I eat complexity and am never without a meal.

Gather Remote Event Logs With Powershell

2013-10-16 1 min read Powershell Security System Administration Zachary Loeber

About Gather the remote event log information for one or more systems using wmi, alternate credentials, and multiple runspaces. Function supports custom timeout parameters in case of wmi problems and returns Event Log information for the specified number of past hours. You can view verbose information on each runspace thread in realtime with the -Verbose option. Version History 1.0.0 – 10/16/2013 Initial release Notes By default 24 hours is what we filter against for the results. Continue reading

Retrieve Remote Scheduled Task Information With Powershell

2013-10-06 2 min read Microsoft Powershell System Administration Zachary Loeber

This function uses multiple runspaces with along with COM objects to gather information about the scheduled tasks of remote systems. Getting this to work with alternate credentials may be possible but I wasn’t able to discern a usable method to make it happen so I resorted to PSremoting. What this means is that this script will work against multiple remote systems which do not have psremoting enabled as long as you are running the script with an account that has administrative rights to them. If you do pass a credential to the function then psremoting will be used instead. You can also force psremoting to be used if you are using that across the board in your environment.

Visualize Active Directory Site Connections

2013-10-06 1 min read Active Directory Microsoft Powershell System Administration Zachary Loeber

In this post I use powershell with graphviz to create an Active Directory diagram of all site connections between servers. Additionally, I’ve included some code which displays site connection options. You may be able to use this to find isolated DCs or just to see a pretty diagram.

Older posts Newer posts