Windows Server Automation with PowerShell Cookbook - Fifth Edition

By : Thomas Lee

Windows Server Automation with PowerShell Cookbook - Fifth Edition

By: Thomas Lee

Overview of this book

The Windows Server Automation with PowerShell Cookbook is back with a new edition, featuring over 100 PowerShell recipes that will make your day-to-day work easier. This book is designed to help you learn how to install, configure and use PowerShell 7.2 effectively. To start with, we’ll look at how to install and configure PowerShell 7.2, along with useful new features and optimizations, and show you how the PowerShell compatibility solution bridges the gap to older versions of PowerShell. We’ll also be covering a wide range of fundamental and more advanced use cases, including how to create a VM and set up an Azure VPN, as well as looking at how to back up to Azure. As you progress, you’ll explore topics such as using PowerShell to manage networking and DHCP in Windows Server, objects in Active Directory, Hyper-V, and Azure. We’ll also take a closer look at WSUS, containers and see how to handle modules that are not directly compatible with PowerShell 7. Finally, you’ll also learn how to use some powerful tools to diagnose and resolve issues with Windows Server. By the end of this PowerShell book, you’ll know how to use PowerShell 7.2 to automate tasks on Windows Server 2022 with ease, helping your Windows environment to run faster and smoother.

Preface

Who this book is for

What this book covers

To get the most out of this book

Get in touch

Free Chapter

Installing and Configuring PowerShell 7

Introduction

Installing PowerShell 7

Installing PowerShell 7 Using Chocolatey

Using the PowerShell 7 Console

Building PowerShell 7 Profile Files

Exploring Installation Artifacts

Installing VS Code

Installing the Cascadia Code Font

Exploring PSReadLine

Managing PowerShell 7 in the Enterprise

Introduction

Utilizing Windows PowerShell Compatibility

Installing RSAT

Exploring Package Management

Exploring PowerShellGet and the PS Gallery

Creating and Using a Local Package Repository

Establishing a Script Signing Environment

Working With Shortcuts and the PSShortCut Module

Working With Archive Files

Searching for Files Using the Everything Search Tool

Exploring .NET

Introduction

Exploring .NET Assemblies

Exploring .NET Classes

Exploring .NET Methods

Creating a C# Extension

Creating a cmdlet

Managing Active Directory

Introduction

Installing a Forest Root Domain

Testing an AD installation

Installing a Replica Domain Controller

Installing a Child Domain

Creating and Managing AD Users and Groups

Managing AD Computers

Adding/Removing Users Using a CSV Files

Creating Group Policy Objects

Reporting on AD Users

Reporting on AD Computers

Managing AD Replication

Managing Networking

Introduction

Configuring IP Addressing

Testing Network Connectivity

Installing DHCP

Configuring DHCP Scopes and Options

Using DHCP

Configuring a DHCP Reservation

Implementing DHCP Fail Over/Load Balancing

Implementing DNS in the Enterprise

Managing DNS Zones and Resource Records

Configuring DNS Forwarding

Implementing Enterprise Security

Introduction

Implementing Just Enough Administration (JEA)

Examining Applications and Services Logs

Discovering Logon Events in the Event Log

Deploying PowerShell Group Policies

Using PowerShell Script Block Logging

Configuring AD Password Policies

Managing Windows Defender Antivirus

Managing Storage

Introduction

Managing Disks

Managing File Systems

Exploring PowerShell Providers and the FileSystem Provider

Managing Storage Replica

Deploying Storage Spaces

Managing Shared Data

Introduction

Managing NTFS File and Folder Permissions

Securing Your SMB File Server

Creating and Securing SMB Shares

Accessing SMB Shares

Creating an iSCSI Target

Using an iSCSI Target

Implementing FSRM Filestore Quotas

Implementing FSRM Filestore Reporting

Implementing FSRM Filestore Screening

Managing Printing

Introduction

Installing and Sharing Printers

Publishing a Printer to Active Directory

Changing the Spooler Directory

Changing Printer Drivers

Printing a Test Page

Managing Printer Security

Creating a Printer Pool

Exploring Windows Containers

Introduction

Configuring a container host

Deploying sample containers

Deploying IIS in a container

Using a Dockerfile to create a custom container

Managing Hyper-V

Introduction

Installing Hyper-V inside Windows Server

Creating a Hyper-V VM

Using PowerShell Direct

Using Hyper-V VM groups

Configuring the VM hardware

Configuring VM networking

Implementing nested virtualization

Managing the VM state

Managing a VM and VM storage movement

Managing VM replication

Managing VM checkpoints

Creating a Hyper-V report

Debugging and Troubleshooting Windows Server

Introduction

Using PSScriptAnalyzer

Performing BASIC Network Troubleshooting

Using Get-NetView to Diagnose Network Issues

Using Best Practices Analyzer

Exploring PowerShell Script Debugging

Managing Windows Server with Window Management Instrumentation (WMI)

Introduction

Exploring WMI Architecture in Windows

Exploring WMI Namespaces

Exploring WMI Classes

Obtaining WMI Class Instances

Using WMI Methods

Using WMI Events

Implementing Permanent WMI Eventing

Managing Windows Update Services

Introduction

Installing Windows Server Update Services

Configuring WSUS Update Synchronization

Configuring the Windows Update Client

Creating Computer Target Groups

Configuring WSUS Automatic Approvals

Managing WSUS Updates

Other Books You May Enjoy

Index

Customer Reviews

5 star

4 star

3 star

2 star

1 star

Reporting on AD Users

Monitoring the Active Directory is a necessary albeit time-consuming task. With larger numbers of users and computers to manage, you need all the help you can get, and PowerShell makes it easy to keep track of things.

If a user has not logged on for a reasonable period, the account could be a security risk. Likewise, a user with membership in a privileged account (for example, Enterprise Admins) could be used by an attacker. IT professionals know how easy it is to put someone in a high privilege group rather than set up more fine-grained permissions using something like Just Enough Administration (see “Implementing JEA” in Chapter 8).

Regular reporting can help focus on accounts that could be usefully de-activated, removed from a security group, or possibly removed altogether.

In this recipe, you obtain all the accounts in the AD and examine potential security risks.

Getting ready

After running the recipes in this chapter, you run this recipe on DC1...

Windows Server Automation with PowerShell Cookbook - Fifth Edition

By : Thomas Lee

Windows Server Automation with PowerShell Cookbook - Fifth Edition

By: Thomas Lee

Overview of this book

Related Content you might be interested in

Current Title:

Windows Server Automation with PowerShell Cookbook - Fifth Edition

Windows Server 2016 Automation with PowerShell Cookbook

Powershell Core 6.2 Cookbook

PowerShell Automation and Scripting for Cybersecurity

Reporting on AD Users

Getting ready