HP Lights-Out Windows Utility (windows installer). Allow you to connect to older HP ILOs that modern browsers do not support. https://support.hpe.com/connect/s/softwaredetails?language=en_US&softwareId=MTX_8abe539b67bf46978e8f84acb8 Show members of an AD Group: Get-ADGroupMember -Identity sample_group_name | select-object -property name Show groups that a user or group is a member of: Get-ADPrincipalGroupMembership -Identity username | select-object -property name Wild card searches for objects: get-aduser -filter {name -like "*beare*"} Get-ADComputer -filter {name -like "*123*"} Show environment variables: Get-ChildItem Env:\ Show uptime on remote computer: Invoke-Command -ComputerName placeholder -ScriptBlock {Get-CimInstance -ClassName Win32_OperatingSystem | Select LastBootUpTime} Find local admin password on Server 2016+: $ServerName = "SERVERNAME" $Server = Get-ADComputer -Filter {Name -eq $ServerName} -Properties "ms-Mcs-AdmPwd" Write-Output "ms-Mcs-AdmPwd: $($Server."ms-Mcs-AdmPwd")" Convert .cer certificate files to .pem: certutil.exe -encode .\root-ca.cer root-ca.pem Google search hotkey: ctrl k Disk Check/Repair: https://www.easeus.com/partition-manager-software/run-chkdsk-to-check-repair-drive.html Safe location to clear space on c drive. Remove old folders. SCCM packages are stored here. C:\Windows\ccmcache Powershell equivalent command to systeminfo to show OS etc: get-computerinfo Just the OS name: get-computerinfo -property WindowsProductName SCCM Tips: Useful tools for reading logs: C:\Windows\CCM\CMTrace.exe SCCM client log location: C:\Windows\CCM\Logs Reparing SCCM Client: https://www.prajwaldesai.com/repair-sccm-client-agent/ Or do a clean uninstall reinstall: Uninstall: c:\Windows\ccmsetup\ccmsetup.exe /uninstall Install: copy the installers from a DP (\\dp\e$\SMS\Client ) into C:\Windows\ccmsetup and run C:\windows\ccmsetup\ccmsetup.exe /install SMSSITECODE=XX RESETKEYINFORMATION=TRUE Windows Update logs Run: Get-WindowsUpdateLog This will convert the Windows Update event log to a readable output file. Inside the output file you can search for the KB or 'installed'. Finding system bootup time: systeminfo | find "System Boot Time" Script to find Operating System version of a Computer object in AD: $computers = get-content "C:\Temp\comps.txt" foreach ($computer in $computers) { get-adcomputer -identity $computer -properties * | select-object "name","operatingsystem" | export-csv C:\Temp\OS-version.csv -append } Script to copy files (KB installers) onto a list of remote computers: $computers = get-content "C:\Temp\comps.txt" foreach ($computer in $computers) { copy-item -path c:\temp\2012 -recurse -destination "\\$computer\c$\Temp\" -verbose } Command to install a KB windows update from the command line (cabinet file): dism /online /Add-Package /PackagePath:"c:\temp\windows.cab" Finding the process ID of a specific service: Run the following command: (get-wmiobject win32_service | where { $_.name -eq ‘wuauserv’}).processID Now that you have the Process ID, you can then stop it: Stop-Process 12208 -Force Test Port connectivity script Change 445 to the desired port. $computers = get-content "C:\Temp\comps-netstat1.txt" foreach ($computer in $computers) { invoke-command -ComputerName $computer -scriptblock { Get-NetTCPConnection -State Established } | select-object -Property PSComputerName, LocalPort, @{name='RemoteHostName';expression={(Resolve-DnsName $_.RemoteAddress).NameHost}},RemoteAddress | where-object {$_.LocalPort -eq 445} | export-csv C:\Temp\netstat.csv -append } Windows pay to check file hashes Get-FileHash file.csv -Algorithm MD5 Show when an AD account's password was last changed Get-ADUser -Identity username -Properties pwdlastset | format-table Name,@{Name='PwdLastSet';Expression={[DateTime]::FromFileTime($_.PwdLastSet)}} Updating AD Group Membership Without Restart or Logoff for a Computer (can also be done for user) Run: klist -li 0x3e7 purge Then run: gpupdate /force Source: https://peterdodemont.com/update-groups-no-restart.html