Windows 11 on Margrop Blog

Stop Installing Another PC Cleaner: What Desktop Software Can an AI Agent Actually Replace?

Sun, 19 Jul 2026 22:00:00 +0800

The short answer

An AI Agent can replace many desktop utilities whose main job is clicking the same buttons over and over. It does not turn every application into a chat box, and it is not a magical “computer doctor.” Its real advantage is orchestration: it can inspect the machine, understand the goal, combine built-in tools, execute a sequence, and explain the evidence.

Across five categories—file conversion, junk scanning, performance optimization, configuration changes, and computer repair—the replacement level is different. File conversion and reporting are highly automatable. Performance work and configuration changes are semi-automatic. Hardware repair remains a human job, with the Agent acting as a diagnostic assistant.

The safety rule for every script in this article is simple: read first, write second; back up first, change second; verify before claiming success. All three scripts are local-only and start in report mode. Destructive actions require an explicit flag and a second confirmation.

Stop Running rsync Blindly: Preview Differences Before a Safe Incremental Sync

Sat, 11 Jul 2026 13:30:00 +0800

The short answer

The best rsync habit is not memorizing more switches. It is separating every risky job into two stages: generate a dry-run plan first, review it, and only then perform the real incremental sync. Deletion should be a separate, explicit permission rather than a hidden default.

The common rsync -n -avz --delete --out-format="%n" pattern can list paths that may change, but %n only preserves the name. A safer machine-readable plan uses --itemize-changes together with %i, so each line identifies an addition, update, deletion, or metadata change.

Don't Let Your Mac mini Gather Dust: Run Agents 24/7 from Windows

Sat, 11 Jul 2026 04:00:00 +0800

The short answer

If Windows is your everyday platform but a low-power Mac mini stays on to run OpenClaw, HermesAgent, or macOS-only automation, you do not need to dedicate another monitor, keyboard, and mouse to it. Treat the Mac mini as a quiet Agent server. macOS already includes Screen Sharing, and RealVNC Viewer on Windows can take over the desktop whenever configuration, upgrades, or troubleshooting require a GUI.

This is especially useful in a Windows-first home or studio where the Mac mini runs continuously at relatively low power while the Windows machines remain the daily workstations. The installation is rarely the difficult part. Most failures come from Screen Sharing, user authorization, VNC credentials, network reachability, sleep behavior, or services that do not recover after a restart.

One rule matters more than every convenience tweak in this guide: do not expose TCP port 5900 directly to the public Internet. A same-LAN connection is the simplest starting point. For access across networks, first join a self-hosted VPN or another controlled private network, and only then connect to the Mac.

Stop Treating Passkeys as SSH Passwords: The Right Way to Use SSH Keys and Phone/Desktop Passkeys

Tue, 30 Jun 2026 09:30:00 +0800

Short version

SSH passwordless login and passkeys on phones, Macs, and Windows PCs both use the public-key idea, but they are not the same tool. SSH keys are for logging in to servers, Git remotes, jump boxes, and automation endpoints. Passkeys are for signing in to websites, apps, and account systems. They are like two modern key rings: one opens the machine-room door, the other opens your online account door. The cryptographic idea is related, but the locks are different.

The practical rule is simple: generate a separate SSH key on each client device, keep the private key only on that device or inside a hardware security key, and put only the public key on the server. Verify public-key login before disabling password login. Use passkeys through iPhone, Android, macOS 26, Windows 11, system password managers, or hardware security keys for website and app sign-in. Do not try to paste a phone passkey into authorized_keys. This post includes one-click scripts for Windows 11, Ubuntu 26.04, and macOS 26, plus a manual automation path and an Agent-driven configuration path. The examples do not depend on any third-party service and do not contain real internal addresses, full computer names, private domains, or secrets.

Stop Clicking Update One App at a Time: Let an Agent Upgrade Common Software on Windows 11, Ubuntu 26.04, and macOS 26

Sun, 28 Jun 2026 08:58:00 +0800

Short version

Updating everyday software is painful not because the commands are impossible, but because the update sources are scattered across several worlds. Windows 11 has WinGet, Microsoft Store, and vendor installers. Ubuntu 26.04 has apt, snap, flatpak, and service restarts. macOS 26 has Software Update, App Store, Homebrew, and applications downloaded outside the store. A human can easily miss something. An AI Agent can help, but only if you give it boundaries.

My recommendation is to treat the Agent as an update operator: inventory first, dry-run second, execute third, verify last. This article provides three one-command scripts for Windows 11, Ubuntu 26.04, and macOS 26. They do not depend on third-party update assistants or cloud services. They call only built-in update tools and package managers already installed and configured on the machine. The examples contain no real private address, full computer name, private domain, token, or key.

Is Your Computer Always Full? Use an AI Agent to Safely Clean Junk Files on Windows 11, Ubuntu 26.04, and macOS 26

Sun, 28 Jun 2026 07:15:00 +0800

Short version

Junk cleanup is risky not because it is hard to delete files, but because it is easy to delete too much. On Windows 11, Ubuntu 26.04, and macOS 26, the safe cleanup targets are usually temporary directories, package caches, old logs, recycle bin or trash contents, and files that can be regenerated. A cleanup script should not casually touch documents, photos, browser profiles, keys, certificates, virtual machine images, or application data.

This article gives you two paths: manual automation, where you run the scripts yourself, inspect the dry-run output, and then explicitly enable deletion; and Agent-driven automation, where Codex, Claude, OpenClaw, HermesAgent, or another AI Agent performs the same scan, review, execution, and verification flow for you. The three scripts cover Windows 11, Ubuntu 26.04, and macOS 26. They do not depend on third-party services, do not download cleanup utilities, and do not contain real private addresses, computer names, private domains, or secrets.

Chrome Ate 4GB of Disk Space? Delete the Local AI Model and Stop It Coming Back

Sat, 27 Jun 2026 23:00:00 +0800

Short version

Some Google Chrome installations now download several gigabytes of local generative AI model data in the background. This is usually not malware and not a broken cache. It is Chrome preparing on-device AI models for browser and web features. Deleting the folder only frees disk space temporarily. The durable fix is to disable the local GenAI foundational model download with Chrome policy, then remove the already downloaded model folders.

This guide covers Windows 11, Ubuntu 26.04, and macOS 26. It includes one-click scripts, manual steps, and an agent prompt you can hand to Codex, Claude, OpenClaw, Gemini CLI, or another local operator. The scripts use native OS policy mechanisms and Chrome’s documented policy. They do not depend on third-party services and do not include real IP addresses, hostnames, internal domains, or secrets.

Windows 11/10 Background Autostart: Run frp and EasyTier Unattended Without Third-Party Wrappers

Sat, 27 Jun 2026 17:11:00 +0800

Short version

If you want frp, EasyTier, a sync agent, a collector, a bot, or a proxy daemon to start automatically on Windows 11/10, the key is not “where can I hide this command?” The key is “which native service manager owns its lifecycle?” This article is about unattended background services, not ordinary desktop login apps.

On Windows, the first decision is whether the executable is a real Windows Service. Common command-line daemons such as frp and EasyTier are usually better handled by Task Scheduler at system startup, because it is built in and does not require NSSM, WinSW, or another wrapper.

I will show two paths: manual configuration, for understanding every moving part, and agent / one-click automation, for cases where you already know where the binary and config file live. The scripts are self-contained, use built-in OS mechanisms, do not download third-party wrappers, and do not include real addresses, hostnames, private domains, or secrets.