shell{&}co – Page 22

Delegate the Unlock user account permission on OU

This script set the correct security rights on an organizational unit to delegate the Unlock user account permission for a specific group. In this script I will use the following informations : – Authorize the group “Helpdesk_grp” to unlock the

Reboot task optimization in a VMware Virtual Desktop Infrastructure

This script has been written to optimize a scheduled reboot on all VMware VDI desktops. In a VDI environment, you have to keep in mind two important things : ESX hosts SAN infrastructure If you plan a reboot on all

Create GeoIP firewall rules for iptables

This script creates automatically firewall rules for iptables based on GeoIP informations. This script can be useful if you cannot use or build from source the Xtables addons for iptables. The script allows you to authorize network trafic on a

Get the server uptime in days with WMI

This script gets the Active Directory server uptime in days using WMI. The WMI class used is Win32_OperatingSystem I have used the New-Timespan to calculate the uptime (difference between the current date and the last Windows boot up time). [TimeSpan]$uptime=New-TimeSpan $LBTime

Get GDI handles by process

This script requires Powershell 3.0 This script get the number of GDI handles by process Script : $global:sig = @’ [DllImport(“User32.dll”)] public static extern int GetGuiResources(IntPtr hProcess, int uiFlags); ‘@ Get-Process | select ProcessName -Unique | ? {$_.processname -notmatch “Idle|System|svchost”}

Resolve or get SID for Active Directory object

The following little scripts will allow you to play and take your first steps with the Active Directory object SID Resolve object SID to username $objSID = New-Object System.Security.Principal.SecurityIdentifier(“S-1-5-21-123456789-1234567890-123456789-12345”) $objUser = $objSID.Translate( [System.Security.Principal.NTAccount]) $objUser.Value Get the SID of a username

Query remote servers for installed hotfix

This script query all servers in a specific OU and running on Windows Server 2003 and check if a specific hotfix is installed or not. Script (with Microsoft Active Directory module loaded : import-module activedirectory) : $server_list = Get-ADComputer -searchbase

Set folders ACL (owner and NTFS rights)

This script set the access list on all user home folders (user home folders name = user name) located on the network share \\server\homeroot. The script tasks are the following : list user home folders check if the username exists

Set DNS server ip address information on remote servers

This script update DNS server ip address on the remote server network cards. The steps are the followings : retrieve from AD all the server names check if the server is responding to ping test list the current network information

Ping computer with a specific OS

This script use WMI to ping a list of computers. Only specific OS are pinged. Script (with Microsoft Active Directory module loaded : import-module activedirectory) : $ping = new-object System.Net.NetworkInformation.Ping $list = Get-ADComputer -LDAPFilter “(|(operatingsystem=Windows XP*)(operatingsystem=Windows 7*)(operatingsystem=Windows Vista*))” ForEach ($b