PowerBricks

PowerBricks are the building blocks you drag onto an Application Manager package or Automation workflow. This reference lists every PowerBrick currently available in Prod, grouped by category.

Note

Any parameter value can use the PowerPack global variables (for example $global:Packageroot), and the Execute PowerShell Snippet brick gives you the full PowerShell Scripting Library ($cs.* helpers). In CapaOne there is no kit folder — files live directly in $global:Packageroot.

Browser settings

PowerBrick	Description
Add Microsoft Edge Extension	Adds an extension for Microsoft Edge using the ExtensionSettings policy. This enables Edge Extensions to be installed and managed like applications, enabling extensions to be pushed to specific devices or users alongside existing GPO/Intune extension policies.
Remove Microsoft Edge Extension	Removes an extension from Microsoft Edge ExtensionSettings policy. This removes the extension from the policy while keeping other extensions intact. If no extensions remain, the policy is removed completely.

Download

PowerBrick	Description
Download Content	Download the content of the application

File and directory

PowerBrick	Description
Copy Directory	Copy a directory from source to destination. This PowerBrick can be used to copy files during a package installation or for general file management tasks.
Copy Directory To All User Profile Directories	Copy a directory to all user profile directories
Copy File	Copy a file from one location to another
Copy File To All User Profile Directories	Copy a file to all user profile directories
Create Directory	Create a directory at the specified path. This PowerBrick can be used to create directories during a package installation or for general file management tasks.
Create Shortcut	Creates a shortcut on the desktop for a specified target file or application, with options for customizing the shortcut’s name, icon, and arguments.
Delete Directory	Deletes a directory and its contents from the local file system.
Delete Directory From All User Profile Directories	Deletes a specified directory from all user profile directories on the local machine. This can be useful for cleaning up application data or temporary files that are stored in user profiles.
Delete File	Delete a file
Delete File From All User Profile Directories	Delete a file from all user profile directories
Extract Archive	Extracts .zip, .rar, .7z and other archive formats. Non-.zip formats require 7-Zip.
Zip Directory	Creates a .zip archive from a source directory.

Installer

PowerBrick	Description
Activate Process Execution At First User Logon	Configures Windows Active Setup so a script or program is executed once for each user at their first login
Deactivate Process Execution At First User Logon	Removes or disables an Active Setup entry that was created to execute a process at first user logon. You can specify the Active Setup entry by its unique identifier (ID). If you choose to disable the Active Setup entry instead of removing it, the entry will remain in the registry but will be marked as disabled, preventing the associated process from executing at user logon. This can be useful if you want to temporarily stop the execution without deleting the configuration entirely.
Execute Process	Executes a specified process with given arguments and options. This PowerBrick allows you to run any executable or command-line tool on the target machine, providing flexibility for various use cases such as software installation, system configuration, or running custom scripts.
Execute PSAppDeployToolkit Package	Execute a PSAppDeployToolKit package. The Invoke-AppDeployToolkit.exe file must be placed in the root of the folder. Remember to include the [Download Content] PowerBrick.
Install Driver	Installs a driver using PnPUtil. You can specify either a single .inf file or a directory containing multiple .inf files. If a directory is specified, all .inf files within it will be installed recursively.
Install EXE	Installs an application using an executable file. This brick allows you to specify the path to the executable, any necessary command-line arguments, and various execution options such as waiting for completion and user context. It also includes the ability to define return code handling to determine the success or failure of the installation based on the process’s exit code.
Install Font	Installs one or more fonts on the system. Accepts a single font file (.ttf, .otf, .ttc) or a folder where all supported font files are installed.
Install Microsoft365	Downloads setup.exe automatically if it is not present in $PackageRoot and installs Microsoft 365 Apps using the Office Deployment Tool (ODT).
Install MSI	Installs an application using an MSI installer. You can also define return code handling to manage different outcomes of the installation process.
Install MSIX	Installs an MSIX package.
Install Windows Update	Install Windows Updates (.msu files) from a directory or a single .msu file
Uninstall EXE	Uninstall software using an EXE uninstaller
Uninstall Font	Removes one or more fonts from the system. Supports uninstall by source file or folder path, or directly by Font Registry Name. If both are provided, Font Registry Name takes precedence.
Uninstall MSI	Uninstalls applications installed with MSI by display name, publisher, version or product code. This PowerBrick can be used to uninstall applications installed with MSI by specifying the display name, publisher, version or product code. It is possible to use wildcards in the display name and publisher parameters to match multiple applications. If multiple applications match the specified criteria, all of them will be uninstalled.
Uninstall Program	Uninstall software using MSI, EXE or Appx/MSIX uninstallers. Supports DisplayName with wildcards, optional Publisher/Version filtering, or direct ProductCode uninstallation.
Uninstall Windows Update	Uninstall a Windows Update by KB number
Verify Application Installation	Verifies whether an application is installed by checking Add/Remove Programs entries and installed APPX packages, with optional version validation.

Permissions

PowerBrick	Description
Remove Directory Permissions	Removes permissions for a user or group on a specified directory.
Remove File Permissions	Remove permissions from a file
Remove Registry Permissions	Removes permissions for a user or group on a specified registry key.
Set Directory Permissions	Adds permissions for a specified user or group to a directory with a specified inheritance type.
Set File Permissions	Set permissions on a file
Set Registry Permissions	Adds permissions for a specified user or group to a registry key with a specified inheritance type.

Power brick

PowerBrick	Description
Execute PowerShell Snippet	Execute a piece of custom PowerShell code

Provisioning

PowerBrick	Description
Activate Windows	Activates Windows using either the original embedded product key or a provided product key.
CapaInstaller Install Agent	Installs the CapaInstaller agent. If CapaInstallerAgentSetup.exe and CapaInstaller agent.xml exist in $PackageRoot they are used, otherwise they are downloaded from FrontendURLInternal or FrontendURLPublic before install. Optionally sets PCType in registry before installation.
Configure Start Menu Layout	Configures Start Menu layout by copying a LayoutModification.json or LayoutModification.xml file into user profile shell folders. Create or export the layout file on an existing reference device and include the file in your package (for example from C:\Users<ReferenceUser>\AppData\Local\Microsoft\Windows\Shell\LayoutModification.json), then copy it with Download Content and reference it with $PackageRoot.
Configure Windows Update	Configures Windows Update policies, including WSUS settings, update deferral, and restart behavior. Best practice: enable Use WU Server and set WUServer/WUStatusServer when updates must come from internal WSUS instead of Microsoft Update.
Enable Out Of Box Experience (OOBE)	Enables Windows Out Of Box Experience (OOBE) on next boot.
Install All Windows Updates	Installs all applicable updates from the Windows Update Client. If pending reboot is detected, the brick exits with retry later.
Join Domain	Joins the computer to an Active Directory domain.
Remove Background	Removes the desktop and lock screen wallpaper, reverting to default Windows background. This will set the lock screen and desktop wallpapers to the default images provided by Windows, effectively removing any custom wallpapers that were previously set.
Set Background	Sets the desktop and lock screen wallpaper to specified images. Both wallpapers can be set at the same time or individually. Supported image formats are .jpg, .jpeg and .png.
Unjoin Domain	Unjoins the computer from Active Directory domain.
Update Windows Group Policy	Performs a Group Policy update for both Computer and User targets using gpupdate /force
Windows Tray Icon Pin	Pins a tray icon for the selected executable name.

Registry

PowerBrick	Description
Delete Registry Key	Deletes a specified registry key from the Windows registry. You can specify the root registry hive and the full path of the registry key to be deleted. This can be useful for cleaning up registry entries that are no longer needed or for removing keys that may be causing issues.
Delete Registry Variable	Deletes a specified registry variable from the local machine. This can be useful for cleaning up registry entries that are no longer needed or for removing sensitive information.
Import Registry File	Imports a .reg file and applies its settings to HKEY_LOCAL_MACHINE and all user profiles (HKEY_CURRENT_USER). This can be useful for deploying registry configurations across multiple user profiles.
Set Registry Value	Sets a registry value with specified name, value and datatype at a specified path in the registry. The registry value can be set for the current user or all users on the endpoint including new users depending on the selected registry hive.
Windows Configure Right Click Menu	Configures Windows 11 right-click menu behavior. Enable classic view for Windows 10 style context menu or disable it for the default Windows 11 menu.

System

PowerBrick	Description
Configure Power Settings	If a .pow file exists in $PackageRoot, the file is imported and all other options are ignored. If no .pow file exists, this brick can set power scheme, sleep timeout, hibernate timeout, power button action and lid close action.
Register DLL	Registers a DLL file or all DLL files within a specified directory using the regsvr32 command. This PowerBrick can be used to register COM components during a package installation.
Remove Firewall Rule	Removes one or more Windows Firewall rules by display name or internal rule name. Use DisplayName to target rules as shown in Windows Firewall with Advanced Security, or use Name to target a rule by its internal identifier. If the specified rule does not exist, the brick completes without error.
Reset Windows Update	Removes Windows Update policy registry settings and restarts the Windows Update service so Windows defaults apply again.
Set Firewall Rule	Creates a Windows Firewall rule if it does not exist, or updates the existing rule when found by Name. You can use Get-NetFirewallRule -All to see all rules.
Sleep Script	Executes a PowerShell script that causes the system to pause or sleep for a specified number of seconds, allowing you to introduce a delay in your automation workflows or scripts.
Terminate Process	This brick will terminate a process on the local system.
Unregister DLL	Unregisters a DLL file or all DLL files within a specified directory using the regsvr32 command. This PowerBrick can be used to unregister COM components during a package uninstallation.
Verify System Requirements	Verifies that the device meets specified system requirements such as operating system version, free disk space, installed updates, power supply connection, network connection, and presence of specific Windows services. The brick can be configured to either fail or retry execution later if the requirements are not met.
Wait For Process To End	Waits for a specified process to exit before proceeding. This can be useful in scenarios where you need to ensure that a particular application or service has completed its tasks before moving on to the next step in your workflow.
Wait For Process To Start	Waits for a specified process to start within a given timeout period. This can be useful in scenarios where you need to ensure that a particular application or service is running before proceeding with further actions.

User management

PowerBrick	Description
Add User To Local Group	Adds a user account (local or domain) to one or more local groups.
Change Local User Password	Changes the password for an existing local user account.
Create Local User	Creates a local user account, or updates the password if the user already exists. Optionally ensures the user is added to one or more local groups.
Delete Local User Account	Deletes a local user account if it exists.
Remove User From Local Group	Removes an existing user account from a specified local group.

Windows service

PowerBrick	Description
Configure Windows Service	Configures a Windows service by changing its display name, description, startup type, status, and logon account
Start Windows Service	Start a Windows service
Stop Windows Service	Stop a Windows service