Category: Research

Install-Module -Name IntuneWin32App $SourceFolder = “C:\Users\pwell\Downloads\DetectAndRemm\Powershell”$SetupFile = “InstallTeamviewer.ps1”$OutputFolder = “C:\Users\pwell\Downloads\DetectAndRemm”New-IntuneWin32AppPackage -SourceFolder $SourceFolder -SetupFile $SetupFile -OutputFolder $OutputFolder -Verbose

Application Control Configuration settings Edit Gatekeeper Allow apps downloaded from these locations Mac App Store Do not allow user to override Gatekeeper Yes User Application Hardening Chrome […]

Go to https://skipmdm.com Run the below in recovery mode You can verify the contents with curl https://raw.githubusercontent.com/skipmdm-phoenixbot/skipmdm.com/main/Autobypass-mdm.sh | cat For my Ventura Mac , I have to use Disk […]

Great Review -> https://andrewstaylor.com/2023/11/06/comparing-package-managers/

See Detection here https://pariswells.com/blog/research/powershell-script-to-get-all-active-local-administrators-on-the-pc/

Find out where your device is registered Powershell Script for AutoPilot Setup AutopilotBranding/AutopilotBranding/AutopilotBranding.ps1 at main · mtniehaus/AutopilotBranding · GitHub Create AutoPilot Group (device.devicePhysicalIDs -any (_ -contains “[ZTDID]”)) […]

If this is enabled the only way you can run stuff as Administrator is by logging in to the Machine As An Administrator ( Local Admin I […]

We had a customer that when a user logged out or restarted we would loose access to the machine until they logged back in Issue was the […]