MNT IT Toolkit Get PRO

Subnet / IP calculator

MAC vendor lookup

api.macvendors.com doesn't allow browser (CORS) requests, so this uses a built-in copy of the Wireshark/IEEE OUI vendor database (~40k vendors, works offline, snapshot Oct 2026). Locally-administered (randomized "private") MACs are flagged.

Password / passphrase generator

Wi-Fi channel / band guide

Cable / PoE reference

Built-in templates plus your own. One item per line.

Import replaces all jobs, settings and saved devices with the backup's. Photos are included.

Safe Windows 10/11 tune-up that asks Y/N before every step: restore point, temp files, Windows Update cache, Recycle Bin, browser data for every browser and user (cache, history, cookies), DNS flush, read-only startup app list, SFC, and optional Disk Cleanup and drive optimize (TRIM/defrag). Never deletes documents, never edits the registry, no downloads.

How to run

1. Copy the zip to the PC and extract it (don't run from inside the zip).
2. Right-click MNT-TuneUp.cmd → Run as administrator.
3. If SmartScreen appears: More info → Run anyway (the script is unsigned).
4. Follow the Y/N prompts. SFC takes ~10–20 min; DISM RestoreHealth 15–45+ min.
5. The report MNT-TuneUp-Report-<date>.html lands on the Desktop (logs in C:\ProgramData\MNT-TuneUp).

Menu & Repair commands

Main menu: 1) Guided tune-up · 2) System File Checker (sfc /scannow) · 3) Repair & Diagnostics · 4) Run recommended (safe) set · 5) Clear browser data · F) Finish & save report. Each command is confirmed Y/N and its output goes in the report.

• DISM /Online /Cleanup-Image /CheckHealth, /ScanHealth, /RestoreHealth
• chkdsk C: /scan (online, read-only)
• Network reset pack: ipconfig /release, /renew, /flushdns, netsh winsock reset, netsh int ip reset. Needs a reboot; don't run it over remote control.
• Windows Update component reset (renames SoftwareDistribution and catroot2 to *.old)
• Restart Windows Explorer
• powercfg /energy and powercfg /batteryreport (saved to Desktop)
• driverquery, systeminfo summary
• Defender status and quick scan (Start-MpScan -ScanType QuickScan)
• Disk health (Get-PhysicalDisk), top CPU/RAM processes

Clear browser data

Covers every user profile under C:\Users: Chrome, Edge, Brave, Vivaldi, Chromium and other Chromium browsers, Opera / Opera GX, Firefox and Internet Explorer. One warning and one Y, then it clears the cache, browsing history, cookies and site data. Customers will be signed out of websites, so make sure they know their passwords first. It lists open browsers and offers to close them; any left open are skipped. The report shows the space freed per browser. Never touched: saved passwords, autofill and cards, bookmarks, settings and extensions. Firefox history is kept because its file also holds the bookmarks.

Recommended (safe) set: CheckHealth, chkdsk /scan, SFC, Defender status and quick scan, disk health, top processes, systeminfo, battery report and browser cache only (no history or cookies; open browsers are skipped).

Downloads are protected: they only work while PRO is active on this device (a signed download pass, renewed each time PRO is verified). Sharing the link won't work for others.

For macOS 12 and later on Intel and Apple Silicon (iMac, MacBook, Mac mini). It asks Y/N before every step and asks for the admin password once. It never deletes documents, never touches passwords, Keychain, autofill, bookmarks or extensions, never turns off SIP or Gatekeeper, and downloads nothing.

How to run (Mac)

1. Double-click the zip to extract it.
2. Right-click (Control-click) MNT-TuneUp-Mac.command → Open → Open. If macOS blocks it as unidentified: System Settings → Privacy & Security → Open Anyway.
3. If double-click says "permission denied", run this in Terminal: chmod +x ~/Downloads/MNT-TuneUp-Mac/MNT-TuneUp-Mac.command
4. Enter the Mac login password once, then follow the Y/N prompts. Choose F to finish.
5. The report MNT-TuneUp-Report-<date>.html lands on the Desktop (logs in ~/Library/Logs/MNT-TuneUp).
6. Safari data needs Full Disk Access for Terminal: System Settings → Privacy & Security → Full Disk Access → Terminal on, then reopen Terminal.

Mac menu & commands

• 1 Guided tune-up: user caches (~/Library/Caches), logs older than 7 days, empty Trash (all users), DNS flush (dscacheutil -flushcache; killall -HUP mDNSResponder), periodic maintenance, sudo purge, Xcode DerivedData, thin Time Machine local snapshots, browser data
• 2 Disk First Aid (read-only): diskutil verifyVolume /
• 3 Repair & Diagnostics: diskutil list/info + SMART, Spotlight reindex (mdutil -E /, slow), rebuild Launch Services, network reset (ipconfig set en0 DHCP + DNS flush), softwareupdate -l (list only), top CPU/RAM, login items and LaunchAgents/Daemons (read-only), battery health, sw_vers and hardware info, Gatekeeper/SIP/XProtect/FileVault status
• 4 Recommended (safe) set: First Aid verify, disk/SMART, system, security, battery, top processes, login items, update list and browser cache only
• 5 Clear browser data: Safari, Chrome, Edge, Brave, Firefox, Opera, Vivaldi for every user. One warning and one Y clears the cache, history and cookies, so users are signed out of websites. It offers to quit open browsers. Firefox history is kept because its file also holds the bookmarks.

6 Force quit all apps: lists open apps (never Finder, Terminal, Dock or system processes) and warns that unsaved work will be lost. After one Y it quits each app normally, waits 5 seconds, then force-kills any still running. The results go in the report.

Downloads are protected: they only work while PRO is active on this device (a signed download pass, renewed each time PRO is verified). Sharing the link won't work for others.

Windows: lists every printer with its driver, version, maker and date and flags generic/Microsoft class drivers (IPP Class, PCL6/PS Class, Generic / Text Only, WSD) or drivers older than 8 years as needs the proper driver. Then, each step asked Y/N: restore point, spooler reset (clears only spool files; queued jobs are cancelled), spooler auto-restart, ping network printers, move a printer from a flaky WSD port to a Standard TCP/IP port, and a test page.

Driver fixes (Windows)

1. Windows Update first: pnputil /scan-devices + a search for printer driver updates, installed only if you say Y.
2. HP, Canon, Epson, Brother, Xerox, Lexmark, Ricoh, Kyocera, Samsung, Konica Minolta: detects the model and opens the maker's official driver page.
3. Optional install: paste the direct download link from that official page. The script accepts only HTTPS links on the maker's own domain, checks the Authenticode signature (must be Valid and signed by that maker), and only then runs the installer, or for INF packages runs pnputil /add-driver → Add-PrinterDriver → Set-Printer -DriverName. If the check fails it opens the official page and stops.

Never removes printers, drivers or user files. Everything is logged in the report.

1. Copy the zip to the PC and extract it.
2. Right-click MNT-PrinterFix.cmd → Run as administrator. If SmartScreen appears: More info → Run anyway.
3. Answer the Y/N prompts. The report MNT-PrinterFix-Report-<date>.html lands on the Desktop (logs in C:\ProgramData\MNT-TuneUp).

Printer Fix-It (Mac)

Shows each queue's driver/PPD (lpstat -p, lpoptions, PPD NickName/version), flags generic/AirPrint drivers, cancels stuck jobs, resumes paused queues, restarts CUPS, lists Apple Software Update and opens the maker's driver page. Each step asked Y/N.

1. Extract the zip, then right-click (Control-click) MNT-PrinterFix-Mac.command → Open → Open. If blocked: System Settings → Privacy & Security → Open Anyway.
2. If it says "permission denied": chmod +x ~/Downloads/MNT-PrinterFix-Mac/MNT-PrinterFix-Mac.command
3. The report MNT-PrinterFix-Mac-Report-<date>.html lands on the Desktop.

Downloads are protected: they only work while PRO is active on this device (a signed download pass, renewed each time PRO is verified). Sharing the link won't work for others.

Pick apps and options, then download the script. Copy it to the PC (USB, email, AirDrop to a Mac, OneDrive). It runs winget source update, offers a restore point, installs each app silently from the official winget catalog, optionally removes preinstalled junk for the current user only (asks Y/N for each app), and saves an HTML report to the Desktop.

Remove preinstalled junk (optional)

Uses Remove-AppxPackage for the current user only. Nothing system-level, no Store/Defender/Edge/Photos/Calculator. Each one is asked Y/N on the PC.

Options

Run it on the PC

1. Save MNT-NewPC-Setup.ps1 to the PC.
2. Right-click it → Run with PowerShell (it asks for admin), or in an admin PowerShell: powershell -ExecutionPolicy Bypass -File .\MNT-NewPC-Setup.ps1
3. If winget is missing, the script opens App Installer in the Microsoft Store. Update it, then run again.

App carry-over (old PC → new PC)

Run on the old PC. It saves winget export to a Desktop folder MNT-AppList-<date>, along with a list of apps winget doesn't know (to reinstall by hand) and a ready reinstall script MNT-Reinstall-Apps.cmd/.ps1. Copy that folder to the new PC and run the .cmd as administrator: winget import installs the apps, asking Y/N first.

A printable, branded leave-behind for the customer. No password fields; text that looks like a password triggers a warning. Print / Save PDF or Share.

Read-only. Changes nothing. Last 30 days: blue screens (BugCheck 1001), dirty reboots (Kernel-Power 41), unexpected shutdowns (6008), minidump files (listed, not opened), top crashing and hanging apps, WHEA hardware errors and disk errors (7/51/153). Startup: Run/RunOnce keys, Startup folders, non-Microsoft scheduled tasks and auto-start services, like BlueScreenView + Autoruns, without extra downloads.

1. Copy the zip to the PC and extract it.
2. Right-click MNT-CrashStartup.cmd → Run as administrator. If SmartScreen appears: More info → Run anyway.
3. Answer the Y/N prompts. The report MNT-CrashStartup-Report-<date>.html lands on the Desktop (logs in C:\ProgramData\MNT-TuneUp).

Downloads are protected: they only work while PRO is active on this device (a signed download pass, renewed each time PRO is verified). Sharing the link won't work for others.

Report first: proxy/PAC/WinHTTP settings, DNS servers, active hosts-file entries, every browser extension for every user (Chrome, Edge, Brave, Opera, Vivaldi, Firefox), forced browser policies, startup items, suspicious scheduled tasks (validly signed OneDrive, Zoom, Google, Adobe and similar updaters are recognised and not flagged; unverified items are marked “Review”, not accused) and known PUPs (OneLaunch, Wave Browser, Segurazo, PC optimizers…).

Then optional fixes, each Y/N: turn off the user proxy (registry backup first), reset the WinHTTP proxy, open hosts in Notepad for review, flush DNS, open each browser's extensions page, Task Manager Startup, Settings → Apps, a Defender Quick Scan, and the official AdwCleaner / Microsoft Safety Scanner pages. Nothing is auto-deleted.

1. Copy the zip to the PC and extract it.
2. Right-click MNT-AdwareSweep.cmd → Run as administrator. If SmartScreen appears: More info → Run anyway.
3. Answer the Y/N prompts. The report MNT-AdwareSweep-Report-<date>.html lands on the Desktop (logs in C:\ProgramData\MNT-TuneUp).

Downloads are protected: they only work while PRO is active on this device (a signed download pass, renewed each time PRO is verified). Sharing the link won't work for others.

Windows (read-only): OneDrive folder backup (Desktop/Documents/Pictures), File History, system image (wbadmin), restore points, backup/sync apps (Backblaze, Carbonite, Acronis, Macrium…), BitLocker and free space. The BitLocker recovery key is reported only as present YES/NO, never shown.

1. Copy the zip to the PC and extract it.
2. Right-click MNT-BackupCheck.cmd → Run as administrator. If SmartScreen appears: More info → Run anyway.
3. Answer the Y/N prompts. The report MNT-BackupCheck-Report-<date>.html lands on the Desktop (logs in C:\ProgramData\MNT-TuneUp).

Backup Checker (Mac)

Time Machine last backup age and automatic setting, iCloud Desktop & Documents, backup apps (Backblaze, Arq, CCC, SuperDuper…), FileVault (recovery key present YES/NO only) and free space. Read-only; asks for the Mac password to read Time Machine/FileVault.

1. Extract the zip, then right-click (Control-click) MNT-BackupCheck-Mac.command → Open → Open. If blocked: System Settings → Privacy & Security → Open Anyway.
2. If it says "permission denied": chmod +x ~/Downloads/MNT-BackupCheck-Mac/MNT-BackupCheck-Mac.command
3. The report MNT-BackupCheck-Mac-Report-<date>.html lands on the Desktop.

Downloads are protected: they only work while PRO is active on this device (a signed download pass, renewed each time PRO is verified). Sharing the link won't work for others.

The Windows and Mac Tune-Up scripts now also save MNT-Health-<date>.json to the Desktop. It holds hardware and health numbers only (free space, temp/cache, startup count, RAM, disk health, battery, antivirus/FileVault). No files, usernames, passwords or keys. Get it onto the phone (AirDrop, email, OneDrive) and import it into the active job. It shows up in the site report and the handoff sheet.

Finds all installed antivirus/security products using Windows Security Center (root/SecurityCenter2) and the uninstall registry (HKLM/HKCU, 64- and 32-bit): McAfee, Norton, Avast, AVG, Avira, Bitdefender, Kaspersky, ESET, Trend Micro, Webroot, Malwarebytes, Sophos, Panda, TotalAV, Surfshark and others. A checkbox window with Select all and Remove lets you tick which to remove. Microsoft Defender is excluded: it's built in and turns itself back on after the others are gone.

After one confirmation (and an optional restore point) it runs each product's official uninstaller (QuietUninstallString, else UninstallString; MSI products use msiexec /x {GUID} /qn /norestart) and reports success or failure. On failure it offers to open the vendor's official removal-tool page (McAfee MCPR, Norton Remove & Reinstall, Avast/AVG Clear, ESET, Kaspersky…). It never downloads anything by itself. It then checks that Defender is on and recommends a reboot only if something was actually removed.

1. Copy the zip to the PC and extract it.
2. Right-click MNT-AVRemover.cmd → Run as administrator. If SmartScreen appears: More info → Run anyway.
3. Answer the Y/N prompts. The report MNT-AVRemover-Report-<date>.html lands on the Desktop (logs in C:\ProgramData\MNT-TuneUp).

Downloads are protected: they only work while PRO is active on this device (a signed download pass, renewed each time PRO is verified). Sharing the link won't work for others.

Finds: exact copies (same size, then SHA-256) and near-duplicates: resized, re-saved/recompressed, converted (JPG/PNG/WebP/HEIC…), lightly edited copies and burst shots (128-bit difference hash; flat or blank images are never matched by similarity). Scans the chosen folder or drive and every subfolder (Pictures by default) with a progress bar and Cancel.

Review first: each group is shown side by side with thumbnail, resolution, size, date and path. The suggested KEEP copy is the highest resolution, then the oldest; tick or untick anything. Nothing is removed without a confirmation, and nothing is ever permanently deleted: Windows uses the Recycle Bin (network drives, USB sticks, over-long paths and drives with the bin turned off are skipped, not deleted); Mac uses the Finder Trash (Put Back works). OneDrive/iCloud online-only files, system folders and the Apple Photos library are never touched. Report: MNT-DupFinder-Report-<date>.html + .csv on the Desktop (groups, files removed, space freed).

1. Extract the zip and double-click MNT-DupFinder.cmd (no admin needed). SmartScreen: More info → Run anyway.
2. Pick the folder, review the groups, then Move ticked to Recycle Bin… → Yes.
3. HEIC/WebP need Microsoft's free HEIF / HEVC / WebP Image Extensions; without them those photos are still checked for exact copies.

1. Extract, then right-click MNT-DupFinder-Mac.command → Open → Open.
2. Choose the folder. A local review page opens in the browser: adjust ticks, click Save my choices, go back to Terminal, press Enter and type YES.
3. Allow Terminal to control Finder when asked (needed for the Trash with Put Back). For photos inside the Photos app, use Photos → Duplicates.

Sorts by: date taken (Year › Month, file date if there's no camera date), place (Country › State › City from the photo's GPS, offline GeoNames list, nearest town within 50 km), animals (Horses, Cats, Dogs) and, only if turned on, people the client names (People › Brother). A photo with a horse and the client's brother is copied into both folders. Pick any mix.

Safe by default: makes copies, so originals never move. Shortcuts are an option; Move is only offered when sorting by one thing and needs the word MOVE typed. A preview page opens before anything is written, and every sort keeps an undo log (Undo removes only its own unchanged copies and puts moved photos back). Report: report.html in <sorted folder>\_MNT-PhotoSorter.

Face grouping is opt-in and local: it asks first (type YES), compares faces on the computer only and uploads nothing. Face prints for a sort are deleted when it ends; only people you name and choose to remember are kept (an average face print + name, no photos), and Forget all faces deletes them. Face-data laws (e.g. Illinois BIPA, CCPA/CPRA) apply: only for people who are OK with it.

Accuracy: recognition is good, not perfect. On family-style test photos about 9 in 10 animal photos were found and about 1 in 10 photos in an animal folder was wrong; named people were never put in the wrong person's folder, but small or distant faces are skipped. Always review the preview. The first animals/people sort downloads its recognition files once (about 90–130 MB, SHA-256 checked).

1. Extract the zip and double-click MNT-PhotoSorter.cmd (no admin needed). SmartScreen: More info → Run anyway.
2. Pick the photo folder, answer the questions, look at the preview page, then type Y.
3. Undo or forget faces: run it again and type U (undo) or F (forget faces). You can also type or paste a folder path instead of using the folder window. HEIC needs Microsoft's free HEIF Image Extensions; without them those photos are still sorted by date and place.

1. Needs macOS 14 Sonoma+ (Apple Silicon) or macOS 13.4+ (Intel); on older macOS animal/people recognition may not work (dates and places do).
2. Extract, then right-click MNT-PhotoSorter-Mac.command → Open → Open. It explains and asks before removing the download mark from its own program file.
3. Pick the photo folder and follow the steps. HEIC/RAW photos get a small preview made with macOS's own tools (originals untouched).
4. At the end it can (only if you say Y) add the Horses / Cats / Dogs / People folders as Apple Photos albums. macOS asks whether Terminal may control Photos; Photos keeps its own copy of each photo.

Downloads are protected: they only work while PRO is active on this device (a signed download pass, renewed each time PRO is verified). Sharing the link won't work for others.

Read-only, no admin needed. Lists devices from the ARP/neighbor table plus a ping sweep of the computer's own local subnet only (no port scans), reads Wi-Fi signal, channel and band, measures packet loss/latency/jitter to the router and to the internet, detects double NAT and carrier-grade NAT, and grades lag A–F. Option 2 runs a 10–60 minute internet-drop monitor with a per-second CSV and an ISP-ready section. Ends with MNT-NetworkDoctor-Report-<date>.html (for the client) and MNT-Network-<date>.json (import below) on the Desktop.

⚠️ Only run it on networks the client owns or has authorized you to check. The script asks for that confirmation first. Provided as is, without warranty.

1. Extract the zip on the PC.
2. Double-click MNT-NetworkDoctor.cmd (no admin needed). If SmartScreen appears: More info → Run anyway.
3. Confirm the network is owned/authorized, pick 1 (quick, ~3 min) or 2 (drop monitor).
4. Windows 11 24H2+: if Wi-Fi details are blank, allow Settings → Privacy & security → Location → Let desktop apps access your location.

1. Extract, then right-click MNT-NetworkDoctor-Mac.command → Open → Open.
2. Confirm the network is owned/authorized and pick 1 or 2. The Mac is kept awake during the monitor.

Import results into the active job

Read-only, scored 0–100 with an A–F grade and a plain-language "what to do" list: disk encryption (BitLocker/FileVault), firewall, antivirus and definitions, admin and guest accounts, automatic sign-in, UAC, screen lock, Remote Desktop / Remote Login, SMBv1, remote-control apps, Secure Boot/TPM, updates and OS end-of-support (Windows 10 ended Oct 14, 2025). Router and staff items are a manual checklist. Good for cyber-insurance questionnaires and a recurring "security check" service.

⚠️ Run only on computers the client owns or authorizes. The report is advice, not a certification or guarantee (the disclaimer is printed on it).

1. Extract the zip, double-click MNT-SecurityCheck.cmd, click Yes to the admin prompt (needed only to read settings).
2. Confirm authorization. The report MNT-SecurityCheck-Report-<date>.html opens from the Desktop.

1. Extract, then right-click MNT-SecurityCheck-Mac.command → Open → Open. No password needed.

One zip with every MNT script and a menu: MNT-Toolbox.cmd on Windows, MNT-Toolbox-Mac.command on Mac. Tune-Up, Network Doctor, Security Checkup, Backup Checker, Crash & Startup, Printer Fix-It, Adware Sweep, AV Remover and Duplicate Photo Finder. The menu checks for a newer version (read-only, never auto-downloads) and saves a list of what ran to the Desktop.

1. Extract the whole zip.
2. Windows: double-click MNT-Toolbox.cmd (SmartScreen: More info → Run anyway). Mac: right-click MNT-Toolbox-Mac.command → Open → Open.
3. Pick a tool by number. Get the customer's OK first: tools that change settings ask Y/N at each step.

Check a download: SHA-256 hashes are in SHA256SUMS.txt. The scripts aren't code-signed yet, so Windows and macOS will warn the first time.