Powershell Notes

Author:

Dimitry Dukhovny

Note

To donate to the maintenance of these pages, do send BTC to bc1qkw0pp78kv67zrgp8xds7qrqen7mhlz0rs5p8p5

Networking

Also see Windows networking.

Get IP address

# All of them
Get-NetIPAddress
# The address for NIC 3
#  note the "InterfaceAlias" is "Ethernet 4"
Get-NetIPAddress | Where-Object ${_.InterfaceIndex -eq 3}

Set the new IP address

For this example, we will assign 192.168.100.100 in our /24 to the interface alias Ethernet 4 with a default gateway of 192.168.100.254.

Our domain controllers in this example serve DNS and are at 192.168.100.1 and 192.168.100.2.

New-NetIPAddress -InterfaceAlias "Ethernet 4" -IPAddress "192.168.100.100" -PrefixLength 24 -DefaultGateway 192.168.100.254
Set-DnsClientServerAddress -InterfaceAlias "Ethernet 4" -ServerAddresses 192.168.100.1, 192.168.100.2

Port scan an address

For this example, we want to see if port 3389 is open on 192.168.100.0/24.

$port = 3389
$net = "192.168.100"
$range = 1..254
foreach ($r in $range)
{
        $ip = "{0}.{1}" -F $net,$r
        if(Test-Connection -BufferSize 32 -Count 1 -Quiet -ComputerName $ip)
        {
                $socket = new-object System.Net.Sockets.TcpClient($ip, $port)
                If($socket.Connected)
                {
                        "$ip listening to port $port"
                        $socket.Close()
                }
        }
}

Replace DNS records from CSV

Download ReplaceDNSRecord.ps1

# From Microsoft at
#  https://gallery.technet.microsoft.com/Update-DNS-records-with-da10910d

# Environment Setup
$DNSServer = "YourDNSServer"
$DNSZone = "YourZoneName"
$InputFile = "dnsrecords.csv"

# Read the input file which is formatted as name,type,address with a header row
$records = Import-CSV $InputFile

# Now we loop through the file to delete and re-create records
# DNSCMD does not have a modify option so we must use /RecordDelete first followed by a /RecordAdd

ForEach ($record in $records) {

        # Capture the record contents as variables
        $recordName = $record.name
        $recordType = $record.type
        $recordAddress = $record.address

        # Build our DNSCMD DELETE command syntax
        $cmdDelete = "dnscmd $DNSServer /RecordDelete $DNSZone $recordName $recordType /f"

        # Build our DNSCMD ADD command syntax
        $cmdAdd = "dnscmd $DNSServer /RecordAdd $DNSZone $recordName $recordType $recordAddress"

        # Now we execute the command
        Write-Host "Running the following command: $cmdDelete"
        Invoke-Expression $cmdDelete

        Write-Host "Running the following command: $cmdAdd"
        Invoke-Expression $cmdAdd
}

Promote a domain controller

For this example, assume serverB is a member of domain mydomain.gov.

# Install the AD DS role
Install-WindowsFeature -name AD-Domain-Services -IncludeManagementTools

# Run a test to make sure you will not foxtrot the system in the process
#  This will prompt for a password
Test-ADDSForestInstallation -DomainName mydomain.gov -InstallDns

# If everything works, do it for real
#  This will also prompt for a password
#  Select "A" for "Yes to all" if you really want to do this
Install-ADDSForest -DomainName mydomain.gov -InstallDNS
# The output should have a bunch of "Success" statements

# Check your work
Get-ADDomainController
# The first line should show something like...
#  CN=serverB,OU=Domain Controllers,DC=mydomain,DC=gov