Basically it is a very simple script, but I will quickly go through it. Of course you need to define the UNC path to the file share or folder. Then you will loop through all the existing directories with a Foreach. At each folder you will get the permissions with Get-ACL. Then you need another Foreach to get through all the granted permissions which are inherited or directly set. Then you will add each line to your report and finally export it as a CSV file for further processing. That’s it!

$FolderPath = dir -Directory -Path "\\fileserver\fileshare"
$Report = @()
Foreach ($Folder in $FolderPath) {
$Acl = Get-Acl -Path $Folder.FullName
foreach ($Access in $acl.Access)
{
$Properties = [ordered]@{'FolderName'=$Folder.FullName;'AD
Group or
User'=$Access.IdentityReference;'Permissions'=$Access.FileSystemRights;'Inherited'=$Access.IsInherited}
$Report += New-Object -TypeName PSObject -Property $Properties
}
}
$Report | Export-Csv -path "C:\scripts\FolderPermissions.csv"

You can extend this script by sending the report as email message directly via PowerShell, look here. You can also create a scheduled task / cronjob for this script to Generate ACL Report FileShare periodically.

The post Generate ACL Report of File Share with PowerShell to CSV appeared first on HackBuddies.

Last time I had the task to copy massive amounts of data between two file share systems. With massive amounts I talk about Terabytes 🙂 In addition, one of the systems was productive and the other one the new system, so the solution needed to be reliable and stable. So I asked myself, how can I transfer these files and folders? The answer is Robocopy: How to Copy Massive Amounts of Data

So I tried several things and had a look at the possibilites of the systems. I ended up using the simple Robocopy command with the file shares. Of course the client/server executing the Robocopy command had to be in the same local network in order to ensure a good copy speed.

Robocopy offers you the opportunity to define a lot of parameters for your copy job. For example you can define if the Access Control List (NTFS Permissions) should be copied to the destination host, or if you want to create the Access Groups from scratch. Imagine that on the old system there was a lot of direct access set for the users instead of Active Directory groups – in this case building the Access Groups from scratch can be very helpful to get a clean file share.
Another great thing about Robocopy is that it has basically a Resume option because it copies only the changed or new files after comparing source and destination host.

The Robocopy Command

But let’s talk about the command itself which is pretty simple and you can fulfill nearly all requirements with a One-Liner!

Basically you can split the command as following:

• Source
• Destination
• Source Options
• Copy Options

So let’s start with the probably most basic command. We want to copy a local directory from one partition to another

robocopy c:\temp\test d:\temp\

This simple command will copy the folder test and all files to the location d:\temp – but not subfolders!

Copy Everything (including permissions)

If you simply want to copy everything (also subfolders, empty subfolders, file owners) from the source to destination including the NTFS permission (Windows Access Control list) you can use this command.

robocopy c:\temp\test d:\temp\ /E /COPYALL

Copying over Network

If you want to use the Robocopy command for copying over the network, like in my case, I recommend you to use the following options and switches to get a good result.

/E -> copy all subfolders, including empty ones.
/V -> produce Verbose output, showing skipped files.
/ZB -> use restartable mode; if access denied use Backup mode.
/R:1 -> number of Retries on failed copies
/W:1 -> Wait time between retries: default is 30 seconds
/NP -> No Progress – don’t display percentage copied.
/COPYALL -> COPY ALL file info (equivalent to /COPY: DATSOU)
/LOG -> LOG location

robocopy \\source_share\folder \\destination_share\folder /E /V /ZB /R:1 /W:1 /NP /COPYALL /LOG:c:\robocopy.log

So, this ultimative copy job will copy all subfolders, copy all file information, produces verbose output to show skipped files, will retry failed copies and uses the restartable mode with backup mode in case of failed access. In Addition a log file will be generated with all the details of every single file copied. It is simply great! 🙂

Source: https://community.netapp.com/t5/Data-ONTAP-Discussions/Fileserver-Migration-with-robocopy/td-p/118615

Please find the whole documentation of the Robocopy command directly at Microsoft Docs
Robocopy: How to Copy Massive Amounts of Data

The post Robocopy: How to Copy Massive Amounts of Data reliably appeared first on HackBuddies.

This can be fulfilled easily by using a very short but effective PowerShell Inactive Computers script. Simply define the Organizational Unit (OU) you want to use as a SearchBase, specfiy the days of inactivity and that’s it!
The script will automatically subtract the amount of inactive days from the current date/time and will search the defined OU with the Get-ADComputer command. It will use the attribute LastLogonTimeStamp which you can also check in the Attribute Editor of the GUI.

$TargetOU = "OU=<SubUnit>,OU=<MainUnit>,DC=<domainName>,DC=com"
$DaysInactive = 90
$time = (Get-Date).Adddays(-($DaysInactive))
Get-ADComputer -SearchBase $TargetOU -Filter {LastLogonTimeStamp -lt $time} | Select-Object Name

Of course you could improve this simple PowerShell Inactive Computers script by adapting the output to a CSV file. Or by selecting more attributes. I would recommend you to create a scheduled task for the script and extend it by sending a HTML email/report, so you do not forget to clean up your inactive clients.

You can check out all options of the Get-ADComputer command at Microsoft Docs

The post Get Inactive Computers In Active Directory From Specific Organizational Unit With PowerShell appeared first on HackBuddies.

At first, you have to establish a connection to SharePoint Online with PowerShell. Let’s check if the module is already installed:

Get-Module -Name Microsoft.Online.SharePoint.PowerShell -ListAvailable | Select Name,Version

If not, simply install it:

Install-Module -Name Microsoft.Online.SharePoint.PowerShell

Now we can set up the connection. If you have Multi Factor Authentication (MFA) enabled, you cannot pass the credentials with the Get-Credentials command. But you can use this snippet:

$orgName="<Insert your Org name here>" 
Connect-SPOService -Url https://$orgName-admin.sharepoint.com

A window will pop-up prompting you for the MFA code from Microsoft Authenticator or the text message. After authentication is done – we are nearly finished.
Check the Deleted Sites for your site name and store it directly in a variable:

$deletedSite = Get-SPDeletedSite /sites/site_name

At last restore the deleted site:

Restore-SPDeletedSite -Identity $deletedSite

If you want to check out more about the possibilites and the SharePoint PowerShell, I recommend you to check Microsoft Docs.
If you are new to PowerShell, check out my other articles
SharePoint Online Restore Site

The post SharePoint Online Management Shell: Restore A Deleted Site or OneDrive storage appeared first on HackBuddies.

Feel free to adapt the script or write some interesting ideas how to extend it in the comments 🙂

# Define date, output file and OU
$DateTime = Get-Date -f "yyyy-MM-dd_hh-mm" 
$OutputFile = "C:\scripts\" + $DateTime + "-ADGroupsAndMembers.csv"
$TargetOU = "OU=<SubUnit>,OU=<MainUnit>,DC=<domainName>,DC=com"

# Check OU and set filter for Global Security Groups
$Groups = Get-ADGroup -SearchBase $TargetOU -filter {GroupCategory -eq "Security" -and GroupScope -ne "DomainLocal"}

$Table = @()

$Record = @{
"Group Name" = ""
"Name" = ""
"Username" = ""
}

Foreach ($Group in $Groups) {
    $Arrayofmembers = Get-ADGroupMember -identity $Group -recursive | Select-Object name,samaccountname
        foreach ($Member in $Arrayofmembers) {
            $Record."Group Name" = $Group
            $Record."Name" = $Member.name
            $Record."UserName" = $Member.samaccountname
            $objRecord = New-Object PSObject -property $Record
            $Table += $objrecord
     }
}

$Table | Sort-Object Name | Export-Csv $OutputFile -NoTypeInformation -Encoding UTF8

The post Export Active Directory Groups and their Members from a specific Organizational Unit as CSV with PowerShell appeared first on HackBuddies.

Start PowerShell as administrator

1.) Start PowerShell as admin by right-clicking at the Windows Start button and selecting it:

Create Battery Report

2.) Now, simply copy & paste the following command:
powercfg /batteryreport /output “C:\battery-report.html”
After executing it, the report will be saved to the defined directory, in this case directly to the C:\ partition

Of course you can check out the whole documentation of the powercfg command at Microsoft Docs

Check HTML Report

3.) Open up your Windows File Explorer and navigate to the defined directory. Here you will find the .HTML file which can be opened with your favourite browser:

Windows PowerShell Battery Report

Just have a look through the whole Windows PowerShell Battery Report, it is quite interesting and you are able to gain some insights. My new laptop e.g. has a battery cycle count of 23 and the full charge capacity is nearly as good as the design capacity:

Of course you can also check the details of your battery usage with the active time of the sessions and the effective battery drain:

The post Windows PowerShell: Generate Battery Report appeared first on HackBuddies.

# Specify path to the text file with the computer account names.
$computers = Get-Content \\PathToScript\ComputersToDelete.txt

# Specify path to the OU where computers will be moved.
$TargetOU = "OU=Users,OU=<SubUnit>,OU=<MainUnit>,DC=<domainName>,DC=com"

# Move Computers to the new OU
ForEach($computer in $computers){
    Get-ADComputer $computer | Move-ADObject -TargetPath $TargetOU
}

The post Move Computers From .TXT File To Different OU In Active Directory With PowerShell appeared first on HackBuddies.

An inquiry, which occurs very often in daily business: “What permissions does a specific user have?” What about sending a HTML Email with AD User Groups to the requestor?
In most cases the Active Directory groups represent file access, system access and many more. So, exporting these groups would be a good way. Due to the fact that I did not want to start up my PowerShell for a CSV export which is then manually sent to the user every time, the following idea came up:

What about writing a PowerShell script, which just asks for the username and the email address of the superior who wants to see and check the permissions? After feeding the script with these two inputs, the Active Directory groups are queried and automatically sent to the superior in a HTML-formatted email. Very simple and time-saving!
After that I had the idea to extend the script with the “Description” field of the Active Directory groups. Thus, not just the group name but also the corresponding description gets exported and sent.

PowerShell Script

$UserName = (Read-Host "Username")
$EmailSuperior = (Read-Host "Email address of superior")

$style = "<style>BODY{font-family: Arial; font-size: 10pt;}"
$style = $style + "TABLE{border: 1px solid black; border-collapse: collapse;}"
$style = $style + "TH{border: 1px solid black; background: #dddddd; padding: 5px; }"
$style = $style + "TD{border: 1px solid black; padding: 5px; }"
$style = $style + "</style>"

# Get group memberships from reference user, sort them alphabetically and export to TXT file
# Define parameters for mailing and send mail to IT-responsible person to review permissions
$Permissions = Get-ADPrincipalGroupMembership -Identity $UserName| Get-ADGroup -Properties * | Select name, description | Sort-Object -Property name | ConvertTo-Html -Head $style
$SmtpServer = 'smtp.yourdomain.com'
$SmtpPort = 587
$FromSender = 'admin@yourdomain.com'
$Subject = 'User permission check: ' + $UserName

# Email Body Set Here, Note You can use HTML, including Images.
$Body ="
Hello,<br>
<br>
The permissions of user <B>$UserName</B> are set as below. Please check and review them.<br>
<hr>
<br>
<B>Permissions:</B><br>
$Permissions
<br>
"

Send-MailMessage -SmtpServer $SmtpServer -Port $SmtpPort -From $FromSender -To $EmailSuperior -Bcc $FromSender -Subject $Subject -Encoding "UTF8" -Body $Body -BodyAsHtml

This script will generate the following email message. Please note that I removed the original permissions and username and replaced it with placeholders 🙂

So that’s how you are sending HTML Email with AD User Groups. Please check up details regarding the Send-MailMessage command directly at Microsoft Docs

Let me know your thoughts in the comment section. Of course you can use this HTML email part in other scripts too, for example to send inactive computer list to the responsible person like here

Output of the Script

Hello,

The permissions of user <USERNAME> are set as below. Please check and review them.

Permissions:

The post Sending HTML Email with AD User Groups appeared first on HackBuddies.

Imagine you need to inform an user about something which had already been automated in a PowerShell script. You do not want to start a manual task (e.g. sending an email) every time the script is executed. Especially if you need it multiple times per day. So I decided to extend the script with the email-sending function. Just a few lines of code are necessary and you can adapt it to your needs. Mail Subject and Mail Body can be modified and even attachments can be added. Sending Email with PowerShell

To show you the possibilities, the following script reads the assigned groups of an Active Directory user and exports them to a .txt file. Then, the email data gets specified and afterwards the email will be sent to the recipient.

$Permissions = Get-ADPrincipalGroupMembership -Identity $Username | Select name | Sort-Object name | Out-File -FilePath C:\temp\AssignedGroups.txt
$SmtpServer = 'myServer.myDomain.com'
$SmtpPort = 587
$FromSender = 'mySender@myDomain.com'
$Recipient = 'myRecipient@myDomain.com'
$Subject = 'Assigned groups from : ' + $UserName
$PermissionsFilePath = "C:\temp\AssignedGroups.txt"
$Body = Get-Content -Path $PermissionsFilePath | Out-String 
Send-MailMessage -SmtpServer $SmtpServer -Port $SmtpPort -From $FromSender -To $Recipient -Subject $Subject -Body $Body -Attachments $PermissionsFilePath

I would definitely recommend you to check out the Microsoft Docs about the Send-MailMessage command in order to properly adapt it to your needs and requirements. You can also combine that script with other ones. For example, you can export Active Directory Groups and their members from a specific organizational unit as CSV and send an automated email message within a scheduled task – there are no limitations.
Sending Email with PowerShell

The post Sending an email within a PowerShell script appeared first on HackBuddies.

It will happen again and again. Your customers or colleagues will ask you to export specific user data from Active Directory. The easiest way to do this is with the command “Get-ADUser”. Simply select the specific objects like DisplayName, Username,.. and export the result to a CSV file with the specified encoding and delimiter.

Import-Module ActiveDirectory
Get-ADUser -Filter * -properties * | select-object DisplayName,sAMAccountName,telephoneNumber,mobile,mail,Department,Description | export-csv c:\temp\UserDataExport.csv -Encoding utf8 -notype -Delimiter ";"

Most of the time not all users are necessary, so there are more options to filter of course.

Export only specific Organizational Unit (OU)

You can filter for an Organizational Unit by using the -SearchBase option:

Import-Module ActiveDirectory
Get-ADUser -SearchBase "OU=Users,OU=<SubUnit>,OU=<MainUnit>,DC=<domainName>,DC=com" -Filter * -properties * | select-object DisplayName,sAMAccountName,telephoneNumber,mobile,mail,Department,Description | export-csv c:\temp\UserDataExport.csv -Encoding utf8 -notype -Delimiter ";"

Export group members

Another useful command is to export the members of a security group:

Import-Module ActiveDirectory
Get-ADGroupMember -Identity '<GroupName>' | Select-Object name, samaccountname | export-csv c:\temp\exportGroupMembers.csv -Encoding utf8 -NoType -Delimiter ";"

The post Export user data from Active Directory appeared first on HackBuddies.