsoft SCCM,MEM,MDT Scripting W10 WSUS

inprogressinstallinfo.ipi. Cannot open database file. System error -2147287037.

18.08.2022 admin

W10/W11, 21, Disk D: and e: ripped out and moved to new PC, Error on old PC with just the c: and 21H2 Problem: Error 2203.Database: C:\WINDOWS\Installer\inprogressinstallinfo.ipi. Cannot open database file. System error -2147287037. The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code […]

Deployment Ivanti Frontrange Enteo Scripting W10 WMI

Enteo V6.X Master Referenz Paket (Screensaver/Locked/User Fragen), Version 1.1 vom 10.10.2010

18.03.2022 admin

Enteo V6.X Master Referenz Paket (Screensaver/Locked/User Fragen), Version 1.1 vom 10.10.2010 Alle Binaries sowie ein Export des Projektes von Enteo V6.2 sind unter dieser URL zu finden: https://www.butsch.ch Was macht das Paket? Dieses universelle Referenz Paket soll zeigen wie man in einer reellen Deployment Umgebung auf das Environment und die User eingehen kann. Bei vielen […]

Deployment Scripting

Powershell List and Export Active Directory users UNDER certain OU incl. Homeshare

16.10.2021 admin

Powershell: List/Export Active Directory users UNDER certain OU incl. Home share Searchbase = distinguishedName How to find this out: Start Active Directory User and Computers Console Go to the OU you want to export and Right click > Attribute Editor Copy the distinguishedName into the script below behind search base Change your Domain controller behind […]

Deployment GPO | Gruppenrichtlinien Hotfixes, Updates Scripting W10

Samsung SSD + Bitlocker leak

08.11.2018 admin

Check if you are affected by the 11/2018 SSD Bitlocker Leak. ADV180028 | Guidance for configuring BitLocker to enforce software encryption Security Advisory, Published: 06.11.2018 Producer: Samsung and Crucial Affected models proof: Crucial MX100, MX200, MX300, Samsung EVO 840, 850, Samsung External USB T3/T5 There is a leak with certain SSD Hard disk (Solid-state) together […]

CRUNCH Deployment FW Fortigate FW Sophos Ivanti Frontrange Enteo M365,AZURE,INTUNE Mcafee/Trellix Microsoft SCCM,MEM,MDT Scripting SECURITY W10

Missing entry in Fortigate Application Filter ROOT.CERTIFICATE.URL and OCSP source of W10 Setup failing

31.10.2018 admin

Fortigate Application Filter Certificate wrong/missing Entry sample for an important laptop driver (W10 Deployment fails because of signed Driver Revocation Lookup) OR HOW a missing small ENTRY I a FORTIGATE FIREWALL IPS/APP filter can ruin your Windows 10 OS-Deployment work. Reason: Missing entry in Fortigate Application Filter “ROOT.CERTIFICATE.URL” and “OCSP” source of failing deployment […]

Deployment Hotfixes, Updates Scripting WMI WSUS

W7, 64BIT, WMI Hotfixes do date post SP1

29.07.2015 admin

WMI Hotfixes to date 29.07.2015 During IE11 projects we have seen problems with some WMI and WUSA.EXE KB installations. It sometimes seems that the WMI provider who offers that info hangs or is out of date. Even with some command to refresh it0s stuck. This is a list of Hotfixes we found in that direction […]

ENS | Endpoint Security EPO | ePolicy Orchestrator Mcafee/Trellix Scripting Uncategorized

Mcafee EPO prevent exe RUNNING FROM %appdata%

14.07.2015 admin

Mcafee EPO prevent exe RUNNING FROM %appdata% folders with an Access protection Policy How to protect from most 0day Flash Exploits and malware like Ransom Cryptowall in summer 2015. You simply can’t keep up with patching even with deployment or Management solutions in place. Now you should have an IPS Filter like Fortigate with Fortiguard. […]

Deployment GPO | Gruppenrichtlinien Scripting W10

W7 client, Error 2221 with Logonscripts

12.05.2015 admin

System Error 2221 has occurred in Batch Logonscripts If you run a logon script on Windows 7 you get an error 2221 when the client tries to mount a network drive. We have also seeing this appear in Outllook.exe with Exchange Server. User suddenly can’t connect to network share Name Resolution is running You can […]

Deployment Scripting Uncategorized W10

Framework 3.x/5 Install via Features fails on Server 2012 R2

26.11.2014 admin

This may be related to the CDROM drive letter changed after Windows 2012 R2 base setup and the moment you OR a third party software tries to install Framework 3.0/3.5 in the background and does not find the 2012 R2 Media. Also there are three patches which could disturb the installation It’s unclear if MS […]

Deployment Scripting W10

Internet Explorer / Scripts, Clear growing Cookie and Caching Files

16.05.2014 admin

Temporary Internet Files RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 8 Cookies RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 2 History RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 1 Form Data RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 16 Passwords RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 32 Delete All RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 255 Delete All – “Also delete files and settings stored by add-ons” RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 4351 @ECHO off :SelectOptions CLS ECHO Howdy %username% : ECHO 1. Delete Non-trusted web […]

Certificate Revocation List Check Tool is designed to enhance security by performing several key functions related to executable files (EXE). It can scan your client for EXE files and examine their code-signing certificates. The tool also searches for the relevant CRL to determine whether it can be downloaded. It validates the integrity of the certificate chain, checks both the certificate and CRL for expiration dates, and can export a comprehensive list of all gathered information as a file. Additionally, it cross-references to ensure you are not using any revoked certificates, helping maintain a secure environment.