Good First Issues in Powershell

Type of issue Code doesn't work Feedback -contains has a box with this example code: $a = 'abc', 'def' 'abc', 'def', 'ghi' -contains $a # Output: False # The following statements are equivalent $a, 'ghi' -contains $a # Output: True '$a', 'ghi' -contains $a # Output: True 'abc def', 'ghi' -contains $a # Output: True But the second last example is wrong, $a is not expanded in single quotes, should probably be: "$a", 'ghi' -contains $a # Output: True -in has an identical example with the same issue. Page URL https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_comparison_operators?view=powershell-7.6#containment-operators Content source URL https://github.com/MicrosoftDocs/PowerShell-Docs/blob/main/reference/7.6/Microsoft.PowerShell.Core/About/about_Comparison_Operators.md Author Sean Wheeler (@sdwheeler) Platform Id 80f0a95a-9d5c-b1f1-59ea-8a2e59025a82 Document Id 742e7d8c-b6bc-6939-3e9d-b25bcc14dfed

Type of issue Code doesn't work Feedback Context: creating a modified view using format.ps1xml file. Environment: Windows 11, PowerShell 7.6.6 Page URL https://learn.microsoft.com/en-us/powershell/scripting/developer/format/tablecolumnheader-element-format?view=powershell-7.6 Content source URL https://github.com/MicrosoftDocs/PowerShell-Docs/blob/main/reference/docs-conceptual/developer/format/tablecolumnheader-element-format.md Author Sean Wheeler (@sdwheeler) Platform Id e068c806-0647-f015-72fc-74170b45d2b4 Document Id bbacbb9e-0b46-8365-4d23-c9848614d987

Prerequisites This issue has an informative and human-readable title. Assignee should meet with issue author before starting work. 💡 Summary We only have instructions for users to install ScubaGear from PS Gallery or download the official release bundle from GitHub. Often times we have to direct users to download and run ScubaGear code from the main branch or specific fix branches. Currently there is no central documentation page to direct users to so we end up re-creating the documentation on the fly each time. Motivation and context It is more efficient to have central documentation and send users a link to it than recreating the wheel every time. Implementation notes Create a new /docs/installation page named activedevbranch.md The title of the page should be "Download and Execute Latest ScubaGear Development Branch". Under the page change the instructions to the steps I have below. Feel free to enhance this. Go to https://github.com/cisagov/ScubaGear Download the zip file of

Prerequisites This issue has an informative and human-readable title. Assignee should meet with issue author before starting work. 💡 Summary Currently the tenant domain name is only displayed on the ScubaGear report overview page. It would be helpful to have the domain name included on individual reports such as for Entra, Sharepoint, etc. Here is the overview page. Here is the product report page (notice there is no tenant domain name). Motivation and context Many organizations, including our dev team, work with multiple tenants and having the domain name information handy when viewing a product report helps to better track which specific tenant was assessed. Implementation notes Implement the domain name as described above. Acceptance criteria Developer has implemented the actions above and conducted proper testing

Prerequisites I have written a descriptive issue title. I have searched all issues/PRs to ensure it has not already been reported or fixed. I have verified that I am using the latest version of Scoop and corresponding bucket. Package Name apache Expected/Current Behaviour Expected: scoop update * should update apache from 2.4.66 to 2.4.68 successfully. Actual: The download fails with The remote server returned an error: (401) Unauthorized., and Scoop prints WARN Token might be misconfigured.. This warning is misleading — it's only shown because Scoop's Start-Download treats any 401 response as a token issue (see download.ps1#L80-L82), but the Authorization: Bearer header is only ever added for URLs matching api.github.com/repos (download.ps1#L97-L100). The apache manifest downloads from fossies.org, which doesn't match that pattern, so no GitHub token is involved at all. I confirmed the 401 is coming directly from fossies.org: fetching the exact download URL (https://fossies.org

Is your feature request related to a problem? Please describe. The -Instance parameter was introduced when Monkey365 only supported a limited number of Azure and Microsoft 365 collectors. Since then, the project has evolved into a collector-based PowerShell framework with support for multiple platforms, each exposing its own set of collectors and declarative security rules. Each platform (Azure, EntraID or Microsoft365) contains collectors for different services and workloads, for example: Exchange Online SharePoint Online Microsoft Purview Virtual Machines Key Vault Storage Accounts Network Security Groups RBAC PIM App Registrations Enterprise Applications Conditional Access The name -Instance no longer accurately describes what the parameter represents. It is also easy to confuse with the existing -Environment parameter, which is used to select the target Microsoft cloud (AzurePublic, AzureChina, AzureUSGovernment, etc.). Describe the solution you'd like Rename -Instance to -Platfo

Baseline Info (please complete the following information): OS: [e.g. Windows] Version: [e.g. 3.6] - version 3.6 policies tested Describe the bug These existing .json files in this repo do not reflect recent changes in graph. For example, STIG audit baseline features. To be more specific, the stored .json policies in this repo do not have auditRuleInformation. When assigned, this line is appended for each setting. This causes M365 policy management tools to report drift/mismatch (e.g. Nerdio Manager and Inforcer). solution: The policies need to be updated to reflect the latest intune/graph changes. To Reproduce Steps to reproduce the behaviour: Sync this repo. Assign one of the itnune policies. compare the differences between the GH source .json policy and the .json that lands in the tenant. you will see auditRuleInformation added to the destination tenant polciy and these are absent in these policies here. Expected behaviour Policies should match aside from a few little expected meta

Is your feature request related to a problem? Please describe. Recently there were negative news about this feature with LG monitors installing things without user consent resulting in ads on the system. This would also prevent popups for things "Install Logi Options" when adding a Logitech device to a computer. This one can be quite irritating (to at least our users), as they do not have the rights to install this, but still get the popup. I guess there will be more cases like this. Describe the solution you'd like Adding that setting, set to "enabled" into the "Win - OIB - SC - Windows User Experience - D - Feature Configuration". Seemed to be the most fitting one for this. Describe alternatives you've considered I have set it by hand for now, but I think and inclusion in the baseline is warranted.

All works well when Steam has the storage directory paths saved, but after disconnecting the drive and restarting, Steam doesn't automatically create the storage path when mounting the drive. As a result the game isn't ready to play. I have to manually add the path to the external drive as a Steam storage. Is there a solution to this? Thanks.

Sometimes Steam doesn't refresh its Storage awareness so you land on the game's page with "Install" button instead of play. I still can't reproduce it reliably so the workaround for now is to just re-add the drive again in the settings. Then the game will become playable.

The green "PLAY" button stays on even after ejecting the drives. No Idea how Valve did it on the steam deck. I got no clue. Anyone with any ideas, feel free to improve

Prerequisites This issue has an informative and human-readable title. Assignee should meet with issue author before starting work. 💡 Summary Review all implementation steps to ensure they match the current UI and that we're giving incorrect instructions Motivation and context The implementation steps of the Teams baseline should be checked against the UI to ensure that the implementation directions are accurate. Implementation notes See some of the comments on #1974 for examples of where there are some discrepancies in the implementation steps. Acceptance criteria Verify that the implementations steps match the current UI Update any implementation steps which with current UI

Even if our tests suite is still compatible and working with v6 since #658, there are many changes in v6 that might worth some investigations: https://github.com/pester/Pester/releases/tag/6.0.0 https://github.com/pester/Pester/releases/tag/6.0.0#new-should--assertions https://github.com/pester/Pester/releases/tag/6.0.0#richer-failure-messages-and-output If there is appetite and for contributors that know what they're doing and/or have access to a Windows machine to run tests locally without relying too much on CI, there is also this one that could be interesting: 3) https://github.com/pester/Pester/releases/tag/6.0.0#parallel-test-execution-experimental

Hello, 向日葵的 Hash Code 似乎有问题  scoop install sunlogin WARN Purging previous failed installation of sunlogin. ERROR 'sunlogin' isn't installed correctly. Removing older version (15.8.3.19819). 'sunlogin' was uninstalled. WARN Scoop uses 'aria2c' for multi-connection downloads. WARN Should it cause issues, run 'scoop config aria2-enabled false' to disable it. WARN To disable this warning, run 'scoop config aria2-warning-enabled false'. Installing 'sunlogin' (15.8.3.19819) [64bit] from 'scoopcn' bucket Starting download with aria2 ... Download: Download Results: Download: gid |stat|avg speed |path/URI Download: ======+====+===========+======================================================= Download: e9be61|OK | 84KiB/s|C:/Users/bgzo/scoop/cache/sunlogin#15.8.3.19819#da0f736.exe Download: Status Legend: Download: (OK):download completed. Checking hash of SunloginClient_15.8.3.19819_x64.exe ... ERROR Hash check failed! App: scoopcn/sunlogin URL:

See #69 (comment) #106 (comment) A list of all the possible error/warning messages with ID's should be added to the Wiki and/or docs and all the messages updated to include error numbers. This issue is here to track the progress of implementing this.

Issue Currently WebApplicationsTargetPath depends on a locally installed version of visual studio - either buildtools or any full version such as community or professional with the appropriate workload installed. Using tools such as dotnet build or dotnet test are more difficult as they require either resolving the location of VS using VSWhere or passing in an empty targets file. Solutions Set the default action that if there is no resolved targets file available that a warning is emitted but no failure occurs. Add a mechanism to resolve the file (assuming VS is installed) without external scripts/actions or setting env variables etc. Include the required tasks and targets directly in the SDK. Use a packaged version of the required tasks and targets. Either of 3 or 4 is preferred as this makes the solution robust and maintainable. It also obviates the need for additional installations. The best solution would be for Microsoft to release an official package, probably versioned to matc

!HELP WANTED! If you have access to a copilot+ pc or some system with a NPU please consider contributing to this script. in the newest builds ms is adding native uninstall options for ai components: https://www.elevenforum.com/t/uninstall-ai-components-on-windows-11-pc.47260/ all components: https://learn.microsoft.com/en-us/windows/release-health/ai-components-release-information Problem I do not have access to a machine with these features severely limiting my ability to add this to the script How to Help Before removing these using the native option find as much info on these componets as possible... for example are they appx packages? run get-appxpackage -allusers and search for these. if not they could be a more traditional package dism /online /get-packages etc... Goal Ensure all ai components are removed on copilot+ pcs along with any other features

Prerequisites I have used the predefined issue title. (e.g. "xxx@xxx: hash check failed") I have verified that I am using the latest version of Scoop and corresponding bucket. Package Name and Version [email protected]

Marked Yes but test for PDQ Connect in the scanner README. Goal: Create or update a Connect-Windows Defender Threats.ps1 script if the scanner can work in PDQ Connect. If the scanner is not a fit for Connect, test it, document the limitation, and close the issue with the result. Reference: Scanner README: Windows Defender Threats Main compatibility list: README.md

Marked maybe for PDQ Connect in the scanner README. Goal: Create or update a Connect-Mapped Printers.ps1 script if the scanner can work in PDQ Connect. If the scanner is not a fit for Connect, test it, document the limitation, and close the issue with the result. Reference: Scanner README: Mapped Printers Main compatibility list: README.md

Marked I think it does, gotta test for PDQ Connect in the scanner README. Goal: Create or update a Connect-Mapped Drives.ps1 script if the scanner can work in PDQ Connect. If the scanner is not a fit for Connect, test it, document the limitation, and close the issue with the result. Reference: Scanner README: Mapped Drives Main compatibility list: README.md

Marked probably on your IIS servers for PDQ Connect in the scanner README. Goal: Create or update a Connect-IIS App Pools.ps1 script if the scanner can work in PDQ Connect. If the scanner is not a fit for Connect, test it, document the limitation, and close the issue with the result. Reference: Scanner README: IIS App Pools Main compatibility list: README.md

Marked Yes, check more first for PDQ Connect in the scanner README. Goal: Create or update a Connect-Hosts File.ps1 script if the scanner can work in PDQ Connect. If the scanner is not a fit for Connect, test it, document the limitation, and close the issue with the result. Reference: Scanner README: Hosts File Main compatibility list: README.md

Intel Wi-Fi Generation Wi-Fi 7 (BE200, BE201, BE202) Exact Wi-Fi Model Mine is media tek Exact Bluetooth Model No response Quick Share Doesn't work Camera Share Doesn't work Storage Share Doesn't work Multi Control Doesn't detect devices Second Screen Works perfectly Additional Details No response System Information No response

Intel Wi-Fi Generation Other Intel Model Exact Wi-Fi Model Realtek 8852CE WiFi 6E PCI-E NIC Exact Bluetooth Model Realtek Bluetooth Adapter / Bluetooth Device (RFCOMM Protocol TDI) Quick Share Doesn't work Camera Share Doesn't work Storage Share Doesn't work Multi Control Doesn't detect devices Second Screen Doesn't work Additional Details System Information No response

There are 10 context-blocks named Should return the correct amount of processes when more than 1 are running, the third one is the one failing with Unknown argument: -submit -any: 2026-04-15T12:47:24.0949327Z Context Should return the correct amount of processes when more than 1 are running 2026-04-15T12:47:24.2825748Z WARNING: There is no operation running currently. Stop will return without any action. 2026-04-15T12:47:24.4565670Z [+] Should compile without throwing 340ms 2026-04-15T12:47:24.5730515Z Usage: 2026-04-15T12:47:24.5795309Z 2026-04-15T12:47:24.5884577Z CertReq -? 2026-04-15T12:47:24.5982343Z 2026-04-15T12:47:24.5983264Z CertReq [-v] -? 2026-04-15T12:47:24.5983705Z 2026-04-15T12:47:24.5984282Z CertReq [-Command] -? 2026-04-15T12:47:24.5984657Z 2026-04-15T12:47:24.5985427Z 2026-04-15T12:47:24.5986090Z CertReq [-Submit] [Options] [RequestFileIn [CertFileOut [CertChainFileOut [FullResponseFileOut]]]] 2026-04-15T12:47:24.5986554Z 2026-04-15T12:47:24.598

This integration test fails: Context Edit the service start name and start password with Credential WARNING: There is no operation running currently. Stop will return without any action. WARNING: There is no operation running currently. Stop will return without any action. [+] Should compile and apply the MOF without throwing 1.18s [+] Should not have removed service with specified name 9ms [-] Should have edited the service to have the specified startup account name 32ms Expected strings to be the same, but they were different. Expected length: 16 Actual length: 17 Strings differ at index 2. Expected: '.\PSDSCTestAdmin' But was: '.\xPSDSCTestAdmin' 317: $serviceCimInstance.StartName | Should -Be ".\$expectedStartName" at <ScriptBlock>, D:\a\1\s\tests\Integration\DSC_xServiceResource.EndToEnd.Tests.ps1: line 317 [+] Should return true from Test-TargetResource with the same

Problem description I am installing SQL Server 2025 with AS feature. But currently encountering an error when connecting to AS There we're also a line on the logs that says it detected the AS feature and then fail the deployment when connecting. I am already using lates versions of SqlServerDsc and SqlServer modules. Also tried leveraging the property: FeatureFlag: "AnalysisServicesConnection" This particular error didn't occur on SQL Server 2022 and lower. Verbose logs Failed to invoke DSC Set method: PowerShell DSC resource DSC_SqlSetup failed to execute Set-TargetResource functionality with error message: System.InvalidOperationException: Failed to connect to Analysis Services instance 'mrfmrp-dsql00'. (SQLCOMMON0021) ---> System.Management.Automation.PSArgumentException: Cannot find type [Microsoft.AnalysisServices.Server]: verify that the assembly containing this type is loaded.\r\n at System.Management.Automation.MshCommandRuntime.ThrowTerminatingError(ErrorRecord errorRecord)

Bucket 软件源很多都失效了

Description Server 2025, when the Routing role is added, installs the RRAS role on the guest OS. The routing role currently defined, is compatible with Server 2022 and earlier that use the PPTP and L2TP protocols natively by default. In Server 2025, these protocols are disabled by default and have been replaced by SSTP and IKEv2 instead. This request is to build some logic into the routing role deployment that determines the guest OS version and adds the support for the appropriate protocols based on that version. Something like: if ((Get-CimInstance -ClassName CIM_OperatingSystem).Caption -Like "Server 2025") { Install-WindowsFeature -Name RemoteAccess, DirectAccess-VPN, Routing -IncludeManagementTools -Verbose $network = Get-LabVirtualNetwork -ErrorAction SilentlyContinue $Internet = $network | Where-Object {$_.Name -like "External*"} $Internal = $network | Where-Object {$_.Name -like "$labName*"} Install-RemoteAccess -VpnType Vpn -DeployNat -InternetInterface $Internet -InternalIn