I wrote the following function to rerun an advertisement on a remote client computer using either the AdvertisementID or the PackageID. Like all sample code found online, please run through a test environment first, and use at your own risk!
I created the follow SQL query to create a batch file that uninstalls all known versions of a piece of software. Feel free to use and tweak as you see fit. You should build the query first to make sure you’re only identifying the GUIDs for software you really want to uninstall. You’ll need to setup SSMS to output as text instead of grid view, then copy and paste into a new batch file and trim the top and bottom a bit to remove the junk that comes with the output.
The following SQL should help identify the state of impacted systems. Please review thoroughly before relying on this information, while I believe the results should be accurate, you should do your own due diligence. Please let me know if you find any errors or have any suggestions to return better data.
More information on INTEL-SA-00075 here.
The following query will allow you to search the view v_R_user in the Microsoft Configuration Manager database so that you can identify a manager and then find everyone who works for that manager all the way down the tree. I’ve found this useful in the past for joining with other information in the database to identify all the systems used by a specific group within an organization. This requires that you collect the manager name during user discovery. You can remove any fields that you don’t discover. It also requires that you have managers identified in Active Directory for discovery.
I wrote the following script to quickly output how much disk space my SCCM Distribution Points consumed. If you’re not running a CAS, you’ll want to change line 21 to point to your primary. This requires that you have the Configuration Manager console installed on the machine.
It’s not pretty but it did the trick. I’m certainly open to suggestions in the comments.