Skip to main content

Enterprise PowerShell Endpoint Diagnostics & Automation Suite

In locked-down enterprise Windows environments—where AppLocker, Windows Defender Application Control (WDAC), and PowerShell Constrained Language Mode (CLM) restrict arbitrary .NET type invocation and reflection—many standard community troubleshooting scripts fail immediately.

To solve recurring L2/L3 escalation bottlenecks across corporate endpoints, network proxies, and collaboration stacks, I engineered a curated suite of enterprise-grade PowerShell 5.1 / 7 utilities designed specifically to operate cleanly within strict enterprise security baselines.

1. CLM-Compatible Endpoint SSL/TLS & WinHTTP Proxy Inspector​

  • Script: Test-EndpointTLS-CLMv2.ps1
  • Problem Solved: Intermittent application connectivity failures caused by SSL/TLS inspection proxies, missing intermediate root certificates, or stale WinHTTP proxy configurations on locked-down workstations where [Net.ServicePointManager] calls are blocked by Constrained Language Mode.
  • Engineering Highlights:
    • 100% Constrained Language Mode (CLM) Compatible: Avoids prohibited .NET assembly reflection and custom class instantiation.
    • Layered Network Verification: Validates DNS resolution via Resolve-DnsName and TCP port 443 reachability via Test-NetConnection.
    • Native OS Certificate Store Handshake Inspection: Orchestrates built-in Windows curl.exe with strict OS certificate validation (no insecure -k bypasses) to capture full TLS handshake negotiation telemetry.
    • Proxy & Interface Auditing: Captures local adapter state alongside netsh winhttp show proxy configurations into structured log files under $env:TEMP.

2. Microsoft Teams Real-Time Call & Media-Stack Diagnostic Collector​

  • Scripts: Teams Diagnostic Collection Tool vProd.ps1, Collect-TeamsCallLogs.ps1, Test-TeamsDetection.ps1
  • Problem Solved: Intermittent Microsoft Teams call drops and audio/video degradation are notoriously difficult to diagnose after the fact because volatile media-stack logs roll over rapidly.
  • Engineering Highlights:
    • CLM-Optimized Execution: Engineered to run unprivileged on restricted user endpoints under Constrained Language Mode.
    • Automated Directory Polling & Event Detection: Monitors %APPDATA%\Microsoft\Teams, media-stack, skylib, and new AppX/MSIX Teams package directories in real time.
    • Automated Archive Packaging: Bundles relevant call telemetry and diagnostic manifests into timestamped .zip archives immediately upon call completion or drop detection.

3. WMI / CIM Differential USB Hardware Whitelisting Tool​

  • Script: USB Whitelist - Obtain USB Device ID vFinalv2.ps1
  • Problem Solved: Extracting exact hardware DeviceID and PNPClass strings for specialized peripherals so Endpoint Engineering / Security teams can whitelist approved hardware in Intune / Defender / GPO device control policies without manual Device Manager guesswork.
  • Engineering Highlights:
    • Captures a baseline snapshot of all connected Plug-and-Play entities matching USB\* via WMI/CIM (Win32_PnPEntity).
    • Prompts the technician to attach the target peripheral and executes a secondary scan.
    • Performs a differential comparison to isolate newly enumerated composite USB child devices and exports DeviceID, friendly Name, and PNPClass directly to CSV.

4. Headless Edge DevTools Protocol (CDP) NOC Queue Monitor​

  • Script: GUI - AutoRefresh v4.ps1
  • Problem Solved: Legacy auto-refresh scripts that rely on WScript.Shell SendKeys("{F5}") or user32.dll!SetForegroundWindow steal active window focus and interrupt administrators while they work.
  • Engineering Highlights:
    • Launches a dedicated Microsoft Edge profile and communicates directly over the Edge/Chrome DevTools Protocol (CDP) WebSocket.
    • Triggers silent background DOM reloads of ServiceNow and monitoring dashboards without ever stealing window focus or keyboard input.
    • Wrapped in a Windows Forms GUI with system tray minimization, configurable countdown timers, and persistent JSON settings.

5. Service Desk & Identity Request Automation​

  • Access Request List Formatter (IB Request - Format List v2.ps1): Normalizes, strips ticket headers, deduplicates, and alphabetically sorts bulk user lists from the Windows clipboard for Information Barrier permissions, Exchange distribution lists, and SharePoint access provisioning.
  • Standardized Ticket Resolution Generator (Ticket Resolution Generator v2.ps1): Reads dynamic templates (TicketTemplates.txt), prompts for structured variables, generates standardized resolution notes, and appends audit metadata to TicketResolutionLog.csv.

Compatibility Matrix​

ComponentSpecification
Operating SystemsWindows 10 / Windows 11 Enterprise, Windows Server 2016–2022
PowerShell EditionsWindows PowerShell 5.1 & PowerShell 7.x
Security PostureFull Language Mode & Constrained Language Mode (CLM) (AppLocker / WDAC compliant)