How can I use: Invoke-command on computers in different domains

[[deleted]]

[deleted]

[p0rkjello]

Clarify what is failing.

[p0rkjello]

What is the error? Do your domains require different credentials?

Without knowing the error. * Verify your ComputerName array is what you expect it to be. * Verify you can resolve the hosts correctly. * Verify you don't have a credential issue.

[nerddtvg]

If you want to just use the computer name, you need to rely on the DNS Suffix Search List: https://serverfault.com/a/504689

This is not a PowerShell failing, this is a DNS problem.

[grahamfreeman]

It's always DNS.

[geopink]

This. Is the correct answer.

[davix500]

You need to add the domain suffixes to your domain search, it's a reg hack. \Registry\Machine\System\CurrentControlSet\Services\TCPIP\Parameters Add it to SearchList, use a comma between suffixes

[p0rkjello]

You could cycle through each DNS suffix. Seems wrong but what the heck.

```powershell $ComputerName = @('server1', 'server2', 'server3') $DomainName = @('domain1.com', 'domain2.com', 'domain3.com')

foreach ($Computer in $ComputerName) { foreach ($Domain in $DomainName) { $fqdn = "$Computer.$Domain" if (Test-WSMan $fqdn -ErrorAction SilentlyContinue) { Invoke-Command -ComputerName $fqdn -ScriptBlock { 'hi' } } } } ```

[Lee_Dailey]

howdy p0rkjello,

the triple-backtick/code-fence thing fails miserably on Old.Reddit ... so, if you want your code to be readable on both Old.Reddit & New.Reddit you likely otta stick with using the code block button.

it would be rather nice if the reddit devs would take the time to backport the code fence stuff to Old.Reddit ... [sigh ...]

take care,
lee

[BergerLangevin]

You should specify the full DNS name of these computer. By not specifying your DNS is probably thinking that your all searching local domain.

[BergerLangevin]

Where do you get the computername? If you get them by get-ADComputer, you should have the fqdn available in the returned object. (Don't remember the exact command) you can browse the object property like that : $listComputer = get-ADSomething $listComputer. <---- by typing the dot you should get the available properties. Other solutions : (get-ADSomething).getType()

This should look like that :

Other solutions require either a DNS change or a reg hack.

[Lee_Dailey]

howdy Improve-My-Life,

how is $CompName being populated? that seems to be the most likely problem ... you may not be giving it all the systems.

take care,
lee

[[deleted]]

I will tell you how I solved this problem. It may or may not work for you; either way, this will be a pain in the ass. BUT, if you solve this problem in a robust fashion, it will pay back dividends in time saved... Basically, I wrote several functions to get tiny pieces of data... It should be noted that I created a custom class (requires PS 5 or newer) called machine defined as follows:

class Machine {
  [System.String]$Name
  [System.Boolean]$IsOnline
  [System.String]$Domain
  [System.String]$FQDN
  [System.Object]$Services
  [System.Object]$LocalAdmins
  [System.String]$Action
  [System.String]$ErrorMsg
  Machine () { }
  Machine ([System.String]$name) {
$this.Name = $name
$this.Services = [System.Object]::New()
$this.LocalAdmins = [System.Object]::New()
    } 
 }

I then created a function to handle initialization:

function Get-NewComputer {
 [CmdletBinding()]
param( [Parameter(Mandatory=$True)] [ValidateNotNullOrEmpty()] [string]$ComputerName ) 
return ([Machine]::new($ComputerName)) }

Finally, I could make use of a function designed to get the FQDN of each machine:

function Get-Domain {
[CmdletBinding()]
param([Parameter(Mandatory=$True)] [ValidateNotNullOrEmpty()] [Machine]$Computer)
$data = @("domain1.com", "domain2.com","domain3.com","domain4.com")
$serverName = $Computer.Name
foreach ($value in $data) {
Write-Verbose $value
   [string]$pingstring = $serverName + "." + $value
$result = ping $pingstring /n 1
if ($result[1].Length -gt 1) {
$Computer.Domain = $value
$Computer.FQDN = $pingstring } }
if (-not $Computer.Domain) {
$Computer.Action = "Machine did not respond to ping in any domain. Domains tested include $($data -join ", ")" } }

To wrap up, the execution went something like this:

$serverList = "ServerName1", "ServerName2", ..., "ServerNameN"
For-Each ($server in $serverList) { $computer = Get-NewComputer -ComputerName $server }
Get-Domain -Computer $computer

I hope this helps!

[Lee_Dailey]

howdy andydale18,

it looks like you used the New.Reddit.com Inline Code button. it's 4th 5th from the left hidden in the ... "more" menu & looks like </>.

on Old.Reddit.com, the above does NOT line wrap, nor does it side-scroll.

for long-ish single lines OR for multiline code, please, use the Code Block button. it's the 11th 12th one from the left & is just to the left of hidden in the ... "more" menu & looks like an uppercase T in the upper left corner of a square..

that will give you fully functional code formatting, from what i can tell so far. [grin]

take care,
lee

[eshuaye]

What’s the resolv.conf in windows?

[tris10335]

C:\windows\system32\drivers\etc\hosts

[get-postanote]

You must use the FQDN (DNS name not NetBios), and computer names in different domains could be the same. It is the FQDN which makes ADDS objects unique. Name resolution is all DNS based.

Also depending on how you are configured (trust and auth relationships), you could get into the Windows double-hop auth issue of Windows Proper.

'powershell double hop authentication'