MNT IT Toolkit Get PRO

Subnet / IP calculator

MAC vendor lookup

api.macvendors.com doesn't allow browser (CORS) requests, so this uses a built-in copy of the Wireshark/IEEE OUI vendor database (~40k vendors, works offline, snapshot Oct 2026). Locally-administered (randomized "private") MACs are flagged.

Password / passphrase generator

Wi-Fi channel / band guide

Cable / PoE reference

Built-in templates plus your own. One item per line.

Import replaces all jobs, settings and saved devices with the backup's. Photos are included.

Safe Windows 10/11 tune-up that asks Y/N before every step: restore point, temp files, Windows Update cache, Recycle Bin, browser data for every browser and user (cache, history, cookies), DNS flush, read-only startup app list, SFC, and optional Disk Cleanup and drive optimize (TRIM/defrag). Never deletes documents, never edits the registry, no downloads.

How to run

1. Copy the zip to the PC and extract it (don't run from inside the zip).
2. Right-click MNT-TuneUp.cmd → Run as administrator.
3. If SmartScreen appears: More info → Run anyway (the script is unsigned).
4. Follow the Y/N prompts. SFC takes ~10–20 min; DISM RestoreHealth 15–45+ min.
5. The report MNT-TuneUp-Report-<date>.html lands on the Desktop (logs in C:\ProgramData\MNT-TuneUp).

Menu & Repair commands

Main menu: 1) Guided tune-up · 2) System File Checker (sfc /scannow) · 3) Repair & Diagnostics · 4) Run recommended (safe) set · 5) Clear browser data · F) Finish & save report. Each command is confirmed Y/N and its output goes in the report.

• DISM /Online /Cleanup-Image /CheckHealth, /ScanHealth, /RestoreHealth
• chkdsk C: /scan (online, read-only)
• Network reset pack: ipconfig /release, /renew, /flushdns, netsh winsock reset, netsh int ip reset. Needs a reboot; don't run it over remote control.
• Windows Update component reset (renames SoftwareDistribution and catroot2 to *.old)
• Restart Windows Explorer
• powercfg /energy and powercfg /batteryreport (saved to Desktop)
• driverquery, systeminfo summary
• Defender status and quick scan (Start-MpScan -ScanType QuickScan)
• Disk health (Get-PhysicalDisk), top CPU/RAM processes

Clear browser data

Covers every user profile under C:\Users: Chrome, Edge, Brave, Vivaldi, Chromium and other Chromium browsers, Opera / Opera GX, Firefox and Internet Explorer. One warning and one Y, then it clears the cache, browsing history, cookies and site data. Customers will be signed out of websites, so make sure they know their passwords first. It lists open browsers and offers to close them; any left open are skipped. The report shows the space freed per browser. Never touched: saved passwords, autofill and cards, bookmarks, settings and extensions. Firefox history is kept because its file also holds the bookmarks.

Recommended (safe) set: CheckHealth, chkdsk /scan, SFC, Defender status and quick scan, disk health, top processes, systeminfo, battery report and browser cache only (no history or cookies; open browsers are skipped).

Note: the download is only soft-gated; anyone with the direct URL can fetch the zip.

For macOS 12 and later on Intel and Apple Silicon (iMac, MacBook, Mac mini). It asks Y/N before every step and asks for the admin password once. It never deletes documents, never touches passwords, Keychain, autofill, bookmarks or extensions, never turns off SIP or Gatekeeper, and downloads nothing.

How to run (Mac)

1. Double-click the zip to extract it.
2. Right-click (Control-click) MNT-TuneUp-Mac.command → Open → Open. If macOS blocks it as unidentified: System Settings → Privacy & Security → Open Anyway.
3. If double-click says "permission denied", run this in Terminal: chmod +x ~/Downloads/MNT-TuneUp-Mac/MNT-TuneUp-Mac.command
4. Enter the Mac login password once, then follow the Y/N prompts. Choose F to finish.
5. The report MNT-TuneUp-Report-<date>.html lands on the Desktop (logs in ~/Library/Logs/MNT-TuneUp).
6. Safari data needs Full Disk Access for Terminal: System Settings → Privacy & Security → Full Disk Access → Terminal on, then reopen Terminal.

Mac menu & commands

• 1 Guided tune-up: user caches (~/Library/Caches), logs older than 7 days, empty Trash (all users), DNS flush (dscacheutil -flushcache; killall -HUP mDNSResponder), periodic maintenance, sudo purge, Xcode DerivedData, thin Time Machine local snapshots, browser data
• 2 Disk First Aid (read-only): diskutil verifyVolume /
• 3 Repair & Diagnostics: diskutil list/info + SMART, Spotlight reindex (mdutil -E /, slow), rebuild Launch Services, network reset (ipconfig set en0 DHCP + DNS flush), softwareupdate -l (list only), top CPU/RAM, login items and LaunchAgents/Daemons (read-only), battery health, sw_vers and hardware info, Gatekeeper/SIP/XProtect/FileVault status
• 4 Recommended (safe) set: First Aid verify, disk/SMART, system, security, battery, top processes, login items, update list and browser cache only
• 5 Clear browser data: Safari, Chrome, Edge, Brave, Firefox, Opera, Vivaldi for every user. One warning and one Y clears the cache, history and cookies, so users are signed out of websites. It offers to quit open browsers. Firefox history is kept because its file also holds the bookmarks.

6 Force quit all apps: lists open apps (never Finder, Terminal, Dock or system processes) and warns that unsaved work will be lost. After one Y it quits each app normally, waits 5 seconds, then force-kills any still running. The results go in the report.

Note: the download is only soft-gated; anyone with the direct URL can fetch the zip.

Windows: lists every printer with its driver, version, maker and date and flags generic/Microsoft class drivers (IPP Class, PCL6/PS Class, Generic / Text Only, WSD) or drivers older than 8 years as needs the proper driver. Then, each step asked Y/N: restore point, spooler reset (clears only spool files; queued jobs are cancelled), spooler auto-restart, ping network printers, move a printer from a flaky WSD port to a Standard TCP/IP port, and a test page.

Driver fixes (Windows)

1. Windows Update first: pnputil /scan-devices + a search for printer driver updates, installed only if you say Y.
2. HP, Canon, Epson, Brother, Xerox, Lexmark, Ricoh, Kyocera, Samsung, Konica Minolta: detects the model and opens the maker's official driver page.
3. Optional install: paste the direct download link from that official page. The script accepts only HTTPS links on the maker's own domain, checks the Authenticode signature (must be Valid and signed by that maker), and only then runs the installer, or for INF packages runs pnputil /add-driver → Add-PrinterDriver → Set-Printer -DriverName. If the check fails it opens the official page and stops.

Never removes printers, drivers or user files. Everything is logged in the report.

1. Copy the zip to the PC and extract it.
2. Right-click MNT-PrinterFix.cmd → Run as administrator. If SmartScreen appears: More info → Run anyway.
3. Answer the Y/N prompts. The report MNT-PrinterFix-Report-<date>.html lands on the Desktop (logs in C:\ProgramData\MNT-TuneUp).

Printer Fix-It (Mac)

Shows each queue's driver/PPD (lpstat -p, lpoptions, PPD NickName/version), flags generic/AirPrint drivers, cancels stuck jobs, resumes paused queues, restarts CUPS, lists Apple Software Update and opens the maker's driver page. Each step asked Y/N.

1. Extract the zip, then right-click (Control-click) MNT-PrinterFix-Mac.command → Open → Open. If blocked: System Settings → Privacy & Security → Open Anyway.
2. If it says "permission denied": chmod +x ~/Downloads/MNT-PrinterFix-Mac/MNT-PrinterFix-Mac.command
3. The report MNT-PrinterFix-Mac-Report-<date>.html lands on the Desktop.

Note: downloads are soft-gated; anyone with the direct URL can fetch the zip.

Pick apps and options, then download the script. Copy it to the PC (USB, email, AirDrop to a Mac, OneDrive). It runs winget source update, offers a restore point, installs each app silently from the official winget catalog, optionally removes preinstalled junk for the current user only (asks Y/N for each app), and saves an HTML report to the Desktop.

Remove preinstalled junk (optional)

Uses Remove-AppxPackage for the current user only. Nothing system-level, no Store/Defender/Edge/Photos/Calculator. Each one is asked Y/N on the PC.

Options

Run it on the PC

1. Save MNT-NewPC-Setup.ps1 to the PC.
2. Right-click it → Run with PowerShell (it asks for admin), or in an admin PowerShell: powershell -ExecutionPolicy Bypass -File .\MNT-NewPC-Setup.ps1
3. If winget is missing, the script opens App Installer in the Microsoft Store. Update it, then run again.

App carry-over (old PC → new PC)

Run on the old PC. It saves winget export to a Desktop folder MNT-AppList-<date>, along with a list of apps winget doesn't know (to reinstall by hand) and a ready reinstall script MNT-Reinstall-Apps.cmd/.ps1. Copy that folder to the new PC and run the .cmd as administrator: winget import installs the apps, asking Y/N first.

A printable, branded leave-behind for the customer. No password fields; text that looks like a password triggers a warning. Print / Save PDF or Share.

Read-only. Changes nothing. Last 30 days: blue screens (BugCheck 1001), dirty reboots (Kernel-Power 41), unexpected shutdowns (6008), minidump files (listed, not opened), top crashing and hanging apps, WHEA hardware errors and disk errors (7/51/153). Startup: Run/RunOnce keys, Startup folders, non-Microsoft scheduled tasks and auto-start services, like BlueScreenView + Autoruns, without extra downloads.

1. Copy the zip to the PC and extract it.
2. Right-click MNT-CrashStartup.cmd → Run as administrator. If SmartScreen appears: More info → Run anyway.
3. Answer the Y/N prompts. The report MNT-CrashStartup-Report-<date>.html lands on the Desktop (logs in C:\ProgramData\MNT-TuneUp).

Note: downloads are soft-gated; anyone with the direct URL can fetch the zip.

Report first: proxy/PAC/WinHTTP settings, DNS servers, active hosts-file entries, every browser extension for every user (Chrome, Edge, Brave, Opera, Vivaldi, Firefox), forced browser policies, startup items, suspicious scheduled tasks and known PUPs (OneLaunch, Wave Browser, Segurazo, PC optimizers…).

Then optional fixes, each Y/N: turn off the user proxy (registry backup first), reset the WinHTTP proxy, open hosts in Notepad for review, flush DNS, open each browser's extensions page, Task Manager Startup, Settings → Apps, a Defender Quick Scan, and the official AdwCleaner / Microsoft Safety Scanner pages. Nothing is auto-deleted.

1. Copy the zip to the PC and extract it.
2. Right-click MNT-AdwareSweep.cmd → Run as administrator. If SmartScreen appears: More info → Run anyway.
3. Answer the Y/N prompts. The report MNT-AdwareSweep-Report-<date>.html lands on the Desktop (logs in C:\ProgramData\MNT-TuneUp).

Note: downloads are soft-gated; anyone with the direct URL can fetch the zip.

Windows (read-only): OneDrive folder backup (Desktop/Documents/Pictures), File History, system image (wbadmin), restore points, backup/sync apps (Backblaze, Carbonite, Acronis, Macrium…), BitLocker and free space. The BitLocker recovery key is reported only as present YES/NO, never shown.

1. Copy the zip to the PC and extract it.
2. Right-click MNT-BackupCheck.cmd → Run as administrator. If SmartScreen appears: More info → Run anyway.
3. Answer the Y/N prompts. The report MNT-BackupCheck-Report-<date>.html lands on the Desktop (logs in C:\ProgramData\MNT-TuneUp).

Backup Checker (Mac)

Time Machine last backup age and automatic setting, iCloud Desktop & Documents, backup apps (Backblaze, Arq, CCC, SuperDuper…), FileVault (recovery key present YES/NO only) and free space. Read-only; asks for the Mac password to read Time Machine/FileVault.

1. Extract the zip, then right-click (Control-click) MNT-BackupCheck-Mac.command → Open → Open. If blocked: System Settings → Privacy & Security → Open Anyway.
2. If it says "permission denied": chmod +x ~/Downloads/MNT-BackupCheck-Mac/MNT-BackupCheck-Mac.command
3. The report MNT-BackupCheck-Mac-Report-<date>.html lands on the Desktop.

Note: downloads are soft-gated; anyone with the direct URL can fetch the zip.

The Windows and Mac Tune-Up scripts now also save MNT-Health-<date>.json to the Desktop. It holds hardware and health numbers only (free space, temp/cache, startup count, RAM, disk health, battery, antivirus/FileVault). No files, usernames, passwords or keys. Get it onto the phone (AirDrop, email, OneDrive) and import it into the active job. It shows up in the site report and the handoff sheet.

Finds all installed antivirus/security products using Windows Security Center (root/SecurityCenter2) and the uninstall registry (HKLM/HKCU, 64- and 32-bit): McAfee, Norton, Avast, AVG, Avira, Bitdefender, Kaspersky, ESET, Trend Micro, Webroot, Malwarebytes, Sophos, Panda, TotalAV, Surfshark and others. A checkbox window with Select all and Remove lets you tick which to remove. Microsoft Defender is excluded: it's built in and turns itself back on after the others are gone.

After one confirmation (and an optional restore point) it runs each product's official uninstaller (QuietUninstallString, else UninstallString; MSI products use msiexec /x {GUID} /qn /norestart) and reports success or failure. On failure it offers to open the vendor's official removal-tool page (McAfee MCPR, Norton Remove & Reinstall, Avast/AVG Clear, ESET, Kaspersky…). It never downloads anything by itself. It then checks that Defender is on and recommends a reboot.

1. Copy the zip to the PC and extract it.
2. Right-click MNT-AVRemover.cmd → Run as administrator. If SmartScreen appears: More info → Run anyway.
3. Answer the Y/N prompts. The report MNT-AVRemover-Report-<date>.html lands on the Desktop (logs in C:\ProgramData\MNT-TuneUp).

Note: downloads are soft-gated; anyone with the direct URL can fetch the zip.