Backstage Blitz

Work the Network

100

How can you determine if a user is VPN connected?

Ping the domain. (i.e. ping bockstael.local)

200

How to Check User's Internet Speed

Speed Test.exe

300

Determine what interface the user is connected to the corporate network with using powershell

test-netconnection -computername bockstael.local

(interface alias)

400

Download a file from a website with powershell

Start-BitsTransfer

invoke-webrequest

500

Check Signal Strength of WiFi Connection from command line

netsh wlan show interfaces

Killer Apps

100

How do you view someone's Browser History?

BrowsingHistoryView.exe

200

Name the application you use to find large files on the Hard Drive

SpaceMonger.exe

(or WinDirStat)

300

How do you register/deregister bluebeam licenses?

Open Bluebeam from the program files path and change the license.

400

Change the Data Source for a MS Access Application (i.e. IME)

ODBC Data Sources

500

Command to install a MSI installer silently from c:\temp\install.msi

msiexec /i c:\temp\install.msi /qb

Hacking and Coughing

100

Change a registry entry for Local Machine

regedit

200

Force a user's Desktop Icons to reappear (redirected folders lost network connection temporarily)

Restart explorer.exe using;

Stop-process explorer

or

ProcessHacker.exe

300

Override Group Policy for Local Computer

gpedit.msc

400

Change Registry for a user who is not logged in

Regedit >

HKEY_USERS > GUID > "volatile Environment" Username.

Then use that hive to make changes

500

Display WiFi Profile saved password in cleartext

netsh wlan show profile <profilename> key=clear

Something about OS

100

Restart a Service

net stop | net start

restart-service

services.msc (click restart)

200

Enable .Net 3.5

Windows Optional Features

300

Join a Computer to the domain

GUI - System Properties

or

PS - Add-Computer

400

Enroll for Certificate as System

certlm.msc

or

get-certificate

500

Force System to boot into "Alternate OS" (Bootcamp)

msconfig.msc

The user is always right

100

Reset Local Administrator Password

net user administrator *

200

Schedule a task to run on user login

Task Scheduler

300

Make Standard Domain User a LOCAL ADMIN

netplwiz

or

Add-localgroupmember

400

Allow User to RDP to their own machine

System Properties / sysdm.cpl

Remote > Allow > Select Users

500

List all printer's connected as the current logged on user. (which are local?, which are off the server?)

ProcessHacker.exe

Run as This User;

powershell.exe -command " Get-WmiObject -Class Win32_Printer " > c:\temp\output.txt

get-content c:\temp\output.txt