HP Lights-Out Windows Utility (windows installer). Allow you to connect to older HP ILOs that modern browsers do not support. https://support.hpe.com/connect/s/softwaredetails?language=en_US&softwareId=MTX_8abe539b67bf46978e8f84acb8 Show members of an AD Group: Get-ADGroupMember -Identity sample_group_name | select-object -property name Show groups that a user or group is a member of: Get-ADPrincipalGroupMembership -Identity username | select-object -property name Wild card searches for objects: get-aduser -filter {name -like "*beare*"} Get-ADComputer -filter {name -like "*123*"} Show environment variables: Get-ChildItem Env:\ Show uptime on remote computer: Invoke-Command -ComputerName placeholder -ScriptBlock {Get-CimInstance -ClassName Win32_OperatingSystem | Select LastBootUpTime} Find local admin password on Server 2016+: $ServerName = "SERVERNAME" $Server = Get-ADComputer -Filter {Name -eq $ServerName} -Properties "ms-Mcs-AdmPwd" Write-Output "ms-Mcs-AdmPwd: $($Server."ms-Mcs-AdmPwd")" Convert .cer certificate files to .pem: certutil.exe -encode .\root-ca.cer root-ca.pem Google search hotkey: ctrl k Disk Check/Repair: https://www.easeus.com/partition-manager-software/run-chkdsk-to-check-repair-drive.html Safe location to clear space on c drive. Remove old folders. SCCM packages are stored here. C:\Windows\ccmcache Powershell equivalent command to systeminfo to show OS etc: get-computerinfo Just the OS name: get-computerinfo -property WindowsProductName SCCM Tips: Useful tools for reading logs: C:\Windows\CCM\CMTrace.exe SCCM client log location: C:\Windows\CCM\Logs Reparing SCCM Client: https://www.prajwaldesai.com/repair-sccm-client-agent/ Or do a clean uninstall reinstall: Uninstall: c:\Windows\ccmsetup\ccmsetup.exe /uninstall Install: copy the installers from a DP (\\dp\e$\SMS\Client ) into C:\Windows\ccmsetup and run C:\windows\ccmsetup\ccmsetup.exe /install SMSSITECODE=XX RESETKEYINFORMATION=TRUE Windows Update logs Run: Get-WindowsUpdateLog This will convert the Windows Update event log to a readable output file. Inside the output file you can search for the KB or 'installed'. Finding system bootup time: systeminfo | find "System Boot Time" Script to find Operating System version of a Computer object in AD: $computers = get-content "C:\Temp\comps.txt" foreach ($computer in $computers) { get-adcomputer -identity $computer -properties * | select-object "name","operatingsystem" | export-csv C:\Temp\OS-version.csv -append } Script to copy files (KB installers) onto a list of remote computers: $computers = get-content "C:\Temp\comps.txt" foreach ($computer in $computers) { copy-item -path c:\temp\2012 -recurse -destination "\\$computer\c$\Temp\" -verbose } Command to install a KB windows update from the command line (cabinet file): dism /online /Add-Package /PackagePath:"c:\temp\windows.cab" Finding the process ID of a specific service: Run the following command: (get-wmiobject win32_service | where { $_.name -eq ‘wuauserv’}).processID Now that you have the Process ID, you can then stop it: Stop-Process 12208 -Force Test Port connectivity script Change 445 to the desired port. $computers = get-content "C:\Temp\comps-netstat1.txt" foreach ($computer in $computers) { invoke-command -ComputerName $computer -scriptblock { Get-NetTCPConnection -State Established } | select-object -Property PSComputerName, LocalPort, @{name='RemoteHostName';expression={(Resolve-DnsName $_.RemoteAddress).NameHost}},RemoteAddress | where-object {$_.LocalPort -eq 445} | export-csv C:\Temp\netstat.csv -append } Windows pay to check file hashes Get-FileHash file.csv -Algorithm MD5 Show when an AD account's password was last changed Get-ADUser -Identity username -Properties pwdlastset | format-table Name,@{Name='PwdLastSet';Expression={[DateTime]::FromFileTime($_.PwdLastSet)}} Updating AD Group Membership Without Restart or Logoff for a Computer (can also be done for user) Run: klist -li 0x3e7 purge Then run: gpupdate /force Source: https://peterdodemont.com/update-groups-no-restart.html Rename an AD joined computer and its associated computer object (in AD) without taking it off the domain. Log onto the server you want to rename. Run the below in powershell, then restart the computer to rename it. Rename-Computer -ComputerName $OldComputerName -NewName $NewComputerName -DomainCredential $Domain\Username