ezAdmin

A set of scripts to make life easier for SysAdmins in large environments.

Requirements and Dependencies

• On Windows, some scripts require Active Directory Domain Services, Remote Server Administration Tools (RSAT) and/or at least PowerShell 5.1.

Usage Instructions

Just choose a script and run it! Some may work locally, others remotely if there is an Active Directory domain.

• Close-UserSession.bat: Logs off an user locally or remotely

  Close-UserSession username [computer]

• Set-InitialKeyboardIndicators.bat: Sets the initial keyboard indicators for the current user or all users

  Set-InitialKeyboardIndicators value [all]
  
  # value: some integer (0 to disable Numlock, 2 to enable it; supports any other integer value)
  
  # all: applies to all user profiles, including standard and system profiles; otherwise only the current user
  
  # Example to disable NumLock according to the computer model
  SYSTEMINFO | FIND /I "computer-model" && Set-InitialKeyboardIndicators 0 all

• Uninstall-AnyDesk.bat: Detects and silently uninstalls AnyDesk

• Uninstall-TeamViewer.bat: Detects and silently uninstalls TeamViewer

• Convert-AdSidToHex.ps1: Converts an AD SID to hexadecimal format

  .\Convert-AdSidToHex "S-1-5-21-3623811015-3361044348-30300820-1013"

• Export-DfsrHealthReports.ps1: Detects DFSr replication groups and triggers health report for all of them

  .\Export-DfsrHealthReports [ReportPath=<path-to-save-reports>] [PrefSite=<some-site-name>] [Wait]
  
  # ReportPath: path to save reports, being "$env:TEMP" ("%TEMP%") if no value is provided
  
  # PrefSite: site selected as a reference for the report, with automatic selection if no valid value is provided
  
  # Wait: wait for all tasks to complete before returning to the console

• Get-WinServersBootTime.ps1: Detects Windows Servers enabled in the current Active Directory domain and checks when each one was last booted

• Get-WinServersVolStats.ps1: Detects Windows Servers enabled in the current Active Directory domain and checks the space of all volumes (with assigned letter) on each of them

• Mount-BulkMappings.ps1: Mounts network shares locally, in bulk, for specific use cases

  .\Mount-BulkMappings -MappingsCSV <".\BulkMappings.csv"> [-SkipCredPrompt]   

    MappingsCSV: the CSV file containing the list of mappings to be carried out.
  
    SkipCredPrompt: don't prompt for credentials, useful for silent execution via GPO
  
    You can run the script via GPO with the SkipCredPrompt parameter and create a shortcut for it on the user's desktop. This way, the user can run the script just to save the credential, if it is different from the one already logged in.
  
    About the CSV file:
  
    - It must must be separated by commas and have the following columns:    
  
       Entity, DriveLetter, FullPath, Persistent, CredPrompt, SaveCred
  
       Entity
           The target group or user account name
       DriveLetter
           The drive letter (A-Z or some special port like LPT/COM)
       FullPath
           The full network path of the resource to be mapped
           (in some specific cases it could be a shared printer)
       Persistent
           Will the mapping persist after logoff?
       CredPrompt
           Will it be necessary to request credentials?
           (it will be only once and apply to all mappings for the same user)
       SaveCred
           Should the credentials be saved in the user profile vault?
           (it uses the cmdkey utility)
  
   - Values interpreted as positive:
           true, yes, y, 1
  
   - Values interpreted as negative:
           false, no, n, 0
  
   - Some example lines:
  
           "SomeUser","X","\\server\folderA",1,1,1
           "SomeGroup","Y","\\server\folderB",0,0,0
  

• Set-BgImages.ps1: Changes the desktop and lock screen background image on any edition of Windows 10 and 11

  .\Set-BgImages [-LockScreenImage <"network-path-to-the-image">] [-DesktopImage <"network-path-to-the-image">] [-LogPath "log-folder-network-path"]
  
  # Example
  .\Set-BgImages -LockScreenImage "\\srvfs01\folder\LockScreen.png" -DesktopImage "\\srvfs01\folder\Desktop.png" -LogPath "\\srvfs01\folder"

• Sync-TwoWayWithAuth.ps1: Synchronizes data bidirectionally between repositories

  .\Sync-TwoWayWithAuth.ps1 [-SaveCreds]
  
  # SaveCreds: Saves credentials in encrypted files
  
  # Edit line 11 to line 12, inserting the synchronization tasks, run manually with the desired credential (saving it) and then create a scheduled task associated with the same credential. Saved credentials are recoverable only in the context of the user who saved them.
  
  # Remember, renaming folders or files will lead to duplication on both sides, since there is no backlog of modifications.

Roadmap and Changelog

This repository is based on and inspired by - but not limited to - Keep a Changelog, Semantic Versioning and the ezGTR template. Therefore, any changes made, expected or intended will be documented in the Roadmap and Changelog file.

Credits, Sponsorship and Licensing

Developed by Ezequiel Lage, Sponsored by Lageteck and Published under the MIT License.

Credits to Raymond Chen for the explanation¹ that made the Convert-AdSidToHex.ps1 script possible. Credits to Juan Granados for the original version of Set-BgImages.ps1, formely Set-Screen.ps1² or Set-LockScreen.ps1³. Credits also to Tim Brown for developing the GetHostname⁴ function, used in the Mount-BulkMappings.ps1 script as Get-Hostname.

All suggestions, criticisms and contributions are welcome!

Support this initiative!

BTC: 1Nw2fzDgtXM5X219Q9VtJ7WaSTDPua3oe8
ERC20*: 0x089499f57ee20fd2c19f57612d9af69d645dff0d
* Any ERC20 token supported by Binance (ETH, USDC, USDT, etc.)