Power CLI script to take snapshots from a list of VMs.

The text file needs to contain a list of VMs 1 per row.

Example:
vm1
vm2
vm3

This script will perform several functions. First it will shut the vm down, second it verifies the vms are shut down ( user intervention ), third it will snapshot each vm in order and finally will power each vm back on. This is the safest way I have been able to find to do snapshots. 

#Connecting to VI-Server

Connect-Viserver -Server vCenterServer




####Variables####


$VMs = get-content "C:\Lists\vms.txt"

$Today = (Get-Date).ToString(“MM-d-yy”)

$SnapshotName = "$Today - Snapshot"




####Functions####

#This Function Shutsdown the VM's in the $VMs List


Function Shutdown{

foreach ($VM in $VMs){

get-vm -Name $VM | Shutdown-VMGuest -confirm:$false

Write-Host "Shutting $VM down."



}

Write-Host "Waiting 2 minutes for VM's to shutdown"

Sleep 120



}

#This Function Lists Power State of all the VMs then Verifies with the User that all VMs are shutdown


Function ShutdownVerify{

Write-Host "Verifying all VM's in $VMs are Powered Off."





foreach ($VM in $VMs){

$pwr = (Get-VM $VM).PowerState

if ($pwr -eq "PoweredOn"){

Write-Host -Foregroundcolor red "$VM is $Pwr"

}elseif ($pwr -eq "PoweredOff"){

Write-Host -Foregroundcolor green "$VM is $Pwr"



}

}

$u = Read-Host = "Any VMs Still Powered on? [Yes] or [No] (Case Sensitive)"

if ($u -match "No"){

Write-Host "Running Snapshot Script...."

}elseif ($u -match "Yes") {

Write-Host "Waiting 2 minutes..."

Sleep 120

ShutdownVerify



}

}

#This Function Snapshots each server in the $VMs list.


Function Snapshot{

ForEach ($VM in $VMs)



{

#Create snapshot for today

New-Snapshot -Name $SnapshotName -VM $VM

Write-host "$VM Snapped"



}

Sleep 5



}

#This Function Power's on all the VMs in the $VMs List


Function PowerOn{

foreach ($VM in $VMs){

Write-Host "Starting $VM"

Start-VM -VM $VM

Write-Host "$VM started"



}

}

#Calling each function in order


Shutdown

ShutdownVerify

Snapshot

PowerOn

Active Directory Powershell Function - Get-UserLockout

The function below is used for looking up the Locked out status of an Active Directory User. Usage is:

Get-UserLockout username

Active Directory Powershell Module required.
 

function Get-UserLockout
{
 Param(

[Parameter(Mandatory=$True,Position=1)]

[string]$Username
)
  Get-ADUser $Username -Properties * | Select Lockedout }


Rich

Script for changing AD Attribute "PasswordNotRequired" for a list of users

Vulnerability came up recently where 90% of our user accounts in Active Directory were incorrectly setup with an attribute called "PasswordNotRequired" set to true. This would enable an Administrator to set a blank password for a user. This attribute is not configurable via the GUI, so PowerShell it!
 
First I needed to list out all the users with this attribute set. Active directory module has the command we will need for this task.

Get-ADUser -Filter * -Properties * | Select Name, DisplayName, PasswordNotRequired
 
This will list all the users and their settings for that particular attribute. Now I ended up Exporting this to CSV which can be done with the Export-CSV command. After which I was able to copy out the Name section of each user with the setting True to a text file.
 
Now to the meat of this little script.
 
The first line of this code I am getting the content of the text file I created. The contents of the text file look like this:
User1
User2
User3
 
$Users = Get-Content "C:\lists\userlist.txt"
 
Next is 4 lines of code that go through each user in the textfile and sets the setting "PasswordNotRequired" to "False"
 
Foreach ($User in $Users){
$Cmd = Get-ADUser -Identity $User
$Cmd.PasswordNotRequired = "FALSE"
Set-ADUser -Instance $Cmd}
 
This little 5 line script saved hours of time for my team. This is why I enjoy scripting with PowerShell.
 
Rich