Skip to content

SchunkOps 1.4.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Sep 05:30
v1.4.0
f640871
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SchunkOps 1.4.0 — Day-Two Windows Operations

Released: 2026-09-20

SchunkOps 1.4 expands the module from 36 to 44 public commands with a new set of read-only diagnostics for common day-two Windows Server operations.

New commands

  • Get-SchunkFirewallAudit — Windows Defender Firewall profile state, enabled-rule counts, and optional rule inventory.
  • Get-SchunkRdpHealth — RDP enablement, configured port, NLA, security layer, TermService state, listeners, and firewall evidence.
  • Get-SchunkDfsNamespaceHealth — DFS Namespace roots, folders, target state, and local DFS service state.
  • Get-SchunkCertificateInventory — local-machine certificate inventory with expiration, DNS names, EKUs, and private-key state.
  • Get-SchunkPrivilegedGroupAudit — recursive membership review of well-known privileged Active Directory groups.
  • Get-SchunkIisLogSummary — recent IIS W3C log summary with status codes, top URI stems, and top client addresses.
  • Get-SchunkSqlServerHealth — local SQL Server instances, Windows services, stopped automatic services, and listening endpoints.
  • Get-SchunkWindowsBackupHealth — Windows Server Backup service, wbadmin status/version output, and backup scheduled tasks.

Examples

Get-SchunkFirewallAudit -IncludeRules
Get-SchunkRdpHealth
Get-SchunkCertificateInventory -WarningDays 60
Get-SchunkPrivilegedGroupAudit
Get-SchunkIisLogSummary -Hours 24
Get-SchunkSqlServerHealth
Get-SchunkWindowsBackupHealth

DFS:

Get-SchunkDfsNamespaceHealth -NamespacePath '\\contoso.com\Public'

Safety

The new commands are diagnostic collectors. They do not change firewall policy, RDP configuration, DFS configuration, certificate stores, Active Directory group membership, IIS configuration, SQL Server configuration, or backup configuration.

The Pester safety contract has also been extended to statically reject known firewall, DFS, and privileged-group state-changing commands from the senior diagnostic set.

Assets 4
Loading