Microsoft Windows Server 2012 | Stephen Hackers Blog

21/05/2020

Azure – Update Management

By Steve inAzure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Logs, Microsoft, Microsoft Azure, Microsoft Server 2016, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Update Management, WSUS Tag Azure, Azure Security, Linux, Patch Management, Update Management, Virtual Machines, Windows, Windows Updates

How to maintain the patch status of your Windows and Linux machines

“You can use Update Management in Azure Automation to manage operating system updates for your Windows and Linux machines in Azure, in on-premises environments, and in other cloud environments.” Microsoft

To enable on a specific virtual machine in Azure

Note – You only pay for logs stored (Log Analytics)

Enabling the option can take up to 15mins

Useful reference links

Tutorial : Monitor changes and update a windows virtual machine in Azure
Update Management Overview

Bulk Add Azure VMs and Non Azure Machines

18/02/2019

Ping sweep script test

By Steve inBatch Scripts and PowerShell, Microsoft, Microsoft Server 2016, Microsoft Windows 10, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Powershell, Windows 7 Tag BATCH, Count, CSV, ForLoop, Import CSV, Jamie Crookes, module for PowerShell, Ping, Ping utility function, PingSweep, PowerShell

POWERSHELL
import-CSV "" | 
foreach 
{ 
$result = Test-Connection -ComputerName 
$_.Name -Count 1 -Quiet $_.name, $result -join ',' | out-file "c:\scripts\PingSweep\computer_results.txt" -Append 
}       


COMMAND /BATCH SCRIPT
Create list of computers to ping Comupters.txt 

Create batch file pingsweep.bat  

for /f %%s in (computer.txt) do (ping -n 1 %%s) open  cmd pingsweep.bat >> PINGSWEEPQUOTES.TXT 


Please test all scripts in a lab environment. We have no liability for any issues caused.


If you would prefer a more advanced script in PowerShell, check out this  example of a ping script in PowerShell written by Jamie Crookes "Ping utility function/module for PowerShell" can be found here http://www.powerscript.net/handy-ping-utility-function/

02/10/2018

If Not Exists – Batch Script

By Steve inBatch Scripts and PowerShell, Microsoft, Microsoft Windows Server 2008, Microsoft Windows Server 2012 Tag Batc, IfNot

Create a batch file to check a text file is in the location specified, else run a task.

#This batch file checks to see if a text file is in a location, if it does not, then launch notepad.exe

Create IfNot.bat
Add the following :

If NOT exist “C:\Temp\IsThisFileHere.txt”\ (

notepad.exe
)
exit

02/10/2018

Files Older Than 3 Months Combined Total File Size

By Steve inMicrosoft, Microsoft Server 2016, Microsoft Windows Server 2012, Powershell Tag file sizes, lastwritetime

A requirement to identify the total file size of all files not used in the last 3 months.

This was the solution

#Run as administrator
#You need to have permission of the files or folders

$date = (Get-Date).AddMonths(-3)

dir C:\temp -Recurse | ?{$_.lastwritetime -lt $date -and !$_.PsIsContainer} | Measure-Object -Property Length -Sum

# oneliner

dir C:\temp -Recurse -Force -ErrorAction SilentlyContinue | `

?{$_.lastwritetime -lt (Get-Date).AddMonths(-6)} | Measure-Object -Property Length -Sum -ErrorAction SilentlyContinue

# resulting data will be in bytes. To convert them to gigabytes, you may do this:

$files = dir C:\temp -Recurse -Force -ErrorAction SilentlyContinue | `

?{$_.lastwritetime -lt (Get-Date).AddMonths(-6)} | Measure-Object -Property Length -Sum -ErrorAction SilentlyContinue

($files.sum / 1gb).ToString(“F02”)

# F02 determines how much digits will appears after comma. In my case – 2 digits.

dir C:\temp -Recurse | ?{$_.psiscontainer} | %{

Write-Host current folder is $_.fullname;

dir $_.fullname | measure-object -property Length -sum -ErrorAction SilentlyContinue

} >c:\temp\file sizes

Credit to the Original post script this is based on

11/09/2018

Task : Output A List Of Home Drive Paths Configured In Active Directory

By Steve inActive Directory, DS Commands, Microsoft, Microsoft Server 2016, Microsoft Windows Server 2012, Powershell Tag Active Directory, CSV EXPORT, DSQUERY, Get-ADUser, HOME DRIVE, PowerShell, USER PROPERTIES

#DSQuery

dsquery user -name “*” -limit 0 | dsget user -samid -hmdir -hmdrv -profile >c:\temp\usersV2.txt

#PowerShell # More flexibility # Includes the state of the computer account (Enable or Disabled)

Get-ADUser -Filter * -Property Name,CanonicalName,CN,DisplayName,DistinguishedName,HomeDirectory, HomeDrive,SamAccountName,UserPrincipalName | export-csv -path (Join-Path $pwd HomeDrive.csv) -encoding ascii -NoTypeInformation

13/08/2018

Get a list of active users which have logged on to the domain in the last 7 days

By Steve inMicrosoft, Microsoft Server 2016, Microsoft Windows 10, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Powershell Tag Active Directory, Get-ADUser, Get-Date, LastLogonDate, PowerShell

# Get a list of users which have logged on to the domain in the last 7 days

$Date = (Get-Date).AddDays(-7)

Get-ADUser -Filter {LastLogonDate -gt $Date} | Select distinguishedName

01/08/2018

PowerShell Script to find all AD users who have the “cannot change password” box checked in a specific OU

By Steve inMicrosoft, Microsoft Server 2016, Microsoft Windows Server 2012, Powershell Tag Active Directory, CannotChangePassword, DistinguishedName, Get-ADUser, PowerShell

# script to find all AD users who have the “cannot change password” box checked in a specific OU

# Windows Server 2016

# Powershell

Get-ADUser -Filter * -Properties CannotChangePassword -SearchBase “OU=specificOU,DC=TEST,DC=com” | where { $_.CannotChangePassword -eq “true” } | Format-Table Name, DistinguishedName

15/07/2018

WSUS and Windows 10 Clients – UsoClient.exe

By Steve inMicrosoft, Microsoft Server 2016, Microsoft Windows 10, Microsoft Windows Server 2008, Microsoft Windows Server 2012, WSUS Tag Updates, USO, UsoClient.exe, Whats New, Win 10, Windows, Windows 10, Windows Updates, Windows10, WSUS, WUAUCLT

So, you deploy a GPO to Window 10 clients, but your in a hurry to get the clients to check in…

As a SysAdmin for many years I would log on to a client, open command prompt and type :

wuauclt /detectnow (Windows 7 / Windows Server 2008/2012 clients)

In Windows 10 you will notice that it doesn’t do anything and doesn’t show you anything. (As shown above)

(confirmed on https://blogs.technet.microsoft.com/yongrhee/2017/11/09/wuauclt-detectnow-in-windows-10-and-windows-server-2016/)

An example of “Whats New” in Windows 10, and Windows Server 2016 To check or scan “Windows Update” from the command prompt :
CMD (Run As Administrator)
c:\windows\system32\

UsoClient.exe startscan

And there is more switches….

StartScan – Used To Start Scan
StartDownload – Used to Start Download of Patches
StartInstall – Used to Install Downloaded Patches
RefreshSettings – Refresh Settings if any changes were made
StartInteractiveScan – May ask for user input and/or open dialogues to show progress or report errors
RestartDevice – Restart device to finish installation of updates
ScanInstallWait – Combined Scan Download Install
ResumeUpdate – Resume Update Installation On Boot

23/05/2018

Sysinternals – Permissions, LoggedOn, Endpoints

By Steve inMicrosoft, Microsoft Server 2016, Microsoft Windows Server 2012, Powershell, Windows 7 Tag LoggedOn, Permissions, PowerShell, Sysinternals

How to Get the permission on folders:
PowerShell:
Get-ChildItem | Get-ACL
Path | Owner | Access

or more in depth use:

GUI based : Run AccessEnum against the drive or folder – (SysInternals tool) and save to text file (Run as administrator or a specific user)

Who is logged on via the resource shares:
Launch cmd and run PSLoggedon (SysInternals tool)
Displays :
1) Users logged on locally
2) Users logged on via resource shares

List TCP and UDP Endpoints connected
Run TCPView application (SysInternals tool) and save to text file

Ever need to identify the before and after changes in Active Directory
Use : ADExplorer (SystInternals tool)

Download Sysinternals
https://docs.microsoft.com/en-gb/sysinternals/downloads/sysinternals-suite

Suggested top 10 sysinternals tools
https://www.techrepublic.com/blog/10-things/10-sysinternals-tools-you-shouldnt-be-without/
See an advert of interest, CLICK IT! This site is funded by AD clicks.

21/05/2018

Check / Set / Sync Time Source for Windows Servers

By Steve inMicrosoft, Microsoft Server 2016, Microsoft Windows 10, Microsoft Windows Server 2008, Microsoft Windows Server 2012 Tag NTP, Sync, Time, W32TM, Windows

To set the time ( Tested against Windows 2016)

Launch CMD as administrator
exampled c:\time 09:00:00 AM – This will set the time to 9am

Note a time source if domain joined will up date the time clock again
Check the source
c:\w32tm /query /status Will show the time “Source”

To set an internet based NTP

c:\w32tm /config /syncfromflags:manual /manualpeerlist:”0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org
3.pool.ntp.org”

This will take effect after stopping and starting the W32Time service

Powershell….
stop-service w32time
start-service w32time

for settings to take effect

check status
c:\w32tm /query /status Will show the new time “Source”

To check sync is working
c:\w32tm /resync (Check the time sync)

See an advert of interest, click it, this site is funded by ad clicks.

Category Microsoft Windows Server 2012