Daniel Ratliff

@potentengineer.com

Principal Systems Engineer with a focus on automation and AI for all endpoint technologies. #microsoft365 #msintune #configmgr #powershell #automation

🆕 Introducing the Install Matrix an open source GitHub repo full of PowerShell scripts that help reduce duplicate work making it quick and easy to package apps and reducing overhead when updating them. Check it out! thedxt.ca/2026/01/inst... #PowerShell #Intune #EUC #GitHub #RMM

Install Matrix

At EUC World Amplify 2025, I gave a presentation titled “Transforming Chaos into Control: Mastering Windows App Deployments with Intune“. The presentation covered the ways I’ve been deploying applicat...

thedxt.ca

Something fun came across my desk today so I did my best Ugur Koc impression and wrote this script which will capture data from your PCs to tell you which ones need to update to the new secure boot certificates by June before all chaos breaks loose! :scream: mobile-jon.com/2025/12/19/l...

Leveraging Log Analytics to Query Secure Boot Certificate Update Status

Microsoft doesn't have a way to query registry keys for your entire PC environment. This solution uses PowerShell and Log Analytics to solve that problem.

mobile-jon.com

Hey #PowerShell people and #CyberSecurity professionals: I made a quick little module to search scripts, so we can find and fix potential CVE-2025-54100 related problems (or other dangerous anti-patterns, like Invoke-Expression). Hope this Helps! github.com/StartAutomat...

GitHub - StartAutomating/SearchScript: Search PowerShell Scripts

Search PowerShell Scripts . Contribute to StartAutomating/SearchScript development by creating an account on GitHub.

github.com

There's no controversy around the idea that you should not modify the default domain & default domain controller GPOs in Active Directory (except for setting account policies). Did you know you can use dcgpofix to reset them when they have been...mangled? learn.microsoft.com/...

dcgpofix documentation:

Recreates the default Group Policy Objects (GPOs) for a domain. To get to the Group Policy Management Console (GPMC), you must install Group Policy Management as a feature through Server Manager. Dcgpofix.exe is included with Windows Server and is located in the C:\Windows\system32\ folder.

dcgpofix.exe restores only the policy settings that are contained in the Default Domain Policy GPO and Default Domain Controller GPO. Dcgpofix.exe doesn't restore other GPOs that administrators create, it's only intended for disaster recovery of the default GPOs.

 Important: As a best practice, you should configure the Default Domain Policy GPO only to manage the default Account Policies settings, Password Policy, Account Lockout Policy, and Kerberos Policy. Additionally, you should configure the Default Domain Controllers Policy GPO only to set user rights and audit policies.

Right Click Tools v5.11.2511 is out! New in this release: • Migrate apps from #ConfigMgr#Intune • Exclude external dependencies in deployment processes • Insights support for HP G4/G5 docks • Platform-wide stability + UX improvements Full notes: docs.recastsoftware.com/help/recast-...

Recast Version 5.11.2511.1804 | Recast Docs

Recast Software Version 5.11.2511 includes new Right Click Tools Patching and Insights features, plus a wealth of bug fixes resulting from a weeklong Bug Bash.

docs.recastsoftware.com

Get ready, folks. 🌟 You’re about to witness ONE. BIG. BEAUTIFUL. ABSURDLY. EPIC. THREAD. 🧵🔥 Some say this might be the MOST EPIC and MOST RIDICULOUSLY LONG identity thread ever written 📗 Bookmark this Honestly… the cover image alone deserves a like + retweet DO IT 😂

Bild

👋 Folks, I'm super excited to announce the launch of the Microsoft Zero Trust Assessment! I've been working on this project for the past year at Microsoft with an extended team including our security researchers, product feature teams and docs Here's what it does

Bild