EXPLORE THE NOTEBOOK
Notes from the command line, the workbench, and the vintage computer shelf.
Remove the internal drive password from Dell PCs with Dell's PowerShell provider, without ever writing the password into a script or package.
Dell BIOS passwords, without the pain · Note 3 ↗Write extensionAttribute1-15 on cloud-only Entra ID users from a CSV, with a clear note for every synced account it can't touch.
The Microsoft Graph toolbox · Note 2 ↗Onboarding to Defender for Endpoint and enrolling in Intune are two different things, and you almost never have to offboard one to get the other.
Getting devices into Intune · Note 6 ↗Force an immediate local admin password rotation on every machine in a collection, with Windows LAPS doing the password part so no script ever sees one.
Local admin, done right · Note 3 ↗A gpupdate wrapper that checks the domain trust first, never bounces anyone's session, and reports a real success or failure back to ConfigMgr.
Packaging with ConfigMgr · Note 4 ↗Feed it a list or an OU, and it deletes (or disables) only the computers that are genuinely stale, logs every decision to CSV, and shows you the plan first with -WhatIf.
Keeping Active Directory tidy · Note 5 ↗Feed it a list of computers and a service name, get back one row per machine saying whether it's installed, running, and how it starts.
PowerShell craft · Note 4 ↗The hardware hash script behind Windows Autopilot, explained. Upload straight to Intune with -Online, or export a CSV when the device can't reach the tenant.
Getting devices into Intune · Note 4 ↗