Ich habe hier als Hilfe ein kleines Skript geschrieben, es ist sehr rudimentär und den Umständen hier angepaßt. Den nachfolgenden Inhalt sollte man in eine Datei mit dem Nachsatz ps1 füllen, z.B. ComputerInfo.ps1.
Standardmäßig istdie Ausführung von Skripts an den Geräten untersagt, aus gutem Grund, damit keine böswilligen Skripts ausgeführt werden. Um die Ausführung vbon Skripts zu erlauben gibt man im Kommandomodus (rechte Maustaste auf das Windows-Symbol und Windows-Terminal (Administrator) anwählen) die folgende Zeile ein:
Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy RemoteSigned -Force
Keine Angst, das tut man nur einmal.
Das Skript liefert Informationen über Dienste, Prozesse, installierte Programme, Startup Programme, Zeitplandienst, Erreignisanzeige System und Applikation.
Das Ergebnis landet als Datei gesamt.txt im Temp-Ordner eures Profils. Es wird Nichts gesendet. Ihr entscheidet das selbst. @digo wird euch dabei zur Seite stehen.
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
#----------------------------------------------------------------------------------------------------------------------------------------------------------
# Computer Information (light) 3.1
# Ziggy 31.05.22
#----------------------------------------------------------------------------------------------------------------------------------------------------------
$reportFile = "$env:temp\gesamt.txt"
Write-Output "Computer Information (light) 3.1" | out-file -filepath $reportFile
Write-Output "Ziggy 31.05.22`r`n" | out-file -filepath $reportFile -Append
write-output "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++`r`n" | Out-File -FilePath $reportFile -Append
Write-Output -InputObject "Services" | out-file -filepath $reportFile -Append
Get-CimInstance -Query 'Select * from Win32_Service where StartMode = "Auto" and (State = "Running")' | Select-Object -Property Name, Caption, Description | Sort-Object -Property Name | Out-File -FilePath $reportFile -Append
write-output "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++`r`n" | Out-File -FilePath $reportFile -Append
write-output "Processes" | Out-File -FilePath $reportFile -Append
Get-WmiObject Win32_Process | Where-Object {$_.WorkingSetSize -gt 0} | Sort-Object WorkingSetSize -Descending | Select-Object Name,ProcessId,@{Label="Memory Usage (MB)"; Expression={"{0:N2}" -f ($_.WorkingSetSize / 1MB)}} | Out-File -FilePath $reportFile -Append
write-output "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++`r`n" | Out-File -FilePath $reportFile -Append
write-output "Installed Programs" | Out-File -FilePath $reportFile -Append
$INSTALLED = Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object DisplayName, DisplayVersion, Publisher, InstallDate
$INSTALLED += Get-ItemProperty HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object DisplayName, DisplayVersion, Publisher, InstallDate
$INSTALLED2 = $INSTALLED | ?{ $_.DisplayName -ne $null } | sort-object -Property DisplayName -Unique
Write-Output $INSTALLED2 | Out-File -FilePath $reportFile -Append
write-output "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++`r`n" | Out-File -FilePath $reportFile -Append
write-output "StartupCommands" | Out-File -FilePath $reportFile -Append
Get-WmiObject Win32_startupCommand | Sort-Object Caption | Select-Object Caption,User,Command | Out-File -FilePath $reportFile -Append
write-output "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++`r`n" | Out-File -FilePath $reportFile -Append
write-output "SchedulingCommands" | Out-File -FilePath $reportFile -Append
$sched = New-Object -Com "Schedule.Service"
$sched.Connect()
$out = @()
$sched.GetFolder("\").GetTasks(0) | % {
$xml = [xml]$_.xml
$out += New-Object psobject -Property @{
'Name' = $_.name
#'Pfad' = $_.path
#'Status' = $_.state
#'Enabled' = $_.enabled
'LastRunTime' = $_.lastruntime
#'LastTaskResult' = $_.lasttaskresult
# 'NumberOfMissedRuns' = $_.numberofmissedruns
'NextRunTime' = $_.nextruntime
'Author' = ([xml]$_.xml).Task.RegistrationInfo.Author
# 'UserId' = ([xml]$_.xml).Task.Principals.Principal.UserID
'Description' = ([xml]$_.xml).Task.RegistrationInfo.Description;width=60
}
}
# $out |sort-object Name| Format-List -Property Name,Pfad,Status,Enabled,NextRuNTime,LastRunTime,LastRunResult,NumberOfMissedRuns,userID
Write-Output $out | Out-File -FilePath $reportFile -Append
write-output "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++`r`n" | Out-File -FilePath $reportFile -Append
write-output "List eventlog error system" | Out-File -FilePath $reportFile -Append
$esys = Get-EventLog -LogName System -EntryType Error -After ( (Get-Date).AddDays(-1) ) |
Select-Object EventID,
TimeGenerated, Index, @{Name="Typ";Expression={$_.EntryType}},
Message, Source, InstanceId
Write-Output $esys | Out-File -FilePath $reportFile -Append
write-output "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++`r`n" | Out-File -FilePath $reportFile -Append
write-output "List eventlog error application" | Out-File -FilePath $reportFile -Append
$eapp = Get-EventLog -LogName Application -EntryType Error -After ( (Get-Date).AddDays(-1) ) |
Select-Object EventID,
TimeGenerated, Index, @{Name="Typ";Expression={$_.EntryType}},
Message, Source, InstanceId
Write-Output $eapp | Out-File -FilePath $reportFile -Append
write-output "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++`r`n" | Out-File -FilePath $reportFile -Append
Write-Output "*** Finish Report ***" | Out-File -FilePath $reportFile -Append
notepad $reportFile
Start-Process explorer.exe -ArgumentList "/select, ""$reportFile"""
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
Es ist nur die Light-Version aber sie reicht für eine erste Hilfe aus. Wenn noch Fragen sind, dann immer los.
...
