2024-11-18

將 Hyper-V VM 的 GUID 寫到 Notes 裡方便查詢

將 Hyper-V VM 的 GUID 寫到 Notes 裡方便查詢:

$VMs = (Get-VM | Select-Object VMName,VMId);
foreach ($VM in $VMs) {
Set-VM -Name $VM.VMName -Notes ('GUID: ' + $VM.VMId)
};

2024-11-06

PowerShell UTF-8 to Base64 Encode / Decode

[string]$StringToEncode="編碼的字串"
$EncodedString=[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($StringToEncode))
write-host "Encoded String:" $EncodedString

$DecodedString=[System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($EncodedString))
write-host "Decoded String:" $DecodedString

PowerShell 將字串單字第一個字母轉換為大寫，其他小寫

$String = ('this is a book');
(Get-Culture).TextInfo.ToTitleCase( $String.ToLower() )

2024-08-22

ITの魂

今天在給我公司大陸廠 MIS 提供 SoftEther VPN Server 架設教學的時候，發現到自己認為很簡單的這件事情其實牽涉了一系列的背景知識，包含但不限於以下領域:

OSI Model
防火牆 Open Port Policy
SSL 非對稱加密概念
DNS
Let's Encrypt 使用方式(含 Renew)
Web Server 建置與設定
RADIUS Server 建置與設定
Windows AD 管理實務
Windows ACL 管理實務 (AGDLP)
Powershell 或任一種可實現自動化的 Script/程式撰寫

而其中有許多都不是學校或任何一門電腦課程會教、或甚至教你如何整合運用的，大部分都是靠自學 (感謝各路大神分享) 而會的。

突然覺得自己其實挺厲害的，而那些聽到建置一個 VPN Server 覺得很難而懼怕、放棄的人其實也是自有其因。

走 IT 這條路，就是從其他不吝於分享的前輩、神人那邊學習、獲取許多知識與技能，也再繼續分享自己的經驗給其他人，互相成長，這就是 ITの魂吧。

2024-07-08

Windows CPU/RAM/Disk Performance Monitor Log - typeperf

$Path = 'C:\';
$Folder = 'PerfLogs';
$FullPath = ($Path + $Folder + '\');
$CounterFile = 'Counters.txt';
$LoopSeconds = 5;
$LogKeepDays = 30;

$Now = (Get-Date);

if ((Test-Path $FullPath) -eq $False) {
write-host ('Path ' + $FullPath + ' not found.');
New-Item -Path $Path -Name $Folder;
exit;
};

閱讀全文 »

2024-04-26

Get Web Site SSL Certificate Expired Date

$Uri = 'https://www.contoso.com';

$request = [System.Net.WebRequest]::Create($Uri);
$request.Proxy.Credentials = [System.Net.CredentialCache]::DefaultNetworkCredentials
$response = $request.GetResponse();
(($request.ServicePoint).Certificate).GetExpirationDateString();

其中 ($request.ServicePoint).Certificate.Subject 可以核對 FQDN

參考資料: https://stackoverflow.com/questions/22233702/how-to-download-the-ssl-certificate-from-a-website-using-powershell

2024-01-30

Windows Firewall Block Public InBound 80 Port

$FWGroupName = "BlockPublicInBound80Port";

# Remove Rule
$Remove = New-NetFirewallRule -DisplayName "RemovePrepare" -Group $FWGroupName -Direction inbound -Program "C:\windows\system32\calc.exe" -Action Block -RemoteAddress $BlockIPs
Remove-NetFirewallRule -Group $FWGroupName -Confirm:$False

# Add Rule
$BlockIPs = @("0.0.0.1-9.255.255.255", "11.0.0.0-172.15.255.255", "172.32.0.0-192.167.255.255", "192.169.0.0-255.255.255.255")
New-NetFirewallRule -DisplayName "Block 80 Port inBound" -Group $FWGroupName -Direction "inBound" -Protocol "TCP" -LocalPort 80 -Action Block -RemoteAddress $BlockIPs