/var/blog

get-nestedgroups

2009-12-11T16:19:00.000-08:00

Here is a script i worked on that searches for the group you are looking for in AD and return the Name, Members, type, and domain that it is in and returns all other AD groups that may be nested (group within a group) in that group. If the search is ambiguous it will return all groups with like names and you may get duplicates because of it.

$>./get-nestedgroups.ps1 "My Universal Group"

Group_Name                        Members                           Group_Type      Domain
----------                        -------                           ----------      ------
MyAdminGroup                      {jarrettirons, MyAdminGroup-Gl... Universal       mydomain
MyAdminGroup-Global               {user1,user2,user3,user4,user,... Global          subdomain

--Jarrett

# Function get-NestedMembers 
# List the members of a group including all nested members of subgroups 

# GLOBAL VARIABLES
$adgroups = @()
[array]$disabled_status = @("514", "546", "2", "66050")
[array]$roots = @()
$roots = "LDAP://dc=mydomain,dc=com"
$roots += "LDAP://dc=subdomain,dc=mydomain,dc=com"


# PRIVATE FUNCTIONS

###################################################
function get-NestedMembers ([array]$domaingroup) {  
###################################################
    foreach ($dgroup in $domaingroup) {
    if ($dgroup.objectclass -contains 'group') {
      ($dgroup | select @{Name="Group_Name"; Expression={$_.cn}},
                                     @{Name="Members"; Expression={foreach ($member in $_.member) {
                                                                      $admember = new-object DirectoryServices.DirectoryEntry("LDAP://$member");
                                                                          if ($admember.objectclass -contains "person") {
                                                                            if ($disabled_status -notcontains $admember.useraccountcontrol) {
                                                                                [string]$admember.cn
                                                                                remove-item variable:\admember
                                                                            }
                                                                          }
                                                                          else {[string]$admember.cn}
                                                                        }
                                                                      }},
                                        
                                     @{Name="Group_Type"; Expression={if (([string]$_.grouptype) -eq '-2147483640') {
                                                                        return "Universal"
                                                                      }
                                                                      if (([string]$_.grouptype) -eq '-2147483646') {
                                                                        return "Global"
                                                                        }
                                                                      }},
                                     @{Name="Domain"; Expression={
                                        $null = ([string]$_.distinguishedname) -match "DC=([^,]+)"; $matches[1]
                                        }})
      $dgroup.member | % {
        $adobject = new-object directoryservices.directoryentry("LDAP://$_")
        if ($adobject.objectclass -ne $null) {
          if ($adobject.objectclass -contains 'group') {
            get-nestedMembers $adobject
          }
        }
      }
    }
    }
}
################################
function get-adGroup ($group) {
################################
  [array]$roots = @()
  $roots = "LDAP://dc=msprod,dc=msp"
  $roots += "LDAP://dc=guest,dc=msprod,dc=msp"
  $category = "group"
  $dom = New-Object System.DirectoryServices.DirectoryEntry

  $dirSearcher = New-Object System.DirectoryServices.DirectorySearcher
  $dirSearcher.PageSize = 1000
  $dirSearcher.Filter = ("(objectCategory=$category)")
  foreach ($root in $roots)
    {
      $dirSearcher.SearchRoot = $root
      trap [System.Exception] {continue;}
      [array]$items += $dirSearcher.FindAll() | ?{$_.properties.name -like $group} 
    }
  foreach ($item in $items){
    [array]$results += new-object DirectoryServices.DirectoryEntry($item.path);
  }
  return $results
}
##############################
function get-adUser ($user) {
##############################
  $category = "Person"
  $dom = New-Object System.DirectoryServices.DirectoryEntry
  
  $dirSearcher = New-Object System.DirectoryServices.DirectorySearcher
  $dirSearcher.PageSize = 1000
  $dirSearcher.Filter = "(&(objectCategory=Person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))"
  foreach ($root in $roots)
    {
      $dirSearcher.SearchRoot = $root
      trap [System.Exception] {continue;}
      $results = $dirSearcher.FindAll() | ?{$_.properties.name -like "$user"} | sort-object properties.cn
    }

  foreach ($item in $results) {
    $object = $item.Properties
  }
  return $results.properties
}
#=========================================================

# MAIN
$name = get-adGroup $args
get-NestedMembers $name

2009-09-29T21:13:00.000-07:00

Here is a script I pasted together that modifies the machine.config in the .Net framework using Powershell. This script basically allows you to add and remove domains and specify what connection limit you would like to set it to by adding/modifying system.net/connectionmanagement elements, which you can find out more here. Hope this helps someone out. One sight I relied heavily on was http://www.pluralsight.com/community/blogs/dan/archive/2006/10/30/41434.aspx.

-Jarrett

# Global Vars
param(
    [string]$command = $(throw "Please specify action.`nUSAGE: `n>maxuserport.ps1 (read|add|delete) [[int]value]"),
    [string]$domain,
    [int]$value
    )
$usage = "Please specify action.`nUSAGE: `n>maxuserport.ps1 (read|add|delete) [[int]value]"
#write-host "command is " $command "domain is " $domain "and value is " $value
if ($command -notmatch "read|add|delete") {$usage; return}
$bitness = (get-wmiobject win32_OperatingSystem).OSArchitecture
$working_path = "C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG"
$working_path64 = "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG"
$machine_config = "machine.config"
$date = get-date -uformat "%Y%m%d-%H%M"
$paths = @{}
$paths.Add(32,(join-path $working_path $machine_config))
if ($bitness -eq "64-bit") {
  $paths.Add(64, (join-path $working_path64 $machine_config))
}

# ===================================================
# Functions
# ===================================================

function add ([string]$address, [int]$maxconnection) {
  if (!($address)) {"Must specify a domain to add`n"; $usage; return}
  # Loading config
  foreach ($fullpath in $paths.keys) {
    $xml = new-object System.Xml.XmlDocument
    $xml.Load($paths[$fullpath])
    $configuration = $xml.configuration
    # Creating Elements
    if (!($configuration."system.net")) {
      $systemNet = $xml.CreateElement("system.net")
      # If "system.net" does not exist then it is safe to say that
      #  "connectionManagement" does not either.
      $connectionManagement = $xml.CreateElement("connectionManagement")
    }
    else {
      $systemNet = $configuration."system.net"
      $connectionManagement = $systemNet.connectionManagement
    }
    # Add the "add" element
    $add_address = $xml.CreateElement("add")
    $add_address.SetAttribute("address", $address)
    $add_address.SetAttribute("maxconnection", $maxconnection)
    # Connecting Elements
    $null = $connectionManagement.AppendChild($add_address)
    $null = $systemNet.AppendChild($connectionManagement)
    $null = $xml.configuration.AppendChild($systemNet)
    $xml.Save($paths[$fullpath])
    read
  }
}

function read () {
  $OFS = ", "
  $domains = @()
  foreach ($fullpath in $paths.keys) {
    $xml = new-object System.Xml.XmlDocument
    $xml.Load($paths[$fullpath])
    $configuration = $xml.configuration
    # Seeing if "system.net" exists
    if (!($configuration."system.net")) {
      "system.net does not exist"
      return
    }
    $systemNet = $configuration."system.net"
    $connectionManagement = $systemNet.connectionManagement
    $connectionManagement.SelectNodes("add") | % {
      $tmp = '' | select address, maxconnection
      $tmp.address = [string]$_.address
      $tmp.maxconnection = [int]$_.maxconnection
      $domains += $tmp
    }
   "$fullpath(" + "$($domains | % {$_.address + ":" + $_.maxconnection})" + ")"
   }
}

function delete ([string]$address, [int]$maxconnection) {
  if (!($address)) {"Must specify a domain to add\n"; $usage; return}
  $target = @()
  foreach ($fullpath in $paths.keys) {
    # Loading config
    $xml = new-object System.Xml.XmlDocument
    $xml.Load($paths[$fullpath])
    $configuration = $xml.configuration
    # Checking Elements
    if (!($configuration."system.net")) { "system.net Elemnet does not exist.  Exiting"; return }
    $systemNet = $configuration."system.net"
    $connectionManagement = $systemNet.connectionManagement
    # Targeting and deleting Element
    $target = $connectionManagement.selectNodes("add") | ? {$_.address -eq $address -and $_.maxconnection -eq $maxconnection}
    if ($target -eq $null) {"Could not find domain to delete!"; return}
    foreach ($missle in $target) {
      $null = $connectionManagement.RemoveChild($missle)
    }
    $xml.Save($paths[$fullpath])
    read 
  }
}

function backup_config () {
    if (test-path ($fullpath + ".orig") ) {
      copy $fullpath ($fullpath + "." + $date)
    }
    else { copy $fullpath ($fullpath + ".orig") }
}

# ===================================================
# MAIN 
# ===================================================
&($command) $domain $value

Turn off Proxy when using IIS7 Management Console!!

2009-05-09T09:38:00.000-07:00

I know there is plenty of articles showing how to setup IIS7 with Remote Management Services and how to connect to it. However I was running into an issue where it just was not working for me. After looking at my firewall settings on both client and server, confirming that port 8172 was open and being able to telnet to the remote machine on that port, I have found in a TCP dump that I was trying to connect to the remote IIS7 server via PROXY! The IIS7 console is more integrated with IE and if you have a proxy specified in IE then the IIS7 management console (and possibly others) will try and use that proxy. Its kinda cool but annoying as hell at the same time for I have not found this anywhere and there is no errors showing this. (Sigh) Thanks Microsoft

2009-03-16T10:00:00.000-07:00

I have been working on a sketch that I must say am pretty proud of thus far. This drawing is for my wife's(Karen) graduation. I was inspired to draw her Ganesh because of the rigorous 4 years she went through to get her Masters in Traditional Chinese Medicine. CONGRATS KAREN! To sum up in one line who/what Ganesh is, Ganesh is a Hindu god of wisdom or prophecy; the god who removes obstacles. Here is the initial sketch.

A 32" pizza from "Big Papa's"

2009-02-11T19:11:00.001-08:00

8 full stomachs later we still had about a dozen pieces.

Outside of Urth Cafe in Santa Monica

2008-10-18T21:17:00.001-07:00

Test from versaamail

2008-01-08T12:36:00.001-08:00

Test

test from mobile

2007-12-31T21:17:00.001-08:00

test from mobile

--
..::Jarrett::..

The world is round!

2007-12-31T15:02:00.000-08:00

A picture we have taken up in Big Sur, CA on PCH1. It is quite a sight to see.

How to Create a Local User Using PowerShell with ADSI ....

2007-01-14T05:20:00.000-08:00

With so many articles, forums, blogs, groups or whatever you want to call it. They all talk about creating and modifying users and groups in Active Directory.


function create-account ([string]$accountName = "testuser") {
$hostname = hostname
$comp = [adsi] "WinNT://$hostname"
$user = $comp.Create("User", $accountName)
$user.SetPassword("Password1")
$user.SetInfo()
}


function set-PasswordExpires([string]$accountName, [bool]$expires) {
$wmiuser = Get-WmiObject -class "Win32_UserAccount" -filter "name='$accountName'"
$wmiuser.PasswordExpires = $expires
$wmiuser.Put()
$wmiuser.PasswordExpires
}

The first function will connect to localhost ADSI and create the user object with the specified username and password. The second function goes in through get-wmiobject and set the "PasswordExpires" attribute to true or false depending on what you want. When creating the user it set the "PasswordExpires" to TRUE by default. You then create your user using the following commands in powershell.

create-account Jarrett password
set-UserPasswordExpires Jarrett $false

Have fun, ..::Jarrett::..

Powershell

2006-12-13T02:07:00.000-08:00

Jeffrey Snover came by the office on Friday giving a presentation on Powershell. It was awesome to see him show it off. It got me totally inspired to build my own profile. Powershell is 'the' shell for Windows. Finally a shell that I can use to fully administrate Windows from the command line. To find out more about it you can check out Jeffery's blog at http://blogs.msdn.com/powershell/.

Slow Day @ Work

2006-11-22T14:38:00.000-08:00

Counting down to the final minutes before the office is off for a four day weekend. I don't even know why I am here. I should have followed my instincts and just "worked" from home. Oh well. You can keep tabs on me and see if I am at my computer at the office by checking out the webcam. Good Times, ..::Jarrett::..

Linux Flash Player Beta ......

2006-10-14T08:47:00.000-07:00

Adobe is releasing Linux Flash Player 9 Beta in there 'Adobe Labs' in the next couple of weeks according to adobe dot com's penguin.swf. This is exciting for Linux users especially for someone who works at Myspace and can't watch any videos since they have updated all of theme to run on Flash Player 9 for security purposes.

Just Got Back From the Sequoia's

2006-08-19T21:14:00.000-07:00

Just got back from the Sequoia National Forest in Central California on a camping trip for four days. While Karen and I were up there we got the chance to check Crystal Cave, a cave made of marble not crystal. It was awsome! It was very cold in there and we got a few pictures of it in my gallery. We also got to hike on a trail where we could check out a giant red wood called Boole Tree. It was so huge you would probably need over fifty people to be able to hold hands around it. Maybe even a hundred! So check out the pictures and I'll try and write a blog about some power shell scripts I am in the middle of researching. Later, ..::Jarrett::..

My Banner is Finally Up!!!

2006-08-06T21:19:00.000-07:00

As you may have noticed, I have finally finished my banner! It took me about 3 weekends to do the whole thing from sketching it out to the final image. I still need to do some final touch ups and maybe make a few more changes in the colors I chose but all in all it's done. I'll be posting the steps that were taken to make this banner soon. ..::Jarrett::..

Google Picasa available for Linux!

2006-08-01T21:36:00.000-07:00

For those of you who do not know about Picasa. Picasa is a really cool photo organizing/editing software that is offered for free from Google. It is really cool and I personally have it installed on all of my computers. Now Picasa is available for Linux as Beta. I have been using it personally and it has all the functionality that the Windows version has. Finally something that has been developed for Linux before Mac. http://picasa.google.com/ ..::Jarrett::..

Power Outages in Los Angeles and Myspace

2006-07-24T13:27:00.000-07:00

This last weekend was the hottest weekend I have felt in two years living in West Los Angeles. The humidity was really bad too. It even got to 119 degrees in Woodland Hills. My wife Karen went to Tarzana on Saturday and said that it just hurt walking from the car to the front door. Well with all this heat people used there AC's and as usual our power grids could not take the load. With it came rolling black outs which eventually hit one of the buildings where Myspace.com is hosted. Having the power go out is the worst thing to happen for someone who works in the Information Industry. Fortunately the backup generators kicked in and we sustained power. However without saying too much, lets just say you also need air conditioners to keep the servers cool too! Thats all for now. I'm still working on my banner, perhaps I'll post my update of the banner later. ..::Jarrett::..

Hot Lunch Today!!!

2006-07-06T14:34:00.000-07:00

For the past three weeks here at the new office we have had no cafeteria to goto for lunch or breakfast. Fortunatly, the company has been providing catered lunches everyday. Unfortunatly there has not been much variety until today. Today we actually had a choice to have chicken and beans! Unfortunalty for me, I do not eat chicken :(. Sigh. Oh well. I finally got a scanner to work here at the office. Here is what I have started with for my banner. Let me know what you think. Later, ..::Jarrett::..

banner-pencil

2006-07-06T14:30:00.000-07:00

Working on a banner for real this time.

2006-07-05T10:36:00.000-07:00

I'll try and get some sort of mock up of what its going to look like and perhaps show the different stages of what it goes through later. Right now I am trying to find a scanner so I can at least post a penciled version of it. Later, ..::Jarrett::..

Third Week at Myspace ....

2006-06-26T07:58:00.000-07:00

Well, this is my 3rd week in working for MySpace. I have to say, it is different then working at Affinity. I thought Affinity was cool and casual but Myspace takes the cake! Working here reminds me of High School but in a good way. There are some clicks around the office but everyone seems approachable and even though it may seem like a party all the time, everyone works long and hard around here. You kind of need that casual environment to be able to work that hard, else you would probably see a huge turn over in the office. Speaking of working hard, I have to get back to it. Later, ..::Jarrett::..

I'm leaving Affinity!

2006-05-25T14:41:00.000-07:00

I have to admit this is bitter sweet for me. Affinity Internet is a great company to work for. There were many challenges to overcome and skills to be learned. However with the office/data center that I am working at slowly coming to an end, I had to start thinking about other opportunities that does not require me to move outside of California. I wanted to leave Affinity only if it was one of those 'too good to be true' opportunities. Well, I found that opportunity at MySpace.com. My boss at Affinity understood right away when I gave my two week notice on Thursday. So after saying that I will be starting at MySpace.com on the twelfth of June. Maybe I'll let you guys know of any Easter Eggs to be had at MySpace if it's permitted. Till then, ..::Jarrett::..

A wedding in Big Sur

2006-04-30T13:22:00.000-07:00

A small wedding in Big Sur is the way to go if you want to have a nice, small, pleasant wedding. Everything had gone smoothly during the ceremony for the most part and everyone had fun up there. Granted it was overcast almost the whole time we were up there for the wedding and honeymoon, so that put a damper on a couple of our outdoor activities. There are a lot of pictures of the wedding. Click here if you want to see them. Later, ..::Jarrett::..

Im Getting Hitched!

2006-04-21T20:04:00.000-07:00

It's been a while since I wrote something in my blog. For the past 2 weeks I was having to deal with a server going down twice in a row within 5 days of each other. That was not fun but it did give me a chance to write some Perl scripts. In the meantime my fiance Karen was not feeling great and I was taking care of her while taking care of this server, especially when getting called around four in the morning. On top of all of that, Karen and I have been getting ready for our wedding this weekend. That's right, I am getting married this Sunday up in Big Sur, California. It is going to be awsome. I have been getting more and more excited in going this whole week. Anyway, the next blog I post I will be a married man. Peace, ..::Jarrett::..

Crazy Nation

2006-04-04T09:44:00.000-07:00

A buddy at work pointed me to this website article. Since when is it intimidating to raise your own flag in your own country? Is it really PC to let other people raise there flag on foreign soil and not be allowed to raise yours in a peaceful manner. Although I do not know the details of this story I have heard far worse things being done to our own flag here in Los Angeles, but I guess that's okay.