Search results for 'sectionid:200' matching tag 'wmi'

Audit Script

AlexYoung — Wed, 20 Feb 2013 06:00:00 GMT

Hi,

I'm having problem with a script that is a simple WMI Inventory script that searches Active Directory for computer accounts and tests the connection and should go through checking wmi queries the problem is, i'm only getting the Computer Name, IP & MAC Address it's not going through the WMI queries.

Can anyone see anything incorrect.

# ///////// CSV Output File ///////////
$outputFile = 'liveaudit.csv'

# ////////// Input File //////////////
$logFile = 'Computers.txt'

# ///////// LDAP Path //////////////
$root = 'LDAP://DC=The7Stars,DC=local'

# //////// AD Pre-Req ////////////
$a = [adsisearcher]"objectcategory=computer"
$a.SearchRoot=$root
$a.PageSize = 200
$a.PropertiesToLoad.Add("name") | Out-Null
$a.PropertiesToLoad.Add("distinguishedname") | Out-Null
$a.PropertiesToLoad.Add("samaccountname") | Out-Null
$results = $a.findall()
$ADObjects = @()

foreach($result in $results) {
[Array]$propertiesList = $result.Properties.PropertyNames
$obj = New-Object PSObject
foreach($property in $propertiesList) {
$obj | add-member -membertype noteproperty -name $property -value ([string]$result.Properties.Item($property))
} # end foreach
$ADObjects += $obj
} # end foreach

# Create Log File
New-Item -ItemType File -Path $logFile -Force | Out-Null
$results = @()

# Scan Computer Objects
foreach ($comp in $ADObjects) {
$result = New-Object psObject
Write-Host "Querying $($comp.name)" -ForegroundColor green

$result | Add-Member -MemberType NoteProperty -Name 'Network Name' -Value ($comp.SamAccountName -replace '\$$')
$result | Add-Member -MemberType NoteProperty -Name 'Name' -Value ($comp.Name)
$result | Add-Member -MemberType NoteProperty -Name 'DN' -Value $comp.distinguishedname
try {
# IP Queries
$IPAddr = Test-Connection -ComputerName $comp.name -Count 1 -ErrorAction continue | select -ExpandProperty ipv4Address | select -ExpandProperty ipAddressToString
$result | Add-Member -MemberType NoteProperty -Name 'IP Address' -Value $IPAddr

# MAC address query
$mac = gwmi -Class win32_networkadapterconfiguration -ComputerName $comp.name -ea continue | `
Where-Object {$_.macaddress -and ($_.ipaddress -contains $IPAddr -or $_.ipaddress -eq $IPAddr)} | select -Expand macaddress
$result | Add-Member -MemberType NoteProperty -Name 'MAC Address' -Value $mac

# Other WMI queries
$computerSystem = gwmi -Class win32_computersystem -ComputerName $comp.name
$OperatingSystem = gwmi -Class win32_operatingsystem -ComputerName $comp.name
$Processor = @(gwmi -Class win32_processor -ComputerName $comp.name)
$RAM = [math]::round(($computerSystem.TotalPhysicalMemory)/1mb,3)
$bios = gwmi -Class win32_bios -ComputerName $comp.name
$biosDate = [Management.ManagementDateTimeConverter]::ToDateTime($bios.ReleaseDate)
$OS_InstallDate = [Management.ManagementDateTimeConverter]::ToDateTime($OperatingSystem.InstallDate)
$C_Drive = gwmi -Class win32_logicaldisk -ComputerName $comp.name | ? { $_.DeviceID -eq 'C:' }

# Add results of WMI queries
$result | Add-Member -MemberType NoteProperty -Name 'Manufacturer' -Value $computerSystem.Manufacturer
$result | Add-Member -MemberType NoteProperty -Name 'Product Description' -Value $computerSystem.Model
$result | Add-Member -MemberType NoteProperty -Name 'Operating System' -Value ($OperatingSystem.Name -split '\|')[0]
$result | Add-Member -MemberType NoteProperty -Name 'OS_SP' -Value $OperatingSystem.csdVersion
$result | Add-Member -MemberType NoteProperty -Name 'OS_InstallDate' -Value $OS_InstallDate
$result | Add-Member -MemberType NoteProperty -Name 'CPU' -Value $Processor[0].name
$result | Add-Member -MemberType NoteProperty -Name 'ProcSpeed' -Value $Processor[0].maxclockspeed
$result | Add-Member -MemberType NoteProperty -Name 'ProcCount' -Value $Processor.count
$result | Add-Member -MemberType NoteProperty -Name 'Memory' -Value $RAM
$result | Add-Member -MemberType NoteProperty -Name 'BIOSDate' -Value $biosDate
$result | Add-Member -MemberType NoteProperty -Name 'Hard Drive Capacity' -Value ([math]::Round(($C_Drive.size)/1gb,3))
$result | Add-Member -MemberType NoteProperty -Name 'C_Space' -Value ([math]::Round(($C_Drive.freespace)/1gb,3))

} # end try
catch {
Write-Host "Could not contact $($comp.name)" -ForegroundColor Red
Out-File -FilePath $logFile -InputObject $comp.name -Append -Force
}

$results += $result

} # end foreach $comp

$results | Export-Csv -Path $outputFile -NoTypeInformation -Force
$results | Select-Object -First 20 | Format-Table

Write-Host "$($results.count) computers processed. The results are stored in $outputFile"
$offlineCount = @(Get-Content $logFile).count

Write-Host "$offlineCount computers were offline. The list is stored in $logFile"

Result of the CSV is the following

"Network Name","Name","DN","IP Address","MAC Address"
"STAR-SBS1","STAR-SBS1","CN=STAR-SBS1,OU=Disabled Computers,DC=The7Stars,DC=local",,
"STARS-RD1","STARS-RD1","CN=STARS-RD1,OU=RemoteComputers,OU=Tottenham Mews,DC=The7Stars,DC=local","192.168.25.9","00:0C:29:9F:F9:D1"
"STAR-SRV01","STAR-SRV01","CN=STAR-SRV01,OU=Domain Controllers,DC=The7Stars,DC=local","192.168.25.11","00:0C:29:65:72:F6"

Uptime Script

aochoar — Mon, 31 Oct 2011 05:00:00 GMT

Hello everyone, I'm trying to retrieve some information from Event ID 1074. I need the following information Domain\User and Comment. I alread have the servername and uptime output to html.

I have added the an example of the html output and a sample of the script, hope you can help.

Example of event ID,

Event Type:      Information
Event Source:      USER32
Event Category:      None
Event ID:      1074
Date:            10/30/2011
Time:            12:31:47 PM
User:            Domain\User
Computer:      Server Name
Description:
The process winlogon.exe has initiated the restart of computer SERVER on behalf of user Domain\User for the following reason: No title for this reason could be found
Reason Code: 0x800000ff
Shutdown Type: restart
Comment: Maintenance Reboot

HTMP Output Example
Machine Name Last Reboot TimeStamp User        Comment
ServerName      10/23/2011 1:05:46 PM    DomainName/Kevin  Maintenance Reboot

$ErrorActionPreference = "SilentlyContinue"
Remove-Item C:\Scripts\Output -Recurse
$InputFile = Get-Content MachineList.txt
$LastReboot = @()
foreach ($computer in $InputFile)
{
$x = "" | Select-Object 'Machine Name','Last Reboot TimeStamp','Reboot Initiator','Reboot Reason Code'
$x.'Machine Name' = $computer
$x.'Last Reboot TimeStamp' = [Management.ManagementDateTimeConverter]::ToDateTime((Get-WmiObject -class Win32_OperatingSystem -computername $computer -namespace "root\CIMV2").LastBootUpTime)
$LastReboot += $x
}
New-Item C:\Scripts\Output -ItemType directory

$LastReboot | Sort-Object 'Last Reboot TimeStamp' -Descending | ConvertTo-Html | Out-File C:\Scripts\Output\LastReboot.htm
Invoke-Expression C:\Scripts\Output\LastReboot.htm

WMI error on w2k8, despite PacketPrivacy

SteinIP — Fri, 06 May 2011 05:00:00 GMT

Hello !

I've made a script that checks MSClusters' status remotely, using WMI. I have upgraded to POSH v2 to include 'Autentication PacketPrivacy', and it all works perfectly. My query does return the expected results, however my queries keep creating an error msg on the remote servers. This only occurs on w2k8, not w2k3.

My WMI call:
Get-WMIObject -Class MSCluster_Node -ComputerName myServername -Namespace root\mscluster -Authentication PacketPrivacy

The error msg:
Event Type: Error
Event Source: WinMgmt
Event ID: 5605
Computer: myServername
Description:
Access to the root\mscluster namespace was denied. The namespace is marked with RequiresEncryption but the client connection was attempted with an authentication level below Pkt_Privacy. Re try the connection using Pkt_Privacy authentication level.

I am looking for a explanation or workaround to get rid of these... As I work at a large service provider, the events generate a lot of unneccesary work for several departmens...

Re: logical disks

Repriser — Tue, 03 May 2011 05:00:00 GMT

Thanks. That is on target.

It will be nice there is an official documentation that explains what it returns. Some counters are cumulative data, some are absolute measures. I am using admin privilege and with real disks.

Since powershell left the guessing game to us, I am switching back to perfmon output into a table.

$computer = "hostname"
$namespace = "root\CIMV2"
Get-WmiObject -class Win32_PerfFormattedData_PerfDisk_LogicalDisk -computername $computer -namespace $namespace

Another point to prove powershell is re-inventing wheel and not very useful at times.

logical disks

Repriser — Fri, 22 Apr 2011 05:00:00 GMT

If I run ps script like the following, would I get consistent reliable info about my logical disks? I got percentdisktime, but other values are zero or strange long digits.

$computer = "hostname"
$namespace = "root\CIMV2"
Get-WmiObject -class Win32_PerfFormattedData_PerfDisk_LogicalDisk -computername $computer -namespace $namespace

Folder and Disk Space utilization report

squeekie — Wed, 20 Apr 2011 05:00:00 GMT

I have a portion of a script that creates an excel spreadsheet and populates the drives for remote servers, their size as well as used and percentage. (Found it here I believe) What I need to add to this spreadsheet are all of the directories that are listed under the drives by using the get-content pointing to my .txt file.

I.E. list only directories for each of the logical drives for the server

here is what I have found thus far, I am able to create the new column, I am not able to populate the information into it.

$strComputer = Get-Content <path to file>

$Excel = New-Object -Com Excel.Application
$Excel.visible = $True
$Excel = $Excel.Workbooks.Add()

$Sheet = $Excel.WorkSheets.Item(1)
$Sheet.Cells.Item(1,1) = “Computer”
$Sheet.Cells.Item(1,2) = “Drive Letter”
$Sheet.Cells.Item(1,3) = “Description”
$Sheet.Cells.Item(1,4) = “FileSystem”
$Sheet.Cells.Item(1,5) = “Size in GB”
$Sheet.Cells.Item(1,6) = “Free Space in GB”
$Sheet.Cells.Item(1,7) = "Free Space in %"
$Sheet.Cells.Item(1,8) = "Directories"

$WorkBook = $Sheet.UsedRange
$WorkBook.Interior.ColorIndex = 8
$WorkBook.Font.ColorIndex = 11
$WorkBook.Font.Bold = $True

$intRow = 2
$wmi1 = Get-wmiObject -class “Win32_LogicalDisk” -filter "DriveType = 3" -namespace “root\CIMV2" -computername $strComputer

foreach ($objItem in $wmi1) {
$Sheet.Cells.Item($intRow,1) = $objItem.SystemName
$Sheet.Cells.Item($intRow,2) = $objItem.DeviceID
$Sheet.Cells.Item($intRow,3) = $objItem.Description
$Sheet.Cells.Item($intRow,4) = $objItem.FileSystem
$Sheet.Cells.Item($intRow,5) = $objItem.Size / 1GB
$Sheet.Cells.Item($intRow,6) = $objItem.FreeSpace / 1GB
$Sheet.Cells.Item($IntRow,7) = ($objItem.FreeSpace / 1GB) / (($objItem.Size / 1GB))*100

<the next line of code would go here to populate the fields for each server>

$intRow = $intRow + 1
}

$WorkBook.EntireColumn.AutoFit()
Clear

------------what I am trying to do now----------------------------

What I have done to retrieve the folders, I run this after I created a psdrive for u:\

get-childitem u:\ -recurse | where-object {$_.psIscontainer} | Where-Object {$_.fullname.Count -ne 0 }

Only because I have not been able to query the servers in my .txt file. My thought is to have a nested foreach and take the output of the variable and add it to the cell. Once the query is complete for that server, it begins to query the next server on the list and populate the next row in excel.

Re: Display a list of all the classes on the local system.....

jwhite — Tue, 19 Apr 2011 05:00:00 GMT

Ok I used the -list parameter and piped it to Get-member. That worked. So is that all the values that go with that specific object_class?

Thanks....!

Re: How to delete computer from SCCM collection with PowerShell?

kcpr — Tue, 01 Feb 2011 06:00:00 GMT

Hi,

Did you use exactly the same version of script that I posted?
Because as I wrote earlier - CollectionRules property was also empty in my case, but the script worked either way.

Maybe try also the script from http://chad.cc/blog.
I remember that I had strange problems with -computername property when I started changing the script.
I don't know why but I had to put there name of my server, because when I was using a variable I experienced errors all the time.

Do you get some errors too? Or does the script runs with no output?

Regards
Kacper

How to delete computer from SCCM collection with PowerShell?

kcpr — Wed, 12 Jan 2011 06:00:00 GMT

Hello,

Recently I started developing scripts for SCCM administration. Today I wrote a script that adds computer to collection and this was fairly easy. The problem is with deleting computer from collection. I've found this site:

http://chad.cc/blog/2010/05/sccm-delete-all-direct-membership-computers-in-a-collection/

I tried to use this script but with no success. I'm still getting error - Get-WmiObject : Invalid namespace and You cannot call a method on a null-valued expression. Using WMI Explorer I found out that CollectionRules property is empty. This is why I get the second error, but why is this happening? And is there any other way to remove a computer from collection using PowerShell?

There's another class - SMS_CollectionMember_a. It contains all computers with information to which collection they belong, but it doesn't have any methods.

Thanks in advance
Kacper

Make files available offline with PowerShell

kcpr — Thu, 11 Nov 2010 06:00:00 GMT

Hello,

When I'm redirecting profile folder to network location in Windows 7 it's automatically made offline available. But when I do the same thing through registry the folder is only redirected, but not made available offline.
I tried to use Win32_OfflineFilesCache WMI class in my script and I managed to get result - 0 which means that it succeeded, but nothing happens. Is there any other way to do this through PowerShell (because I know that there is also GPO, but I cannot use it)? Or maybe my script is bad? Unfortunately I don't have access to it right now, so I cannot paste it here.

Thanks in advance
Kacper