This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Removes ZeroTier One | |
$Paths = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall', 'HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall' | |
$ZeroTierOne = Get-ChildItem -Path $Paths | Get-ItemProperty | Where-Object { $_.DisplayName -like 'ZeroTier One' } | Select-Object | |
$VirtualNetworkPort = Get-ChildItem -Path $Paths | Get-ItemProperty | Where-Object { $_.DisplayName -like 'ZeroTier One Virtual Network Port' } | Select-Object | |
if ($ZeroTierOne) { | |
Write-Output 'Uninstalling ZeroTier One...' | |
foreach ($Ver in $ZeroTierOne) { | |
$Uninst = $Ver.UninstallString | |
cmd /c $Uninst /qn |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<# | |
.SYNOPSIS | |
Installs ZeroTier | |
.DESCRIPTION | |
Install ZeroTier and join/configure ZeroTier network | |
.EXAMPLE | |
./ios-InstallZeroTier.ps1 | |
.NOTES | |
This script will install PowerShell 7 if it is not present. | |
A UAC prompt will appear during install if -UI is used. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<# | |
.SYNOPSIS | |
Manages browser settings through local group policy objects (LGPO). | |
.PARAMETER Audit | |
Outputs a table of the current browser management policies (LGPO). No new polices will be set. | |
.PARAMETER Reset | |
Resets all existing browser management policies (LGPO). No new policies will be set. | |
.PARAMETER SearchEngine | |
Specify the default search engine. Supported values are 'Google' or 'Bing'. | |
#> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Manage Windows Defender & Windows Firewall via Local Group Policy | |
$ComputerPolicyFile = ($env:SystemRoot + '\System32\GroupPolicy\Machine\registry.pol') | |
$DefenderKey = 'Software\Policies\Microsoft\Windows Defender' | |
$FirewallKey = 'Software\Policies\Microsoft\WindowsFirewall' | |
$ExploitGuardKey = 'Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard' | |
Write-Output "`nChecking for necessary PowerShell modules..." | |
try { | |
# Set PowerShell to TLS 1.2 (https://devblogs.microsoft.com/powershell/powershell-gallery-tls-support/) | |
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Remove unnecessary packages | |
$Allowlist = @( | |
'DellCommandUpdate', # Dell Command Update app | |
'HPPrinterControl' # HP Smart app | |
) | |
$Identifiers = @( | |
'AcerIncorporated', # Acer Identifier | |
'AD2F1837', # HP Identifier |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Removes Webroot SecureAnywhere by force | |
# Run the script once, reboot, then run again | |
# Webroot SecureAnywhere registry keys | |
$RegKeys = @( | |
"HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\WRUNINST", | |
"HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WRUNINST", | |
"HKLM:\SOFTWARE\WOW6432Node\WRData", | |
"HKLM:\SOFTWARE\WOW6432Node\WRCore", | |
"HKLM:\SOFTWARE\WOW6432Node\WRMIDData", |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Cleans up default start menu and taskbar (some settings require Windows Pro) | |
function Install-PSModule { | |
param( | |
[Parameter(Position = 0, Mandatory = $true)] | |
[String[]]$Modules | |
) | |
Write-Output "`nChecking for necessary PowerShell modules..." | |
try { |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Install all Windows updates | |
function Install-PSModule { | |
param( | |
[Parameter(Position = 0, Mandatory = $true)] | |
[String[]]$Modules | |
) | |
Write-Output "`nChecking for necessary PowerShell modules..." | |
try { | |
# Set PowerShell to TLS 1.2 (https://devblogs.microsoft.com/powershell/powershell-gallery-tls-support/) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Manage Windows Defender Exclusions | |
param ( | |
[switch]$Audit, # Audit exclusions | |
[string[]]$ASR, # Exclude files/paths from ASR rules | |
[string[]]$Ext, # Exclude file extensions (Example: exe, txt, pdf) | |
[string[]]$IP, # Exclude IP addresses | |
[string[]]$Path, # Exclude paths | |
[string[]]$Process, # Exclude processes | |
[switch]$Remove # Remove exclusions |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<# | |
.SYNOPSIS | |
Manages browser extensions through local group policy objects (LGPO). | |
.DESCRIPTION | |
This script sets up browser extension allow-listing (whitelisting) though LGPO. | |
Extensions can be added to the allow list by passing their extension ID via the -ChromeExtIDs or -EdgeExtIDs parameters. | |
.LINK | |
Chrome Extension lookup URL: https://chrome.google.com/webstore/detail/[ID] | |
Edge Extension lookup URL: https://microsoftedge.microsoft.com/addons/detail/[ID] | |
PolicyFileEditor PowerShell Module: https://github.com/dlwyatt/PolicyFileEditor |
NewerOlder