PowerShell for Security Professionals

I found the neat project that is all PowerShell scripts the a Security Professional can use as part of their toolbox Account-Monitoring-Control Updates Authorized-Devices Updates Baselines Patch to fix Start-SecDailyFunction.ps1 Forensics Updates to Forensics Module Log-Management Updates Network-Baseline Added Reference to Get-SecOpenPorts PoshSec-Configuration Updating Module Versions to 1.0 PoshSec.PowerShell.Commands 3.5 Updates PoshSec.PowerShell.Commands PoshSec Commands for .NET 3.5 Software-Management Updates Utility-Functions...

Read More»

PowerShell Scripts for Admins and Auditors

Here a a few PowerShell script that I use to look al logs and user accounts.   To finding the latest logon time •Get-QADComputer -ComputerRole DomainController | foreach { (Get-QADUser -Service $_.Name -SamAccountName username).LastLogon } | Measure-Latest •The following example demonstrates how to find inactive user accounts: •Search-ADAccount -AccountInactive | where {$_.ObjectClass -eq ‘user’} | FT Name,ObjectClass –A •The following...

Read More»

Upcoming speaking gigs 2014 / 2015

Seems to be my ‘year of conferences’ this year. Since moving to Australia in March 2014 I didn’t have a quiet and laid back month; and it won’t change in the next few months. Here’s my speaking schedule up until next February: Topic Date Event Powershell Desired State Configuration 27/10/2014-28/10/2014 TechEd Australia Sydney Service Management Automation / Azure Automation (with Trevor Sullivan) 11/11/2014-13/11/2014 Midwest Management Summit (Minneapolis / USA) Powershell Desired State Configuration (with Jeff Wouters) 11/11/2014-13/11/2014 Midwest Management Summit (Minneapolis / USA) Powershell Tips ‘n Tricks (co-presenting with Jeff Wouters and Trevor Sullivan) 11/11/2014-13/11/2014 Midwest Management Summit (Minneapolis / USA) Service Management Automation and ConfigMgr 11/11/2014-13/11/2014 Midwest Management Summit … Continue reading

Read More»

Comparing ConfigMgr Date Formats in PowerShell

If you have worked with ConfigMgr much, you know that uses WMI to stores tons of information.  WMI uses the CIM_DATETIME format, which looks like this: yyyymmddHHMMSS.mmmmmmsUUU.  In order to work with this in PowerShell, you need to convert it into something that the Get-Date cmdlet can understand.  Here are two ways that you can accomplish this: Using […]

Read More»

I’ll See You at the Midwest Management Summit!

Just in case you haven’t heard the news yet, my friends over at the Minnesota System Center User Group are sponsoring the inaugural Midwest Management Summit (MMS)!  This is going to be a great conference. Think old-school Microsoft Management Summit, remove the keynote, as well as the 100, 200, and most 300-level sessions. Oh yea, remove […]

Read More»

Problems Running the New-CMSiteSystemServer PowerShell Cmdlet? There’s a Fix for That

Those looking forward to using some of the PowerShell cmdlets for System Center Configuration Manager might find at least of them to be troublesome. In some situations, the New-CMSiteSystemServer cmdlet will force-close PowerShell when run. So, basically, you execute the cmdlet and PowerShell just shuts down completely. Microsoft has released a hotfix for the problem, but suggests you only apply...

Read More»

Speaker at TechEd Australia

I am quite excited to be chosen as a Speaker at the new TechEd format in Australia. The format will be quite different to what it used to be. Instead of four days on the Gold Coast it will now be split into two 2-day events in Sydney and Melbourne. I will have the pleasure to speak at both locations. Datacenter transformation My two sessions will be – who would’ve guessed- around automation. My two sessions will be: Be in total control with Desired State Configuration (Sydney, October 27-28 2014) Bye-bye Orchestrator, there’s a new kid in town (Melbourne, October 7-82014) The exact times of the two sessions are not […]

Read More»

ConfigMgr uber-Hydration Kit v0.9 with Powershell DSC

Are you a ConfigMgr (or SCCM) administrator? Are you sometimes (or often, like me) in a position where you need to rebuild your ConfigMgr 2012 lab environment? I, again, was in that situation and just came out of a very interesting discussion with a co-worker and thought to myself, why not use Desired State Configuration to do all that? I am calling it uber-Hydration Kit, but to be fair, it’s not 100% automated yet. There are still a couple of things that need to be done manually. I will explain later on, that is why it is still at version 0.9. Enter: Powershell Desired State Configuration I have already used […]

Read More»