Guy Leech
@guyrleech.bsky.social
PowerShell nut. Dog owner. Grandfather
Did you know that when you've pressed Alt + tab on Windows 11, you can then use the cursor keys to move quicker, eg down, to the tab you want whilst still pressing Alt & release Alt?
Similarly, press Windows + Tab & use cursor keys to navigate around & select via window thumbnail then press Enter
Similarly, press Windows + Tab & use cursor keys to navigate around & select via window thumbnail then press Enter
January 6, 2026 at 10:36 PM
Did you know that when you've pressed Alt + tab on Windows 11, you can then use the cursor keys to move quicker, eg down, to the tab you want whilst still pressing Alt & release Alt?
Similarly, press Windows + Tab & use cursor keys to navigate around & select via window thumbnail then press Enter
Similarly, press Windows + Tab & use cursor keys to navigate around & select via window thumbnail then press Enter
Got a #PowerShell array of objects with already sorted timestamps where you want to reverse the order? Eg I got logs from @Googlecloud but was most recent 1st & I wanted oldest first & rather than sort on the datestamp, I just reversed the array with
[array]::Reverse( $yourArray )
[array]::Reverse( $yourArray )
December 15, 2025 at 2:57 PM
Got a #PowerShell array of objects with already sorted timestamps where you want to reverse the order? Eg I got logs from @Googlecloud but was most recent 1st & I wanted oldest first & rather than sort on the datestamp, I just reversed the array with
[array]::Reverse( $yourArray )
[array]::Reverse( $yourArray )
Is #dedup for NTFS on Server 2025 supported by
#Microsoft for #FSlogix or not?
Most AI says not but fails to give a definitive reference.
Was enabled & working on a system I inherited BUT there was also corruption on that volume.
Surely should be ok as a file system feature invisible to FSlogix?
#Microsoft for #FSlogix or not?
Most AI says not but fails to give a definitive reference.
Was enabled & working on a system I inherited BUT there was also corruption on that volume.
Surely should be ok as a file system feature invisible to FSlogix?
December 15, 2025 at 1:26 PM
Is #dedup for NTFS on Server 2025 supported by
#Microsoft for #FSlogix or not?
Most AI says not but fails to give a definitive reference.
Was enabled & working on a system I inherited BUT there was also corruption on that volume.
Surely should be ok as a file system feature invisible to FSlogix?
#Microsoft for #FSlogix or not?
Most AI says not but fails to give a definitive reference.
Was enabled & working on a system I inherited BUT there was also corruption on that volume.
Surely should be ok as a file system feature invisible to FSlogix?
Well this is something that I have never seen before today in #PowerShell 5.1 & the lines causing it have been in my $profile for years. PowerShell.exe date is today - this could break a lot of scripts (as in cause them to pause f input)!! 😱
December 11, 2025 at 1:04 PM
Well this is something that I have never seen before today in #PowerShell 5.1 & the lines causing it have been in my $profile for years. PowerShell.exe date is today - this could break a lot of scripts (as in cause them to pause f input)!! 😱
Anyone found a way to toggle the Do Not Disturb Notification setting in Windows 11? Found some stuff around setting registry values which didn't pan out & other stuff that P/Invoked WNF APIs but that failed too. Tried what I found in procmon but failed. Surely it must be possible?
December 9, 2025 at 9:12 AM
Anyone found a way to toggle the Do Not Disturb Notification setting in Windows 11? Found some stuff around setting registry values which didn't pan out & other stuff that P/Invoked WNF APIs but that failed too. Tried what I found in procmon but failed. Surely it must be possible?
I sense a disturbance in the force, sorry internet. Trying to tweet this on X fails 🙁
November 18, 2025 at 11:46 AM
I sense a disturbance in the force, sorry internet. Trying to tweet this on X fails 🙁
Reposted by Guy Leech
He’s back. 👔
The man who started it all — @jsnover.com, Inventor of #PowerShell, will open #PSConfEU 2026 in #Wiesbaden with the keynote you don’t want to miss.
🎟️ Tickets now available → psconf.eu
#Automation #IT #Germany #Europe
The man who started it all — @jsnover.com, Inventor of #PowerShell, will open #PSConfEU 2026 in #Wiesbaden with the keynote you don’t want to miss.
🎟️ Tickets now available → psconf.eu
#Automation #IT #Germany #Europe
November 10, 2025 at 10:55 AM
He’s back. 👔
The man who started it all — @jsnover.com, Inventor of #PowerShell, will open #PSConfEU 2026 in #Wiesbaden with the keynote you don’t want to miss.
🎟️ Tickets now available → psconf.eu
#Automation #IT #Germany #Europe
The man who started it all — @jsnover.com, Inventor of #PowerShell, will open #PSConfEU 2026 in #Wiesbaden with the keynote you don’t want to miss.
🎟️ Tickets now available → psconf.eu
#Automation #IT #Germany #Europe
EUC folks with non-persistent desktops but using something like #FSlogix have you found a way to stop @OneDrive from taking ages (>50 minutes) to drop the (dehydrated) place holders into a new profile? Our sessions are generally <1 hour so cutting it fine + what if user needs a "late" file?
November 13, 2025 at 12:20 PM
EUC folks with non-persistent desktops but using something like #FSlogix have you found a way to stop @OneDrive from taking ages (>50 minutes) to drop the (dehydrated) place holders into a new profile? Our sessions are generally <1 hour so cutting it fine + what if user needs a "late" file?
Reposted by Guy Leech
New Episode! 🚨
I cover layoffs from Amazon and GM, the root cause of the recent AWS outage, a concerning new Teams feature, my review of Pwn2Own Ireland 2025 and more!
🔊 Listen: on.soundcloud.com/ncOCKrv63zJM...
📺 View: youtu.be/aaLAY23ZJa4?...
I cover layoffs from Amazon and GM, the root cause of the recent AWS outage, a concerning new Teams feature, my review of Pwn2Own Ireland 2025 and more!
🔊 Listen: on.soundcloud.com/ncOCKrv63zJM...
📺 View: youtu.be/aaLAY23ZJa4?...
Amazon Announces Layoffs! Pwn2Own Ireland! New Teams Monitoring Feature!
YouTube video by 5bytespodcast
youtu.be
October 29, 2025 at 9:38 PM
New Episode! 🚨
I cover layoffs from Amazon and GM, the root cause of the recent AWS outage, a concerning new Teams feature, my review of Pwn2Own Ireland 2025 and more!
🔊 Listen: on.soundcloud.com/ncOCKrv63zJM...
📺 View: youtu.be/aaLAY23ZJa4?...
I cover layoffs from Amazon and GM, the root cause of the recent AWS outage, a concerning new Teams feature, my review of Pwn2Own Ireland 2025 and more!
🔊 Listen: on.soundcloud.com/ncOCKrv63zJM...
📺 View: youtu.be/aaLAY23ZJa4?...
Here's a typical use case for me using -Outvariable in an interactive PowerShell command line where I'm searching for a file so I want visual output as it searches but I also want the results in a variable so I can access more properties later if I need them without searching again
October 29, 2025 at 11:58 AM
Here's a typical use case for me using -Outvariable in an interactive PowerShell command line where I'm searching for a file so I want visual output as it searches but I also want the results in a variable so I can access more properties later if I need them without searching again
Reposted by Guy Leech
We're at 99 members on our new Dutch PowerShell User Group meetup, are you going to get us to 100?
Join us, for our favorite price: Free, here: meetup.com/dutch-powers...
And if you do, share it here!
#PowerShell #DevOps
Join us, for our favorite price: Free, here: meetup.com/dutch-powers...
And if you do, share it here!
#PowerShell #DevOps
Dutch PowerShell User Group | Meetup
Welcome to the Dutch PowerShell User Group! This group is for anyone interested in PowerShell, DevOps, Infrastructure as Code, and Cloud Infrastructure. Join us to learn, share knowledge, and network ...
meetup.com
October 22, 2025 at 2:06 PM
We're at 99 members on our new Dutch PowerShell User Group meetup, are you going to get us to 100?
Join us, for our favorite price: Free, here: meetup.com/dutch-powers...
And if you do, share it here!
#PowerShell #DevOps
Join us, for our favorite price: Free, here: meetup.com/dutch-powers...
And if you do, share it here!
#PowerShell #DevOps
PowerShell 7.5.4 released
github.com/PowerShell/P...
github.com/PowerShell/P...
Release v7.5.4 Release of PowerShell · PowerShell/PowerShell
7.5.4
Build and Packaging Improvements
Update to .NET SDK 9.0.306
[release/v7.5] Update Ev2 Shell Extension Image to AzureLinux 3 for PMC Release (#26032)
[release/v7.5] Fix variable reference ...
github.com
October 20, 2025 at 8:02 PM
PowerShell 7.5.4 released
github.com/PowerShell/P...
github.com/PowerShell/P...
Just dug this 2018 tweet out as seeing the issue at a customer:
#Windows Security event log being swamped by 4703 "A token right was adjusted" events? Disable "Audit Authorization Policy Change" by local or group policy. Common with #SCCM
learn.microsoft.com/en-us/previo...
#Windows Security event log being swamped by 4703 "A token right was adjusted" events? Disable "Audit Authorization Policy Change" by local or group policy. Common with #SCCM
learn.microsoft.com/en-us/previo...
October 1, 2025 at 9:44 AM
Just dug this 2018 tweet out as seeing the issue at a customer:
#Windows Security event log being swamped by 4703 "A token right was adjusted" events? Disable "Audit Authorization Policy Change" by local or group policy. Common with #SCCM
learn.microsoft.com/en-us/previo...
#Windows Security event log being swamped by 4703 "A token right was adjusted" events? Disable "Audit Authorization Policy Change" by local or group policy. Common with #SCCM
learn.microsoft.com/en-us/previo...
What's the current thinking/consensus/experience of having duplicate machine SIDs on the same subnet & members of the same domain (different hostnames & MAC & IP addresses obviously)?
It's many years since @markrussinovich.bsky.social said changing SIDs wasn't necessary but what about RoW?
It's many years since @markrussinovich.bsky.social said changing SIDs wasn't necessary but what about RoW?
September 29, 2025 at 1:58 PM
What's the current thinking/consensus/experience of having duplicate machine SIDs on the same subnet & members of the same domain (different hostnames & MAC & IP addresses obviously)?
It's many years since @markrussinovich.bsky.social said changing SIDs wasn't necessary but what about RoW?
It's many years since @markrussinovich.bsky.social said changing SIDs wasn't necessary but what about RoW?
Reposted by Guy Leech
💡 Be Your Own Sherlock in the Realms of Microsoft Graph
👨🏫 @hcritter.bsky.social – Senior System Engineer at CANCOM GmbH
🗓️ 14 Oct | #PSConfEU MiniCon
👉 Free ticket: synedgy.com/psconfeu-minicon
#PowerShell #Microsoft #Graph #automation
👨🏫 @hcritter.bsky.social – Senior System Engineer at CANCOM GmbH
🗓️ 14 Oct | #PSConfEU MiniCon
👉 Free ticket: synedgy.com/psconfeu-minicon
#PowerShell #Microsoft #Graph #automation
September 26, 2025 at 10:30 AM
💡 Be Your Own Sherlock in the Realms of Microsoft Graph
👨🏫 @hcritter.bsky.social – Senior System Engineer at CANCOM GmbH
🗓️ 14 Oct | #PSConfEU MiniCon
👉 Free ticket: synedgy.com/psconfeu-minicon
#PowerShell #Microsoft #Graph #automation
👨🏫 @hcritter.bsky.social – Senior System Engineer at CANCOM GmbH
🗓️ 14 Oct | #PSConfEU MiniCon
👉 Free ticket: synedgy.com/psconfeu-minicon
#PowerShell #Microsoft #Graph #automation
If you want to quickly figure out if & where a process is writing a logfile, create a filter (ctrl l) in @SysInternals procmon for your process(es) and also Category = Write & turn off registry & network capture in the toolbar
September 26, 2025 at 1:11 PM
If you want to quickly figure out if & where a process is writing a logfile, create a filter (ctrl l) in @SysInternals procmon for your process(es) and also Category = Write & turn off registry & network capture in the toolbar
Any of you got experiences of packaging Adobe or AutoCAD apps into MSIX and delivering via App Attach? About to have a play myself but interested to know if others have tried. I think going App-V is probably not a sensible approach given its life expectancy.
September 26, 2025 at 11:55 AM
Any of you got experiences of packaging Adobe or AutoCAD apps into MSIX and delivering via App Attach? About to have a play myself but interested to know if others have tried. I think going App-V is probably not a sensible approach given its life expectancy.
Need to turn %USERDNSDOMAIN% into canonical form, eg for ADSI ?
"DC=$(($env:USERDNSDOMAIN -split '\.') -join ',DC=')"
"DC=$(($env:USERDNSDOMAIN -split '\.') -join ',DC=')"
September 25, 2025 at 3:43 PM
Need to turn %USERDNSDOMAIN% into canonical form, eg for ADSI ?
"DC=$(($env:USERDNSDOMAIN -split '\.') -join ',DC=')"
"DC=$(($env:USERDNSDOMAIN -split '\.') -join ',DC=')"
Reposted by Guy Leech
💡 #PowerShell Security: A Journey Through Time
👨🏫👨🏫 @miriamwiesner.bsky.social - Security Researcher at Microsoft & Anam Navied - Software Engineer, PowerShell team at Microsoft
🗓️ 14 Oct | #PSConfEU MiniCon
👉 Free ticket: synedgy.com/psconfeu-minicon
#automation
👨🏫👨🏫 @miriamwiesner.bsky.social - Security Researcher at Microsoft & Anam Navied - Software Engineer, PowerShell team at Microsoft
🗓️ 14 Oct | #PSConfEU MiniCon
👉 Free ticket: synedgy.com/psconfeu-minicon
#automation
September 23, 2025 at 6:40 AM
💡 #PowerShell Security: A Journey Through Time
👨🏫👨🏫 @miriamwiesner.bsky.social - Security Researcher at Microsoft & Anam Navied - Software Engineer, PowerShell team at Microsoft
🗓️ 14 Oct | #PSConfEU MiniCon
👉 Free ticket: synedgy.com/psconfeu-minicon
#automation
👨🏫👨🏫 @miriamwiesner.bsky.social - Security Researcher at Microsoft & Anam Navied - Software Engineer, PowerShell team at Microsoft
🗓️ 14 Oct | #PSConfEU MiniCon
👉 Free ticket: synedgy.com/psconfeu-minicon
#automation
It seems that the long standing PowerShell 7.5.* bug where Out-Gridview doesn't function properly is fixed in 7.5.3! Hurrah!
github.com/PowerShell/P...
github.com/PowerShell/P...
September 10, 2025 at 6:05 PM
It seems that the long standing PowerShell 7.5.* bug where Out-Gridview doesn't function properly is fixed in 7.5.3! Hurrah!
github.com/PowerShell/P...
github.com/PowerShell/P...
PowerShell 7.4.12 is now available. I'll be on 7.4.* until Out-Gridview is fixed in 7.5.* although there is a new 7.5.3 release too
github.com/PowerShell/P...
github.com/PowerShell/P...
Release v7.4.12 Release of PowerShell · PowerShell/PowerShell
7.4.12
Tools
Add CodeQL suppressions (#25973)
Build and Packaging Improvements
Update .NET SDK to 8.0.413
Add LinuxHost Network configuration to PowerShell Packages pipeline (#26003)
Update c...
github.com
September 10, 2025 at 5:30 PM
PowerShell 7.4.12 is now available. I'll be on 7.4.* until Out-Gridview is fixed in 7.5.* although there is a new 7.5.3 release too
github.com/PowerShell/P...
github.com/PowerShell/P...
TIL I've been using Microsoft products since 1980 when I wrote my first lines of BASIC code which was on a Commodore PET that my late (mainframe) COBOL coding father sometimes brought back from his office
Microsoft’s 6502 BASIC is now Open Source opensource.microsoft.com/blog/2025/09...
Microsoft Releases Historic 6502 BASIC - Microsoft Open Source Blog
Explore the original 6502 BASIC—now open source! Dive into retro code, history, and emulators. Fork it, run it, and relive computing's roots.
opensource.microsoft.com
September 4, 2025 at 6:49 AM
TIL I've been using Microsoft products since 1980 when I wrote my first lines of BASIC code which was on a Commodore PET that my late (mainframe) COBOL coding father sometimes brought back from his office
Did you know that Entra ID SIDs start S-1-12-1 whereas (legacy?) AD domain and local normal accounts start S-1-5-21 ?
September 4, 2025 at 5:49 AM
Did you know that Entra ID SIDs start S-1-12-1 whereas (legacy?) AD domain and local normal accounts start S-1-5-21 ?
Reposted by Guy Leech
Multiple vulnerabilities in Dell ThinOS 10
URL: www.dell.com/support/kbdo...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6
URL: www.dell.com/support/kbdo...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6
DSA-2025-331: Security Update for Dell ThinOS 10 for Multiple Vulnerabilities | Dell US
www.dell.com
August 28, 2025 at 4:25 AM
Multiple vulnerabilities in Dell ThinOS 10
URL: www.dell.com/support/kbdo...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6
URL: www.dell.com/support/kbdo...
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6