Quick Script: Add permissions to registry key with Powershell

Write-Output "Setting Registry Permissions"

$acl = Get-Acl "HKLM:\SOFTWARE\App"

$person = [System.Security.Principal.NTAccount]"DOMAIN\Domain Users"

$access = [System.Security.AccessControl.RegistryRights]"FullControl"

$inheritance = [System.Security.AccessControl.InheritanceFlags]"ContainerInherit"

$propagation = [System.Security.AccessControl.PropagationFlags]"None"

$type = [System.Security.AccessControl.AccessControlType]"Allow"

$rule = New-Object System.Security.AccessControl.RegistryAccessRule("$person","$access","$inheritance","$propagation","$type")

$acl.SetAccessRule($rule)

$acl |Set-Acl -Path "HKLM:\SOFTWARE\App" 

Quick Script: Run a MSI installer with a transform using Powershell

function Run-MsiExec($installShare, $msiPackage, $Transform, $options){

       $Arguments = "/i `"$env:temp\$msiPackage`" ALLUSERS=2 TRANSFORMS=`"$env:temp\$Transform`" /qn $options"

      

       Copy-Item "$installShare\$msiPackage" "$env:temp\$msiPackage"

       if($Transform){

              Copy-Item "$installShare\$Transform" "$env:temp\$Transform"

       }else{

              $Arguments = "/i `"$env:temp\$msiPackage`" ALLUSERS=2 /qn $options"

       }

       Write-Host "Installing $msiPackage"

    Write-Host "Start-Process -FilePath 'msiexec.exe' -ArgumentList "$Arguments" -Wait -Passthru"

       return (Start-Process -FilePath "msiexec.exe" -ArgumentList "$Arguments" -Wait -Passthru).ExitCode

} 

Quick Script: Uninstall Software with Powershell

Get-WmiObject win32_product | ?{$_.Name -imatch "software"} | %{$_.Uninstall()} 

Quick Script: Sign script with timestamp using Powershell

$cert = gci cert:\currentuser\my -CodeSigningCert | ?{$_.thumbprint -eq "DA46063E89886D185F19FCD64483E35B1898925D" }

Set-AuthenticodeSignature $args[0] $cert -TimestampServer "http://timestamp.verisign.com/scripts/timstamp.dll" 

Quick Script: check for blank password using Powershell

function Check-AdminPassword(){

$LocalAdministrator = "Administrator"

$PasswordToTest = ""

$Computer = Hostname

$LdapFilter = "(&(objectCategory=Computer)(name=$Computer*))"

$Searcher = New-Object System.DirectoryServices.DirectorySearcher($Null, $LdapFilter)

$Searcher.PageSize = 1000

$PropertiesToLoad = @("name")

$Searcher.PropertiesToLoad.AddRange($PropertiesToLoad)

$Results = @()

$Searcher.FindAll() | %{

  # Variable that can be accessed within the Trap

  $Script:Exception = $Null

  # Capture any error

  Trap [Exception] {

    $Script:Exception = ($_.Exception.Message).Trim()

    Continue;

  }

  # Test binding to the Administrators group with the specified username and password

  [Void](New-Object System.DirectoryServices.DirectoryEntry(`

    "WinNT://$($_.Properties['name'])/Administrators, group", `

    "$($_.Properties['name'])\$LocalAdministrator", `

    $PasswordToTest, 0)).PsBase.Get_Name()

  # If no error is returned the the bind suceeded with this password

  If (!$Script:Exception) {

    Write-Host "[ ] Admin Password on $($_.Properties['name']) is Blank!!!"

   

  } Else {

    Write-Host "[X] Admin Password on $($_.Properties['name']) is set"

    #Write-Host "$($_.Properties['name']): Error binding - $($Script:Exception)"

  }

}

} 

# I am sure I copied most this script form someplace, but not sure where.

Quick Script:Enable automatic updates with default values with Powershell

#Enable Auto Updates with default schedule

    $objAutoUpdate = new-Object -com Microsoft.Update.AutoUpdate

    $objSettings = $objAutoUpdate.Settings

    $objSettings.NotificationLevel = 4

    $objSettings.IncludeRecommendedUpdates = $true

    $objSettings.Save()

       Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" -Name ScheduledInstallTime -Value 4

Quick Script: Set Timezone

#Set Zimezone

    tzutil /s  "Central Standard Time"