Powershell - .NET control and automation.

Powershell ExecutionPolicy

Get-ExecutionPolicy
Set-ExecutionPolicy Unrestricted

powershell.exe -ExecutionPolicy Bypass -NoLogo -NonInteractive -NoProfile -WindowStyle Hidden -File <script_name>

5 key commands for powershell

pipe to Out-Null to send things to /dev/null

find which process locks a file using powershell

$lockedFile="yourlockedfile"
Get-Process | foreach{$processVar = $_;$_.Modules | foreach{if($_.FileName -eq $lockedFile){$processVar.Name + " PID:" + $processVar.id}}}

Hosting powershell from other languages

Powershell and registry

# get the value of the LSA keys
Get-ItemProperty HKLM:\System\CurrentControlSet\Control\Lsa
# Set value of the LSA key - disable the loopback check
New-ItemProperty HKLM:\System\CurrentControlSet\Control\Lsa -Name "DisableLoopbackCheck" -value "1" -PropertyType dword

Powershell and active directory

param([string]$FileName, [string]$adpath)
Import-Module ActiveDirectory
function Import-Users([string]$UserFile)
{
    Import-Csv $UserFile | foreach-object {
        $accountName = $_.Lastname+$_.Firstname.Substring(0,2)
        $displayName=$_.Firstname+" "+$_.LastName
        New-AdUser $accountName -samAccountName $accountName -Company "Acme Corp." -Department $_.Department -DisplayName $displayName -GivenName $_.Firstname -Surname $_.Lastname -OfficePhone $_.Phone -Title $_.Position -CannotChangePassword $true -PasswordNeverExpires $true -Enabled $true -AccountPassword (ConvertTo-SecureString -AsPlainText "demo" -Force) -Path $spou
    }
}
$spou = "OU=Acme,$adpath"
Import-Users $FileName

$ComputerName = $env:COMPUTERNAME
$Computer = [adsi]"WinNT://$ComputerName"
function Add-User([string]$UserName, [string]$FullName, [string]$Description, [string]$Password)
{
    $User = $Computer.Create("user", $UserName)
    $User.Put("fullName", $FullName)
    $User.Put("description", $Description)
    $User.SetPassword($Password)
    $User.SetInfo()
}
function Import-Users([string]$UserFile)
{
    Import-Csv $UserFile | foreach-object { Add-User $_.UserName $_.FullName $_.Description $_.Password }

Powershell and SQL

Powershell Base64

[System.Convert]::ToBase64String([System.Text.Encoding]::Unicode.GetBytes($this)) 
[System.Text.Encoding]::Unicode.GetString([System.Convert]::FromBase64String($this))

use powershell to enable remote desktop on remote machine

$remoteComputerName = "my_remote_computer"
# Connect to another computer and start the remote registry service 
( Get-WmiObject -computername $remoteComputerName Win32_Service -filter "Name='RemoteRegistry'").startservice()
( Get-WmiObject -computername $remoteComputerName Win32_Service -filter "Name='RemoteAccess'").ChangeStartMode('Manual') 
( Get-WmiObject -computername $remoteComputerName Win32_Service -filter "Name='RemoteAccess'").startservice()

use powershell to find zombie process || find and kill running process with commandline arguments

Get-WmiObject Win32_Process -Filter "name = 'perl.exe'" | where {$_.CommandLine -eq '"C:\strawberry\perl\bin\perl.exe" t/Server_PreFork.t'} | ForEach-Object { Invoke-WmiMethod -Path $_.__Path –Name Terminate }

WinRM tips

Enable-WSManCredSSP -Role server -force
Set-Item 'WSMAN:\localhost\service\auth\credssp' -Value $true
Set-Item 'WSMAN:\localhost\Client\TrustedHosts' * -force
Set-Item 'WSMAN:\localhost\Shell\MaxMemoryPerShellMB' 2048
Set-Item 'WSMAN:\localhost\MaxTimeoutms' 1800000
invoke-command -computername $svr -Credential $cred -scriptblock $rsb

quick what's my ip using powershell?

powershell (gwmi win32_NetworkAdapterConfiguration -Filter 'ipenabled = "true"').ipaddress[0]
#quick what's my default gateway using powershell?
powershell (gwmi win32_NetworkAdapterConfiguration -Filter 'ipenabled = "true"').defaultipgateway

file text replacement using powershell

(Get-Content file.sql).replace('REPLACETEXT', 'VALUE') | Set-Content file.sql