Linux Patching
Tanium Patch for Linux: reuse existing repos and choose Repository Scan or TSL
-
-
Protected: RBAC with Tanium
There is no excerpt because this is a protected post.
-
Download Log Client
Quick guide to download Tanium Client logs: Client Management → Client Health, select the device, Gather log domains, then download the generated archive for troubleshooting.
-
Protected: Comply on Tanium
There is no excerpt because this is a protected post.
-
Deploy On Tanium
Quick troubleshooting guide for Tanium deployment issues:
check deployment status, package eligibility, custom tags, action locks, maintenance windows, and tool versions. -
Action Lock & Client Extensions
Ation Lock configuration with Tanium
-
Console – access issue (non-admins)
Issue for non-admin users accessing the EPM desktop console
-
Server – ldap vs ldaps
Source Active Directory : LDAP or LDAPS ?
-
Patch Deployment Ring
Example of a ring-based patch deployment strategy using the software
-
Dashboard on Tanium
Create the data set Visualize the data Build the dashboard Operational tips Patch List Compliance Sensor
-
Resources – downloads & docs
link to download patch and release
-
Patch On Tanium
Get help resolving patch deployment errors: check .NET Framework update classifications, scan status and age in Tanium Patch, and fix issues by reinstalling Patch tools or resetting the Windows Update Agent. Use the correct commands (DISM, wusa) for installing Windows updates.
-
SSH Keys with WinScp and Putty
how to generate SSH keys with PuTTYgen, connect to a TanOS appliance over SSH
-
Troubleshooting – console install bypass
If the IVANTI Remote Console setup fails, you can bypass the failure
-
Interact On Tanium
Discover essential Tanium Interact queries to efficiently analyze, monitor, and manage endpoints
-
Prepare Tanium certification (TCO / TCA)
Discover key resources for training and certifications, including Tanium training links, maps, and embedded videos to guide you effectively
-
bypass Hardware restriction with Flyby11
Bypass Windows 11 hardware restrictions easily using FlyBy11
-
Scan ports with nmap
Nmap commands for port scanning, service and OS detection
-
MITRE ATT&CK
tactics and techniques of cyber attackers
-
History of a website with Wayback Machine
Select a date from the calendar to see the website as it appeared on that day.
-
Get resources used on a website with BuiltWith
Generate a report and list the technologies, frameworks, scripts, and other resources used by the site.
-
Creating a WSUS Dashboard
Scripted WSUS reporting: create an HTML dashboard, automate refresh, and publish with IIS.
-
Automating WSUS Patch Assignment
Automate WSUS patch approvals: assign updates to Pilot, then promote to Global groups with scripts and Scheduled Tasks.
-
Licence Vmware Workstation Free
vmware Workstation Free
-
Windows 10 IoT Licencing
Windows 10 IoT Licencing by processor
-
Screen Recording Made Easy
Create a Video of Your Screen Using Print Screen
-
Create a Web service with Pode.Web
This example shows how to create a web service with PowerShell that queries an IVANTI EPM database to get a computer name based on a MAC address. It includes setting up a Pode server, configuring an API endpoint, and running a SQL query to retrieve the information
-
Invoke-WebRequest or Invoke-RestMethod with json
difference between Invoke-WebRequest and Invoke-RestMethod to get json file
-
Create a dashboard with PswriteHTML
Script to connect to Ivanti databases and generate HTML reports automatically.
-
Extract All installer Exe
Explore Universal Extractor 2, a powerful tool for extracting files from almost any type of installer or archive.
-
Provisioning on Tanium
Create a provisioning with tanium. Use a web service to get computername
-
Cyberduck – S3 Bucket and WebDAV Explorer
Cyberduck is a libre server and cloud storage browser with support for FTP, SFTP, WebDAV, Amazon S3, OpenStack Swift, Backblaze B2, Microsoft Azure & OneDrive, Google Drive and Dropbox.
-
Get user console from system Account
owerShell script to retrieve the currently logged-in user and send messages using system accounts.
-
WOL with synology
Create a website to wake up your computer.
-
Agent – auto-approve clients
Automatically approved new client on EPM
-
Explorer++ for WinPE
a Explorer in WinPE tools
-
Extract PS2EXE
Extract the Original PS1 Used by PS2EXE
-
Agent – install & uninstall
How to install the Ivanti Agent and how to uninstall it
-
PPKG Install application
Use ProvisionningCommands to install application on PPKG
-
Rundeck – Export Nodes from EPM
Create an XML file for Rundeck node definitions based on Ivanti Inventory data
-
Create PowerShell Job
Create a Rundeck job, define the workflow, target nodes, add options, and run PowerShell across hosts with parallel, reliable execution.
-
Deploying Windows 10
Comprehensive guide on deploying Windows 10 using SCCM, covering SCCM configuration, WDS and State Migration Point roles, setting up WinPE, managing drivers, creating task sequences, and distributing content.
-
How install SCCM
Extend AD schema, create the System Management container with delegation, install/configure SQL and Windows features, deploy the site, set boundaries/discovery, enable client push, add console branding
-
Configuring Applications
How to deploy applications using SCCM. Create and configure applications, manage deployment types, set up distribution points, and create collections
-
Configuring WSUS
Installing the WSUS and SCCM roles for software update management.
-
Configuring Asset Intelligence
Learn how to configure Asset Intelligence in SCCM 2012. This guide covers updating the Asset Intelligence certificate, installing the synchronization role, enabling inventory classes, and setting up software auditing to help you manage software licenses effectively.
-
SCCM Log Files
SCCM log cheat sheet: where to find key OSD/app/update/DP logs, how to read them with CMTrace/Trace64, plus quick triage tips.
-
Configuring Power Settings
Enable and configure power management in SCCM.
-
Configure a Windows 10 as a Self-Service Kiosk
Enable Windows 10 Enterprise or LTSC embedded features, set a Shell Launcher, block touch gestures, and configure autologon.
-
How to Manage Multilingual Installation Sources in Windows 10
Learn how to create a multilingual installation source for Windows 10 1903 and later. This guide provides detailed steps to add language packs, local experience packs, and optional features to your installation media.
-
Create a Mandatory User Profile in Windows 10
Create a mandatory user profile in Windows 10: run sysprep, copy the default profile, rename ntuser.dat to ntuser.man, and apply Group Policies
-
How to Display the Reliability Monitor
Monitor system stability in Windows with Reliability Monitor
-
How to View Installation History on Windows 10 Using PowerShell
Learn how to view the installation history on Windows 10 using PowerShell. This guide provides a script to retrieve and display the history of application and patch installations via the Reliability Monitor, including remote access capabilities.
-
How to Delete the Recovery Partition Using PowerShell
Learn how to delete the Windows Recovery Environment (WinRE) partition using PowerShell. This guide provides a script to automate the deletion and resizing of partitions, ensuring efficient disk space management.
-
Delegate User Account to Join Computers to the Domain
Delegate rights to allow a user account to join computers to the domain.
-
packaging with Inno setup
Convert PS1 to EXE, build Inno Setup/WiX installers, and track versions.
-
Installing .NET 3.5.1 without Internet
How to install .NET Framework 3.5.1 during MDT deployments without an internet connection
-
Timezone language and Keyboard
How to skip locale and time zone selection by configuring the customsettings.ini file.
-
Making an Application Mandatory
How to pre-select or make applications mandatory in MDT by configuring the customsettings.ini file.
-
Reading and Writing MDT Variables
Read and modify MDT variables using VBScript.
-
Adding Tools to WinPE (UltraVNC)
Learn how to add custom tools to WinPE images
-
Forcing Windows 11 Update
Learn how to force an upgrade to Windows 11 by modifying registry keys to bypass hardware checks. This guide provides detailed steps and explanations for each registry entry.
-
Creating a Scheduled Task with Time Zone
Learn how to create a scheduled task in PowerShell to reboot a computer daily. This guide includes an alternative script to disable time zone synchronization for the task.
-
Deploying BGinfo via GPO
BGinfo with logonscript
-
Create a Bootable USB Drive from an ISO
Create a bootable USB drive from a Windows 10 or WinPE ISO using DiskPart and File Explorer.
-
Using MBR2GPT to Enable UEFI Mode and Secure Boot
Use MBR2GPT to convert your disk to GPT, enabling UEFI mode and Secure Boot for Windows 11.
-
Disabling BitLocker with Unattend.XML
Prevent BitLocker activation during Windows 11 deployment using an unattend.xml file.
-
Installing QUEST SDA
Setting and configuring both virtual and physical SDA appliances.
-
Troubleshooting – delete task error
Error while deleting a scheduled task
-
Download HP Drivers with PowerShell
Download HP drivers using PowerShell
-
Windows Taskbar Customization
customization of the Windows taskbar by script
-
-
Export Computer and attribute
Export WSUS computer inventory with PowerShell: filter stale clients, group by target, and save to CSV/JSON.
-
Deploy an Application (exe)
Process of deploying an EXE installer with Microsoft Intune. This guide covers using IntuneWinAppUtil
-
TAG-Based Groups for Autopilot Devices
TAG-based groups for Autopilot devices in Microsoft Intune.
-
Importing Autopilot Devices (PowerShell)
Importing Autopilot devices into Microsoft Intune using PowerShell.
-
How to install Powershell V7
Process to install Powershell v7
-
PowerShell Clip
Redirect the output of a command to the Windows clipboard
-
Create a Bootable USB Media
Create a bootable USB drive for Microsoft Deployment Toolkit (MDT) to deploy operating systems.
-
Server – Inventory Option
Configure Do WMI Rules and Do Delta option
-
Invoke-WebRequest vs WebClient vs BitsTransfer
Who will be the fastest?
-
Text Art Generator
Looking to add a creative twist to your PowerShell scripts? Discover how patorjk.com’s Text Art Generator can infuse your code with artistic elements, making it not only functional but also visually appealing.
-
PowerShell transcripts
Transcripts are a great way to monitor what happens in a PowerShell session.
-
Creating your Intune LAB
Start your Intune demo: Trial, Dev, or CDX.
-
Understanding the setupcomplete.cmd
Dive into the nuances of the setupcomplete.cmd file, a traditional method for adding commands, and discover how it compares to unattend.xml.
-
Sharing a Folder in WinPE
Share a folder from your local hard drive using WinPE.
-
Manage Multiple Hard Drives Using Diskpart
Manage multiple hard drives seamlessly with Diskpart.
-
-
Tools to Display Settings
Manage display settings in Windows 11 using built-in tools like displayswitch.exe and other utilities like Qres and Setres. Discover various parameters and commands to customize your screen resolution and display modes.
-
Configure default start menu for windows 11
Configure the default start menu in Windows 11 by pinning desired shortcuts.
-
Retrieve Windows 10 System Rating
Retrieve the Windows 10 system rating using PowerShell. Utilize the Win32_WinSAT class
-
Configuring BIOS
Configure BIOS Dell or HP
-
Easy Tools for Crafting Animated GIFs
tool for creating animated GIFs
-
Setting Up Automatic Login in Windows 10
Automatic login in Windows 10 using both PowerShell and the Windows Registry.
-
Server – Migration LdAppl3.ini
Copy configuration directly in the Ldappl3.ini
-
Setting Up a Secure FTP Server in IIS with SSL
Set up a secure FTP server using IIS with an SSL certificate
-
Pauses in MDT Task Sequences
Create a pause within an MDT task sequence using a ‘Command line’ step
-
Displaying Organizational Units
How to display a list of Organizational Units (OUs) during the MDT deployment
-
Effective Error Handling Techniques in PowerShell
A comprehensive guide on how to effectively handle errors in PowerShell scripts. Learn how to suppress errors and manage them using the try-catch mechanism.
-
Provisionning – Error WebServiceCall
Error WebServiceCall during provisionning
-
MDT Log Locations
MDT logs, disk partitioning, deployment, domain join, Windows setup, unattend log, task sequencer
-
Integrating WSUS TargetGroup
Iintegrating the “TargetGroup” variable with MDT for WSUS.
-
Customizing the Windows 11 Taskbar
Configure and customize the taskbar in Windows 11 using scripts.
-
Mastering Default App Configurations
Export and manually configure default applications on Windows 11.
-
Deploy – Custom Notification Before Installation
Create a custom notification, for example for an Office 365 deployment
-
Deploy – Force Reboot after Installation
How to Force a Reboot After Software Installation
-
Windows update avec PSWindowsupdate
Manage Windows Updates with PowerShell: install the PSWindowsUpdate module, apply patches, check history, and handle reboots.
-
Large Windows WIM Files for UEFI USB Deployments
How to split WIM files into SWM format
-
Office 365 Deployment: Steps, Configurations, and Tips
Installation guide to Office 365 deployment. From preparation to managing updates via GPO
-
Driver Installation Tools
Driver installation with Pnputil, Dpinst
-
TPM Activation
how to activate TPM Dell, HP, Hyper-V, and VMWare Workstation.
-
Windows 11 OEM Activation
Windows 11 OEM activation using scripts.
-
Download Links for Drivers
Downloading drivers for Dell, Lenovo, HP, Panasonic, and Microsoft.
-
Managing Passwords in PowerShell Scripts
Learn how to securely manage and encrypt passwords in PowerShell scripts, ensuring data protection and script integrity.
-
Installing an Enterprise Root Certificate
how to install and configure a company’s root certificate. And deploying the root certificate via GPO.
-
Move the Integrated WSUS Database
Move the WSUS SUSDB database to another drive using SSMS or sqlcmd: stop services, detach, move files, reattach, and restart.
-
WDS – Install and Configure
Learn how to install and configure Windows Deployment Services (WDS) for both Legacy BIOS and UEFI BIOS. Follow step-by-step instructions, including DHCP authorization, adding boot images, and enabling PXE boot for seamless deployment of operating systems. Ideal for labs or production environments, this guide covers known client integration, boot image storage, and DHCP server considerations
-
Windows 11 in OOBE
Windows 11 in OOBE mode using the Microsoft Deployment Toolkit (MDT)
-
Securing PowerShell: Script Signing
Learn how to enhance the security of your PowerShell scripts by signing them. This comprehensive guide covers methods using both self-signed certificates and internal PKI, ensuring script integrity and authenticity
-
Central Store and ADMX Update
Create a Central Store for ADMX in SYSVOL and update it with the latest Windows 11 templates ADMX
-
Server – Migrate SQL
How to Migrate a Database to Another SQL Server
-
Server – Enable Audit Rights
Often Forgotten: How to Enable Audits
-
API – GetMachineData or GetMachineDataEx
use GetMachineData and GetMachineDataEx
-
Deploy – Change Windows 11 Release
Custom Windows 10/11 migration with scripts, multilingual ISOs, and controlled deployments through Endpoint Manager.
-
License – Configuration
Learn how to search applications, manage licenses, and configure automatic uninstall in LANDESK
-
Power management – Configuration
Learn how to create, deploy, and manage power policies in LANDesk, including troubleshooting and reporting.
-
Remote Control – Remove prompt temporarily
how to temporarily disable remote control authorization on devices
-
Deploy – change paths in sql
Update EPM package paths in SQL after core migration (server name changes, HTTP to HTTPS). Backup required.
-
Troubleshooting – DbRepair
EPM tools DbRepair, to repair your EPM database
-
Server – Migrate agent to new server
Copy certificate file to new core server
-
Deploy – Application Deployment Guide
Guide details configuring and deploying software packages
-
Console – Extender
Add Scripts Such as Browse C$, Ping, PsExec, and Other Commands to the Console
-
Provisionning – Deployment of Windows 10
Provisioning Windows with EPM: copy sources, manage unattend.xml, configure variables, create provisioning tasks, and optionally integrate patch management.
-
Provisionning – WinPE
WinPE with scripts: backup WIM, add drivers, create ISO, configure PXE/vboot, ADK setup.
-
Server – Backup of Critical Files
Backup and restore EPM core settings with CoreDataMigration.exe (certificates, scripts, console layouts, LDAPPL files).
-
Server – Preferred Server
Set up preferred servers in EPM to optimize WAN usage, configure shares, accounts, replication, and server settings.
-
Server – Core Installation
EPM architecture, sizing, service accounts, installation, configuration, certificates, and patch management setup.
-
Inventory – LDISCN32 command line
EPM commands to run inventory on core servers and force policy sync.
-
Troubleshooting – ERROR Core Synchronization
Fix Error core synchronisation
-
Troubleshooting – ERROR Query Unavailable
How fix Error Query Unavailable
-
Troubleshooting – ERROR StrongName
How to Fix StrongName Error When Starting the Console
-
LogTroubleshooting – Error 4100
How to Fix Error 4100 in the Event Log
-
Provisioning – PowerShell in Task
How to use PowerShell commands in a LANDESK provisioning task
-
Provisionning – Alternative to Ivanti HII
Custom Alternative to Native Driver Management Integrated with Ivanti
-
Patch – Configuration
update security bulletins, create groups (_NewPatch, L1, L2), scopes, and rollout projects. Workflow
-
Query – Convert to SQL
Transform a Query to SQL
-
Inventory – Size of Agent Inventory Files
Exclude folders from EPM inventory (e.g. %SystemDrive%\Drivers, %windir%\WinSxS) to cut inventory size
-
Inventory – Registry keys and exe file
Inventory registry keys in EPM via “Registry Item” . Example with Chrome: use exe path to check real version
-
Core – Install and configure CSA
CSA 5.0 setup: install on Oracle/RedHat,
-
Query – Advanced
Regex rules: device names (3 chars+L, M/N), IP with 0 in 3rd field. SQL queries: recent inventory, RAM >3200 MB
-
How to use IVANTI XTRACTION
Discover how use of Xtraction. Learn how to create effective dashboards and manage your data
-
How install IVANTI Xtraction
Xtraction: add IIS roles, create SQL DB, install (licenses/datamodel), configure AD auth
-
HelpDesk Module
Configuring the KACE SMA HelpDesk module.
-
Using Scripts
Explores three methods to utilize scripts in SMA,
-
Configuring Remote Control
Setting up remote access via UltraVNC and Windows Remote Assistance.
-
Application Distribution
Managing application deployments with KACE SMA
-
Changing Windows Release
Managing Windows release changes using the KACE Systems Management Appliance (SMA).
-
License Management and Control
Managing and controlling licenses with KACE Systems Management Appliance (SMA).
-
Management BitLocker
Managing and monitoring the TPM chip and BitLocker encryption status using Systems Management Appliance (SMA).
-
Configuration Remote Relay
Configuring and installing a remote relay with KACE SMA.
-
Configure Server Monitoring
Enabling and configuring server monitoring in Quest SMA.
-
Installing SMA Appliances
Installing and configuring Quest SMA appliances, including network setup, agent deployment, backup.
-
Using Kace Go Client
Available at Google Play and the App Store, the free KACE Go Mobile App
-
Automated Deployment of Windows 11
Automated deployment of Windows 11 using QUEST SDA
-
Managing Dell, Lenovo, HP Drivers
Aactivation, download, and installation of drivers for Dell, HP, and Lenovo systems
-
Management WinPE Environments
Creating and managing WinPE environments for QUEST SDA.
-
Manage User Data with USMT
Managing user data backup and restoration with USMT in QUEST SDA.
-
Installing SDA Relay
Installation and configuration SDA relay at a remote site.
-
How install KACE Desktop Authority
OS support, required ports, AV exclusions, prep AD/SQL, size the host, then install KACE Desktop Authority
-
Install KMS Server
Configuring a Key Management Service (KMS) server
-
Install WSUS Server
WSUS setup with group-based auto-approvals (Pilot → Global1 → Global2), HTTPS configuration, memory tuning, and client assignment via GPO or registry.
-
Configuring BitLocker
Configure BitLocker, integrate Active Directory, enable TPM, and automate BitLocker activation with scripts.
-
Guide to Windows 11 Installation Using OSDCloud
Deploy Windows 11 using OSDCloud.
-
Manage LAPS Configuration Using MSI
Legacy LAPS — AD installation and configuration, GPO setup, and password retrieval.
