Commonly Used Powershell Commands

AutoPilot

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
New-Item -Type Directory -Path "C:\HWID"
Set-Location -Path "C:\HWID"
$env:Path += ";C:\Program Files\WindowsPowerShell\Scripts"
Set-ExecutionPolicy -Scope Process -ExecutionPolicy RemoteSigned
Install-Script -Name Get-WindowsAutopilotInfo
Get-WindowsAutopilotInfo -OutputFile AutopilotHWID.csv

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
Set-ExecutionPolicy -Scope Process -ExecutionPolicy RemoteSigned
Install-Script -Name Get-WindowsAutopilotInfo -Force
Get-WindowsAutopilotInfo -Online

 “%WINDIR%\system32\sysprep\sysprep.exe”.

if you get an error re the device is already enrolled, delete all except

content

ownership

status

validnodepath

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments

Winget

winget list --upgrade-available --source=winget

winget source reset --force

winget upgrade --all --accept-source-agreements --accept-package-agreements --include-unknown --disable-interactivity --force --silent

 ren "c:\Program Files (x86)\WinGet-AutoUpdate-Configurator\excluded_apps.txt" excluded_apps.txt.old

ren "c:\programdata\winget-autoupdate\excluded_apps.txt" excluded_apps.txt.old

 winget uninstall Microsoft.Teams.Classic --all-versions

DISM

Lets get started by Opening up CMD as administrator and running the following:

dism /online /cleanup-image /scanhealth

Once /scanhealth is complete, run the following:

dism /online /cleanup-image /checkhealth

Now lets mount your Windows Server 2019 ISO as a drive. Take note of your mounted drive letter because you may need to change it to reflect it within this next command. Start elevated command prompt.

dism /online /cleanup-image /restorehealth /source:WIM:d:\sources\install.wim:2 /limitaccess

Hopefully all has been repaired restart your server, then run some windows updates and you should be good to go.

sfc /scannow

Microsoft In-tune Enrollment

powershell -command "Start-Process -FilePath 'C:\Windows\system32\deviceenroller.exe' -ArgumentList '/c /AutoEnrollMDM'"

Local Administrator Commands

net localgroup administrators

net localgroup administrators username /delete

Enroll PC in in-tune post joining to Azure AD

powershell -command "Start-Process -FilePath 'C:\Windows\system32\deviceenroller.exe' -ArgumentList '/c /AutoEnrollMDM'"

Change Computer Hostname

Rename-Computer -NewName "NEW-PC-NAME"

powershell -command " Rename-Computer -NewName "NEW-PC-NAME" "

Change power settings to never sleep

Powercfg /Change standby-timeout-ac 0

Enable local administrator account

net user administrator /active:yes

Set password on local administrator account

net user administrator n3w-p455w0rd

Delete local user account

net user user /delete

Enable ICMP Ping via PowerShell

netsh advfirewall firewall add rule name=”ICMP Allow incoming V4 echo request” protocol=icmpv4:8,any dir=in action=allow

Export Microsoft 365 2FA and active users via PowerShell

Install-Module AzureAD

Install-Module MSOnline

Connect-MsolService

Get-MsolUser -all | 
    select DisplayName,UserPrincipalName,@{N="MFA Status"; E={ 
        if($_.StrongAuthenticationRequirements.Count -ne 0){ 
            $_.StrongAuthenticationRequirements[0].State
        } else { 
            'Disabled'}
        }
    } | Export-CSV -Path C:\clientname.csv

Get-MsolUser | Select-Object * | Select DisplayName,UserPrincipalName,Licenses,WhenCreated | Export-CSV -Path C:\clientname.csv

Export Mailbox Sizes of Microsoft 365 via PowerShell

Set-ExecutionPolicy RemoteSigned

Install-Module -Name ExchangeOnlineManagement

Connect-ExchangeOnline -UserPrincipalName [email protected]

Get-Mailbox | Get-MailboxStatistics | select DisplayName,TotalItemSize | Export-CSV -Path C:\clientname.csv