Three practical projects for operating Windows infrastructure: centrally managed GPO changes, traceable PowerShell workflows, diagnostics, and explicit safety boundaries.
Moving from an isolated script to an operationally controlled workflow: targeting, safe execution, repeatability, and observability.
Centralized Veyon Service rollout to Windows 10/11 clients: package and configuration verification, service state, firewall rules, and authentication troubleshooting.
Checksums and signing, idempotence, access control, troubleshooting.
Manifest-driven 7-Zip MSI installation and updates using SHA256, msiexec and Scheduled Tasks. A shared mutex prevents conflicting jobs; RDS updates are deferred while user sessions exist.
Version checks, audit logs, SYSVOL/DFSR validation, RDS deferral.
Inventory and targeted removal of current-user Windows Appx packages using exact package identities, with separate Audit and Enforce modes.
Protected SystemApps, OneDrive and Outlook safeguards, audit-first rollout.
Each project separates GPO targeting and delivery from the PowerShell application logic, defines its execution context, checks system state, and logs results. Machine-wide deployment tasks run as SYSTEM; user-scoped Appx operations run as the interactive user.