@penguinwrangler Good work! I admit I would have been to lazy to go through all that. I would just have written a program to deal with it straight up instead instead of trying to use nix commands and scripting. Anything to avoid "escape hell" as I like to call it.

@dustinb3403 said in Getting PowerShell to provide me the EventLog details in an email: Yup. . . I'm an idiot lol. I set it to only look back 1 day and email me those results within the past day. This obviously would show blank results, since there are no 2013 events within the past day! Ha ha ha. Whoops!

One that I love Get-ADPrincipalGroupMembership -Identity SOMEUSERNAME | Select name List all of the groups in which the user is a member.

sadly - setting this didn't work as the 'mailbox' doesn't exist... Curse you MS

@wrcombs said in Uninstalling Programs (Windows 10) Using Powershell: @jaredbusch said in Uninstalling Programs (Windows 10) Using Powershell: @scottalanmiller said in Uninstalling Programs (Windows 10) Using Powershell: @wrcombs said in Uninstalling Programs (Windows 10) Using Powershell: @scottalanmiller said in Uninstalling Programs (Windows 10) Using Powershell: Now, I thought that you had installed this via Chocolatey, not the Windows installer, though. Based on other threads. I did install via Chocolatey does that have something to do with it? Yes, a lot. Chocolatey is its own package management system. So Get-WmiObject knows nothing about it and can't interact with it. It's not "installed" in Windows terms, it's just "sitting there." Actually, no. It is almost always there for windows to see. Because most chocolatey installs actually use the default windows installer. Just with a /silent switch (or whatever is appropriate). so by this information, one of the above commands should have worked? Not reliably. Only in the case, which might be "sometimes" and might be "often" and might be "almost always", where the one package manager used the other. So no matter how often it works, it's not "meant to work" and works only by coincidence. The coincidence might be really often, but it is still coincidence and not working by design.

@gjacobse You should just need to run this bit, nothing should have to be changed. DFL should be at least 2008 # Imports Active Directory information Import-Module Activedirectory $credentials = Get-Credential # Prompts for user credentials default user is “ ”, enter an administrator account in the form of “domain-name\administrator-account” Get-ADUser -Credential $credentials -Filter * -Properties DisplayName,EmailAddress,memberof,DistinguishedName,Enabled | % { New-Object PSObject -Property @{ UserName = $_.DisplayName EmailAddress = $_.EmailAddress DistinguishedName = $_.DistinguishedName Enabled = $_.Enabled # Deliminates the document for easy copy and paste using ";" as the delimiter. Incredibly useful for Copy & Paste of group memberships to new hire employees. Groups = ($_.memberof | Get-ADGroup | Select -ExpandProperty Name) -join ";" } # The export path is variable change to desired location on domain controller or end user computer. } | Select UserName,EmailAddress,@{l='OU';e={$_.DistinguishedName.split(',')[1].split('=')[1]}},Groups,Enabled | Sort-Object Username | Export-Csv $ENV:UserProfile\Documents\User-Permissions.csv –NTI

Must've been that one server. Seems like it's running fine on another one.

It's using the Intel controller. . . powershell.exe get-disk

@denis_mcgee said in Change Drive Letter with PowerShell: Very convenient, as for me Thanks

@dbeato said in Disable Network Level Authentication or NLA Remotely via PowerShell: @scottalanmiller said in Disable Network Level Authentication or NLA Remotely via PowerShell: (Get-WmiObject -class "Win32_TSGeneralSetting" -Namespace root\cimv2\terminalservices -ComputerName "remoteServer" -Filter "TerminalName='RDP-tcp'").SetUserAuthenticationRequired(0) This worked, but also as soon as the server is updated to the latest then the issue goes away. Yes, if you have that option.

@black3dynamite said in PowerShell Failing to Run on Fedora 28: Is that only a Fedora issue? No, definitely not isolated to Fedora. It's any distro, or any that are set up, in a way that PS doesn't like in terms of the xterm environmental. So most, I would assume, are affected, but all have a fix. It's a PS bug, and decently easy to work around.

@gjacobse said in PowerShell: Public Folder Search / remove: Is this what I am looking for? Remove-PublicFolderClientPermission -Identity "\My Public Folder" -User Contoso\Chris Looks correct to me.

A bit outside your specific question; however on my Exchange servers I just disabled the MSExchange ActiveDirectory Topology Service; doing that prevented the rest of the Exchange services from loading and KB40720650 loaded without issue

I got you # This script will export all users of the specified domain, and their group memberships to a CSV file. The usefulness of this tool is expressed when # setting up new hire employees or reviewing domain membership permissions. # It's not advisable to store the user credentials required to run this script as they can be decrypted. This script is not designed to save these credentials but could be modified to do so. # Use of this script implies that you understand what it does, and will do to with regards to your Active Directory installation members and group memberships. # As designed there are no changes made to your installation, the script simply generates a report of members, and their group memberships. # Any changes to this script are the responsibility of the person/organization which made said changes. # We cannot be held responsible for your misuse or misunderstanding of this script as it was designed. # # # # # Imports Active Directory information Import-Module Activedirectory $credentials = Get-Credential # Prompts for user credentials default user is “ ”, enter an administrator account in the form of “domain-name\administrator-account” Get-ADUser -Credential $credentials -Filter * -Properties DisplayName,EmailAddress,memberof,DistinguishedName,Enabled | % { New-Object PSObject -Property @{ UserName = $_.DisplayName EmailAddress = $_.EmailAddress DistinguishedName = $_.DistinguishedName Enabled = $_.Enabled # Deliminates the document for easy copy and paste using ";" as the delimiter. Incredibly useful for Copy & Paste of group memberships to new hire employees. Groups = ($_.memberof | Get-ADGroup | Select -ExpandProperty Name) -join ";" } # The export path is variable change to desired location on domain controller or end user computer. } | Select UserName,EmailAddress,@{l='OU';e={$_.DistinguishedName.split(',')[1].split('=')[1]}},Groups,Enabled | Sort-Object Username | Export-Csv $ENV:UserProfile\Documents\User-Permissions.csv –NTI #Function Get-SaveFile($initialDirectory) #{ #[System.Reflection.Assembly]::LoadWithPartialName("System.windows.forms") | #Out-Null # #$SaveFileDialog = New-Object System.Windows.Forms.SaveFileDialog #$SaveFileDialog.initialDirectory = $initialDirectory #$SaveFileDialog.filter = "All files (*.*)| *.*" #$SaveFileDialog.ShowDialog() | Out-Null #$SaveFileDialog.filename #} # # # open dialog box to select the .nessuss file. #$InputFile = Get-OpenFile #$OutputFile = Get-SaveFile # # #$Contents = [io.file]::ReadAllText($inputfile) #$Contents = [io.file]::ReadAllText('C:\tools\wd\nessus\data\data.xml') #$Global:OutFile = [System.IO.StreamWriter] "c:\tools\wd\nessus\outfile.csv" # ##$InputFile #$OutputFile #

The response from Microsoft for this issue is surprisingly quiet.

@dafyre said in Mapping OneDrive Business to a drive letter: @nerdydad said in Mapping OneDrive Business to a drive letter: @phlipelder said in Mapping OneDrive Business to a drive letter: @nerdydad That's not for the user. That's for the admin who then delivers that via whatever management solution they use. Quick Access/Favorites can be Group Policy managed so all or some domain members can get it easily. For external users it's a two step process to send them a shortcut and they know how to log on from there. There are 4 RDP servers, brokered together for our ERP system, along with all of the off-chutes that some users will have with some other servers for whatever reason, plus their desktop, for 130 users. I find the most difficult part of managing an RDP farm is getting the apps themselves to play nicely. I've only had a couple of apps that just flat out refused to work correctly. Since this is all virtualized, I'll just take one server, sysprep it, shut it down, and then just clone it. Apps are all the exact same. The only thing that needs to change are the UUID's and the database.

@psx_defector said in IIS Security setup: Best practice isn't up to date. Set it to PCI 1.2, that disables TLS1.0, all the AES stuff, etc. etc. You can also disable them manually in the first screen. Great, thanks.

@wrx7m said in Creating Scheduled Task with Powershell - Using specific user account: @obsolesce said in Creating Scheduled Task with Powershell - Using specific user account: I know this post is old, but I've found doing scheduled tasks with SaltStack is insanely simple and very effective lately... so much more than using MS Group Policy. https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.win_task.html I really want to get back into learning saltstack again. Here's an example of a task that goes to all minions it's supposed to go to... and it "just works". No AD required. Also, using SaltStack to sync that .ps1 it runs from GitLab:

@obsolesce said in Server 2012: PS Get-ADGroupMember: I use a Linux server that is domain joined to see what groups a MS AD user is a member of. It's just way easier and faster. id [email protected] Done. I was just saying how ridiculously cumbersome this is because of Windows.

@jaredbusch said in Powershell create shortcut to server root share: @DustinB3403 what about the public desktop instead of hte user desktop? Then it will always be there, regardless of who logs in. Not a huge concern for our use cases as we usually just end up wiping a system and reloading between user changes. I thought about it, but it wasn't critical and as we change things around it becomes a pain to remove the old links to systems that may not exist any more.

This sorted out clipboard | select skip -7| out-string

I believe if PowerShell is your method, you will not be able to do what you are trying to achieve. The only way now is to use the one that has just been advised.

@scottalanmiller said in List All Public Folders in Exchange or Office 365 with PowerShell: Want to get a list of all of the public folders on your Exchange system, whether on premises or hosted, try this: Get-PublicFolder -Identity "\" -Recurse | Get-PublicFolderClientPermission | where{$_.Accessrights -eq "owner"} More on Get-PublicFolder from TechNet That's pretty cool. I was wondering why you were piping into every owner since you could create public folders in Exchange without delegating owners, but then I had remembered you can create them on the client side as well after a root or folders are created in Exchange and added to the client, which is explained in your first pipe. Thanks for the note.

@stess https://blogs.technet.microsoft.com/platformspfe/2014/01/20/integrating-xaml-into-powershell/ look at this. It gives the basics of integrating XAML into a PowerShell script and might be right what you are looking for.