On windows, sfc /scannow, dism /Online /Cleanup-Image /RestoreHealth, and dism /Online /Cleanup-Image /StartComponentCleanup /ResetBase are pretty much required to prevent that mess from blowing up...
I've also had to use the command line to do some Exchange 365 stuff like forcing immediate archive population on 100% full inboxes whose users refused to delete any emails from...