iiinova — where your digital self keeps evolving

Guy Leech @guyrleech.bsky.social · 06/01/2026

Did you know that when you've pressed Alt + tab on Windows 11, you can then use the cursor keys to move quicker, eg down, to the tab you want whilst still pressing Alt & release Alt? Similarly, press Windows + Tab & use cursor keys to navigate around & select via window thumbnail then press Enter

210

Guy Leech @guyrleech.bsky.social · 15/12/2025

Got a #PowerShell array of objects with already sorted timestamps where you want to reverse the order? Eg I got logs from @Googlecloud but was most recent 1st & I wanted oldest first & rather than sort on the datestamp, I just reversed the array with [array]::Reverse( $yourArray )

150

Guy Leech @guyrleech.bsky.social · 15/12/2025

Is #dedup for NTFS on Server 2025 supported by #Microsoft for #FSlogix or not? Most AI says not but fails to give a definitive reference. Was enabled & working on a system I inherited BUT there was also corruption on that volume. Surely should be ok as a file system feature invisible to FSlogix?

100

Guy Leech @guyrleech.bsky.social · 11/12/2025

Well this is something that I have never seen before today in #PowerShell 5.1 & the lines causing it have been in my $profile for years. PowerShell.exe date is today - this could break a lot of scripts (as in cause them to pause f input)!! 😱

241

Guy Leech @guyrleech.bsky.social · 09/12/2025

Anyone found a way to toggle the Do Not Disturb Notification setting in Windows 11? Found some stuff around setting registry values which didn't pan out & other stuff that P/Invoked WNF APIs but that failed too. Tried what I found in procmon but failed. Surely it must be possible?

110

Guy Leech @guyrleech.bsky.social · 18/11/2025

I sense a disturbance in the force, sorry internet. Trying to tweet this on X fails 🙁

251

Reposted by Guy Leech

PSConfEU @psconf.eu · 10/11/2025

He’s back. 👔 The man who started it all — @jsnover.com, Inventor of #PowerShell, will open #PSConfEU 2026 in #Wiesbaden with the keynote you don’t want to miss. 🎟️ Tickets now available → psconf.eu #Automation #IT #Germany #Europe

12115

Guy Leech @guyrleech.bsky.social · 13/11/2025

EUC folks with non-persistent desktops but using something like #FSlogix have you found a way to stop @OneDrive from taking ages (>50 minutes) to drop the (dehydrated) place holders into a new profile? Our sessions are generally <1 hour so cutting it fine + what if user needs a "late" file?

110

Reposted by Guy Leech

Rory Monaghan @rorymon.com · 29/10/2025

New Episode! 🚨 I cover layoffs from Amazon and GM, the root cause of the recent AWS outage, a concerning new Teams feature, my review of Pwn2Own Ireland 2025 and more! 🔊 Listen: on.soundcloud.com/ncOCKrv63zJM... 📺 View: youtu.be/aaLAY23ZJa4?...

youtu.be

Amazon Announces Layoffs! Pwn2Own Ireland! New Teams Monitoring Feature!

YouTube video by 5bytespodcast

011

Guy Leech @guyrleech.bsky.social · 29/10/2025

Here's a typical use case for me using -Outvariable in an interactive PowerShell command line where I'm searching for a file so I want visual output as it searches but I also want the results in a variable so I can access more properties later if I need them without searching again

091

Reposted by Guy Leech

Jaap "Jaap" Brasser @jaapjaap.bsky.social · 22/10/2025

We're at 99 members on our new Dutch PowerShell User Group meetup, are you going to get us to 100? Join us, for our favorite price: Free, here: meetup.com/dutch-powers... And if you do, share it here! #PowerShell #DevOps

meetup.com

Dutch PowerShell User Group | Meetup

Welcome to the Dutch PowerShell User Group! This group is for anyone interested in PowerShell, DevOps, Infrastructure as Code, and Cloud Infrastructure. Join us to learn, share knowledge, and network ...

1107

Guy Leech @guyrleech.bsky.social · 01/10/2025

Just dug this 2018 tweet out as seeing the issue at a customer: #Windows Security event log being swamped by 4703 "A token right was adjusted" events? Disable "Audit Authorization Policy Change" by local or group policy. Common with #SCCM learn.microsoft.com/en-us/previo...

100

Guy Leech @guyrleech.bsky.social · 29/09/2025

What's the current thinking/consensus/experience of having duplicate machine SIDs on the same subnet & members of the same domain (different hostnames & MAC & IP addresses obviously)? It's many years since @markrussinovich.bsky.social said changing SIDs wasn't necessary but what about RoW?

420

Reposted by Guy Leech

PSConfEU @psconf.eu · 26/09/2025

💡 Be Your Own Sherlock in the Realms of Microsoft Graph 👨‍🏫 @hcritter.bsky.social – Senior System Engineer at CANCOM GmbH 🗓️ 14 Oct | #PSConfEU MiniCon 👉 Free ticket: synedgy.com/psconfeu-minicon #PowerShell #Microsoft #Graph #automation

053

Guy Leech @guyrleech.bsky.social · 26/09/2025

If you want to quickly figure out if & where a process is writing a logfile, create a filter (ctrl l) in @SysInternals procmon for your process(es) and also Category = Write & turn off registry & network capture in the toolbar

032

Guy Leech @guyrleech.bsky.social · 26/09/2025

Any of you got experiences of packaging Adobe or AutoCAD apps into MSIX and delivering via App Attach? About to have a play myself but interested to know if others have tried. I think going App-V is probably not a sensible approach given its life expectancy.

200

Guy Leech @guyrleech.bsky.social · 25/09/2025

Need to turn %USERDNSDOMAIN% into canonical form, eg for ADSI ? "DC=$(($env:USERDNSDOMAIN -split '\.') -join ',DC=')"

031

Reposted by Guy Leech

PSConfEU @psconf.eu · 23/09/2025

💡 #PowerShell Security: A Journey Through Time 👨‍🏫👨‍🏫 @miriamwiesner.bsky.social - Security Researcher at Microsoft & Anam Navied - Software Engineer, PowerShell team at Microsoft 🗓️ 14 Oct | #PSConfEU MiniCon 👉 Free ticket: synedgy.com/psconfeu-minicon #automation

062

Guy Leech @guyrleech.bsky.social · 10/09/2025

It seems that the long standing PowerShell 7.5.* bug where Out-Gridview doesn't function properly is fixed in 7.5.3! Hurrah! github.com/PowerShell/P...

070

Guy Leech @guyrleech.bsky.social · 04/09/2025

TIL I've been using Microsoft products since 1980 when I wrote my first lines of BASIC code which was on a Commodore PET that my late (mainframe) COBOL coding father sometimes brought back from his office

150

Guy Leech @guyrleech.bsky.social · 04/09/2025

Did you know that Entra ID SIDs start S-1-12-1 whereas (legacy?) AD domain and local normal accounts start S-1-5-21 ?

2101

Reposted by Guy Leech

Sami Laiho @samilaiho.com · 28/08/2025

Multiple vulnerabilities in Dell ThinOS 10 URL: www.dell.com/support/kbdo... Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6

dell.com

DSA-2025-331: Security Update for Dell ThinOS 10 for Multiple Vulnerabilities | Dell US

022

Guy Leech @guyrleech.bsky.social · 22/08/2025

PowerShell 1 liner to clear all event logs Get-WinEvent -ListLog * -EA 0 -PipelineVariable log | %{ $log.LogName ; wevtutil.exe clear-log "$($log.LogName)" }

120

Guy Leech @guyrleech.bsky.social · 20/08/2025

New PowerShell script to find your geographically closest Azure location. Uses geo location so may not be accurate! Guess which of these I ran from a Windows 365/Cloud PC instance? 😂 Will prompt for login if not connected which may need tenant or subscription parameters github.com/guyrleech/Az...

231

Reposted by Guy Leech

Tom Warren @tomwarren.co.uk · 19/08/2025

the UK government has dropped its demand for a backdoor into Apple's encryption. This could open the door for Apple to bring back its Advanced Data Protection iCloud encryption to the UK for new users www.theverge.com/news/761240/...

theverge.com

UK drops demand for backdoor into Apple encryption

Here’s hoping that ADP returns to the UK.

08314

Guy Leech @guyrleech.bsky.social · 18/08/2025

New script, because Get-Hotfix is unhelpful, that uses Windows Update COM interface to show installed updates with various filtering options and raw/object or text output. Excludes Defender pattern updates by default github.com/guyrleech/Mi...

020

Guy Leech @guyrleech.bsky.social · 18/08/2025

TIL that Get-Help (alias help) does not work in a remote PS session

010

Guy Leech @guyrleech.bsky.social · 16/08/2025

TIL the @bsky.app Android app doesn't seem to allow selection of text in messages so making copy paste ,etc impossible which is a PITA when you want to e.g. look up a name in a search engine

110

Guy Leech @guyrleech.bsky.social · 08/08/2025

PowerShell 5.1 gave: Move-Item : Cannot create a file when that file already exists. even with -Force. Was a permission error as existing file only had permission for SYSTEM & script running as admin.

110

Guy Leech @guyrleech.bsky.social · 07/08/2025

Need the path to the user profile for the system account? (Get-CimInstance -ClassName win32_userprofile -filter "sid = 'S-1-5-18'").LocalPath Profiles for other special accounts also available that way

050

Reposted by Guy Leech

Rory Monaghan @rorymon.com · 17/07/2025

New episode! 🚨 I cover some issues caused by the latest Windows Updates, give an update on the M&S cyber attack, I discuss a landmark for Google's AI security platform and much more! 🔊Listen: on.soundcloud.com/F1JGGvIaVVTx... 📺View: www.youtube.com/watch?v=d43S...

on.soundcloud.com

Google AI Security Milestone! In-box Windows Apps to be Updated! Issues Caused by Updates!

I cover some issues caused by the latest Windows Updates, give an update on the M&S cyber attack, I discuss a landmark for Google's AI security platform and much more! Reference Links: https://www.ro

031

Guy Leech @guyrleech.bsky.social · 14/07/2025

Forgotten how funny @davegorman.bsky.social is - 10 minutes into an episode of Modern Life is Goodish and I'm finally smiling this Monday. Thank you sir

020

Reposted by Guy Leech

SteelCon @steelcon.info · 14/07/2025

For anyone who went to @guyrleech.bsky.social talk on Using Powershell to Explore Windows, or if you are just curious what you missed, you can download the slides here: files.speakerdeck.com/presentation...

files.speakerdeck.com

052

Guy Leech @guyrleech.bsky.social · 14/07/2025

Slides from my "Using PowerShell to Explore Windows" workshop at @steelcon.info 2025 files.speakerdeck.com/presentation...

files.speakerdeck.com

073

Guy Leech @guyrleech.bsky.social · 14/07/2025

Came up with this 1 liner in my PowerShell workshop at @steelcon.info last week which finds any not validly signed modules (dlls) in running processes (excluding JIT'd ones). There are some 3rd parties (& LinkedIn app) but some Microsoft components too ☹️

111

Guy Leech @guyrleech.bsky.social · 11/07/2025

My trip to @steelcon.info in Sheffield to give a workshop on PowerShell has commenced. T shirt selected because I will be covering a little #regex😄

3110

Guy Leech @guyrleech.bsky.social · 10/07/2025

3 similar PowerShell 1 liners to search the registry for a value by name or content or for a key by name. Value search can be string (via regex which doesn't have to be scary😊) or numerical

110

Guy Leech @guyrleech.bsky.social · 10/07/2025

When using Get-ChildItem (alias dir & ls) to get specific files/folders recursively, use -Filter instead of -Include because it filters at the provider level rather then returning all data & then filtering -Filter only takes 1 argument but -Include can be an array *.jpg,*.jpeg

110

Guy Leech @guyrleech.bsky.social · 10/07/2025

Finally made a video to show how I build up regex bit by bit, testing as I go. The example here is parsing a CBS (Component Based Servicing) log but technique can be used for any log file. Resulting #Regex may look scary but please watch how it is built. 10 mins, not edited youtu.be/IbbqB6ZGGT8

youtu.be

Using regex to parse a log file

YouTube video by Guy Leech

172

Guy Leech @guyrleech.bsky.social · 10/07/2025

TIL PowerShell 7.x Get-Process (alias ps) returns the Parent process object which 5.x doesn't and you had to use WMI/CIM instead. It's a pity that 7.x isn't going to be standard/OOB for a while yet

060

Guy Leech @guyrleech.bsky.social · 09/07/2025

Anyone for PSaaS (#PowerShell as a Service) ? Comprises a set monthly number of hours that can be used for fixing your code, code reviews, training, optimisation, security analysis, etc. If PowerShell automation is important to your business, why not have support for it? github.com/guyrleech/Po...

github.com

230

Reposted by Guy Leech

Rob Sewell He/Him @robsewell.com · 08/07/2025

Check out the #PSCONFEU 2025 playlist. Videos released daily from the last day of the PowerShell Europe conference (Thank you @thorsten.butz.io ) Subscribe to the channel and watch the 2025 playlist, link below.

youtube.com

PSCONFEU 2025

PowerShell Conference EU

052

Reposted by Guy Leech

SteelCon @steelcon.info · 09/07/2025

A space has just come up for "From Pods to Policies" and "Using PowerShell to ExploreWindows" Grab them quick, they won't last long: ti.to/steelcon/2025

043