Sign PowerShell Scripts with a User Code-Signing Certificate and Log

This script signs a PowerShell script with a code-signing certificate from the current user certificate store. It first searches for a certificate that matches the configured certificate name, checks whether it is still valid, and then applies a digital signature to the selected script. After signing, it writes a CSV log entry so the signing … Weiterlesen

Automated Zabbix Agent Install and Update with PowerShell

This PowerShell script is designed to run as a scheduled task on servers and keep the Zabbix Agent installation up to date automatically. The task is triggered through a GPO, so each server checks its local installation source on its own and updates itself when a newer version is available. This makes the deployment process … Weiterlesen

Test Active Directory Credentials with PowerShell

This small PowerShell script checks whether a user account can authenticate against Active Directory. It is useful for quickly validating credentials during troubleshooting, onboarding, or when you want to confirm that a specific account and password combination works as expected. What the script does The script prompts for a user name and password, then uses … Weiterlesen

Monitor and Report Group Policy Changes with PowerShell

This PowerShell script helps monitor changes in Active Directory Group Policy Objects (GPOs). It compares the current day’s GPO export with the previous day’s data and generates a report that highlights new, deleted, renamed, and modified GPOs. What the script does The script exports all GPOs in the domain as XML reports and compares them … Weiterlesen

Force Reinstall an Intune App with PowerShell

Sometimes a Microsoft Intune application needs to be reset because installation data is stuck or the app must be forced to reinstall. This PowerShell tool helps by loading a list of apps from a CSV file, letting the operator choose one, and then cleaning up related Intune Management Extension registry entries. It also reminds the … Weiterlesen

Trigger and Verify Full Active Directory Replication with PowerShell

In distributed Active Directory environments, it can be useful to manually trigger replication after changes to Group Policies, user objects, or DNS records. This PowerShell script automates that process across all domain controllers and then checks the replication status afterwards. repadmin /syncall is the underlying command used to synchronize domain controllers, and Get-ADReplicationPartnerMetadata is used to read replication partner … Weiterlesen

Reissue Certificates and Generating CSRs for an Internal Microsoft CA via Powershell

In many environments, operational certificates for web servers and services are still requested manually via MMC or the web enrollment pages. This PowerShell script automates that process by generating a certificate signing request (CSR), submitting it directly to a Microsoft Enterprise CA, and optionally exporting the issued certificate as a PFX file. The script supports … Weiterlesen

Automated AD Group Policy Backup and HTML Reporting

This PowerShell script helps administrators automatically back up Active Directory Group Policy Objects (GPOs) and generate HTML reports of the current settings. It is designed as part of an IT‑security audit and change‑tracking workflow, especially for environments where Group Policy changes must be logged and recoverable. The script runs once per day as a scheduled task and performs four … Weiterlesen

VMware ESXi Host Configuration Backup Script with PowerCLI

Keeping a copy of ESXi host configurations is a practical safeguard before maintenance, upgrades, or hardware changes. A PowerShell script based on VMware PowerCLI can automate this task by connecting to each host, exporting the firmware configuration, and storing the backup in a structured folder layout. The script described here is self-contained. All settings are … Weiterlesen

Powershell S/MIME Certificat Exporter

I needed a script to export S/MIME encryption certificates for a client migration. The script requires that the S/MIME private key be exportable. If it isn’t, the certificate can only be recovered at the CA using a Key Recovery Agent (if configured) or Mimikaz 😉 The search routine for the correct certificate may also need … Weiterlesen