Windows Archives - Sathiya's Blog

Replace permission command line

Migration is always popping an issues to bring the service online. Moreover folder permission playing a big role in all scenario; Apparently spent lot of time to fix data migration issues from Windows 2008 server to Windows 2012 server. So replace permission required to complete the migration.

Scenario:

Application data needs to be migrated (folders & files) from Windows 2008 server [SERVER2K8] to Windows 2012 server [SERVER2K12]. Consider the folder permission as old server local security groups named ‘SERVER2K8\App Admin’, however copying the data using robocopy with permissions using below scripts

Copy folder with privileges

robocopy \\SERVER2K8\Data \\SERVER2K12\Data /E /copy:DAS

1	robocopy \\SERVER2K8\Data \\SERVER2K12\Data /E /copy:DAS

save and restore folder permission with substitute, deleted or unavailable user’s SID will not work.

icacls /restore /substitute [oldAccount] [newAccount]

1	icacls /restore /substitute [oldAccount] [newAccount]

Hence, ‘SubInACL’ script with replace parameter helps to fix SID mapping to resolve broken rights, download and install Windows Resource Kits. Similarly Applicable for domain account and group migrations.

Replace permission for broken SID with new user/groups ID

SubInACL.exe /subdirec \\SERVER2K12\Data /replace=S-1-5-21-xxxxx-xxxxx-xxxxx-xxx=S-1-5-21-yyyyy-yyyyy-yyyyy-yyy

1	SubInACL.exe /subdirec \\SERVER2K12\Data /replace=S–1–5–21–xxxxx–xxxxx–xxxxx–xxx=S–1–5–21–yyyyy–yyyyy–yyyyy–yyy

March 15, 2020

Validate Active Directory (AD) Credentials

To configuring service account for the application after creating generated password causing issue many times, needs to validate active directory (AD) credentials before configuring it. Because enterprise level policy would disable service account with bad password attempts. The PowerShell script helps to validate efficiently.

<#
.DESCRIPTION
    Validate AD Account credential
.NOTES
    Author: Sathiya.io
#>
function Man-TestADUserAuth {
$cre = Get-Credential -Credential $null
if((new-object directoryservices.directoryentry “”,$cre.UserName,$cre.GetNetworkCredential().Password).psbase.name -ne $null) {
    Write-Host “Password is valid!” -ForegroundColor Green
}
else {
    Write-Host “Sorry! Either user name or password wrong!” -ForegroundColor Red -BackgroundColor Yellow
}
}
Man-TestADUserAuth

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

<#

.DESCRIPTION

Validate AD Account credential

.NOTES

Author: Sathiya.io

#>

function Man–TestADUserAuth {

$cre = Get–Credential –Credential $null

if((new–object directoryservices.directoryentry “”,$cre.UserName,$cre.GetNetworkCredential().Password).psbase.name –ne $null) {

Write–Host “Password is valid!” –ForegroundColor Green

}

else {

Write–Host “Sorry! Either user name or password wrong!” –ForegroundColor Red –BackgroundColor Yellow

}

Man–TestADUserAuth

Scripts makes perfect, Cheers!

July 1, 2018

Export Windows Service to Excel with Filter

Another sample Powershell script to exporting “Running” and “Stopped” windows service to excel by using Powershell Array.

$location = “C:\sathiya.io”;
$service = @(“Running”, “Stopped”);
for ($i=0;$i -ne 2;$i++)
{
	$text = $service[$i];
	#Exporting the result to the text file
	# Append – This keyword is to update the file in the loop
	# Select – To export the field that you want to export
	Get-Service |?{$_.Status -eq “running”} | Select ServiceName, Status | Out-File $location\text1.txt -Append
	#Exporting the result to CSV
	Get-Service |?{$_.Status -eq $text} |  Select ServiceName, Status | export-csv $location\file2.csv -Append
}

1

2

3

4

5

6

7

8

9

10

11

12

$location = “C:\sathiya.io”;

$service = @(“Running”, “Stopped”);

for ($i=0;$i -ne 2;$i++)

{

$text = $service[$i];

#Exporting the result to the text file

# Append – This keyword is to update the file in the loop

# Select – To export the field that you want to export

Get-Service |?{$_.Status -eq “running”} | Select ServiceName, Status | Out-File $location\text1.txt -Append

#Exporting the result to CSV

Get-Service |?{$_.Status -eq $text} | Select ServiceName, Status | export-csv $location\file2.csv -Append

}

Cheers!

September 21, 2015

Import Users in Active Directory Using PowerShell

Today, we are going to discuss about importing bulk users in Active Directory using PowerShell. We are all knows that we can do anything in PowerShell.
You can check the required parameter for adding AD user. But I’m going to import the below sample fields.

Basic Comment
New-ADUser
-Name “Disply Name”
-GivenName “First Name”
-Surname “Last Name”
-SamAccountName “UserName”
-UserPrincipalName “username@sathiya.io”
-Path “OU=OrganizationUnit,DC=sathiya,DC=io”
-Enabled $true
-PasswordNeverExpires $true
-AccountPassword (ConvertTo-SecureString “password” -AsPlainText -force)
-PassThru

The above script is for adding single user.

Script

Import-Module ActiveDirectory
Import-Module ActiveDirectory
Import-Csv .\ImportUser.csv | foreach-object { 
New-ADUser -Name $_.Name -GivenName $_.gn -Surname $_.sn -SamAccountName $_.samAcc -UserPrincipalName $_.UPN -Path $_.Path -Enabled $true -PasswordNeverExpires $true -AccountPassword (ConvertTo-SecureString $_.AccPass -AsPlainText -force) -PassThru
}

1

2

3

4

5

Import–Module ActiveDirectory

Import–Csv .\ImportUser.csv | foreach–object {

New–ADUser –Name $_.Name –GivenName $_.gn –Surname $_.sn –SamAccountName $_.samAcc –UserPrincipalName $_.UPN –Path $_.Path –Enabled $true –PasswordNeverExpires $true –AccountPassword (ConvertTo–SecureString $_.AccPass –AsPlainText –force) –PassThru

}

Sample CSV file ImportUser.csv

I hope the things are going good :)Cheers!

June 11, 2015

Add computer to domain using CMD without restart

From your windows client machine open command prompt and run the following cmd to add computer to domain.

wmic.exe /interactive:off ComputerSystem Where name=”%computername%” call JoinDomainOrWorkgroup FJoinOptions=3 Name=”myDom.local” UserName=”myDom\UsrName” Password=”@passwrd!@”

1	wmic.exe /interactive:off ComputerSystem Where name=“%computername%” call JoinDomainOrWorkgroup FJoinOptions=3 Name=“myDom.local” UserName=“myDom\UsrName” Password=“@passwrd!@”

March 13, 2015

Category: Windows