Skip to content

Instantly share code, notes, and snippets.

View derekschartung's full-sized avatar
💭
I may be slow to respond.

Derek Schartung derekschartung

💭
I may be slow to respond.
View GitHub Profile
@derekschartung
derekschartung / Disable-WindowsHello.ps1
Created April 29, 2025 12:02 — forked from d4rkeagle65/Disable-WindowsHello.ps1
Small script to disable Windows Hello Pin and Biometrics. This will disable the prompt the user to set one up, and will remove any existing pin/biometrics already set. Reboot required after running.
Set-ItemProperty HKLM:\SOFTWARE\Policies\Microsoft\Windows\System -Name 'AllowDomainPINLogon' -Value 0
Set-ItemProperty HKLM:\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowSignInOptions -Name 'value' -Value 0
New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\' -Name 'Biometrics' -Force
New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Biometrics' -Name 'Enabled' -Value 0 -PropertyType Dword -Force
New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\' -Name 'PassportforWork' -Force
New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\PassportforWork' -Name 'Enabled' -Value 0 -PropertyType Dword -Force
Start-Process cmd -ArgumentList '/s,/c,takeown /f C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /r /d y & icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /grant administrators:F /t & RD /S /Q C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc & MD C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc & icacls C:\Wi
# Define variables, these are example values.
$searchDir = "S:\Some Directory\With Images\"
# Should NOT be a sub-directory of the above
$outputDir = "S:\Output"
$sourceCsv = "S:\file-list.csv"
$logCsv = "S:\job-log.csv"
# Read the list of filenames from the source CSV
$filenames = Get-Content -Path $sourceCsv
@derekschartung
derekschartung / gist:ccb8eab6c144b185fa2d829be6988d80
Created September 3, 2024 19:40
Detect Adobe Acrobat 2020 (Perpetual Licensing)
# Define the path to the SWID files
$swidPath = "C:\ProgramData\regid.1986-12.com.adobe"
# Check if the directory exists
if (-Not (Test-Path -Path $swidPath)) {
Write-Output "SWID directory not found."
exit 0
}
# Get all SWID files in the directory
@derekschartung
derekschartung / data.tar.gz
Created May 16, 2024 13:19
Arctic Wolf Agent Debian File Listing
ubuntu@host1:~$ tar -ztvf data.tar.gz
./
./lib/
./lib/systemd/
./lib/systemd/system/
./lib/systemd/system/arcticwolfagent.service
./etc/
./etc/init.d/
./etc/init.d/wazuh-agent
./etc/systemd/
# Define some variables
$UserData = "$($env:LOCALAPPDATA)\Google\Chrome\User Data"
$Folders = Get-ChildItem $UserData | Where-Object{ $_.PSIsContainer -and $_.Name -eq "Default" -or $_.Name -like "Profile*"}
$FoldersFullPath = $Folders.FullName
# Nuke Chrome from orbit
if ($Null -ne (get-process 'chrome' -ErrorAction SilentlyContinue)){
stop-process -ProcessName 'chrome'
@echo off
taskkill /f /im gui.exe 2>nul
echo Waiting for Datto RMM to be removed...
"C:\Program Files (x86)\CentraStage\uninst.exe" /S 2>nul
powershell -ExecutionPolicy Bypass -Command "Start-Sleep -Seconds 10"
rmdir "C:\Program Files (x86)\CentraStage" /S /Q 2>nul
rmdir "C:\Windows\System32\config\systemprofile\AppData\Local\CentraStage" /S /Q 2>nul
rmdir "C:\Windows\SysWOW64\config\systemprofile\AppData\Local\CentraStage" /S /Q 2>nul
rmdir "%userprofile%\AppData\Local\CentraStage" /S /Q 2>nul
rmdir "%allusersprofile%\CentraStage" /S /Q 2>nul
<div class="col-sm-7 col-xs-12"><img alt="Cheekwood-Logo-White" src="https://cheekwood.wpengine.com/wp-content/themes/cheekwood/inc/assets/logo/CW_Logo_Horizontal_White.svg" /></div>
<div class="col-sm-5 col-xs-12">
<div id="nav"><a href="http://cheekwood.org/">Back to Home</a>&nbsp;<a href="https://cheekwood.org/buy-tickets/">Ticket Calendar</a>&nbsp;<a href="http://3892.blackbaudhosting.com/3892/page.aspx?pid=191">Cart</a></div>
</div>
/*
* Variables
*/
:root {
/* colors */
--color-primary-light: #00B388;
--color-primary: #286140;
--color-primary-dark: #215738;
cat PrintixClient-pwillingham.log
2023-02-07 11:20:59.133 [INFO :0001] -------------------------------------------------------------------------
2023-02-07 11:20:59.135 [INFO :0001] PrintixClient starting (X)
2023-02-07 11:20:59.136 [INFO :0001] -------------------------------------------------------------------------
2023-02-07 11:20:59.137 [ERROR:0001] KioskMode: Not able to open directory
2023-02-07 11:20:59.138 [ERROR:0001] CurrentVersion: Not able to open directory
2023-02-07 11:20:59.138 [INFO :0001] Registry: Environment =
2023-02-07 11:20:59.139 [INFO :0001] Running with API: api.printix.net, AUTH: auth.printix.net
2023-02-07 11:20:59.140 [WARN :0001] GUI mode is enabled
2023-02-07 11:20:59.187 [INFO :0001] -------------------------------------------------------------------------
dschartung@CW-MBP-90019 ~ % curl "https://3892.blackbaudhosting.com/3892/Basic-Membership?mpl=4BB3BFD2-1C9E-4CA8-A32D-74720257631E" -l -v
* Trying 209.67.139.38:443...
* Connected to 3892.blackbaudhosting.com (209.67.139.38) port 443 (#0)
* ALPN: offers h2
* ALPN: offers http/1.1
* CAfile: /etc/ssl/cert.pem
* CApath: none
* (304) (OUT), TLS handshake, Client hello (1):
* (304) (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):