LIBRARY UPDATE · 12 OCTOBER 2026
More practical support tasks.
127 additions. 486 scripts across six desks.
Browse the latest diagnostics by language, then open a task to review its requirements and tailor it to your environment.
What has been checked?
These examples include source references and syntax or fixture checks where available. Windows server roles, Linux utilities and cloud environments still need target-system validation. A read-only diagnostic is not a guarantee of compatibility or a health verdict.
Register for two designated free sample scripts on each desk. The rest of the library remains reserved for paid access, which is coming soon. Nothing runs in these web pages.
PowerShell · 73 additions
- Inspect Windows update peer-download progress
Inspect Windows update peer-download progress. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
deliveryoptimization · Reference documentation ↗ - Check whether Windows reserved storage is enabled
Check whether Windows reserved storage is enabled. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dism · Reference documentation ↗ - Inspect optional Windows capability installation state
Inspect optional Windows capability installation state. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dism · Reference documentation ↗ - Inspect optional Windows component state
Inspect optional Windows component state. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dism · Reference documentation ↗ - Inspect Windows servicing package states
Inspect Windows servicing package states. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dism · Reference documentation ↗ - Inspect third-party Windows driver packages
Inspect third-party Windows driver packages. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dism · Reference documentation ↗ - Identify the installed Windows servicing edition
Identify the installed Windows servicing edition. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dism · Reference documentation ↗ - Inspect a network adapter driver’s advanced settings
Inspect a network adapter driver’s advanced settings. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
netadapter · Reference documentation ↗ - Inspect receive segment coalescing support
Inspect receive segment coalescing support. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
netadapter · Reference documentation ↗ - Inspect RDMA enablement on a network adapter
Inspect RDMA enablement on a network adapter. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
netadapter · Reference documentation ↗ - Inspect virtual-machine queue configuration
Inspect virtual-machine queue configuration. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
netadapter · Reference documentation ↗ - Inspect the neighbour cache for one network interface
Inspect the neighbour cache for one network interface. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
nettcpip · Reference documentation ↗ - Inspect Windows network compartments
Inspect Windows network compartments. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
nettcpip · Reference documentation ↗ - Inspect Windows NAT prefixes
Inspect Windows NAT prefixes. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
netnat · Reference documentation ↗ - Inspect static Windows NAT port mappings
Inspect static Windows NAT port mappings. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
netnat · Reference documentation ↗ - Inspect current-user VPN configuration without secrets
Inspect current-user VPN configuration without secrets. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
vpnclient · Reference documentation ↗ - Inspect automatic connection triggers for a VPN
Inspect automatic connection triggers for a VPN. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
vpnclient · Reference documentation ↗ - Inspect storage-pool capacity and health
Inspect storage-pool capacity and health. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
storage · Reference documentation ↗ - Inspect Storage Spaces virtual-disk resilience
Inspect Storage Spaces virtual-disk resilience. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
storage · Reference documentation ↗ - Inspect in-progress storage maintenance jobs
Inspect in-progress storage maintenance jobs. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
storage · Reference documentation ↗ - Inspect storage-subsystem health
Inspect storage-subsystem health. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
storage · Reference documentation ↗ - Inspect storage-enclosure health and location
Inspect storage-enclosure health and location. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
storage · Reference documentation ↗ - Inspect integrity-stream configuration on a file
Inspect integrity-stream configuration on a file. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
storage · Reference documentation ↗ - Inspect Storage Spaces tier capacity
Inspect Storage Spaces tier capacity. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
storage · Reference documentation ↗ - Inspect configured SMB bandwidth limits
Inspect configured SMB bandwidth limits. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
smbshare · Reference documentation ↗ - Inspect SMB server network-interface capabilities
Inspect SMB server network-interface capabilities. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
smbshare · Reference documentation ↗ - Inspect SMB client network-interface capabilities
Inspect SMB client network-interface capabilities. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
smbshare · Reference documentation ↗ - Inspect configured SMB multichannel constraints
Inspect configured SMB multichannel constraints. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
smbshare · Reference documentation ↗ - Inspect data-deduplication maintenance schedules
Inspect data-deduplication maintenance schedules. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
deduplication · Reference documentation ↗ - Inspect active deduplication jobs
Inspect active deduplication jobs. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
deduplication · Reference documentation ↗ - Inspect deduplication metadata statistics
Inspect deduplication metadata statistics. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
deduplication · Reference documentation ↗ - Inspect DNS recursive-query behaviour
Inspect DNS recursive-query behaviour. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dnsserver · Reference documentation ↗ - Inspect DNS scavenging settings
Inspect DNS scavenging settings. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dnsserver · Reference documentation ↗ - Inspect DNS server cache limits
Inspect DNS server cache limits. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dnsserver · Reference documentation ↗ - Inspect DNS query-resolution policy order
Inspect DNS query-resolution policy order. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dnsserver · Reference documentation ↗ - Inspect DNS response-rate-limiting configuration
Inspect DNS response-rate-limiting configuration. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dnsserver · Reference documentation ↗ - Inspect DHCP allow and deny filter enablement
Inspect DHCP allow and deny filter enablement. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dhcpserver · Reference documentation ↗ - Inspect DHCP IPv4 interface bindings
Inspect DHCP IPv4 interface bindings. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dhcpserver · Reference documentation ↗ - Inspect DHCP server DNS-update settings
Inspect DHCP server DNS-update settings. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dhcpserver · Reference documentation ↗ - Inspect DHCP audit-log configuration
Inspect DHCP audit-log configuration. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dhcpserver · Reference documentation ↗ - Inspect DHCP database backup configuration
Inspect DHCP database backup configuration. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dhcpserver · Reference documentation ↗ - Inspect DHCP server policy ordering
Inspect DHCP server policy ordering. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dhcpserver · Reference documentation ↗ - Inspect DHCP IPv6 scope configuration
Inspect DHCP IPv6 scope configuration. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dhcpserver · Reference documentation ↗ - Inspect DHCP IPv6 message counters
Inspect DHCP IPv6 message counters. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dhcpserver · Reference documentation ↗ - Inspect guest integration service health
Inspect guest integration service health. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
hyper-v · Reference documentation ↗ - Inspect virtual-machine memory allocation policy
Inspect virtual-machine memory allocation policy. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
hyper-v · Reference documentation ↗ - Inspect virtual-machine CPU resource controls
Inspect virtual-machine CPU resource controls. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
hyper-v · Reference documentation ↗ - Inspect virtual-machine secure-boot firmware settings
Inspect virtual-machine secure-boot firmware settings. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
hyper-v · Reference documentation ↗ - Inspect a virtual machine’s VLAN configuration
Inspect a virtual machine’s VLAN configuration. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
hyper-v · Reference documentation ↗ - Inspect virtual-machine network access-control entries
Inspect virtual-machine network access-control entries. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
hyper-v · Reference documentation ↗ - Inspect virtual-machine network isolation
Inspect virtual-machine network isolation. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
hyper-v · Reference documentation ↗ - Inspect a virtual machine’s COM-port mapping
Inspect a virtual machine’s COM-port mapping. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
hyper-v · Reference documentation ↗ - Inspect mounted virtual-machine DVD media
Inspect mounted virtual-machine DVD media. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
hyper-v · Reference documentation ↗ - Inspect Hyper-V host migration configuration
Inspect Hyper-V host migration configuration. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
hyper-v · Reference documentation ↗ - Inspect enabled virtual-switch extensions
Inspect enabled virtual-switch extensions. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
hyper-v · Reference documentation ↗ - Inspect failover-cluster node states
Inspect failover-cluster node states. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
failoverclusters · Reference documentation ↗ - Inspect failover-cluster quorum configuration
Inspect failover-cluster quorum configuration. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
failoverclusters · Reference documentation ↗ - Inspect failover-cluster network roles
Inspect failover-cluster network roles. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
failoverclusters · Reference documentation ↗ - Inspect clustered-resource ownership and state
Inspect clustered-resource ownership and state. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
failoverclusters · Reference documentation ↗ - Inspect cluster shared-volume ownership
Inspect cluster shared-volume ownership. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
failoverclusters · Reference documentation ↗ - Inspect clustered-role ownership
Inspect clustered-role ownership. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
failoverclusters · Reference documentation ↗ - Inspect DFS namespace roots
Inspect DFS namespace roots. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dfsn · Reference documentation ↗ - Inspect DFS namespace root-server availability
Inspect DFS namespace root-server availability. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dfsn · Reference documentation ↗ - Inspect current DFS replication transfers
Inspect current DFS replication transfers. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dfsr · Reference documentation ↗ - Inspect DFS replication connection enablement
Inspect DFS replication connection enablement. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dfsr · Reference documentation ↗ - Inspect replicated-folder membership paths and quotas
Inspect replicated-folder membership paths and quotas. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
dfsr · Reference documentation ↗ - Inspect effective application-control policy
Inspect effective application-control policy. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
applocker · Reference documentation ↗ - Inspect BranchCache operational mode
Inspect BranchCache operational mode. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
branchcache · Reference documentation ↗ - Inspect Windows NFS client defaults
Inspect Windows NFS client defaults. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
nfs · Reference documentation ↗ - Inspect Windows NFS export configuration
Inspect Windows NFS export configuration. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
nfs · Reference documentation ↗ - Inspect Windows NFS server protocol configuration
Inspect Windows NFS server protocol configuration. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
nfs · Reference documentation ↗ - Inspect remote-access server deployment status
Inspect remote-access server deployment status. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
remoteaccess · Reference documentation ↗ - Inspect active remote-access connection statistics
Inspect active remote-access connection statistics. Read the current configuration or state without changing it. Missing properties are not proof that a feature is disabled.
remoteaccess · Reference documentation ↗
Python · 10 additions
- Classify special-use IP addresses in an inventory
One IP address per line. Count loopback, link-local, multicast and unspecified addresses that may explain an unusable destination; no DNS queries.
ipaddress · Reference documentation ↗ - Check whether a downloaded file starts with a known format signature
Recognise PDF, ZIP, PNG or Windows PE prefixes without opening the document. This is a hint, not malware scanning or full format validation.
bytes · Reference documentation ↗ - Validate a base64 export without displaying decoded content
Validate strict standard base64 after removing ASCII whitespace. Useful for malformed attachment exports; decoded content is never executed or printed.
base64 · Reference documentation ↗ - Locate bidirectional text controls in a configuration export
Report line numbers and Unicode control names that can visually reorder text. This is not a malware verdict and does not rewrite the file.
unicodedata · Reference documentation ↗ - Find malformed percent escapes in URL exports
One URL per line. Flag incomplete or non-hex percent escapes before an import; no URLs are printed, fetched or decoded.
re · Reference documentation ↗ - Check whether a required JSON Pointer exists
Use a JSON Pointer such as /settings/proxy. Check its presence and type without revealing its value. Array indexes are supported; no evaluation occurs.
json · Reference documentation ↗ - Check a script shebang for common launch problems
Inspect only the first line for a UTF-8 BOM, missing shebang or carriage return. Never runs the script or attempts to locate/install an interpreter.
bytes · Reference documentation ↗ - Count explicit null markers before a CSV import
Parse CSV and count empty, NULL and N/A cells by column position. Do not treat these markers as interchangeable without checking the target application.
csv · Reference documentation ↗ - Flag ambiguous day/month date strings in an export
One DD/MM/YYYY or MM/DD/YYYY candidate per line. Identify values whose day/month order cannot be inferred; it does not guess a locale or convert records.
datetime · Reference documentation ↗ - Find overlong lines that can break a text importer
Report line numbers and UTF-8 byte lengths exceeding a configured limit. Content is omitted; use the importer documented byte limit rather than guessing.
str · Reference documentation ↗
JavaScript · 10 additions
- Detect embedded NUL bytes in a text export
Report NUL byte count and first byte offset. Embedded NULs may explain text-tool truncation but can be legitimate in binary or UTF-16 data.
Buffer · Reference documentation ↗ - Inventory PEM block types without showing encoded data
Check BEGIN/END marker balance and count certificate or key-labelled blocks in an authorised PEM export. Contents are omitted; this is not key or trust validation.
String · Reference documentation ↗ - Validate a captured Content-Range response value
Read a single bytes Content-Range value. Check start/end/total consistency when troubleshooting resumed downloads; no download or request is made.
RegExp · Reference documentation ↗ - Find contradictory captured cache directives
Read one Cache-Control value. Highlight public/private and repeated max-age contradictions that can confuse caching investigations; no response body is loaded.
String · Reference documentation ↗ - Review captured Set-Cookie attributes without showing values
One Set-Cookie value per line. Report missing Secure/HttpOnly and SameSite=None without Secure. Review whether each cookie actually needs these attributes.
HTTP headers · Reference documentation ↗ - Find certificate and script policy overrides in a local npmrc
Inspect explicit strict-ssl=false and ignore-scripts=false lines. Does not output registry URLs or tokens, resolve inherited config or label installation scripts inherently malicious.
npm config · Reference documentation ↗ - Review an npm package platform allow/block declarations
Inspect package.json os and cpu arrays. Flag internally contradictory entries such as win32 and !win32; does not install packages or decide dependency compatibility.
npm package.json · Reference documentation ↗ - Check source-map index alignment for browser debugging
Inspect a source map version and sources/sourcesContent lengths. Does not print sources, embedded code or paths and does not fetch sourceMappingURL resources.
ECMA-426 · Reference documentation ↗ - Check installable-web-app icon declarations
Inspect icon sizes, purpose and MIME fields from a local web manifest. Reports row numbers only; no icons are downloaded and declarations are not verified against image bytes.
Web manifest · Reference documentation ↗ - Validate captured HTTP status-line framing
Inspect one HTTP/1.0 or HTTP/1.1 status line. Flag unsupported protocol syntax or status outside 100-599 without fetching a URL or revealing the reason phrase.
HTTP · Reference documentation ↗
TypeScript · 10 additions
- Flag DHCP scopes with low remaining lease capacity
JSON rows: total, used, reserved (non-overlapping counts). Flag fewer than 10% addresses remaining. Export the counts from an authorised DHCP console.
Typed JSON inventory · Reference documentation ↗ - Flag old print jobs that have stopped progressing
JSON rows: ageMinutes, bytesPrinted, lastBytesPrinted. Flag jobs older than 30 minutes with unchanged counters; the two counters must be separate observations.
Typed JSON inventory · Reference documentation ↗ - Estimate mailbox quota headroom from exported sizes
JSON rows: usedBytes, quotaBytes. Report percentage and bytes remaining; quotaBytes=0 is treated as unknown, not unlimited. No mailbox connections.
Typed JSON inventory · Reference documentation ↗ - Compare service startup modes with an approved baseline
JSON rows: expectedMode, actualMode; values automatic, delayed, manual or disabled. Report mismatched rows without changing a service.
Typed JSON inventory · Reference documentation ↗ - Find duplicate unicast MAC addresses in an asset export
JSON rows: mac. Normalise colon, hyphen or unseparated 12-hex forms and report conflicting row positions. Randomised/local addresses are not inherently wrong.
Typed JSON inventory · Reference documentation ↗ - Find missing approved patch IDs in an endpoint export
JSON rows: required and installed arrays of patch identifiers. Uses exact comparison with your approved baseline; does not query CVEs or decide patch applicability.
Typed JSON inventory · Reference documentation ↗ - Count Intune compliance policy states from a sanitised export
JSON rows: state with compliant, noncompliant, error, conflict, unknown or notApplicable. Count explicit states without claiming the device is secure or remediating it. These are normalised input labels, not a native Intune export schema; map the report states explicitly.
Typed JSON inventory · Reference documentation ↗ - Calculate application deployment failure rates excluding pending devices
JSON rows: succeeded, failed, pending counts. Show failure percentage among completed outcomes and a separate completion percentage; do not treat pending as success.
Typed JSON inventory · Reference documentation ↗ - Count unexpectedly disabled Microsoft 365 service plans
JSON rows: requiredPlans and disabledPlans arrays of plan IDs from a sanitised licence export. Count intersections; licensing dependencies and entitlement remain separate checks.
Typed JSON inventory · Reference documentation ↗ - Find ambiguous equal-priority VPN routes in a proposed routing export
JSON rows: destination, prefixLength, metric and interfaceAlias. Detect identical destination/prefix/metric on different interfaces. No route is installed and input destinations must already be canonical.
Typed JSON inventory · Reference documentation ↗
Bash / Shell · 12 additions
- Trace directory permissions along a failing file path
Show every component and symlink in one path to locate a missing directory or traversal-permission problem. This does not prove application access.
namei · Reference documentation ↗ - Inspect ACL masks and inherited directory permissions
Compare named-user ACL entries with their effective mask, and inspect defaults inherited by newly created files. No ACL is changed.
getfacl · Reference documentation ↗ - Inspect block-device discard support before a storage escalation
Identify devices advertising discard granularity and maximum discard size without issuing TRIM. Guest values do not prove storage-array reclamation.
lsblk · Reference documentation ↗ - Inspect the soft and hard resource limits of one process
Investigate too-many-files, process-count or memory-limit failures using the target process limits. Values are limits, not current resource consumption.
proc limits · Reference documentation ↗ - Find incomplete Debian package installations
Read package database consistency findings after an interrupted installation. The script does not configure, remove or repair packages.
dpkg · Reference documentation ↗ - Find packages intentionally held back from APT upgrades
List package holds when a workstation stays on an older version. A hold is only one possible cause of a missing update.
apt-mark · Reference documentation ↗ - Check immutable and append-only file attributes
Inspect filesystem flags that can explain why a permitted user still cannot replace a file. Does not clear immutable or append-only flags.
lsattr · Reference documentation ↗ - Inspect namespaces isolating a containerised process
Show the namespaces associated with one process when host and container views differ. No namespace is entered or changed.
lsns · Reference documentation ↗ - Check locale and character-map configuration for garbled text
Show the current locale categories and character map to investigate encoding and formatting differences. Does not generate or change locales.
locale · Reference documentation ↗ - Distinguish available memory from reclaimable cache
Read memory totals and available-memory estimates when a Linux user reports low free RAM. Cached memory is not automatically a leak.
free · Reference documentation ↗ - Inspect CPU architecture and virtualisation exposure
Check architecture, CPU model and available virtualisation information before investigating incompatible software or nested virtualisation.
lscpu · Reference documentation ↗ - Check current-user subordinate ID ranges for rootless containers
Read the current user entries in local subordinate UID and GID files when a rootless container cannot map users. Does not read password or shadow files.
subuid/subgid · Reference documentation ↗
Windows Batch · 12 additions
- Explain which Windows sleep states are unavailable
Ask Windows which sleep states are supported and why others are blocked, without enabling hibernation or changing the power plan.
powercfg · Reference documentation ↗ - Identify the last recorded Windows wake source
Read the last sleep-to-wake transition to investigate unexpected waking. Empty or unknown history is possible and does not prove the device never woke.
powercfg · Reference documentation ↗ - Find application and driver requests preventing sleep
List active power requests that may keep the display or system awake. Does not add overrides or stop applications.
powercfg · Reference documentation ↗ - Inspect Windows Firewall profile and logging configuration
Read firewall state, default policies and log settings for all profiles before troubleshooting a blocked connection. This is not a connectivity test.
netsh advfirewall · Reference documentation ↗ - Inspect registered Winsock providers without resetting networking
List installed socket and namespace providers when a network-aware application behaves differently from others. Does not reset or remove providers.
netsh winsock · Reference documentation ↗ - Check space assigned to Volume Shadow Copy storage
Show shadow-copy storage associations and usage to investigate backup or restore-point space pressure. Does not resize or delete snapshots.
vssadmin · Reference documentation ↗ - Inspect privileges held by the current Windows access token
Compare enabled and disabled privileges in the affected session when an administrative action is denied. No privilege is enabled.
whoami · Reference documentation ↗ - Inspect NTFS quota usage on the system volume
Read quota policy and usage to investigate disk-full errors despite apparent free space. Does not enable quotas or change limits.
fsutil quota · Reference documentation ↗ - List Windows optional-feature states without enabling them
Read enabled, disabled and pending optional features before investigating an application prerequisite. Does not install features or download payloads.
DISM · Reference documentation ↗ - List Plug and Play devices reporting a problem code
Find devices reporting configuration-manager problems before deciding whether a driver needs investigation. Does not disable devices or reinstall drivers.
PnPUtil · Reference documentation ↗ - Inspect configured Windows audit subcategories
Read system audit-policy settings to explain why a security event may be absent. Does not enable auditing, access event contents or change policy.
auditpol · Reference documentation ↗ - Check whether Windows operating-system binaries are compressed
Query CompactOS state when investigating system-drive capacity. Does not compress or decompress operating-system binaries.
compact · Reference documentation ↗