You Should Be Using PowerShell Aaron Kaiser Senior Technology Support Specialist Parkway School District

Transcription

1 You Should Be Using PowerShell Aaron Kaiser Senior Technology Support Specialist Parkway School District

2 Why PowerShell? Most modern Microsoft GUI s are built upon PowerShell A number of third party applications are either built on PowerShell or have snap ins that leverage PowerShell VMware vsphere PowerCLI Citrix Studio Fairly straightforward syntax Absolute Power!

3 PowerShell vs VB Script PowerShell VB Script Get ChildItem Path C:\ File Select Object Directory,Name,Length Export Csv C:\Files.csv Append NoTypeInformation Set objfs = CreateObject("Scripting.FileSystemObject") Set objfile = objfs.createtextfile( C:\Files.csv ) Wscript.sleep(2000) 'Pause while file is being created Set objfile = objfs.getfile( C:\Files.csv ) Const ForWriting = 2 Set outputfile = objfs.opentextfile( C:\Files.csv, ForWriting) Set objfolder = objfs.getfolder( C:\ ) Set colfiles = objfolder.files For Each objfile in colfiles OutputFile.Write C:\, & objfile.name &, & objfile.size Wscript.Echo C:\, & objfile.name &, & objfile.size Next OutputFile.Close

4 Before You Begin Update PowerShell to version 4.0 $PSVersiontable use to determine version currently installed Improved performance and functionality Auto load modules Execution Policy Set to Restricted by default RemoteSigned if you wish to be fairly safe Unrestricted if you are confident and/or crazy PS1 extension Setting up the Console Window Launching as Administrator

5 PowerShell Tools Console Basic interface Limited editing capabilities Copy and paste are not easy ISE (Integrated Scripting Engine) Best used for scripting Uses normal copy and paste commands Helpful features Third Party Tools Various paid and free tools PowerGUI Compile script into an EXE

6 Cmdlets Uses verb noun naming convention Simple Starters Get Process Get Service Get Date Get Command Verb or Noun Wildcards Parameters

7 Get Help Very Important/Helpful Provides Description, Syntax, and Even Examples ShowWindow Parameter Online Parameter Wild Card Search

8 The Pipeline Used to connect commands together Provides a way to pass output to another command Uses the pipe symbol Example: Get Process Out File c:\process.txt

9 $Variables Where the true scripting power of PowerShell lies Always starts with a $ Can hold a variety of information Text Numbers Lists

10 Punctuation Backtick ` Escape character Single Quotes Contains string values Does not look for escape character or variables Double Quotes Contains string values Looks for escape character or variables Curly Braces { } Contain script blocks Variable name that contains spaces or illegal characters Parentheses ( ) Like in math, defines order of execution Hashtag # Comment character Any characters following # are ignored Similar to REM in DOS

11 Parkway Example #1 How Do You Delete Over 17,000 User Folders?

12 $schools "cms", "sms") foreach ($school in $schools) { Remove-Item "\\student1\$school\*[0-9][0-9][0-9][0-9]" -force -recurse }

13 Parkway Example #2 How Do You Add All These MAC Addresses As Active Directory Users?

14 import-module activedirectory import-csv c:\adimport.csv % {New-ADUser -GivenName $_.Name.ToLower() -Name $_.Name.ToLower() -DisplayName $_.Name.ToLower() -SamAccountName $_.Name.ToLower() -UserPrincipalName ($_.Name.ToLower() + "@local.com") -Description $_.Description -Path $_.Path -Enabled $True -AccountPassword (ConvertTo-SecureString $_.Name.ToLower() -AsPlainText -force) -PasswordNeverExpires $True} import-csv c:\adimport.csv % {Add-ADGroupMember -Identity Wireless-MAC -Member $_.Name.ToLower()}

15 # Script to create Active Directory accounts Import-Module ActiveDirectory $Mac = Read-Host -Prompt "Enter The MAC Address" $Name = $Mac.ToLower() $Desc = Read-Host -Prompt "Enter The Machine Name. It Must Start With The School's Three Digit Code." $OU = $Desc.Substring(0,3) #$OU = Read-Host -Prompt "Enter The School's Three Digit Code" If ([adsi]::exists("ldap://ou=$ou,ou=ws-macaddr,dc=local,dc=com") -eq $False){ write-warning "The School Code is incorrect"} Elseif (Get-ADUser -Filter {samaccountname -eq $Name}){ write-warning "The User already exists"} Elseif ($Name -notlike '????????????'){ write-warning "The MAC address is the wrong length"} Else{ New-ADuser -GivenName $Name -Name $Name -DisplayName $Name -SamAccountName $Name -UserPrincipalName ($Name + "@local.com") -Description $Desc -Path ("OU=" + $OU + ",OU=ws-macaddr,DC=local,DC=com") -Enabled $True -AccountPassword (ConvertTo-SecureString $Name -AsPlainText -force) -PasswordNeverExpires $True Add-ADGroupMember -Identity Wireless-MAC -Member $Name write-host "The account has been created."} Read-Host -Prompt "Press Enter to exit"

16 Parkway Example #3 How Do You Move From Novell Shares To Microsoft Shares Without Losing Your Mind?

17 $letters "b*", "c*", "d*", "e*", "f*") Foreach ($letter in $letters) { $users = get-aduser -Filter {Surname -like $letter} -SearchBase "OU=staff,DC=local,DC=com" Select-Object -ExpandProperty SamAccountName Foreach ($user in $users) { If ($user -like "a*") {$path = "\\staff1\ac\a"} Elseif ($user -like "b*") {$path = "\\staff1\ac\b"} Elseif ($user -like "c*") {$path = "\\staff1\ac\c"} Elseif ($user -like "d*") {$path = "\\staff2\df\d"} Elseif ($user -like "e*") {$path = "\\staff2\df\e"} Elseif ($user -like "f*") {$path = "\\staff2\df\f"} Elseif ($user -like "g*") {$path = "\\staff3\gj\g"} Elseif ($user -like "h*") {$path = "\\staff3\gj\h"} Elseif ($user -like "i*") {$path = "\\staff3\gj\i"} Elseif ($user -like "j*") {$path = "\\staff3\gj\j"} Elseif ($user -like "k*") {$path = "\\staff1\km\k"} Elseif ($user -like "l*") {$path = "\\staff1\km\l"} Elseif ($user -like "m*") {$path = "\\staff1\km\m"} Elseif ($user -like "n*") {$path = "\\staff2\nr\n"} Elseif ($user -like "o*") {$path = "\\staff2\nr\o"} Elseif ($user -like "p*") {$path = "\\staff2\nr\p"} Elseif ($user -like "q*") {$path = "\\staff2\nr\q"} Elseif ($user -like "r*") {$path = "\\staff2\nr\r"} Elseif ($user -like "s*") {$path = "\\staff3\sz\s"} Elseif ($user -like "t*") {$path = "\\staff3\sz\t"} Elseif ($user -like "u*") {$path = "\\staff3\sz\u"} Elseif ($user -like "v*") {$path = "\\staff3\sz\v"} Elseif ($user -like "w*") {$path = "\\staff3\sz\w"} Elseif ($user -like "x*") {$path = "\\staff3\sz\x"} Elseif ($user -like "y*") {$path = "\\staff3\sz\y"} Elseif ($user -like "z*") {$path = "\\staff3\sz\z"} Else {continue} $newpath = Join-Path \\staffaf\af -childpath $user new-item $newpath -type directory $acl = Get-Acl $newpath $permission = "Local\$user","FullControl", "ContainerInherit, ObjectInherit", "None", "Allow" $accessrule = New-Object System.Security.AccessControl.FileSystemAccessRule $permission $acl.setaccessrule($accessrule) $acl Set-Acl $newpath robocopy $path\$user \\staffaf\af\$user /copy:dat /e /mir /fft /mt:8 /zb /nfl /ndl /ns /nc /np /r:5 /w:5 /log+:c:\aflog.txt }}

18 cmd /c dir "\\staff3\sz\ssd\*" /b /a:d > c:\ssd.txt $Users = Get-Content c:\ssd.txt ForEach ($user in $users) { $t = Get-ADUser -Filter 'SamAccountName -eq $user' -SearchBase "OU=staff,DC=local,DC=com" Select-Object -ExpandProperty Surname If ($t -like "a*") {$mpath = "\\staffaf\af"} Elseif ($t -like "b*") {$mpath = "\\staffaf\af"} Elseif ($t -like "c*") {$mpath = "\\staffaf\af"} Elseif ($t -like "d*") {$mpath = "\\staffaf\af"} Elseif ($t -like "e*") {$mpath = "\\staffaf\af"} Elseif ($t -like "f*") {$mpath = "\\staffaf\af"} Elseif ($t -like "g*") {$mpath = "\\staffgl\gl"} Elseif ($t -like "h*") {$mpath = "\\staffgl\gl"} Elseif ($t -like "i*") {$mpath = "\\staffgl\gl"} Elseif ($t -like "j*") {$mpath = "\\staffgl\gl"} Elseif ($t -like "k*") {$mpath = "\\staffgl\gl"} Elseif ($t -like "l*") {$mpath = "\\staffgl\gl"} Elseif ($t -like "m*") {$mpath = "\\staffmr\mr"} Elseif ($t -like "n*") {$mpath = "\\staffmr\mr"} Elseif ($t -like "o*") {$mpath = "\\staffmr\mr"} Elseif ($t -like "p*") {$mpath = "\\staffmr\mr"} Elseif ($t -like "q*") {$mpath = "\\staffmr\mr"} Elseif ($t -like "r*") {$mpath = "\\staffmr\mr"} Elseif ($t -like "s*") {$mpath = "\\staffsz\sz"} Elseif ($t -like "t*") {$mpath = "\\staffsz\sz"} Elseif ($t -like "u*") {$mpath = "\\staffsz\sz"} Elseif ($t -like "v*") {$mpath = "\\staffsz\sz"} Elseif ($t -like "w*") {$mpath = "\\staffsz\sz"} Elseif ($t -like "x*") {$mpath = "\\staffsz\sz"} Elseif ($t -like "y*") {$mpath = "\\staffsz\sz"} Elseif ($t -like "z*") {$mpath = "\\staffsz\sz"} Else {continue} $newpath = Join-Path $mpath -childpath $user new-item $newpath -type directory $acl = Get-Acl $newpath $permission = "Local\$user","FullControl", "ContainerInherit, ObjectInherit", "None", "Allow" $accessrule = New-Object System.Security.AccessControl.FileSystemAccessRule $permission $acl.setaccessrule($accessrule) $acl Set-Acl $newpath robocopy \\staff3\sz\ssd\$user $mpath\$user /copy:dat /e /mir /fft /mt:8 /zb /nfl /ndl /ns /nc /np /r:5 /w:5 /log+:c:\ssdlog.txt }

19 Parkway Example #4 How do you change permissions to all the printers on your Microsoft Print Server?

20 $security = get-printer -computer printsvr "HPTEST" -full get-printer * -computer printsvr Foreach-Object {set-printer $_.name -computer printsvr -PermissionSDDL $security.permissionsddl}

21 Parkway Example #5 How do you check to see if your users have an actual home directory and fix it if they do not?

22 $OUs "OU=Grade07,OU=mid,OU=students,DC=local,DC=com", "OU=Grade08,OU=mid,OU=students,DC=local,DC=com") Foreach ($OU in $OUs){ $users = Get-ADUser -Filter * -SearchBase $OU -Properties * Select-Object samaccountname, HomeDirectory Foreach ($user in $users) { $u = $user.samaccountname $h = $user.homedirectory if(-not(test-path -Path $h)) { $u out-file c:\midmissing.txt -Append new-item -Path $h type directory $acl = Get-Acl $h $permission = "Local\$u","Modify", "ContainerInherit, ObjectInherit", "None", "Allow" $accessrule = New-Object System.Security.AccessControl.FileSystemAccessRule $permission $acl.setaccessrule($accessrule) $acl Set-Acl $h } else {continue}}}

23 Additional Resources Microsoft Virtual Academy Getting Started with PowerShell 3.0 Jump Start Advanced Tools & Scripting with PowerShell 3.0 Jump Start Using PowerShell for Active Directory Powershell.org Learn Windows PowerShell In A Month Of Lunches Saint Louis University Workforce Center Automating Administration with Windows PowerShell