Following the root certificate expiration explained at:
Is there a way to update root certificates on a Splunk 4.2 Forwarder running on a "legacy" Windows 2000 server without PowerShell support?
You could do it with a batch file. Create the batch script, deploy it via app, and put a scripted input in the app that runs the batch file one time per hour (for example), and then deploy the app, wait an hour, and finally remove the app.
Or sometimes I'll make the script run every 5 minutes and put code in the script to disable the scripted input after execution.
Another fine solution would be to write a c sharp (C#) app which is called by a batch file.
console access is not an issue, so the scripted input suggestion does not help here 😉
So the challenge would be to convert the provided PowerSell script to a standard batch file: