SharePoint, SP, AAD, PowerShell, SMTP, email, windows, exchange, outlook, Microsoft, SPSE, Azure

Script to check if a reg key is set on multiple servers

Mike Lee - June 18, 2019 - 0 Comments

Script to check if a reg key is set on multiple servers

Summary If your servers require a reg key and unsure if its properly configured. You can use this script to check if the key is present or is set to the correct value across multiple servers. The Script

#Simple Server list
$servers = Get-Content C:\servers.txt

# Loop through all servers and check key 
foreach ($server in $servers) {

$REG = [Microsoft.Win32.RegistryKey]::OpenRemoteBaseKey('LocalMachine', $server)
$REGKEY = $REG.OpenSubKey("SYSTEM\CurrentControlSet\Control\Lsa")
$val = $REGKEY.GetValue("DisableLoopBackCheck")

# If the key is missing or not set it will be displayed in red
# If the key is set it will be displayed in green

if (!$val){

Write-Host $server "is not set"  -ForegroundColor Red
}

if ($val -ne "1"){
Write-Host $server "is not set properly"  -ForegroundColor Red
}

else{
Write-Host $server "is set" -ForegroundColor Green
}
}

#Simple Server list

$servers = Get-Content C:\servers.txt

# Loop through all servers and check key

foreach ($server in $servers) {

$REG = [Microsoft.Win32.RegistryKey]::OpenRemoteBaseKey('LocalMachine', $server)

$REGKEY = $REG.OpenSubKey("SYSTEM\CurrentControlSet\Control\Lsa")

$val = $REGKEY.GetValue("DisableLoopBackCheck")

# If the key is missing or not set it will be displayed in red

# If the key is set it will be displayed in green

if (!$val){

Write-Host $server "is not set" -ForegroundColor Red

}

if ($val -ne "1"){

Write-Host $server "is not set properly" -ForegroundColor Red

}

else{

Write-Host $server "is set" -ForegroundColor Green

}

What the Script Does In the sample above it will check the “DisableLoopBackCheck” key across a […]

Script to backup event logs using a server list

Mike Lee - June 6, 2019 - 0 Comments

Script to backup event logs using a server list

Summary Have you ever needed to back up event logs for root cause analysis or auditing? Did you access each server and manually export the requested log file? If yes, I hope you find this script handy. The script

 
# Specify which Log File
$EventLogName = “Application”

# Specify drive to store event logs
$drive= “c$”

# Specify server to store event logs
$dest = "SERVERNAME"

#Simple Server list
$servers = Get-Content C:\servers.txt
# For loop to do the work
foreach ($server in $servers)
{

# Create a target folder on host if does not exist
 $TARGETROOT = "\\$server\$drive\logs"
 if(!(Test-Path -Path  $TARGETROOT)){
 New-Item -ItemType directory -Path  $TARGETROOT
 }
  
# This is the WMI call to select the application log from each server
$logFile = Get-WmiObject -EnableAllPrivileges -ComputerName $server Win32_NTEventlogFile | Where-Object {$_.logfilename -eq $EventLogName}

# Creating a file name based on server, log and time
$exportFileName = $server + “_” + $EventLogName + “_” +(get-date -f yyyyMMdd) + “.evt”

# Perform the backup
$logFile.backupeventlog($TARGETROOT + “\” + $exportFileName)

# Create an export folder if it does not exist
$target = "\\$dest\$drive\logs\export"
 if(!(Test-Path -Path  $target)){
 New-Item -ItemType directory -Path $target
 }

# Since WMI does the work on the remote machine you can’t copy to file share.

# This is a workaround to move to files to a single location after the backup
Move-Item $TARGETROOT\$exportFileName $target
}

# Specify which Log File

$EventLogName = “Application”

# Specify drive to store event logs

$drive= “c$”

# Specify server to store event logs

$dest = "SERVERNAME"

#Simple Server list

$servers = Get-Content C:\servers.txt

# For loop to do the work

foreach ($server in $servers)

{

# Create a target folder on host if does not exist

$TARGETROOT = "\\$server\$drive\logs"

if(!(Test-Path -Path $TARGETROOT)){

New-Item -ItemType directory -Path $TARGETROOT

}

# This is the WMI call to select the application log from each server

$logFile = Get-WmiObject -EnableAllPrivileges -ComputerName $server Win32_NTEventlogFile | Where-Object {$_.logfilename -eq $EventLogName}

# Creating a file name based on server, log and time

$exportFileName = $server + “_” + $EventLogName + “_” +(get-date -f yyyyMMdd) + “.evt”

# Perform the backup

$logFile.backupeventlog($TARGETROOT + “\” + $exportFileName)

# Create an export folder if it does not exist

$target = "\\$dest\$drive\logs\export"

if(!(Test-Path -Path $target)){

New-Item -ItemType directory -Path $target

}

# Since WMI does the work on the remote machine you can’t copy to file share.

# This is a workaround to move to files to a single location after the backup

Move-Item $TARGETROOT\$exportFileName $target

}

What does it the script do? This script will read a list of servers and […]

Mike Lee's Blog

SharePoint, Exchange, Outlook and Hybrid Support Blogs

All Posts provided "AS IS" with no warranties, and confers no rights.
The opinions and views expressed in this blog are those of the author and do not necessarily state or reflect those of Microsoft.

server

Script to check if a reg key is set on multiple servers