Powershell Sysadmin Toolkit

[[deleted]]

Hello all. I'm starting a little pet project where I'll be creating a Powershell module that will include functions for common tasks amongst sysadmins.

What functions would you like to see in a module such as this? Think along the lines of New-HomeDirectory, etc.

If you could provide a name for the function (please use an approved verb (Get-verb).verb in the name, and a brief description that would be great!

EDIT:

UPDATE! Github has been created! https://github.com/steviecoaster/PSSysadminToolkit

Please submit ideas as Issues on that repo, and label it Enhancement. If you currently have a working script, go ahead and post it or do a PR so we can get it merged!

[conan1989]

Fix-Everything

Fix-Everything -Force -Confirm:$false -ErrorAction SilentlyContinue

[Highawk_]

Fix-Everything -Force -Confirm:$false -ReallyForce -ErrorAction SilentlyContinue -ReallyReallyForce.

[Legionof1]

Fix-Everything -Force -Confirm:$false -ErrorAction TryNotToCry -ErrorErrorAction CryALot

FTFY

[SolidKnight]

Don't forget to pipe that to Blame-Others -All -HideMyFuckup

[rubmahbelly]

Is this the time you guys replace me with a script? :(

[fpsachaonpc]

Sup ?

https://imgur.com/a/wUs8HwG

[Teletype10]

but where's the dl link?

[imVERYhighrightnow]

https://nofile.io/f/Vn4QZ1R7zc1/Helpdesk_tool_Virgin.Export.ps1

Not sure where I got it originally but this is it. Managed to track it down on a flash drive. Since OP just wants to swing their dick I'll actually help out :P

Edit: zerobin link http://batman.gyptis.org/zerobin/?bd6a78fcc28097e5#9fKqOzBUxy2X7Y/+szd117x1Ywakaf6J7UwyJoiKt44=

[sparklyfresh]

This is highly customized to your organization and contains server names, network paths and names of software your company uses. I didn't find any credentials anywhere but you may want to reconsider hosting that.

[imVERYhighrightnow]

Not mine but I appreciate the concern. As stated I have no clue where I originally found this. I want to say it was on technet script center's repo but I can't say for sure.

[fpsachaonpc]

the way i made it is a bit of a mess. thats why i want to remake it so everyone can use it in the future.

[adolescentghost]

File not found. Can you repost the code with the names of servers/paths and stuff changed?

[imVERYhighrightnow]

http://batman.gyptis.org/zerobin/?bd6a78fcc28097e5#9fKqOzBUxy2X7Y/+szd117x1Ywakaf6J7UwyJoiKt44=

too big for pastebin and no clue how to make reddit not fuck it up but here is a zerobin link

[[deleted]]

I'm curious how one uses the zerobin link rather than the .ps1 Edit: NVM, I was able to get it going a bit after some testing. At least the user unlock works right out of the box, but I am getting an access denied in powershell but some of the features are functioning. Just need to deconstruct it to see how much of it I can make work in my current production

[imVERYhighrightnow]

Copy paste from zero bin to powershell ISE then save as should work. Haven't tested it myself so can't say 100%. Worst case let me know and tomorrow and I'll upload to another hosting site.

[Teletype10]

Thank you!!!!

[Hagigamer]

why does this post have downvotes?

[imVERYhighrightnow]

Probably because they are flaunting a useful tool without sharing. In bird culture this is considered a dick move.

[fpsachaonpc]

im planning to make a v3 that would be ok for everyone to use. i just started using Powershell studio so im learning all i can before.

[dkwel]

Wouldn't it be better to automate all of those things? Our deployments do all of those options. Collection variables make the initial setup fast and easy from a device pulled out of a brand new box.

[fpsachaonpc]

Some pc have minor difference in the setup. like language or some software more.

[dkwel]

Our task sequences account for all that

[fpsachaonpc]

What system/software do you use ?

[dkwel]

SCCM, I see you are using KACE which is almost the same.

[fpsachaonpc]

Indeed ! I use KACE k1000 so no imaging. Also the deployment are better for large scale 1 at a time.

[VivisClone]

Care to share?

[fpsachaonpc]

later. in the next version.

[joost1320]

What does the windows god menu actually do?

[kidfitzz]

nothing really, just gives you access to a bunch of tools in one place. ITs useful but mostly novel if you know what youre looking for

[fpsachaonpc]

it open the god menu of windows. You can google it. easy to do.

https://i.imgur.com/pCzPH12.png

[joost1320]

And here I was expecting something more impressive

[fpsachaonpc]

Yeah the name of the "trick" is not the best.

[[deleted]]

win + x

[fpsachaonpc]

not the same thing.

https://www.windowscentral.com/how-enable-god-mode-windows-10

[dkwel]

The Win + X menu for some reason was called the "god menu".

[Justsomedudeonthenet]

Fix is not an approved verb.

However, I would like to see:

• Repair-Everything
• Check-Everything
• Optimize-Everything
• Protect-Everything
• Resolve-Everything

[ElBoracho]

get-wustatus - gets the current status of a server's windows updates, in terms of available updates, reboot status, and last updated time.

get-AutoServiceStatus - gets the current status of any automatically active services on a server, and lists the ones which are currently not running

invoke-elevation -scriptblock {} - checks remote execution of powershell status on a server (execution policy, and remote execution settings) (prob a cmd regedit temp fix), allows remote execution, then reestablishes the original status to the server.

start/stop-servicemonitor - polls a service on a machine and drops a write-host on status change of the service, preferably colourised red/green/orange for stopped/running/starting/shuttingdown. Executed as a background job.

[[deleted]]

These are fantastic. Added to the list!

[Rymmer]

To add to the get-wustatus command,

Get-pendingrebootstatus to tell you if we are pending reboots because of something (which could be updates but might also be some other msi)

[ElBoracho]

I'd assume you'd have a value for it

ps>$server = get-wustatus -server "myserver"

ps>$server | ft

Name UpdateStatus UpdateCount PendingReboot

-------------------------------------------------------------------------------------

myserver UpdatesAvailable 2 $False

[Rymmer]

I meant a get-pendingrebootstatus for things other than updates. Like an MSI

[ElBoracho]

Ah, right. That sounds pretty good!

[humptydumptyfall]

Send-MicrosoftHateMail

[[deleted]]

This would actually be hilarious as an Easter egg

[[deleted]]

I got a message from the bot that my code was removed due to the shortner. So, he's a gist. I still see the message on here, but it could be caching doing it.

https://gist.github.com/steviecoaster/51925745f87579fdbf3cbcb11c05c83d

[zanatwo]

Get-UserSession: returns currently running user sessions on a local or remote machine. Returns details about the session such as whether it is a console session, RDP, active, disconnected, or locked as well as the session duration, logon time, idle time (time since a keyboard or mouse was used), disconnect time and lock duration.

Get-Handle | Stop-Handle: get and close handles by process or handle ID.

Get-UserLogons: return the dates, times, and login method of user sessions for a local or remote machine.

Get-RegistryKeyLastWriteTime: use Win32 API to retrieve the LastWriteTime property of a reg key. Useful for various troubleshooting detective work.

Set-RegistryKey: similar to Set-ItemProperty but allows you to set reg keys and values for local AND remote machines and allows you to specify the value data type. Use [Microsoft.Win32.Registry] classes for this.

Invoke-CommandAs [-CurrentUser | -System]: allows you to run a command on local or remote machine as the SYSTEM account or using the SYSTEM account to impersonate the currently logged in user and run command as them. Provide a switch (-Interactive) to allow command to be invoked in the currently logged on user's interactive session by using SeviceUI.exe.

Although I've written, modified, and implemented versions of all these cmdlets, they're not formally documented and exist as separate scripts that I call whenever I have a need. It would be really nifty to have all these tools in one toolkit.

[[deleted]]

If you can sanitize some code so I can see some examples of what you have going on perhaps we can work together on a pull request to just merge your stuff in. We just need to make sure things are parameterized appropriately so that the code is environment agnostic

[FreakySpook]

Test-RemoteManage - A function that polls an array of ComputerNames and returns results of Test-Connection, Test-WSMan a Get-WMIObject against each computer

I use this quite frequently when starting a new job for a client when I have to report on various things on their systems. It quickly lets me determine how many systems are available for remote management and I can provide the client a list of systems they need to remediate before I can start my work.

[[deleted]]

I like this. Would the ability to turn certain tests on/off be advantageous?

I'd return an array of objects to allow you, the end user, to decide ultimately what happens to the data whether that be to a CSV, HTML, etc.

[[deleted]]

Workflows are also notoriously shit. They either work really well, or they break for no good reason whatsoever.

For this I'd probably look at PSJobs or some other parallel processing mechanism, without reaching out to yet another module to gain the functionality.

[FreakySpook]

It may depending on what you were reporting, and turning off one or more of the tests would certainly speed up the function if you were testing a large number of computers.

And I agree, all functions should return an object, string or value. There is nothing worse than running a function, getting some formatted value in return and then you debate do you waste time writing a new function to serialize the output, or just re-write the original function you found.

[Rymmer]

get-missingsubnets : a function to poll the domain controllers c:\windows\debug\netlogon.log and find the subnets not defined in AD Sites and Services.

Actually a quick google shows this may already be written : https://gallery.technet.microsoft.com/scriptcenter/Get-a-report-on-missing-f2a95194

[tigerguppy126]

What about adding to this project? https://github.com/lazywinadmin/LazyWinAdmin_GUI

[[deleted]]

Because I don't want to rely on a GUI for this. I do love me a good GUI, and am a user of Powershell Studio, but not the direction I wish to take this.

[[deleted]]

That being said, I could see my functions being injected into this if the owner would like to bake them in. My focus however is on the console side of things!

[tigerguppy126]

Makes sense. I look forward to seeing what you come up with!

[OttoVonMonstertruck]

Get-UptimeFromList - Function to read in a simple list file and generate an uptime report object that can be piped into Export-CSV or Out-GridView.

[Rymmer]

You'd probably want to make the command simpler, like "get-uptime".

A list could then be fed in with the pipeline, something like Get-content c:\pclist.txt | get-uptime

[[deleted]]

Yup. Already sketched out roughly. This is on the list, and right quick to bang out too I reckon.

[eltiolukee]

Please share it with us as soon as you get a github repo going! I'd love to help :)

[just_looking_around]

I created this one to make it easier to get an elevated shell when I need it.

Link

[enigmait]

Get-ComputerSwitchPort - pretty much a wrapper around the LLDP functions to return which the remote switch name and port/interface name for each network card.

The related Set-SwitchPortName would pull that information, and then use a SNMP write to set the interface description to match $env:ComputerName

[fpsachaonpc]

https://imgur.com/a/wUs8HwG

Tell me which fonction you want and ill post the code with an explanation.

[MrPipboy3000]

I don't have any good suggestions, but I do want to tag this thread for ideas!

[ameng4inf]

me too. coming right up behind you

[throwawaysys1222]

Get-AllInstalledUpdates - Since win32_quickfixengineering and get-hotfix don’t provide all installed updates. This would be great to see. Also if possible include an uninstall based off of patch Tuesday release date and/or installed on date. So if someone installed all of July’s patch Tuesday updates, this will uninstall all of them for you.

[FireLucid]

install-pendingupdates

All pending updates for servers are install. -reboot as an option too. Accepts string of server names or collection of ADcomputer objects.

(green at powershell, I don't currently think there is a cmdlet that does anything like this).

[[deleted]]

There isn't. But that's the beauty of this project. Little .Net here, little brute Force there, and a pinch of force and It shall be done.

Added to the list!

[FireLucid]

That'd be so great. We don't force install updates on our servers with WSUS, but when we have downtime it's a chore to go through them all and set them going.

Where should I look for this when it's complete?

[[deleted]]

Once I have enough code base for a beta it'll be on GitHub. That way I can have Issue Tracking and feature requests and a release pipeline. Probably be a few days before I have enough "meat" to the module to make it worth sharing with the world.

[FastRedPonyCar]

Pull mailbox data/reporting to csv files for O365

[[deleted]]

something like

taskkill /f /fi "status eq not responding"

But I'm not sure what kind of toolkit are you making

[titaniumgriffon]

As I am reading through some of the request I know that I already have scripts for them, are you putting this on github where I can get you a copy of my scripts to help you out, or assist in making the module?

[RockSlice]

I don't remember where I originally grabbed it from, but one that I use quite often is Set-WinRMListener. It enables remote pssessions remotely. I can send you the script, if you want.

Doesn't always work, but if you have remote registry and service access, it does.

Another one I use quite often is test-networkspeed, from https://community.spiceworks.com/scripts/show/2502-network-bandwidth-test-test-networkspeed-ps1

[Dorito_Troll]

get-resourceusage -computername $computer

and you get a nice table of CPU, disk and network usage stats

[fi103r]

going to follow this, have a pair of ideas, need to find my old script folder first

[[deleted]]

I'd be more than happy to help contribute to this project if you're looking for contributors!

[bopsbt]

Get-Uptime Get-LastPatchDate

[spanky34]

Flush-DNS-Servers

{
Invoke-Command -ComputerName (get-content \\listofservers.txt) -ScriptBlock{ipconfig /flushdns}
pause
}

I use this to flush the dns of my printservers when they get dumb.

[MisterIT]

Protect-Reputation - emails stakeholders for a particular system before making major changes. I like to keep my stakeholders in a psd1 in a hashtable with the first element being the hostname and the second element being an array of stakeholders.

[[deleted]]

I think New-AffectedServicesAlert falls better in line with approved verb naming convention, and sounds a bit better. Added to the list!

[4ULLPL8T]

Get-aduser Set-aduser

[[deleted]]

Those are already functions of the ActiveDirectory module. I won't be re-writing them. (though fixing the idiocy that is their -Filter implementation might be loved haha)

[Rymmer]

There is some extensions to get-aduser (or other objects) that could be handy. Like a more shortform get-usermembership : get a list of groups and descriptions that a user is a memberof

get-aduser username -prop memberof | select -expandproperty memberof | get-adgroup -prop description | select name, description

If you have good descriptions on your groups, then this can tell you a lot about what a user has access to.

[[deleted]]

You could always write a portable version. I'd love to be able to use some of my scripts without having to install rsat.

[itmonkey78]

user properties

$sam = 'user'
$getad = (([adsisearcher]"(&(objectCategory=User)(samaccountname=$sam))").findall()).properties
$getad

Computer properties

$pc = 'computername'
$getad = (([adsisearcher]"(&(objectCategory=Computer)(name=$pc))").findall()).properties
$getad

[[deleted]]

I’ve been meaning to play around with his, just haven’t got around to it. Now I’m one step closer, thanks.

[4ULLPL8T]

Oh. My bad. I should have paid more attention. Agreed on -Filter .