This script creates a new ad user based on the following:
I went recently to a gathering of powershell enthusiasts and the discussion started about the tools we are using. One of the tools that got my attentions is ISE Steroids. I will try to explain why I think this is such a great add-on for use powershell users.
First of all, I am not a 24/7 powershell user. I manage windows systems and use a variety of different tools for this and of course I still use the mouse more frequently then the console. There is still a bright future for me somewhere š
For some years I use powershell and I force myself to use the standard tools as they are everywhere available. Every system I manage has Powershell console and ISE on it.
This is untill the last meeting. When I heard of ISE Steroids and saw that the “big users” are enteusiast about it and use it on a daily bases, I started to download the tool for myself and started to view my own code with ISE Steroids.
This was an eye opener for me.
To receive detailed information from the tracking log use Get-MessageTrackingLog
|
1 |
Get-MessageTrackingLog -recipients myname@company.org -sender name@othercompany.org -Start (get-date).AddDays(-2) |select * |Out-GridView |
To uninstall software from multiple computers you must determine the name of the software you want to uninstall.
Get the list of installed applications from a computer:
|
1 |
Get-WmiObject -Class Win32_Product | select name |
If you want to see the programs on a remote computer user the -computername option.
Find the program you want to uninstall, for example “Sophos Patch Agent” from 3 computers:
|
1 2 3 4 5 6 |
$collection = 'wks001','wks002','wks003' foreach ($item in $collection) { $app = Get-WmiObject -Class Win32_Product -Filter "Name = 'Sophos Patch Agent'" -ComputerName $item $app.Uninstall() } |
This will uninstall the software (one at a time) from the computers.
Install software on multiple computers simultaneous.
Also, first make sure the server from which you install the software accepts the CredSSP connection.
|
1 |
icm { Enable-WSManCredSSP -Role Server -Force} -ComputerName NameOfTheServer |
You need to use CredSSP for authentication because Powershell has a build-in protection against multi-hop use.
Run the next code to install the software.
|
1 2 3 4 5 |
$cred = Get-Credential $allpcs = Get-ADComputer -Filter {(Name -like "wks*") -and (enabled -eq "true")} | Select-Object -expand Name Enable-WSManCredSSP -Role client -DelegateComputer $allepcs -Force icm {\\server\share\Setup.exe} -Computer $allpcs -Authentication Credssp -Credential $cred |
First check if there is enough diskspace to expand the files to there original size, plus the size of the current deduplication database.
remove the optimization from the volume
|
1 |
Start-DedupJob -Volume D: -Type Unoptimization |
See the results of the running Job:
|
1 |
Get-Dedup-Job |
Next, clean up the database. For this, deduplication must be turned on.
|
1 |
Start-DedupJob D: -Type GarbageColletion -full |
To turn on deduplication you can explude folders so the deduplication is running but does not do any dedup work.
|
1 2 |
Set-DedupVolume -Volume D: -ExludeFolder d:\dfs Enable-DedupVolume -Volume D: |
When all is done, disable dedup and remove the feature.
|
1 2 |
Disable-DedupVolume -Volume D: Remove-WindowsFeature FS-Data-Deduplication |
Script to Get Lockedout events from the security eventlog from the PDC
|
1 2 |
$DomainController = Get-ADDomainController -Service PrimaryDC -Discover Get-WinEvent -ComputerName $DomainController -FilterHashtable @{logname='security';ID=4740} |
Powershell command to display the users who uses Active-sync to connect with smartphones to the exchange server.
|
1 2 3 4 |
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://cas001/PowerShell/ -Authentication Kerberos Import-PSSession $Session Get-CASMailbox -Filter {hasactivesyncdevicepartnership -eq $true -and ActiveSyncEnabled -eq $true} |
to count the users, place the result in a variable an use count.
|
1 2 |
$users = Get-CASMailbox -Filter {hasactivesyncdevicepartnership -eq $true -and ActiveSyncEnabled -eq $true} $users.count |
Change the following Registry key value of GeneralizationState to 7
HKLM\System\Setup\Status\SysprepStatus
Change the following Registry key value of SkipRearmĀ to 7
HKLM\SOFTWARE\Microsoft\Windows NT\CurentVersion\SL\SkipRearm
(For Windows 7)
HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\SoftwareProtectionPlatform
Step-by-step instructions to migrate the DHCP server role from a windows 2008 server to a 2012R2 server with Powerhsell.
First install the migration tools on the targetĀ and the sourceĀ server.
|
1 2 3 4 |
Install-WindowsFeature Migration āComputerName <computer_name> #to create a package of the same version for the old computer: c:\windows\syste32\servermigrationtools\SmigDeploy.exe /package /architecture amd64 /os WS08R2 /path <deployment folder path> |
Import the servermigration tools on the sourceĀ server (2008r2 in this case). Make sure the Migration tools are not alredy installed on the computer.
|
1 |
.\smigdeploy |
Next, export the settings on the sourceĀ server
|
1 2 3 4 |
new-item c:\export -itemtype directory Stop-Service DHCPserver Export-SmigServerSetting -featureID DHCP -User All -Group -path <storepath> -Verbose |
Next, copy theĀ svrmig.mig file to the targetĀ server.
On the targetĀ server execute the following commands
|
1 |
Import-SmigServerSetting -featureid DHCP -User All -Group -Force -path <storepath> -Verbose |
Reboot the target server
Autorise the DHCP server in the AD
Discard the source DHCP server.
The command to show detailed information about the configuration of the WDS server is:
|
1 |
WDSUtil /get-server /show:config |
This will give you the following information about the server:
When you approve a device in WDS you may sometimes need to restart the process and change its name etc…
Simply deleting the computer account will give an error next time you try and pxe boot. You will also need to run the following command to clear all local cached copies of approved machines from the WDS server.
|
1 |
WDSUTIL /delete-AutoAddDevices /devicetype:ApprovedDevices |
content from:Ā https://community.spiceworks.com/how_to/23956-remove-approved-devices-from-windows-deployment-services
To Copy the users from a ADgroup to another ADgroup or duplicate the contents of a group, us the commandlet Add-ADGroupMember.
You cannot pipe the contents of Get-ADGroupMember to this commandlet as it does not accept pipeline imput. You can check this in the help of the command.
|
1 2 3 4 5 6 7 8 9 |
PS C:\> get-help Add-ADGroupMember -Parameter members .... You cannot pass objects through the pipeline to this parameter. Required? true Position? 2 Default value Accept pipeline input? false Accept wildcard characters? false |
For this to work correctly you must place the content in a variable with Get-ADGroupMember and use this in Add-ADGroupMember.
These two command are:
|
1 2 3 |
PS C:\>$members = Get-ADGroupMember "SourceGroupName" PS C:\> foreach ($i in $members){Add-ADGroupMember -Identity "DestinationGroupName -Members $i} |
This script is used for counting the number of active backups in Veeam and write this number in an XML file for further reference. I use Netcrunch as a monitoring tool and it can proces the content of XML files.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 |
#script for counting the number of running backups in Veeam and # place this number in a XML file for processing in Netcrunch #Load the Veeam Powershell commandlets Add-PSSnapin Veeampssnapin #get all jobs from Veeam $jobs= Get-VBRJob #get running jobs $runningjobs = $jobs |where{$_.isrunning -eq "True" } #count running jobs $countjobsrunning = $runningjobs.count #Read the XML file [xml]$xmlcontent = get-content c:\scripts\runningbackups.xml #Adjust and save the XML file $xmlcontent.ncopenmon.counters.counter.'#text' = "$countjobsrunning" $xmlcontent.Save("c:\scripts\runningbackups.xml") |
On the internet I found a nice looking script for creating a useraccount in the AD.
I have not tested this script so use at your own risk.