UsysE

Skype for Business - Powershell to set Dialplan Policy & Voice Policy to Automatic.

2018-08-24T11:18:00.000-07:00

If you had manually assigned DialPlan & VoicePolicy and started using the Site level policy then you might want to change your DialPlan & VoicePolicy for all users to back to Automatic.

Basically from

Here is the powershell which targets users via RegisterPool. I also make a backup of dialplan & volicepolicy which was assigned to user in csv.

Import-Module SkypeOnlineConnector

#Change the below pool for targeting users

$RegistrarPool = "frontend.domain.com"

$users = Get-CsUser -Filter {RegistrarPool -eq $RegistrarPool} | select DisplayName

$array = @()

foreach ($user in $users)

{

$userpolicy = get-csuser $user[0].DisplayName | select DisplayName, VoicePolicy, DialPlan

$array += $userpolicy

get-csuser $user[0].DisplayName | Grant-CsDialPlan -PolicyName ""

get-csuser $user[0].DisplayName | Grant-CsVoicePolicy -PolicyName ""

#Dialplan set

#get-csuser Firstname LastName | Grant-CsDialPlan -PolicyName ""

#VoicePolicy set

#get-csuser firstname.lastname@skype.com | Grant-CsVoicePolicy -PolicyName ""

}

$array | Export-Csv -notype -Path C:\Scripts\dialplanpolicyFinal-+$RegistrarPool+.csv

Remove roaming profile and free up space on server

2017-07-14T06:43:00.000-07:00

You can free up space by deleting user profiles to save space on the server.

Shortcut cmd is rundll32 sysdm.cpl,EditUserProfiles

Skype For Business - Reports for Users with Enterprise Voice Enabled and their Extensions.

2016-07-27T14:16:00.002-07:00

Skype For Business 2015 - Reports for Users with Enterprise Voice Enabled and their Extensions.

#Create table and populate users properties

$table = @()

#Get users who have Enterprise Voice Enabled and select Name, LineURI and #EnterpriseVoiceEnabled columns

$users = Get-CsUser -Filter {EnterpriseVoiceEnabled -eq $true} | `

Select DisplayName, LineURI, EnterpriseVoiceEnabled

#Loop through each users

foreach($user in $users){

#Get Name from the user list for each user

$name = $user.DisplayName

#Grab extension which is after = sign and grab the 1st part after =

$ext = $user.LineURI.Split("=")[1]

#Grab value of EnterpriceVoiceEnabled in this case it will be always True

#cause our initial search only includes Enterprise Enabled users.

$entvoice = $user.EnterpriseVoiceEnabled

#Add each columns with property for users.

$objAverage = New-Object System.Object

$objAverage | Add-Member -type NoteProperty -name "User" -value $name

$objAverage | Add-Member -type NoteProperty -name "Extension" -value $ext

$objAverage | Add-Member -type NoteProperty -name "Enterprise Voice" -value $entvoice

#Add them to table

$table += $objAverage

#Format the table. This is useless as we are sending email from below $body

$table | Format-Table -AutoSize

}

#CSS formating

$a = "<style>"

$a = $a + "BODY{background-color:white;}"

$a = $a + "TABLE{border-width: 2px;border-style: solid;`

border-color: black;border-collapse: collapse;}"

$a = $a + "TH{border-width: 2px;padding: 2px;`

border-style: solid;border-color: black;background-color:GoldenRod}"

$a = $a + "TD{border-width: 2px;padding: 2px;border-style: `

solid;border-color: black;background-color:palegoldenrod}"

$a = $a + "</style>"

##############Change your SMTP Details Start###

#Your SMTP server

$smtpServer = "intermailserver.usyse.com"

#Your from address

$from = "Do_Not_Reply@usyse.com"

$To = "me@usyse.com", "you@usyse.com"

$CC = "someone@usyse.com"

##############Change your SMTP Details Ends###

$Subject = "Skype For Business Extensions"

$Body = "Skype For Business Extension Details<br>

<br>

#Here I am sorting it out with Extension

$Body += $table | Sort-Object Extension | ConvertTo-Html -head $a

$Body += "<br><br>"

#$message.Body += " <br>"

$Body += " "

#Send email finally

Send-MailMessage -To $to -Subject $subject -Body $body -SmtpServer $smtpserver -From $from -BodyAsHtml -Cc $CC

And the Email will look like this:-

Office 365 - Give permission to a someone for all calendars

2015-03-05T10:17:00.003-08:00

Following powershell will list mailbox with resource type as "Room" and then it will add user@domain.com as Editor for that rooms calendar.

$rooms = get-mailbox | where {$_.resourcetype -eq "room"}
foreach ($room in $rooms)
{
Add-MailboxFolderPermission -Identity ($room.windowsliveid + ":\calendar") -user user@domain.com -AccessRights Editor
}

Show more details in Calendar (Room Mailbox)

2013-08-15T07:13:00.001-07:00

If you made a Room Mailbox for a meeting room and someone wants to see who booked it and more details for that booking you can run the following cmdlet to change the default setting to Reviewer which will give end user more information about that booking.

Set-MailboxFolderPermission meetingroom:\Calendar -User Default -AccessRights Reviewer

List users in security group.

2013-08-14T12:07:00.001-07:00

So group you want to target is vpn_users and you want to output to a text file called vpnusers.txt.

1st option is very detailed and has OU information in it. 2nd option is on the fly kind of deal and useful for just looking at members.

dsquery group -name "vpn_users" | dsget group -members -expand > c:\vpnusers.txt

Or

net group vpn_users /domain > c:\vpnusers.txt

Also you might like net user ijaved/domain command as well :) I love it to check details like if account has expired password or account is locked. Saves me from going into AD and checking Account tab.

Password Expiry Notification - Powershell Script

2013-08-14T12:07:00.000-07:00

Here's a powershell script to send out email to end user to remind them of password expiry.

Feel free to use it. It's not the best method but it gets the work done for me. If you make it better please post it back so it can help other users.

# ======================================

# = Password Expiry Email Notification =

# ======================================

# Created: [10/10/2013]

# By ijaved$smtpSrv = "smtp.server.com" #Name of your exchange server.
$emailDomain = "@server.com" #Your email domain
$emailUser = "helpdesk" #Needs this to authenticate before sending email.
$emailPass = "HelpDeskPwd" #Pass for above user.
$emailFrom = helpdesk@server.com #Sender Email Address
$adminEmail = alerts@server.com #CC admin on email sent to user.
$owaUrl = "https://owa.server.com/owa" #OWA URL needed for email msg
$groupName = "RemoteUsers" #Name of security group where user will be picked up from.

#Function Mail Users
  Function mail {
$smtpserver = $smtpSrv
$msg = new-object Net.Mail.MailMessage
$smtp = new-object Net.Mail.SmtpClient($smtpServer)
$smtp.EnableSsl = $True
$smtp.Credentials = New-Object System.Net.NetworkCredential($emailUser, $emailPass);
$msg.From = $emailFrom
$msg.To.Add(”$email”)
$msg.CC.Add(”$adminEmail”)
$msg.Subject = “Password Expiry Notice!”
$msg.Body = “Hi "+ $fullName +",

  You have $calExpire days left to change your password. Your password will expire on $formatDate.

You can either do it by pressing <CTRL><ALT><DELETE> and then clicking Change Password button or from OWA.

To change it from OWA please follow the below steps :-
  1. Open any Web browser and type $owaUrl in the address bar.

2. Log in using your credentials.

3. Once you are logged in, click on Options, located at the top right hand corner of OWA.

4. Drop down menu will display multiple option. Click on Change Your Password.

5. Enter your former password as well as your new password, and then click on Save.

6. Outlook Web Access will tell you that your password has been successfully changed. Click on OK to log in with your new password.

Best Regards,

HelpDesk"

$smtp.Send($msg)

}
#End Function Mail


#Users in an array for testing. Add multiple like this "test","test2"

#$users = "jiqbal"


#Users from domain group
  $pickUser = net group $groupName /domain | out-string

$users = (($pickUser -split "(-{79})|(The command completed successfully.)")[2]) -split "\s+"

#Loop through $users and get each user and run.
  foreach ($user in $users)

{
#Check if $user is not empty
  If (!$user){Continue}

Else {

#Execute net user command with username
  $result = net user $user /domain

#Get Firstname of user by selecting string with "Full Name"
  $fName = $result | select-string "Full Name"

#Split at space and drop empty spaces with where-object (where object is not equal to space) collect word 4 & 5 (Firstname & Lastname)
  $filternames = $fName.tostring().split("") | where-object {$_ -ne ""}

#Pick Names from the array 2 & 3
  $name = $filternames[2,3]

#Join the two together
  $fullName = [string]::Join(" ", $name)

#Creating email by adding Firstname.Lastname
  $email = [string]::Join(".", $name) + $emailDomain

#Get password expiry date by searching "Password expires"
  $pwdexpires = $result | select-string "Password expires"

#Split at space and collect array 2 which is the password expiry date
  $formatDate = $pwdexpires.tostring().split(" ") | where-object{$_ -ne ""} ; $formatDate = $formatDate[2]

#If password never expired is selected then you will get error. Skip the user by using if statement
  If ($formatDate -eq "Never"){Write-Host -f red "Skipping $user : Password never expires selected."; Continue}
Else{

#Changing format for expireDate and assigning todays date.
  $expiryDate = Get-Date -Date $formatDate; $today = Get-Date

#Calculate days left to reset by - expiry date with current date. (expiry date will be in future)
  $calExpire = ($expiryDate - $today).days

}
#Notify admin about expiry date if its less than 14
  If ($calExpire -le 14){
Write-Host "$fullName has $calExpire days left to change his password. His password will expire on $formatDate."

}
#If expiry date is equal to 7 / 3 / 1 then go ahead and send email notification to user.
  If ($calExpire -le 7){mail}
ElseIf ($calExpire -eq 4){mail}
ElseIf ($calExpire -eq 3){mail}
ElseIf ($calExpire -eq 2){mail}
ElseIf ($calExpire -eq 1){mail}
Else {Write-Host -f green "$fullName has $calExpire days left"}

}

}

Exchange 2010 - Deny User from distribution list to send mails to other distribution list.

2013-08-09T14:12:00.002-07:00

This probably sounds crazy but I was asked to do this.

Basically they wanted to stop a users to send emails to all distribution list. Usually used when terminating a user or if the user is being retarded and sending personal emails to all DL's. Whatever it might be I just had to come up with a script to do it to all over 150 DL. I wasn't going to do it one by one from EMC so I made a cmdlet.

Below is the powershell script for exchange 2010 probably works on 2013 as well.

Make a DL called "Denied Users" and add users or user to that DL if you want to block him from sending emails to DL. Please note that this script will only add the Denied User DL in block list once. So if you create a new DL after running this script. Then that DL will not have Denied users in rejected user and hence you will have to re-run the script.

$temp = Get-DistributionGroup -ResultSize Unlimited

foreach($group in $temp)

{
Set-DistributionGroup -Identity $group -RejectMessagesFromDLMembers "Denied Users"

}
#Remove the above setting incase they change their mind.

#Set-DistributionGroup -Identity $group -RejectMessagesFromDLMembers $null

Outlook 2010 forward emails after specific time.

2012-01-16T09:53:00.000-08:00

Source: http://danfolkes.com/2011/02/18/outlook-rule-only-at-specific-times/

I wanted to create a forward so that helpdesk email gets forwarded to my phone on my personal email. Setting up helpdesk email was the easy way but it gets 20+ emails every hour during work time. After work hours its pretty much quite. So for those times I wanted the rule.

Rules which needs to be created :-

Quoted from the post below :-

"
The Rule that will check email header* for UTC times. Make sure it’s assigned to the FWD category. And then FWD it:

Apply this rule after the message arrives
with '2011 23:' or '2012 18:,2012 19:.....2012 11:' in the message header
    and assigned to 'FWD' category
forward it to 'email@example.com'

"

Seach for this string in header.

2012 18:,2012 19:,2012 20:,2012 21:,2012 22:,2012 23:,2012 24:,2012 01:,2012 02:,2012 03:,2012 04:,2012 05:,2012 06:,2012 07:,2012 08:,2012 09:,2012 10:,2012 11:

DPM 2010 - Script to export all recoverable item to drive

2012-01-13T15:33:00.000-08:00

Ok so I finished writing my script for exporting recovery data to f: drive (local to DPM 2010 server) for all the servers (DPM 2010 Agents) I have 4 of them.
If any of you had the pleasure of doing this through GUI knows how painful it is... I fortunately was very lucky to be assigned to export (recover to network folder) 16 datasources from 4 different servers. After doing this for couple of days I started looking at cmdlets and found some scripts and hints on how to do this. and then...

This scripts loops through all the servers and all the datasource protected and recovers them to f: drive then it 7z the files and put in 7z folder it also date stamps folders and 7z files. You have to download 7za and place it in system32 folder in order for it to 7z the folders.

I am posting this script to that it might come handy to someone else out there.

I use this in production environment and it works fine but doesn’t mean it might work for you. So standard disclaimer use it at your own risk! ( I did not write some of the code and copied it from other user posts from this forum. Hopefully they won’t mind). You are free to modify and use the script.

It recovers SQL, System Protection and Exchange 2010. Please note I only export exchange recovery on 15th of every month you can change that. Search for “#Only run Exchange Recovery on 15th of every month. Otherwise Skip” and change the days below that.

# ====================================
# = DPM 2010 Recover to Drive looped =
# = for all servers and datasource.  =
# ====================================
# Created: [01/12/12]
# By EvilWasp

#0 Time Stamp folders
$date = get-date
$TimeStamp = $date.ToShortDateString()
#Replace / as folder name cannot contain it.
$time = $TimeStamp.Replace("/", "-")

#1 You have to modify the below varibles to make it work for you.
#Below varibles
$DPMServerName = "Krait"
$DestinationLocation = "F:\Recovered\$time"
$Destination7z = "F:\7z\$time"

#2 Import DPM Shell if its not loaded.
If((Get-PSSnapIn -Name "Microsoft.DataProtectionManager.PowerShell" -ErrorAction SilentlyContinue) -eq $null)
    {
  Add-PSSnapIn "Microsoft.DataProtectionManager.PowerShell"
  Start-Sleep 5
    }

#3 Get list of DPM Agents - Protected Group
$pg = Get-ProtectionGroup -DPMServerName $DPMServerName
#Count how many servers!
$pgc = $pg.count

#4 Start Function Recover it needs $i from $pg.
Function Recover ($i)
{
  #if $i is not null then do the loop.
  If ($i -ne $null) 
  {
    $dsc = $ds.count #Counting how many datasource is available in array
    #Loop through all the servers with ForLoop
    For ($d=0; $d -le $dsc; $d++) #looping datasource for each servers
    {
    $dsn = $ds[$d]
    #8 If & ElseIf Statments to find the write command for each recovery.
    #Three different types -SQL, -SystemProtectionDataSource and -E14datasource for exchange 2010 (Use -Exchange) for older versions. 
    #There's -FileSystem as well which I havent used.
    #-like is used with wildcard(*) to accomodate different versions of SQL i.e 2005, 2008 extra.
        
        #find SQL server in each server
        If ($dsn.Type.Name -like "SQL Server*") 
            {
            #Recovery Options - Where to place recovered files - for SQL
            $rop = New-RecoveryOption -TargetServer $DPMServerName -TargetLocation $DestinationLocation -RecoveryLocation CopyToFolder `
            -SQL -RecoveryType restore
            }
        #find System Protection server
        ElseIf ($dsn.Type.Name -like "System Protection*") 
            {
            #Recovery Options - Where to place recovered files - for System Protection
            $rop = New-RecoveryOption -TargetServer $DPMServerName -TargetLocation $DestinationLocation -RecoveryLocation CopyToFolder `
            -SystemProtectionDataSource -RecoveryType restore
            }
        #find Exchange server
        ElseIf ($dsn.Type.Name -like "Exchange Mailbox Database*") 
            {
            #Only run Exchange Recovery on 15th of every month. Otherwise Skip.
            If ($date.Day -eq 15) 
                {
            #Recovery Options - Where to place recovered files - for Exchange 2010
            $rop = New-RecoveryOption -TargetServer $DPMServerName -TargetLocation $DestinationLocation -RecoveryLocation CopyToFolder `
            -E14datasource -ExchangeOperationType NoOperation -RecoveryType restore
                }
                #If its not the 15th of month then skip
                Else
                {
                Continue
                }
            }
        #If $dsn.Type.Name is nothing/null skip
        Else
         {
         Continue
         }
        #Sort by latest on top Recovery Points.
        $recoveryPoints = @(Get-RecoveryPoint -datasource $dsn | sort -property RepresentedPointInTime -Descending)
            If ($recoveryPoints.Length -eq 0)
                {
                 Write-Host "No recovery point available for" $dsn.Name -ForeGroundColor Yellow
                 }
            Else
                {
        #Select the latest recovery point found on Array [0]
        $latestRecoveryPoint = $RecoveryPoints[0]
        #Recovering
        Write-Host "Recovering" $dsn.Name
        #Run Recovery Job
        $recoveryJob = Recover-RecoverableItem -RecoverableItem $latestRecoveryPoint -RecoveryOption $rop -JobStateChangedEventHandler $jobStateChangeHandler
                }
        #If it failed!
        If(!$recoveryJob)
            {
        Write-Host "Failure on invoking Recover-RecoverableItem" -ForeGroundColor Red
        Continue
            }        
        #Wait till the recovery job completes
        while (! $recoveryJob.hasCompleted )
        { 
        # Show a progress bar
        Write-Host "." -NoNewLine
        Start-Sleep 5
        }
        if($recoveryJob.Status -ne "Succeeded")
        {
        Write-Host "Recovery failed" -ForeGroundColor Red
        }
        else
        {
        Write-Host "Recovery successful" -ForeGroundColor Green
        }
    
    }
  }    
}
#End Function

#5 Count Servers in $pg array
for ($i=0; $i -le $pgc; $i++)
{
#Selecting server and displaying datasource
$ds = Get-Datasource $pg[$i] 
#Call Recover function with $i (server) from #5
Recover $i
}

#6 Once all of recovery is exported 7z these.
cd\ #Ensure its on root
cd $DestinationLocation
$dir = pwd
If ($dir.path -eq  $DestinationLocation)
    {
#7 "&" is required before calling external file.
#Call 7za.exe to compress the whole folder. 7za command line tool needs to be downloaded and placed in system32 folder b4 hand
Write-host "Starting compressiong phase. At $date ....."
Write-host "Compressing Recovered files from DPM Server. This will take time!" -ForeGroundColor Green
& 7za a -t7z "$Destination7z DPM.7z" * 
Write-host "Compression done At $date"    
    }
Else 
    {
Write-host "Something went wrong. You have to run 7z manually!"  -ForeGroundColor Red
    }
#All done exit
Exit

You can download the ps1 version from Google Docs here's the link.

Exchange 2010 Gal Picture Upload Script.

2011-10-26T12:00:00.000-07:00

Alright I been working on migrating to Exchange 2010 from Exchange 2007. Once moved we wanted to upload the pictures for users. You can do this on Exchange 2007 not covered here though.

I made the below script by using multiple source to compile this. Some script I found did something I liked but lacked few things so I went ahead and made my own with all thse things I needed. I am pretty new to Powershell so if you find I can improve then do let me know :)

I added option to check if the picture is already on the user ad attribute to save time. You can disable it if you dont want that. I also used hashtable to keep a log file for successful or failed uploads of pics.

If you have any suggestions to add to this script do let me know :)

You probably need to change Pickup folder location which is $PicFolder

=============Update: 10/11/11===========

I did not explain what this script does cause I thought it was pretty much straight forward cause of comments I added. But anyways I looked at the post today and thought hell it doesn't really say that this can do.

So here it is :- (I listed it in way of execution)

1- Gets users from exchange with get-mailbox | foreach

2- Create and datestamp log files with start of script. (I didnt know how to datestamp each line so had to create it head of execution of script. Maybe someone can help me out with this.

3- Initiate Hashtables for Success Log (Slist) and Failed Log (Flist).

4- For each users found with get-mailbox fetch $alias from it and check $alias.jpg file in pickup folder. If the pic is not there for $alias skip user.

5- Function ChkPic is to check if user has picture already assigned if so skip the user. This is usefull if want to re-run this script with new pictures added to pickup folder. Method used here is Export-RecipientDataProperty with username to see if it shows something. Usually if pic is there it will show RunspaceID in the result. I using that as my ref for pic is there.

6- Check picture file size if its less then or equal to 10k. If bigger than 10k skip user. Otherwise go ahead.

7- So finally we reached here after all that checks YAY. Go ahead and import picture.

8- So you remember that ChkPic (Step 5) I created? we are going to use it again to check if it uploaded the picture successfully. Does the same thing but after uploading. If it finds the pic it says all good otherwise logs it to Flist and displays error.

9- Display information about the logs and location to user.

10- End Script

Please leave a comment cause sometimes I feel that no one is reading this LOL. :p anyways it comes handy for me :)

================ImporToExCh2010=====================
#Pickup folder for pictures.
$PicFolder = "c:\pics"

#Fetch users from Exchange
$results = Get-Mailbox | Foreach {$_.alias}

#DateStamp
$Date=$(Get-Date -format g) | add-content c:\ExPicSuccess.log, c:\ExPicFailed.log

#Using hashtable for logs.
$Slist=@{} #Successful Log file
$Flist=@{} #Failed Log File

#Function to check if pic is in user ad attr
Function ChkPic {
Param ($alias)

#Try to see if user already has pic uploaded
$ChkUpload = Export-RecipientDataProperty -Identity $alias -Picture | out-string

#Match for RunspaceId in result string
$RChk = $ChkUpload -match "RunspaceId"                            }
#End Function ChkPic

Foreach ($alias in $results)
{
$FileLoc = "$PicFolder\$alias.jpg"
$FileExists = Test-path $FileLoc

If ($FileExists -eq $True){
Write-host -f green "`nPicture found for $alias....checking size..."

#Check photo size if its less than 10k
$PhotoSize = Get-ChildItem $FileLoc | select Length

If ($PhotoSize.Length -le 10000) { Write-Host "[Size OK]" -ForeGroundColor Green }
Else {
$Flist.Add($alias, "Pic Size Exceeded 10k - Skipped!")
Write-Host "[Pic Size more than 10Kb..Skipping User!]" -ForeGroundColor Red; Continue}

#Precheck to make sure pic is not assigned. If assigned skip user. (You can disable this)
ChkPic $alias

If ($RChk -eq $True) { Write-Host "User already has picture assigned. Skipping User! `n" -f red;Continue}

#All good going ahead with uploading..
Write-host -f yellow "Uploading..."

#Import Picture to user ad attr
Import-RecipientDataProperty -Identity "$alias" -Picture -FileData `
([Byte[]]$(Get-Content -Path "$FileLoc" -Encoding Byte -ReadCount 0))

Write-Host -f green "Uploaded picture for $alias"
Write-host -f yellow "Checking if uploaded successfully..."

#Calling ChkPic Function
ChkPic $alias
#If statement to see if value is true which means successful and false means pic attr not found.
If ($RChk -eq $True) {
Write-Host -f green "[Uploaded Successfully] `n"

If ($alias) {$Slist.Add($alias, "Successful")}
}
Else {
Write-Host -f red "[Upload Failed]"

$Flist.Add($alias, "Upload Failed.")
}
                          }

Else{
Write-host -f red "Picture not found for $alias in $PicFolder"

If ($alias) {$Flist.Add($alias, "Picture not found.")}
    }
}

Write-Host -f yellow "#Note: Logs files can be found in C: with name of ExPicSuccess.log & ExPicFailed.log `n"

#Add Successful list to log file
$Slist | out-string | add-content c:\ExPicSuccess.log
Write-host -f green "`n Displaying Successful Upload Userlist `n"
$Slist

#Add Failed to log
$Flist | out-string | add-content c:\ExPicFailed.log
Write-host -f red "`n Displaying Failed Upload Userlist `n"
$Flist
=======================================================

Download ps1 from Google Docs

You can download the ps1 incase the copy paste doesnt work. Link provided above

PowerShell print server inventory script by Michel Stevelmans

2011-10-06T13:12:00.000-07:00

Scripts looks very interesting. I haven't tried it but will do that in awhile :)
--------------------------------------------------------------------------------------------
PowerShell script which lists all installed printers and gathers information like the printer name, driver, share name, location and the IP address (the actual IP address, not the portname without the “IP” prefix).

# Print server inventory script
# Created by Michel Stevelmans - http://www.michelstevelmans.com

# Set print server name
$Printserver = "PRINTSERVER"

# Create new Excel workbook
$Excel = new-Object -comobject Excel.Application
$Excel.visible = $True
$Excel = $Excel.Workbooks.Add()
$Sheet = $Excel.Worksheets.Item(1)
$Sheet.Cells.Item(1,1) = "Printer Name"
$Sheet.Cells.Item(1,2) = "Location"
$Sheet.Cells.Item(1,3) = "Comment"
$Sheet.Cells.Item(1,4) = "IP Address"
$Sheet.Cells.Item(1,5) = "Driver Name"
$Sheet.Cells.Item(1,6) = "Shared"
$Sheet.Cells.Item(1,7) = "Share Name"
$intRow = 2
$WorkBook = $Sheet.UsedRange
$WorkBook.Font.Bold = $True

# Get printer information
$Printers = Get-WMIObject Win32_Printer -computername $Printserver
foreach ($Printer in $Printers)
{
    $Sheet.Cells.Item($intRow, 1) = $Printer.Name
    $Sheet.Cells.Item($intRow, 2) = $Printer.Location
    $Sheet.Cells.Item($intRow, 3) = $Printer.Comment
    $Ports = Get-WmiObject Win32_TcpIpPrinterPort -computername $Printserver
        foreach ($Port in $Ports)
        {
            if ($Port.Name -eq $Printer.PortName)
            {
            $Sheet.Cells.Item($intRow, 4) = $Port.HostAddress
            }
        }
    $Sheet.Cells.Item($intRow, 5) = $Printer.DriverName
    $Sheet.Cells.Item($intRow, 6) = $Printer.Shared
    $Sheet.Cells.Item($intRow, 7) = $Printer.ShareName
    $intRow = $intRow + 1
}

$WorkBook.EntireColumn.AutoFit()
$intRow = $intRow + 1
$Sheet.Cells.Item($intRow,1).Font.Bold = $True
$Sheet.Cells.Item($intRow,1) = "Print server inventory - Created by Michel Stevelmans - http://www.michelstevelmans.com"

Source : http://www.michelstevelmans.com/powershell-print-server-inventory-script/

Control Panel Shortcut

2011-10-05T08:19:00.001-07:00

Control Panel Files [CPL's]
File name Purpose
-----------------------------------------------------------------------
Access.cpl Accessibility properties
Appwiz.cpl Add/Remove Programs properties
Desk.cpl Display properties
FindFast.cpl FindFast (included with Microsoft Office for Windows 95)
Inetcpl.cpl Internet properties
Intl.cpl Regional Settings properties
Joy.cpl Joystick properties
Main.cpl Mouse, Fonts, Keyboard, and Printers properties
Mlcfg32.cpl Microsoft Exchange or Windows Messaging properties
Mmsys.cpl Multimedia properties
Modem.cpl Modem properties
Netcpl.cpl or Ncpa.cpl Network properties
Odbccp32.cpl Data Sources (32-bit ODBC, included w/ Microsoft Office)
Password.cpl Password properties
Sticpl.cpl Scanners and Cameras properties
Sysdm.cpl System properties and Add New Hardware wizard
Themes.cpl Desktop Themes
TimeDate.cpl Date/Time properties
Wgpocpl.cpl Microsoft Mail Post Office

How to Start Single Sections of Control Panel With a Command

Control Panel Tool Command
---------------------------------------------------------------
Accessibility Options control access.cpl
Add New Hardware control sysdm.cpl add new hardware
Add/Remove Programs control appwiz.cpl
Date/Time Properties control timedate.cpl
Display Properties control desk.cpl
FindFast control findfast.cpl
Internet Properties control inetcpl.cpl
Joystick Properties control joy.cpl
Keyboard Properties control main.cpl keyboard
Microsoft Exchange control mlcfg32.cpl
(or Windows Messaging)
Microsoft Mail Post Office control wgpocpl.cpl
Modem Properties control modem.cpl
Mouse Properties control main.cpl
Multimedia Properties control mmsys.cpl
Network Properties control netcpl.cpl or ncpa.cpl
Password Properties control password.cpl
PC Card control main.cpl pc card (PCMCIA)
Power Management (Windows 95) control main.cpl power
Power Management (Windows 98) control powercfg.cpl
Printers Properties control main.cpl printers
Regional Settings control intl.cpl
Scanners and Cameras control sticpl.cpl
Sound Properties control mmsys.cpl sounds
System Properties control sysdm.cpl

PsTools with Powershell - Remote Execution

2011-09-28T14:24:00.000-07:00

So I was tasked to remote execute an exe file on a server.

I wanted to use PowerShell to do the whole thing but ended up using PsTools due to lack of time to explore PowerShell Remote.

I ran into few issue. Basically when I was executing the exe file it wasn't displaying anything to the end user. After doing some research I found that exe was running but on the wrong session. For example I wanted to see the Test.exe GUI logged in as a remote user. But when I executed the psexec it ran the Test.exe in console session id 0. My session id was 2. You can see you session by going to taskmanager and go to users tab. There you will see the session id.

In order for me to see Test.exe GUI I had to specify the session on psexec. But problem was that every time I log into remote desktop I would get a new session id.

So I googled it and found the solution for identifying the session id.

So basically psexec runs a command query session and looks for session id of the user where the app should be displayed. i.e the variable $UserSession

=======================================================================
#Make sure you change the location of PsTools exe files below
#Change following variables for your setup
set-alias psexec 'C:\PsTools\PsExec.exe'
$UsersSession = 'ijaved' #Username of the user you want the app to show
$UserAdmin = 'admin' #admin user on the remote pc
$AdminPass = 'test' #pass of admin user
$RemotePc = '\\192.168.1.128' #remote pc
$App ='C:\test.exe' # App to run

#No need to change anything below
$results = & psexec '$RemotePC' -u '$UserAdmin' -p '$AdminPass' query session
$id = $results | Select-String "$UsersSession\s+(\w+)" | Foreach {$_.Matches[0].Groups[1].Value}
$delay = ping 127.0.0.1 -n 2
$call = & psexec '$RemotePC' -u '$UserAdmin' -p '$AdminPass' -i $id -d '$App'
#End Script
=======================================================================

I found a problem where one of the installer.exe won't run even after being called. It would come up and disappear. After trying to figure out something I got my break. I found that when psexec is executing the installer it is doing so from c:\windows\system32 folder and the installer for some stupid reason was looking for its file inside system32. Don't know why but that was the case.

So I made a batch file which called the installer from its own folder. Basically batch file did the following :-

cd \
cd "c:\installerfolder\"
c:\installerfolder\install.exe

Hope it helps anyone out there.

AutoLogin Win 7 - Shortcut for User Accounts Wizard on Win 7

2011-09-28T07:46:00.000-07:00

From run write netplwiz to get User Accounts wizard.

Press the Windows key + R on your keyboard to launch the “Run” dialog box.
Type in netpliz or control userpasswords2
Press Enter. The User Accounts window will display.
Uncheck the option “Users must enter a user name and password to use this computer”
Click “OK”
You will then be prompted to enter the current password and confirm it.
After doing so, you will no longer be prompted to enter your password upon login.

If Checkbox is no there then

1. Press the Windows key + R on your keyboard to launch the “Run” dialog box.
2. Type regedit and hit enter to open the Registry Editor
3. Then browse to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\
4. Set AutoAdminLogon = 1 (create it if doesn't exist its a string variable)
5. Set DefaultUserName = your username (create it if doesn't exist its a string variable)
6. Set DefaultPassword = your password (create it if doesn't exist its a string variable)

Disable & Enable Services for Mailbox

2011-09-26T12:10:00.000-07:00

PowerShell commands to Disable mailbox level services for specificed users. Works well for Microsoft 365 Cloud.

Disable Access to Mailbox

#Set $member to username of the user you wan
$member | Set-CASMailbox -OWAEnabled $false -PopEnabled $false -ImapEnabled $false -MAPIEnabled $false -ActiveSyncEnabled $false -EwsEnabled $false

Get-CASMailbox $member | Select-Object Name, OWAEnabled, PopEnabled, ImapEnabled, MAPIEnabled, ActiveSyncEnabled, EwsEnabled

==========================

Enable Access to Mailbox

#Set $member to username of the user you wan
$member | Set-CASMailbox -OWAEnabled $true -PopEnabled $true -ImapEnabled $true -MAPIEnabled $true -ActiveSyncEnabled $true -EwsEnabled $true

Get-CASMailbox $member | Select-Object Name, OWAEnabled, PopEnabled, ImapEnabled, MAPIEnabled, ActiveSyncEnabled, EwsEnabled

Enable / Disable Microsoft 365 ActiveSync service for users.

2011-09-23T14:26:00.000-07:00

I am currently working on Microsoft 365 cloud exchange. I want to try out different things which will enable and disable the services for users. I found the below post which stats how to enable and disable ActiveSync for users.

Windows Mobiles can be configured for Active Sync. Active Sync is enabled for all users by Default in Exchange 2007 & 2010.

For Security reasons its recommended to disabled all users and enable only for the required users

Below power shell enabled and disabled Active for all the users in the exchange Organization

get-Mailbox -resultsize unlimited | set-CASMailbox -ActiveSyncEnabled:$False

get-Mailbox -resultsize unlimited | set-CASMailbox -ActiveSyncEnabled:$True

Below powershell command to enable and disable active sync for given set of users in the text file

Get-content C:\users.txt | set-CASMailbox -ActiveSyncEnabled:$True

Get-content C:\users.txt| set-CASMailbox -ActiveSyncEnabled:$False

Source : http://powershell.com/cs/forums/p/2619/3506.aspx

Microsoft 365 Cloud Remote Management

2011-09-22T10:20:00.000-07:00

Alright so I been learning how to play with Microsoft 365. In particular management of Exchange server via “Exchange Management Console” and “Exchange Management Shell aka Powershell”.

I found very amazing tutorial on http://technet.microsoft.com/en-us/edge/Video/hh278971 by Naomi Alpern. I watched the whole thing since it was very interesting. But you if you really want to skip it to fun part then skip it to 20 minutes into to tutorial.

First of install "Exchange Management Tools" from Exchange 2010 Sp1 cd. I downloaded mine off microsoft. Extract the files and run the setup from run. Cmd into the folder where exchange 2010 sp1 setup file is located and write "setup /R:MT"

To configure Exchange Management Console do the following steps:-

· From the “Exchange Management Console” right click on “Microsoft Exchange” and click on “Add Exchange Forest…”

· You will be prompted with the below dialog box. In “Specify a friendly name for this Exchange forest”. Write whatever is easy to remember for you. I put mine as “Exchange Online”. After that make sure you select “Exchange Online” from the drop down menu of “Specify the FQDN or URL of the server running the Remote PowerShell instance:” Click “OK” and it will ask you for the username and password for your Microsoft 365 account.

· After you put in your username and password it will refresh the EMC and if it accepts the credentials it will list your exchange forest in the list.

That was the "Exchange Management Console" connection settings. Now for "Exchange Management Shell (PowerShell)"

To connect through PowerShell use the following script
========================================
Set-ExecutionPolicy unrestricted
#Ask for credentials
$cred = Get-Credential
#Setup a powershell session to the Exhcange online server
$O365 = New-PSSession -ConfigurationName Microsoft.Exchange –ConnectionUri https://ps.outlook.com/powershell -Credential $cred -Authentication Basic –AllowRedirection
#Import the cmdlets to your local computer
$importcmd = Import-PSSession $O365

=============================================

Update : Someone asked me to automate the username and password. So here's the script with username & password already added :-

=============================================
Set-ExecutionPolicy unrestricted
#Change to your username of microsoft 360 below
$userName = "username@domain.onmicrosoft.com"
#Change yourpasswordhere with your password
$passWord = ConvertTo-SecureString "yourpasswordhere" -Force -AsPlainText
$cred = New-Object System.Management.Automation.PSCredential($userName, $passWord)
$O365 = New-PSSession -ConfigurationName Microsoft.Exchange –ConnectionUri https://ps.outlook.com/powershell -Credential $cred -Authentication Basic –AllowRedirection
$importcmd = Import-PSSession $O365
========================================
The above will connect you to your online cloud exchange server. You can test it out by running exchange commands. get-mailbox or anything else.

That pretty much sums it up. Not much different from your local exchange server. Do keep in mind there are few settings not visible on cloud exchange server since its running multiple clients setup (hosted exchange setup).

Windows Registry

2011-09-22T09:30:00.000-07:00

*-*-*-*-*-*-*-*-*-*-*-*-*-*Warning*-*-*-*-*-*-*-*-*-*-*-*-*-*

Don’t ever change a value in the registry. Ever. We know we just told you to do that, but would you jump off a cliff if we told you to? Don’t ever change a value in the registry. Don’t even say the word registry. We know a guy once who said the word registry, and three days later he was hit by a bus. True story. As a matter of fact, you shouldn’t even have a registry on your computer. If you suspect that you do have a registry on your computer, please call us and a trained professional will be dispatched to your office to remove the registry immediately. If you accidentally touch the registry, wash your hands with soap and water and call a doctor. Do not swallow the registry or get it in your eyes!

Windows 7 Shortcut

2011-09-21T09:36:00.001-07:00

Windows 7
The → symbol stands for the right arrow key, ← for the left arrow key, etc.

Win+↑	Maximize the current window
Win+↓	If the current window is maximized, restore it; if the current window is restored, minimize it
Win+←	Dock the current window to the left half of the screen If it is already docked left, it is moved to the right half of the screen If it is already docked right, it is restored to its original size
Win+→	Dock the current window to the right half of the screen If it is already docked right, it is moved to the left half of the screen If it is already docked left, it is restored to its original size
Win+Shift+←	Move current window to the left monitor (with dual monitors)
Win+Shift+→	Move current window to the right monitor (with dual monitors)
Win+Home	Minimize all but the current window
Win+Space	Peek at the desktop
Win+[Plus sign]	Zoom in
Win+[Minus sign]	Zoom out
Win+P	Open the projection menu (generally used for laptops connected to projectors)
Alt+P	In Explorer, show/hide the preview pane

Taskbar Modifiers (New in Windows 7)

Shift+Click	Open a new instance of the program
Ctrl+Click	Cycle between windows in a group
Middle Click	Open a new instance of the program
Ctrl+Shift+Click	Open a new instance of the program as Administrator
Shift+Right-Click	Show window menu

Managing Windows

Alt+F4	Close the active window
Alt+Tab	Switch to previous active window
Alt+Esc	Cycle through all open windows
Win+Tab	Flip 3D [more info]
Ctrl+Win+Tab	Persistent Flip 3D
Win+T	Cycle through applications on taskbar (showing its live preview)
Win+M	Minimize all open windows
Win+Shift+M	Undo all window minimization
Win+D	Toggle showing the desktop
Win+↑	Maximize the current window
Win+↓	If the current window is maximized, restore it; if the current window is restored, minimize it
Win+←	Dock the current window to the left half of the screen If it is already docked left, it is moved to the right half of the screen If it is already docked right, it is restored to its original size
Win+→	Dock the current window to the right half of the screen If it is already docked right, it is moved to the left half of the screen If it is already docked left, it is restored to its original size
Win+Shift+←	Move current window to the left monitor (with dual monitors)
Win+Shift+→	Move current window to the right monitor (with dual monitors)
Win+Home	Minimize all but the current window
Win+Space	Peek at the desktop
Win+[Plus sign]	Zoom in
Win+[Minus sign]	Zoom out

Starting Programs

Win+1	Open the first program on your Quick Launch bar
Win+2	Open the second program on your Quick Launch bar
Win+n	Open the nth program on your Quick Launch bar
Win+U	Open the ease of access center
Win+F	Open the search window
Win+X	Open the Mobility Center
Win+E	Open Explorer
Win+R	Open the Run window [more info]
Win+B	Move focus to notification tray (the right-most portion of the taskbar)
Win+P	Open the projection menu (generally used for laptops connected to projectors)
Win+Pause	Open the System Properties portion from the Control Panel
Ctrl+Shift+Esc	Open Windows Task Manager

Logging In And Out

While the below shortcuts seem unwieldy because of their length, they're quite easy to remember once you try them out a few times.

Win, →, Enter	Shutdown
Win, →, →, R	Restart
Win, →, →, S	Sleep
Win, →, →, W	Switch Users
Win+L	Locks computer

Viewing Folders With Explorer

Alt+←	Go back
Alt+→	Go forward
Alt+↑	Go up a directory
Alt+D	Move focus to address bar
Alt+D, Tab	Move focus to search bar
Alt+Enter	Open the Properties window of the current selection
Ctrl+Mousewheel	Change the view type (extra large, small, list view, detail, etc.)
Alt+P	Show/hide the preview pane

Useful Net commands - Don`t need admin rights to run these.

2011-09-13T14:43:00.000-07:00

I just love using Net commands to get list of users or password expiry dates for users.

Run the following command to get all the data for that specific user on domain

net user username /domain

Result :-

C:\Users\ijaved>net user ijaved /domainThe request will be processed at a domain controller for domain test.local.
User name                    ijaved
Full Name                    i Javed
Comment
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              Never
Password last set            04/07/2011 9:14:48 AM
Password expires             02/10/2011 9:14:48 AM
Password changeable          04/07/2011 9:14:48 AM
Password required            Yes
User may change password     Yes
Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   13/09/2011 5:03:59 PM
Logon hours allowed          All
Local Group Memberships
Global Group memberships     *Employees            *Domain Users
The command completed successfully.

net group /domain

This will list all the groups in your domain.

net group "groupname" /domain

This will list users inside specified group name.

* I love these commands because they do not require admin rights. You can run them as normal users and still get the useful information you probably didn`t have access to :)

Additional Commands can be found at : http://www.petri.co.il/list_all_users_and_groups_in_domain.htm

Windows 7 / 2008 shortcut for settings

2011-09-09T11:34:00.000-07:00

I hate clicking my way to network settings so found the shortcut.. from run write ncpa.cpl that will open network connections.

Also you can open firewall settings by opening firewall.cpl from run.

So here's the quick list :-

Network Connections = ncpa.cpl
Firewall Settings = firewall.cpl
Device Management = devmgmt.msc
Disk Management = diskmgmt.msc
Services = services.msc
Remote Desktop client = mstsc

If you know any good ones please leave a comment and I will add it up in ths list :)

Export GAL details to CSV

2011-09-09T11:12:00.000-07:00

CSVDE -f GalDump.csv -r objectCategory=person -l "displayName, title, telephoneNumber, department, mail"

Works on Windows 2008 R2 Server with AD. Might come in handy to make SharePoint Contact list by importing this csv.

It exports to the same folder you are in on cmd. Filename will be GalDump.csv

Source: http://smtp25.blogspot.com/2010/05/how-to-dumpexport-gal-to-csv-file.html

Changing authentication mode for Sql Server express edition

2011-08-31T12:25:00.000-07:00

One way of doing it is through sql server management studio explained over here

http://msdn.microsoft.com/en-us/library/ms188670.aspx

But if you haven’t installed the management studio than in that case you need to make following change in the registry

HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Microsoft SQL server / MSSQL.1/ MSSQLSERVER/ LoginMode

Click on it change it’s value from 1 to 2.

Then Restart your sql server service !!!

After you have done this you need to enable you sa account for sql server authentication for this follow these steps

1) Open SQL Server Management Studio Express and Login
2) In Object Explorer, click Security followed by Logins
3) Right click sa user and select Properties.
4) Uncheck Enforce password policy
5) Select Status. Click the Grant and Enabled radio buttons. Click OK
6) Restart your database server and select restart.

That’s it

Source : http://nishantrana.wordpress.com/2009/01/07/changing-authentication-mode-for-sql-server-express-edtion/

PsTools - Executing Program on a remote windows 7 machine.

2011-08-30T14:42:00.000-07:00

I could execute the program but it was running in the background. After troubleshooting figured out that you need to put the sessionid to make sure it displays for the user.

psexec -s -d -i 2 \\win7vm -u "ijaved" -p "***" "calc.exe"

The number 2 above identified my session which was RDP. You can find the sessionid via taskmanager.