Per-PC Winget exceptions, SYSTEM discovery, Dell outcomes and inventory.
Digitally signed Windows launcher and MSI installer
The release provides both the portable ZIP and an x64 MSI installer for per-machine and centrally managed deployment. MaintenanceToolkit.exe and the MSI are signed with a Certum code-signing certificate issued to Open Source Developer Luca Miselli and a trusted timestamp.
ZIP SHA-256
50DF8C1C20CDD0410B452132EE2E6A6AA0FE8457E91EC8AEC8C9E88EB36F981AMSI SHA-256
8E06282FD3859EC2B1F8911AFF8E2714F84254449BE41F64279E45A9D2A36054What it is
MT brings maintenance, updates and diagnostics into one coherent interface. It is designed for technicians and for people who want to keep a PC updated without blindly running a collection of commands.
Features
- Available as a portable ZIP or per-machine x64 MSI installer; no permanent agent is installed.
- Recommended native Windows launcher: MaintenanceToolkit.exe.
- Compatibility fallback: Avvia_Manutenzione.bat.
- Readable and auditable PowerShell core.
- Local logs, technical reports and warnings before system-changing operations.
- OEM updates through official Dell and HP tools, including controlled Dell Command Update installation when required.
- Separate BIOS update detection: MT never installs BIOS updates or restarts the computer automatically.
- A verified restore point before OEM updates, with safe reuse of a completed Windows point verified within the last 24 hours.
- No request to disable antivirus, SmartScreen or organizational policy.
Digital signature and SmartScreen
The Authenticode signature verifies the launcher publisher and integrity. It is valid and includes a Certum RFC 3161 timestamp.
Quick start
For manual use, the portable ZIP remains the recommended option. For managed local installation or Active Directory/GPO deployment, use the x64 MSI; centrally managed scheduling uses CREATE_TASK=0 so Group Policy owns the Scheduled Task.
- Download the ZIP from the official GitHub Release.
- Compare its SHA-256 with the value published above when you want to verify integrity.
- If Windows shows Unblock in the ZIP Properties dialog, use it before extraction.
- Extract the entire archive to a local folder.
- Start MaintenanceToolkit.exe and read the warnings before confirming operations. Use Avvia_Manutenzione.bat only as a compatibility fallback.
- When MT finishes, inspect riepilogo.txt to distinguish completed modules, warnings, skipped operations and errors.
Documentation
The guide below covers daily use and automation; the full technical documentation in the repository covers configuration, command-line options, logs, reports and administrative scenarios.
Daily use, command line and automation →
MSI installation and GPO deployment →
Dell and HP OEM update tutorial →
Privacy
No advertising, profiling or hidden telemetry. Logs and reports are created locally. Explicitly configured InventoryShare publishes inventory snapshots to an SMB share. Documented online checks and configured unattended execution can access the network without an interactive operator.
Features inherited from 4.0.6
- Machine-local Winget exceptions: exclude exact package IDs or block the entire module.
- Discovery and validation of the App Installer executable when Winget is missing from the SYSTEM PATH, introduced in 4.0.5.
- Dell apply.outcome reflects final verification: installed, remaining, deferred, restart required or failed verification.
- Exception evidence and partial coverage are preserved in the snapshot for DMT.
Hardware/software inventory, NVIDIA checks without download or installation, and OEM safeguards remain available. No automatic restart.
Inventory and reports
Inventory collects hardware, operating system, BIOS, network and installed software. JSON snapshots are stored under reports\; session logs and summaries under logs\PC-NAME\<session>\. Inventory also preserves maintenance outcomes and NVIDIA availability under gpuDrivers, for central consultation through DMT. -InventoryShare publishes the snapshot to the configured SMB share; it does not upload the entire logs directory.
Windows scope and servers
Full maintenance in 4.0.6 targets Windows client PCs. It is not validated for Windows Server and the runtime has no general server block. Explicitly scope deployment and GPO tasks to clients; do not rely on MT to exclude servers or domain controllers.
Maintenance Toolkit 4.1
The Languages menu (H) selects Italian, English, French, Spanish, German, Simplified Chinese or Japanese. The five new translations cover menus and 4.1 workflows; some historical diagnostics use English fallback. Documentation and the website are available in Italian and English.
MT updates, SYSTEM scheduling and standalone/GPO management →
4.1.2: verified installation detection fix
Malformed uninstall paths belonging to unrelated programs no longer block MT installation detection on Windows PowerShell 5.1. Invalid MT registrations remain blocked. Affected 4.1.1 installations need a verified manual MSI/ZIP upgrade. The final signed packages passed fresh MSI installation and manual MSI/ZIP upgrades from 4.0.6 and 4.1.1 on Windows 11 / PowerShell 5.1, installed SelfTest, data/task preservation, signed-script tamper rejection and locked-file ZIP recovery. No maintenance or automatic restart was executed. Windows 10, real GPO/corporate SMB and live selective Winget are not certified by these tests. GPO remains responsible for managed installations. Seven UI languages are available, with partial translation coverage and English fallback; documentation remains Italian/English. Earlier public packages remain unchanged.