{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Windows",
  "home_page_url": "https://evotec.xyz/de/categories/windows",
  "feed_url": "https://evotec.xyz/de/categories/windows/index.feed.json",
  "description": "Evotec",
  "items": [
    {
      "id": "https://evotec.xyz/de/blog/strengthening-password-security-in-active-directory-a-powershell-powered-approach",
      "url": "https://evotec.xyz/de/blog/strengthening-password-security-in-active-directory-a-powershell-powered-approach",
      "title": "Strengthening Password Security in Active Directory: A PowerShell-Powered Approach",
      "summary": "PasswordSolution uses the DSInternals PowerShell module to gather Active Directory hashes and then combines that data into a prettified report. If you have ever used DSInternals, you know that while very powerful, it comes with raw data that is hard to process and requires some skills to get it into a state that can be shown to management or security.",
      "date_published": "2023-05-28T14:40:25.0000000Z",
      "tags": [
        "active directory",
        "ad",
        "dsinternals",
        "html",
        "password quality",
        "passwordsolution",
        "powershell",
        "scan",
        "security",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/reporting-group-membership-for-critical-active-directory-groups",
      "url": "https://evotec.xyz/de/blog/reporting-group-membership-for-critical-active-directory-groups",
      "title": "Reporting group membership for critical Active Directory groups",
      "summary": "I work a lot with Active Directory-related tasks. One of the tasks is to know the group membership of critical Active Directory Groups such as Domain Admins, Enterprise Admins, Schema Admins, Event Log Readers, and a few others that are a bit less known. As I did it, I got bored of typing the group names repeatedly and decided that enough was enough and there must be an easier way for me to do that.",
      "date_published": "2022-08-07T11:57:28.0000000Z",
      "tags": [
        "active directory",
        "ad",
        "group membership",
        "groups",
        "nested groups",
        "powershell",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/officeimo-free-cross-platform-microsoft-word-net-library",
      "url": "https://evotec.xyz/de/blog/officeimo-free-cross-platform-microsoft-word-net-library",
      "title": "OfficeIMO \u2013 Free cross-platform Microsoft Word .NET library",
      "summary": "OfficeIMO is a free cross-platform .NET library for creating Word documents with Open XML SDK while hiding much of the low-level plumbing.",
      "date_published": "2022-06-12T16:14:01.0000000Z",
      "tags": [
        "c#",
        "csharp",
        "docx",
        "microsoft office",
        "Office 365",
        "officeimo",
        "Windows",
        "word"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/reading-iis-logs-with-powershell",
      "url": "https://evotec.xyz/de/blog/reading-iis-logs-with-powershell",
      "title": "Reading IIS logs with PowerShell",
      "summary": "Today I was reading Twitter, as I am pretty addicted to technology news when Adam Bacon mentioned that he\u2019s surprised that no one has rebuilt IIS Parser as pure PowerShell. While this is not entirely true, and some modules can do some parsing, I decided to try my luck. While doing it from scratch in PowerShell is possible, I opted to use an external C# library that does all the heavy lifting and is optimized for speed.",
      "date_published": "2022-06-04T19:47:08.0000000Z",
      "tags": [
        "iis",
        "iis-server",
        "logs",
        "powershell",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/difference-between-gettempfilename-and-getrandomfilename-that-got-my-ass-kicked",
      "url": "https://evotec.xyz/de/blog/difference-between-gettempfilename-and-getrandomfilename-that-got-my-ass-kicked",
      "title": "Difference between GetTempFileName() and GetRandomFileName() that got my ass kicked",
      "summary": "Today\u2019s story is about me making assumptions on how things work based on the method\u2019s name. As the blog post says, I want to focus on two similar methods \u2013 GetTempFileName() and GetRandomFileName(), when using PowerShell. Still, since those methods are .NET based, it applies to a whole range of other languages \u2013 C#, F#, VisualBasic, and all others that I\u2019ve never used.",
      "date_published": "2022-01-24T18:51:13.0000000Z",
      "tags": [
        ".net",
        "c#",
        "powershell",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/active-directory-domain-services-could-not-replicate-the-directory-partition-the-replication-operation-encountered-a-database-error",
      "url": "https://evotec.xyz/de/blog/active-directory-domain-services-could-not-replicate-the-directory-partition-the-replication-operation-encountered-a-database-error",
      "title": "Active Directory Domain Services could not replicate the directory partition \u2013 The replication operation encountered a database error",
      "summary": "If you ever encounter an error while trying to create a new domain within a forest saying, \u201CThe replication operation encountered a database error,\u201D it makes you sweat a bit. Your brain tells you it will be a nightmare to fix, do I have proper backups to make it happen, and the question \u201Cwhy now\u201D shows up.",
      "date_published": "2021-11-28T14:38:20.0000000Z",
      "tags": [
        "active directory",
        "dcdiag",
        "dfs",
        "domain",
        "forest",
        "forest replication",
        "PowerShell",
        "testimo",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/encrypting-and-decrypting-pgp-using-powershell",
      "url": "https://evotec.xyz/de/blog/encrypting-and-decrypting-pgp-using-powershell",
      "title": "Encrypting and decrypting PGP using PowerShell",
      "summary": "Some time ago, I decided that having an easy-to-use PGP PowerShell module is a way to kill my boredom. Four months have passed, and I decided to share it with the world, as it may be helpful to some of you. Today I would like to introduce you to PSPGP \u2013 PowerShell module that provides PGP functionality in PowerShell.",
      "date_published": "2021-09-12T15:14:12.0000000Z",
      "tags": [
        "gpg",
        "pgp",
        "powershell",
        "windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/easy-way-to-connect-to-ftps-and-sftp-using-powershell",
      "url": "https://evotec.xyz/de/blog/easy-way-to-connect-to-ftps-and-sftp-using-powershell",
      "title": "Easy way to connect to FTPS and SFTP using PowerShell",
      "summary": "FTPS and SFTP are two ways to send and receive files from remote sources. While the name suggests both do the same thing, those are different protocols, in the end, having the same goal. A few weeks back, I had to make sure I can reliably download files from FTPS server using PowerShell, and since I couldn\u2019t find anything straightforward to use, I decided to write my own. Transfertto is a new PowerShell module that supports both FTPS and SFTP protocols. Its goal is to be the only module that you need to transfer files to and from FTP/SFTP servers.",
      "date_published": "2021-08-29T13:47:48.0000000Z",
      "tags": [
        "ftp",
        "ftps",
        "powershell",
        "sftp",
        "ssh",
        "transferetto",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/remove-item-access-to-the-cloud-file-is-denied-while-deleting-files-from-onedrive",
      "url": "https://evotec.xyz/de/blog/remove-item-access-to-the-cloud-file-is-denied-while-deleting-files-from-onedrive",
      "title": "Remove-Item : Access to the cloud file is denied while deleting files from OneDrive",
      "summary": "I like OneDrive. It allows me to keep my data secure and always synchronized. If things go wrong, I can always get it back. I use it for almost everything. Even for my PowerShell projects, which are committed to GitHub, so in theory, I shouldn\u2019t need that. But every once in a while, I make some stupid mistake and delete a file that has yet not been committed to GitHub, and that\u2019s where the OneDrive comes in handy. Quick restore, and we\u2019re back. Unfortunately, sometimes things aren\u2019t as I would expect them to work. For example, let\u2019s have a look at this nice list of markdown files that are documentation for my module called GPOZaurr.",
      "date_published": "2020-12-06T18:07:39.0000000Z",
      "tags": [
        "delete",
        "Office 365",
        "onedrive",
        "powershell",
        "remove-item",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/restoring-recovering-powershell-scripts-from-event-logs",
      "url": "https://evotec.xyz/de/blog/restoring-recovering-powershell-scripts-from-event-logs",
      "title": "Restoring (Recovering) PowerShell Scripts from Event Logs",
      "summary": "A few days ago, I was asked to take a look at PowerShell Malware. While I don\u2019t know much about malware, my curiosity didn\u2019t let me skip on this occasion, and I was handed over WindowsPowerShell.evtx file. Ok, that\u2019s not what I expected! I wanted PowerShell .ps1 files that I can read and assess? Well, you play with the cards you were dealt with. What I was handed over was PowerShell Event Log. PowerShell writes whatever you execute, and it thinks it is risky, to Windows PowerShell Operation Event Log.",
      "date_published": "2020-08-28T15:39:28.0000000Z",
      "tags": [
        "event log",
        "get-events",
        "powershell",
        "powershellmanager",
        "pseventviewer",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/the-security-account-manager-sam-has-determined-that-sid-is-already-in-use-in-the-forest",
      "url": "https://evotec.xyz/de/blog/the-security-account-manager-sam-has-determined-that-sid-is-already-in-use-in-the-forest",
      "title": "The security account manager (SAM) has determined that SID is already in use in the Forest",
      "summary": "The security account manager (SAM) has determined that the security identifier (SID) for this computer is already in use in the Forest you want to join. This can happen when restoring an Active Directory Domain Controller with an improper backup. Reinstall the operating system on the local AD DC to obtain a new SID.",
      "date_published": "2020-03-12T19:02:42.0000000Z",
      "tags": [
        "active directory",
        "powershell",
        "sid",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/create-a-local-user-or-administrator-account-in-windows-using-powershell",
      "url": "https://evotec.xyz/de/blog/create-a-local-user-or-administrator-account-in-windows-using-powershell",
      "title": "Create a local user or administrator account in Windows using PowerShell",
      "summary": "Create a local Windows user or administrator with PowerShell, handle localized Administrators groups, and prepare the account for LAPS-managed passwords.",
      "date_published": "2019-10-30T13:44:27.0000000Z",
      "tags": [
        "administrator",
        "gpo",
        "powershell",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/what-do-we-say-to-health-checking-active-directory",
      "url": "https://evotec.xyz/de/blog/what-do-we-say-to-health-checking-active-directory",
      "title": "What do we say to health checking Active Directory?",
      "summary": "Health check Active Directory with PowerShell, dcdiag, repadmin, and security-focused reviews so replication, DNS, DHCP, and GPO issues surface early.",
      "date_published": "2019-09-08T15:48:39.0000000Z",
      "tags": [
        "active directory",
        "ad",
        "dhcp",
        "dns",
        "health checks",
        "powershell",
        "security checks",
        "testimo",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/what-do-we-say-to-writing-active-directory-documentation",
      "url": "https://evotec.xyz/de/blog/what-do-we-say-to-writing-active-directory-documentation",
      "title": "What do we say to writing Active Directory documentation?",
      "summary": "Document Active Directory with PowerShell using PSWinDocumentation, Dashimo, Documentimo, and Excelimo to keep environment knowledge current.",
      "date_published": "2019-05-12T12:46:24.0000000Z",
      "tags": [
        "Active Directory",
        "dashimo",
        "documentation",
        "documentimo",
        "excel",
        "excelimo",
        "powershell",
        "pswindocumentation",
        "Windows",
        "word"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/the-only-powershell-command-you-will-ever-need-to-find-out-who-did-what-in-active-directory",
      "url": "https://evotec.xyz/de/blog/the-only-powershell-command-you-will-ever-need-to-find-out-who-did-what-in-active-directory",
      "title": "The only PowerShell Command you will ever need to find out who did what in Active Directory",
      "summary": "While the title of this blog may be a bit exaggeration, the command I\u2019m trying to show here does it\u2019s best to deliver on the promise. What you\u2019re about to witness here is something I\u2019ve worked on for a while now, and it meets my basic needs. If you don\u2019t have SIEM product or products that monitor who does what in Active Directory this command makes it very easy, even for people who don\u2019t have much experience in reading Event Logs. If you\u2019d like to learn about working with Windows Event Logs here\u2019s a great article I wrote recently \u2013 PowerShell \u2013 Everything you wanted to know about Event Logs and then some.",
      "date_published": "2019-04-28T15:52:32.0000000Z",
      "tags": [
        "active directory",
        "ad",
        "events",
        "events viewer",
        "powershell",
        "pswinreporting",
        "pswinreportingv2",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/meet-emailimo-new-way-to-send-pretty-emails-with-powershell",
      "url": "https://evotec.xyz/de/blog/meet-emailimo-new-way-to-send-pretty-emails-with-powershell",
      "title": "Meet Emailimo \u2013 New way to send pretty emails with PowerShell",
      "summary": "Meet Emailimo, a PowerShell module for building readable HTML emails with tables, links, colors, and cleaner templating than hand-written markup.",
      "date_published": "2019-04-12T08:13:43.0000000Z",
      "tags": [
        "css",
        "emailimo",
        "html",
        "javascript",
        "js",
        "Linux",
        "Mac OS X",
        "mailing",
        "outlook",
        "PowerShell",
        "pswritehtml",
        "send-email",
        "send-mail",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/out-htmlview-html-alternative-to-out-gridview",
      "url": "https://evotec.xyz/de/blog/out-htmlview-html-alternative-to-out-gridview",
      "title": "Out-HtmlView \u2013 HTML alternative to Out-GridView",
      "summary": "One of the most comfortable output\u2019s in PowerShell to work and analyze data is Out-GridView. It\u2019s handy as you can search, sort and have things done quicker than trying to do things in the console. However it\u2019s currently not available in PowerShell Core (PowerShell 6\u002B), and when it is available in PowerShell 7, it will NOT be cross-platform. Since I had released Dashimo a few days ago, I thought it was trivial to make a simple command out of it that could solve this problem.",
      "date_published": "2019-04-06T18:47:55.0000000Z",
      "tags": [
        "cross-platform",
        "Mac OS X",
        "powershell",
        "powershell 6",
        "powershell 7",
        "powershell core",
        "Ubuntu",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/pswinreporting-1-8-split-of-branches-legacy-vs-new-hope",
      "url": "https://evotec.xyz/de/blog/pswinreporting-1-8-split-of-branches-legacy-vs-new-hope",
      "title": "PSWinReporting 1.8 \u2013 Split of branches (Legacy vs. New Hope)",
      "summary": "A new branch of PSWinReporting is slowly coming, and I thought it would be the best time to have a final article about it with all configuration options available for those that will want to stay using PSWinReporting from Legacy branch. The idea is that you may have it working in your systems and it\u2019s good enough for you. You may not want to change it, and with New Hope, the changes are so big it\u2019s a rewrite.",
      "date_published": "2019-03-10T20:39:43.0000000Z",
      "tags": [
        "Active Directory",
        "event",
        "event monitoring",
        "events",
        "powershell",
        "pswinreporting",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/powershell-everything-you-wanted-to-know-about-event-logs",
      "url": "https://evotec.xyz/de/blog/powershell-everything-you-wanted-to-know-about-event-logs",
      "title": "PowerShell \u2013 Everything you wanted to know about Event Logs and then some",
      "summary": "If you feel this title is very familiar to you it\u2019s because I actually have stolen the title from Kevin Marquette. I\u2019m in awe of his posts that take you thru topic from beginning till the end. No splitting, no hiding anything, everything on a plate, in a single post. That\u2019s why I\u2019ve decided to write a post that will take you on a trip on how to work with Event Logs, something that is an internal part of Windows Administration. If you\u2019ve never worked with Events and you\u2019re in IT you most likely should make an effort to find out what it is and how you can eat it.",
      "date_published": "2019-02-20T13:22:19.0000000Z",
      "tags": [
        "Active Directory",
        "event logs",
        "events",
        "get-eventlog",
        "get-winevent",
        "microsoft window",
        "PowerShell",
        "windows",
        "windows server"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/how-to-find-different-server-types-in-active-directory-with-powershell",
      "url": "https://evotec.xyz/de/blog/how-to-find-different-server-types-in-active-directory-with-powershell",
      "title": "How to find different server types in Active Directory with PowerShell",
      "summary": "Working as a freelancer is a great thing if you can handle it. Each day, each week something new happens and a new problem shows up on my doorstep. It also means it\u2019s almost never boring at your job and you get to play with new stuff. But there\u2019s one drawback to this. You\u2019re often thrown at the problem, told to fix it but often that\u2019s about as much information as you get. It wasn\u2019t very different today. I was told to switch Office 365 from ADFS to Password Synchronization. While reasons for this are not really important, the important question here is what is the name of AD Connect server that\u2019s responsible for this configuration?",
      "date_published": "2019-02-06T18:25:30.0000000Z",
      "tags": [
        "active directory",
        "ad",
        "adconnect",
        "azure ad",
        "exchange",
        "Hyper-V",
        "powershell",
        "sql",
        "windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/active-directory-how-to-track-down-why-and-where-the-user-account-was-locked-out",
      "url": "https://evotec.xyz/de/blog/active-directory-how-to-track-down-why-and-where-the-user-account-was-locked-out",
      "title": "Active Directory \u2013 How to track down why and where the user account was locked out",
      "summary": "I\u2019ve been working with Windows Events for a while now. One of the things I did to help me diagnose problems and reporting on Windows Events was to write PSEventViewer to help to parse the logs and write PSWinReporting to help monitor (with use of PSEventViewer) Domain Controllers for events that happen across the domain. It\u2019s handy and I, get those excellent daily reports of what happened while I was gone.",
      "date_published": "2019-01-24T15:25:31.0000000Z",
      "tags": [
        "active directory",
        "event viewer",
        "get-events",
        "get-winevent",
        "powershell",
        "pseventviewer",
        "pswinreporting",
        "windows",
        "windows server"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/how-to-change-your-own-expired-password-when-you-cant-login-to-rdp",
      "url": "https://evotec.xyz/de/blog/how-to-change-your-own-expired-password-when-you-cant-login-to-rdp",
      "title": "How to change your own expired password when you can\u2019t login to RDP",
      "summary": "I must admit that it was a bit embarrassing to see my Administrator password expired when I tried to log in as Domain Admin to Domain Controller. I got this little message saying This user account\u2019s password has expired. The password must change to logon. Please update the password or contact your system administrator or technical support.",
      "date_published": "2019-01-23T10:41:40.0000000Z",
      "tags": [
        "expired password",
        "powershell",
        "rdc",
        "rdp",
        "remote desktop connection",
        "remote desktop protocol",
        "windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/windows-server-2019-desktop-path-for-all-users-cwindowssystem32configsystemprofiledesktop",
      "url": "https://evotec.xyz/de/blog/windows-server-2019-desktop-path-for-all-users-cwindowssystem32configsystemprofiledesktop",
      "title": "Windows Server 2019 \u2013 Desktop path for all users redirected to System32 \\ SystemProfile \\ Desktop",
      "summary": "I\u2019ve got a strange request a few days ago regarding users getting a prompt about their Desktop location pointing to\u2026",
      "date_published": "2019-01-22T14:31:49.0000000Z",
      "tags": [
        "ransomware",
        "windows",
        "windows 2019",
        "windows server"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/windows-2019-windows-license-expired",
      "url": "https://evotec.xyz/de/blog/windows-2019-windows-license-expired",
      "title": "Windows 2019 \u2013 Windows License Expired",
      "summary": "Windows Server 2019 is out now for a couple of months now, and some of you may be interested in playing with it. When you first install it, you can test it for 180 days (so-called Grace Period) after which you need to activate it with a proper production license.",
      "date_published": "2019-01-19T19:31:08.0000000Z",
      "tags": [
        "expired license",
        "license",
        "Windows",
        "windows 2019",
        "windows server",
        "windows server 2019"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/windows-2019-how-to-add-language-pack",
      "url": "https://evotec.xyz/de/blog/windows-2019-how-to-add-language-pack",
      "title": "Windows 2019 \u2013 How to add language pack?",
      "summary": "Today I\u2019ve been setting up a new server on Windows 2019. By default, I install Windows with English version even if Client works in their language such as German, Polish or Swedish. While some people install Windows in a language they desire to work with, years of experience taught me that installing English and then adding Language Pack is the best way to go. All errors, windows events, and general troubleshooting is much easier if those are in the native English language. Each version of Windows made it easier to install the language pack and have that up and running in no time. In Windows 2019 it\u2019s even more comfortable\u2026 or is it?",
      "date_published": "2019-01-02T13:38:16.0000000Z",
      "tags": [
        "windows",
        "windows server",
        "windows server 2019"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/azure-agent-where-did-my-space-go",
      "url": "https://evotec.xyz/de/blog/azure-agent-where-did-my-space-go",
      "title": "Azure Agent \u2013 Where did my space go?",
      "summary": "If a Windows Azure VM suddenly loses disk space and Explorer does not explain it, the Azure guest agent and its logs under C:\\WindowsAzure are worth checking.",
      "date_published": "2018-11-28T16:19:01.0000000Z",
      "tags": [
        "azure",
        "Azure Agent",
        "TreeSize",
        "windows",
        "Windows Azure"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/powershell-environment-path-is-missing-or-overwritten",
      "url": "https://evotec.xyz/de/blog/powershell-environment-path-is-missing-or-overwritten",
      "title": "PowerShell \u2013 Environment Path is missing or overwritten",
      "summary": "If PSModulePath is suddenly missing default module locations, PowerShell can stop discovering built-in or installed modules even though nothing seems broken at first glance.",
      "date_published": "2018-11-03T12:07:35.0000000Z",
      "tags": [
        "autoit",
        "environment",
        "parameters",
        "powershell",
        "psmodulepath",
        "variables",
        "windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/psblacklistchecker-notifications-to-microsoft-teams-slack-of-blacklisted-ips",
      "url": "https://evotec.xyz/de/blog/psblacklistchecker-notifications-to-microsoft-teams-slack-of-blacklisted-ips",
      "title": "PSBlackListChecker \u2013 Notifications to Microsoft Teams, Slack of Blacklisted IPs",
      "summary": "If this is the first time you\u2019re reading about this module, it\u2019s simple PowerShell module that allows you to verify\u2026",
      "date_published": "2018-11-02T21:46:18.0000000Z",
      "tags": [
        "blacklist",
        "blacklist ip",
        "exchange",
        "ip",
        "net.dns",
        "powershell",
        "resolve-dns",
        "runspaces",
        "smtp",
        "Windows",
        "workflow"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/update-module-packagemanagementinstall-package-unable-to-find-repository",
      "url": "https://evotec.xyz/de/blog/update-module-packagemanagementinstall-package-unable-to-find-repository",
      "title": "Update-Module \u2013 PackageManagement\\Install-Package : Unable to find repository",
      "summary": "I was installing newest version of my PSWinDocumentation module on Windows 2016 when I noticed I can\u2019t really get anything\u2026",
      "date_published": "2018-10-19T17:04:49.0000000Z",
      "tags": [
        "powershell",
        "windows",
        "windows 2012",
        "windows 2012R2",
        "windows server"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/windows-10-no-prompt-to-overwrite-when-pasting-from-zip-file",
      "url": "https://evotec.xyz/de/blog/windows-10-no-prompt-to-overwrite-when-pasting-from-zip-file",
      "title": "Windows 10 \u2013 No prompt to overwrite when pasting from .zip file",
      "summary": "A copy operation from Explorer\u0027s built-in ZIP view may behave differently from a normal folder copy and skip the usual overwrite prompt, so it is worth extracting first when the target matters.",
      "date_published": "2018-10-10T07:23:12.0000000Z",
      "tags": [
        "insiders",
        "Windows",
        "windows 10",
        "windows 10 1809"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/pswindocumentation-audit-active-directory-passwords",
      "url": "https://evotec.xyz/de/blog/pswindocumentation-audit-active-directory-passwords",
      "title": "PSWinDocumentation \u2013 Audit Active Directory Passwords",
      "summary": "Audit Active Directory passwords with PSWinDocumentation and breached-password data to find weak, reused, or exposed credentials before attackers do.",
      "date_published": "2018-10-07T17:57:42.0000000Z",
      "tags": [
        "active directory",
        "ad",
        "audit",
        "powershell",
        "windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/windows-10-microsoft-store-edge-windows-updates-microsoft-outlook-not-able-to-connect-with-error-0x80072ee7-0x80070005",
      "url": "https://evotec.xyz/de/blog/windows-10-microsoft-store-edge-windows-updates-microsoft-outlook-not-able-to-connect-with-error-0x80072ee7-0x80070005",
      "title": "Windows 10 \u2013 Microsoft Store, Edge, Windows Updates, Microsoft Outlook not able to connect with error 0x80072EE7, 0x80070005",
      "summary": "Fix Windows 10 connectivity issues where Microsoft Store, Edge, Windows Update, and Outlook fail with errors 0x80072EE7 and 0x80070005 on Insider builds.",
      "date_published": "2018-10-04T21:10:17.0000000Z",
      "tags": [
        "0x800700005",
        "0x80072EE7",
        "insiders",
        "Windows",
        "windows 10",
        "windows 10 insiders"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/pswindocumentation-export-to-word-excel-sql-of-ad-aws-exchange-o365-exchange-o365-azure-ad",
      "url": "https://evotec.xyz/de/blog/pswindocumentation-export-to-word-excel-sql-of-ad-aws-exchange-o365-exchange-o365-azure-ad",
      "title": "PSWinDocumentation \u2013 Export to Word, Excel, SQL of AD, AWS, Exchange, O365 Exchange, O365 Azure AD",
      "summary": "Today I\u2019m pushing forward with PSWinDocumentation project. I\u2019ve fixed some bugs but I also added a couple of new features. I did lie a bit in the first sentence because this time it\u2019s not all me. I got help from Mateusz Niemczyk who is a certified AWS engineer working for Euvic with me on some projects. If you\u2019ve not yet guessed where I got him involved from the introduction \u2013 yes we\u2019re adding basic AWS data support to PSWinDocumentation. But that\u2019s not all\u2026",
      "date_published": "2018-09-23T20:39:26.0000000Z",
      "tags": [
        "Active Directory",
        "aws",
        "Azure AD",
        "excel",
        "exchange",
        "export",
        "office 365",
        "powershell",
        "pswriteexcel",
        "PSWriteWord",
        "sql",
        "Windows",
        "word"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/pswinreporting-forwarders-microsoft-teams-slack-microsoft-sql-and-more",
      "url": "https://evotec.xyz/de/blog/pswinreporting-forwarders-microsoft-teams-slack-microsoft-sql-and-more",
      "title": "PSWinReporting \u2013 Forwarders, Microsoft Teams, Slack, Microsoft SQL and more",
      "summary": "It\u2019s been a while since PSWinReporting has been updated, or rather since I\u2019ve written a blog post about it since it\u2019s always\u2026",
      "date_published": "2018-09-16T17:59:28.0000000Z",
      "tags": [
        "active directory",
        "event log",
        "events",
        "microsoft teams",
        "ms sql",
        "powershell",
        "slack",
        "sql",
        "teams",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/pswindocumentation-version-0-1-with-word-excel-export",
      "url": "https://evotec.xyz/de/blog/pswindocumentation-version-0-1-with-word-excel-export",
      "title": "PSWinDocumentation \u2013 Version 0.1 with Word / Excel export",
      "summary": "A few weeks ago I\u2019ve released my first version of PSWinDocumentation. It was simple, one command module where you start it and get some basic AD stuff into Microsoft Word document. Today\u2026 I\u2019m releasing a new version that has a bit bigger feature set. Are you ready for it? Let\u2019s go!",
      "date_published": "2018-08-23T20:07:04.0000000Z",
      "tags": [
        "active directory",
        "ad",
        "excel",
        "powershell",
        "scripts",
        "windows",
        "word"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/windows-10-youll-need-the-internet-for-this-0xcaa7004-or-0xcaa30194",
      "url": "https://evotec.xyz/de/blog/windows-10-youll-need-the-internet-for-this-0xcaa7004-or-0xcaa30194",
      "title": "Windows 10 \u2013 You\u2019ll need the internet for this 0xCAA7004 or 0xCAA30194 or 0x80072EFD",
      "summary": "Resolve Windows 10 sign-in and connectivity problems behind the You will need the internet for this message and errors 0xCAA7004, 0xCAA30194, and 0x80072EFD.",
      "date_published": "2018-08-08T08:16:46.0000000Z",
      "tags": [
        "0x80072EFD",
        "0xCAA30194",
        "0xCAA70004",
        "insiders",
        "insiders channel",
        "windows",
        "windows 10",
        "windows 10 insiders"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/install-module-the-term-install-module-is-not-recognized-as-the-name-of-cmdlet-function-script-file-or-operable-program",
      "url": "https://evotec.xyz/de/blog/install-module-the-term-install-module-is-not-recognized-as-the-name-of-cmdlet-function-script-file-or-operable-program",
      "title": "Install-Module: The term Install-Module is not recognized as the name of cmdlet, function, script file or operable program",
      "summary": "If Install-Module is not recognized at all, the usual cause is that the machine is missing the PowerShellGet tooling that newer Windows PowerShell environments include.",
      "date_published": "2018-07-25T08:15:53.0000000Z",
      "tags": [
        "install-module",
        "PowerShell",
        "pseventviewer",
        "psteams",
        "pswinreporting",
        "pswritecolor",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/windows-10-high-cpu-usage-with-evntagnt-warning-event-id-3007-in-event-log",
      "url": "https://evotec.xyz/de/blog/windows-10-high-cpu-usage-with-evntagnt-warning-event-id-3007-in-event-log",
      "title": "Windows 10 \u2013 High CPU Usage with EvntAgnt Warning Event ID 3007 in Event Log",
      "summary": "If Windows Event Log starts consuming CPU because EvntAgnt event 3007 is looping, check whether the SNMP service is the trigger in that specific build.",
      "date_published": "2018-07-24T12:13:09.0000000Z",
      "tags": [
        "event 3007",
        "evntAgnt",
        "Insiders",
        "Windows",
        "windows 10",
        "windows 10 insiders"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/pswriteword-add-wordtable-add-wordtext-expanded",
      "url": "https://evotec.xyz/de/blog/pswriteword-add-wordtable-add-wordtext-expanded",
      "title": "PSWriteWord \u2013 Add-WordTable / Add-WordText Expanded",
      "summary": "In this weekly release (PSWriteWord 0.4.6) there are handful of updates and tweaks to Add-WordTable and Add-WordText. If you\u2019ve not\u2026",
      "date_published": "2018-07-07T20:12:03.0000000Z",
      "tags": [
        "docx",
        "examples",
        "microsoft word",
        "powershell",
        "PSWriteWord",
        "Windows",
        "word"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/pswriteword-updated-to-0-4-1-breaking-change-included",
      "url": "https://evotec.xyz/de/blog/pswriteword-updated-to-0-4-1-breaking-change-included",
      "title": "PSWriteWord \u2013 Updated to 0.4.1 (Breaking Change included)",
      "summary": "Review the PSWriteWord 0.4.1 release, including the breaking change, document-generation fixes, and practical improvements that make Word automation scripts more reliable.",
      "date_published": "2018-06-28T19:47:51.0000000Z",
      "tags": [
        "docx",
        "examples",
        "microsoft word",
        "powershell",
        "PSWriteWord",
        "Windows",
        "word"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/collectguestlogs-exe-high-disk-usage-on-azure-vm",
      "url": "https://evotec.xyz/de/blog/collectguestlogs-exe-high-disk-usage-on-azure-vm",
      "title": "CollectGuestLogs.exe \u2013 High Disk Usage on Azure VM",
      "summary": "If CollectGuestLogs.exe is hammering disk on an Azure VM, check the Azure Guest Agent log-collection behavior and reduce that workload before the VM becomes unusably slow.",
      "date_published": "2018-06-26T19:47:57.0000000Z",
      "tags": [
        "azure",
        "Azure AD",
        "azure vm",
        "collectguestlogs",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/pswinreporting-1-0-is-out",
      "url": "https://evotec.xyz/de/blog/pswinreporting-1-0-is-out",
      "title": "PSWinReporting 1.0 \u2013 Monitoring Active Directrory Events",
      "summary": "Few months after initial release a new public version of PSWinReporting 1.0 is released. While the name might not be\u2026",
      "date_published": "2018-06-10T09:26:45.0000000Z",
      "tags": [
        "active directory",
        "ad",
        "domain controller",
        "email",
        "html",
        "monitoring",
        "powershell",
        "powershell gallery",
        "powershell module",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/working-with-windows-events-with-powershell",
      "url": "https://evotec.xyz/de/blog/working-with-windows-events-with-powershell",
      "title": "Working with Windows Events with PowerShell",
      "summary": "Work with Windows Event Logs in PowerShell more effectively by querying events, filtering noisy data, and building repeatable troubleshooting workflows for servers and clients.",
      "date_published": "2018-05-28T09:28:21.0000000Z",
      "tags": [
        "Active Directory",
        "event viewer",
        "Exchange",
        "get-events",
        "get-winevent",
        "microsoft",
        "powershell",
        "windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/just-different-approach-to-active-directory-password-notifications",
      "url": "https://evotec.xyz/de/blog/just-different-approach-to-active-directory-password-notifications",
      "title": "Just different approach to Active Directory Password Notifications",
      "summary": "A long time ago I\u2019ve maintained a C# version of Password Expiry reminders. It was working based on HTML templates\u2026",
      "date_published": "2018-05-23T15:12:36.0000000Z",
      "tags": [
        "active directory",
        "ad",
        "Password Notifications",
        "passwords",
        "PowerShell",
        "task scheduler",
        "tasks",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/get-eventslibrary-ps1-monitoring-events-powershell",
      "url": "https://evotec.xyz/de/blog/get-eventslibrary-ps1-monitoring-events-powershell",
      "title": "Get-EventsLibrary.ps1 \u2013 Monitoring Events PowerShell",
      "summary": "This event library (Get-EventsLibrary.ps1) is PowerShell script that parses Security (mostly) logs on Domain Controllers. It has few reports capabilities\u2026",
      "date_published": "2018-04-19T09:48:35.0000000Z",
      "tags": [
        "active directory",
        "ad",
        "domain controller",
        "get-events",
        "monitoring",
        "powershell",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/whats-new-event-monitoring-0-8",
      "url": "https://evotec.xyz/de/blog/whats-new-event-monitoring-0-8",
      "title": "Monitoring User, Groups Changes in Active Directory \u2013 version 0.8",
      "summary": "\uD83D\uDCA1 Little introduction Event Monitoring solution written in PowerShell is an event library (Get-EventsLibrary.ps1) script that parses Security (mostly) logs on\u2026",
      "date_published": "2018-04-17T19:23:09.0000000Z",
      "tags": [
        "active directory",
        "event logs",
        "events",
        "powershell",
        "script",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/whats-new-event-monitoring-v0-7",
      "url": "https://evotec.xyz/de/blog/whats-new-event-monitoring-v0-7",
      "title": "What\u2019s new \u2013 Event Monitoring v0.7",
      "summary": "See what changed in Event Monitoring v0.7, including configuration updates, health-check improvements, and the known limitations that still existed at that stage.",
      "date_published": "2018-03-27T19:36:29.0000000Z",
      "tags": [
        "active directory",
        "ad",
        "dc",
        "domain controller",
        "event id",
        "event monitoring",
        "events",
        "monitoring",
        "PowerShell",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/get-eventlog-shows-wrong-maximum-size-of-event-logs",
      "url": "https://evotec.xyz/de/blog/get-eventlog-shows-wrong-maximum-size-of-event-logs",
      "title": "Get-EventLog shows wrong maximum size of event logs",
      "summary": "If Get-EventLog and older WMI queries show misleading maximum log size values, Get-WinEvent can return the event log metadata more accurately.",
      "date_published": "2018-03-27T06:23:57.0000000Z",
      "tags": [
        "event",
        "event id",
        "event logs",
        "event viewer",
        "get-eventlog",
        "get-winevent",
        "PowerShell",
        "win32_nteventlogfile",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/whats-new-event-monitoring-v0-6",
      "url": "https://evotec.xyz/de/blog/whats-new-event-monitoring-v0-6",
      "title": "What\u2019s new \u2013 Event Monitoring v0.6",
      "summary": "After having some feedback and seeing as some features were missing new version of Events Monitoring brings few of noticeable\u2026",
      "date_published": "2018-03-25T17:19:51.0000000Z",
      "tags": [
        "active directory",
        "ad monitoring",
        "changelog",
        "event monitoring",
        "events",
        "PowerShell",
        "version",
        "Windows"
      ]
    },
    {
      "id": "https://evotec.xyz/de/blog/granting-logon-as-a-batch-job-permission-for-task-scheduler-to-work",
      "url": "https://evotec.xyz/de/blog/granting-logon-as-a-batch-job-permission-for-task-scheduler-to-work",
      "title": "Granting \u201CLogon as a batch job\u201D permission for Task Scheduler to work",
      "summary": "If a scheduled task fails under a service or domain account, check whether the account has the Log on as a batch job right and whether Group Policy is overriding it.",
      "date_published": "2018-03-23T10:11:14.0000000Z",
      "tags": [
        "batch job",
        "event id 4625",
        "events",
        "task",
        "task scheduler",
        "Windows"
      ]
    }
  ]
}