Deploying and Managing AD with
Get-CimInstance-ClassName Win32_Product | Get-Random-Count 3 | fl
Obtaining a List of Installed Applications:Get-CimInstance-ClassName Win32_Product | flDeploying and Managing Active Directory with Windows PowerShellChapter 1. Deploy your first forest and domain
Get-NetAdapter
Get-Member
Set-NetIPAddress
New-NetIPAddress
Set-DnsClientServerAddress
Get-NetIPAddress
Rename-Computer
Install-WindowsFeature
Get-Command
Format-Table
Update-Help
ConvertTo-SecureString
Get-NetAdapter | Get-Member
Set-NetIPInterface-InterfaceAlias "10 Network"-DHCP Disabled-PassThru
New-NetIPAddress `
-AddressFamily IPv4 `
-InterfaceAlias "10 Network" `
-IPAddress 192.168.10.2`
-PrefixLength 24`
-DefaultGateway 192.168.10.1
New-NetIPAddress `
-AddressFamily IPv6 `
-InterfaceAlias "10 Network" `
-IPAddress 2001:db8:0:10::2 `
-PrefixLength 64`
-DefaultGateway 2001:db8:0:10::1
Set-DnsClientServerAddress `
-InterfaceAlias "10 Network" `
-ServerAddresses 192.168.10.2 Magazine 2001 Discovery Db8 purl 0purl 10purl 2
Get-NetIPAddress-InterfaceAlias "10 Network"
Rename-Computer-NewName dc01-Restart-Force-PassThru
Install Active Directory Domain Services
Install-WindowsFeature-Name AD-Domain-Services-IncludeManagementTools
Get-Command-Module ADDSDeployment | Format-Table Name
Name
-
Add-ADDSReadOnlyDomainControllerAccount
Install-ADDSDomain
Install-ADDSDomainController
Install-ADDSForest
Test-ADDSDomainControllerInstallation
Test-ADDSDomainControllerUninstallation
Test-ADDSDomainInstallation
Test-ADDSForestInstallation
Test-ADDSReadOnlyDomainControllerAccountCreation
Uninstall-ADDSDomainController
Update-Help-SourcePath\\ dc02\ PSHelp
Save-Help-DestinationPath\\ dc02\ PSHelp-force
Import-Module ADDSDeployment
Test-ADDSForestInstallation `
-DomainName 'afd.ink''
-DomainNetBiosName 'afd''
-DomainMode 6`
-ForestMode 6`
-NoDnsOnNetwork `
-NoRebootOnCompletion
Deploy the first domain controller and forest
Install-ADDSForest `
-DomainName 'afd.ink''
-DomainNetBiosName 'afd''
-DomainMode 4 `
-ForestMode 4 `
-NoDnsOnNetwork `
-SkipPreChecks `
-Force
A fuller list of the options for Install-ADDSForest:
Chapter 2. Manage DNS and DHCP
Add-DnsServerPrimaryZone
Add-DnsServerSecondaryZone
Get-DnsServerZone
Export-DnsServerZone
Set-DnsServerPrimaryZone
Set-DnsServerSecondaryZone
Add-DnsServerStubZone
Set-DnsServerStubZone
Add-DnsServerConditionalForwarderZone
Add-DnsServerZoneDelegation
Set-DnsServerZoneDelegation
Add-DnsServerResourceRecord
Add-DnsServerResourceRecordA
Add-DnsServerResourceRecordAAAA
Add-DnsServerResourceRecordCName
Add-DnsServerResourceRecordDnsKey
Add-DnsServerResourceRecordDS
Add-DnsServerResourceRecordMX
Add-DnsServerResourceRecordPtr
Get-DnsServerResourceRecord
Set-DnsServerResourceRecord
Set-DnsServerScavenging
Start-DnsServerScavenging
Get-DnsServerScavenging
Add-DhcpServerInDC
Add-DhcpServerv4Scope
Add-DhcpServerv4ExclusionRange
Set-DhcpServerv4OptionValue
Add-DhcpServerv6Scope
Add-DhcpServerv6ExclusionRange
Set-DhcpServerv6OptionValue
Create new primary zones
Add-DnsServerPrimaryZone-Name 'nipit.cn' `
-ComputerName 'dc01.afd.ink''
-ReplicationScope 'Domain''
-DynamicUpdate 'Secure''
-PassThru
Creating a reverse lookup zone
Add-DnsServerPrimaryZone-NetworkID 172.16.8.0Universe 24`
-ReplicationScope 'Forest''
-DynamicUpdate 'NonsecureAndSecure''
-PassThru
Add-DnsServerPrimaryZone-NetworkID 2001:db8:0:10::/64 `
-ReplicationScope 'Forest''
-DynamicUpdate 'Secure''
-PassThru
Creating file-based zones uses the-ZoneFile parameter
Add-DnsServerPrimaryZone-Name 'nipict.com' `
-ZoneFile 'nipict.com.dns''
-DynamicUpdate 'None'
Change the settings of a primary zone
Set-DnsServerPrimaryZone
Set-DnsServerPrimaryZone-Name 'nipict.com' `
-Notify 'NotifyServers''
-NotifyServers "192.168.10.201", "192.168.10.202" `
-PassThru
Get-DnsServerZone-Name 'nipict.com' | Format-List
Export a primary zone
Export-DnsServerZone-Name '0.1.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa``
-Filename '0.1.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.dns'
The file is saved in the% windir%\ system32\ dns
Create secondary zones
Secondary DNS zones are primarily used for providing distributed DNS resolution when you are using traditional file-based DNS zones. Secondary DNS zones are used for both forward lookup and reverse lookup zones. The DnsServerSecondaryZone set of cmdlets is used to deploy and manage secondary DNS zones.
A secondary DNS zone is a read-only zone and depends on transferring the data for the zone from another DNS server. That other server must be configured to allow zone transfers.
Add-DnsServerSecondaryZone-Name 0.1.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa `
-ZoneFile "0.1.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.dns" `
-LoadExisting `
-MasterServers 192.168.10.2 Magazine 2001Discovery Db8VOUR 10WOUR 2`
-PassThru
Set-DnsServerSecondaryZone-Name 0.1.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa `
-MasterServers 192.168.10.3 Magazine 2001Discovery Db8VOUR 10VOUR 3`
-PassThru
Set-DnsServerPrimaryZone-Name 'nipit.cn' `
-SecureSecondaries TransferToZoneNameServer `
-PassThru
Add-DnsServerStubZone-Name nipict.com `
-MasterServers 192.168.10.4`
-ReplicationScope Domain `
-PassThru
Set-DnsServerStubZone-Name nipict.com `
-LocalMasters 192.168.10.201192.168.10.202`
-PassThru
Configure conditional forwards
Add-DnsServerConditionalForwarderZone-Name nipict.com`
-MasterServers 192.168.10.2, Magazine 2001, Db8, virtual, 10, and 2.
-ForwarderTimeout 5`
-ReplicationScope "Forest" `
-Recursion $False `
-PassThru
Set-DnsServerConditionalForwarderZone-Name nipict.com `
-MasterServers 192.168.10.3, Magazine 2001, Db8, virtual, 10, and 3.
-PassThru
To remove a conditional forward, use the Remove-DnsServerZone
Manage zone delegation
Add-DnsServerZoneDelegation-Name nipict.com `
-ChildZoneName Engineering `
-IPAddress 192.168.10.12 (2001)
-NameServer dc01.afd.ink`
-PassThru
Set-DnsServerZoneDelegation-Name nipict.com `
-ChildZoneName Engineering `
-IPAddress 192.168.10.13 Magazine 2001Discovery Db8VOUR 10RNAL VOLAR d `
-NameServer dc02.afd.ink`
-PassThru
Manage DNS records
Get-Help Add-DnsServerResourceRecord* | ft-auto Name,Synopsis
Name Synopsis
-
Add-DnsServerResourceRecord Adds a resource record of a specified type to...
Add-DnsServerResourceRecordA Adds a type A resource record to a DNS zone.
Add-DnsServerResourceRecordAAAA Adds a type AAAA resource record to a DNS server.
Add-DnsServerResourceRecordCName Adds a type CNAME resource record to a DNS zone.
Add-DnsServerResourceRecordDnsKey Adds a type DNSKEY resource record to a DNS zone.
Add-DnsServerResourceRecordDS Adds a type DS resource record to a DNS zone.
Add-DnsServerResourceRecordMX Adds an MX resource record to a DNS server.
Add-DnsServerResourceRecordPtr Adds a type PTR resource record to a DNS server.
Add-DnsServerResourceRecord-ZoneName "afd.ink" `
-A`
-Name wds-11 `
-IPv4Address 192.168.10.11`
-CreatePtr `
-PassThru
Add-DnsServerResourceRecordA-ZoneName "afd.ink" `
-Name wds-11 `
-IPv4Address 192.168.10.11`
-CreatePtr `
-PassThru
Add-DnsServerResourceRecord-ZoneName "afd.ink" `
-AAAA `
-Name wds-11 `
-IPv6Address 2001:db8:0:10::b `
-CreatePtr `
-PassThru
Add-DnsServerResourceRecord-ZoneName "afd.ink" `
-CName `
-Name wds `
-HostNameAlias wds-11.afd.ink `
-PassThru
Add-DnsServerResourceRecord-ZoneName "afd.ink" `
-Name "." `
-MX `
-MailExchange mail.afd.ink`
-Preference 10
Add-DnsServerResourceRecord-ZoneName "afd.ink" `
-Name "." `
-MX `
-MailExchange mail2.afd.ink`
-Preference 20
Add-DnsServerResourceRecord Parameters for SRV records:
Add-DnsServerResourceRecord-ZoneName "afd.ink" `
-Name _ nntp._tcp `
-SRV `
-DomainName "edge-1.afd.ink" `
-Port 119`
-Priority 0`
-Weight 0`
-PassThru
HostName RecordType Timestamp TimeToLive RecordData
--
_ nntp._tcp SRV 0 01:00:00 [0] [0] [119] [edge-1.afd.ink.]
Configure zone scavenging and aging (configure area cleanup and aging)
Set-DnsServerScavenging-ScavengingState:$True `
-ScavengingInterval 4VOG 0000VOUR 0000`
-RefreshInterval 3VOUL00VOUGRO 0000`
-NoRefreshInterval 0`
-ApplyOnAllZones `
-PassThru
Get-DnsServerScavenging
Start-DnsServerScavenging
Deploy DHCP
Install-WindowsFeature-ComputerName dc01 `
-Name DHCP `
-IncludeAllSubFeature `
-IncludeManagementTools
Add-DhcpServerInDC-DnsName 'dc01.afd.ink'-PassThru
Add-DhcpServerv4Scope-Name "afd-dhcp" `
-ComputerName "dc01" `
-Description "Default IPv4 Scope for afd.ink" `
-StartRange "172.16.8.100" `
-EndRange "172.16.8.200" `
-SubNetMask "255.255.255.0" `
-State Active `
-Type DHCP `
-PassThru
Add-DhcpServerv4ExclusionRange-ScopeID "172.16.8.0" `
-ComputerName "dc01" `
-StartRange "172.16.8.100" `
-EndRange "172.16.8.120" `
-PassThru
Set-DhcpServerv4OptionValue-ScopeID 172.16.8.0`
-ComputerName "dc01" `
-DnsDomain "afd.ink" `
-DnsServer "172.16.8.10" `
-Router "172.16.8.1" `
-PassThru
Add-DhcpServerv6Scope-Name "afd-IPv6-Default" `
-ComputerName "dc01" `
-Description "Default IPv6 Scope for afd.ink" `
-Prefix 2001VDb8VOUR 10VOV: `
-State Active `
-PassThru
Add-DhcpServerv6ExclusionRange-ComputerName dc01 `
-Prefix 2001VDb8VOUR 10VOV: `
-StartRange 2001:db8:0:10::1 `
-EndRange 2001:db8:0:10::20 `
-PassThru
Set-DhcpServerv6OptionValue-Prefix 2001 rig DB8 purl 0v 10purl: `
-ComputerName "dc01" `
-DnsServer 2001:db8:0:10::1 `
-DomainSearchList "afd.ink" `
-PassThru
Chapter 3. Create and manage users and groups
ADUser
ADGroup
ADGroupMember
ADAccountPassword
ADPrincipalGroupMembership
ADObject
ADComputer
Import-CSV
ConvertTo-SecureString
Get-Command
Test-Path
Read-Host
Write-Host
Create users
New-ADUser
Get-ADUser-Identity Administrator
$SecurePW = Read-Host-Prompt "Enter a password"-asSecureString
New-ADUser-Name "gazh" `
-AccountPassword $SecurePW `
-SamAccountName 'gazh''
-DisplayName 'gazh''
-Enabled $True `
-PassThru `
-PasswordNeverExpires $True `
-UserPrincipalName 'gazh'
