They aren't in the ML community but special shoutout to Ariel Sanchez and Joe Houghes for this help. Somebody needs to get them into ML. https://twitter.com/TheRealNerdyDad/status/1049365117140447238

Turns out that it needed the -Credential flag, which Microsoft doesn't document as a requirement. This worked find... Add-Computer -DomainName "mydomain" -Credential mydomain\myusername

The specific package adobereader is a horrible example though. Because until this month, you installed adobereader-update which also installed adobereader first as part of the package. But now, suddenly, adobereader is all that is needed. adobereader history. adobereader-update history.

The batch file I have for one client is this: powershell Rename-Computer -NewName "COMPUTER_NAME" -DomainCredential DOMAIN\ADMINUser -Restart Where COMPUTER_NAME to not exceed the 15 character limit ETA: I should add that this batch script start with installing Chocolatey package management tools, then the default applications,

Since I was working with only ONE user this is what I needed to change it to, else was getting Parameter set cannot be resolved Import-module ActiveDirectory Get-ADUser -Filter {Name -eq "SomeUser"} -SearchBase "OU=Users,OU=OUGroup,DC=DOMAINname,DC=com" | Set-ADUser –scriptPath “\\SERVERNAME\netlogon\2018ADUC-script.txt” But it worked!

This would work on prem exchange. Probably works with a tweak for o365. Get-mailbox | get-inboxrule | remove-inboxrule

@penguinwrangler Good work! I admit I would have been to lazy to go through all that. I would just have written a program to deal with it straight up instead instead of trying to use nix commands and scripting. Anything to avoid "escape hell" as I like to call it.

@dustinb3403 said in Getting PowerShell to provide me the EventLog details in an email: Yup. . . I'm an idiot lol. I set it to only look back 1 day and email me those results within the past day. This obviously would show blank results, since there are no 2013 events within the past day! Ha ha ha. Whoops!

One that I love Get-ADPrincipalGroupMembership -Identity SOMEUSERNAME | Select name List all of the groups in which the user is a member.

sadly - setting this didn't work as the 'mailbox' doesn't exist... Curse you MS

@wrcombs said in Uninstalling Programs (Windows 10) Using Powershell: @jaredbusch said in Uninstalling Programs (Windows 10) Using Powershell: @scottalanmiller said in Uninstalling Programs (Windows 10) Using Powershell: @wrcombs said in Uninstalling Programs (Windows 10) Using Powershell: @scottalanmiller said in Uninstalling Programs (Windows 10) Using Powershell: Now, I thought that you had installed this via Chocolatey, not the Windows installer, though. Based on other threads. I did install via Chocolatey does that have something to do with it? Yes, a lot. Chocolatey is its own package management system. So Get-WmiObject knows nothing about it and can't interact with it. It's not "installed" in Windows terms, it's just "sitting there." Actually, no. It is almost always there for windows to see. Because most chocolatey installs actually use the default windows installer. Just with a /silent switch (or whatever is appropriate). so by this information, one of the above commands should have worked? Not reliably. Only in the case, which might be "sometimes" and might be "often" and might be "almost always", where the one package manager used the other. So no matter how often it works, it's not "meant to work" and works only by coincidence. The coincidence might be really often, but it is still coincidence and not working by design.

@gjacobse You should just need to run this bit, nothing should have to be changed. DFL should be at least 2008 # Imports Active Directory information Import-Module Activedirectory $credentials = Get-Credential # Prompts for user credentials default user is “ ”, enter an administrator account in the form of “domain-name\administrator-account” Get-ADUser -Credential $credentials -Filter * -Properties DisplayName,EmailAddress,memberof,DistinguishedName,Enabled | % { New-Object PSObject -Property @{ UserName = $_.DisplayName EmailAddress = $_.EmailAddress DistinguishedName = $_.DistinguishedName Enabled = $_.Enabled # Deliminates the document for easy copy and paste using ";" as the delimiter. Incredibly useful for Copy & Paste of group memberships to new hire employees. Groups = ($_.memberof | Get-ADGroup | Select -ExpandProperty Name) -join ";" } # The export path is variable change to desired location on domain controller or end user computer. } | Select UserName,EmailAddress,@{l='OU';e={$_.DistinguishedName.split(',')[1].split('=')[1]}},Groups,Enabled | Sort-Object Username | Export-Csv $ENV:UserProfile\Documents\User-Permissions.csv –NTI

Must've been that one server. Seems like it's running fine on another one.

It's using the Intel controller. . . powershell.exe get-disk

@denis_mcgee said in Change Drive Letter with PowerShell: Very convenient, as for me Thanks

@dbeato said in Disable Network Level Authentication or NLA Remotely via PowerShell: @scottalanmiller said in Disable Network Level Authentication or NLA Remotely via PowerShell: (Get-WmiObject -class "Win32_TSGeneralSetting" -Namespace root\cimv2\terminalservices -ComputerName "remoteServer" -Filter "TerminalName='RDP-tcp'").SetUserAuthenticationRequired(0) This worked, but also as soon as the server is updated to the latest then the issue goes away. Yes, if you have that option.

@black3dynamite said in PowerShell Failing to Run on Fedora 28: Is that only a Fedora issue? No, definitely not isolated to Fedora. It's any distro, or any that are set up, in a way that PS doesn't like in terms of the xterm environmental. So most, I would assume, are affected, but all have a fix. It's a PS bug, and decently easy to work around.

@gjacobse said in PowerShell: Public Folder Search / remove: Is this what I am looking for? Remove-PublicFolderClientPermission -Identity "\My Public Folder" -User Contoso\Chris Looks correct to me.

A bit outside your specific question; however on my Exchange servers I just disabled the MSExchange ActiveDirectory Topology Service; doing that prevented the rest of the Exchange services from loading and KB40720650 loaded without issue

I got you # This script will export all users of the specified domain, and their group memberships to a CSV file. The usefulness of this tool is expressed when # setting up new hire employees or reviewing domain membership permissions. # It's not advisable to store the user credentials required to run this script as they can be decrypted. This script is not designed to save these credentials but could be modified to do so. # Use of this script implies that you understand what it does, and will do to with regards to your Active Directory installation members and group memberships. # As designed there are no changes made to your installation, the script simply generates a report of members, and their group memberships. # Any changes to this script are the responsibility of the person/organization which made said changes. # We cannot be held responsible for your misuse or misunderstanding of this script as it was designed. # # # # # Imports Active Directory information Import-Module Activedirectory $credentials = Get-Credential # Prompts for user credentials default user is “ ”, enter an administrator account in the form of “domain-name\administrator-account” Get-ADUser -Credential $credentials -Filter * -Properties DisplayName,EmailAddress,memberof,DistinguishedName,Enabled | % { New-Object PSObject -Property @{ UserName = $_.DisplayName EmailAddress = $_.EmailAddress DistinguishedName = $_.DistinguishedName Enabled = $_.Enabled # Deliminates the document for easy copy and paste using ";" as the delimiter. Incredibly useful for Copy & Paste of group memberships to new hire employees. Groups = ($_.memberof | Get-ADGroup | Select -ExpandProperty Name) -join ";" } # The export path is variable change to desired location on domain controller or end user computer. } | Select UserName,EmailAddress,@{l='OU';e={$_.DistinguishedName.split(',')[1].split('=')[1]}},Groups,Enabled | Sort-Object Username | Export-Csv $ENV:UserProfile\Documents\User-Permissions.csv –NTI #Function Get-SaveFile($initialDirectory) #{ #[System.Reflection.Assembly]::LoadWithPartialName("System.windows.forms") | #Out-Null # #$SaveFileDialog = New-Object System.Windows.Forms.SaveFileDialog #$SaveFileDialog.initialDirectory = $initialDirectory #$SaveFileDialog.filter = "All files (*.*)| *.*" #$SaveFileDialog.ShowDialog() | Out-Null #$SaveFileDialog.filename #} # # # open dialog box to select the .nessuss file. #$InputFile = Get-OpenFile #$OutputFile = Get-SaveFile # # #$Contents = [io.file]::ReadAllText($inputfile) #$Contents = [io.file]::ReadAllText('C:\tools\wd\nessus\data\data.xml') #$Global:OutFile = [System.IO.StreamWriter] "c:\tools\wd\nessus\outfile.csv" # ##$InputFile #$OutputFile #

The response from Microsoft for this issue is surprisingly quiet.

@dafyre said in Mapping OneDrive Business to a drive letter: @nerdydad said in Mapping OneDrive Business to a drive letter: @phlipelder said in Mapping OneDrive Business to a drive letter: @nerdydad That's not for the user. That's for the admin who then delivers that via whatever management solution they use. Quick Access/Favorites can be Group Policy managed so all or some domain members can get it easily. For external users it's a two step process to send them a shortcut and they know how to log on from there. There are 4 RDP servers, brokered together for our ERP system, along with all of the off-chutes that some users will have with some other servers for whatever reason, plus their desktop, for 130 users. I find the most difficult part of managing an RDP farm is getting the apps themselves to play nicely. I've only had a couple of apps that just flat out refused to work correctly. Since this is all virtualized, I'll just take one server, sysprep it, shut it down, and then just clone it. Apps are all the exact same. The only thing that needs to change are the UUID's and the database.

@psx_defector said in IIS Security setup: Best practice isn't up to date. Set it to PCI 1.2, that disables TLS1.0, all the AES stuff, etc. etc. You can also disable them manually in the first screen. Great, thanks.

@wrx7m said in Creating Scheduled Task with Powershell - Using specific user account: @obsolesce said in Creating Scheduled Task with Powershell - Using specific user account: I know this post is old, but I've found doing scheduled tasks with SaltStack is insanely simple and very effective lately... so much more than using MS Group Policy. https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.win_task.html I really want to get back into learning saltstack again. Here's an example of a task that goes to all minions it's supposed to go to... and it "just works". No AD required. Also, using SaltStack to sync that .ps1 it runs from GitLab:

@obsolesce said in Server 2012: PS Get-ADGroupMember: I use a Linux server that is domain joined to see what groups a MS AD user is a member of. It's just way easier and faster. id [email protected] Done. I was just saying how ridiculously cumbersome this is because of Windows.