PowerBricks are the building blocks used when creating Application Manager packages in CapaOne, accessible under Applications.
When creating a package, you have two options: Script or Company App. PowerBricks are available in both scenarios.
Scripts are typically used for tasks that do not require installation files. They are well suited for configurations, maintenance tasks, custom code, or sequences built entirely with PowerBricks.
Company Apps are intended for application deployment. You can upload installation files such as EXE or MSI files and let CapaOne help create the application package automatically, or you can build the installation completely yourself using PowerBricks for full control over the installation process.
This reference lists every PowerBrick currently available in Production, grouped by category.
| PowerBrick |
Description |
| Add Google Chrome Extension |
Adds or updates one or more Google Chrome extensions using the ExtensionSettings policy. Supports merge behavior, global default policy, optional legacy ExtensionInstallForcelist updates, and advanced extension restrictions. |
| Add Microsoft Edge Extension |
Adds an extension for Microsoft Edge using the ExtensionSettings policy. This enables Edge Extensions to be installed and managed like applications, enabling extensions to be pushed to specific devices or users alongside existing GPO/Intune extension policies. |
| Add Mozilla Firefox Extension |
Adds or updates a Mozilla Firefox extension using the ExtensionSettings policy stored as REG_MULTI_SZ in HKLM\SOFTWARE\Policies\Mozilla\Firefox. Supports merge behavior and optional global default policy. |
| Remove Google Chrome Extension |
Removes selected extensions from Chrome ExtensionSettings and optionally cleans managed values created by the Chrome Add Extension brick, including global default and legacy forcelist entries. |
| Remove Microsoft Edge Extension |
Removes an extension from Microsoft Edge ExtensionSettings policy. This removes the extension from the policy while keeping other extensions intact. If no extensions remain, the policy is removed completely. |
| Remove Mozilla Firefox Extension |
Removes Firefox extensions from the ExtensionSettings policy and cleans up managed values created by the Firefox Add Extension brick, including the global default block. |
| PowerBrick |
Description |
| Activate Process Execution At First User Logon |
Configures Windows Active Setup so a script or program is executed once for each user at their first login |
| Deactivate Process Execution At First User Logon |
Removes or disables an Active Setup entry that was created to execute a process at first user logon. You can specify the Active Setup entry by its unique identifier (ID). If you choose to disable the Active Setup entry instead of removing it, the entry will remain in the registry but will be marked as disabled, preventing the associated process from executing at user logon. This can be useful if you want to temporarily stop the execution without deleting the configuration entirely. |
| Execute Process |
Executes a specified process with given arguments and options. This PowerBrick allows you to run any executable or command-line tool on the target machine, providing flexibility for various use cases such as software installation, system configuration, or running custom scripts. |
| Execute PSAppDeployToolkit Package |
Execute a PSAppDeployToolKit package. The Invoke-AppDeployToolkit.exe file must be placed in the root of the folder. Remember to include the [Download Content] PowerBrick. |
| Install Driver |
Installs a driver using PnPUtil. You can specify either a single .inf file or a directory containing multiple .inf files. If a directory is specified, all .inf files within it will be installed recursively. |
| Install EXE |
Installs an application using an executable file. This brick allows you to specify the path to the executable, any necessary command-line arguments, and various execution options such as waiting for completion and user context. It also includes the ability to define return code handling to determine the success or failure of the installation based on the process’s exit code. |
| Install Font |
Installs one or more fonts on the system. Accepts a single font file (.ttf, .otf, .ttc) or a folder where all supported font files are installed. |
| Install Microsoft 365 |
Downloads setup.exe automatically if it is not present in $PackageRoot and installs Microsoft 365 Apps using the Office Deployment Tool (ODT). |
| Install MSI |
Installs an application using an MSI installer. You can also define return code handling to manage different outcomes of the installation process. |
| Install MSIX |
Installs an MSIX or APPX package for every user on the machine. |
| Install Windows Update |
Install Windows Updates (.msu files) from a directory or a single .msu file |
| Uninstall EXE |
Uninstall software using an EXE uninstaller |
| Uninstall Font |
Removes one or more fonts from the system. Supports uninstall by source file or folder path, or directly by Font Registry Name. If both are provided, Font Registry Name takes precedence. |
| Uninstall MSI |
Uninstalls applications installed with MSI by display name, publisher, version or product code. This PowerBrick can be used to uninstall applications installed with MSI by specifying the display name, publisher, version or product code. It is possible to use wildcards in the display name and publisher parameters to match multiple applications. If multiple applications match the specified criteria, all of them will be uninstalled. |
| Uninstall Program |
Uninstall software using MSI, EXE or Appx/MSIX uninstallers. Appx and MSIX packages are also deprovisioned, so they are not installed again for users who log on to the machine for the first time afterwards. Supports DisplayName with wildcards, optional Publisher/Version filtering, or direct ProductCode uninstallation. |
| Uninstall Windows Update |
Uninstall a Windows Update by KB number |
| Verify Application Installation |
Verifies whether an application is installed by checking Add/Remove Programs entries and installed APPX packages, with optional version validation. |
| PowerBrick |
Description |
| Activate Windows |
Activates Windows using either the original embedded product key or a provided product key. |
| CapaInstaller Install Agent |
Installs the CapaInstaller agent. If CapaInstallerAgentSetup.exe and CapaInstaller agent.xml exist in $PackageRoot they are used, otherwise they are downloaded from FrontendURLInternal or FrontendURLPublic before install. Optionally sets PCType in registry before installation. |
| Configure BitLocker |
Enables and configures BitLocker on a selected volume, including encryption method, protectors, recovery information handling and optional auto unlock for data volumes. |
| Configure Start Menu Layout |
Configures Start Menu layout by copying a LayoutModification.json or LayoutModification.xml file into user profile shell folders. Create or export the layout file on an existing reference device and include the file in your package (for example from C:\Users<ReferenceUser>\AppData\Local\Microsoft\Windows\Shell\LayoutModification.json), then copy it with Download Content and reference it with $PackageRoot. |
| Configure Windows Keyboard Layout |
Sets the keyboard layouts used by Windows itself, the sign-in screen and every user who signs in for the first time afterwards. Users who already have a profile on the machine keep their own keyboard layouts and have to change them themselves under Settings - Time and language. |
| Configure Windows Language |
Installs a Windows language and makes it the language of Windows itself, the sign-in screen, and every user who signs in for the first time afterwards. Users who already have a profile on the machine keep their own language and have to change it themselves under Settings - Time and language. If you install the language from a CAB file delivered with the package, add the Download Content brick first. |
| Configure Windows Time Zone |
Changes the Windows time zone on the device. |
| Configure Windows Update |
Configures Windows Update policies, including WSUS settings, update deferral, and restart behavior. Best practice: enable Use WU Server and set WUServer/WUStatusServer when updates must come from internal WSUS instead of Microsoft Update. |
| Enable Out Of Box Experience (OOBE) |
Enables Windows Out Of Box Experience (OOBE) on next boot. |
| Install All Windows Updates |
Installs all applicable updates from the Windows Update Client. If pending reboot is detected, the brick exits with retry later. |
| Join Domain |
Joins the computer to an Active Directory domain. |
| Remove Background |
Removes the desktop and lock screen wallpaper, reverting to default Windows background. This will set the lock screen and desktop wallpapers to the default images provided by Windows, effectively removing any custom wallpapers that were previously set. |
| Set Background |
Sets the desktop and lock screen wallpaper to specified images. Both wallpapers can be set at the same time or individually. Supported image formats are .jpg, .jpeg and .png. |
| Unjoin Domain |
Unjoins the computer from Active Directory domain. |
| Update Windows Group Policy |
Performs a Group Policy update for both Computer and User targets using gpupdate /force |
| Windows Configure Right Click Menu |
Configures Windows 11 right-click menu behavior. Enable classic view for Windows 10 style context menu or disable it for the default Windows 11 menu. |
| Windows Tray Icon Pin |
Pins a tray icon for the selected executable name. |
| PowerBrick |
Description |
| Delete Registry Key |
Deletes a specified registry key from the Windows registry. You can specify the root registry hive and the full path of the registry key to be deleted. This can be useful for cleaning up registry entries that are no longer needed or for removing keys that may be causing issues. |
| Delete Registry Variable |
Deletes a specified registry variable from the local machine. This can be useful for cleaning up registry entries that are no longer needed or for removing sensitive information. |
| Import Registry File |
Imports a .reg file and applies its settings to HKEY_LOCAL_MACHINE and all user profiles (HKEY_CURRENT_USER). This can be useful for deploying registry configurations across multiple user profiles. |
| Set Registry Value |
Sets a registry value with specified name, value and datatype at a specified path in the registry. The registry value can be set for the current user or all users on the endpoint including new users depending on the selected registry hive. |
| PowerBrick |
Description |
| Backup BitLocker Recovery Key |
Backs up existing BitLocker recovery passwords on a volume to on-premises Active Directory and can optionally write the passwords to the job log. |
| Configure Power Settings |
If a .pow file exists in $PackageRoot, the file is imported and all other options are ignored. If no .pow file exists, this brick can set power scheme, sleep timeout, hibernate timeout, power button action and lid close action. |
| Disable BitLocker |
Starts BitLocker decryption on a selected volume and can optionally write the current recovery password to the job log before protection is disabled. |
| Register DLL |
Registers a DLL file or all DLL files within a specified directory using the regsvr32 command. This PowerBrick can be used to register COM components during a package installation. |
| Remove Firewall Rule |
Removes one or more Windows Firewall rules by display name or internal rule name. Use DisplayName to target rules as shown in Windows Firewall with Advanced Security, or use Name to target a rule by its internal identifier. If the specified rule does not exist, the brick completes without error. |
| Reset Windows Update |
Removes Windows Update policy registry settings and restarts the Windows Update service so Windows defaults apply again. |
| Resume BitLocker |
Resumes BitLocker protection on a selected volume after a suspension period. |
| Set Firewall Rule |
Creates a Windows Firewall rule if it does not exist, or updates the existing rule when found by Name. You can use Get-NetFirewallRule -All to see all rules. |
| Sleep Script |
Executes a PowerShell script that causes the system to pause or sleep for a specified number of seconds, allowing you to introduce a delay in your automation workflows or scripts. |
| Suspend BitLocker |
Suspends BitLocker protection on a selected volume for a configurable number of reboots. |
| Terminate Process |
This brick will terminate a process on the local system. |
| Unregister DLL |
Unregisters a DLL file or all DLL files within a specified directory using the regsvr32 command. This PowerBrick can be used to unregister COM components during a package uninstallation. |
| Verify System Requirements |
Verifies that the device meets specified system requirements such as operating system version, free disk space, installed updates, power supply connection, network connection, and presence of specific Windows services. The brick can be configured to either fail or retry execution later if the requirements are not met. |
| Wait For Process To End |
Waits for a specified process to exit before proceeding. This can be useful in scenarios where you need to ensure that a particular application or service has completed its tasks before moving on to the next step in your workflow. |
| Wait For Process To Start |
Waits for a specified process to start within a given timeout period. This can be useful in scenarios where you need to ensure that a particular application or service is running before proceeding with further actions. |
