Public Misc

IT Administration Scripts & Utilities

---

Overview

Collection of PowerShell scripts used across CK Technology managed environments. Designed for remote execution via ScreenConnect backstage commands or GPO deployment against Windows workstations and servers.

All scripts that produce logs write to C:\ProgramData\CKTECH-Scripts\.

ScreenConnect Quick Commands

Copy-paste these into a ScreenConnect backstage PowerShell session:

# Tekla PowerFab Update
irm "https://raw.githubusercontent.com/CK-Technology/public-misc/refs/heads/main/TeklaPowerFab/powerfabUp.ps1" | iex

# Windows Update (PSWindowsUpdate with logging)
irm "https://raw.githubusercontent.com/CK-Technology/public-misc/refs/heads/main/winUp.ps1" | iex

# Windows Update (simple, auto-reboot)
irm "https://raw.githubusercontent.com/CK-Technology/public-misc/refs/heads/main/UpdateWindows.ps1" | iex

# Winget - Upgrade All Packages
irm "https://raw.githubusercontent.com/CK-Technology/public-misc/refs/heads/main/wingetUp.ps1" | iex

# Enable Windows Defender
irm "https://raw.githubusercontent.com/CK-Technology/public-misc/refs/heads/main/enableDefender.ps1" | iex

# Bluebeam Revu 21 Update
irm "https://raw.githubusercontent.com/CK-Technology/public-misc/refs/heads/main/bluebeamUpdates.ps1" | iex

# FortiClient IPsec VPN Deploy
irm "https://raw.githubusercontent.com/CK-Technology/public-misc/refs/heads/main/deploy-ipsec.ps1" | iex

# ScreenConnect Agent Install - Cloud instance
irm 'https://raw.githubusercontent.com/CK-Technology/public-misc/refs/heads/main/screenconnect/cloud/Install-ScreenConnect.ps1' | iex

# ScreenConnect Agent Install - On-prem instance (set server URL in the script first)
irm 'https://raw.githubusercontent.com/CK-Technology/public-misc/refs/heads/main/screenconnect/onprem/Install-ScreenConnect.ps1' | iex

Scripts

TeklaPowerFab/powerfabUp.ps1

Copies the Tekla PowerFab installer from a network share (\\Iron-file1) to the local update directory and launches it. Intended for rolling out PowerFab service packs across all PowerFab workstations.

winUp.ps1

Windows Update via PSWindowsUpdate module with full transcript logging. Lists available updates with KB numbers before installing. Does not auto-reboot -- use this when you want controlled patching.

UpdateWindows.ps1

Simplified Windows Update script. Installs PSWindowsUpdate and applies all available updates with auto-reboot. Use when you want fire-and-forget patching.

wingetUp.ps1

Locates the winget executable and upgrades all installed packages silently. Logs output to CKTECH-Scripts\winget.txt.

enableDefender.ps1

Re-enables Windows Defender real-time protection, IOAV protection, behavior monitoring, and on-access protection via both Set-MpPreference and registry keys. Starts the WinDefend and WdNisSvc services.

bluebeamUpdates.ps1

Automated update script for Bluebeam Revu 21. Checks the installed version against the latest available release via the winget manifest on GitHub, downloads the MSI package, and installs silently. Supports -Force reinstall and -IncludeOCR flags.

deploy-ipsec.ps1

Deploys FortiClient IPsec VPN configuration from an exported XML via GPO startup script. Uses a marker file to ensure one-time import per machine. Logs to CKTECH-Scripts\ckel_vpn_deploy.log.

Note: Update $xmlSource, $password, and $marker paths to match your environment before deploying.

screenconnect/cloud/Install-ScreenConnect.ps1

Silent install of the ScreenConnect / ConnectWise Control access agent against the cloud instance (cktech.screenconnect.com). Downloads the MSI from the instance Bin endpoint, validates it is a real MSI (guards against HTML interstitials from hosts like Google Drive), and installs silently via msiexec /qn. Requires admin; skips if the agent is already present unless -Force is passed. Override the target with -InstallerUrl. Logs to CKScripts\screenconnect_install.log.

screenconnect/onprem/Install-ScreenConnect.ps1

Same as the cloud installer but targets the on-prem instance. Update the default $InstallerUrl in the script (currently a REPLACE-ME placeholder that the script refuses to run against) once the on-prem server is stood up, or pass -InstallerUrl at runtime.

Note: Get the URL from your instance: Access tab → Build → copy the .msi download link. Agent installer binaries (*.exe/*.msi) are git-ignored and must never be committed to this public repo.

Repo Structure

public-misc/
├── TeklaPowerFab/
│   └── powerfabUp.ps1
├── screenconnect/
│   ├── cloud/
│   │   └── Install-ScreenConnect.ps1
│   └── onprem/
│       └── Install-ScreenConnect.ps1
├── UpdateWindows.ps1
├── winUp.ps1
├── wingetUp.ps1
├── enableDefender.ps1
├── bluebeamUpdates.ps1
├── deploy-ipsec.ps1
└── README.md

Prerequisites

• Administrative privileges on the target machine
• Network share access where applicable (e.g., \\Iron-file1\..., \\CKEL-FILE1\...)
• PowerShell execution policy allows script execution (or use -ExecutionPolicy Bypass)

License

MIT - See LICENSE for details.

---

CK Technology