Windows PowerShell Archives

Winsage

March 18, 2025

Learn how the Windows Server 2025 editions differ

Microsoft is set to release Windows Server 2025 in November 2024, featuring several editions: Essentials, Standard, Datacenter, and Datacenter Azure. Windows Server Essentials is limited to servers with a single CPU and fewer than 10 cores and can only be obtained through hardware OEMs. The Standard edition allows Hyper-V licensing for up to two virtual machines, while the Datacenter edition has no such limits and offers more flexibility with disaster recovery features. The Datacenter Azure edition is optimized for the cloud and receives annual updates. The hardware requirements for Windows Server 2025 include a minimum 64-bit CPU at 1.4 GHz, support for various instructions, and the ability to accommodate up to 2,048 logical processors. The minimum memory requirement is 512 MB, with 2 GB recommended for optimal performance. Storage requirements suggest at least 64 GB for better performance, especially with Desktop Experience, and a Gigabit Ethernet adapter is necessary for networking. Several features have been deprecated in Windows Server 2025, including Computer Browser, Failover Clustering Cluster Sets, and NTLM, among others. Completely removed features include IIS 6 Management Console, NTLMv1, and Windows PowerShell 2.0 Engine. Organizations planning to migrate to Windows Server 2025 must ensure their hardware meets the minimum requirements and can perform an in-place upgrade if currently using Windows Server 2012 R2 or newer. Testing in a lab environment and backing up servers before migration are recommended steps.

Winsage

March 13, 2025

7 ways package managers make your life easier on Windows 11

Package managers like Winget and Chocolatey simplify software management on Windows by allowing users to install, update, and uninstall applications with single commands. Users can install applications with commands such as "choco install vlc.install" for individual apps or create scripts for batch installations like "choco install firefox vscode git 7zip -y" for multiple apps at once. Updating all applications can be done with "choco upgrade all," and selective updates can be performed using commands like "choco upgrade all --except='vlc, git'." Uninstalling applications is also streamlined with commands such as "choco uninstall vlc," which minimizes leftover files. Additionally, package managers optimize storage by managing shared dependencies efficiently, reducing redundant installations and conserving space. They enhance security by sourcing software from verified locations, mitigating the risk of malware.

Winsage

March 10, 2025

Threat Actors Exploited PHP-CGI RCE Vulnerability To Attack Windows Machines

Cisco Talos has reported a series of cyberattacks exploiting a critical vulnerability in PHP (CVE-2024-4577) to target Windows systems, primarily affecting organizations in Japan since January 2025. The vulnerability allows attackers to execute arbitrary PHP code on servers running Apache with PHP-CGI. They use a Python script, “PHP-CGICVE-2024-4577RCE.py,” to send crafted POST requests and confirm exploitation through a specific MD5 hash. After gaining access, attackers deploy a PowerShell injector script to establish a connection with their command and control (C2) server and utilize Cobalt Strike plugins for post-exploitation activities, including modifying registry keys for persistence and clearing event logs to evade detection. They conduct lateral movement using reconnaissance tools and exploit Group Policy Objects to execute malicious scripts, ultimately extracting credentials with Mimikatz. The attackers have access to a pre-configured installer script on their C2 server, suggesting potential for future attacks.

Winsage

March 2, 2025

Learn Windows PowerShell and automation scripting with this $20 bundle

Automation is increasingly important for businesses, and mastering Windows PowerShell can enhance productivity. A certification training bundle for PowerShell is available for .99, originally priced higher, led by IT professional Vijay Saini. The bundle includes six courses totaling 18 hours of content, providing lifelong access. Courses cover basic scripting, advanced scripting techniques, and GUI automation using Python, along with system management tools. Participants receive certificates upon completion, which can be added to LinkedIn profiles or resumes. The offer is time-sensitive and subject to price changes.

Winsage

February 17, 2025

Winhance transforms Windows 11 (and Windows 10) into the bloat-free, faster operating system you always wanted

User sentiment towards Windows 11 has led to the development of third-party tools to enhance the experience. Talon can debloat Windows 11 with just two clicks, removing unnecessary pre-installed applications like Microsoft Edge, OneDrive, Copilot, and Clipchamp. Winhance is another tool that debloats and optimizes Windows 11, also compatible with Windows 10 (22H2). Winhance features include: - Software & Apps: - Install Software - Permanently Remove Windows Apps (e.g., Microsoft Edge, OneDrive, Copilot) - Optimize: - Set UAC Notification Level - Disable/Enable Windows Security Suite - Privacy Settings - Gaming Optimizations - Windows Updates - Power Settings - Scheduled Tasks - Windows Services - Customize: - Toggle Windows Dark or Light Mode - Taskbar Customization - Start Menu Settings - Explorer Options - Notification Preferences - Sound Settings - Accessibility Options - Search Configuration To use Winhance, users must open PowerShell as Administrator, confirm privileges, enable script execution, and run a specific command to download and execute the application from GitHub. Winhance has received significant updates since its release in February, with version 2 introducing UI/UX improvements, critical fixes, and bug resolutions, including issues with Windows Search and OneDrive folder cleanup. A demonstration video is available for viewing.

Winsage

February 13, 2025

How to prevent forced installation of new Outlook on Windows 10 PCs

In February 2025, Microsoft began a mandatory update for Windows 10 users that included the forced installation of the new Outlook app as part of a strategy to integrate it into their ecosystem. This installation is linked to the KB5051974 update, which is a critical security patch. Users can prevent the new Outlook from being installed by modifying the Windows registry, specifically by creating a new string value named BlockedOobeUpdaters and setting its value data to ["MS_Outlook"]. This process must be repeated with each subsequent Windows 10 update. For users who have already had the new Outlook installed, it cannot be uninstalled through standard methods but can be removed using Windows PowerShell with the command: Remove-AppxProvisionedPackage -AllUsers -Online -PackageName (Get-AppxPackage Microsoft.OutlookForWindows).PackageFullName. Additionally, to uninstall unsupported Mail or Calendar apps, the command is: Get-AppxProvisionedPackage -Online | Where {$.DisplayName -match "microsoft.windowscommunicationsapps"} | Remove-AppxProvisionedPackage -Online -PackageName {$.PackageName}.

Winsage

February 4, 2025

5 reasons you should use PowerShell even if you don’t use Windows

PowerShell is a command-line interface that operates across Windows, Linux, and macOS, designed for automation and system management. It utilizes the Common Language Runtime (CLR) from the .NET framework, allowing it to function on any OS with CLR support. PowerShell automates repetitive tasks, enhancing productivity in file management, data processing, and system administration. It provides a familiar interface for system administrators managing mixed environments, facilitating effective cross-platform network management. PowerShell is compatible with Microsoft services like Azure, AWS, VMware, Exchange, and Active Directory, and can execute certain Linux commands natively. Since becoming open-source under the MIT license, it has encouraged community contributions and adaptation for modern IT environments. PowerShell differs from Windows PowerShell by offering cross-platform functionality and regular updates, making it a versatile tool for managing systems and services across various operating systems.

Winsage

December 26, 2024

Hands on: Microsoft is building an AI Shell for Windows 11 command line

Microsoft has launched the public preview of AI Shell, a command-line utility that integrates generative AI capabilities into Windows PowerShell. It features two AI agents: Azure OpenAI and Copilot in Azure, with the option to add more. The installation requires Windows 10 or later and PowerShell version 7.4.6, using the script: Invoke-Expression “& { $(Invoke-RestMethod ‘https://aka.ms/install-aishell.ps1’) }”. Configuration involves adding API keys after executing the Start-AIShell command. AI Shell can execute commands, provide explanations for cmdlets, assist in writing PowerShell scripts, and generate Python code. It includes commands like /code post to send generated code to the terminal, /code copy to copy code, resolve-error to send errors for resolution, and Invoke-AIShell to send queries.

Winsage

December 23, 2024

What to do when Windows 10 Print Management is missing

The Print Management Console is a utility in Windows 10 that allows desktop administrators to manage printer settings and configurations. It may be missing from some Windows 10 deployments, particularly in the Home edition and in installations from Windows 10 version 2004 onwards, where it became an optional feature. To check for its presence, users can run the command PrintManagement.msc. If absent, it can be installed using PowerShell with the command Get-WindowsCapability -Name "Print.Management.Console*" -Online | Add-WindowsCapability -Online or through the Windows GUI by navigating to Settings > System > Optional Features and adding it from there. The console is particularly useful for managing multiple printers, controlling access permissions, and monitoring print jobs.

Winsage

December 19, 2024

I used the command prompt to convert my media files on Windows, here’s how you can too

Windows Command Prompt can be used to convert media files into various formats using FFmpeg, an open-source multimedia framework. To set up FFmpeg on a Windows system, users must download it from the official FFmpeg website, extract the files, and create a folder for FFmpeg. The path to the FFmpeg "bin" folder must then be added to the system's Environment Variables to allow global access from the Command Prompt. To convert files, users can navigate to the folder containing the media files and use specific commands: - For images: ffmpeg -i Image.OriginalFormat Image.NewFormat - For audio: ffmpeg -i Audio.OriginalFormat Audio.NewFormat - For video: ffmpeg -i Video.OriginalFormat Video.NewFormat - To extract audio from a video: ffmpeg -i Video.OriginalFormat Audio.NewFormat FFmpeg supports various formats: - Image Formats: JPG/JPEG, PNG, TIFF, BMP, GIF, WebP, ICO, PPM, PGM, PBM, TGA - Audio Formats: MP3, AAC, WAV, OGG, FLAC, AC3, ALAC, WMA, AMR, AIFF, Opus, MP2, PCM, M4A, DTS - Video Formats: MP4, MKV, AVI, MOV, WMV, FLV, WebM, MPEG, OGG, 3GP, RM, TS, M2TS, VOB, DIVX, HEVC If the error "ffmpeg is not recognized as an internal or external command" occurs, it usually indicates a problem with the path configuration in the Environment Variables.