Powershell Coding update, day 48. I have many many parts to this script. Things I can currently do all seperated: I can scan an IP range for all the systems and produce an excel spreadsheet (soon to be a web page) of all the systems, make, model, serial number, mac address, hostname, and some other magic. Windows. Linux. It doesnt matter. I can scan all the windows systems on a domain for the above information plus... accounts (tons of details on the accounts like password date, last login, enabled or not, password never exp, etc), checking that all the files are being audited and the security permissions are correct. All the hardware on the box including HD, Optical, Floppy, monitors, ram. And checking for the 248 security settings required. I can do the above on a local windows system as well. Things to be added: Checking the system for ANY missing windows updates. Outputting ALL of this information into different web pages and linking them all back to one. List of software installed on the system including versions (Lowest priority) Pulling more information from the linux systems, to include, and local users, hd, floppy, optical info, software maybe? I dont know. Get a list of ALL the accounts from local administrators group. If it is ran against a domain controller, do some other magic on admin accounts. I am trying to get BIOS information back from the system on what settings are set but it is proving close to impossible. Oh, I also ginned up a script to connect to every windows system on the domain, get a list of any/all users logged in, when they logged in, and how long since they last gave the system any input (moving mouse/touch keyboard). Im sure I will roll that in at some point as well. If any of my fellow sysadmins have any additional ideas to add to this, please let me know. Powershell really is a pretty awesome language and the modules you can add to it make it almost unstoppable in what you can do with information. My only real objection is you cant mask your scripts. It has to remain plaintext short of putting it inside a C# or C++ application. If microsoft could add something to correct that, i would think it was the second coming of tech jesus.
Posted on: Thu, 05 Jun 2014 23:44:10 +0000
Trending Topics
Recently Viewed Topics
© 2015