Windows on Automate everything

How to REST the Have I Been Pwned (HIBP) API

Mon, 23 Jan 2023 16:12:12 +1000

Perform REST API requests to the HIBP API to verify if your email or password have been involved in a data breach.

Understanding and Improving Your Cybersecurity Posture in 2023: The Importance of strong Passwords, 2FA and Awareness of Phishing Scams

Mon, 23 Jan 2023 15:00:26 +1000

Cybersecurity is the practice of protecting internet-connected systems, including hardware, software, and data, from attack, damage, or unauthorized access. One aspect of cybersecurity is protecting personal information, such as passwords, account data but also your privacy. In this article, we revisit the basics in cyber security, as there are daily new attacks and ways hackers try to get personal data.

Fresh Development Setup within 10 Minutes using Winget

Fri, 13 May 2022 00:00:00 +0000

Sometimes you have to setup your Laptop/Notebook fresh and also prepare your developer environment and tools you need. I noticed this again today when I rebooted my machine and spent almost 2 hours installing the tools I need to work.

I have put together a list of commands you can use to prepare your environment using Windows Package Manager (WinGet) for you which gives you a kick start at the next reset and you can continue working directly after 10 minutes.

Visual Studio Code Keyboard Shortcuts

Mon, 02 Aug 2021 15:30:25 +0800

Today I learned Visual Studio Code Keyboard Shortcuts for Windows, macOs and Linux.

Visual Studio Code lets you perform most tasks directly from the keyboard. This page lists out the default bindings (keyboard shortcuts).

Get Local Account Memberships

Thu, 21 Feb 2019 00:00:00 +0000

Okay, yeah there are plenty of scripts out which give you local accounts via WMI or ADSI and yes scripts exist also which give you all local groups but there is not one which gives you both (of course there are also some) but what if you’re looking to implement this as a CustomScriptExtension to your Azure VM?

How to adjust Windows Failover Cluster 'Response to Resource Failure' Policy

Mon, 01 Jan 2018 00:00:00 +0000

The purpose of this article is to show how to adjust Windows Failover Cluster “Response to resource failure” policy.

Set primary IP address order with multiple IP addresses on a NIC

Sun, 26 Nov 2017 11:29:53 +0800

If you’re running a webserver it may be you have to run different services on the same port and need to use multiple IP addresses on the same network interface. This can happen for SMTP or Exchange Servers using several connectors.

Get-LogonHistory: Who was logged on to my server?

Thu, 05 Oct 2017 11:26:46 +0800

Every System Administrator comes into a situation where you want to see who and how many users were logged on to your servers either via Remote Desktop or via script.

Get-PSVersions: Retrieve Powershell version remotely

Fri, 22 Sep 2017 11:51:06 +0800

Okay at the end it’s a simple $PSVersion wrapped in an Invoke-Command but hey these simple things are needful in case you need to run it against of 100s of servers and not just locally. With the help of Invoke-Command via WinRM and $PSVersionTable.psversion wrapped in a foreach you can retrieve PowerShell version of your remote computers indifferent if you need to use credentials to run it against a different domain than you currently reside. Just use the below function Get-PSVersions, simple but good.

Resolve-DnsNames: Resolve DNS or IP for multiple Computers

Sun, 10 Sep 2017 11:47:24 +0800

Respective Microsoft’s Technet article regarding Resolve-DnsName I have created a function with the ability to run it against more than only one computer. Resolve-DnsNames performs a DNS name query resolution for the specified name.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98


Function Resolve-DnsNames
{
<#
.SYNOPSIS
 Resolves IP or DNS name for one or more computers.

.DESCRIPTION
 Resolves IP or DNS name for one or more computers.

.PARAMETER ComputerName
 A single Computer or an array of computer names. The default is localhost ($env:COMPUTERNAME).

.PARAMETER IPAddress
 Commit IPAddress to resolve.

.PARAMETER Verbose
 Run in Verbose Mode.

.EXAMPLE
 PS C:> Resolve-DnsNames graef.io

 Name Type TTL Section IPAddress
 ---- ---- --- ------- ---------
 graef.io AAAA 86336 Answer 2a01:488:42:1000:50ed:84e8:ff91:1f91
 graef.io A 86336 Answer 80.237.132.232


.EXAMPLE
	PS C:> Resolve-DnsNames 80.237.132.232

 Name Type TTL Section NameHost
 ---- ---- --- ------- --------
 232.132.237.80.in-addr.arpa PTR 40292 Answer graef.io

.EXAMPLE
 PS C:> Resolve-DnsNames -ComputerName (Get-Content C:ServerList.txt)

.LINK

Home


.NOTES
 Author: Sebastian Gräf
 Email: sebastian@graef.io
 Date: September 10, 2017
 PSVer: 2.0/3.0/4.0/5.0
#>

	[Cmdletbinding()]
	Param (
		[Parameter(
				 Mandatory = $false,
				 ValueFromPipeline = $true,
				 ValueFromPipelineByPropertyName = $true)]
		[string[]]$ComputerName = $Env:COMPUTERNAME
	)

	Begin
	{
		Write-Verbose " [$($MyInvocation.InvocationName)] :: Start Process"
 $ProgressCounter = 0
 $array=@()
	}

	Process
	{
 foreach ($Computer in $ComputerName)
		{
 $ProgressCounter++
			Write-Progress -activity "Running on $Computer" -status "Please wait ..." -PercentComplete (($ProgressCounter / $ComputerName.length) * 100)
				Write-Verbose " [$($MyInvocation.InvocationName)] :: Processing $Computer"
				try
				{
 $Resolution = Resolve-DnsName $Computer -ErrorAction SilentlyContinue
 $obj = New-Object PSObject
 $obj | Add-Member NoteProperty ComputerName ($Computer)
 $obj | Add-Member NoteProperty Name ($Resolution.Name)
 $obj | Add-Member NoteProperty Type ($Resolution.Type)
 $obj | Add-Member NoteProperty TTL ($Resolution.TTL)
 $obj | Add-Member NoteProperty Section ($Resolution.Section)
 $obj | Add-Member NoteProperty NameHost ($Resolution.NameHost)
 $obj | Add-Member NoteProperty IPAddress ($Resolution.IPAddress)
 $array += $obj

				}
				catch
				{
					Write-Verbose " Host [$Computer] Failed with Error: $($Error[0])"
				}
	 }
 $array | ft
 }
	End
	{
		Write-Verbose " [$($MyInvocation.InvocationName)] :: End Process"
	}
}

References

Resolve-DnsName

Get-DellTags: Get Dell Tags and Express Service Code remotely

Tue, 15 Aug 2017 11:40:27 +0800

Get DELL Tag and Express Service Code remotely for more than one computer.

Get-ScsiDisks: Combine Physicaldisk and Logicaldisk Objects

Thu, 10 Aug 2017 11:48:24 +0800

Hi there, following function Get-ScsiDisks retrieves disk details for VMWare Guests or any computer with corresponding SCSI disk details like SCSI ID and SCSI Bus. The function concatenates objects consisting of Win32_DiskDrive, Win32_LogicalDisk and Win32_DiskDriveToDiskPartition using WMI. For WinRM you can use Invoke-Command and inject the script.

 1
 2
 3
 4
 5
 6
 7
 8
 9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125


Function Get-ScsiDisks
{
<#
.SYNOPSIS
 Retrieves disk details for VMWare Guests with corresponding SCSI disk details like SCSI ID
 and SCSI Bus.

.DESCRIPTION
 Retrieves a concatenated object consisting of Win32_DiskDrive, Win32_LogicalDisk and
 Win32_DiskDriveToDiskPartition using WMI. For WinRM you can use Invoke-Command and inject the script.

.PARAMETER ComputerName
 A single Computer or an array of computer names. The default is localhost ($env:COMPUTERNAME).

.PARAMETER Credentials
 Commit Credentials for a different domain.

.PARAMETER Verbose
 Run in Verbose Mode.

.EXAMPLE
 PS C:> Get-ScsiDisks

 ComputerName Disk DriveLetter VolumeName Size FreeSpace DiskModel
 ------------ ---- ----------- ---------- ---- --------- ---------
 SERVER \.PHYSICALDRIVE1 D: Data 767 767 VMware Virtual di...
 SERVER \.PHYSICALDRIVE0 C: OS 59 39 VMware Virtual di...

.EXAMPLE
	PS C:> Get-ScsiDisks | Out-GridView

.EXAMPLE
	PS C:> Get-ScsiDisks | ft -a

.EXAMPLE
	PS C:> Get-ScsiDisks -ComputerName (gc 'C:VMs.txt') -Credentials Get-Credential

.LINK

Home


.NOTES
 Author: Sebastian Gräf
 Email: ps@graef.io
 Date: September 12, 2017
 PSVer: 3.0/4.0/5.0
#>

	[Cmdletbinding()]
	Param (
		[Parameter(ValueFromPipelineByPropertyName = $true, ValueFromPipeline = $true)]
		$ComputerName = $Env:COMPUTERNAME,
		[Parameter(ValueFromPipelineByPropertyName = $true, ValueFromPipeline = $true)]
		[ValidateNotNull()]
		[System.Management.Automation.PSCredential][System.Management.Automation.Credential()]
		$Credentials = [System.Management.Automation.PSCredential]::Empty
	)

	Begin
	{
		Write-Verbose " [$($MyInvocation.InvocationName)] :: Start Process"
		$result=@()
		$ProgressCounter = 0
	}


	Process
	{
		foreach ($Computer in $ComputerName)
		{
			$ProgressCounter++
			Write-Progress -activity "Running on $Computer" -status "Please wait ..." -PercentComplete (($ProgressCounter / $ComputerName.length) * 100)
			if (Test-Connection $Computer -Count 1 -Quiet)
			{
				Write-Verbose " [$($MyInvocation.InvocationName)] :: Processing $Computer"
				try
				{
					Get-WmiObject -Class Win32_DiskDrive -ComputerName $Computer -Credential $Credentials | % {
						$disk = $_
						$partitions = "ASSOCIATORS OF " +
						"{Win32_DiskDrive.DeviceID='$($disk.DeviceID)'} " +
						"WHERE AssocClass = Win32_DiskDriveToDiskPartition"
						Get-WmiObject -Query $partitions -ComputerName $Computer -Credential $Credentials | % {
							$partition = $_
							$drives = "ASSOCIATORS OF " +
							"{Win32_DiskPartition.DeviceID='$($partition.DeviceID)'} " +
							"WHERE AssocClass = Win32_LogicalDiskToPartition"
							Get-WmiObject -Query $drives -ComputerName $Computer -Credential $Credentials | % {
								$obj = New-Object -Type PSCustomObject -Property @{
									ComputerName = $Computer
									Disk = $disk.DeviceID
									DiskSize = [math]::Truncate($disk.Size / 1GB);
									DiskModel = $disk.Model
									Partition = $partition.Name
									DriveLetter = $_.DeviceID
									VolumeName = $_.VolumeName
									Size = [math]::Truncate($_.Size / 1GB)
									FreeSpace = [math]::Truncate($_.FreeSpace / 1GB)
									SCSIBus = $disk.SCSIBus
									SCSITargetId = $disk.SCSITargetId
								}
								$result += $obj
							}
						}
					}
				}
				catch
				{
					Write-Verbose " Host [$Computer] Failed with Error: $($Error[0])"
				}
			}
			else
			{
				Write-Verbose " Host [$Computer] Failed Connectivity Test"
			}
		}
 $result | select ComputerName,Disk,DriveLetter,VolumeName,Size,FreeSpace,DiskModel,Partition,SCSIBus,SCSITargetId
	}
	End
	{
		Write-Progress -activity "Running on $Computer" -Status "Completed." -Completed
		Write-Verbose " [$($MyInvocation.InvocationName)] :: End Process"
	}
}

Simulate-Activity: Simulate user mouse and keyboard input with PowerShell

Thu, 10 Aug 2017 11:11:29 +0800

If you want to avoid or block coming up your screensaver locally or remotely, take this nice script.

Resolve DNS and IP addresses with PowerShell

Mon, 10 Jul 2017 11:12:17 +0800

In this case we’re going to use the method GetHostAddresses of the Dns class of the Sytem.Net namespace. For PowerShell 2.0 you can use following Windows PowerShell One Liners:

Name to IP Address (DNS Forward)

1
2


[System.Net.Dns]::GetHostAddresses('graef.io')
[System.Net.Dns]::GetHostAddresses('graef.io').IPAddressToString

IP Address to Name (DNS Reverse)

1
2
3
4
5


[System.Net.Dns]::GetHostbyAddress('85.13.135.42')

HostName Aliases AddressList
-------- ------- -----------
graef.io {} {85.13.135.42}

As of PowerShell 4.0 you can use the Cmdlet Resolve-DnsName as well as for both Forward and Reverse:

Show non-present devices in Windows with Device Manager

Tue, 27 Jun 2017 11:29:53 +0800

Open PowerShell or Commmand Shell, enter the following

1
2


set devmgr_show_nonpresent_devices=1
devmgmt.msc

This will open your device manager with the ability to show hidden devices. Click on View and select “Show hidden devices”.

Select your hidden device you need to remove, right click and select uninstall. That’s it!

Configure Cluster Quorum node weight settings

Fri, 23 Jun 2017 11:29:53 +0800

While using SQL AlwaysOn in connection with a third node on a different location as a DR solution, the third node is needed only in case there is a real Disaster Recovery.

Show-Command: Get a GUI-Interface for any Powershell Cmdlet

Sat, 15 Apr 2017 11:37:17 +0800

Have you ever wondered if there’s an opportunity to easily create a GUI out of every PowerShell Cmdlet?

How to Install KB Hotfixes only if they are not installed

Sun, 02 Apr 2017 11:20:43 +0800

I just wanted to share you a tiny snippet if you’re looking for a simple PowerShell liner to simply get a KB Hotfix installed. It also verifies if the KB is installed already.

KMS: How to Find Windows Server Licensing Details

Fri, 10 Mar 2017 11:13:41 +0800

If you’re searching for Windows Server Licensing and Activation Details of your Windows machine you can use following statements

GhostBuster: Remove all Non-present and hidden devices in Windows

Sun, 12 Feb 2017 11:25:02 +0800

As described in one of my previous articles How to show nonpresent devices in Windows with Device Manager you were able to show nonpresent devices in device manager and delete them one bye one.