TicketReady v0.2.2 - portable Windows support report

TicketReady v0.2 adds guided troubleshooting, before-and-after comparisons and stronger privacy defaults. Offline, read-only Windows support report with HTML/JSON export. No telemetry, installation, cloud upload, or administrator elevation. Review local reports before sharing.

TicketReady v0.2.1 - portable Windows support report

TicketReady v0.2 adds guided troubleshooting, before-and-after comparisons and stronger privacy defaults. Offline, read-only Windows support report with HTML/JSON export. No telemetry, installation, cloud upload, or administrator elevation. Review local reports before sharing.

TicketReady v0.2.0 - portable Windows support report

TicketReady v0.2 adds guided troubleshooting, before-and-after comparisons and stronger privacy defaults. Offline, read-only Windows support report with HTML/JSON export. No telemetry, installation, cloud upload, or administrator elevation. Review local reports before sharing.

TicketReady v0.1.0 - portable Windows support report

First portable TicketReady release. Offline, read-only Windows support report with HTML/JSON export. No telemetry, installation, cloud upload, or administrator elevation. Review local reports before sharing.

SchunkOps 1.4.0

SchunkOps 1.4.0 — Day-Two Windows Operations

Released: 2026-09-20

SchunkOps 1.4 expands the module from 36 to 44 public commands with a new set of read-only diagnostics for common day-two Windows Server operations.

New commands

• Get-SchunkFirewallAudit — Windows Defender Firewall profile state, enabled-rule counts, and optional rule inventory.
• Get-SchunkRdpHealth — RDP enablement, configured port, NLA, security layer, TermService state, listeners, and firewall evidence.
• Get-SchunkDfsNamespaceHealth — DFS Namespace roots, folders, target state, and local DFS service state.
• Get-SchunkCertificateInventory — local-machine certificate inventory with expiration, DNS names, EKUs, and private-key state.
• Get-SchunkPrivilegedGroupAudit — recursive membership review of well-known privileged Active Directory groups.
• Get-SchunkIisLogSummary — recent IIS W3C log summary with status codes, top URI stems, and top client addresses.
• Get-SchunkSqlServerHealth — local SQL Server instances, Windows services, stopped automatic services, and listening endpoints.
• Get-SchunkWindowsBackupHealth — Windows Server Backup service, wbadmin status/version output, and backup scheduled tasks.

Examples

Get-SchunkFirewallAudit -IncludeRules
Get-SchunkRdpHealth
Get-SchunkCertificateInventory -WarningDays 60
Get-SchunkPrivilegedGroupAudit
Get-SchunkIisLogSummary -Hours 24
Get-SchunkSqlServerHealth
Get-SchunkWindowsBackupHealth

DFS:

Get-SchunkDfsNamespaceHealth -NamespacePath '\\contoso.com\Public'

Safety

The new commands are diagnostic collectors. They do not change firewall policy, RDP configuration, DFS configuration, certificate stores, Active Directory group membership, IIS configuration, SQL Server configuration, or backup configuration.

The Pester safety contract has also been extended to statically reject known firewall, DFS, and privileged-group state-changing commands from the senior diagnostic set.

SchunkOps 1.3.0

SchunkOps 1.3.0 — Windows Server Operations

Released: 2026-09-20

SchunkOps 1.3 turns the module into a broader Windows Server operations toolkit while preserving the project's read-first, evidence-first approach.

New commands

• Invoke-SchunkServerAudit — coordinates core server health, reboot state, service failures, event triage, listening ports, Windows Update health, and optional IIS/Hyper-V checks. Can write a self-contained HTML report.
• Get-SchunkIisHealth — sites, bindings, application pools, stopped-state summary.
• Get-SchunkHyperVHealth — host capacity, VM state, VHD/VHDX information, virtual switches, integration services, and aged checkpoints.
• Get-SchunkSmbPermissionAudit — SMB share access plus NTFS ACLs at each share root.
• Test-SchunkGpoApplication — GPResult evidence for computer and user policy without refreshing or changing policy.
• Get-SchunkDnsServerHealth — DNS zones, update configuration, replication scope, and forwarders.
• Get-SchunkDhcpScopeHealth — scope state, address utilization, and failover relationships.
• Get-SchunkWindowsUpdateHealth — pending updates, recent update history, and reboot evidence.

Fast start

Import-Module SchunkOps
Invoke-SchunkServerAudit -HtmlPath C:\Reports\server-audit.html

On an IIS or Hyper-V host:

Invoke-SchunkServerAudit -IncludeIis -IncludeHyperV -HtmlPath C:\Reports\server-audit.html

Role-specific checks:

Get-SchunkDnsServerHealth -ComputerName DC01
Get-SchunkDhcpScopeHealth -ComputerName DHCP01
Get-SchunkSmbPermissionAudit -Name Finance
Test-SchunkGpoApplication -Scope Computer

Design rules

All new role diagnostics are read-only. The only intentional write in this release is the optional report file requested through Invoke-SchunkServerAudit -HtmlPath, which supports -WhatIf.

These commands are intended to produce inspectable PowerShell objects that can be formatted interactively, exported to JSON/CSV where appropriate, or consumed by automation.

SchunkOps 1.2.0

SchunkOps 1.2.0

SchunkOps 1.2 expands the Windows IT Toolkit from day-to-day endpoint and server diagnostics into senior infrastructure investigations while keeping the same read-only-first operating model.

Collect first. Change second. Document always.

New in 1.2

Account lockout tracing

Get-SchunkAccountLockoutTrace correlates account lockout events across domain controllers and surfaces caller-computer evidence so engineers can investigate recurring lockouts without manually opening Security logs on every DC.

Kerberos / SPN auditing

Get-SchunkKerberosSpnAudit reviews service principal name ownership and duplicate registrations to help isolate Kerberos authentication failures and identity collisions.

Group Policy change review

Get-SchunkGpoChangeAudit inventories recently modified Group Policy Objects and can generate SHA-256 report fingerprints for baseline and change-review workflows.

DHCP / DNS consistency

Get-SchunkDhcpDnsConsistency compares active DHCP lease information with forward and reverse DNS state to surface stale, mismatched, or missing name-resolution records.

Certificate chain validation

Test-SchunkCertificateChain validates local X.509 trust chains and returns structured chain-status evidence instead of a browser-specific certificate warning.

Failover Cluster health

Get-SchunkClusterHealth summarizes nodes, clustered roles, resources, networks, Cluster Shared Volumes, and quorum state for Windows Failover Clustering investigations.

Fleet health

Get-SchunkFleetHealth collects normalized health from multiple Windows systems over CIM without requiring SchunkOps to be installed on the remote machines.

VMware vSphere inventory

Get-SchunkVSphereInventory uses an existing VMware PowerCLI connection to return read-only host, datastore, VM, and optional snapshot health context.

Module size

SchunkOps 1.2 exports 28 public commands spanning:

• help desk / endpoint triage
• Windows Server operations
• Active Directory and domain trust
• DNS and network diagnostics
• account lockout and Kerberos investigations
• Group Policy change review
• local privilege inventory
• certificate validation
• failover clustering
• multi-server fleet health
• VMware vSphere inventory
• incident evidence and before/after comparison

Install

The GitHub release contains the versioned module ZIP and SHA-256 checksum. Once the PowerShell Gallery publisher credential is configured, the same version can be installed directly from the Gallery:

Install-Module SchunkOps -Scope CurrentUser
Import-Module SchunkOps
Get-Command -Module SchunkOps

Start with:

Get-SchunkEndpointTriage

Senior engineers can continue with:

Get-SchunkFleetHealth -ComputerName server01,server02,server03
Get-SchunkAccountLockoutTrace -Identity jsmith -LookbackHours 24
Get-SchunkKerberosSpnAudit -Identity svc_web
Get-SchunkGpoChangeAudit -SinceDays 14 -IncludeFingerprint
Get-SchunkClusterHealth -Cluster sqlcluster01
Get-SchunkVSphereInventory -IncludeSnapshots

Documentation

• Five-minute quick start: docs/QUICKSTART.md
• Help Desk Field Guide: docs/HELPDESK.md
• Senior Engineer Field Guide: docs/SENIOR-ENGINEER.md
• Incident-response workflow: docs/INCIDENT-RESPONSE.md
• Privilege / dependency guide: docs/PRIVILEGES.md

Safety and quality

The 1.2 release is guarded by PowerShell parsing, PSScriptAnalyzer error rules, Pester module tests, export validation, discoverable command-help checks, and a static safety contract for the senior diagnostic set.

The release pipeline requires the release version to match the module manifest, creates a versioned ZIP artifact and SHA-256 checksum, and publishes the GitHub Release only after its quality gates pass. PowerShell Gallery publication is a separate protected job that requires the maintainer's Gallery API key. Authenticode signing is supported when code-signing secrets are configured; otherwise the CI-validated module can be published unsigned.

SchunkOps does not contain environment-specific credentials or phone-home telemetry. Operators remain responsible for reviewing commands, permissions, exported evidence, and organizational policy before production use.