Articles from February 2013 on PowerShell.org - Welcome Automaters!

Book offer"“AD Management in a Month of Lunches

Wed, 27 Feb 2013 20:24:14 +0000

AD Management in a month of lunches is today"™s deal of the day from Manning ““ www.manning.com

The get 50% off today using code dotd0227cc. The offer is good for today only

The same code can be used for 50% off PowerShell in Practice

Last nights Live Meeting

Wed, 27 Feb 2013 20:18:54 +0000

The sound was awful on last night"™s Live Meeting so I intend to re-record it at the weekend. I"™ll post the recording and scripts once its done.

I"™m also investigating an alternative delivery mechanism that will hopefully solve the sound issues.

Filter or LDAP filter

Wed, 27 Feb 2013 20:16:47 +0000

Many of the Microsoft AD cmdlets have a ““Filter and an ““LDAPFilter parameter. So what”™s the difference?

PS> Get-Help Get-ADUser -Parameter *Filter*

-Filter
Specifies a query string that retrieves Active Directory objects. This string uses the PowerShell Expression
Language syntax. The PowerShell Expression Language syntax provides rich type-conversion support for value types received by the Filter parameter. The syntax uses an in-order representation, which means that the operator is placed between the operand and the value. For more information about the Filter parameter, see about_ActiveDirectory_Filter.

-LDAPFilter
Specifies an LDAP query string that is used to filter Active Directory objects. You can use this parameter to run your existing LDAP queries. The Filter parameter syntax supports the same functionality as the LDAP syntax. For more information, see the Filter parameter description and the about_ActiveDirectory_Filter.

This means you have two ways to approach a problem. Lets think about finding a single user:

Get-ADUser -LDAPFilter “(samAccountName=Richard)”

Get-ADUser -Filter {samAccountName -eq ‘Richard’}

The LDAPFilter uses LDAP query syntax ““ attribute and value. Filter uses PowerShell syntax. You could think of the ““Filter as a condensed version of

Get-ADUser -Filter * | where samAccountName -eq ‘Richard’

Use the ““Filter parameter because its less typing and you filter early ““ especially important if querying across a network.

You can use multiple attributes in the filters – & implies AND in the LDAP filter

Get-ADUser -LDAPFilter “(&(givenname=Bill)(sn=Green))”

Get-ADUser -Filter {GivenName -eq ‘Bill’ -and Surname -eq ‘Green’}

The LDAP filter HAS to use the correct attribute name but Filter uses the property name returned by Get-ADUser.

LDAP filters can get very complicated very quickly. For instance if you want to find the disabled user accounts

Get-ADUser -LDAPFilter “(&(objectclass=user)(objectcategory=user)(useraccountcontrol:1.2.840.113556.1.4.803:=2))”

Get-ADUser -Filter {Enabled -eq $false}

Alternatively,and in my opinion, its simpler to use Search-ADaccount

Search-ADAccount -AccountDisabled ““UsersOnly

Which one should you use? The one that best solves your problem. I mix & match to suit the search I”™m performing

]]>

PowerShell.org Forums Etiquette

Wed, 27 Feb 2013 17:19:13 +0000

Folks often ask for some advice on what to do, and what not to do, in the forums. Here are some suggestions.

Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need - nobody will think you’re stupid, and the forums are all about asking questions. Just ask.
Try to avoid using obscure or punctuation aliases (like ? and %) - use command names instead. It makes your post easier for everyone, including n00bs, to follow.
Use the CODE or POWERSHELL buttons in the forums editor to format PowerShell and other code.
If your problem is solved, find the little green checkmark button along the top of your message (or one of the replies; it’s near the Twitter and Facebook and other buttons), and click it. That helps indicate to everyone else that you found a solution.
Don’t post massive scripts. We’re all volunteers, and we don’t have time to read all that, nor will we copy, paste, and run it. Post an excerpt, and clearly state what you’re having problems with.
Post error messages, as appropriate. They help.
Don’t ask folks to provide you with a complete script, or to rewrite your script. Again, we’re all volunteers - respect that we’re taking time to help you, and help us minimize that time.
Try to ask just one question at a time. Posts with ten questions are a lot harder to help with.
DO post what you’ve tried, what errors you got, and what didn’t work. It’s a lot easier, sometimes, to correct what you’ve already done than to try and write something from scratch.
If you’ve been given a working solution, SAY THANK YOU! Then make sure you know WHY it works… and ask for an explanation if you don’t!
Take the time to educate yourself. Pick up a book, or a training video, or take a class, or attend a conference. Yes, those take time - but it’s time well-spent. If you’re continually asking other people to spend time answering questions that are already answered in every book, video, course, etc…. well, that’s kinda wasting their time, right? Folks on the forums can help you more effectively if you have a base education first.

Have your own etiquette suggestions? Drop ’em in the comments!

Advanced Functions webcast

Mon, 25 Feb 2013 19:30:24 +0000

Quick reminder that the UK PowerShell group is hosting a Live Meeting webcast on PowerShell Advanced functions tomorrow ““ details from

http://richardspowershellblog.wordpress.com/2013/02/18/uk-powershell-groupadvanced-functions/

PowerShell in Depth"“nearly there

Mon, 25 Feb 2013 19:26:27 +0000

PowerShell in Depth is rapidly approaching its publication date ““ see www.manning.com/jones2 for details

New book

Mon, 25 Feb 2013 18:57:21 +0000

My latest book has been released on the Manning Early Access Program (MEAP). Active Directory Management in a Month of Lunches takes the newcomer to AD through the tasks they need to perform to manage their organization"™s AD.

it assumes no knowledge of AD and shows how to perform the common management tasks from the GUI (AD Administrative Center & the venerable AD Users & Computers) as well as PowerShell (using the Microsoft cmdlets).

Chapters 1-7 are currently available fromwww.manning.com\siddaway3 with more to come soon

]]>

VERIFIED EFFECTIVE for PowerShell 3.0 Toolmaking now live

Sun, 24 Feb 2013 19:10:05 +0000

It’s now available globally.
I suggest downloading the Program Guide, which includes the agreement and directions for enrolling. There’s also a specific guide for the PowerShell 3.0 Toolmaking examination, which you should read prior to paying.
Once you’ve paid, and sent in the necessary signed paperwork, you’ll get your exam info via e-mail. You can log in at any time to download your exam scenario and begin working. From the time of your first login, the clock starts ticking and you have 24 hours to upload your results. After uploading your results, you’ll hear back within 5 business days - these are graded by a human, not a machine, so be patient.

Creating a Windows 2012 Domain Controller

Thu, 21 Feb 2013 19:50:09 +0000

I decided to replace one of the DCs in my test environment with a Windows 2012 Server Core machine. Server Core has really come of age in Windows 2012 ““ its easy to configure.

I”™ve covered configuring a server before but to recap:

Rename the machine ““ use Rename-Computer
Set Network ““ use Set-NetIPInterface (address) & et-DnsClientServerAddress( dns address) & Rename-netAdapter
Join to domain ““ use Add-Computer

To create the domain controller use the ADDSDeployment module. You”™ll only find this on servers where you”™ve installed the AD Domain Services feature which you do like this:

Install-WindowsFeature -Name AD-Domain-Services -Confirm:$false

Import the module

Import-Module ADDSDeployment
Get-Command -Module ADDSDeployment

Create the Domain Controller. This is the equivalent of running DCPROMO in earlier versions. Even better you don”™t need the answer file. Everything is a parameter on the cmdlet.

Install-ADDSDomain Controller -DomainName “manticore.org” -InstallDns -Credential (Get-Credential manticore\richard) -ApplicationPartitionsToReplicate *

Thats it! Just wait for replication to happen.

You can also demote a domain controller

$cred = Get-Credential
Uninstall-ADDSDomainController -Credential $cred -RemoveApplicationPartitions -Confirm:$false

Restart the machine and uninstall AD & DNS

Uninstall-WindowsFeature -Name AD-Domain-Services, DNS -Confirm:$false
Restart-Computer -ComputerName dc02

Leave the domain

$cred = Get-Credential manticore\richard
Remove-Computer -UnjoinDomainCredential $cred -Workgroup Test

Trash the VM.

And best of all it works over remoting. You will need to recreate the session for restarts & changes but it is really easy.

Server Core is now a much friendlier option.

]]>

CIM cmdlets and remote access

Mon, 18 Feb 2013 22:33:04 +0000

When you used the WMI cmdlets

Get-WmiObject -Class Win32_logicalDisk -ComputerName RSLAPTOP01

You were using DCOM to access the remote machine. Even if you accessed the local machine you were using DCOM.

This changes in PowerShell v3 when using the CIM cmdlets.

If you don"™t use a computername

Get-CimInstance -ClassName Win32_logicalDisk

You use DCOM to access the local machine.

If you use ““computername

Get-CimInstance -ClassName Win32_logicalDisk -ComputerName RSLAPTOP01

You use WSMAN to access the machine named ““ irrespective of if it is local or remote

A further complication is that the named machine has to be running WSMAN 3.0 i.e. PowerShell v3 is installed.

If you try to access a PowerShell v2 (WSMAN 2.0) machine with the CIM cmdlets you will get an error. The way round that is to create a CIMsession using DCOM as the transport protocol. If you want to learn how to do that you”™ll have to wait until after my session at the PowerShell Summit in April or buy a copy of PowerShell and WMI from www.manning.com/siddaway2

I saw a number of people using the CIM cmdlets in the scripting games without thought to connectivity issues like this.

]]>

UK PowerShell Group"“Advanced functions

Mon, 18 Feb 2013 19:57:08 +0000

When: Tuesday, Feb 26, 2013 7:30 PM (GMT)

Where: Virtual

*********~*

Advanced functions give you ability to create functions that act like cmdlets. Learn how to get the most from this powerful part of the PowerShell functionality

Notes

Richard Siddaway has invited you to attend an online meeting using Live Meeting.
Join the meeting.
Audio Information
Computer Audio
To use computer audio, you need speakers and microphone, or a headset.
First Time Users:
To save time before the meeting,check your system to make sure it is ready to use Microsoft Office Live Meeting.
Troubleshooting
Unable to join the meeting? Follow these steps:

Copy this address and paste it into your web browser:
https://www.livemeeting.com/cc/usergroups/join
Copy and paste the required information:
Meeting ID: G79DNP
Entry Code: 9$t#&PK#8
Location:https://www.livemeeting.com/cc/usergroups

If you still cannot enter the meeting,contact support

Notice
Microsoft Office Live Meeting can be used to record meetings. By participating in this meeting, you agree that your communications may be monitored or recorded at any time during the meeting.

]]>

Filtering

Mon, 18 Feb 2013 19:38:41 +0000

I"™ve been grading the scripts in the warm up events for the Scripting Games and noticed a lot of people doing this:

Get-WmiObject -Class Win32_LogicalDisk | where {$_.DriveType -eq 3}

Ok now it works but there are a couple of things wrong with this approach.

Firstly, you are ignoring the built in capabilities of the get-wmiobject cmdlet

PS> Get-Command Get-WmiObject -Syntax

Get-WmiObject [-Class] [[-Property] ][-Filter ] [-Amended] [-DirectRead] [-AsJob]
[-Impersonation ] [-Authentication ] [-Locale ]
[-EnableAllPrivileges] [-Authority ] [-Credential ] [-ThrottleLimit ] [-ComputerName
] [-Namespace ] []

Get-WmiObject [[-Class] ] [-Recurse] [-Amended] [-List] [-AsJob] [-Impersonation ]
[-Authentication ] [-Locale ] [-EnableAllPrivileges] [-Authority ] [-Credential

] [-ThrottleLimit ] [-ComputerName ] [-Namespace ] []

Get-WmiObject -Query [-Amended] [-DirectRead] [-AsJob] [-Impersonation ] [-Authentication
] [-Locale ] [-EnableAllPrivileges] [-Authority ] [-Credential ]
[-ThrottleLimit ] [-ComputerName ] [-Namespace ] []

Get-WmiObject [-Amended] [-AsJob] [-Impersonation ] [-Authentication ]
[-Locale ] [-EnableAllPrivileges] [-Authority ] [-Credential ] [-ThrottleLimit ]
[-ComputerName ] [-Namespace ] []

Notice the filter parameter in the first parameter set.

When you run Get-WMIObject in effect you are running a WQL query

“SELECT * FROM Win32_LogicalDisk”

if you move the filter into the query it changes to

“SELECT * FROM Win32_LogicalDisk WHERE DriveType = 3”

This is coded in the cmdlet as

Get-WmiObject -Class Win32_LogicalDisk -Filter “DriveType = 3″

Why is this better?

Because you are doing less work against the WMI repository ““ therefore more efficient.

Also if you are running against a remote machine filtering in the WMI query means you bring less data back across the network which makes you whole process more efficient.

Bottom line ““ filter as early as you sensibly can and preferably on the remote machine.

]]>

"Verified Effective" About Ready to Go Live

Mon, 18 Feb 2013 17:01:32 +0000

Before the verification exam becomes available to the public, I need ONE OR TWO people to be the first through the complete program. This is not a “beta;” the exam is finalized and you will have to pay for your verification. The first one or two people will be semi-automated as I nail down the final payment integration bits, and then we’ll throw it open to the public.
If you’re interested, contact me at don at Concentrated Tech.com. First come, first served.

PhillyPoSH 02/07/2013 meeting summary and presentation materials

Sun, 17 Feb 2013 02:04:19 +0000

Jeff Hicks (Microsoft MVP and Author) gave a presentation on “Getting Started with PowerShell Advanced Functions”. You can download the presentation and example scripts here and watch a recording of the presentation below on our YouTube channel.
[youtube_sc url=“http://www.youtube.com/watch?v=77VbOO14DFE&feature=youtu.be”]
You can keep up with Jeff at his blog, on Twitter, and on Google Plus
We would also like to thank Interfacett and Powershell.org for providing funding for this meeting!

PowerShell Workflow"“the complete series

Wed, 13 Feb 2013 19:34:04 +0000

The series of articles on PowerShell workflows that are appearing on the Scripting Guy blog is now complete.

The articles in the series that have been published are:

http://blogs.technet.com/b/heyscriptingguy/archive/2012/12/26/powershell-workflows-the-basics.aspx

http://blogs.technet.com/b/heyscriptingguy/archive/2013/01/02/powershell-workflows-restrictions.aspx

http://blogs.technet.com/b/heyscriptingguy/archive/2013/01/09/powershell-workflows-nesting.aspx

http://blogs.technet.com/b/heyscriptingguy/archive/2013/01/16/powershell-workflows-job-engine.aspx

http://blogs.technet.com/b/heyscriptingguy/archive/2013/01/23/powershell-workflows-restarting-the-computer.aspx

http://blogs.technet.com/b/heyscriptingguy/archive/2013/01/30/powershell-workflows-using-parameters.aspx

http://blogs.technet.com/b/heyscriptingguy/archive/2013/02/06/powershell-workflows-design-considerations.aspx

http://blogs.technet.com/b/heyscriptingguy/archive/2013/02/13/powershell-workflows-a-practical-example.aspx

The series is complete for now but as workflow is such a new topic expect more on it in the future.

Until then Enjoy!

Winter Scripting Camp: The Post Mortem

Mon, 11 Feb 2013 21:51:59 +0000

Ok, aftermath time. In Winter Scripting Camp I saw some very cool stuff, but I know folks want to learn from this event too, so I want to call out some stuff that I didn’t like so much, and explain why. I’m keeping these brief - if you’d like a longer explanation, hit me up in thePowerShell Q&A forum. BTW, none of the discussion below implies anything about the grade I awarded the entry. I considered a much broader range of criteria and opinions in awarding grades.

Articles from February 2013 on PowerShell.org - Welcome Automaters!

Book offer"“AD Management in a Month of Lunches

Last nights Live Meeting

Filter or LDAP filter

PowerShell.org Forums Etiquette

Advanced Functions webcast

PowerShell in Depth"“nearly there

New book

VERIFIED EFFECTIVE for PowerShell 3.0 Toolmaking now live

Creating a Windows 2012 Domain Controller

CIM cmdlets and remote access

UK PowerShell Group"“Advanced functions

Filtering

"Verified Effective" About Ready to Go Live

PhillyPoSH 02/07/2013 meeting summary and presentation materials

PowerShell Workflow"“the complete series

Winter Scripting Camp: The Post Mortem

Want to be VERIFIED EFFECTIVE for PowerShell? Here's what to expect.

Scripting Games warm up

VERIFIED EFFECTIVE PowerShell "certification" program now ready for beta

Winter Scripting Camp Opened to the Public

Articles from February 2013 on PowerShell.org - Welcome Automaters!

Book offer"“AD Management in a Month of Lunches

Last nights Live Meeting

Filter or LDAP filter

PowerShell.org Forums Etiquette

Advanced Functions webcast

PowerShell in Depth"“nearly there

New book

VERIFIED EFFECTIVE for PowerShell 3.0 Toolmaking now live

Creating a Windows 2012 Domain Controller

CIM cmdlets and remote access

UK PowerShell Group"“Advanced functions

Filtering

"Verified Effective" About Ready to Go Live

PhillyPoSH 02/07/2013 meeting summary and presentation materials

PowerShell Workflow"“the complete series

Winter Scripting Camp: The Post Mortem

My Preference is No Preference

Redundant Code

No Examples?

I Got Your SilentlyContinue Right Here…

Consistency!

You’re Not an Accumulator

$Args[0]

Write-Host

Don’t OVERTHINK

Up Next…