This script permanently deletes the folder and its contents. Ensure the path provided is correct and safe to delete.
> Ideal for use in cleanup tasks, temp directory deletion, or post-deployment teardown processes. # Start-Cleanup Function This PowerShell function automates disk cleanup tasks to help reclaim space on the `C:` drive, targeting common sources of junk like Windows temporary files, the SoftwareDistribution folder, IIS logs, user temp folders, and more. A detailed log is created in `$env:TEMP`, and cleanup only targets files older than a specified age (default is 7 days). #### ⚙️ Features - Deletes: - Windows temp files - `C:\Windows\SoftwareDistribution` - User profile temp folders - IIS logs (if installed) - Recycle Bin contents - Automatically logs deletions to a timestamped file in `$env:TEMP` - Supports `-WhatIf` for safe testing - Configurable: - `$DaysToDelete` - `$LogFile` - `$VerbosePreference` - `$ErrorActionPreference` ##### 📜 Script ```powershell Function Start-Cleanup { <# .SYNOPSIS Automate cleaning up a C:\ drive with low disk space .DESCRIPTION Cleans the C: drive's Window Temperary files, Windows SoftwareDistribution folder, the local users Temperary folder, IIS logs(if applicable) and empties the recycling bin. All deleted files will go into a log transcript in $env:TEMP. By default this script leaves files that are newer than 7 days old however this variable can be edited. .EXAMPLE PS C:\> .\Start-Cleanup.ps1 Save the file to your hard drive with a .PS1 extention and run the file from an elavated PowerShell prompt. .NOTES This script will typically clean up anywhere from 1GB up to 15GB of space from a C: drive. .FUNCTIONALITY PowerShell v3+ #> ## Allows the use of -WhatIf [CmdletBinding(SupportsShouldProcess=$True)] param( ## Delete data older then $daystodelete [Parameter(Mandatory=$false,ValueFromPipelineByPropertyName=$true,Position=0)] $DaysToDelete = 7, ## LogFile path for the transcript to be written to [Parameter(Mandatory=$false,ValueFromPipelineByPropertyName=$true,Position=1)] $LogFile = ("$env:TEMP\" + (get-date -format "MM-d-yy-HH-mm") + '.log'), ## All verbose outputs will get logged in the transcript($logFile) [Parameter(Mandatory=$false,ValueFromPipelineByPropertyName=$true,Position=2)] $VerbosePreference = "Continue", ## All errors should be withheld from the console [Parameter(Mandatory=$false,ValueFromPipelineByPropertyName=$true,Position=3)] $ErrorActionPreference = "SilentlyContinue" ) ## Begin the timer $Starters = (Get-Date) ## Check $VerbosePreference variable, and turns -Verbose on Function global:Write-Verbose ( [string]$Message ) { if ( $VerbosePreference -ne 'SilentlyContinue' ) { Write-Host "$Message" -ForegroundColor 'Green' } } ## Tests if the log file already exists and renames the old file if it does exist if(Test-Path $LogFile){ ## Renames the log to be .old Rename-Item $LogFile $LogFile.old -Verbose -Force } else { ## Starts a transcript in C:\temp so you can see which files were deleted Write-Host (Start-Transcript -Path $LogFile) -ForegroundColor Green } ## Writes a verbose output to the screen for user information Write-Host "Retriving current disk percent free for comparison once the script has completed. " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black ## Gathers the amount of disk space used before running the script $Before = Get-WmiObject Win32_LogicalDisk | Where-Object { $_.DriveType -eq "3" } | Select-Object SystemName, @{ Name = "Drive" ; Expression = { ( $_.DeviceID ) } }, @{ Name = "Size (GB)" ; Expression = {"{0:N1}" -f ( $_.Size / 1gb)}}, @{ Name = "FreeSpace (GB)" ; Expression = {"{0:N1}" -f ( $_.Freespace / 1gb ) } }, @{ Name = "PercentFree" ; Expression = {"{0:P1}" -f ( $_.FreeSpace / $_.Size ) } } | Format-Table -AutoSize | Out-String ## Stops the windows update service so that c:\windows\softwaredistribution can be cleaned up Get-Service -Name wuauserv | Stop-Service -Force -ErrorAction SilentlyContinue -WarningAction SilentlyContinue -Verbose # Sets the SCCM cache size to 1 GB if it exists. if ((Get-WmiObject -namespace root\ccm\SoftMgmtAgent -class CacheConfig) -ne "$null"){ # if data is returned and sccm cache is configured it will shrink the size to 1024MB. $cache = Get-WmiObject -namespace root\ccm\SoftMgmtAgent -class CacheConfig $Cache.size = 1024 | Out-Null $Cache.Put() | Out-Null Restart-Service ccmexec -ErrorAction SilentlyContinue -WarningAction SilentlyContinue } ## Deletes the contents of windows software distribution. Get-ChildItem "C:\Windows\SoftwareDistribution\*" -Recurse -Force -ErrorAction SilentlyContinue | Remove-Item -recurse -ErrorAction SilentlyContinue -Verbose Write-Host "The Contents of Windows SoftwareDistribution have been removed successfully! " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black ## Deletes the contents of the Windows Temp folder. Get-ChildItem "C:\Windows\Temp\*" -Recurse -Force -Verbose -ErrorAction SilentlyContinue | Where-Object { ($_.CreationTime -lt $(Get-Date).AddDays( - $DaysToDelete)) } | Remove-Item -force -recurse -ErrorAction SilentlyContinue -Verbose Write-host "The Contents of Windows Temp have been removed successfully! " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black ## Deletes all files and folders in user's Temp folder older then $DaysToDelete Get-ChildItem "C:\users\*\AppData\Local\Temp\*" -Recurse -Force -ErrorAction SilentlyContinue | Where-Object { ($_.CreationTime -lt $(Get-Date).AddDays( - $DaysToDelete))} | Remove-Item -force -recurse -ErrorAction SilentlyContinue -Verbose Write-Host "The contents of `$env:TEMP have been removed successfully! " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black ## Removes all files and folders in user's Temporary Internet Files older then $DaysToDelete Get-ChildItem "C:\users\*\AppData\Local\Microsoft\Windows\Temporary Internet Files\*" ` -Recurse -Force -Verbose -ErrorAction SilentlyContinue | Where-Object {($_.CreationTime -lt $(Get-Date).AddDays( - $DaysToDelete))} | Remove-Item -Force -Recurse -ErrorAction SilentlyContinue -Verbose Write-Host "All Temporary Internet Files have been removed successfully! " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black ## Removes *.log from C:\windows\CBS if(Test-Path C:\Windows\logs\CBS\){ Get-ChildItem "C:\Windows\logs\CBS\*.log" -Recurse -Force -ErrorAction SilentlyContinue | remove-item -force -recurse -ErrorAction SilentlyContinue -Verbose Write-Host "All CBS logs have been removed successfully! " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black } else { Write-Host "C:\inetpub\logs\LogFiles\ does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Cleans IIS Logs older then $DaysToDelete if (Test-Path C:\inetpub\logs\LogFiles\) { Get-ChildItem "C:\inetpub\logs\LogFiles\*" -Recurse -Force -ErrorAction SilentlyContinue | Where-Object { ($_.CreationTime -lt $(Get-Date).AddDays(-60)) } | Remove-Item -Force -Verbose -Recurse -ErrorAction SilentlyContinue Write-Host "All IIS Logfiles over $DaysToDelete days old have been removed Successfully! " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black } else { Write-Host "C:\Windows\logs\CBS\ does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Removes C:\Config.Msi if (test-path C:\Config.Msi){ remove-item -Path C:\Config.Msi -force -recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\Config.Msi does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Removes c:\Intel if (test-path c:\Intel){ remove-item -Path c:\Intel -force -recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "c:\Intel does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Removes c:\PerfLogs if (test-path c:\PerfLogs){ remove-item -Path c:\PerfLogs -force -recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "c:\PerfLogs does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Removes $env:windir\memory.dmp if (test-path $env:windir\memory.dmp){ remove-item $env:windir\memory.dmp -force -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\Windows\memory.dmp does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Removes rouge folders Write-host "Deleting Rouge folders " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black ## Removes Windows Error Reporting files if (test-path C:\ProgramData\Microsoft\Windows\WER){ Get-ChildItem -Path C:\ProgramData\Microsoft\Windows\WER -Recurse | Remove-Item -force -recurse -Verbose -ErrorAction SilentlyContinue Write-host "Deleting Windows Error Reporting files " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black } else { Write-Host "C:\ProgramData\Microsoft\Windows\WER does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Removes System and User Temp Files - lots of access denied will occur. ## Cleans up c:\windows\temp if (Test-Path $env:windir\Temp\) { Remove-Item -Path "$env:windir\Temp\*" -Force -Recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\Windows\Temp does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Cleans up minidump if (Test-Path $env:windir\minidump\) { Remove-Item -Path "$env:windir\minidump\*" -Force -Recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "$env:windir\minidump\ does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Cleans up prefetch if (Test-Path $env:windir\Prefetch\) { Remove-Item -Path "$env:windir\Prefetch\*" -Force -Recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "$env:windir\Prefetch\ does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Cleans up each users temp folder if (Test-Path "C:\Users\*\AppData\Local\Temp\") { Remove-Item -Path "C:\Users\*\AppData\Local\Temp\*" -Force -Recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\Users\*\AppData\Local\Temp\ does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Cleans up all users windows error reporting if (Test-Path "C:\Users\*\AppData\Local\Microsoft\Windows\WER\") { Remove-Item -Path "C:\Users\*\AppData\Local\Microsoft\Windows\WER\*" -Force -Recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\ProgramData\Microsoft\Windows\WER does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Cleans up users temporary internet files if (Test-Path "C:\Users\*\AppData\Local\Microsoft\Windows\Temporary Internet Files\") { Remove-Item -Path "C:\Users\*\AppData\Local\Microsoft\Windows\Temporary Internet Files\*" -Force -Recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\Users\*\AppData\Local\Microsoft\Windows\Temporary Internet Files\ does not exist. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Cleans up Internet Explorer cache if (Test-Path "C:\Users\*\AppData\Local\Microsoft\Windows\IECompatCache\") { Remove-Item -Path "C:\Users\*\AppData\Local\Microsoft\Windows\IECompatCache\*" -Force -Recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\Users\*\AppData\Local\Microsoft\Windows\IECompatCache\ does not exist. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Cleans up Internet Explorer cache if (Test-Path "C:\Users\*\AppData\Local\Microsoft\Windows\IECompatUaCache\") { Remove-Item -Path "C:\Users\*\AppData\Local\Microsoft\Windows\IECompatUaCache\*" -Force -Recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\Users\*\AppData\Local\Microsoft\Windows\IECompatUaCache\ does not exist. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Cleans up Internet Explorer download history if (Test-Path "C:\Users\*\AppData\Local\Microsoft\Windows\IEDownloadHistory\") { Remove-Item -Path "C:\Users\*\AppData\Local\Microsoft\Windows\IEDownloadHistory\*" -Force -Recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\Users\*\AppData\Local\Microsoft\Windows\IEDownloadHistory\ does not exist. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Cleans up Internet Cache if (Test-Path "C:\Users\*\AppData\Local\Microsoft\Windows\INetCache\") { Remove-Item -Path "C:\Users\*\AppData\Local\Microsoft\Windows\INetCache\*" -Force -Recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\Users\*\AppData\Local\Microsoft\Windows\INetCache\ does not exist. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Cleans up Internet Cookies if (Test-Path "C:\Users\*\AppData\Local\Microsoft\Windows\INetCookies\") { Remove-Item -Path "C:\Users\*\AppData\Local\Microsoft\Windows\INetCookies\*" -Force -Recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\Users\*\AppData\Local\Microsoft\Windows\INetCookies\ does not exist. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Cleans up terminal server cache if (Test-Path "C:\Users\*\AppData\Local\Microsoft\Terminal Server Client\Cache\") { Remove-Item -Path "C:\Users\*\AppData\Local\Microsoft\Terminal Server Client\Cache\*" -Force -Recurse -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\Users\*\AppData\Local\Microsoft\Terminal Server Client\Cache\ does not exist. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } Write-host "Removing System and User Temp Files " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black ## Removes the hidden recycling bin. if (Test-path 'C:\$Recycle.Bin'){ Remove-Item 'C:\$Recycle.Bin' -Recurse -Force -Verbose -ErrorAction SilentlyContinue } else { Write-Host "C:\`$Recycle.Bin does not exist, there is nothing to cleanup. " -NoNewline -ForegroundColor DarkGray Write-Host "[WARNING]" -ForegroundColor DarkYellow -BackgroundColor Black } ## Turns errors back on $ErrorActionPreference = "Continue" ## Checks the version of PowerShell ## If PowerShell version 4 or below is installed the following will process if ($PSVersionTable.PSVersion.Major -le 4) { ## Empties the recycling bin, the desktop recyling bin $Recycler = (New-Object -ComObject Shell.Application).NameSpace(0xa) $Recycler.items() | ForEach-Object { ## If PowerShell version 4 or bewlow is installed the following will process Remove-Item -Include $_.path -Force -Recurse -Verbose Write-Host "The recycling bin has been cleaned up successfully! " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black } } elseif ($PSVersionTable.PSVersion.Major -ge 5) { ## If PowerShell version 5 is running on the machine the following will process Clear-RecycleBin -DriveLetter C:\ -Force -Verbose Write-Host "The recycling bin has been cleaned up successfully! " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black } ## Starts cleanmgr.exe Function Start-CleanMGR { Try{ Write-Host "Windows Disk Cleanup is running. " -NoNewline -ForegroundColor Green Start-Process -FilePath Cleanmgr -ArgumentList '/sagerun:1' -Wait -Verbose Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black } Catch [System.Exception]{ Write-host "cleanmgr is not installed! To use this portion of the script you must install the following windows features:" -ForegroundColor Red -NoNewline Write-host "[ERROR]" -ForegroundColor Red -BackgroundColor black } } Start-CleanMGR ## gathers disk usage after running the cleanup cmdlets. $After = Get-WmiObject Win32_LogicalDisk | Where-Object { $_.DriveType -eq "3" } | Select-Object SystemName, @{ Name = "Drive" ; Expression = { ( $_.DeviceID ) } }, @{ Name = "Size (GB)" ; Expression = {"{0:N1}" -f ( $_.Size / 1gb)}}, @{ Name = "FreeSpace (GB)" ; Expression = {"{0:N1}" -f ( $_.Freespace / 1gb ) } }, @{ Name = "PercentFree" ; Expression = {"{0:P1}" -f ( $_.FreeSpace / $_.Size ) } } | Format-Table -AutoSize | Out-String ## Restarts wuauserv Get-Service -Name wuauserv | Start-Service -ErrorAction SilentlyContinue ## Stop timer $Enders = (Get-Date) ## Calculate amount of seconds your code takes to complete. Write-Verbose "Elapsed Time: $(($Enders - $Starters).totalseconds) seconds " ## Sends hostname to the console for ticketing purposes. Write-Host (Hostname) -ForegroundColor Green ## Sends the date and time to the console for ticketing purposes. Write-Host (Get-Date | Select-Object -ExpandProperty DateTime) -ForegroundColor Green ## Sends the disk usage before running the cleanup script to the console for ticketing purposes. Write-Verbose " Before: $Before" ## Sends the disk usage after running the cleanup script to the console for ticketing purposes. Write-Verbose "After: $After" ## Prompt to scan for large ISO, VHD, VHDX files. Function PromptforScan { param( $ScanPath, $title = (Write-Host "Search for large files" -ForegroundColor Green), $message = (Write-Host "Would you like to scan $ScanPath for ISOs or VHD(X) files?" -ForegroundColor Green) ) $yes = New-Object System.Management.Automation.Host.ChoiceDescription "&Yes", "Scans $ScanPath for large files." $no = New-Object System.Management.Automation.Host.ChoiceDescription "&No", "Skips scanning $ScanPath for large files." $options = [System.Management.Automation.Host.ChoiceDescription[]]($yes, $no) $prompt = $host.ui.PromptForChoice($title, $message, $options, 0) switch ($prompt) { 0 { Write-Host "Scanning $ScanPath for any large .ISO and or .VHD\.VHDX files per the Administrators request." -ForegroundColor Green Write-Verbose ( Get-ChildItem -Path $ScanPath -Include *.iso, *.vhd, *.vhdx -Recurse -ErrorAction SilentlyContinue | Sort-Object Length -Descending | Select-Object Name, Directory, @{Name = "Size (GB)"; Expression = { "{0:N2}" -f ($_.Length / 1GB) }} | Format-Table | Out-String -verbose ) } 1 { Write-Host "The Administrator chose to not scan $ScanPath for large files." -ForegroundColor DarkYellow -Verbose } } } PromptforScan -ScanPath C:\ # end of function ## Completed Successfully! Write-Host (Stop-Transcript) -ForegroundColor Green Write-host " Script finished " -NoNewline -ForegroundColor Green Write-Host "[DONE]" -ForegroundColor Green -BackgroundColor Black } Start-Cleanup ``` ##### ⚠️ Caution - Run from an **elevated PowerShell prompt** - Ensure no critical data exists in cleanup paths - Always test with `-WhatIf` in production environments # Run DISM and SFC for System Repair This PowerShell script performs a two-step process to repair system integrity issues on Windows. It first runs the **DISM** tool to restore the system image and then executes **SFC** to scan and repair system files, only if DISM completes successfully. #### ⚙️ Features - Automates the standard **DISM + SFC** repair sequence - Color-coded console messages for success or failure - Check DISM completion before running SFC to avoid redundant operations ##### 💻 Script ```powershell # Run DISM to repair the system image Write-Host "Running DISM repair..." -ForegroundColor Green dism /online /cleanup-image /restorehealth # Check if DISM was successful before running SFC if ($?) { Write-Host "DISM completed successfully. Running SFC..." -ForegroundColor Green # Run SFC to scan and repair system files sfc /scannow } else { Write-Host "DISM failed. Please check the DISM logs for errors." -ForegroundColor Red } ``` #### 📝 Notes - Requires **Administrator privileges** - Best used when: - Windows features aren't working correctly - Updates fail repeatedly - System file corruption is suspected - Log files: - DISM: `%windir%\Logs\DISM\dism.log` - SFC: `%windir%\Logs\CBS\CBS.log` Suitable for ad‑hoc remediation or targeted deployments. - Recommended for systems with suspected component store corruption, repeated update failures, or unexplained instability. - Because these operations can be lengthy and resource‑intensive, schedule deployments during maintenance windows where possible and monitor Tanium results for completion and error codes. ##### **Alternative Method** Create a Tanium package and enter the following in the command field. This method does not require uploading a script. ```powershell cmd /c ..\..\Tools\StdUtils\TPowershell.exe -ExecutionPolicy Bypass -Command "DISM /ONLINE /CLEANUP-IMAGE /SCANHEALTH;DISM /ONLINE /CLEANUP-IMAGE /CHECKHEALTH;DISM.exe /Online /Cleanup-image /Restorehealth;dism.exe /Online /Cleanup-Image /StartComponentCleanup;sfc /scannow" ``` TPowershell.exe runs a PowerShell context that sequentially executes DISM /ScanHealth, /CheckHealth, /RestoreHealth, /StartComponentCleanup, and then sfc /scannow, in a single remediation action. # Scan for Component Store Corruption (DISM) This PowerShell script uses **DISM /ScanHealth** to check for corruption in the Windows Component Store. It captures the output and searches the logs for any corruption-related entries, optionally saving details to a text file for review. #### 🔍 Features - Runs `DISM /ScanHealth` to check system health - Logs output to a temporary file - Searches for corruption-related entries - Saves details about corrupted files (if found) to a text file - Useful for early detection of system integrity issues ##### 💻 Script ```powershell # Run DISM to check for component store corruption $logFile = "$env:TEMP\DISM.log" $corruptFileList = "$env:TEMP\CorruptFiles.txt" # Run the DISM command and capture the output $DISMOutput = dism /Online /Cleanup-Image /ScanHealth 2>&1 | Tee-Object -FilePath $logFile # Look for corruption indicators in the DISM log $corruptEntries = $DISMOutput | Select-String "corrupt" # Extract corrupted file paths (if any) if ($corruptEntries) { Write-Output "Corrupt files detected. Extracting details..." # Read DISM logs to locate potential corrupt files $dismLogPath = "C:\Windows\Logs\DISM\dism.log" $foundFiles = Select-String -Path $dismLogPath -Pattern "(.+corrupt:.+)" -AllMatches | ForEach-Object { $_.Matches.Groups[1].Value } if ($foundFiles) { $foundFiles | Out-File -FilePath $corruptFileList Write-Output "Corrupt files list saved to: $corruptFileList" Get-Content $corruptFileList } else { Write-Output "Corruption detected, but no specific files were listed in the logs." } } else { Write-Output "No corruption found." } ``` #### 📝 Notes - **Admin rights are required** to run this script. - Output files: - DISM Output: `$env:TEMP\DISM.log` - Corrupt File List: `$env:TEMP\CorruptFiles.txt` - Log parsing may not identify every type of corruption. Always review `C:\Windows\Logs\DISM\dism.log` manually for critical diagnostics.Use this script proactively to detect and investigate potential system health problems before they escalate.
# Microsoft Edge Cleanup and Reinstall Script This page documents a robust PowerShell script used to **completely remove an application** (like Microsoft Edge) and reinstall it cleanly. It's especially useful when traditional uninstallation or update processes fail, leaving broken traces behind. --- #### 📄 About This script helps remove: - Registry entries - Scheduled tasks - Background services - Running processes - Residual folders and files #### 🔧 Configuration Tips **Finding Configurations:** 1. Search online for: - Uninstall GUIDs - File paths - Registry keys 2. Define: - `$regNameToMatch` - `$knownUninstallers` - `$knownPathsToDelete`, etc. 3. Repeat if needed: leftover services or background tasks can require multiple runs. ```powershell Get-ItemProperty "HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*" -ErrorAction SilentlyContinue | Where-Object { $_.DisplayName -eq "Microsoft Edge" } | Select-Object PSChildName, DisplayName, DisplayVersion, SystemComponent, UninstallString, WindowsInstaller | Format-List ``` ``` powershell.exe -NoProfile -EncodedCommand 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 ``` Remove duplicate key ``` powershell.exe -NoProfile -EncodedCommand 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 ``` ```powershell Remove-Item "HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge" -Force ``` ##### 🛠️ Script ```powershell ### ### About ### # Application Cleanup and Reinstall # What is this? # This PowerShell script helps remove most traces of an installed application # so you can reinstall it cleanly. It targets leftover files, folders, and registry # entries that can block updates or fresh installs. It was originally built to # remove problematic versions of Microsoft Edge that failed to update. # How to find configurations? # 1. Search online for uninstall GUIDs, file paths, and registry keys related to # your application. Official docs or forums often list these details. # 2. Use RegShot (on GitHub) to capture "before" and "after" system snapshots. # Compare them to see which files and registry entries the installer added. # 3. In the script, specify top-level folders, file patterns, and registry keys you # want removed. It will also scan the usual uninstall locations by name. # 4. If the first run doesn’t catch everything, repeat the process. Look for # background processes, services, or custom registry keys not covered initially. # Having issues? # Please email me with detailed information: # • RegShot comparison report # • Script output or action log # • List of running processes # • Your script configurations # The more data you provide, the faster we can diagnose and fix the problem. ###################################################################################################################### ###################################################################################################################### ### ### Configurations ### ###################################################################################################################### $regNameToMatch = "Microsoft Edge" # This setting tells the script what application name to look for when scanning standard uninstall registry # locations. It uses a "match" operation against the Name, DisplayName, and ProductName properties in those # registry keys. Use a clear, unique identifier for your app so you don’t accidentally remove other software. # Example usage # $regNameToMatch = "Microsoft Edge" # This will match any registry entries whose Name, DisplayName, or ProductName contains "Microsoft Edge" ###################################################################################################################### $knownUninstallers = @('"C:\Program Files (x86)\Microsoft\Edge\Application\*\Installer\setup.exe" --uninstall --system-level --force-uninstall') # Define known uninstaller paths Add any known uninstaller executable locations to this array. You can use PowerShell # wildcards (\*) to match varying folder names. If the path includes spaces, wrap it in single quotes on the outside # and double quotes for the executable path. # Example usage # $knownUninstallers = @( # '"C:\Program Files (x86)\Microsoft\Edge\Application\*\Installer\setup.exe" --uninstall --system-level --force-uninstall' # ) ###################################################################################################################### $scheduledTasksNameToRemove = "Edge" # Configure scheduled task removalThis array specifies a name pattern to search for in Scheduled Tasks.The script # uses a "like" operator, adding wildcards (*) before and afterthe name you provide to match any part of the task name. # Example usage # $scheduledTasksNameToRemove = "Edge" # This will match tasks containing "Edge" anywhere in their names. ###################################################################################################################### $processNamesToStop = @("msedge","msedgewebview2","widget","msiexec","MicrosoftEdgeUpdate") # Define processes to stop List any running process names that should be terminated at the start of cleanup. # You can include wildcards (*) for partial matches. # Example usage # $processNamesToStop = @("msedge","msedgewebview2","widget","msiexec","MicrosoftEdgeUpdate") # This will stop any processes matching those names before uninstall steps begin. ###################################################################################################################### $knownPathsToDelete = @( "HKLM:\SOFTWARE\Microsoft\EdgeUpdate", "HKLM:\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate", "HKLM:\SOFTWARE\Microsoft\Edge", "HKLM:\SOFTWARE\WOW6432Node\Microsoft\Edge", "C:\Program Files (x86)\Microsoft\Edge", "C:\ProgramData\Microsoft\EdgeUpdate" ) # Define known paths to delete. Specify any registry keys or file paths to remove during cleanup. # Use PowerShell paths for registry (e.g., HKLM:...) and standard file paths. Wildcards (*) can be used. # Example usage # $knownPathsToDelete = @( # "HKLM:\SOFTWARE\Microsoft\EdgeUpdate", # "HKLM:\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate", # "C:\Program Files (x86)\Microsoft\Edge" # ) ###################################################################################################################### $knownsServicesToDelete = @() # Define services to delete List any service names to remove during cleanup. The script uses sc.exe to delete # matching services. Wildcards (*) are supported. # Example usage # $knownServicesToDelete = @("*Soup*") # This will delete any service whose name contains "Soup" ###################################################################################################################### $installerStrings = @("msiexec.exe /i MicrosoftEdgeEnterpriseX64.msi /qn") # Define install commands for reinstallation If you plan to reinstall the application, list the full install # commands here. Include the executable and all arguments. Installer files must reside in the script’s working # directory, so you can call them by name without a full path. # Example usage # $installerStrings = @("msiexec.exe /i MicrosoftEdgeEnterpriseX64.msi /qn") ###################################################################################################################### $executableTimeoutSeconds = 300 # Configure executable timeout This setting defines the maximum time (in seconds) the script will wait for any # executable to finish. Keep this value as low as possible to avoid hanging on installers that launch interactive GUIs. # Example usage # $executableTimeoutSeconds = 300 # This sets a 5-minute timeout for each executable call. ###################################################################################################################### ###################################################################################################################### ### ### Main function can be modified to change the order of operation or additional rounds ### ###################################################################################################################### function Main { SetLog("Starting Cleanup") Stop-AppProcessesByName($processNamesToStop) Remove-ScheduledActions($scheduledTasksNameToRemove) Remove-KnownServices($knownsServicesToDelete) Invoke-KnownUninstallStrings($knownUninstallers) $cleanupPaths = Find-AllRegistryLocations($regNameToMatch) $GUIDs = Get-GUIDFromRegPath($cleanupPaths) $cleanupPaths = $cleanupPaths + (Expand-GUIDPaths($GUIDs)) Invoke-MSIUninstall($GUIDs) Invoke-UninstallStrings($cleanupPaths) Remove-CleanupItems($knownPathsToDelete) Remove-CleanupItems($cleanupPaths) Invoke-InstallStrings($installerStrings) SetLog("Cleanup complete") } ###################################################################################################################### ###################################################################################################################### ### ### Working function below this point. If you find modifications are needed, please ### reach out for assistance or share your changes. This will allow others to avoid ### and benefit from the issues you encountered. jeff@chuco.com ### ###################################################################################################################### function SetLog($logline){ Write-Host ("[{0:MM/dd/yy} {0:HH:mm:ss}]" -f (Get-Date) + $logline) } function Remove-KnownServices($services){ if($services.count -eq 0){ return } SetLog("Removing Services") foreach($service in $services){ $svcs = Get-Service $service SetLog("Found $($svcs.count) service(s) using $service") #looping through if multiple services are found foreach($svc in $svcs){ $thisName = $svc.Name if($svc.status -eq "Running"){ SetLog("Service $thisName is running. Attempting to stop before removal.") $svc | Stop-Service -ErrorAction SilentlyContinue } SetLog("Attempting to remove: $thisName") sc.exe delete ($thisName) if((Get-Service $thisName).count -eq 0){ SetLog("Service removed") } else { SetLog("Failed to remove service") } } } } function Invoke-KnownUninstallStrings($strings){ Invoke-ExecutableStrArr -arr $strings -msg "Starting known uninstall strings" } function Invoke-ExecutableStrArr{ param( [array]$arr, [string]$msg ) if($arr.count -eq 0){ return } SetLog($msg) foreach($string in $arr){ $stringParts = Expand-ExecutableString($string) Invoke-Executable @($stringParts.path,$stringParts.args) } } function Invoke-InstallStrings($installers){ Invoke-ExecutableStrArr -arr $installers -msg "Starting installer(s)" } function Stop-AppProcessesByName($procNames){ SetLog("Stopping Application Processes") $procNames = ConvertTo-Array $procNames foreach($procName in $procNames){ SetLog("Looking for processes with name $procName") $attempt = 0 do{ if($attempt -gt 0 ){ SetLog("Attempt number $($attempt+1) to stop processes for $procName") } $procs = Get-Process | Where-Object {$_.Name -match $procName} foreach($proc in $procs){ try{ SetLog("Stopping process $($proc.processname) PID $($proc.id)") Stop-Process -Id $proc.Id -Force -ErrorAction SilentlyContinue }catch{ SetLog("ERROR stopping process: $($Error[0].Exception.Message)") SetLog("ERROR NAME: $($error[0].Exception.GetType().FullName)") } } Start-Sleep 1 $attempt++ }while(Get-Process | Where-Object {$_.Name -match $procName}) } } function Invoke-MSIUninstall($GUIDs){ if($GUIDs.count -eq 0){ return } SetLog("Uninstall by GUID") foreach($GUID in $GUIDs){ Invoke-Executable @("msiexec.exe","/x $GUID /q") } } function Invoke-UninstallStrings($cleanupObj){ foreach($path in $cleanupObj){ $targetStrings = New-Object System.Collections.ArrayList foreach($props in (Get-ItemProperty $path)){ $propKeys = $props.PSObject.Properties.Name #Locate any well know uninstall string locations if($propKeys -contains "UninstallString"){ $targetStrings.add($props.UninstallString) | Out-Null } if($propKeys -contains "QuietUninstallString"){ $targetStrings.add($props.QuietUninstallString) | Out-Null } if($targetStrings.count -eq 0){ SetLog("Unhandled potential props: $($propKeys -join ", ")") } } foreach($targetString in $targetStrings){ if($targetString -match "MsiExec"){ if($targetString -match ".*({.*}).*"){ Invoke-MSIUninstall @($Matches[1]) }else{ Invoke-Executable @("msiexec.exe","/X $($targetString) /q") } } else { #Regex to extract the executable and arguments $exeStrings = Expand-ExecutableString($targetString) if($exeStrings){ Invoke-Executable @($exeStrings['Path'],$exeStrings['Args']) } else { SetLog("Unable to process uninstall string: $($targetString)") } } } } } function Expand-ExecutableString($str){ $pattern = '(?:"(?| Metric | Threshold | Meaning |
|---|---|---|
| CBS corruption count | **> 50** | Too many corruption entries |
| SoftwareDistribution size | **> 2048 MB (2 GB)** | Indicates stuck or oversized update cache |
| Status | Detail | Count |
|---|---|---|
| Optimal | N/A | 11 |
| Unsupported | CX Unsupported | 5 |
| Needs Attention | Stale Scan Results | 1 |
| Days Since Successful Scan | Count |
|---|---|
| 1 Day | 6 |
| 0 Days | 5 |
| \[no results\] | 5 |
| More than 30 days ago | 1 |
| Scan Configuration ID | Error Message | Count |
|---|---|---|
| 0 | No Scan Errors | 12 |
| \[no results\] | \[no results\] | 5 |
| Tool Name | Installed Version | Targeted Version | Status | Count |
|---|---|---|---|---|
| Patch | 10.7.26.0 | 10.7.26.0 | Installed | 12 |
| \[no results\] | \[no results\] | \[no results\] | \[no results\] | 5 |