2024-12-03

DFS-R 斷線過久不再進行複寫問題

EventLog DFS Replication 中出現 Event ID 4012

The DFS Replication service stopped replication on the folder with the following local path: C:\DFSR\Folder. This server has been disconnected from other partners for xxx days, which is longer than the time allowed by the MaxOfflineTimeInDays parameter (60). DFS Replication considers the data in this folder to be stale, and this server will not replicate the folder until this error is corrected.

To resume replication of this folder, use the DFS Management snap-in to remove this server from the replication group, and then add it back to the group. This causes the server to perform an initial synchronization task, which replaces the stale data with fresh data from other members of the replication group.

下指令:

查詢 MaxOfflineTimeInDays 設定值:
wmic.exe /namespace:\\root\microsoftdfs path DfsrMachineConfig get MaxOfflineTimeInDays

閱讀全文 »

2024-11-27

查詢 Microsoft Graph Powershell Command 需要的權限

查詢 Microsoft Graph Powershell Command Permission Requirement

(Find-MgGraphCommand -Command Command-Let).permissions

2024-11-18

將 Hyper-V VM 的 GUID 寫到 Notes 裡方便查詢

將 Hyper-V VM 的 GUID 寫到 Notes 裡方便查詢:

$VMs = (Get-VM | Select-Object VMName,VMId);
foreach ($VM in $VMs) {
Set-VM -Name $VM.VMName -Notes ('GUID: ' + $VM.VMId)
};

2024-11-06

PowerShell UTF-8 to Base64 Encode / Decode

[string]$StringToEncode="編碼的字串"
$EncodedString=[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($StringToEncode))
write-host "Encoded String:" $EncodedString

$DecodedString=[System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($EncodedString))
write-host "Decoded String:" $DecodedString

PowerShell 將字串單字第一個字母轉換為大寫，其他小寫

$String = ('this is a book');
(Get-Culture).TextInfo.ToTitleCase( $String.ToLower() )

2024-08-22

ITの魂

今天在給我公司大陸廠 MIS 提供 SoftEther VPN Server 架設教學的時候，發現到自己認為很簡單的這件事情其實牽涉了一系列的背景知識，包含但不限於以下領域:

OSI Model
防火牆 Open Port Policy
SSL 非對稱加密概念
DNS
Let's Encrypt 使用方式(含 Renew)
Web Server 建置與設定
RADIUS Server 建置與設定
Windows AD 管理實務
Windows ACL 管理實務 (AGDLP)
Powershell 或任一種可實現自動化的 Script/程式撰寫

而其中有許多都不是學校或任何一門電腦課程會教、或甚至教你如何整合運用的，大部分都是靠自學 (感謝各路大神分享) 而會的。

突然覺得自己其實挺厲害的，而那些聽到建置一個 VPN Server 覺得很難而懼怕、放棄的人其實也是自有其因。

走 IT 這條路，就是從其他不吝於分享的前輩、神人那邊學習、獲取許多知識與技能，也再繼續分享自己的經驗給其他人，互相成長，這就是 ITの魂吧。

2024-07-08

Windows CPU/RAM/Disk Performance Monitor Log - typeperf

$Path = 'C:\';
$Folder = 'PerfLogs';
$FullPath = ($Path + $Folder + '\');
$CounterFile = 'Counters.txt';
$LoopSeconds = 5;
$LogKeepDays = 30;

$Now = (Get-Date);

if ((Test-Path $FullPath) -eq $False) {
write-host ('Path ' + $FullPath + ' not found.');
New-Item -Path $Path -Name $Folder;
exit;
};

閱讀全文 »

2024-04-26

Get Web Site SSL Certificate Expired Date

$Uri = 'https://www.contoso.com';

$request = [System.Net.WebRequest]::Create($Uri);
$request.Proxy.Credentials = [System.Net.CredentialCache]::DefaultNetworkCredentials
$response = $request.GetResponse();
(($request.ServicePoint).Certificate).GetExpirationDateString();

其中 ($request.ServicePoint).Certificate.Subject 可以核對 FQDN

參考資料: https://stackoverflow.com/questions/22233702/how-to-download-the-ssl-certificate-from-a-website-using-powershell

2024-01-30

Windows Firewall Block Public InBound 80 Port

$FWGroupName = "BlockPublicInBound80Port";

# Remove Rule
$Remove = New-NetFirewallRule -DisplayName "RemovePrepare" -Group $FWGroupName -Direction inbound -Program "C:\windows\system32\calc.exe" -Action Block -RemoteAddress $BlockIPs
Remove-NetFirewallRule -Group $FWGroupName -Confirm:$False

# Add Rule
$BlockIPs = @("0.0.0.1-9.255.255.255", "11.0.0.0-172.15.255.255", "172.32.0.0-192.167.255.255", "192.169.0.0-255.255.255.255")
New-NetFirewallRule -DisplayName "Block 80 Port inBound" -Group $FWGroupName -Direction "inBound" -Protocol "TCP" -LocalPort 80 -Action Block -RemoteAddress $BlockIPs