{"id":2765,"date":"2019-05-01T20:13:21","date_gmt":"2019-05-01T20:13:21","guid":{"rendered":"http:\/\/microsoftgeek.com\/?p=2765"},"modified":"2019-05-01T20:17:13","modified_gmt":"2019-05-01T20:17:13","slug":"must-have-powershell-tool-for-sysadmins","status":"publish","type":"post","link":"https:\/\/microsoftgeek.com\/?p=2765","title":{"rendered":"Must have PowerShell Tool for SysAdmins"},"content":{"rendered":"\n

Hey Guys, as a Windows SysAdmin some of your primary tools is Active Directory and PowerShell. I want to share this tool I found online from Patrick Gruenauer – Author of https:\/\/sid-500.com\/<\/a> <\/p>\n\n\n\n

You can download the tool from here:<\/p>\n\n\n\n

https:\/\/sid-500.com\/2018\/05\/22\/active-directory-domain-services-section-version-1-1\/<\/a><\/p>\n\n\n\n

<\/p>\n\n\n\n

Active Directory Domain Services Section<\/h2>\n\n\n\n

What can we do with it? This is the question for this part. I wanna give you a foretaste. Here\u2019s the menu of version 1.1.<\/p>\n\n\n\n

\"1\"<\/figure>\n\n\n\n

The Subsections<\/h2>\n\n\n\n

1 \u2013 Forest | Domain | Sites Configuration<\/h3>\n\n\n\n
\"1.png\"<\/figure>\n\n\n\n

2 \u2013 List Domain Controller<\/h3>\n\n\n\n

Note that in this section you are also able to test the connectivity to your Domain Controller.<\/p>\n\n\n\n

\"2.PNG\"<\/figure>\n\n\n\n

3 \u2013 Replicate all Domain Controller<\/h3>\n\n\n\n

Tired of pressing replicate on all DC\u2019s? You\u2019ve come to the right place.<\/p>\n\n\n\n

\"3.PNG\"<\/figure>\n\n\n\n

4 \u2013 Show Default Password Policy<\/h3>\n\n\n\n

It\u2019s good to have an eye on your password settings\u2026<\/p>\n\n\n\n

\"4.PNG\"<\/figure>\n\n\n\n

5 \u2013 List Domain Admins<\/h3>\n\n\n\n
\"5.PNG\"<\/figure>\n\n\n\n

6 \u2013 List of Active GPOs<\/h3>\n\n\n\n
\"6.PNG\"<\/figure>\n\n\n\n

7 \u2013 List all Windows Clients (Client Operating System only)<\/h3>\n\n\n\n
\"7.PNG\"<\/figure>\n\n\n\n

8 \u2013 List all Windows Server<\/h3>\n\n\n\n
\"8.PNG\"<\/figure>\n\n\n\n

9 \u2013 List all Computers<\/h3>\n\n\n\n
\"9.PNG\"<\/figure>\n\n\n\n

10 \u2013 Run SystemInfo on Remote Computer<\/h3>\n\n\n\n

You are able to select a scope \u2026<\/p>\n\n\n\n

\"10.PNG\"<\/figure>\n\n\n\n

11 \u2013 Move Computer to OU<\/h3>\n\n\n\n
\"11.PNG\"<\/figure>\n\n\n\n

Don\u2019t worry I will intercept wrong entries and save the user\u2026<\/p>\n\n\n\n

\"11a.PNG\"<\/figure>\n\n\n\n

12 \u2013 List all Groups<\/h3>\n\n\n\n
\"12.PNG\"<\/figure>\n\n\n\n

13 \u2013 List Group Memberships<\/h3>\n\n\n\n
\"13.PNG\"<\/figure>\n\n\n\n

14 \u2013 List all enabled Users<\/h3>\n\n\n\n
\"14.PNG\"<\/figure>\n\n\n\n

15 \u2013 List User Properties<\/h3>\n\n\n\n
\"15.PNG\"<\/figure>\n\n\n\n

16 \u2013 User\u2019s last Domain Logon<\/h3>\n\n\n\n

The forums are full of questions like \u201cis the LastLogon attribute important, or LastLogonTimestamp or LastLogonDate\u2026, when is it replicated \u2026 why is it so difficult to find the right logon date \u2026\u201d. I don\u2019t care and contact every DC and ask for the LastLogon and take the latest\u2026, surprise, surprise it always shows me the correct latest logon \u2026<\/p>\n\n\n\n

\"16.PNG\"<\/figure>\n\n\n\n

Don\u2019t worry. I will take care if the user has never logged on.<\/p>\n\n\n\n

\"14a.PNG\"<\/figure>\n\n\n\n

17 \u2013 Show currently logged on User<\/h3>\n\n\n\n

This is a live query. The target host will be contacted with the quser command.<\/p>\n\n\n\n

\"17.PNG\"<\/figure>\n\n\n\n

18 \u2013 Send Messages to users desktop<\/h3>\n\n\n\n

Cool, ha? One of my favorites \u2026 Make your choice to send it to all Windows Server \u2026<\/p>\n\n\n\n

\"18.PNG\"<\/figure>\n\n\n\n

19 \u2013 Find orphaned User or Computer Accounts<\/h3>\n\n\n\n

Who forgot to remove the computer or user account? You have to provide the computer or user account and a timespan.<\/p>\n\n\n\n

\"19.PNG\"<\/figure>\n\n\n\n

20 \u2013 Configure Time-based-Group-Membership<\/h3>\n\n\n\n

This only works in a Windows Server 2016 Forest Mode. Don\u2019t worry, the tool will first check the Forest Mode and if the feature is enabled. Provide User, Group and Timespan in days.<\/p>\n\n\n\n

\"20.PNG\"<\/figure>\n\n\n\n

21 \u2013 Onboarding | Create New AD User (from existing)<\/h3>\n\n\n\n

Do you dream of creating a user based on an existing in a few seconds \u2026 to have more time for other tasks? Here we go.<\/p>\n\n\n\n

\"21.PNG\"<\/figure>\n\n\n\n

22 \u2013 Offboarding | Disable AD User<\/h3>\n\n\n\n

When an employee leaves the company, he should be deactivated.<\/p>\n\n\n\n

\"22.PNG\"<\/figure>\n\n\n\n

Ok, that\u2019s it for now.<\/p>\n\n\n\n

PowerShell Web Access<\/h2>\n\n\n\n

You are also able to run this in PowerShell Web Access:<\/p>\n\n\n\n

\"pswa.PNG\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

The Script<\/h2>\n\n\n\n

I have decided not to present the entire code here. Too many lines of code. You can download the script here, it\u2019s a psm1 file, a PowerShell script module file:<\/p>\n\n\n\n

Download: Active Directory Domain Services Section (v.1.1)<\/a><\/h2>\n\n\n\n

Prerequisites and Notes:<\/h3>\n\n\n\n
  • Tested in an Active Directory environment with\u00a0Windows Server 2012\/2016<\/strong>\u00a0Domain Controllers and\u00a0Windows 7\/8\/10<\/strong>\u00a0clients<\/li>
  • WinRm<\/strong>\u00a0must be\u00a0enabled on all Client computers<\/strong>\u00a0(WinRm is enabled on Windows Server 2012\/2016 by default) manually (winrm qc) or by GPO.<\/li>
  • Run the tool on a\u00a0Domain Controller\u00a0<\/strong>(You may run into troubles with RSAT)<\/li>
  • 0 and Enter (instead of Enter only) to go back to the main menu is due to the possible integration of PowerShell Web Access where pressing Enter only will not work<\/li><\/ul>\n\n\n\n

    After downloading create a folder \u201cAD\u201d in C:\\Program Files\\Windows PowerShell\\Modules and save the AD.psm1 file there.<\/p>\n\n\n\n

    \"Unbenannt.PNG\"<\/figure>\n\n\n\n
    \"Unbenannt.PNG\"<\/figure>\n\n\n\n

    It should be then available every time you start PowerShell and run the command ad.<\/p>\n\n\n\n

    \"Unbenannt.PNG\"<\/figure>\n\n\n\n

    Or as mentioned in PowerShell Web Access.<\/p>\n\n\n\n

    Have fun with it! I am very grateful for ideas for further functions.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Hey Guys, as a Windows SysAdmin some of your primary tools is Active Directory and PowerShell. I want to share this tool I found online from Patrick Gruenauer – Author of https:\/\/sid-500.com\/ You can download the tool from here: https:\/\/sid-500.com\/2018\/05\/22\/active-directory-domain-services-section-version-1-1\/ Active Directory Domain Services Section What can we do with it? This is the question […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[42,59],"tags":[],"class_list":["post-2765","post","type-post","status-publish","format-standard","hentry","category-ad","category-powershell"],"_links":{"self":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/2765","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2765"}],"version-history":[{"count":5,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/2765\/revisions"}],"predecessor-version":[{"id":2771,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/2765\/revisions\/2771"}],"wp:attachment":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2765"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2765"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2765"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}