Scripting Archives - www.butsch.ch

Deployment GPO | Gruppenrichtlinien Intunes Scripting SECURITY

Proxy settings der Cryptography API bei Zertifikatswiderrufslisten (CRL) von einem CRL-Verteilungspunkt

18.07.2024 admin

Dieser Artikel zielt darauf ab, den Prozess zu erläutern, den die Crypto API durchläuft, um erfolgreich eine HTTP-basierte URL für den CRL-Verteilungspunkt herunterzuladen. Er dient auch der Fehlerbehebung in Situationen, die mit der Netzwerkrückgewinnung von CRLs verbunden sind. Zusätzlich wird unser kostenloses Tool, crlcheck.exe, erwähnt, das dazu beitragen soll, komplexe Probleme effektiver zu lösen. […]

Deployment ENS | Endpoint Security FW Fortigate FW Sophos Mcafee/Trellix Scripting SECURITY

Certutil.exe –url –urlcache how to use and freeware GUI crl check to automate CRL verify

21.04.2024 admin

How to use Microsoft certutil.exe –url or –urlcache to find CRL and OCSP on Windows manually, or utilize our freeware tool crlcheck.exe, which performs the same function fully automatically for all EXE files on your system. crlcheck.exe https://www.butsch.ch/post/crlcheck-exe-certificate-revocation-list-check-tool-to-verify-all-crl-and-ocsp-on-windows-client/ What is a CRL Certificate Revocation List file? Each certificate authority (CA) periodically issues […]

CRUNCH ENS | Endpoint Security FW Fortigate FW Sophos GPO | Gruppenrichtlinien Intunes M365 - Exchange Online M365,AZURE,INTUNE Mcafee/Trellix Microsoft SCCM,MEM,MDT Microsoft Server OS Scripting Tools we made Uncategorized W10 WSUS

CRL check, Zertifikatsperrlisten Software, Certificate Revocation List Check Tool zum suchen aller geblockten CRL in Firmenumgebungen, crlcheck.exe

06.04.2024 admin

Mit diesem Tool findet man schnell und einfach alle verwendeten CRL eines clients und kann prüfen ob der client diese erreicht. In den vergangenen Jahren habe ich persönlich miterlebt, wie die Zertifikatssperrung auf Windows-Systemen oft unterschätzt wird, selbst in großen Unternehmen. Dieses Problem beeinträchtigt sowohl Client- als auch Server-Systeme erheblich, wenn es nicht korrekt verwaltet […]

CRUNCH Deployment DLP | Data Loss Prevention ENS | Endpoint Security Exchange 2010 Exchange 2013 Exchange 2016 Exchange 2019 FW Fortigate FW Sophos Intunes M365 - Exchange Online Mcafee/Trellix Microsoft Exchange Microsoft SCCM,MEM,MDT Microsoft Server OS MSME | Security for Exchange Scripting SECURITY Server 2016 Server 2022 [21H2/22H2/32H2] TIE/ATD/ATP | Sandbox - Advanced Threat Protection Tools we made VMWare W10

CRLcheck.exe Certificate Revocation List Check Tool to verify all CRL and OCSP on Windows client

23.03.2024 admin

CRLcheck.exe Certificate Revocation List Check Tool to automatic verify CRL and OCSP internet reachability of all your EXE files that your client runs. Download 11/2024 NEW Release 2.0.1.0 with OSCP check, Proxy Options, AIA Chain check etc. Version 2.0.1.0, https://www.butsch.ch/wp-content/uploads/tools/crlcheck/latest/crlcheck.7z Over the past 20 years, I have personally witnessed how Certificate Revocation […]

Deployment Intunes M365,AZURE,INTUNE Scripting

INTUNES-MEM: 32 or 64-bit Runtime and Registry Hive explained (WOW6432Node)

27.01.2024 admin

The normal Intunes Agent that is running on a Windows 10/11 64-bit OS is a 32-bit Agent. INTUNES-MEM: 32 or 64-bit Runtime and Registry Hive explained (WOW6432Node) Short sample why you maybe landed here…. What is the problem that we often see: A Win32APP with import_registry.cmd or import_registry.ps1 is run via Intunes. Before deployment […]

Deployment Scripting

Powershell, Retrieve DisplayName,DisplayVersion,Publisher from Registry or export.REG

05.09.2023 admin

Hello, You need and easy way to get an inventory list of software installed on a machine via Powershell. What we need for a list is: DisplayName;DisplayVersion;Publisher We have two version of the scripts: Version 1 Use regedit and export the HIVES into .REG Files. Copy to your admin machine an then parse the two […]

Deployment Scripting

Eventviewer, eventvwr.exe commandline filter XML query buildingm (Call and pre filter view with one line)

28.07.2023 admin

Introduction: Event logs provide valuable insights into system operations, allowing IT professionals to monitor and troubleshoot potential issues. When dealing with Windows event logs, PowerShell is a powerful tool that enables event filtering, but it may not be everyone’s preferred choice due to complexity and perceived security concerns. In this blog post, we will explore […]

M365,AZURE,INTUNE Scripting

M365/Power Automate/Flow: PA is in wrong language as example German/Deutsch Syntax GO TO missing, change language

04.02.2023 admin

Some braindumps from trying to learn new M365 things. Automation of Blender with Power Automate Desktop. I have long experience in AUTOIT but wanted to try the MS solution for once. If you Install Power Automate desktop the Menu, content and also the Commands are in the primary APP language you have under […]

Deployment Ivanti Frontrange Enteo Microsoft SCCM,MEM,MDT Scripting W10 WSUS

inprogressinstallinfo.ipi. Cannot open database file. System error -2147287037.

18.08.2022 admin

W10/W11, 21, Disk D: and e: ripped out and moved to new PC, Error on old PC with just the c: and 21H2 Problem: Error 2203.Database: C:\WINDOWS\Installer\inprogressinstallinfo.ipi. Cannot open database file. System error -2147287037. The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code […]

CRUNCH Deployment Ivanti Frontrange Enteo Scripting W10 WMI

Enteo V6.X Master Referenz Paket (Screensaver/Locked/User Fragen), Version 1.1 vom 10.10.2010

18.03.2022 admin

Enteo V6.X Master Referenz Paket (Screensaver/Locked/User Fragen), Version 1.1 vom 10.10.2010 Alle Binaries sowie ein Export des Projektes von Enteo V6.2 sind unter dieser URL zu finden: https://www.butsch.ch Was macht das Paket? Dieses universelle Referenz Paket soll zeigen wie man in einer reellen Deployment Umgebung auf das Environment und die User eingehen kann. Bei vielen […]

Deployment Scripting

Powershell List and Export Active Directory users UNDER certain OU incl. Homeshare

16.10.2021 admin

Powershell: List/Export Active Directory users UNDER certain OU incl. Home share Searchbase = distinguishedName How to find this out: Start Active Directory User and Computers Console Go to the OU you want to export and Right click > Attribute Editor Copy the distinguishedName into the script below behind search base Change your Domain controller behind […]

Deployment GPO | Gruppenrichtlinien Hotfixes, Updates Scripting W10

Samsung SSD + Bitlocker leak

08.11.2018 admin

Check if you are affected by the 11/2018 SSD Bitlocker Leak. ADV180028 | Guidance for configuring BitLocker to enforce software encryption Security Advisory, Published: 06.11.2018 Producer: Samsung and Crucial Affected models proof: Crucial MX100, MX200, MX300, Samsung EVO 840, 850, Samsung External USB T3/T5 There is a leak with certain SSD Hard disk (Solid-state) together […]

CRUNCH Deployment FW Fortigate FW Sophos Ivanti Frontrange Enteo M365,AZURE,INTUNE Mcafee/Trellix Microsoft SCCM,MEM,MDT Scripting SECURITY W10

Missing entry in Fortigate Application Filter ROOT.CERTIFICATE.URL and OCSP source of W10 Setup failing

31.10.2018 admin

Fortigate Application Filter Certificate wrong/missing Entry sample for an important laptop driver (W10 Deployment fails because of signed Driver Revocation Lookup) OR HOW a missing small ENTRY I a FORTIGATE FIREWALL IPS/APP filter can ruin your Windows 10 OS-Deployment work. Reason: Missing entry in Fortigate Application Filter “ROOT.CERTIFICATE.URL” and “OCSP” source of failing deployment […]

Deployment Hotfixes, Updates Scripting WMI WSUS

W7, 64BIT, WMI Hotfixes do date post SP1

29.07.2015 admin

WMI Hotfixes to date 29.07.2015 During IE11 projects we have seen problems with some WMI and WUSA.EXE KB installations. It sometimes seems that the WMI provider who offers that info hangs or is out of date. Even with some command to refresh it0s stuck. This is a list of Hotfixes we found in that direction […]

ENS | Endpoint Security EPO | ePolicy Orchestrator Mcafee/Trellix Scripting Uncategorized

Mcafee EPO prevent exe RUNNING FROM %appdata%

14.07.2015 admin

Mcafee EPO prevent exe RUNNING FROM %appdata% folders with an Access protection Policy How to protect from most 0day Flash Exploits and malware like Ransom Cryptowall in summer 2015. You simply can’t keep up with patching even with deployment or Management solutions in place. Now you should have an IPS Filter like Fortigate with Fortiguard. […]


Try our new Certificate Revocation List Check Tool CRLcheck.exe is a tool developed to verify digital signatures of executable files. It collects files from known paths on your client, checks their signature, and checks Certificate Revocation Lists (CRL) and OCSP download. This helps avoid delays in launching files.

Category: Scripting