PowerShell and Windows endpoint automation for enterprise environments, based in Luxembourg.
I build and document tooling for Microsoft Configuration Manager OSD, Active Directory, and Windows deployment — with a bias toward secure defaults, explicit failure handling, and documentation that states what has actually been verified.
- ConfigMgr operating system deployment and task-sequence automation
- Active Directory operations over Kerberos and LDAPS
- Windows deployment, CMTrace-compatible logging, and troubleshooting workflows
- Enterprise endpoint administration
| Project | What it does |
|---|---|
| ConfigMgr-OSD-AddComputerToADGroup | Adds computer accounts to Active Directory groups during OSD. Kerberos over LDAPS by default, membership verification, bounded retries, DC failover, and sanitized CMTrace logging. |
| ConfigMgr-OSD-CopyOSDLogToFileShare | Collects, archives, and uploads ConfigMgr OSD logs to an SMB share, including WinPE support, retries, and verification. |
Both are self-contained Windows PowerShell 5.1 scripts with no external runtime module dependency, published under the MIT License, and validated in CI with PSScriptAnalyzer and Pester.
- Secure by default. No credentials in command lines or source, no certificate-validation bypass, no silent fallback to weaker authentication or transport.
- Honest validation status. Static analysis, unit tests, and CI are reported separately from live environment testing. Pending is documented as pending.
- Operable. Sanitized logging, documented exit codes, explicit compatibility switches, and troubleshooting guidance for the failure modes that actually occur.
All published tools are free and open source. If they save your team time, you can sponsor this work — sponsorship supports testing, documentation, and maintenance.
@vartaxe · vartaxe@outlook.com
For security issues, please use a repository's private vulnerability reporting rather than a public issue.