-
![]()
Dynamic drive maps with Group Policy Preferences
Yeah I know that cloud is the way to go and that everyone should use OneDrive and Teams instead of old style SMB drives. BUT…if you still need to do some dynamic drive mapping e.g. based on a user’s Active Directory group membership or the existence of a server or share, read on. To map…
-
![]()
BitLocker clean up
Update 2021-03-12: I have corrected the description of this script to be more accurate. I have used this script on PC clients in production to check if BitLocker is already enabled and that the necessary protectors are created. If not, the script will add a TPM protector and a recovery password protector which will be…
-
![]()
BranchCache stats
This script will summarize the utilization of BranchCache on a single PC client…
-
![]()
Replace TPM protector with new PCRs
Want to replace the TPM protector on an operating system volume the easy way? Grab this PowerShell script. Why would you want to do this? Because the default TPM platform validation profile (PCR values) on Windows 7 clients is quite sensitive to changes in the boot order, MBR, partition table, attached USB drives etc. If…
-
![]()
Set TPM Platform Validation Profile (PCR) during OSD
This PowerShell script can be used to control the TPM Platform Validation Profile used when protecting a BitLocker encrypted volume…
