Windows Server 2019 Automation with PowerShell Cookbook

Windows Server 2019 Automation with PowerShell Cookbook - Third Edition

By : Thomas Lee

Buy this Book

Windows Server 2019 Automation with PowerShell Cookbook - Third Edition

By: Thomas Lee

Buy this Book

Overview of this book

Windows Server 2019 is the latest version of Microsoft’s flagship server operating system. It also comes with PowerShell Version 5.1 and offers a number of additional features that IT professionals will find useful. This book is designed to help you learn how to use PowerShell and manage the core roles, features, and services of Windows Server 2019. You will begin by creating a PowerShell Administrative Environment that features updated versions of PowerShell, the Windows Management Framework, .NET Framework, and third-party modules. Next, you will learn to use PowerShell to set up and configure Windows Server 2019 networking and understand how to manage objects in the Active Directory (AD) environment. The book will also guide you in setting up a host to utilize containers and deploying containers. Further along, you will be able to implement different mechanisms to achieve Desired State Configuration. The book will then get you up to speed with Azure infrastructure, in addition to helping you get to grips with setting up virtual machines (VMs), websites, and file share on Azure. In the concluding chapters, you will be able to deploy some powerful tools to diagnose and resolve issues with Windows Server 2019. By the end of this book, you will be equipped with a number of useful tips and tricks to automate your Windows environment with PowerShell.

Windows Server 2019 Automation with PowerShell Cookbook Third Edition

Foreword

Contributors

Preface

Free Chapter

Establishing a PowerShell Administrative Environment

Introduction

Installing RSAT tools on Window 10 and Windows Server 2019

Exploring package management

Exploring PowerShellGet and the PSGallery

Creating an internal PowerShell repository

Establishing a code-signing environment

Implementing Just Enough Administration

Managing Windows Networking

Introduction

New ways to do old things

Configuring IP addressing

Installing and authorizing a DHCP server

Configuring DHCP scopes

Configuring IP addresses from static to DHCP

Configuring DHCP failover and load balancing

Configuring DNS servers, zones, and resource records

Managing Windows Active Directory

Introduction

Installing Active Directory with DNS

Creating and managing AD users, groups, and computers

Adding users to AD via a CSV file

Creating a group policy object

Reporting on AD users

Finding expired computers and disabled users in AD

Managing Windows Storage

Introduction

Managing physical disks and disk volumes

Managing NTFS permissions

Managing Storage Replica

Managing Filestore quotas

Using filesystem reporting

Managing Shared Data

Introduction

Setting up and securing an SMB file server

Creating and securing SMB shares

Accessing data on SMB shares

Creating an iSCSI target

Using an iSCSI target

Configuring a DFS Namespace

Configuring DFS Replication

Managing Windows Update

Introduction

Installing Windows Update Services

Configuring WSUS update synchronization

Configuring the Windows Update Client

Creating computer target groups

Configuring WSUS automatic approvals

Managing WSUS updates

Managing Printing

Introduction

Installing and sharing printers

Publishing a printer

Changing the spool directory

Changing printer drivers

Printing a test page

Managing printer security

Creating a printer pool

Introducing Containers

Introduction

Configuring a container host

Deploying a hello world sample

Deploying IIS in a container

Using a Dockerfile to create and use a container

Managing Windows Internet Information Server

Introduction

Installing IIS

Configuring IIS for SSL

Managing TLS cipher suites

Configuring a central certificate store

Configuring IIS bindings

Managing IIS logging and log files

Managing IIS applications and application pools

Analyzing IIS log files

Managing and monitoring Network Load Balancing

Managing Desired State Configuration

Introduction

Using DSC and built-in resources

Parameterizing DSC configuration

Finding and installing DSC resources

Using DSC with resources from PS Gallery

Configuring the DSC local configuration manager

Implementing an SMB DSC pull server

Implementing a web-based DSC pull server

Using DSC partial configurations

Managing Hyper-V

Introduction

Installing and configuring Hyper-V

Creating a VM

Using PowerShell Direct

Working with VM groups

Configuring VM hardware

Configuring Hyper-V networking

Implementing nested Hyper-V

Managing VM state

Configuring VM and storage movement

Configuring VM replication

Managing VM checkpoints

Managing Azure

Introduction

Using PowerShell with Azure

Creating core Azure resources

Exploring your storage account

Creating an Azure SMB file share

Creating an Azure website

Creating an Azure VM

Managing Performance and Usage

Introduction

Retrieving performance counters using Get-Counter

Using WMI to retrieve performance counters

Creating and using PLA data collector sets

Reporting on performance data

Generating a performance-monitoring graph

Creating a system diagnostic report

Reporting on printer usage

Monitoring Hyper-V utilization and performance

Troubleshooting Windows Server

Introduction

Checking network connectivity

Using the Best Practices Analyzer

Managing event logs

Index

Customer Reviews

5 star

4 star

3 star

2 star

1 star

Finding expired computers and disabled users in AD

The objects in your AD database—the users, computers, groups, OUs, policies, and so on, are constantly changing in almost all organizations. Users leave, computers die, OUs and policies are added/removed/renamed, and so on. Change is constant!

A side effect of this change is having orphaned objects: users who are no longer part of your organization, or computers that no longer actually exist physically. You can also find you have objects that may be valid but have not been used for a long time.

Those accounts represent a potential security risk. An unused user account, for example, due to a user leaving and their account not being removed, can represent a threat vector. Suppose Ruth in the accounting department (who has access to the firm's accounting data) has left. If her account is active, then someone guessing her password could attempt to use her credentials to access such information. The risk is magnified if Ruth could access that...

Windows Server 2019 Automation with PowerShell Cookbook - Third Edition

By : Thomas Lee

Windows Server 2019 Automation with PowerShell Cookbook - Third Edition

By: Thomas Lee

Overview of this book

Related Content you might be interested in

Current Title:

Windows Server 2019 Automation with PowerShell Cookbook - Third Edition

Learning PowerShell DSC

Powershell Core 6.2 Cookbook

Windows Server 2019 Cookbook

Finding expired computers and disabled users in AD