Security

Start-ProcessInteractive

Tobias — Tue, 15 Mar 2011 15:47:58 GMT

illustrates how you can use the task scheduler to run a program or script remotely on behalf of someone else.

Can be used to launch programs remotely visibly, so the logged on user can see and interact with the program you launched.

Requires Windows Vista/Server 2008 or better, and you need to have local admin privileges on the target machine.

Launch PS Script as Scheduled Task Elevated

Tobias — Fri, 29 Oct 2010 09:05:58 GMT

creates a scheduled task that runs a PS script in the context of some other user. The script is NTFS protected, and you get back a single line of PS code that any user can execute to run the script elevated. This way, a regular user can safely run a PS script elevated without having to know the admin password.

Encrypt Own Password in Script

Tobias — Mon, 25 Oct 2010 09:27:39 GMT

Enter password and username. The script autogenerates a script that encrypts the password with your access token (identity). So when you run the autogenerated script, you receive a valid credential object that you can use to authenticate yourself to remote systems. Other persons will not be able to retrieve the encrypted password. Only the person who encrypted the password can decrypt it. No separate secure key is needed because the secret is your identity.

Encrypt Password in Script

Tobias — Fri, 22 Oct 2010 14:34:56 GMT

Asks for a password and a username, then autogenerates a script than contains the password in encrypted form and creates a credential object from it. A "more" secure way of hard-coding passwords into scripts. The password is still not safe, a user could reverse engineer the credential object. The password is however effectively "obfuscated" so a user can no longer easily identify and reuse a hard coded password.

Create shares with share permissons

Gerry Bammert — Sun, 17 May 2009 19:52:54 GMT

Create one or several shares with share permissions in a domain environment.

Get-HotFix

Aleksandar — Tue, 28 Apr 2009 10:49:51 GMT

The Get-HotFix function gets the quick-fix engineering (QFE) updates that have been applied to the local computer or to remote computers and filter those hotfixes named "file 1". There is Get-HotFix cmdlet in PowerShell V2. This is my attempt to bring similar functionality to V1.

Read-MBSALogs

Richard Giles — Wed, 04 Mar 2009 22:16:02 GMT

The following script iterates over each file in the directory, parses the file and looks for the count. This information is dynamically entered into an Excel spreadsheet.

Attributed To: FatBeard

URL: http://fatbeards.blogspot.com/2009/01/powershell-mbsa-logs.html

Set-Folderpermission.ps1

Niklas Goude — Fri, 27 Feb 2009 15:52:07 GMT

This script sets the permissions on a folder.

Read more about it here >>

goude@powershell.nu

www.powershell.nu

Change file ownership

Tobias Weltner — Tue, 25 Nov 2008 12:10:22 GMT

Demonstrates how to assign a new owner to a file by manipulating the file security descriptor. Assigning a new owner requires Admin privileges.

Load persisted password from disk and launch process with alternate credentials

Tobias Weltner — Sat, 15 Nov 2008 07:49:33 GMT

This script shows how to load a previously persisted secret password from disk, then convert it to a securestring and a PSCredential object. This can be used to authenticate against a number of services. In the example, the loaded password is used to launch a process with alternate credentials. Note that only the person which persisted the secret password can retrieve it.

Encrypt a password and save it to disk

Tobias Weltner — Sat, 15 Nov 2008 07:45:07 GMT

encrypts a password with the current users identity and saves it to disk as file. The password can then be re-loaded from other scripts and used for authentication but only the user who originally saved the password can decrypt. To enable more than one person to decrypt, use the -key parameter while converting the string to a securestring.

Check for Administrative Privileges

Tobias Weltner — Mon, 10 Nov 2008 18:14:12 GMT

Function isAdmin() checks whether a script runs with full Admin privileges.