I sense a disturbance in the force, sorry internet. Trying to tweet this on X fails 🙁

He’s back. 👔 The man who started it all — @jsnover.com, Inventor of #PowerShell, will open #PSConfEU 2026 in #Wiesbaden with the keynote you don’t want to miss. 🎟️ Tickets now available → psconf.eu #Automation #IT #Germany #Europe

EUC folks with non-persistent desktops but using something like #FSlogix have you found a way to stop @OneDrive from taking ages (>50 minutes) to drop the (dehydrated) place holders into a new profile? Our sessions are generally <1 hour so cutting it fine + what if user needs a "late" file?

New Episode! 🚨 I cover layoffs from Amazon and GM, the root cause of the recent AWS outage, a concerning new Teams feature, my review of Pwn2Own Ireland 2025 and more! 🔊 Listen: on.soundcloud.com/ncOCKrv63zJM... 📺 View: youtu.be/aaLAY23ZJa4?...

Here's a typical use case for me using -Outvariable in an interactive PowerShell command line where I'm searching for a file so I want visual output as it searches but I also want the results in a variable so I can access more properties later if I need them without searching again

We're at 99 members on our new Dutch PowerShell User Group meetup, are you going to get us to 100? Join us, for our favorite price: Free, here: meetup.com/dutch-powers... And if you do, share it here! #PowerShell #DevOps

PowerShell 7.5.4 released github.com/PowerShell/P...

Just dug this 2018 tweet out as seeing the issue at a customer: #Windows Security event log being swamped by 4703 "A token right was adjusted" events? Disable "Audit Authorization Policy Change" by local or group policy. Common with #SCCM learn.microsoft.com/en-us/previo...

What's the current thinking/consensus/experience of having duplicate machine SIDs on the same subnet & members of the same domain (different hostnames & MAC & IP addresses obviously)? It's many years since @markrussinovich.bsky.social said changing SIDs wasn't necessary but what about RoW?

💡 Be Your Own Sherlock in the Realms of Microsoft Graph 👨‍🏫 @hcritter.bsky.social – Senior System Engineer at CANCOM GmbH 🗓️ 14 Oct | #PSConfEU MiniCon 👉 Free ticket: synedgy.com/psconfeu-minicon #PowerShell #Microsoft #Graph #automation

If you want to quickly figure out if & where a process is writing a logfile, create a filter (ctrl l) in @SysInternals procmon for your process(es) and also Category = Write & turn off registry & network capture in the toolbar

Any of you got experiences of packaging Adobe or AutoCAD apps into MSIX and delivering via App Attach? About to have a play myself but interested to know if others have tried. I think going App-V is probably not a sensible approach given its life expectancy.

Need to turn %USERDNSDOMAIN% into canonical form, eg for ADSI ? "DC=$(($env:USERDNSDOMAIN -split '\.') -join ',DC=')"

💡 #PowerShell Security: A Journey Through Time 👨‍🏫👨‍🏫 @miriamwiesner.bsky.social - Security Researcher at Microsoft & Anam Navied - Software Engineer, PowerShell team at Microsoft 🗓️ 14 Oct | #PSConfEU MiniCon 👉 Free ticket: synedgy.com/psconfeu-minicon #automation

London #PowerShell User Group in person Meetup is tomorrow evening www.meetup.com/powershell-l...

It seems that the long standing PowerShell 7.5.* bug where Out-Gridview doesn't function properly is fixed in 7.5.3! Hurrah! github.com/PowerShell/P...

PowerShell 7.4.12 is now available. I'll be on 7.4.* until Out-Gridview is fixed in 7.5.* although there is a new 7.5.3 release too github.com/PowerShell/P...

TIL I've been using Microsoft products since 1980 when I wrote my first lines of BASIC code which was on a Commodore PET that my late (mainframe) COBOL coding father sometimes brought back from his office

Did you know that Entra ID SIDs start S-1-12-1 whereas (legacy?) AD domain and local normal accounts start S-1-5-21 ?

Multiple vulnerabilities in Dell ThinOS 10 URL: www.dell.com/support/kbdo... Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6

PowerShell 1 liner to clear all event logs Get-WinEvent -ListLog * -EA 0 -PipelineVariable log | %{ $log.LogName ; wevtutil.exe clear-log "$($log.LogName)" }

New PowerShell script to find your geographically closest Azure location. Uses geo location so may not be accurate! Guess which of these I ran from a Windows 365/Cloud PC instance? 😂 Will prompt for login if not connected which may need tenant or subscription parameters github.com/guyrleech/Az...

Ransomware Allegations Surface As Colt Outages Continue www.databreachtoday.com/ransomware-a...

the UK government has dropped its demand for a backdoor into Apple's encryption. This could open the door for Apple to bring back its Advanced Data Protection iCloud encryption to the UK for new users www.theverge.com/news/761240/...

New script, because Get-Hotfix is unhelpful, that uses Windows Update COM interface to show installed updates with various filtering options and raw/object or text output. Excludes Defender pattern updates by default github.com/guyrleech/Mi...

TIL that Get-Help (alias help) does not work in a remote PS session

Telco giant Colt suffers attack, takes systems offline www.theregister.com/2025/08/15/l...

TIL the @bsky.app Android app doesn't seem to allow selection of text in messages so making copy paste ,etc impossible which is a PITA when you want to e.g. look up a name in a search engine

PowerShell 5.1 gave: Move-Item : Cannot create a file when that file already exists. even with -Force. Was a permission error as existing file only had permission for SYSTEM & script running as admin.

Need the path to the user profile for the system account? (Get-CimInstance -ClassName win32_userprofile -filter "sid = 'S-1-5-18'").LocalPath Profiles for other special accounts also available that way

New episode! 🚨 I cover some issues caused by the latest Windows Updates, give an update on the M&S cyber attack, I discuss a landmark for Google's AI security platform and much more! 🔊Listen: on.soundcloud.com/F1JGGvIaVVTx... 📺View: www.youtube.com/watch?v=d43S...

Forgotten how funny @davegorman.bsky.social is - 10 minutes into an episode of Modern Life is Goodish and I'm finally smiling this Monday. Thank you sir

For anyone who went to @guyrleech.bsky.social talk on Using Powershell to Explore Windows, or if you are just curious what you missed, you can download the slides here: files.speakerdeck.com/presentation...

Slides from my "Using PowerShell to Explore Windows" workshop at @steelcon.info 2025 files.speakerdeck.com/presentation...

Came up with this 1 liner in my PowerShell workshop at @steelcon.info last week which finds any not validly signed modules (dlls) in running processes (excluding JIT'd ones). There are some 3rd parties (& LinkedIn app) but some Microsoft components too ☹️

My trip to @steelcon.info in Sheffield to give a workshop on PowerShell has commenced. T shirt selected because I will be covering a little #regex😄

3 similar PowerShell 1 liners to search the registry for a value by name or content or for a key by name. Value search can be string (via regex which doesn't have to be scary😊) or numerical

When using Get-ChildItem (alias dir & ls) to get specific files/folders recursively, use -Filter instead of -Include because it filters at the provider level rather then returning all data & then filtering -Filter only takes 1 argument but -Include can be an array *.jpg,*.jpeg

Finally made a video to show how I build up regex bit by bit, testing as I go. The example here is parsing a CBS (Component Based Servicing) log but technique can be used for any log file. Resulting #Regex may look scary but please watch how it is built. 10 mins, not edited youtu.be/IbbqB6ZGGT8

TIL PowerShell 7.x Get-Process (alias ps) returns the Parent process object which 5.x doesn't and you had to use WMI/CIM instead. It's a pity that 7.x isn't going to be standard/OOB for a while yet

Anyone for PSaaS (#PowerShell as a Service) ? Comprises a set monthly number of hours that can be used for fixing your code, code reviews, training, optimisation, security analysis, etc. If PowerShell automation is important to your business, why not have support for it? github.com/guyrleech/Po...

Check out the #PSCONFEU 2025 playlist. Videos released daily from the last day of the PowerShell Europe conference (Thank you @thorsten.butz.io#PSCONFEU) Subscribe to the channel and watch the 2025 playlist, link below.

A space has just come up for "From Pods to Policies" and "Using PowerShell to ExploreWindows" Grab them quick, they won't last long: ti.to/steelcon/2025

#FSlogix 2506 now available techcommunity.microsoft.com/blog/FSLogix...

PowerShell 1 liner to show what, if any, #FSlogix disks are mounted (get-disk|where Bustype -ieq 'File Backed Virtual').location

If you write #PowerShell and want to learn how to make beautiful, modern UIs for your scripts, join me tomorrow at the Research Triangle PSUG where we'll do just that leveraging the new WinUIShell module! You can find all the information on Meetup below. I hope you are able to join us!

Here's an easy PowerShell way to create any size test data files. fsutil can do it too Example deletes too as it was just for testing the @controlup.bsky.social Disk Monitor utility with FSlogix and Citrix UPM

I use Start-Transcript a lot in my scripts to record a simple, unstructured, log from them & usually append to an existing log file so they can get quite large but often I want to find the start of the latest run so have this 1 liner 🧵