Hero Image
One PowerShell Report for AD Replication Troubleshooting

Purpose Every AD replication issue turns into the same routine — repadmin /showrepl, dfsrdiag replicationstate, dfsrmig /GetMigrationState, GPO version compares, event log spelunking, share checks. Different console for each, output that doesn’t line up, and half of them run only on a DC. Test-VBReplicationHealth.ps1 replaces that dance with a single script that runs every one of those checks and returns one colour-coded report — plus a structured object you can pipe or export.

Saturday, July 11, 2026 | 4 minutes Read
Hero Image
Fix Windows Time Sync with w32tm

Purpose Windows system clock drifting or refusing to sync. This script detects whether the machine is domain-joined and takes the correct NTP path automatically — no manual branching needed. Approach If domain-joined → restore AD hierarchy sync (fighting domain policy with internet NTP is a support ticket waiting to happen) If workgroup/standalone → configure public NTP peers and force resync The Script Run as Administrator: $isDomainJoined = (Get-CimInstance Win32_ComputerSystem).PartOfDomain if ($isDomainJoined) { Write-Host "Domain-joined — syncing from AD hierarchy" -ForegroundColor Cyan w32tm /config /syncfromflags:domhier /update Restart-Service w32time w32tm /resync /force } else { Write-Host "Workgroup machine — configuring public NTP" -ForegroundColor Cyan w32tm /config /manualpeerlist:"time.google.com time.cloudflare.com pool.ntp.org" /syncfromflags:manual /reliable:no /update Restart-Service w32time w32tm /resync /force } If Resync Fails Re-register the Windows Time Service, then re-run the script above:

Friday, May 22, 2026 | 2 minutes Read
Hero Image
One-Line Server Inventory & AD Audit Report

Purpose Every Windows environment I inherit has the same problem — nobody knows what’s actually on the servers. Who’s got a password older than a year? Which computers haven’t checked in for six months? Is BitLocker actually on? This one-liner bootstraps VB.ServerInventory and produces a full server + AD audit report in a single run. No agent, no console, no license. What This Covers What the bootstrap script actually does (line by line) The report it produces and what’s in it Which security baselines the audit checks map to How to run it and verify the output Before You Start Windows Server 2016+ or Windows 10/11 with PowerShell 5.1 or later Local admin on the target machine Domain admin (or delegated read) if you want the AD, GPO, and DHCP sections populated Internet access to reach PSGallery and the gist ExecutionPolicy needs to allow the run — the script sets Unrestricted for CurrentUser scope The Bootstrap Set-ExecutionPolicy Unrestricted -Scope CurrentUser -Force # Enforce TLS 1.2 — PSGallery rejects older protocols [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 # Register PSGallery if it's missing (fresh servers often have no repos) if (-not (Get-PSRepository -Name "PSGallery" -ErrorAction SilentlyContinue)) { Register-PSRepository -Default -ErrorAction Stop } # Trust PSGallery so Install-Module doesn't prompt Set-PSRepository -Name "PSGallery" -InstallationPolicy Trusted # Widen the console buffer so nothing scrolls off screen $host.UI.RawUI.BufferSize = New-Object System.Management.Automation.Host.Size(500, 9000) Get-PSRepository # Pull and execute the inventory script from the gist [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 iex (Invoke-WebRequest "https://gist.githubusercontent.com/Vibhu2/9a4ecf03d30c35d27073c71a2d5f0d4d/raw/b0541f3663701a2b16d0e1a8fd4a4030f9bf70ee/gistfile1.txt" -UseBasicParsing).Content The first block is prep — TLS, repo trust, buffer size. The last line is the actual work: it pulls the Get-ServerInventory script from a gist and runs it in the current session.

Saturday, October 4, 2025 | 5 minutes Read