Ken kerard

## purge-kerberos.ps1
Invoke-commamd -computername . -scriptblock { klist -lh 0 -li 0x3e7 purge; gpupdate /force }

## test-credentialguard.ps1
'CredentialGuard' -match ((Get-ComputerInfo).DeviceGuardSecurityServicesConfigured)

## deallocate-firewall.ps1
# reference https://docs.microsoft.com/en-us/azure/firewall/firewall-faq#how-can-i-stop-and-start-azure-firewall

$azfw = Get-AzFirewall -Name "fw-myazurefirewall-dev" -ResourceGroupName "rg-myazurefirewall-dev"
$azfw.Deallocate()
Set-AzFirewall -AzureFirewall $azfw

## pscred.ps1
$user = @'
DOMAIN\svc_FooTester
'@

$password = @'
aReallyComplexPasswordString_lJ"ztdz&9|Gb;2mHlA^G5RhG2R@o!YMK
'@

# create a new credential
$serviceAccountCred = [PSCredential]::New($user,(convertto-securestring -asplaintext -force $password))

## get-cmstuff.ps1
$updates = Get-WmiObject -Namespace Root\ccm\clientSDK -Class CCM_softwareupdate -computername .

$rebootRequiredBoolean = Invoke-WmiMethod -ComputerName . -Namespace "ROOT\ccm\ClientSDK" -Class "CCM_ClientUtilities" -Name DetermineIfRebootPending | Select-Object -Property PSComputerName,RebootPending

## disable-nic-powermgmt.ps1
$interfaces = Get-WmiObject Win32_NetworkAdapter | where {$_.Name.equals("vmxnet3 Ethernet Adapter")}

foreach ($interface in $interfaces)
{
    $powerMgmt = Get-WmiObject MSPower_DeviceEnable -Namespace root\wmi | where {$_.InstanceName.Contains($interface.PNPDeviceID)}
    $powerMgmt.Enable = $False
    $powerMgmt.psbase.Put()
}

## get-schema-cn-and-oid.ps1
(get-adobject -searchbase (get-adrootdse).schemanamingcontext -filter * -properties *) | ?{$_.distinguishedname -like "*commonNameFilter*,dc=domain,dc=tld"} | % {$_.canonicalname; $_.attributeid}

## get-azpim.ps1
get-azureadgroup -searchstring "Azure PIM" | % {$_.DisplayName; $_ | get-azureadgroupmember | % {$_.DisplayName}}

## backup-restore-gpo.ps1
# backup

$gpos = "gponame1","gpo2","gpo3"

foreach ($gpo in $gpos)
{
    get-gpo -Name $gpo | backup-gpo -Path C:\foo\backup
}

# restore

## editcap-filter.cmd
editcap.exe -A "2020-08-05 03:58:00" -B "2020-08-05 04:05:00" "c:\path\to\input.pcapng" "c:\path\to\output.pcapng"
	# reference https://docs.microsoft.com/en-us/azure/firewall/firewall-faq#how-can-i-stop-and-start-azure-firewall

	$azfw = Get-AzFirewall -Name "fw-myazurefirewall-dev" -ResourceGroupName "rg-myazurefirewall-dev"
	$azfw.Deallocate()
	Set-AzFirewall -AzureFirewall $azfw
	$user = @'
	DOMAIN\svc_FooTester
	'@

	$password = @'
	aReallyComplexPasswordString_lJ"ztdz&9\|Gb;2mHlA^G5RhG2R@o!YMK
	'@

	# create a new credential
	$serviceAccountCred = [PSCredential]::New($user,(convertto-securestring -asplaintext -force $password))
	$updates = Get-WmiObject -Namespace Root\ccm\clientSDK -Class CCM_softwareupdate -computername .

	$rebootRequiredBoolean = Invoke-WmiMethod -ComputerName . -Namespace "ROOT\ccm\ClientSDK" -Class "CCM_ClientUtilities" -Name DetermineIfRebootPending \| Select-Object -Property PSComputerName,RebootPending
	$interfaces = Get-WmiObject Win32_NetworkAdapter \| where {$_.Name.equals("vmxnet3 Ethernet Adapter")}

	foreach ($interface in $interfaces)
	{
	$powerMgmt = Get-WmiObject MSPower_DeviceEnable -Namespace root\wmi \| where {$_.InstanceName.Contains($interface.PNPDeviceID)}
	$powerMgmt.Enable = $False
	$powerMgmt.psbase.Put()
	}
	# backup

	$gpos = "gponame1","gpo2","gpo3"

	foreach ($gpo in $gpos)
	{
	get-gpo -Name $gpo \| backup-gpo -Path C:\foo\backup
	}

	# restore