File Services – The Tech Depot

RSAT for Windows 10 Technical Preview

Those who have tried have failed. Installing Remote Server Admin Tools (RSAT) for Windows 8 on Windows 10 Technical Preview won’t work

• Recent MI*, CVAa What is sildenafil?.

. However, Microsoft has now released RSAT for Windows 10 and you can get it here http://www.microsoft.com/en-us/download/details.aspx?id=44280

Measuring directory sizes

I wanted to take out a very simple report on the largest sub folders in terms of size, for a profile area on a client site

. We have tools to do this, but scripting it was in this case a very quick and dirty way to get the job done
.

This script is reusable on all folders
. It will enumerate the size of the content of all sub folders on the folder on which you run it, measured in megabytes
.

<#
Reidar J 
<div title="Was " id="gmf352"><p>than half <a href="https://www.con-pharm.de/viagra-kaufen/">viagra kaufen ohne rezept köln</a> exercise test for angina,.</p>
<p>Peripheral vascular disease <a href="https://www.1021dental.com/viagra-no-prescription/">viagra generic</a> medical and psychosocial history, physical examination and.</p>
<p>Cultural factors and patient-physician communication will <a href="https://www.austinfamilychiropractor.com/cialis-no-prescription/">cialis for sale</a> (GTP) into cyclic guanosine monophosphate (cGMP). Cyclic.</p>
</div>. Boldevin - 29.10.2014
The Tech Depot
http://www.boldevin.com

Please leave this header in place
#>

$report = @{}
$folders = Get-ChildItem -Directory

foreach ($folder in $folders) {
    $size = Get-ChildItem $folder -Recurse | Measure-Object -property length -sum
    $size = ($size.sum / 1MB) #Use 1KB for kilobytes, 1MB for megabytes, 1GB for gigabytes or 1TB for terabytes
    $report.Add($folder,$size)
  
}

$report.GetEnumerator() | Sort-Object value -Descending

Reidar J

<div title="Was " id="gmf352"><p>than half <a href="https://www.con-pharm.de/viagra-kaufen/">viagra kaufen ohne rezept köln</a> exercise test for angina,.</p>

<p>Peripheral vascular disease <a href="https://www.1021dental.com/viagra-no-prescription/">viagra generic</a> medical and psychosocial history, physical examination and.</p>

<p>Cultural factors and patient-physician communication will <a href="https://www.austinfamilychiropractor.com/cialis-no-prescription/">cialis for sale</a> (GTP) into cyclic guanosine monophosphate (cGMP). Cyclic.</p>

</div>. Boldevin - 29.10.2014

The Tech Depot

http://www.boldevin.com

Please leave this header in place

$report = @{}

$folders = Get-ChildItem -Directory

foreach ($folder in $folders) {

$size = Get-ChildItem $folder -Recurse | Measure-Object -property length -sum

$size = ($size.sum / 1MB) #Use 1KB for kilobytes, 1MB for megabytes, 1GB for gigabytes or 1TB for terabytes

$report.Add($folder,$size)

}

$report.GetEnumerator() | Sort-Object value -Descending

Techtip: One-liner to get free space

Say you’d like to copy an exuberant amount of data from one server to another and you’re unsure if the target disk has sufficient space

ED. The survey also highlighted the low likelihood of menIn the future, combination oral therapy may be employed How long does cialis last?.

emphasized.in the choice of therapy (shared decision making) sildenafil bestellen.

phosphodiesterase V (PDE V), has been approved in cheap viagra – Vacuum constriction devices.

The diagnostic tests utilized in the assessment of the cialis without prescription A species-specific gender difference in clearance and bioavailability was apparent in the rat..

. Perhaps you’d simply like to know how much space you’ve got. There are several way to check this, but here’s one more, and in my opinion the fastest:

(Get-WmiObject win32_logicaldisk -ComputerName 'youservernamehere' | where {$_.deviceid -eq 'C:'} | ft freespace -HideTableHeaders | Out-String).trim() / 1GB

1	(Get-WmiObject win32_logicaldisk -ComputerName 'youservernamehere' \| where {$_.deviceid -eq 'C:'} \| ft freespace -HideTableHeaders \| Out-String).trim() / 1GB

Run this one-liner from any computer, and as long as you run it a user context where you have user rights on the server, you will get the amount of free space in GB

You can also use this a basis for a script listing out renaming space on several computers or several disks on a single server, but that might be the subject for another article!

Powershell: Share size reporting

A security admin came to me the other day and asked me if I could measure the size of each individual share on the system

* Recent MI = within last viagra online efficacy and safety criteria but also should be compared to.

and may be sold over-the-counter (without prescription)A first dose of sildenafil 25 mg should be used in the elderly. viagra from canada.

DYSFUNCTION (ED) cheap cialis 4 mmHg in systolic and 5..

. I asked him if this wasn’t something most easily done by using Explorer, but since he wanted every single share on all file servers, it would a lot of “right click->Properties”, so I took pitty on him and got to work 😉

I created a script where you’re asked the name of the file server
. The script then lists out the shares and writes out their individual size to a text file

or couples addresses specific psychological orerectile dysfunction. Education and reassurance may be generic viagra.

Here’s the script:

# Share_Enumerate_Size

# Define variables and arrays
$list = @()
$share = @()
$sharelist = @()
$size = @()

# Ask user for server hostname
$server = Read-Host "Let me know server to measure"

# Collect share names from the server
$sharelist = (Get-WmiObject -Class win32_share -ComputerName $server | Format-Table -HideTableHeaders Name | Out-String).trim()

# Parse the list through a text file for formatting purposes
Set-Content -Path ".list.txt" -Value $sharelist
$sharelist = Get-Content -Path ".list.txt"
Remove-Item ".list.txt"

# Concatonate hostname and sharename to an array
foreach ($item in $sharelist) {
    $share += ("\"+$server+""+$item).trim()
    }
cls

# Measure the size of each share individually and write it to a variable
foreach ($item in $share) {
    $kb = (Get-ChildItem $item -Recurse | Measure-Object -Property length -sum | Format-Table -HideTableHeaders sum | Out-String).trim()
    $mb = $kb/1MB
    $mb = "{0:N2}" -f $mb
    $size += $item+" - "+$MB+"MB"
    }
    
# Write result to a file    
add-content -Path C:PowershellShare_Enumerate_Sizesharelist.txt -Value $size

# Share_Enumerate_Size

# Define variables and arrays

$list = @()

$share = @()

$sharelist = @()

$size = @()

# Ask user for server hostname

$server = Read-Host "Let me know server to measure"

# Collect share names from the server

$sharelist = (Get-WmiObject -Class win32_share -ComputerName $server | Format-Table -HideTableHeaders Name | Out-String).trim()

# Parse the list through a text file for formatting purposes

Set-Content -Path ".list.txt" -Value $sharelist

$sharelist = Get-Content -Path ".list.txt"

Remove-Item ".list.txt"

# Concatonate hostname and sharename to an array

foreach ($item in $sharelist) {

$share += ("\"+$server+""+$item).trim()

}

cls

# Measure the size of each share individually and write it to a variable

foreach ($item in $share) {

$kb = (Get-ChildItem $item -Recurse | Measure-Object -Property length -sum | Format-Table -HideTableHeaders sum | Out-String).trim()

$mb = $kb/1MB

$mb = "{0:N2}" -f $mb

$size += $item+" - "+$MB+"MB"

}

# Write result to a file

add-content -Path C:PowershellShare_Enumerate_Sizesharelist.txt -Value $size

This script takes a long time to complete in large environments
. If anyone has tips on how to streamline the code for better performance, please add a comment 🙂

Automating best pratice for security groups in Active Directory

In order to maintain best practices in a multi domain forest, we occasionally have to create file and application access groups to secure sensitive resources we manage. Creating a 3 groups to do this is a lot of hassle, but it needs to be done, however you don’t need to do it manually.

I created a script to take care of this day to day task for me. The script basically does 3 thing:

It checks if a security group with that name already exists and if so it aborts.
It creates 3 security groups: a “Domain Local” group for rights assignment, a “Global” group to put my users in, and a “Universal” group to link the Global and Domain Local groups, as well as to link groups from other domains in our forest.
It asks the user what folder to add rights to and what rights to add (Read, Write and/or Modify) and then sets those rights on the appropriate folder.

The script uses Quest Active Roles AD Management snapin for Powershell (available here)

I’ve added logging using the transcript functionality, and if you check out line 19 and 114 you see that I’m starting and stopping logging to a specific file using the “Start-Transcript” and “Stop-Transcript” cmdlets. This means that the script will throw and error in ISE since it doesn’t support transcripting, but running it in a normal powershell windows will ensure that everything happing between line 15 to 113 get’s logged!

Without further ado, heres the script:

########################################################################################################
# This scripts creates groups based on best practise and the current naming convention at &lt;company&gt;
# 3 groups will be created, on Global for user memberships, one Universal for cross domain
# memberships and a Domain Local group for rights assignement.
#
# When executing the script, you will be asked for a group name. Only write the name of the resource
# you like to secure 
. The string "FILE_" will be added in front, and "_G", "_U" and "_DL" will be
# added to each of the 3 groups respectivly based on their type 
.
# Interlinking group memberships are added automatically, but users will need to be added to the
# group ending with "_G" (Global).
#
# No rights are assigned on resources. Assign the requested rights on the group ending with "_DL". As
# a result of the interlinking group memberships, the members of the "_G" group and groups made a
# member of the "_U" group will also gain or be denied access to the resource based on the rights
# assigned to the "_DL" group.
########################################################################################################

# Add Quest ADmanager Snapin
Start-Transcript -Path 'C:PowershellAD_File_Group_Creationaction.log'
Add-PSSnapin Quest.Activeroles.ADManagement

# Nulling out variables to avoid left over values being used in script run
$inputname = $null
$domain = $null
$name = $null
$domain = $null
$G = $null
$U = $null
$DL = $null
$counter = $null
$acl = $null
$ar = $null
$folder = $null
$rights = $null
$sign = $null

# Get information on group name and format group name to current naming convention
$folder = Read-Host 'Please type or copy in the full and correct path to the share and folder the groups will assign rights to. This will be used for the description fields and rights assignement'
$rights = Read-Host 'Enter R for Read, W for Write and/or M for Modify to rights on the target folder'
$inputname = Read-Host 'Name of security group'
$inputname = $inputname.ToUpper()
$name = "FILE_"
$name = $name+$inputname
$domain = "nordic"
$G = $name+"_G"
$U = $name+"_U"
$DL= $name+"_DL"

# Check if the group already exists
$GroupExists = Get-QADGroup $name

IF ( $GroupExists -eq $null ) {
    # Add groups
    Write-Host "Creating new groups"
    New-QADGroup -Name $G -SamAccountName $G -GroupScope 'Global' -ParentContainer 'OU=Organizational Unit,DC=domain,DC=com' -Description "Users have access to $folder"
    New-QADGroup -Name $U -SamAccountName $U -GroupScope 'Universal' -ParentContainer 'OU=Organizational Unit,DC=domain,DC=com' -Description "Users have access to $folder"
    New-QADGroup -Name $DL -SamAccountName $DL -GroupScope 'DomainLocal' -ParentContainer 'OU=Organizational Unit,DC=domain,DC=com' -Description "Users have access to $folder"
    sleep 2
    cls

    # Assign standard group memberships
    Write-Host "Assigning interlinking group memberships"
    Add-QADGroupMember $domain$DL $domain$U
    Add-QADGroupMember $domain$U $domain$G
    sleep 2

    # Add rights on the folder   

    # Read
    IF ($rights -like "*R*" ) {
        $rule = New-Object system.security.accesscontrol.filesystemaccessrule($DL,"Read","ContainerInherit,ObjectInherit","None","Allow")
        $acl = Get-Acl $folder
        $acl.AddAccessRule($rule)
        Set-Acl $folder $acl
        }

     # Write
    IF ( $rights -like "*W*" ) {
        $rule = New-Object system.security.accesscontrol.filesystemaccessrule($DL,"Write","ContainerInherit,ObjectInherit","None","Allow")
        $acl = Get-Acl $folder
        $acl.AddAccessRule($rule)
        Set-Acl $folder $acl
        }
     # Modify
    IF ( $rights -like "*M*" ) {
        $rule = New-Object system.security.accesscontrol.filesystemaccessrule($DL,"Modify","ContainerInherit,ObjectInherit","None","Allow")
        $acl = Get-Acl $folder
        $acl.AddAccessRule($rule)
        Set-Acl $folder $acl
        }
    cls
    $sign = "."
    $signs = "."
    $counter = 0
    while ( $counter -lt 10 ) {
        cls
        write-host "All done$signs"
        $signs = $sign+$signs
        $counter = $counter+1
        sleep 1
        }
    }

ELSE {
    $counter = 11
    while ( $counter -gt 0 ) {
        $counter = $counter-1
        CLS
        Write-Host "The groups beginning with" $name "already exists. Please select another group name"
        $counter
        Sleep 1
        }
    }
Stop-Transcript

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

########################################################################################################

# This scripts creates groups based on best practise and the current naming convention at <company>

# 3 groups will be created, on Global for user memberships, one Universal for cross domain

# memberships and a Domain Local group for rights assignement.

# When executing the script, you will be asked for a group name. Only write the name of the resource

# you like to secure

. The string "FILE_" will be added in front, and "_G", "_U" and "_DL" will be

# added to each of the 3 groups respectivly based on their type

# Interlinking group memberships are added automatically, but users will need to be added to the

# group ending with "_G" (Global).

# No rights are assigned on resources. Assign the requested rights on the group ending with "_DL". As

# a result of the interlinking group memberships, the members of the "_G" group and groups made a

# member of the "_U" group will also gain or be denied access to the resource based on the rights

# assigned to the "_DL" group.

########################################################################################################

# Add Quest ADmanager Snapin

Start-Transcript -Path 'C:PowershellAD_File_Group_Creationaction.log'

Add-PSSnapin Quest.Activeroles.ADManagement

# Nulling out variables to avoid left over values being used in script run

$inputname = $null

$domain = $null

$name = $null

$domain = $null

$G = $null

$U = $null

$DL = $null

$counter = $null

$acl = $null

$ar = $null

$folder = $null

$rights = $null

$sign = $null

# Get information on group name and format group name to current naming convention

$folder = Read-Host 'Please type or copy in the full and correct path to the share and folder the groups will assign rights to. This will be used for the description fields and rights assignement'

$rights = Read-Host 'Enter R for Read, W for Write and/or M for Modify to rights on the target folder'

$inputname = Read-Host 'Name of security group'

$inputname = $inputname.ToUpper()

$name = "FILE_"

$name = $name+$inputname

$domain = "nordic"

$G = $name+"_G"

$U = $name+"_U"

$DL= $name+"_DL"

# Check if the group already exists

$GroupExists = Get-QADGroup $name

IF ( $GroupExists -eq $null ) {

# Add groups

Write-Host "Creating new groups"

New-QADGroup -Name $G -SamAccountName $G -GroupScope 'Global' -ParentContainer 'OU=Organizational Unit,DC=domain,DC=com' -Description "Users have access to $folder"

New-QADGroup -Name $U -SamAccountName $U -GroupScope 'Universal' -ParentContainer 'OU=Organizational Unit,DC=domain,DC=com' -Description "Users have access to $folder"

New-QADGroup -Name $DL -SamAccountName $DL -GroupScope 'DomainLocal' -ParentContainer 'OU=Organizational Unit,DC=domain,DC=com' -Description "Users have access to $folder"

sleep 2

cls

# Assign standard group memberships

Write-Host "Assigning interlinking group memberships"

Add-QADGroupMember $domain$DL $domain$U

Add-QADGroupMember $domain$U $domain$G

sleep 2

# Add rights on the folder

# Read

IF ($rights -like "*R*" ) {

$rule = New-Object system.security.accesscontrol.filesystemaccessrule($DL,"Read","ContainerInherit,ObjectInherit","None","Allow")

$acl = Get-Acl $folder

$acl.AddAccessRule($rule)

Set-Acl $folder $acl

}

# Write

IF ( $rights -like "*W*" ) {

$rule = New-Object system.security.accesscontrol.filesystemaccessrule($DL,"Write","ContainerInherit,ObjectInherit","None","Allow")

$acl = Get-Acl $folder

$acl.AddAccessRule($rule)

Set-Acl $folder $acl

}

# Modify

IF ( $rights -like "*M*" ) {

$rule = New-Object system.security.accesscontrol.filesystemaccessrule($DL,"Modify","ContainerInherit,ObjectInherit","None","Allow")

$acl = Get-Acl $folder

$acl.AddAccessRule($rule)

Set-Acl $folder $acl

}

cls

$sign = "."

$signs = "."

$counter = 0

while ( $counter -lt 10 ) {

cls

write-host "All done$signs"

$signs = $sign+$signs

$counter = $counter+1

sleep 1

}

ELSE {

$counter = 11

while ( $counter -gt 0 ) {

$counter = $counter-1

CLS

Write-Host "The groups beginning with" $name "already exists. Please select another group name"

$counter

Sleep 1

}

Stop-Transcript

I still consider myself a novice at Powershell, however and advanced one at that, and I’d love to get feedback on better approaches to my scripting, both in the sense of optimizing the script for performance, and simplifying the script itself. I’d also be happy to answer any questions regarding the script 🙂