Tag: PowerShell

Use a PowerShell Logon Script To Update Printer Mappings

July 17, 2017 by Felix·0 Comments

Recently we migrated our Printserver from Windows 2003 R2 (yes, it was time…) to Windows 2012R2 and needed a smart and easy way to migrate existing printer mappings from the old to the new server. While migrating the printerserver itself was a very easy and straighforward task using Printbrm (took only about 10 mins!), the question how to migrate the mappings remained open. Doing some research on the net showed that it seemed to be best practice to do this using a logon script. A little bit of more searching brought up a very helpfull and handy PowerShell script which should to the trick. Since all our clients are at least Windows 7, PowerShell was available on clients and we were able to go on with this.

The script was good, but needed some minor tweaks to work well in our environment. For exmaple the script lacked to set the default printer. If you remove the old printer and add a new one you have to set the default printer again, this has been fixed in the version below.

It was also not possible to have 2 different names for the printserver so e.g. some users may have user FQDN (prinserver.domain.com) and some only the simple Name (printserver). To catch all this cases you can now specify more than one name for a print server and all printers will be replaced.

To run the script, simple copy the source code to a file on your PC and change the following lines to your need.

$newPrintServer = "NewPrintServer",
$oldPrintServers = @("OldPrintServer1", "OldPrintServer2")

1 2	$newPrintServer = "NewPrintServer", $oldPrintServers = @("OldPrintServer1", "OldPrintServer2")

If you want a quite handy logfile where you can see how your migration is making progress. Change the following line to a path where all users can write.

$PrinterLog = "\\LogSVR\PrintMigration$\PrintMigration.csv" )

1	$PrinterLog = "\\LogSVR\PrintMigration$\PrintMigration.csv" )

Remove <# and #> from the following lines and run the Script once, to create the logfile with a header line. After the file has been created, add <# and #> again to avoid overwriting the file each time the script is running.

<# Uncomment and run only once #Header for CSV log file: "COMPUTERNAME,USERNAME,PRINTERNAME,RETURNCODE-ERRORMESSAGE,DATETIME,STATUS" | Out-File -FilePath $PrinterLog -Encoding ASCII #>

1	<# Uncomment and run only once #Header for CSV log file: "COMPUTERNAME,USERNAME,PRINTERNAME,RETURNCODE-ERRORMESSAGE,DATETIME,STATUS" \| Out-File -FilePath $PrinterLog -Encoding ASCII #>

Here you can find the complete source code:

<#
    .SYNOPSIS
        Logon Script to migrate printer mapping
    
    .DESCRIPTION
        Logon Script to migrate printer mappings
    
    .NOTES
        Author: Boe Prox (https://learn-powershell.net/2012/11/15/use-powershell-logon-script-to-update-printer-mappings/)
        Editor: Felix (https://www.uc-world.com/?p=223)
        Create: 09 NOV 2012
        Modified: 17 JUL 2017
        Version 1.0 - Initial Script Creation
                1.1 Added Header Text for CSV file
                1.2 Added default printer and multiple source printservers (03 JUL 2017)
#>

Param (
    $newPrintServer = "NewPrintServer",
	$oldPrintServers = @("OldPrintServer1", "OldPrintServer2"),
    $PrinterLog = "\\LogSVR\PrintMigration$\PrintMigration.csv"
)

 <# Uncomment and run only once
  #Header for CSV log file:

    "COMPUTERNAME,USERNAME,PRINTERNAME,RETURNCODE-ERRORMESSAGE,DATETIME,STATUS" | 
        Out-File -FilePath $PrinterLog -Encoding ASCII
#>


#Pull the current default printer's name
$defaultPrinter = gwmi win32_printer | where {$_.Default -eq $true}

#Enable Verbose output (will be reverted at the end of script)
$oldverbose = $VerbosePreference
$VerbosePreference = "continue"


#Change the printer from old to new
function ChangePrinter {
try{
        ForEach ($printer in $printers) {
            Write-Verbose ("{0}: Replacing with new print server name: {1}" -f $Printer.Name,$newPrintServer)
            $newPrinter = $printer.Name -replace $oldPrintServer,$newPrintServer		
            $returnValue = ([wmiclass]"Win32_Printer").AddPrinterConnection($newPrinter).ReturnValue                
            If ($returnValue -eq 0) {
                "{0},{1},{2},{3},{4},{5}" -f $Env:COMPUTERNAME,
                                             $env:USERNAME,
                                             $newPrinter,
                                             $returnValue,
                                             (Get-Date),
                                             "Added Printer" | Out-File -FilePath $PrinterLog -Append -Encoding ASCII            
                Write-Verbose ("{0}: Removing" -f $printer.name)
                $printer.Delete()
                "{0},{1},{2},{3},{4},{5}" -f $Env:COMPUTERNAME,
                                             $env:USERNAME,
                                             $printer.Name,
                                             $returnValue,
                                             (Get-Date),
                                             "Removed Printer" | Out-File -FilePath $PrinterLog -Append -Encoding ASCII
            } Else {
                Write-Verbose ("{0} returned error code: {1}" -f $newPrinter,$returnValue) -Verbose
                "{0},{1},{2},{3},{4},{5}" -f $Env:COMPUTERNAME,
                                             $env:USERNAME,
                                             $newPrinter,
                                             $returnValue,
                                             (Get-Date),
                                             "Error Adding Printer" | Out-File -FilePath $PrinterLog -Append -Encoding ASCII
            }
        }
    
	# Gets new list of printers that are pointed to newserver
	$newPrinterList = @(Get-WmiObject -Class Win32_Printer -Filter "SystemName='\\\\$newPrintServer'" -ErrorAction Stop)

	# iterates through each new printer and compares the ShareName to the old ShareName that was the user’s default printer and sets it
	ForEach ($printer in $newPrinterList) {
	If ($printer.ShareName -eq $defaultPrinter.ShareName) {

                $tmp = $printer.SetDefaultPrinter()
                Write-Verbose ("{0} Set as default printer" -f $printer.Name,$returnValue) -Verbose
                "{0},{1},{2},{3},{4},{5}" -f $Env:COMPUTERNAME,
                                             $env:USERNAME,
                                             $printer.Name,
                                             $returnValue,
                                             (Get-Date),
                                             "Set defaultPrinter" | Out-File -FilePath $PrinterLog -Append -Encoding ASCII
		}
	}
}catch{
    "{0},{1},{2},{3},{4},{5}" -f $Env:COMPUTERNAME,
                                 $env:USERNAME,
                                 "WMIERROR",
                                 $_.Exception.Message,
                                 (Get-Date),
                                 "Error Querying Printers" | Out-File -FilePath $PrinterLog -Append -Encoding ASCII
}
}

#Main Code-Block
Try {
    #ForEach Server in $oldPrintServers do
    ForEach ($oldPrintServer in $oldPrintServers) {
		
        Write-Verbose ("{0}: Checking for printers mapped to old print server {1}" -f $Env:USERNAME, $oldPrintServer)
		$printers = @(Get-WmiObject -Class Win32_Printer -Filter "SystemName='\\\\$oldPrintServer'" -ErrorAction Stop)
		
        #If we get back any mapped printer call ChangePrinter and do it
        If ($printers.count -gt 0) {        
			ChangePrinter
		}
	}
	
} Catch {
    "{0},{1},{2},{3},{4},{5}" -f $Env:COMPUTERNAME,
                                 $env:USERNAME,
                                 "WMIERROR",
                                 $_.Exception.Message,
                                 (Get-Date),
                                 "Error Querying Printers" | Out-File -FilePath $PrinterLog -Append -Encoding ASCII
}


$VerbosePreference = $oldverbose

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

.SYNOPSIS

Logon Script to migrate printer mapping

.DESCRIPTION

Logon Script to migrate printer mappings

.NOTES

Author: Boe Prox (https://learn-powershell.net/2012/11/15/use-powershell-logon-script-to-update-printer-mappings/)

Editor: Felix (https://www.uc-world.com/?p=223)

Create: 09 NOV 2012

Modified: 17 JUL 2017

Version 1.0 - Initial Script Creation

1.1 Added Header Text for CSV file

1.2 Added default printer and multiple source printservers (03 JUL 2017)

Param (

$newPrintServer = "NewPrintServer",

$oldPrintServers = @("OldPrintServer1", "OldPrintServer2"),

$PrinterLog = "\\LogSVR\PrintMigration$\PrintMigration.csv"

)

<# Uncomment and run only once

#Header for CSV log file:

"COMPUTERNAME,USERNAME,PRINTERNAME,RETURNCODE-ERRORMESSAGE,DATETIME,STATUS" |

Out-File -FilePath $PrinterLog -Encoding ASCII

#Pull the current default printer's name

$defaultPrinter = gwmi win32_printer | where {$_.Default -eq $true}

#Enable Verbose output (will be reverted at the end of script)

$oldverbose = $VerbosePreference

$VerbosePreference = "continue"

#Change the printer from old to new

function ChangePrinter {

try{

ForEach ($printer in $printers) {

Write-Verbose ("{0}: Replacing with new print server name: {1}" -f $Printer.Name,$newPrintServer)

$newPrinter = $printer.Name -replace $oldPrintServer,$newPrintServer

$returnValue = ([wmiclass]"Win32_Printer").AddPrinterConnection($newPrinter).ReturnValue

If ($returnValue -eq 0) {

"{0},{1},{2},{3},{4},{5}" -f $Env:COMPUTERNAME,

$env:USERNAME,

$newPrinter,

$returnValue,

(Get-Date),

"Added Printer" | Out-File -FilePath $PrinterLog -Append -Encoding ASCII

Write-Verbose ("{0}: Removing" -f $printer.name)

$printer.Delete()

"{0},{1},{2},{3},{4},{5}" -f $Env:COMPUTERNAME,

$env:USERNAME,

$printer.Name,

$returnValue,

(Get-Date),

"Removed Printer" | Out-File -FilePath $PrinterLog -Append -Encoding ASCII

} Else {

Write-Verbose ("{0} returned error code: {1}" -f $newPrinter,$returnValue) -Verbose

"{0},{1},{2},{3},{4},{5}" -f $Env:COMPUTERNAME,

$env:USERNAME,

$newPrinter,

$returnValue,

(Get-Date),

"Error Adding Printer" | Out-File -FilePath $PrinterLog -Append -Encoding ASCII

}

# Gets new list of printers that are pointed to newserver

$newPrinterList = @(Get-WmiObject -Class Win32_Printer -Filter "SystemName='\\\\$newPrintServer'" -ErrorAction Stop)

# iterates through each new printer and compares the ShareName to the old ShareName that was the user’s default printer and sets it

ForEach ($printer in $newPrinterList) {

If ($printer.ShareName -eq $defaultPrinter.ShareName) {

$tmp = $printer.SetDefaultPrinter()

Write-Verbose ("{0} Set as default printer" -f $printer.Name,$returnValue) -Verbose

"{0},{1},{2},{3},{4},{5}" -f $Env:COMPUTERNAME,

$env:USERNAME,

$printer.Name,

$returnValue,

(Get-Date),

"Set defaultPrinter" | Out-File -FilePath $PrinterLog -Append -Encoding ASCII

}

}catch{

"{0},{1},{2},{3},{4},{5}" -f $Env:COMPUTERNAME,

$env:USERNAME,

"WMIERROR",

$_.Exception.Message,

(Get-Date),

"Error Querying Printers" | Out-File -FilePath $PrinterLog -Append -Encoding ASCII

}

#Main Code-Block

Try {

#ForEach Server in $oldPrintServers do

ForEach ($oldPrintServer in $oldPrintServers) {

Write-Verbose ("{0}: Checking for printers mapped to old print server {1}" -f $Env:USERNAME, $oldPrintServer)

$printers = @(Get-WmiObject -Class Win32_Printer -Filter "SystemName='\\\\$oldPrintServer'" -ErrorAction Stop)

#If we get back any mapped printer call ChangePrinter and do it

If ($printers.count -gt 0) {

ChangePrinter

}

} Catch {

"{0},{1},{2},{3},{4},{5}" -f $Env:COMPUTERNAME,

$env:USERNAME,

"WMIERROR",

$_.Exception.Message,

(Get-Date),

"Error Querying Printers" | Out-File -FilePath $PrinterLog -Append -Encoding ASCII

}

$VerbosePreference = $oldverbose

Skype for Business Online Powershell with MFA behind a proxy server

June 22, 2017 by Felix·0 Comments

Microsoft has release a new version of the Skype for Business Online Powershell which now Supports Modern Authentication to allow you to sign-in with accounts having MFA (Multi Factor Authentication) activated.

You can download the latest version of at the Microsoft download Center.

Just to be on the safe side: remove older version before installing the new one

S4B Online Powershell behaves a bit different than other Version of Powershell when used behind a proxy server. Azure Active Directory PowerShell for example does not need any special configuration to use the proxy settings of your PC. Sadly, S4B Online PS need some tweaks to get it working.

You must use a proxy server, it does not support automatic configurations scripts like PAC-Files. The server must be set in Internet Explorer settings (or Windows 10 system proxy settings).

To connect to Skype for Business Online type:

$proxysettings = New-PSSessionOption -ProxyAccessType IEConfig
$credentials = Get-Credential
$sfboSession = New-CsOnlineSession -username your@mail.com -Verbose -SessionOption $proxysettings
Import-PSSession $sfboSession

$proxysettings = New-PSSessionOption -ProxyAccessType IEConfig

$credentials = Get-Credential

$sfboSession = New-CsOnlineSession -username your@mail.com -Verbose -SessionOption $proxysettings

Import-PSSession $sfboSession

Updated and still not working?

If you can’t find any installed module in your “Add remove programs” you can do the following:

Enter the following command and see if it returns more than one result.

Get-Module –ListAvailable |  where {$_.name -like "*Skype*" -or $_.name -like "*Lync*"}

1	Get-Module –ListAvailable \| where {$_.name -like "Skype" -or $_.name -like "Lync"}

It should print something like this

    Directory: C:\Program Files\Common Files\Skype for Business Online\Modules


ModuleType Version    Name                                ExportedCommands
---------- -------    ----                                ----------------
Script     7.0.0.0    SkypeOnlineConnector                {Get-CsPowerShellEndpoint, Get-CsAccessToken, Set-WinRMNet...

Directory: C:\Program Files\Common Files\Skype for Business Online\Modules

ModuleType Version Name ExportedCommands

---------- ------- ---- ----------------

Script 7.0.0.0 SkypeOnlineConnector {Get-CsPowerShellEndpoint, Get-CsAccessToken, Set-WinRMNet...

If you find an older entry for SkypeOnline or LyncOnline go to the Directory and delete the file. This happens if older Version use the same cmds which do not offer all functions.

New-PasswordReminder Script

January 5, 2017 by Felix·0 Comments

Description

Did you ever had the problem that traveling users were calling your ServiceDesk and said “I no longer can access this or that system since yesterday.” where the reason for this was an expired Windows password? The reason for this is when users are on the road and only establish a VPN connection (which is not related to the AD password) to your site, they will not see the “Your password has expired” screen. If you have this problem or you just think the little notification warning you about your expiring password is not enough this script may help you.

With this script you can notify your users about expiring passwords via E-Mail so they will no longer forget to change their password. If they forget to change it, they can not blame you for not notifying them.

It’s designed to run as a scheduled task but you may also run it on demand. You have pleanty of option to customize the settings to fit your needs. You can have notifications in different languages e.g. you have a lot of subsidiaries.You can also specify the amount of notifications users will receive before the password is going to expire. The email can be easiely customized to fit your personell (or coorporate) design needs.

Requirements

Active Directory PowerShell Module (this is part of the RSAT (Remote Server Administration Tools)

Installation

Unpack the downloaded ZIP and place the files into a folder where you would like to store the script. No other installation is needed.

Execution Policy: Third-party PowerShell scripts may need that the PowerShell Execution Policy be set to either AllSigned, RemoteSigned, or Unrestricted. The default is Restricted, which prevents scripts – even code signed scripts – from running. For more information about setting your Execution Policy, see Using the Set-ExecutionPolicy Cmdlet.

Parameters

-ConfigPath

1	-ConfigPath

Allows you to specify a path other then the script directory for the config file.

Configuration

The script is configured using a configuration file. You can find detailed information on the New-PasswordReminder Config Options page. Please copy the configuration file the same folder as the New-PasswordReminder.ps1 file. A sample configuration is provided with the download you may only need to change the settings to fit your environment.

A basic configuration may look like this:

<?xml version="1.0"?>
<PasswordReminder>
	<General>
        <TestMode>TRUE</TestMode>
	    <EnableLogging>True</EnableLogging>
        <LogfilePath>D:\Script\Logs</LogfilePath>
        <LogLevel>Normal</LogLevel>
		<DomainControllerFQDN>dc01.your.domain</DomainControllerFQDN>
		<TemplatePath>D:\Script\Templates</TemplatePath>
		<AdditionalFilter>*OU=Admin*</AdditionalFilter>
        <DaysToRemind>1;3;7</DaysToRemind>
        <DaysToKeepLogFile>2</DaysToKeepLogFile>
	</General>
	<Mail>
		<SmtpServer>smtp.your.domain</SmtpServer>
        <TestReceipient>yourname@your.domain</TestReceipient>
	</Mail>
	<ReminderGroup>
		<TimeToNotify>00:00</TimeToNotify>
		<SearchBase>OU=users,DC=your,DC=domain</SearchBase>
		<TemplateName>template_eng.txt</TemplateName>
		<SenderAdress>yourname@your.domain</SenderAdress>
        <SenderName>IT-ServiceDesk</SenderName>
		<MailSubject>Your Password will expire</MailSubject>
		<ContactPhone>+1234567890</ContactPhone>
        <SummaryReceipient>yourname@your.domain</SummaryReceipient>
	</ReminderGroup>
</PasswordReminder>

<?xml version="1.0"?>

<LogfilePath>D:\Script\Logs</LogfilePath>

<LogLevel>Normal</LogLevel>

<DomainControllerFQDN>dc01.your.domain</DomainControllerFQDN>

<TemplatePath>D:\Script\Templates</TemplatePath>

<AdditionalFilter>*OU=Admin*</AdditionalFilter>

</General>

<Mail>

<SmtpServer>smtp.your.domain</SmtpServer>

<TestReceipient>yourname@your.domain</TestReceipient>

</Mail>

<SearchBase>OU=users,DC=your,DC=domain</SearchBase>

<TemplateName>template_eng.txt</TemplateName>

<SenderAdress>yourname@your.domain</SenderAdress>

<SenderName>IT-ServiceDesk</SenderName>

<MailSubject>Your Password will expire</MailSubject>

<SummaryReceipient>yourname@your.domain</SummaryReceipient>

</ReminderGroup>

</PasswordReminder>

With this configuration you’ll notify your users at 00:00 UTC time when their password will expire in 1,3 or 7 days, the mail will be generated from the template “template_eng.txt”. In this configuration we have enabled the TestMode so all E-Mails will be sent to a specified address.

Template

The E-Mails will be created as HTML from a template. When creating the template you can use special tags, which will be replaced when the script processes the template so you have all the freedom of HTML (with the limitations of you mail client) to create your notifications.

[LastName] – LastName of the person

[FirstName] – FirstName of the person

[Days] – Days until the password expires

[FromAddress] – will be replaced with <SenderAdress>

[SenderName] – will be replaced with <SenderName>

[Phone] – will be replaced with <ContactPhone>

Scheduled Task

When creating a schedule task please use the following option for Powershell scripts under Actions:

Program/Script: %SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe

Arguments: -NoProfile -Noninteractive -command “. <PathToScript> -ConfigPath <PathToConfigFile>; exit $LASTEXITCODE”

<PathToScript> – Path to the Script including filename and extension

<PathToConfigFile> – Path to the config file including filename and extension

Exit Codes

The script will return the following exit codes on error.

1   PowerShell-Module not found
2   Config-File not found
3   LogPath is missing in configuration
4   LogLevel is missing in configuration
5   LogfilePath is empty in configuration
6   LogLevel is empty in configuration
7   Error in configuration, see log file

Download

v. 1.0 – 05.01.2017 – New-ExpiringPasswordReminder_v1.0.zip

UC-World

Everything about unified communictions

Tag: PowerShell

Use a PowerShell Logon Script To Update Printer Mappings

New-PasswordReminder Script

Description

Requirements

Installation

Parameters

Configuration

Template

Scheduled Task

Exit Codes

Download