Add 12 AI-generated PowerShell scripts with documentation
⚠️ IMPORTANT: These scripts are AI-GENERATED and UNTESTED Exchange Scripts (5): - Get-MailboxPermissions.ps1: Audit delegate access permissions - Get-InactiveMailboxes.ps1: Identify stale mailboxes - Compare-MailboxDatabases.ps1: Database health comparison - Export-DistributionGroups.ps1: Distribution group inventory - Get-MailflowStats.ps1: Transport log analysis Active Directory Scripts (3): - Get-ADUserLastLogon.ps1: True LastLogon across all DCs - Export-OUStructure.ps1: OU hierarchy with GPO links - Compare-ADGroupMemberships.ps1: Compare user group memberships System Maintenance Scripts (4): - Get-ServerInventory.ps1: Hardware/software inventory report - Monitor-DiskSpace.ps1: Disk space monitoring with alerts - Backup-ExchangeCertificates.ps1: Certificate backup to PFX - Test-ExchangeHealth.ps1: Aggregated Exchange health checks Documentation: - Updated CLAUDE.md with AI-generated scripts section - Added AI-GENERATED-SCRIPTS.md with warnings and testing guide All scripts include prominent warnings and follow established patterns from existing scripts. Require thorough testing before production use. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Martien de Kleijn
95
AI-GENERATED-SCRIPTS.md
Normal file
95
AI-GENERATED-SCRIPTS.md
Normal file
@ -0,0 +1,95 @@
|
||||
# AI-Generated Scripts - Important Notice
|
||||
|
||||
⚠️ **WARNING: The scripts listed below were generated by Claude AI and have NOT been tested in production environments.**
|
||||
|
||||
These scripts were created to complement the existing manually-written scripts in this repository. While they follow established patterns and best practices, **they require thorough review and testing before use in any production environment**.
|
||||
|
||||
## AI-Generated Scripts List
|
||||
|
||||
### Exchange Scripts
|
||||
| Script | Purpose | Risk Level |
|
||||
|--------|---------|------------|
|
||||
| `Get-MailboxPermissions.ps1` | Audit mailbox delegate access (SendAs, SendOnBehalf, FullAccess) | Low (read-only) |
|
||||
| `Get-InactiveMailboxes.ps1` | Identify stale mailboxes based on LastLogonTime | Low (read-only) |
|
||||
| `Compare-MailboxDatabases.ps1` | Database health comparison with alerting | Low (read-only) |
|
||||
| `Export-DistributionGroups.ps1` | Complete distribution group inventory | Low (read-only) |
|
||||
| `Get-MailflowStats.ps1` | Transport log analysis for message flow patterns | Low (read-only) |
|
||||
|
||||
### Active Directory Scripts
|
||||
| Script | Purpose | Risk Level |
|
||||
|--------|---------|------------|
|
||||
| `Get-ADUserLastLogon.ps1` | True LastLogon query across all domain controllers | Medium (queries all DCs) |
|
||||
| `Export-OUStructure.ps1` | OU hierarchy documentation with GPO links | Low (read-only) |
|
||||
| `Compare-ADGroupMemberships.ps1` | Group membership comparison between users | Low (read-only) |
|
||||
|
||||
### System Maintenance Scripts
|
||||
| Script | Purpose | Risk Level |
|
||||
|--------|---------|------------|
|
||||
| `Get-ServerInventory.ps1` | Hardware/software inventory with Word/HTML report | Low (read-only) |
|
||||
| `Monitor-DiskSpace.ps1` | Disk space monitoring with alerting | Low (read-only) |
|
||||
| `Backup-ExchangeCertificates.ps1` | Certificate export to PFX files | Medium (exports sensitive keys) |
|
||||
| `Test-ExchangeHealth.ps1` | Aggregated Exchange health checks | Low (read-only tests) |
|
||||
|
||||
## Testing Recommendations
|
||||
|
||||
### Before Production Use:
|
||||
|
||||
1. **Review the Code**
|
||||
- Examine the logic and ensure it fits your environment
|
||||
- Check for hardcoded paths, IP ranges, or environment-specific assumptions
|
||||
- Verify parameter defaults are appropriate
|
||||
|
||||
2. **Test in Non-Production**
|
||||
- Run scripts in a test environment first
|
||||
- Verify output is accurate and complete
|
||||
- Check performance impact (especially scripts that query all DCs or parse large logs)
|
||||
|
||||
3. **Verify Prerequisites**
|
||||
- Ensure required modules are available (Exchange Management Shell, Active Directory)
|
||||
- Confirm appropriate permissions (RBAC roles, AD rights, Administrator)
|
||||
- Test with and without optional parameters
|
||||
|
||||
4. **Monitor Performance**
|
||||
- Some scripts can be slow with large datasets:
|
||||
- `Get-ADUserLastLogon.ps1` queries every domain controller
|
||||
- `Get-MailflowStats.ps1` parses potentially large log files
|
||||
- `Get-InactiveMailboxes.ps1` retrieves statistics for all mailboxes
|
||||
- Consider running during maintenance windows or off-peak hours
|
||||
|
||||
5. **Security Considerations**
|
||||
- `Backup-ExchangeCertificates.ps1` exports private keys - store PFX files securely
|
||||
- `Get-MailboxPermissions.ps1` may reveal sensitive access patterns
|
||||
- Review output before sharing to ensure no credentials or secrets are exposed
|
||||
|
||||
## How to Identify AI-Generated Scripts
|
||||
|
||||
All AI-generated scripts include:
|
||||
1. Prominent warning in the `.SYNOPSIS` section: "⚠️ AI-GENERATED SCRIPT - UNTESTED"
|
||||
2. Console output warning when executed
|
||||
3. This file (`AI-GENERATED-SCRIPTS.md`) lists all AI-generated scripts
|
||||
|
||||
## Manually Written Scripts (Production-Tested)
|
||||
|
||||
The following scripts were manually written and have been used in production:
|
||||
- `Exchange/Exchange-Inventory.ps1`
|
||||
- `Exchange/Get-LargeMailboxes.ps1`
|
||||
- `Exchange/Get-MailboxesPerType.ps1`
|
||||
- `Exchange/Get-SMTPTraffic.ps1`
|
||||
- `ActiveDirectory/CopyADgroups.ps1`
|
||||
- `Misc/Fix-VSSBackup.ps1`
|
||||
|
||||
## Reporting Issues
|
||||
|
||||
If you find issues with AI-generated scripts, please:
|
||||
1. Document the issue (error messages, unexpected behavior, environment details)
|
||||
2. Note which script and version (check git commit)
|
||||
3. Consider fixing the issue and contributing back to the repository
|
||||
|
||||
## License
|
||||
|
||||
These scripts are provided as-is under the same license as the repository. No warranty is provided, express or implied.
|
||||
|
||||
---
|
||||
|
||||
**Last Updated**: 2025-10-15
|
||||
**Generated By**: Claude AI (Anthropic)
|
||||
215
ActiveDirectory/Compare-ADGroupMemberships.ps1
Normal file
215
ActiveDirectory/Compare-ADGroupMemberships.ps1
Normal file
@ -0,0 +1,215 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Compare group memberships between two Active Directory users
|
||||
|
||||
.DESCRIPTION
|
||||
Shows differences in group memberships between two users. Useful for
|
||||
access troubleshooting, onboarding/offboarding validation, or role comparison.
|
||||
|
||||
.PARAMETER User1
|
||||
First user (SamAccountName, UserPrincipalName, or DistinguishedName)
|
||||
|
||||
.PARAMETER User2
|
||||
Second user (SamAccountName, UserPrincipalName, or DistinguishedName)
|
||||
|
||||
.PARAMETER OutputFolder
|
||||
Destination folder for reports. Default: .\GroupComparison-<date>
|
||||
|
||||
.PARAMETER ShowCommonGroups
|
||||
Include groups common to both users in report (default: $true)
|
||||
|
||||
.NOTES
|
||||
⚠️ AI-GENERATED SCRIPT - UNTESTED
|
||||
This script was generated by Claude AI and has not been tested in production.
|
||||
Review and test thoroughly in a non-production environment before use.
|
||||
|
||||
- Requires Active Directory PowerShell module
|
||||
- Run with appropriate AD permissions
|
||||
- Includes nested group memberships
|
||||
|
||||
.EXAMPLE
|
||||
.\Compare-ADGroupMemberships.ps1 -User1 "jsmith" -User2 "jdoe"
|
||||
|
||||
.EXAMPLE
|
||||
.\Compare-ADGroupMemberships.ps1 -User1 "john.smith@domain.com" -User2 "jane.doe@domain.com" -ShowCommonGroups $false
|
||||
#>
|
||||
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[Parameter(Mandatory = $true)]
|
||||
[string]$User1,
|
||||
|
||||
[Parameter(Mandatory = $true)]
|
||||
[string]$User2,
|
||||
|
||||
[string]$OutputFolder = (Join-Path -Path (Get-Location) -ChildPath ("GroupComparison-" + (Get-Date -Format "yyyyMMdd-HHmm"))),
|
||||
|
||||
[bool]$ShowCommonGroups = $true
|
||||
)
|
||||
|
||||
function NowTag { (Get-Date).ToString("yyyy-MM-dd HH:mm:ss") }
|
||||
|
||||
Write-Host "[$(NowTag)] ⚠️ AI-GENERATED SCRIPT - UNTESTED" -ForegroundColor Yellow
|
||||
Write-Host "[$(NowTag)] Comparing AD group memberships..." -ForegroundColor Green
|
||||
|
||||
# Import AD module
|
||||
try {
|
||||
Import-Module ActiveDirectory -ErrorAction Stop
|
||||
} catch {
|
||||
Write-Host "[$(NowTag)] ERROR: Active Directory module not available" -ForegroundColor Red
|
||||
exit 1
|
||||
}
|
||||
|
||||
# Create output folder
|
||||
New-Item -ItemType Directory -Path $OutputFolder -Force | Out-Null
|
||||
|
||||
# Get user objects
|
||||
Write-Host "[$(NowTag)] Retrieving user information..."
|
||||
try {
|
||||
$adUser1 = Get-ADUser -Identity $User1 -Properties MemberOf -ErrorAction Stop
|
||||
Write-Host "[$(NowTag)] User 1: $($adUser1.Name) ($($adUser1.SamAccountName))"
|
||||
} catch {
|
||||
Write-Host "[$(NowTag)] ERROR: Could not find user: $User1" -ForegroundColor Red
|
||||
exit 1
|
||||
}
|
||||
|
||||
try {
|
||||
$adUser2 = Get-ADUser -Identity $User2 -Properties MemberOf -ErrorAction Stop
|
||||
Write-Host "[$(NowTag)] User 2: $($adUser2.Name) ($($adUser2.SamAccountName))"
|
||||
} catch {
|
||||
Write-Host "[$(NowTag)] ERROR: Could not find user: $User2" -ForegroundColor Red
|
||||
exit 1
|
||||
}
|
||||
|
||||
# Get group memberships
|
||||
Write-Host "[$(NowTag)] Retrieving group memberships..."
|
||||
|
||||
$user1Groups = @()
|
||||
if ($adUser1.MemberOf) {
|
||||
foreach ($groupDN in $adUser1.MemberOf) {
|
||||
try {
|
||||
$group = Get-ADGroup -Identity $groupDN -Properties Description -ErrorAction SilentlyContinue
|
||||
if ($group) {
|
||||
$user1Groups += [PSCustomObject]@{
|
||||
Name = $group.Name
|
||||
DN = $group.DistinguishedName
|
||||
Description = $group.Description
|
||||
GroupScope = $group.GroupScope
|
||||
GroupCategory = $group.GroupCategory
|
||||
}
|
||||
}
|
||||
} catch {}
|
||||
}
|
||||
}
|
||||
|
||||
$user2Groups = @()
|
||||
if ($adUser2.MemberOf) {
|
||||
foreach ($groupDN in $adUser2.MemberOf) {
|
||||
try {
|
||||
$group = Get-ADGroup -Identity $groupDN -Properties Description -ErrorAction SilentlyContinue
|
||||
if ($group) {
|
||||
$user2Groups += [PSCustomObject]@{
|
||||
Name = $group.Name
|
||||
DN = $group.DistinguishedName
|
||||
Description = $group.Description
|
||||
GroupScope = $group.GroupScope
|
||||
GroupCategory = $group.GroupCategory
|
||||
}
|
||||
}
|
||||
} catch {}
|
||||
}
|
||||
}
|
||||
|
||||
Write-Host "[$(NowTag)] User 1 group count: $($user1Groups.Count)"
|
||||
Write-Host "[$(NowTag)] User 2 group count: $($user2Groups.Count)"
|
||||
|
||||
# Compare memberships
|
||||
$user1GroupNames = $user1Groups | Select-Object -ExpandProperty Name
|
||||
$user2GroupNames = $user2Groups | Select-Object -ExpandProperty Name
|
||||
|
||||
$uniqueToUser1 = $user1Groups | Where-Object { $_.Name -notin $user2GroupNames }
|
||||
$uniqueToUser2 = $user2Groups | Where-Object { $_.Name -notin $user1GroupNames }
|
||||
$commonGroups = $user1Groups | Where-Object { $_.Name -in $user2GroupNames }
|
||||
|
||||
# Export results
|
||||
Write-Host "[$(NowTag)] Exporting comparison results..."
|
||||
|
||||
# Unique to User 1
|
||||
if ($uniqueToUser1.Count -gt 0) {
|
||||
$file1 = Join-Path $OutputFolder "Groups-UniqueToUser1-$($adUser1.SamAccountName).csv"
|
||||
$uniqueToUser1 | Sort-Object Name | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $file1
|
||||
Write-Host "[$(NowTag)] Groups unique to $($adUser1.Name): $file1" -ForegroundColor Cyan
|
||||
}
|
||||
|
||||
# Unique to User 2
|
||||
if ($uniqueToUser2.Count -gt 0) {
|
||||
$file2 = Join-Path $OutputFolder "Groups-UniqueToUser2-$($adUser2.SamAccountName).csv"
|
||||
$uniqueToUser2 | Sort-Object Name | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $file2
|
||||
Write-Host "[$(NowTag)] Groups unique to $($adUser2.Name): $file2" -ForegroundColor Cyan
|
||||
}
|
||||
|
||||
# Common groups
|
||||
if ($ShowCommonGroups -and $commonGroups.Count -gt 0) {
|
||||
$fileCommon = Join-Path $OutputFolder "Groups-Common.csv"
|
||||
$commonGroups | Sort-Object Name | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $fileCommon
|
||||
Write-Host "[$(NowTag)] Common groups: $fileCommon" -ForegroundColor Green
|
||||
}
|
||||
|
||||
# Summary report
|
||||
$summaryFile = Join-Path $OutputFolder "Comparison-Summary.txt"
|
||||
$summary = @"
|
||||
Active Directory Group Membership Comparison
|
||||
Generated: $(Get-Date)
|
||||
|
||||
User 1: $($adUser1.Name) ($($adUser1.SamAccountName))
|
||||
User 2: $($adUser2.Name) ($($adUser2.SamAccountName))
|
||||
|
||||
SUMMARY:
|
||||
User 1 Total Groups: $($user1Groups.Count)
|
||||
User 2 Total Groups: $($user2Groups.Count)
|
||||
Common Groups: $($commonGroups.Count)
|
||||
Groups Unique to User 1: $($uniqueToUser1.Count)
|
||||
Groups Unique to User 2: $($uniqueToUser2.Count)
|
||||
|
||||
GROUPS UNIQUE TO USER 1 ($($adUser1.Name)):
|
||||
$($uniqueToUser1 | ForEach-Object { " - $($_.Name)" } | Out-String)
|
||||
|
||||
GROUPS UNIQUE TO USER 2 ($($adUser2.Name)):
|
||||
$($uniqueToUser2 | ForEach-Object { " - $($_.Name)" } | Out-String)
|
||||
|
||||
$(if ($ShowCommonGroups) {
|
||||
"COMMON GROUPS:
|
||||
$($commonGroups | ForEach-Object { " - $($_.Name)" } | Out-String)"
|
||||
} else { "" })
|
||||
"@
|
||||
|
||||
$summary | Out-File -FilePath $summaryFile -Encoding UTF8
|
||||
Write-Host "[$(NowTag)] Summary report: $summaryFile" -ForegroundColor Green
|
||||
|
||||
# Console output
|
||||
Write-Host "`nCOMPARISON RESULTS:" -ForegroundColor Cyan
|
||||
Write-Host " Common Groups: $($commonGroups.Count)" -ForegroundColor Green
|
||||
Write-Host " Unique to $($adUser1.Name): $($uniqueToUser1.Count)" -ForegroundColor Yellow
|
||||
Write-Host " Unique to $($adUser2.Name): $($uniqueToUser2.Count)" -ForegroundColor Yellow
|
||||
|
||||
if ($uniqueToUser1.Count -gt 0) {
|
||||
Write-Host "`nGroups Only in $($adUser1.Name):" -ForegroundColor Yellow
|
||||
$uniqueToUser1 | Select-Object -First 10 | ForEach-Object {
|
||||
Write-Host " - $($_.Name)"
|
||||
}
|
||||
if ($uniqueToUser1.Count -gt 10) {
|
||||
Write-Host " ... and $($uniqueToUser1.Count - 10) more (see CSV)"
|
||||
}
|
||||
}
|
||||
|
||||
if ($uniqueToUser2.Count -gt 0) {
|
||||
Write-Host "`nGroups Only in $($adUser2.Name):" -ForegroundColor Yellow
|
||||
$uniqueToUser2 | Select-Object -First 10 | ForEach-Object {
|
||||
Write-Host " - $($_.Name)"
|
||||
}
|
||||
if ($uniqueToUser2.Count -gt 10) {
|
||||
Write-Host " ... and $($uniqueToUser2.Count - 10) more (see CSV)"
|
||||
}
|
||||
}
|
||||
|
||||
Write-Host "`n[$(NowTag)] Comparison complete! Output folder: $OutputFolder"
|
||||
201
ActiveDirectory/Export-OUStructure.ps1
Normal file
201
ActiveDirectory/Export-OUStructure.ps1
Normal file
@ -0,0 +1,201 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Export Active Directory OU structure with GPO links
|
||||
|
||||
.DESCRIPTION
|
||||
Documents the complete OU hierarchy including GPO links, inheritance settings,
|
||||
and description. Useful for documentation, disaster recovery, or comparing
|
||||
environments.
|
||||
|
||||
.PARAMETER OutputFolder
|
||||
Destination folder for reports. Default: .\OU-Structure-<date>
|
||||
|
||||
.PARAMETER IncludeGPODetails
|
||||
Include detailed GPO information (default: $true)
|
||||
|
||||
.PARAMETER SearchBase
|
||||
Optional starting point for OU export (default: domain root)
|
||||
|
||||
.NOTES
|
||||
⚠️ AI-GENERATED SCRIPT - UNTESTED
|
||||
This script was generated by Claude AI and has not been tested in production.
|
||||
Review and test thoroughly in a non-production environment before use.
|
||||
|
||||
- Requires Active Directory PowerShell module
|
||||
- Run with appropriate AD permissions
|
||||
- Exports to both CSV (detailed) and TXT (tree view)
|
||||
|
||||
.EXAMPLE
|
||||
.\Export-OUStructure.ps1
|
||||
|
||||
.EXAMPLE
|
||||
.\Export-OUStructure.ps1 -SearchBase "OU=Departments,DC=domain,DC=com"
|
||||
#>
|
||||
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[string]$OutputFolder = (Join-Path -Path (Get-Location) -ChildPath ("OU-Structure-" + (Get-Date -Format "yyyyMMdd-HHmm"))),
|
||||
[bool]$IncludeGPODetails = $true,
|
||||
[string]$SearchBase = ""
|
||||
)
|
||||
|
||||
function NowTag { (Get-Date).ToString("yyyy-MM-dd HH:mm:ss") }
|
||||
|
||||
Write-Host "[$(NowTag)] ⚠️ AI-GENERATED SCRIPT - UNTESTED" -ForegroundColor Yellow
|
||||
Write-Host "[$(NowTag)] Exporting OU structure..." -ForegroundColor Green
|
||||
|
||||
# Import AD module
|
||||
try {
|
||||
Import-Module ActiveDirectory -ErrorAction Stop
|
||||
} catch {
|
||||
Write-Host "[$(NowTag)] ERROR: Active Directory module not available" -ForegroundColor Red
|
||||
exit 1
|
||||
}
|
||||
|
||||
# Create output folder
|
||||
New-Item -ItemType Directory -Path $OutputFolder -Force | Out-Null
|
||||
|
||||
# Get domain info
|
||||
$domain = Get-ADDomain
|
||||
if (-not $SearchBase) {
|
||||
$SearchBase = $domain.DistinguishedName
|
||||
}
|
||||
|
||||
Write-Host "[$(NowTag)] Domain: $($domain.DNSRoot)"
|
||||
Write-Host "[$(NowTag)] Search Base: $SearchBase"
|
||||
|
||||
# Get all OUs
|
||||
Write-Host "[$(NowTag)] Retrieving organizational units..."
|
||||
$ouParams = @{
|
||||
Filter = '*'
|
||||
SearchBase = $SearchBase
|
||||
Properties = @('Description', 'gPLink', 'gPOptions', 'ProtectedFromAccidentalDeletion', 'WhenCreated', 'WhenChanged')
|
||||
}
|
||||
|
||||
$ous = Get-ADOrganizationalUnit @ouParams | Sort-Object DistinguishedName
|
||||
|
||||
$ouCount = ($ous | Measure-Object).Count
|
||||
Write-Host "[$(NowTag)] Found $ouCount organizational unit(s)"
|
||||
|
||||
# Build GPO name lookup if requested
|
||||
$gpoLookup = @{}
|
||||
if ($IncludeGPODetails) {
|
||||
Write-Host "[$(NowTag)] Building GPO lookup table..."
|
||||
try {
|
||||
Import-Module GroupPolicy -ErrorAction Stop
|
||||
$gpos = Get-GPO -All -ErrorAction SilentlyContinue
|
||||
foreach ($gpo in $gpos) {
|
||||
$gpoLookup[$gpo.Id.ToString()] = $gpo.DisplayName
|
||||
}
|
||||
Write-Host "[$(NowTag)] Found $($gpos.Count) GPO(s)"
|
||||
} catch {
|
||||
Write-Host "[$(NowTag)] WARNING: Could not load GroupPolicy module - GPO names will show as GUIDs" -ForegroundColor Yellow
|
||||
}
|
||||
}
|
||||
|
||||
# Process OUs
|
||||
$ouDetails = @()
|
||||
$treeLines = @()
|
||||
|
||||
foreach ($ou in $ous) {
|
||||
# Calculate depth for tree view
|
||||
$depth = ($ou.DistinguishedName -split ',OU=').Count - 1
|
||||
$indent = " " * $depth
|
||||
|
||||
# Parse GPO links
|
||||
$gpoLinks = @()
|
||||
$gpoNames = @()
|
||||
|
||||
if ($ou.gPLink) {
|
||||
# gPLink format: [LDAP://cn={GUID},cn=policies,cn=system,DC=domain,DC=com;0]
|
||||
$links = $ou.gPLink -split '\]\[' -replace '^\[' -replace '\]$'
|
||||
|
||||
foreach ($link in $links) {
|
||||
if ($link -match '\{([^\}]+)\}') {
|
||||
$gpoGuid = $matches[1]
|
||||
$gpoName = if ($gpoLookup.ContainsKey($gpoGuid)) {
|
||||
$gpoLookup[$gpoGuid]
|
||||
} else {
|
||||
$gpoGuid
|
||||
}
|
||||
|
||||
# Parse link order and enforcement
|
||||
$linkOrder = if ($link -match ';(\d+)') { $matches[1] } else { "0" }
|
||||
$enforced = $linkOrder -band 1 # Bit 0 indicates enforcement
|
||||
$disabled = $linkOrder -band 2 # Bit 1 indicates disabled
|
||||
|
||||
$gpoNames += $gpoName
|
||||
$gpoLinks += [PSCustomObject]@{
|
||||
OU = $ou.Name
|
||||
GPOName = $gpoName
|
||||
GPOGUID = $gpoGuid
|
||||
LinkOrder = $linkOrder
|
||||
Enforced = ($enforced -eq 1)
|
||||
Disabled = ($disabled -eq 2)
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# GPO inheritance blocked?
|
||||
$inheritanceBlocked = ($ou.gPOptions -eq 1)
|
||||
|
||||
# Tree view line
|
||||
$protectedMark = if ($ou.ProtectedFromAccidentalDeletion) { "[P]" } else { "" }
|
||||
$inheritMark = if ($inheritanceBlocked) { "[BLOCKED]" } else { "" }
|
||||
$gpoMark = if ($gpoNames.Count -gt 0) { " (GPOs: $($gpoNames -join ', '))" } else { "" }
|
||||
|
||||
$treeLines += "$indent$($ou.Name) $protectedMark$inheritMark$gpoMark"
|
||||
|
||||
# Detailed record
|
||||
$ouDetails += [PSCustomObject]@{
|
||||
Name = $ou.Name
|
||||
DistinguishedName = $ou.DistinguishedName
|
||||
Description = $ou.Description
|
||||
ProtectedFromAccidentalDeletion = $ou.ProtectedFromAccidentalDeletion
|
||||
GPOInheritanceBlocked = $inheritanceBlocked
|
||||
LinkedGPOs = ($gpoNames -join "; ")
|
||||
LinkedGPOCount = $gpoNames.Count
|
||||
WhenCreated = $ou.WhenCreated
|
||||
WhenChanged = $ou.WhenChanged
|
||||
}
|
||||
}
|
||||
|
||||
# Export detailed CSV
|
||||
$csvFile = Join-Path $OutputFolder "OU-Structure.csv"
|
||||
$ouDetails | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $csvFile
|
||||
Write-Host "[$(NowTag)] OU details exported: $csvFile" -ForegroundColor Green
|
||||
|
||||
# Export GPO links if available
|
||||
if ($IncludeGPODetails -and $gpoLinks.Count -gt 0) {
|
||||
$gpoLinksFile = Join-Path $OutputFolder "OU-GPO-Links.csv"
|
||||
$gpoLinks | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $gpoLinksFile
|
||||
Write-Host "[$(NowTag)] GPO links exported: $gpoLinksFile" -ForegroundColor Green
|
||||
}
|
||||
|
||||
# Export tree view
|
||||
$treeFile = Join-Path $OutputFolder "OU-Tree.txt"
|
||||
$treeHeader = @"
|
||||
Active Directory OU Structure
|
||||
Domain: $($domain.DNSRoot)
|
||||
Search Base: $SearchBase
|
||||
Generated: $(Get-Date)
|
||||
|
||||
Legend:
|
||||
[P] = Protected from Accidental Deletion
|
||||
[BLOCKED] = GPO Inheritance Blocked
|
||||
|
||||
"@
|
||||
|
||||
$treeHeader | Out-File -FilePath $treeFile -Encoding UTF8
|
||||
$treeLines | Out-File -FilePath $treeFile -Encoding UTF8 -Append
|
||||
Write-Host "[$(NowTag)] Tree view exported: $treeFile" -ForegroundColor Green
|
||||
|
||||
# Summary
|
||||
Write-Host "`nOU STRUCTURE SUMMARY:" -ForegroundColor Cyan
|
||||
Write-Host " Total OUs: $ouCount"
|
||||
Write-Host " Protected OUs: $(($ouDetails | Where-Object ProtectedFromAccidentalDeletion).Count)"
|
||||
Write-Host " OUs with GPO Inheritance Blocked: $(($ouDetails | Where-Object GPOInheritanceBlocked).Count)"
|
||||
Write-Host " OUs with Linked GPOs: $(($ouDetails | Where-Object { $_.LinkedGPOCount -gt 0 }).Count)"
|
||||
|
||||
Write-Host "`n[$(NowTag)] Export complete! Output folder: $OutputFolder"
|
||||
185
ActiveDirectory/Get-ADUserLastLogon.ps1
Normal file
185
ActiveDirectory/Get-ADUserLastLogon.ps1
Normal file
@ -0,0 +1,185 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Report on inactive Active Directory user accounts based on true LastLogon
|
||||
|
||||
.DESCRIPTION
|
||||
Queries all domain controllers to find the most recent LastLogon time for users.
|
||||
The LastLogon attribute is not replicated, so each DC must be queried individually
|
||||
to get accurate results. Identifies accounts inactive for specified days.
|
||||
|
||||
.PARAMETER InactiveDays
|
||||
Number of days without logon to consider account inactive (default: 90)
|
||||
|
||||
.PARAMETER OutputFolder
|
||||
Destination folder for reports. Default: .\InactiveADUsers-<date>
|
||||
|
||||
.PARAMETER SearchBase
|
||||
Optional OU to limit search scope (default: entire domain)
|
||||
|
||||
.PARAMETER IncludeDisabled
|
||||
Include disabled accounts in the report (default: $false)
|
||||
|
||||
.NOTES
|
||||
⚠️ AI-GENERATED SCRIPT - UNTESTED
|
||||
This script was generated by Claude AI and has not been tested in production.
|
||||
Review and test thoroughly in a non-production environment before use.
|
||||
|
||||
- Requires Active Directory PowerShell module
|
||||
- Run with appropriate AD permissions
|
||||
- Can be slow in large environments (queries each DC)
|
||||
- LastLogon attribute is not replicated between DCs
|
||||
|
||||
.EXAMPLE
|
||||
.\Get-ADUserLastLogon.ps1
|
||||
|
||||
.EXAMPLE
|
||||
.\Get-ADUserLastLogon.ps1 -InactiveDays 180 -SearchBase "OU=Users,DC=domain,DC=com"
|
||||
#>
|
||||
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[int]$InactiveDays = 90,
|
||||
[string]$OutputFolder = (Join-Path -Path (Get-Location) -ChildPath ("InactiveADUsers-" + (Get-Date -Format "yyyyMMdd-HHmm"))),
|
||||
[string]$SearchBase = "",
|
||||
[bool]$IncludeDisabled = $false
|
||||
)
|
||||
|
||||
function NowTag { (Get-Date).ToString("yyyy-MM-dd HH:mm:ss") }
|
||||
|
||||
Write-Host "[$(NowTag)] ⚠️ AI-GENERATED SCRIPT - UNTESTED" -ForegroundColor Yellow
|
||||
Write-Host "[$(NowTag)] Starting AD user lastlogon analysis..." -ForegroundColor Green
|
||||
|
||||
# Import AD module
|
||||
try {
|
||||
Import-Module ActiveDirectory -ErrorAction Stop
|
||||
} catch {
|
||||
Write-Host "[$(NowTag)] ERROR: Active Directory module not available" -ForegroundColor Red
|
||||
exit 1
|
||||
}
|
||||
|
||||
# Create output folder
|
||||
New-Item -ItemType Directory -Path $OutputFolder -Force | Out-Null
|
||||
|
||||
$cutoffDate = (Get-Date).AddDays(-$InactiveDays)
|
||||
Write-Host "[$(NowTag)] Cutoff date: $($cutoffDate.ToString('yyyy-MM-dd'))"
|
||||
|
||||
# Get all domain controllers
|
||||
Write-Host "[$(NowTag)] Discovering domain controllers..."
|
||||
$domainControllers = Get-ADDomainController -Filter * | Select-Object -ExpandProperty HostName
|
||||
Write-Host "[$(NowTag)] Found $($domainControllers.Count) domain controller(s)"
|
||||
|
||||
# Get all users
|
||||
Write-Host "[$(NowTag)] Retrieving AD users..."
|
||||
$getUserParams = @{
|
||||
Filter = "ObjectClass -eq 'user' -and Enabled -eq 'True'"
|
||||
Properties = @('LastLogon', 'LastLogonDate', 'WhenCreated', 'Department', 'Title', 'Description', 'PasswordLastSet', 'PasswordNeverExpires', 'Enabled')
|
||||
}
|
||||
|
||||
if ($SearchBase) {
|
||||
$getUserParams['SearchBase'] = $SearchBase
|
||||
}
|
||||
|
||||
if ($IncludeDisabled) {
|
||||
$getUserParams['Filter'] = "ObjectClass -eq 'user'"
|
||||
}
|
||||
|
||||
$users = Get-ADUser @getUserParams
|
||||
$userCount = ($users | Measure-Object).Count
|
||||
Write-Host "[$(NowTag)] Found $userCount user(s) to analyze"
|
||||
|
||||
# Query each DC for LastLogon and find the most recent
|
||||
$userLogonData = @()
|
||||
$current = 0
|
||||
|
||||
foreach ($user in $users) {
|
||||
$current++
|
||||
$pct = [int](($current / $userCount) * 100)
|
||||
Write-Progress -Activity "Querying LastLogon from Domain Controllers" -Status "Processing $($user.SamAccountName) ($current/$userCount)" -PercentComplete $pct
|
||||
|
||||
$mostRecentLogon = $null
|
||||
|
||||
foreach ($dc in $domainControllers) {
|
||||
try {
|
||||
$userFromDC = Get-ADUser -Identity $user.SamAccountName -Server $dc -Properties LastLogon -ErrorAction SilentlyContinue
|
||||
|
||||
if ($userFromDC.LastLogon) {
|
||||
$logonDate = [DateTime]::FromFileTime($userFromDC.LastLogon)
|
||||
|
||||
if ($null -eq $mostRecentLogon -or $logonDate -gt $mostRecentLogon) {
|
||||
$mostRecentLogon = $logonDate
|
||||
}
|
||||
}
|
||||
} catch {
|
||||
Write-Verbose "Could not query $dc for $($user.SamAccountName)"
|
||||
}
|
||||
}
|
||||
|
||||
# Determine if inactive
|
||||
$isInactive = $false
|
||||
$reason = ""
|
||||
$daysSinceLogon = "N/A"
|
||||
|
||||
if ($null -eq $mostRecentLogon) {
|
||||
$isInactive = $true
|
||||
$reason = "Never logged on"
|
||||
} elseif ($mostRecentLogon -lt $cutoffDate) {
|
||||
$isInactive = $true
|
||||
$daysSinceLogon = [int]((Get-Date) - $mostRecentLogon).TotalDays
|
||||
$reason = "Last logon: $($mostRecentLogon.ToString('yyyy-MM-dd'))"
|
||||
} else {
|
||||
$daysSinceLogon = [int]((Get-Date) - $mostRecentLogon).TotalDays
|
||||
}
|
||||
|
||||
if ($isInactive) {
|
||||
$userLogonData += [PSCustomObject]@{
|
||||
SamAccountName = $user.SamAccountName
|
||||
DisplayName = $user.Name
|
||||
UserPrincipalName = $user.UserPrincipalName
|
||||
Enabled = $user.Enabled
|
||||
LastLogon = $mostRecentLogon
|
||||
DaysSinceLogon = $daysSinceLogon
|
||||
LastLogonDate = $user.LastLogonDate # Replicated attribute for comparison
|
||||
WhenCreated = $user.WhenCreated
|
||||
PasswordLastSet = $user.PasswordLastSet
|
||||
PasswordNeverExpires = $user.PasswordNeverExpires
|
||||
Department = $user.Department
|
||||
Title = $user.Title
|
||||
Description = $user.Description
|
||||
DistinguishedName = $user.DistinguishedName
|
||||
Reason = $reason
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Write-Progress -Activity "Querying LastLogon from Domain Controllers" -Completed
|
||||
|
||||
# Export results
|
||||
Write-Host "[$(NowTag)] Found $($userLogonData.Count) inactive user(s)"
|
||||
|
||||
if ($userLogonData.Count -gt 0) {
|
||||
$csvFile = Join-Path $OutputFolder "Inactive-ADUsers.csv"
|
||||
$userLogonData | Sort-Object DaysSinceLogon -Descending |
|
||||
Export-Csv -NoTypeInformation -Encoding UTF8 -Path $csvFile
|
||||
Write-Host "[$(NowTag)] Report exported: $csvFile" -ForegroundColor Green
|
||||
|
||||
# Summary statistics
|
||||
Write-Host "`nINACTIVE USER SUMMARY:" -ForegroundColor Cyan
|
||||
Write-Host " Total Inactive Users: $($userLogonData.Count)"
|
||||
Write-Host " Never Logged On: $(($userLogonData | Where-Object { $_.DaysSinceLogon -eq 'N/A' }).Count)"
|
||||
Write-Host " Enabled Accounts: $(($userLogonData | Where-Object Enabled).Count)"
|
||||
Write-Host " Disabled Accounts: $(($userLogonData | Where-Object { -not $_.Enabled }).Count)"
|
||||
Write-Host " Password Never Expires: $(($userLogonData | Where-Object PasswordNeverExpires).Count)"
|
||||
|
||||
# By department
|
||||
$byDept = $userLogonData | Where-Object Department | Group-Object Department | Sort-Object Count -Descending | Select-Object -First 5
|
||||
if ($byDept) {
|
||||
Write-Host "`nTop 5 Departments with Inactive Users:" -ForegroundColor Cyan
|
||||
$byDept | ForEach-Object {
|
||||
Write-Host " $($_.Name): $($_.Count)"
|
||||
}
|
||||
}
|
||||
} else {
|
||||
Write-Host "[$(NowTag)] No inactive users found!" -ForegroundColor Green
|
||||
}
|
||||
|
||||
Write-Host "`n[$(NowTag)] Analysis complete! Output folder: $OutputFolder"
|
||||
37
CLAUDE.md
37
CLAUDE.md
@ -107,8 +107,45 @@ These are operational scripts without formal test frameworks. When modifying:
|
||||
2. **VSS script**: Test service restart logic on non-critical systems
|
||||
3. **AD scripts**: Use test groups before production deployment
|
||||
|
||||
## AI-Generated Scripts (UNTESTED)
|
||||
|
||||
The following scripts were generated by Claude AI in 2025 and have **NOT been tested in production environments**. They should be thoroughly reviewed and tested in non-production environments before use:
|
||||
|
||||
### Exchange Scripts (AI-Generated)
|
||||
- **Get-MailboxPermissions.ps1** - Audits SendAs, SendOnBehalf, and FullAccess permissions
|
||||
- **Get-InactiveMailboxes.ps1** - Identifies stale mailboxes based on LastLogonTime threshold
|
||||
- **Compare-MailboxDatabases.ps1** - Database health comparison with alerting (whitespace, backup age)
|
||||
- **Export-DistributionGroups.ps1** - Complete distribution group inventory with members
|
||||
- **Get-MailflowStats.ps1** - Transport log analysis for message flow patterns and anomalies
|
||||
|
||||
### Active Directory Scripts (AI-Generated)
|
||||
- **Get-ADUserLastLogon.ps1** - True LastLogon query across all DCs (non-replicated attribute)
|
||||
- **Export-OUStructure.ps1** - OU hierarchy documentation with GPO links
|
||||
- **Compare-ADGroupMemberships.ps1** - Group membership comparison between two users
|
||||
|
||||
### System Maintenance Scripts (AI-Generated)
|
||||
- **Get-ServerInventory.ps1** - Comprehensive hardware/software inventory with Word/HTML report
|
||||
- **Monitor-DiskSpace.ps1** - Disk space monitoring with alerting and optional email
|
||||
- **Backup-ExchangeCertificates.ps1** - Certificate export to PFX with expiry warnings
|
||||
- **Test-ExchangeHealth.ps1** - Aggregated Exchange health checks (services, replication, MAPI, databases)
|
||||
|
||||
### AI-Generated Script Patterns
|
||||
These scripts follow the established patterns from the original scripts:
|
||||
- Similar report generation (Word COM with HTML fallback where applicable)
|
||||
- Progress tracking for long-running operations
|
||||
- CSV export capabilities
|
||||
- `-ErrorAction SilentlyContinue` for graceful degradation
|
||||
- Comprehensive parameter documentation and examples
|
||||
- Prominent "⚠️ AI-GENERATED SCRIPT - UNTESTED" warnings in output
|
||||
|
||||
**Testing Requirements**: All AI-generated scripts include detailed `.NOTES` sections with testing guidance. Pay special attention to:
|
||||
- Permission requirements (RBAC, AD rights, Administrator)
|
||||
- Performance impact (LastLogon queries across DCs, log parsing)
|
||||
- Environment-specific assumptions (paths, IP ranges, thresholds)
|
||||
|
||||
## Important Constraints
|
||||
|
||||
- Scripts are environment-specific (hardcoded paths like `C:\Program Files\Microsoft\Exchange Server\V15\...`)
|
||||
- Exchange-Inventory.ps1 assumes specific Exchange cmdlet availability
|
||||
- Get-SMTPTraffic.ps1 filters for specific IP range (192.168.1.*) - modify for different networks
|
||||
- AI-generated scripts have NOT been validated in production and require thorough testing
|
||||
|
||||
190
Exchange/Compare-MailboxDatabases.ps1
Normal file
190
Exchange/Compare-MailboxDatabases.ps1
Normal file
@ -0,0 +1,190 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Compare health metrics across all Exchange mailbox databases
|
||||
|
||||
.DESCRIPTION
|
||||
Generates a comparison report of database sizes, whitespace, mount status,
|
||||
backup age, and circular logging settings. Alerts on databases exceeding
|
||||
thresholds or with configuration issues.
|
||||
|
||||
.PARAMETER WhitespaceThresholdGB
|
||||
Alert if available whitespace exceeds this value (default: 50)
|
||||
|
||||
.PARAMETER BackupAgeThresholdDays
|
||||
Alert if last backup is older than this many days (default: 2)
|
||||
|
||||
.PARAMETER OutputFolder
|
||||
Destination folder for reports. Default: .\DatabaseComparison-<date>
|
||||
|
||||
.NOTES
|
||||
⚠️ AI-GENERATED SCRIPT - UNTESTED
|
||||
This script was generated by Claude AI and has not been tested in production.
|
||||
Review and test thoroughly in a non-production environment before use.
|
||||
|
||||
- Run in Exchange Management Shell with appropriate RBAC permissions
|
||||
- Requires -Status parameter support (Get-MailboxDatabase -Status)
|
||||
- Tested compatibility: Exchange 2013/2016/2019 (not validated)
|
||||
|
||||
.EXAMPLE
|
||||
.\Compare-MailboxDatabases.ps1
|
||||
|
||||
.EXAMPLE
|
||||
.\Compare-MailboxDatabases.ps1 -WhitespaceThresholdGB 100 -BackupAgeThresholdDays 1
|
||||
#>
|
||||
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[int]$WhitespaceThresholdGB = 50,
|
||||
[int]$BackupAgeThresholdDays = 2,
|
||||
[string]$OutputFolder = (Join-Path -Path (Get-Location) -ChildPath ("DatabaseComparison-" + (Get-Date -Format "yyyyMMdd-HHmm")))
|
||||
)
|
||||
|
||||
function NowTag { (Get-Date).ToString("yyyy-MM-dd HH:mm:ss") }
|
||||
|
||||
function Convert-BytesToGB([string]$sizeStr) {
|
||||
if (-not $sizeStr) { return 0 }
|
||||
try {
|
||||
if ($sizeStr -match "([\d\.,]+)\s*(KB|MB|GB|TB)") {
|
||||
$num = [double]($matches[1] -replace ',', '.')
|
||||
$bytes = switch ($matches[2].ToUpper()) {
|
||||
"KB" { $num * 1KB }
|
||||
"MB" { $num * 1MB }
|
||||
"GB" { $num * 1GB }
|
||||
"TB" { $num * 1TB }
|
||||
}
|
||||
return [math]::Round($bytes / 1GB, 2)
|
||||
}
|
||||
} catch {}
|
||||
return 0
|
||||
}
|
||||
|
||||
Write-Host "[$(NowTag)] ⚠️ AI-GENERATED SCRIPT - UNTESTED" -ForegroundColor Yellow
|
||||
Write-Host "[$(NowTag)] Starting database comparison analysis..." -ForegroundColor Green
|
||||
|
||||
# Create output folder
|
||||
New-Item -ItemType Directory -Path $OutputFolder -Force | Out-Null
|
||||
|
||||
# Get all databases with status
|
||||
Write-Host "[$(NowTag)] Retrieving mailbox databases..."
|
||||
$databases = Get-MailboxDatabase -Status -ErrorAction SilentlyContinue | Sort-Object Name
|
||||
|
||||
$dbCount = ($databases | Measure-Object).Count
|
||||
Write-Host "[$(NowTag)] Found $dbCount databases"
|
||||
|
||||
# Analyze each database
|
||||
$dbAnalysis = @()
|
||||
$alerts = @()
|
||||
|
||||
foreach ($db in $databases) {
|
||||
Write-Host "[$(NowTag)] Analyzing $($db.Name)..."
|
||||
|
||||
$dbSizeGB = Convert-BytesToGB ([string]$db.DatabaseSize)
|
||||
$whitespaceGB = Convert-BytesToGB ([string]$db.AvailableNewMailboxSpace)
|
||||
|
||||
$backupAge = $null
|
||||
$backupStatus = "Unknown"
|
||||
if ($db.LastFullBackup) {
|
||||
$backupAge = [int]((Get-Date) - $db.LastFullBackup).TotalDays
|
||||
$backupStatus = if ($backupAge -le $BackupAgeThresholdDays) { "OK" } else { "OLD" }
|
||||
} else {
|
||||
$backupStatus = "NEVER"
|
||||
}
|
||||
|
||||
# Generate alerts
|
||||
$dbAlerts = @()
|
||||
|
||||
if (-not $db.Mounted) {
|
||||
$dbAlerts += "Database is DISMOUNTED"
|
||||
$alerts += [PSCustomObject]@{
|
||||
Database = $db.Name
|
||||
Severity = "CRITICAL"
|
||||
Alert = "Database is dismounted"
|
||||
}
|
||||
}
|
||||
|
||||
if ($whitespaceGB -gt $WhitespaceThresholdGB) {
|
||||
$dbAlerts += "Excessive whitespace: $whitespaceGB GB"
|
||||
$alerts += [PSCustomObject]@{
|
||||
Database = $db.Name
|
||||
Severity = "WARNING"
|
||||
Alert = "Excessive whitespace: $whitespaceGB GB (threshold: $WhitespaceThresholdGB GB)"
|
||||
}
|
||||
}
|
||||
|
||||
if ($backupStatus -eq "NEVER") {
|
||||
$dbAlerts += "Never backed up"
|
||||
$alerts += [PSCustomObject]@{
|
||||
Database = $db.Name
|
||||
Severity = "CRITICAL"
|
||||
Alert = "Database has never been backed up"
|
||||
}
|
||||
} elseif ($backupStatus -eq "OLD") {
|
||||
$dbAlerts += "Backup is $backupAge days old"
|
||||
$alerts += [PSCustomObject]@{
|
||||
Database = $db.Name
|
||||
Severity = "WARNING"
|
||||
Alert = "Last backup is $backupAge days old (threshold: $BackupAgeThresholdDays days)"
|
||||
}
|
||||
}
|
||||
|
||||
if ($db.CircularLoggingEnabled) {
|
||||
$dbAlerts += "Circular logging enabled"
|
||||
$alerts += [PSCustomObject]@{
|
||||
Database = $db.Name
|
||||
Severity = "INFO"
|
||||
Alert = "Circular logging is enabled"
|
||||
}
|
||||
}
|
||||
|
||||
$dbAnalysis += [PSCustomObject]@{
|
||||
Database = $db.Name
|
||||
Server = $db.Server
|
||||
Mounted = $db.Mounted
|
||||
DatabaseSizeGB = $dbSizeGB
|
||||
WhitespaceGB = $whitespaceGB
|
||||
WhitespacePercent = if ($dbSizeGB -gt 0) { [math]::Round(($whitespaceGB / $dbSizeGB) * 100, 2) } else { 0 }
|
||||
CircularLogging = $db.CircularLoggingEnabled
|
||||
LastFullBackup = $db.LastFullBackup
|
||||
BackupAgeDays = $backupAge
|
||||
BackupStatus = $backupStatus
|
||||
EdbFilePath = $db.EdbFilePath
|
||||
LogFolderPath = $db.LogFolderPath
|
||||
Alerts = ($dbAlerts -join "; ")
|
||||
}
|
||||
}
|
||||
|
||||
# Export full analysis
|
||||
$csvFile = Join-Path $OutputFolder "Database-Comparison.csv"
|
||||
$dbAnalysis | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $csvFile
|
||||
Write-Host "[$(NowTag)] Database analysis exported: $csvFile" -ForegroundColor Green
|
||||
|
||||
# Export alerts
|
||||
if ($alerts.Count -gt 0) {
|
||||
$alertsFile = Join-Path $OutputFolder "Database-Alerts.csv"
|
||||
$alerts | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $alertsFile
|
||||
Write-Host "[$(NowTag)] Alerts exported: $alertsFile" -ForegroundColor Yellow
|
||||
|
||||
Write-Host "`nALERTS FOUND:" -ForegroundColor Yellow
|
||||
$alerts | Group-Object Severity | ForEach-Object {
|
||||
Write-Host " $($_.Name): $($_.Count) alert(s)" -ForegroundColor $(
|
||||
switch ($_.Name) {
|
||||
"CRITICAL" { "Red" }
|
||||
"WARNING" { "Yellow" }
|
||||
default { "Cyan" }
|
||||
}
|
||||
)
|
||||
}
|
||||
} else {
|
||||
Write-Host "`n[$(NowTag)] No alerts found - all databases healthy!" -ForegroundColor Green
|
||||
}
|
||||
|
||||
# Summary statistics
|
||||
Write-Host "`nDATABASE SUMMARY:" -ForegroundColor Cyan
|
||||
Write-Host " Total Databases: $dbCount"
|
||||
Write-Host " Mounted: $(($dbAnalysis | Where-Object Mounted).Count)"
|
||||
Write-Host " Dismounted: $(($dbAnalysis | Where-Object { -not $_.Mounted }).Count)"
|
||||
Write-Host " Total Size: $([math]::Round(($dbAnalysis | Measure-Object DatabaseSizeGB -Sum).Sum, 2)) GB"
|
||||
Write-Host " Total Whitespace: $([math]::Round(($dbAnalysis | Measure-Object WhitespaceGB -Sum).Sum, 2)) GB"
|
||||
Write-Host " Circular Logging Enabled: $(($dbAnalysis | Where-Object CircularLogging).Count)"
|
||||
|
||||
Write-Host "`n[$(NowTag)] Analysis complete! Output folder: $OutputFolder"
|
||||
163
Exchange/Export-DistributionGroups.ps1
Normal file
163
Exchange/Export-DistributionGroups.ps1
Normal file
@ -0,0 +1,163 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Export complete inventory of distribution groups with members and settings
|
||||
|
||||
.DESCRIPTION
|
||||
Documents all distribution groups including members, owners, email addresses,
|
||||
and key settings. Useful for migration planning, documentation, or backup.
|
||||
|
||||
.PARAMETER OutputFolder
|
||||
Destination folder for reports. Default: .\DistributionGroups-<date>
|
||||
|
||||
.PARAMETER IncludeMembers
|
||||
Include detailed member lists (default: $true, can be slow)
|
||||
|
||||
.PARAMETER GroupFilter
|
||||
Optional filter for specific groups (default: all)
|
||||
|
||||
.NOTES
|
||||
⚠️ AI-GENERATED SCRIPT - UNTESTED
|
||||
This script was generated by Claude AI and has not been tested in production.
|
||||
Review and test thoroughly in a non-production environment before use.
|
||||
|
||||
- Run in Exchange Management Shell with appropriate RBAC permissions
|
||||
- Large environments may take significant time
|
||||
- Includes both Distribution Groups and Mail-Enabled Security Groups
|
||||
|
||||
.EXAMPLE
|
||||
.\Export-DistributionGroups.ps1
|
||||
|
||||
.EXAMPLE
|
||||
.\Export-DistributionGroups.ps1 -GroupFilter "Sales*" -OutputFolder "D:\Reports\Groups"
|
||||
#>
|
||||
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[string]$OutputFolder = (Join-Path -Path (Get-Location) -ChildPath ("DistributionGroups-" + (Get-Date -Format "yyyyMMdd-HHmm"))),
|
||||
[bool]$IncludeMembers = $true,
|
||||
[string]$GroupFilter = "*"
|
||||
)
|
||||
|
||||
function NowTag { (Get-Date).ToString("yyyy-MM-dd HH:mm:ss") }
|
||||
|
||||
Write-Host "[$(NowTag)] ⚠️ AI-GENERATED SCRIPT - UNTESTED" -ForegroundColor Yellow
|
||||
Write-Host "[$(NowTag)] Starting distribution group export..." -ForegroundColor Green
|
||||
|
||||
# Create output folder
|
||||
New-Item -ItemType Directory -Path $OutputFolder -Force | Out-Null
|
||||
|
||||
# Get distribution groups
|
||||
Write-Host "[$(NowTag)] Retrieving distribution groups..."
|
||||
$groups = Get-DistributionGroup -Filter "Name -like '$GroupFilter'" -ResultSize Unlimited -ErrorAction SilentlyContinue
|
||||
|
||||
$groupCount = ($groups | Measure-Object).Count
|
||||
Write-Host "[$(NowTag)] Found $groupCount distribution groups"
|
||||
|
||||
if ($groupCount -eq 0) {
|
||||
Write-Host "[$(NowTag)] No groups found matching filter: $GroupFilter" -ForegroundColor Yellow
|
||||
exit
|
||||
}
|
||||
|
||||
# Collect group details
|
||||
$groupDetails = @()
|
||||
$groupMembers = @()
|
||||
|
||||
$current = 0
|
||||
foreach ($group in $groups) {
|
||||
$current++
|
||||
$pct = [int](($current / $groupCount) * 100)
|
||||
Write-Progress -Activity "Processing Distribution Groups" -Status "Processing $($group.Name) ($current/$groupCount)" -PercentComplete $pct
|
||||
|
||||
# Get managed by
|
||||
$managedByList = @()
|
||||
if ($group.ManagedBy) {
|
||||
foreach ($mgr in $group.ManagedBy) {
|
||||
try {
|
||||
$mgrObj = Get-Recipient $mgr -ErrorAction SilentlyContinue
|
||||
if ($mgrObj) {
|
||||
$managedByList += $mgrObj.PrimarySmtpAddress
|
||||
}
|
||||
} catch {}
|
||||
}
|
||||
}
|
||||
|
||||
# Get email addresses
|
||||
$emailAddresses = ($group.EmailAddresses | Where-Object { $_ -like "smtp:*" }) -join "; "
|
||||
|
||||
# Get member count
|
||||
$memberCount = 0
|
||||
try {
|
||||
$members = Get-DistributionGroupMember -Identity $group.Identity -ResultSize Unlimited -ErrorAction SilentlyContinue
|
||||
$memberCount = ($members | Measure-Object).Count
|
||||
|
||||
# Collect member details if requested
|
||||
if ($IncludeMembers -and $members) {
|
||||
foreach ($member in $members) {
|
||||
$groupMembers += [PSCustomObject]@{
|
||||
GroupName = $group.Name
|
||||
GroupPrimarySmtp = $group.PrimarySmtpAddress
|
||||
MemberName = $member.Name
|
||||
MemberPrimarySmtp = $member.PrimarySmtpAddress
|
||||
MemberType = $member.RecipientType
|
||||
}
|
||||
}
|
||||
}
|
||||
} catch {
|
||||
Write-Host "[$(NowTag)] WARNING: Could not get members for $($group.Name)" -ForegroundColor Yellow
|
||||
}
|
||||
|
||||
$groupDetails += [PSCustomObject]@{
|
||||
Name = $group.Name
|
||||
DisplayName = $group.DisplayName
|
||||
Alias = $group.Alias
|
||||
PrimarySmtpAddress = $group.PrimarySmtpAddress
|
||||
EmailAddresses = $emailAddresses
|
||||
RecipientTypeDetails = $group.RecipientTypeDetails
|
||||
MemberCount = $memberCount
|
||||
ManagedBy = ($managedByList -join "; ")
|
||||
RequireSenderAuthentication = $group.RequireSenderAuthenticationEnabled
|
||||
HiddenFromAddressLists = $group.HiddenFromAddressListsEnabled
|
||||
ModerationEnabled = $group.ModerationEnabled
|
||||
SendModerationNotifications = $group.SendModerationNotifications
|
||||
AcceptMessagesOnlyFrom = (($group.AcceptMessagesOnlyFrom | ForEach-Object { $_.ToString() }) -join "; ")
|
||||
RejectMessagesFrom = (($group.RejectMessagesFrom | ForEach-Object { $_.ToString() }) -join "; ")
|
||||
BypassModerationFromSenders = (($group.BypassModerationFromSendersOrMembers | ForEach-Object { $_.ToString() }) -join "; ")
|
||||
WhenCreated = $group.WhenCreated
|
||||
WhenChanged = $group.WhenChanged
|
||||
OrganizationalUnit = $group.OrganizationalUnit
|
||||
}
|
||||
}
|
||||
|
||||
Write-Progress -Activity "Processing Distribution Groups" -Completed
|
||||
|
||||
# Export results
|
||||
Write-Host "[$(NowTag)] Exporting results..."
|
||||
|
||||
$groupsFile = Join-Path $OutputFolder "DistributionGroups.csv"
|
||||
$groupDetails | Sort-Object Name | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $groupsFile
|
||||
Write-Host "[$(NowTag)] Groups exported: $groupsFile" -ForegroundColor Green
|
||||
|
||||
if ($IncludeMembers -and $groupMembers.Count -gt 0) {
|
||||
$membersFile = Join-Path $OutputFolder "DistributionGroup-Members.csv"
|
||||
$groupMembers | Sort-Object GroupName, MemberName | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $membersFile
|
||||
Write-Host "[$(NowTag)] Members exported: $membersFile" -ForegroundColor Green
|
||||
}
|
||||
|
||||
# Summary
|
||||
Write-Host "`nSUMMARY:" -ForegroundColor Cyan
|
||||
Write-Host " Total Groups: $groupCount"
|
||||
Write-Host " Total Members: $($groupMembers.Count)"
|
||||
Write-Host " Hidden from Address Lists: $(($groupDetails | Where-Object HiddenFromAddressLists).Count)"
|
||||
Write-Host " Moderation Enabled: $(($groupDetails | Where-Object ModerationEnabled).Count)"
|
||||
Write-Host " Security Groups: $(($groupDetails | Where-Object { $_.RecipientTypeDetails -like '*Security*' }).Count)"
|
||||
|
||||
# Top 10 largest groups
|
||||
$top10 = $groupDetails | Sort-Object MemberCount -Descending | Select-Object -First 10
|
||||
if ($top10) {
|
||||
Write-Host "`nTop 10 Largest Groups:" -ForegroundColor Cyan
|
||||
$top10 | ForEach-Object {
|
||||
Write-Host " $($_.Name): $($_.MemberCount) members"
|
||||
}
|
||||
}
|
||||
|
||||
Write-Host "`n[$(NowTag)] Export complete! Output folder: $OutputFolder"
|
||||
191
Exchange/Get-InactiveMailboxes.ps1
Normal file
191
Exchange/Get-InactiveMailboxes.ps1
Normal file
@ -0,0 +1,191 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Identify inactive mailboxes based on LastLogonTime
|
||||
|
||||
.DESCRIPTION
|
||||
Finds mailboxes with no logon activity within specified days.
|
||||
Useful for identifying stale accounts, cost optimization, and cleanup planning.
|
||||
|
||||
.PARAMETER InactiveDays
|
||||
Number of days without logon to consider mailbox inactive (default: 90)
|
||||
|
||||
.PARAMETER OutputFolder
|
||||
Destination folder for reports. Default: .\InactiveMailboxes-<date>
|
||||
|
||||
.PARAMETER IncludeShared
|
||||
Include shared mailboxes in the report (default: $false)
|
||||
|
||||
.PARAMETER IncludeSize
|
||||
Include mailbox size information (slower, default: $true)
|
||||
|
||||
.NOTES
|
||||
⚠️ AI-GENERATED SCRIPT - UNTESTED
|
||||
This script was generated by Claude AI and has not been tested in production.
|
||||
Review and test thoroughly in a non-production environment before use.
|
||||
|
||||
- Run in Exchange Management Shell with appropriate RBAC permissions
|
||||
- LastLogonTime may be null for never-accessed mailboxes
|
||||
- Size calculation can be slow with large mailbox counts
|
||||
|
||||
.EXAMPLE
|
||||
.\Get-InactiveMailboxes.ps1
|
||||
|
||||
.EXAMPLE
|
||||
.\Get-InactiveMailboxes.ps1 -InactiveDays 180 -IncludeShared $true
|
||||
#>
|
||||
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[int]$InactiveDays = 90,
|
||||
[string]$OutputFolder = (Join-Path -Path (Get-Location) -ChildPath ("InactiveMailboxes-" + (Get-Date -Format "yyyyMMdd-HHmm"))),
|
||||
[bool]$IncludeShared = $false,
|
||||
[bool]$IncludeSize = $true
|
||||
)
|
||||
|
||||
function NowTag { (Get-Date).ToString("yyyy-MM-dd HH:mm:ss") }
|
||||
|
||||
Write-Host "[$(NowTag)] ⚠️ AI-GENERATED SCRIPT - UNTESTED" -ForegroundColor Yellow
|
||||
Write-Host "[$(NowTag)] Searching for mailboxes inactive for $InactiveDays+ days..." -ForegroundColor Green
|
||||
|
||||
# Create output folder
|
||||
New-Item -ItemType Directory -Path $OutputFolder -Force | Out-Null
|
||||
|
||||
$cutoffDate = (Get-Date).AddDays(-$InactiveDays)
|
||||
Write-Host "[$(NowTag)] Cutoff date: $($cutoffDate.ToString('yyyy-MM-dd'))"
|
||||
|
||||
# Get mailboxes
|
||||
Write-Host "[$(NowTag)] Retrieving mailboxes..."
|
||||
$filter = if ($IncludeShared) {
|
||||
{ RecipientTypeDetails -notmatch "^Remote" -and Database }
|
||||
} else {
|
||||
{ RecipientTypeDetails -eq "UserMailbox" -and Database }
|
||||
}
|
||||
|
||||
$mailboxes = Get-Mailbox -ResultSize Unlimited -ErrorAction SilentlyContinue |
|
||||
Where-Object $filter
|
||||
|
||||
$mbCount = ($mailboxes | Measure-Object).Count
|
||||
Write-Host "[$(NowTag)] Found $mbCount mailboxes to check"
|
||||
|
||||
# Get statistics per database to avoid prompts
|
||||
Write-Host "[$(NowTag)] Retrieving mailbox statistics..."
|
||||
$statsByDb = @{}
|
||||
$databases = ($mailboxes.Database | Sort-Object -Unique)
|
||||
|
||||
$dbIdx = 0
|
||||
foreach ($db in $databases) {
|
||||
$dbIdx++
|
||||
Write-Progress -Activity "Collecting Mailbox Statistics" -Status "Database $db ($dbIdx/$($databases.Count))" -PercentComplete ([int](($dbIdx / $databases.Count) * 100))
|
||||
|
||||
try {
|
||||
$stats = Get-MailboxStatistics -Database $db -ErrorAction SilentlyContinue
|
||||
foreach ($stat in $stats) {
|
||||
$statsByDb[$stat.DisplayName] = $stat
|
||||
}
|
||||
} catch {
|
||||
Write-Host "[$(NowTag)] WARNING: Could not get statistics for database $db" -ForegroundColor Yellow
|
||||
}
|
||||
}
|
||||
|
||||
Write-Progress -Activity "Collecting Mailbox Statistics" -Completed
|
||||
|
||||
# Analyze for inactive mailboxes
|
||||
Write-Host "[$(NowTag)] Analyzing mailbox activity..."
|
||||
$inactiveMailboxes = @()
|
||||
|
||||
$current = 0
|
||||
foreach ($mb in $mailboxes) {
|
||||
$current++
|
||||
$pct = [int](($current / $mbCount) * 100)
|
||||
Write-Progress -Activity "Analyzing Mailboxes" -Status "Processing $($mb.DisplayName) ($current/$mbCount)" -PercentComplete $pct
|
||||
|
||||
$stat = $statsByDb[$mb.DisplayName]
|
||||
|
||||
$lastLogon = if ($stat) { $stat.LastLogonTime } else { $null }
|
||||
$isInactive = $false
|
||||
$reason = ""
|
||||
|
||||
if ($null -eq $lastLogon) {
|
||||
$isInactive = $true
|
||||
$reason = "Never logged on"
|
||||
} elseif ($lastLogon -lt $cutoffDate) {
|
||||
$isInactive = $true
|
||||
$reason = "Last logon: $($lastLogon.ToString('yyyy-MM-dd'))"
|
||||
}
|
||||
|
||||
if ($isInactive) {
|
||||
$daysSinceLogon = if ($lastLogon) {
|
||||
[int]((Get-Date) - $lastLogon).TotalDays
|
||||
} else {
|
||||
"N/A"
|
||||
}
|
||||
|
||||
$size = $null
|
||||
$itemCount = $null
|
||||
|
||||
if ($IncludeSize -and $stat) {
|
||||
$size = $stat.TotalItemSize
|
||||
$itemCount = $stat.ItemCount
|
||||
}
|
||||
|
||||
$inactiveMailboxes += [PSCustomObject]@{
|
||||
DisplayName = $mb.DisplayName
|
||||
PrimarySmtpAddress = $mb.PrimarySmtpAddress
|
||||
RecipientTypeDetails = $mb.RecipientTypeDetails
|
||||
Database = $mb.Database
|
||||
LastLogonTime = $lastLogon
|
||||
DaysSinceLogon = $daysSinceLogon
|
||||
WhenCreated = $mb.WhenCreated
|
||||
TotalItemSize = $size
|
||||
ItemCount = $itemCount
|
||||
Reason = $reason
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Write-Progress -Activity "Analyzing Mailboxes" -Completed
|
||||
|
||||
# Export results
|
||||
Write-Host "[$(NowTag)] Found $($inactiveMailboxes.Count) inactive mailboxes"
|
||||
|
||||
if ($inactiveMailboxes.Count -gt 0) {
|
||||
$csvFile = Join-Path $OutputFolder "Inactive-Mailboxes.csv"
|
||||
$inactiveMailboxes | Sort-Object DaysSinceLogon -Descending |
|
||||
Export-Csv -NoTypeInformation -Encoding UTF8 -Path $csvFile
|
||||
Write-Host "[$(NowTag)] Report exported: $csvFile" -ForegroundColor Green
|
||||
|
||||
# Summary by type
|
||||
$byType = $inactiveMailboxes | Group-Object RecipientTypeDetails
|
||||
Write-Host "`nInactive Mailboxes by Type:"
|
||||
foreach ($type in $byType) {
|
||||
Write-Host " $($type.Name): $($type.Count)"
|
||||
}
|
||||
|
||||
# Calculate potential storage savings
|
||||
if ($IncludeSize) {
|
||||
$totalBytes = 0
|
||||
foreach ($mb in $inactiveMailboxes) {
|
||||
if ($mb.TotalItemSize) {
|
||||
try {
|
||||
$sizeStr = [string]$mb.TotalItemSize
|
||||
if ($sizeStr -match "([\d\.,]+)\s*(KB|MB|GB|TB)") {
|
||||
$num = [double]($matches[1] -replace ',', '.')
|
||||
$bytes = switch ($matches[2].ToUpper()) {
|
||||
"KB" { $num * 1KB }
|
||||
"MB" { $num * 1MB }
|
||||
"GB" { $num * 1GB }
|
||||
"TB" { $num * 1TB }
|
||||
}
|
||||
$totalBytes += $bytes
|
||||
}
|
||||
} catch {}
|
||||
}
|
||||
}
|
||||
$totalGB = [math]::Round($totalBytes / 1GB, 2)
|
||||
Write-Host "`nPotential storage savings: $totalGB GB" -ForegroundColor Cyan
|
||||
}
|
||||
} else {
|
||||
Write-Host "[$(NowTag)] No inactive mailboxes found!" -ForegroundColor Green
|
||||
}
|
||||
|
||||
Write-Host "`n[$(NowTag)] Analysis complete! Output folder: $OutputFolder"
|
||||
173
Exchange/Get-MailboxPermissions.ps1
Normal file
173
Exchange/Get-MailboxPermissions.ps1
Normal file
@ -0,0 +1,173 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Audit mailbox delegate access permissions across Exchange environment
|
||||
|
||||
.DESCRIPTION
|
||||
Reports on SendAs, SendOnBehalf, and FullAccess permissions for all mailboxes.
|
||||
Useful for security audits, compliance reviews, and migration planning.
|
||||
|
||||
.PARAMETER OutputFolder
|
||||
Destination folder for CSV reports. Default: .\MailboxPermissions-<date>
|
||||
|
||||
.PARAMETER MailboxFilter
|
||||
Optional filter for specific mailboxes. Default: all on-premises mailboxes
|
||||
|
||||
.PARAMETER IncludeInherited
|
||||
Include inherited permissions in the report (default: $false)
|
||||
|
||||
.NOTES
|
||||
⚠️ AI-GENERATED SCRIPT - UNTESTED
|
||||
This script was generated by Claude AI and has not been tested in production.
|
||||
Review and test thoroughly in a non-production environment before use.
|
||||
|
||||
- Run in Exchange Management Shell with appropriate RBAC permissions
|
||||
- Can take significant time with large mailbox counts
|
||||
- Tested compatibility: Exchange 2013/2016/2019 (not validated)
|
||||
|
||||
.EXAMPLE
|
||||
.\Get-MailboxPermissions.ps1
|
||||
|
||||
.EXAMPLE
|
||||
.\Get-MailboxPermissions.ps1 -OutputFolder "D:\Reports\Permissions" -IncludeInherited $true
|
||||
#>
|
||||
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[string]$OutputFolder = (Join-Path -Path (Get-Location) -ChildPath ("MailboxPermissions-" + (Get-Date -Format "yyyyMMdd-HHmm"))),
|
||||
[string]$MailboxFilter = "*",
|
||||
[bool]$IncludeInherited = $false
|
||||
)
|
||||
|
||||
function NowTag { (Get-Date).ToString("yyyy-MM-dd HH:mm:ss") }
|
||||
|
||||
Write-Host "[$(NowTag)] ⚠️ AI-GENERATED SCRIPT - UNTESTED" -ForegroundColor Yellow
|
||||
Write-Host "[$(NowTag)] Starting mailbox permissions audit..." -ForegroundColor Green
|
||||
|
||||
# Create output folder
|
||||
New-Item -ItemType Directory -Path $OutputFolder -Force | Out-Null
|
||||
|
||||
# Get all on-premises mailboxes
|
||||
Write-Host "[$(NowTag)] Retrieving mailboxes..."
|
||||
$mailboxes = Get-Mailbox -Filter $MailboxFilter -ResultSize Unlimited -ErrorAction SilentlyContinue |
|
||||
Where-Object { $_.RecipientTypeDetails -notmatch "^Remote" -and $_.Database }
|
||||
|
||||
$mbCount = ($mailboxes | Measure-Object).Count
|
||||
Write-Host "[$(NowTag)] Found $mbCount mailboxes to audit"
|
||||
|
||||
# Collections
|
||||
$fullAccessPerms = @()
|
||||
$sendAsPerms = @()
|
||||
$sendOnBehalfPerms = @()
|
||||
|
||||
$current = 0
|
||||
foreach ($mb in $mailboxes) {
|
||||
$current++
|
||||
$pct = [int](($current / $mbCount) * 100)
|
||||
Write-Progress -Activity "Auditing Mailbox Permissions" -Status "Processing $($mb.DisplayName) ($current/$mbCount)" -PercentComplete $pct
|
||||
|
||||
# FullAccess permissions
|
||||
try {
|
||||
$fullAccess = Get-MailboxPermission -Identity $mb.Identity -ErrorAction SilentlyContinue |
|
||||
Where-Object {
|
||||
$_.User -notlike "NT AUTHORITY\*" -and
|
||||
$_.User -notlike "S-1-5-*" -and
|
||||
$_.AccessRights -like "*FullAccess*" -and
|
||||
($IncludeInherited -or -not $_.IsInherited)
|
||||
}
|
||||
|
||||
foreach ($perm in $fullAccess) {
|
||||
$fullAccessPerms += [PSCustomObject]@{
|
||||
Mailbox = $mb.DisplayName
|
||||
PrimarySmtpAddress = $mb.PrimarySmtpAddress
|
||||
User = $perm.User
|
||||
AccessRights = ($perm.AccessRights -join ", ")
|
||||
IsInherited = $perm.IsInherited
|
||||
Deny = $perm.Deny
|
||||
}
|
||||
}
|
||||
} catch {
|
||||
Write-Host "[$(NowTag)] ERROR getting FullAccess for $($mb.DisplayName): $_" -ForegroundColor Red
|
||||
}
|
||||
|
||||
# SendAs permissions
|
||||
try {
|
||||
$sendAs = Get-ADPermission -Identity $mb.DistinguishedName -ErrorAction SilentlyContinue |
|
||||
Where-Object {
|
||||
$_.ExtendedRights -like "*Send-As*" -and
|
||||
$_.User -notlike "NT AUTHORITY\*" -and
|
||||
$_.User -notlike "S-1-5-*" -and
|
||||
($IncludeInherited -or -not $_.IsInherited)
|
||||
}
|
||||
|
||||
foreach ($perm in $sendAs) {
|
||||
$sendAsPerms += [PSCustomObject]@{
|
||||
Mailbox = $mb.DisplayName
|
||||
PrimarySmtpAddress = $mb.PrimarySmtpAddress
|
||||
User = $perm.User
|
||||
IsInherited = $perm.IsInherited
|
||||
Deny = $perm.Deny
|
||||
}
|
||||
}
|
||||
} catch {
|
||||
Write-Host "[$(NowTag)] ERROR getting SendAs for $($mb.DisplayName): $_" -ForegroundColor Red
|
||||
}
|
||||
|
||||
# SendOnBehalf permissions
|
||||
if ($mb.GrantSendOnBehalfTo -and $mb.GrantSendOnBehalfTo.Count -gt 0) {
|
||||
foreach ($user in $mb.GrantSendOnBehalfTo) {
|
||||
$sendOnBehalfPerms += [PSCustomObject]@{
|
||||
Mailbox = $mb.DisplayName
|
||||
PrimarySmtpAddress = $mb.PrimarySmtpAddress
|
||||
User = $user
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Write-Progress -Activity "Auditing Mailbox Permissions" -Completed
|
||||
|
||||
# Export results
|
||||
Write-Host "[$(NowTag)] Exporting results..."
|
||||
|
||||
$fullAccessFile = Join-Path $OutputFolder "FullAccess-Permissions.csv"
|
||||
$sendAsFile = Join-Path $OutputFolder "SendAs-Permissions.csv"
|
||||
$sendOnBehalfFile = Join-Path $OutputFolder "SendOnBehalf-Permissions.csv"
|
||||
$summaryFile = Join-Path $OutputFolder "Permissions-Summary.txt"
|
||||
|
||||
if ($fullAccessPerms.Count -gt 0) {
|
||||
$fullAccessPerms | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $fullAccessFile
|
||||
Write-Host "[$(NowTag)] FullAccess permissions: $fullAccessFile"
|
||||
} else {
|
||||
Write-Host "[$(NowTag)] No FullAccess permissions found"
|
||||
}
|
||||
|
||||
if ($sendAsPerms.Count -gt 0) {
|
||||
$sendAsPerms | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $sendAsFile
|
||||
Write-Host "[$(NowTag)] SendAs permissions: $sendAsFile"
|
||||
} else {
|
||||
Write-Host "[$(NowTag)] No SendAs permissions found"
|
||||
}
|
||||
|
||||
if ($sendOnBehalfPerms.Count -gt 0) {
|
||||
$sendOnBehalfPerms | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $sendOnBehalfFile
|
||||
Write-Host "[$(NowTag)] SendOnBehalf permissions: $sendOnBehalfFile"
|
||||
} else {
|
||||
Write-Host "[$(NowTag)] No SendOnBehalf permissions found"
|
||||
}
|
||||
|
||||
# Summary
|
||||
$summary = @"
|
||||
Mailbox Permissions Audit Summary
|
||||
Generated: $(Get-Date)
|
||||
|
||||
Mailboxes Audited: $mbCount
|
||||
FullAccess Permissions: $($fullAccessPerms.Count)
|
||||
SendAs Permissions: $($sendAsPerms.Count)
|
||||
SendOnBehalf Permissions: $($sendOnBehalfPerms.Count)
|
||||
|
||||
Output Folder: $OutputFolder
|
||||
"@
|
||||
|
||||
$summary | Out-File -FilePath $summaryFile -Encoding UTF8
|
||||
Write-Host "`n$summary"
|
||||
Write-Host "[$(NowTag)] Audit complete!" -ForegroundColor Green
|
||||
226
Exchange/Get-MailflowStats.ps1
Normal file
226
Exchange/Get-MailflowStats.ps1
Normal file
@ -0,0 +1,226 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Analyze Exchange message flow statistics from transport logs
|
||||
|
||||
.DESCRIPTION
|
||||
Aggregates statistics from Exchange transport logs including top senders/receivers,
|
||||
message volume by time period, and potential anomalies. Builds on Get-SMTPTraffic.ps1
|
||||
pattern but provides comprehensive analysis.
|
||||
|
||||
.PARAMETER LogPath
|
||||
Path to transport logs (default: auto-detect from Exchange install)
|
||||
|
||||
.PARAMETER DaysBack
|
||||
Number of days of logs to analyze (default: 7)
|
||||
|
||||
.PARAMETER OutputFolder
|
||||
Destination folder for reports. Default: .\MailflowStats-<date>
|
||||
|
||||
.PARAMETER TopCount
|
||||
Number of top senders/receivers to include in report (default: 25)
|
||||
|
||||
.NOTES
|
||||
⚠️ AI-GENERATED SCRIPT - UNTESTED
|
||||
This script was generated by Claude AI and has not been tested in production.
|
||||
Review and test thoroughly in a non-production environment before use.
|
||||
|
||||
- Run in Exchange Management Shell
|
||||
- Can be slow with large log volumes
|
||||
- Analyzes SMTP Receive logs by default
|
||||
|
||||
.EXAMPLE
|
||||
.\Get-MailflowStats.ps1
|
||||
|
||||
.EXAMPLE
|
||||
.\Get-MailflowStats.ps1 -DaysBack 30 -TopCount 50
|
||||
#>
|
||||
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[string]$LogPath = "",
|
||||
[int]$DaysBack = 7,
|
||||
[string]$OutputFolder = (Join-Path -Path (Get-Location) -ChildPath ("MailflowStats-" + (Get-Date -Format "yyyyMMdd-HHmm"))),
|
||||
[int]$TopCount = 25
|
||||
)
|
||||
|
||||
function NowTag { (Get-Date).ToString("yyyy-MM-dd HH:mm:ss") }
|
||||
|
||||
Write-Host "[$(NowTag)] ⚠️ AI-GENERATED SCRIPT - UNTESTED" -ForegroundColor Yellow
|
||||
Write-Host "[$(NowTag)] Starting mail flow analysis..." -ForegroundColor Green
|
||||
|
||||
# Auto-detect log path if not specified
|
||||
if (-not $LogPath) {
|
||||
$exchangePath = (Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ExchangeServer\v15\Setup" -ErrorAction SilentlyContinue).MsiInstallPath
|
||||
if ($exchangePath) {
|
||||
$LogPath = Join-Path $exchangePath "TransportRoles\Logs\FrontEnd\ProtocolLog\SmtpReceive"
|
||||
} else {
|
||||
Write-Host "[$(NowTag)] ERROR: Could not auto-detect Exchange log path. Please specify -LogPath parameter" -ForegroundColor Red
|
||||
exit 1
|
||||
}
|
||||
}
|
||||
|
||||
if (-not (Test-Path $LogPath)) {
|
||||
Write-Host "[$(NowTag)] ERROR: Log path not found: $LogPath" -ForegroundColor Red
|
||||
exit 1
|
||||
}
|
||||
|
||||
Write-Host "[$(NowTag)] Log path: $LogPath"
|
||||
|
||||
# Create output folder
|
||||
New-Item -ItemType Directory -Path $OutputFolder -Force | Out-Null
|
||||
|
||||
# Get log files within date range
|
||||
$cutoffDate = (Get-Date).AddDays(-$DaysBack)
|
||||
Write-Host "[$(NowTag)] Analyzing logs from $($cutoffDate.ToString('yyyy-MM-dd')) to $(Get-Date -Format 'yyyy-MM-dd')"
|
||||
|
||||
$logFiles = Get-ChildItem -Path $LogPath -Filter "*.log" -ErrorAction SilentlyContinue |
|
||||
Where-Object { $_.LastWriteTime -ge $cutoffDate } |
|
||||
Sort-Object LastWriteTime -Descending
|
||||
|
||||
$fileCount = ($logFiles | Measure-Object).Count
|
||||
|
||||
if ($fileCount -eq 0) {
|
||||
Write-Host "[$(NowTag)] No log files found in specified date range" -ForegroundColor Yellow
|
||||
exit 0
|
||||
}
|
||||
|
||||
Write-Host "[$(NowTag)] Found $fileCount log file(s) to analyze"
|
||||
|
||||
# Parse logs
|
||||
$allMessages = @()
|
||||
$fileIdx = 0
|
||||
|
||||
foreach ($logFile in $logFiles) {
|
||||
$fileIdx++
|
||||
Write-Progress -Activity "Parsing Transport Logs" -Status "Processing $($logFile.Name) ($fileIdx/$fileCount)" -PercentComplete ([int](($fileIdx / $fileCount) * 100))
|
||||
|
||||
# Get header from file
|
||||
$header = Get-Content $logFile.FullName -TotalCount 50 | Where-Object { $_ -like '#Fields:*' } | Select-Object -First 1
|
||||
if (-not $header) { continue }
|
||||
|
||||
$fields = $header -replace '^#Fields: ', ''
|
||||
$columns = $fields -split ','
|
||||
|
||||
# Parse log entries
|
||||
Get-Content $logFile.FullName | Where-Object { -not ($_ -like '#*') -and $_ -match ',' } | ForEach-Object {
|
||||
try {
|
||||
$row = $_ -split ',(?=(?:[^"]*"[^"]*")*[^"]*$)' # Handle quoted fields
|
||||
$entry = [PSCustomObject]@{}
|
||||
|
||||
for ($i = 0; $i -lt $columns.Count -and $i -lt $row.Count; $i++) {
|
||||
$entry | Add-Member -NotePropertyName $columns[$i].Trim() -NotePropertyValue ($row[$i] -replace '^"|"$', '') -Force
|
||||
}
|
||||
|
||||
# Filter for relevant events (RECEIVE events)
|
||||
if ($entry.event -eq 'RECEIVE' -or $entry.event -eq '+') {
|
||||
$allMessages += $entry
|
||||
}
|
||||
} catch {}
|
||||
}
|
||||
}
|
||||
|
||||
Write-Progress -Activity "Parsing Transport Logs" -Completed
|
||||
|
||||
$totalMessages = $allMessages.Count
|
||||
Write-Host "[$(NowTag)] Parsed $totalMessages message(s)"
|
||||
|
||||
if ($totalMessages -eq 0) {
|
||||
Write-Host "[$(NowTag)] No messages found to analyze" -ForegroundColor Yellow
|
||||
exit 0
|
||||
}
|
||||
|
||||
# Analyze data
|
||||
Write-Host "[$(NowTag)] Analyzing message flow patterns..."
|
||||
|
||||
# Top senders (by remote-endpoint or client-ip)
|
||||
$topSenders = $allMessages | Where-Object { $_.'remote-endpoint' } |
|
||||
Group-Object -Property 'remote-endpoint' |
|
||||
Select-Object @{N = "IPAddress"; E = { $_.Name } }, Count |
|
||||
Sort-Object Count -Descending |
|
||||
Select-Object -First $TopCount
|
||||
|
||||
# Messages by hour
|
||||
$messagesByHour = $allMessages | Where-Object { $_.'date-time' } |
|
||||
ForEach-Object {
|
||||
try {
|
||||
$dt = [DateTime]::Parse($_.'date-time')
|
||||
[PSCustomObject]@{ Hour = $dt.Hour }
|
||||
} catch {}
|
||||
} |
|
||||
Group-Object Hour |
|
||||
Select-Object @{N = "Hour"; E = { $_.Name } }, Count |
|
||||
Sort-Object Hour
|
||||
|
||||
# Messages by day
|
||||
$messagesByDay = $allMessages | Where-Object { $_.'date-time' } |
|
||||
ForEach-Object {
|
||||
try {
|
||||
$dt = [DateTime]::Parse($_.'date-time')
|
||||
[PSCustomObject]@{ Date = $dt.ToString('yyyy-MM-dd') }
|
||||
} catch {}
|
||||
} |
|
||||
Group-Object Date |
|
||||
Select-Object @{N = "Date"; E = { $_.Name } }, Count |
|
||||
Sort-Object Date
|
||||
|
||||
# Connector usage
|
||||
$connectorStats = $allMessages | Where-Object { $_.'connector-id' } |
|
||||
Group-Object -Property 'connector-id' |
|
||||
Select-Object @{N = "Connector"; E = { $_.Name } }, Count |
|
||||
Sort-Object Count -Descending
|
||||
|
||||
# Export results
|
||||
Write-Host "[$(NowTag)] Exporting results..."
|
||||
|
||||
$summaryFile = Join-Path $OutputFolder "Mailflow-Summary.txt"
|
||||
$topSendersFile = Join-Path $OutputFolder "Top-Senders-By-IP.csv"
|
||||
$byHourFile = Join-Path $OutputFolder "Messages-By-Hour.csv"
|
||||
$byDayFile = Join-Path $OutputFolder "Messages-By-Day.csv"
|
||||
$connectorFile = Join-Path $OutputFolder "Messages-By-Connector.csv"
|
||||
|
||||
$topSenders | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $topSendersFile
|
||||
$messagesByHour | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $byHourFile
|
||||
$messagesByDay | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $byDayFile
|
||||
$connectorStats | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $connectorFile
|
||||
|
||||
Write-Host "[$(NowTag)] Top senders: $topSendersFile" -ForegroundColor Green
|
||||
Write-Host "[$(NowTag)] Hourly distribution: $byHourFile" -ForegroundColor Green
|
||||
Write-Host "[$(NowTag)] Daily distribution: $byDayFile" -ForegroundColor Green
|
||||
Write-Host "[$(NowTag)] Connector stats: $connectorFile" -ForegroundColor Green
|
||||
|
||||
# Summary report
|
||||
$summary = @"
|
||||
Mail Flow Statistics Report
|
||||
Generated: $(Get-Date)
|
||||
Analysis Period: $($cutoffDate.ToString('yyyy-MM-dd')) to $(Get-Date -Format 'yyyy-MM-dd')
|
||||
Log Path: $LogPath
|
||||
|
||||
SUMMARY:
|
||||
Total Messages Analyzed: $totalMessages
|
||||
Log Files Processed: $fileCount
|
||||
Average Messages Per Day: $([math]::Round($totalMessages / $DaysBack, 0))
|
||||
|
||||
TOP $TopCount SENDERS (by IP):
|
||||
$($topSenders | ForEach-Object { " $($_.IPAddress): $($_.Count) messages" } | Out-String)
|
||||
|
||||
BUSIEST HOURS (24-hour format):
|
||||
$($messagesByHour | Sort-Object Count -Descending | Select-Object -First 5 | ForEach-Object { " Hour $($_.Hour): $($_.Count) messages" } | Out-String)
|
||||
|
||||
DAILY VOLUME:
|
||||
$($messagesByDay | ForEach-Object { " $($_.Date): $($_.Count) messages" } | Out-String)
|
||||
|
||||
CONNECTOR USAGE:
|
||||
$($connectorStats | ForEach-Object { " $($_.Connector): $($_.Count) messages" } | Out-String)
|
||||
"@
|
||||
|
||||
$summary | Out-File -FilePath $summaryFile -Encoding UTF8
|
||||
Write-Host "[$(NowTag)] Summary report: $summaryFile" -ForegroundColor Green
|
||||
|
||||
# Console output
|
||||
Write-Host "`nMAIL FLOW SUMMARY:" -ForegroundColor Cyan
|
||||
Write-Host " Total Messages: $totalMessages"
|
||||
Write-Host " Average Per Day: $([math]::Round($totalMessages / $DaysBack, 0))"
|
||||
Write-Host " Peak Hour: $(($messagesByHour | Sort-Object Count -Descending | Select-Object -First 1).Hour):00"
|
||||
Write-Host " Busiest Day: $(($messagesByDay | Sort-Object Count -Descending | Select-Object -First 1).Date)"
|
||||
|
||||
Write-Host "`n[$(NowTag)] Analysis complete! Output folder: $OutputFolder"
|
||||
178
Misc/Backup-ExchangeCertificates.ps1
Normal file
178
Misc/Backup-ExchangeCertificates.ps1
Normal file
@ -0,0 +1,178 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Backup Exchange certificates to PFX files
|
||||
|
||||
.DESCRIPTION
|
||||
Exports all Exchange certificates to password-protected PFX files.
|
||||
Alerts on certificates expiring within specified days.
|
||||
|
||||
.PARAMETER OutputFolder
|
||||
Destination folder for PFX exports. Default: .\CertBackup-<date>
|
||||
|
||||
.PARAMETER Password
|
||||
Password for PFX files (required)
|
||||
|
||||
.PARAMETER ExpiryWarningDays
|
||||
Alert on certificates expiring within this many days (default: 90)
|
||||
|
||||
.PARAMETER IncludePrivateKey
|
||||
Export with private key (required for restoration, default: $true)
|
||||
|
||||
.NOTES
|
||||
⚠️ AI-GENERATED SCRIPT - UNTESTED
|
||||
This script was generated by Claude AI and has not been tested in production.
|
||||
Review and test thoroughly in a non-production environment before use.
|
||||
|
||||
- Run in Exchange Management Shell with appropriate RBAC permissions
|
||||
- Requires password for PFX protection
|
||||
- Store PFX files securely - they contain private keys
|
||||
- Tested compatibility: Exchange 2013/2016/2019 (not validated)
|
||||
|
||||
.EXAMPLE
|
||||
$pwd = Read-Host "Enter PFX password" -AsSecureString
|
||||
.\Backup-ExchangeCertificates.ps1 -Password $pwd
|
||||
|
||||
.EXAMPLE
|
||||
$pwd = ConvertTo-SecureString "P@ssw0rd!" -AsPlainText -Force
|
||||
.\Backup-ExchangeCertificates.ps1 -Password $pwd -ExpiryWarningDays 60
|
||||
#>
|
||||
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[string]$OutputFolder = (Join-Path -Path (Get-Location) -ChildPath ("CertBackup-" + (Get-Date -Format "yyyyMMdd-HHmm"))),
|
||||
|
||||
[Parameter(Mandatory = $true)]
|
||||
[System.Security.SecureString]$Password,
|
||||
|
||||
[int]$ExpiryWarningDays = 90,
|
||||
|
||||
[bool]$IncludePrivateKey = $true
|
||||
)
|
||||
|
||||
function NowTag { (Get-Date).ToString("yyyy-MM-dd HH:mm:ss") }
|
||||
|
||||
Write-Host "[$(NowTag)] ⚠️ AI-GENERATED SCRIPT - UNTESTED" -ForegroundColor Yellow
|
||||
Write-Host "[$(NowTag)] Starting Exchange certificate backup..." -ForegroundColor Green
|
||||
|
||||
# Create output folder
|
||||
New-Item -ItemType Directory -Path $OutputFolder -Force | Out-Null
|
||||
Write-Host "[$(NowTag)] Output folder: $OutputFolder"
|
||||
|
||||
# Get all Exchange certificates
|
||||
Write-Host "[$(NowTag)] Retrieving Exchange certificates..."
|
||||
$certs = Get-ExchangeCertificate -ErrorAction SilentlyContinue
|
||||
|
||||
if (-not $certs) {
|
||||
Write-Host "[$(NowTag)] No Exchange certificates found" -ForegroundColor Yellow
|
||||
exit 0
|
||||
}
|
||||
|
||||
$certCount = ($certs | Measure-Object).Count
|
||||
Write-Host "[$(NowTag)] Found $certCount certificate(s)"
|
||||
|
||||
# Process each certificate
|
||||
$exported = @()
|
||||
$warnings = @()
|
||||
|
||||
foreach ($cert in $certs) {
|
||||
$thumbprint = $cert.Thumbprint
|
||||
$subject = $cert.Subject
|
||||
$notAfter = $cert.NotAfter
|
||||
$daysUntilExpiry = [int](($notAfter - (Get-Date)).TotalDays)
|
||||
|
||||
Write-Host "[$(NowTag)] Processing: $subject (Thumbprint: $thumbprint)"
|
||||
|
||||
# Check expiry
|
||||
$status = "OK"
|
||||
if ($daysUntilExpiry -lt 0) {
|
||||
$status = "EXPIRED"
|
||||
$warnings += [PSCustomObject]@{
|
||||
Thumbprint = $thumbprint
|
||||
Subject = $subject
|
||||
NotAfter = $notAfter
|
||||
DaysRemaining = $daysUntilExpiry
|
||||
Status = $status
|
||||
}
|
||||
Write-Host " WARNING: Certificate EXPIRED on $($notAfter.ToString('yyyy-MM-dd'))" -ForegroundColor Red
|
||||
} elseif ($daysUntilExpiry -lt $ExpiryWarningDays) {
|
||||
$status = "EXPIRING SOON"
|
||||
$warnings += [PSCustomObject]@{
|
||||
Thumbprint = $thumbprint
|
||||
Subject = $subject
|
||||
NotAfter = $notAfter
|
||||
DaysRemaining = $daysUntilExpiry
|
||||
Status = $status
|
||||
}
|
||||
Write-Host " WARNING: Certificate expires in $daysUntilExpiry days ($($notAfter.ToString('yyyy-MM-dd')))" -ForegroundColor Yellow
|
||||
} else {
|
||||
Write-Host " Status: OK - Expires in $daysUntilExpiry days"
|
||||
}
|
||||
|
||||
# Export to PFX
|
||||
$fileName = "$($thumbprint).pfx"
|
||||
$filePath = Join-Path $OutputFolder $fileName
|
||||
|
||||
try {
|
||||
if ($IncludePrivateKey) {
|
||||
# Export with private key
|
||||
Export-ExchangeCertificate -Thumbprint $thumbprint -FileName $filePath -Password $Password -ErrorAction Stop | Out-Null
|
||||
Write-Host " Exported: $fileName (with private key)" -ForegroundColor Green
|
||||
} else {
|
||||
# Export public key only (using .NET method)
|
||||
$certObj = Get-Item -Path "Cert:\LocalMachine\My\$thumbprint" -ErrorAction SilentlyContinue
|
||||
if ($certObj) {
|
||||
$certBytes = $certObj.Export('Cert')
|
||||
[System.IO.File]::WriteAllBytes($filePath, $certBytes)
|
||||
Write-Host " Exported: $fileName (public key only)" -ForegroundColor Green
|
||||
} else {
|
||||
throw "Certificate not found in LocalMachine\My"
|
||||
}
|
||||
}
|
||||
|
||||
$exported += [PSCustomObject]@{
|
||||
Thumbprint = $thumbprint
|
||||
Subject = $subject
|
||||
Services = ($cert.Services -join ", ")
|
||||
NotBefore = $cert.NotBefore
|
||||
NotAfter = $notAfter
|
||||
DaysRemaining = $daysUntilExpiry
|
||||
Status = $status
|
||||
FileName = $fileName
|
||||
FilePath = $filePath
|
||||
FileSize = (Get-Item $filePath).Length
|
||||
}
|
||||
} catch {
|
||||
Write-Host " ERROR exporting certificate: $($_.Exception.Message)" -ForegroundColor Red
|
||||
}
|
||||
}
|
||||
|
||||
# Export inventory
|
||||
$inventoryFile = Join-Path $OutputFolder "Certificate-Inventory.csv"
|
||||
$exported | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $inventoryFile
|
||||
Write-Host "`n[$(NowTag)] Inventory exported: $inventoryFile" -ForegroundColor Green
|
||||
|
||||
# Export warnings if any
|
||||
if ($warnings.Count -gt 0) {
|
||||
$warningsFile = Join-Path $OutputFolder "Certificate-Warnings.csv"
|
||||
$warnings | Sort-Object DaysRemaining | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $warningsFile
|
||||
Write-Host "[$(NowTag)] Warnings exported: $warningsFile" -ForegroundColor Yellow
|
||||
}
|
||||
|
||||
# Summary
|
||||
Write-Host "`nBACKUP SUMMARY:" -ForegroundColor Cyan
|
||||
Write-Host " Total Certificates: $certCount"
|
||||
Write-Host " Successfully Exported: $($exported.Count)" -ForegroundColor Green
|
||||
Write-Host " Failed: $($certCount - $exported.Count)" -ForegroundColor $(if ($certCount - $exported.Count -gt 0) { "Red" } else { "Green" })
|
||||
Write-Host " Expired: $(($warnings | Where-Object Status -eq 'EXPIRED').Count)" -ForegroundColor Red
|
||||
Write-Host " Expiring Soon: $(($warnings | Where-Object Status -eq 'EXPIRING SOON').Count)" -ForegroundColor Yellow
|
||||
|
||||
if ($warnings.Count -gt 0) {
|
||||
Write-Host "`nCERTIFICATE WARNINGS:" -ForegroundColor Yellow
|
||||
$warnings | Sort-Object DaysRemaining | ForEach-Object {
|
||||
$color = if ($_.Status -eq "EXPIRED") { "Red" } else { "Yellow" }
|
||||
Write-Host " $($_.Status): $($_.Subject) - $($_.DaysRemaining) days" -ForegroundColor $color
|
||||
}
|
||||
}
|
||||
|
||||
Write-Host "`n[$(NowTag)] Backup complete! Output folder: $OutputFolder"
|
||||
Write-Host "`nIMPORTANT: Store PFX files securely - they contain private keys!" -ForegroundColor Cyan
|
||||
238
Misc/Get-ServerInventory.ps1
Normal file
238
Misc/Get-ServerInventory.ps1
Normal file
@ -0,0 +1,238 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Comprehensive server hardware and software inventory report
|
||||
|
||||
.DESCRIPTION
|
||||
Collects system information including CPU, RAM, disk, OS version, installed roles,
|
||||
and key services. Generates Word document (with HTML fallback) similar to
|
||||
Exchange-Inventory.ps1 structure.
|
||||
|
||||
.PARAMETER OutputFolder
|
||||
Destination folder for reports. Default: .\ServerInventory-<date>
|
||||
|
||||
.PARAMETER IncludeInstalledSoftware
|
||||
Include installed software list (can be slow, default: $false)
|
||||
|
||||
.PARAMETER IncludeWindowsFeatures
|
||||
Include Windows Features/Roles (default: $true)
|
||||
|
||||
.NOTES
|
||||
⚠️ AI-GENERATED SCRIPT - UNTESTED
|
||||
This script was generated by Claude AI and has not been tested in production.
|
||||
Review and test thoroughly in a non-production environment before use.
|
||||
|
||||
- Run with Administrator privileges for complete information
|
||||
- Works on Windows Server 2012+
|
||||
- Report generation uses Word COM or HTML fallback
|
||||
|
||||
.EXAMPLE
|
||||
.\Get-ServerInventory.ps1
|
||||
|
||||
.EXAMPLE
|
||||
.\Get-ServerInventory.ps1 -IncludeInstalledSoftware $true -OutputFolder "D:\Inventory"
|
||||
#>
|
||||
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[string]$OutputFolder = (Join-Path -Path (Get-Location) -ChildPath ("ServerInventory-" + (Get-Date -Format "yyyyMMdd-HHmm"))),
|
||||
[bool]$IncludeInstalledSoftware = $false,
|
||||
[bool]$IncludeWindowsFeatures = $true
|
||||
)
|
||||
|
||||
function NowTag { (Get-Date).ToString("yyyy-MM-dd HH:mm:ss") }
|
||||
|
||||
Write-Host "[$(NowTag)] ⚠️ AI-GENERATED SCRIPT - UNTESTED" -ForegroundColor Yellow
|
||||
Write-Host "[$(NowTag)] Starting server inventory..." -ForegroundColor Green
|
||||
|
||||
# Create output folder
|
||||
New-Item -ItemType Directory -Path $OutputFolder -Force | Out-Null
|
||||
|
||||
$ReportDocx = Join-Path $OutputFolder "Server-Inventory.docx"
|
||||
$ReportHtml = Join-Path $OutputFolder "Server-Inventory.html"
|
||||
|
||||
# Word COM or HTML fallback (reused pattern from Exchange-Inventory.ps1)
|
||||
$script:Word = $null
|
||||
$script:Doc = $null
|
||||
$script:UseHtml = $false
|
||||
$script:HtmlSb = New-Object System.Text.StringBuilder
|
||||
|
||||
function Start-Report {
|
||||
try {
|
||||
$script:Word = New-Object -ComObject Word.Application -ErrorAction Stop
|
||||
$script:Word.Visible = $false
|
||||
$script:Doc = $script:Word.Documents.Add()
|
||||
Add-Heading "Server Inventory Report" 1
|
||||
Add-Paragraph ("Server: $env:COMPUTERNAME")
|
||||
Add-Paragraph ("Generated: " + (Get-Date).ToString("yyyy-MM-dd HH:mm"))
|
||||
} catch {
|
||||
$script:UseHtml = $true
|
||||
[void]$script:HtmlSb.AppendLine("<html><head><meta charset='utf-8'><title>Server Inventory</title>")
|
||||
[void]$script:HtmlSb.AppendLine("<style>body{font-family:Segoe UI,Arial,sans-serif;margin:20px} h1{font-size:24px;color:#0066cc} h2{font-size:20px;margin-top:30px;color:#333} table{border-collapse:collapse;width:100%;margin:15px 0} th,td{border:1px solid #ccc;padding:8px;text-align:left} th{background:#f3f3f3;font-weight:bold}</style></head><body>")
|
||||
[void]$script:HtmlSb.AppendLine("<h1>Server Inventory Report</h1>")
|
||||
[void]$script:HtmlSb.AppendLine("<p><strong>Server:</strong> $env:COMPUTERNAME</p>")
|
||||
[void]$script:HtmlSb.AppendLine("<p><strong>Generated:</strong> " + (Get-Date).ToString("yyyy-MM-dd HH:mm") + "</p>")
|
||||
}
|
||||
}
|
||||
|
||||
function Add-Heading([string]$Text, [int]$Level = 2) {
|
||||
if ($script:UseHtml) {
|
||||
[void]$script:HtmlSb.AppendLine("<h$Level>$Text</h$Level>")
|
||||
} else {
|
||||
$range = $script:Doc.Range()
|
||||
$range.Collapse(0) | Out-Null
|
||||
$range.Text = "$Text`r"
|
||||
$style = switch ($Level) { 1 { 'Heading 1' } 2 { 'Heading 2' } default { 'Heading 2' } }
|
||||
$range.set_Style($style)
|
||||
$range.InsertParagraphAfter() | Out-Null
|
||||
}
|
||||
}
|
||||
|
||||
function Add-Paragraph([string]$Text) {
|
||||
if ($script:UseHtml) {
|
||||
$enc = [System.Web.HttpUtility]::HtmlEncode($Text)
|
||||
[void]$script:HtmlSb.AppendLine("<p>$enc</p>")
|
||||
} else {
|
||||
$range = $script:Doc.Range()
|
||||
$range.Collapse(0) | Out-Null
|
||||
$range.Text = $Text
|
||||
$range.InsertParagraphAfter() | Out-Null
|
||||
}
|
||||
}
|
||||
|
||||
function Add-Table([object]$Objects, [string[]]$PropOrder, [string]$Title) {
|
||||
if ($null -eq $Objects) {
|
||||
Add-Paragraph ("{0}: No data." -f $Title)
|
||||
return
|
||||
}
|
||||
$arr = @()
|
||||
if ($Objects -is [System.Collections.IEnumerable] -and -not ($Objects -is [string])) {
|
||||
foreach ($o in $Objects) { $arr += $o }
|
||||
} else { $arr = @($Objects) }
|
||||
if ($arr.Count -eq 0) {
|
||||
Add-Paragraph ("{0}: No data." -f $Title)
|
||||
return
|
||||
}
|
||||
Add-Heading $Title 3
|
||||
|
||||
if ($script:UseHtml) {
|
||||
[void]$script:HtmlSb.AppendLine("<table><thead><tr>")
|
||||
foreach ($p in $PropOrder) { [void]$script:HtmlSb.AppendLine("<th>$([System.Web.HttpUtility]::HtmlEncode($p))</th>") }
|
||||
[void]$script:HtmlSb.AppendLine("</tr></thead><tbody>")
|
||||
foreach ($o in $arr) {
|
||||
[void]$script:HtmlSb.AppendLine("<tr>")
|
||||
foreach ($p in $PropOrder) {
|
||||
$val = if ($o.$p) { [string]$o.$p } else { "" }
|
||||
[void]$script:HtmlSb.AppendLine("<td>$([System.Web.HttpUtility]::HtmlEncode($val))</td>")
|
||||
}
|
||||
[void]$script:HtmlSb.AppendLine("</tr>")
|
||||
}
|
||||
[void]$script:HtmlSb.AppendLine("</tbody></table>")
|
||||
} else {
|
||||
$rows = $arr.Count
|
||||
$cols = $PropOrder.Count
|
||||
$range = $script:Doc.Range()
|
||||
$table = $script:Doc.Tables.Add($range, [Math]::Max(1, $rows) + 1, $cols)
|
||||
for ($c = 1; $c -le $cols; $c++) { $table.Cell(1, $c).Range.Text = $PropOrder[$c - 1] }
|
||||
$table.Rows.Item(1).Range.Bold = $true
|
||||
for ($r = 0; $r -lt $rows; $r++) {
|
||||
for ($c = 0; $c -lt $cols; $c++) {
|
||||
$val = if ($arr[$r].($PropOrder[$c])) { [string]$arr[$r].($PropOrder[$c]) } else { "" }
|
||||
$table.Cell($r + 2, $c + 1).Range.Text = $val
|
||||
}
|
||||
}
|
||||
$table.AutoFitBehavior(2) | Out-Null
|
||||
$range.InsertParagraphAfter() | Out-Null
|
||||
}
|
||||
}
|
||||
|
||||
function End-Report {
|
||||
if ($script:UseHtml) {
|
||||
[void]$script:HtmlSb.AppendLine("</body></html>")
|
||||
$script:HtmlSb.ToString() | Out-File -LiteralPath $ReportHtml -Encoding UTF8
|
||||
Write-Host "[$(NowTag)] HTML report: $ReportHtml" -ForegroundColor Green
|
||||
} else {
|
||||
$wdFormatXMLDocument = 12
|
||||
$script:Doc.SaveAs([ref]$ReportDocx, [ref]$wdFormatXMLDocument)
|
||||
$script:Doc.Close(); $script:Word.Quit()
|
||||
Write-Host "[$(NowTag)] Word report: $ReportDocx" -ForegroundColor Green
|
||||
}
|
||||
}
|
||||
|
||||
Start-Report
|
||||
|
||||
# System Information
|
||||
Write-Host "[$(NowTag)] Collecting system information..."
|
||||
$cs = Get-CimInstance -ClassName Win32_ComputerSystem
|
||||
$os = Get-CimInstance -ClassName Win32_OperatingSystem
|
||||
$bios = Get-CimInstance -ClassName Win32_BIOS
|
||||
|
||||
$sysInfo = [PSCustomObject]@{
|
||||
ComputerName = $cs.Name
|
||||
Domain = $cs.Domain
|
||||
Manufacturer = $cs.Manufacturer
|
||||
Model = $cs.Model
|
||||
TotalPhysicalMemoryGB = [math]::Round($cs.TotalPhysicalMemory / 1GB, 2)
|
||||
NumberOfProcessors = $cs.NumberOfProcessors
|
||||
NumberOfLogicalProcessors = $cs.NumberOfLogicalProcessors
|
||||
OSName = $os.Caption
|
||||
OSVersion = $os.Version
|
||||
OSArchitecture = $os.OSArchitecture
|
||||
InstallDate = $os.InstallDate
|
||||
LastBootUpTime = $os.LastBootUpTime
|
||||
BIOSVersion = $bios.SMBIOSBIOSVersion
|
||||
SerialNumber = $bios.SerialNumber
|
||||
}
|
||||
|
||||
Add-Heading "System Information" 2
|
||||
Add-Table $sysInfo @("ComputerName", "Domain", "Manufacturer", "Model", "TotalPhysicalMemoryGB", "NumberOfProcessors", "NumberOfLogicalProcessors", "OSName", "OSVersion", "OSArchitecture", "InstallDate", "LastBootUpTime", "BIOSVersion", "SerialNumber") "System Details"
|
||||
|
||||
# CPU Information
|
||||
Write-Host "[$(NowTag)] Collecting CPU information..."
|
||||
$cpus = Get-CimInstance -ClassName Win32_Processor | Select-Object Name, NumberOfCores, NumberOfLogicalProcessors, MaxClockSpeed, CurrentClockSpeed
|
||||
Add-Table $cpus @("Name", "NumberOfCores", "NumberOfLogicalProcessors", "MaxClockSpeed", "CurrentClockSpeed") "Processors"
|
||||
|
||||
# Disk Information
|
||||
Write-Host "[$(NowTag)] Collecting disk information..."
|
||||
$disks = Get-CimInstance -ClassName Win32_LogicalDisk -Filter "DriveType=3" | Select-Object @{N = "Drive"; E = { $_.DeviceID } }, @{N = "SizeGB"; E = { [math]::Round($_.Size / 1GB, 2) } }, @{N = "FreeGB"; E = { [math]::Round($_.FreeSpace / 1GB, 2) } }, @{N = "UsedGB"; E = { [math]::Round(($_.Size - $_.FreeSpace) / 1GB, 2) } }, @{N = "PercentFree"; E = { [math]::Round(($_.FreeSpace / $_.Size) * 100, 2) } }, VolumeName, FileSystem
|
||||
Add-Table $disks @("Drive", "SizeGB", "FreeGB", "UsedGB", "PercentFree", "VolumeName", "FileSystem") "Disk Drives"
|
||||
|
||||
# Network Adapters
|
||||
Write-Host "[$(NowTag)] Collecting network adapter information..."
|
||||
$nics = Get-CimInstance -ClassName Win32_NetworkAdapterConfiguration -Filter "IPEnabled=True" | Select-Object Description, @{N = "IPAddress"; E = { $_.IPAddress -join ", " } }, @{N = "SubnetMask"; E = { $_.IPSubnet -join ", " } }, @{N = "DefaultGateway"; E = { $_.DefaultIPGateway -join ", " } }, @{N = "DNSServers"; E = { $_.DNSServerSearchOrder -join ", " } }, MACAddress, DHCPEnabled
|
||||
Add-Table $nics @("Description", "IPAddress", "SubnetMask", "DefaultGateway", "DNSServers", "MACAddress", "DHCPEnabled") "Network Adapters"
|
||||
|
||||
# Windows Features/Roles
|
||||
if ($IncludeWindowsFeatures) {
|
||||
Write-Host "[$(NowTag)] Collecting Windows features..."
|
||||
try {
|
||||
Import-Module ServerManager -ErrorAction Stop
|
||||
$features = Get-WindowsFeature | Where-Object Installed | Select-Object Name, DisplayName, FeatureType
|
||||
Add-Table $features @("Name", "DisplayName", "FeatureType") "Installed Windows Features/Roles"
|
||||
} catch {
|
||||
Add-Paragraph "Windows Features: Could not retrieve (ServerManager module not available)"
|
||||
}
|
||||
}
|
||||
|
||||
# Services
|
||||
Write-Host "[$(NowTag)] Collecting critical services..."
|
||||
$services = Get-Service | Where-Object { $_.StartType -eq "Automatic" -and $_.Status -ne "Running" } | Select-Object Name, DisplayName, Status, StartType
|
||||
if ($services) {
|
||||
Add-Table $services @("Name", "DisplayName", "Status", "StartType") "Automatic Services Not Running (Potential Issues)"
|
||||
} else {
|
||||
Add-Paragraph "All automatic services are running"
|
||||
}
|
||||
|
||||
# Installed Software (optional, can be slow)
|
||||
if ($IncludeInstalledSoftware) {
|
||||
Write-Host "[$(NowTag)] Collecting installed software (this may take a while)..."
|
||||
$software = Get-CimInstance -ClassName Win32_Product | Select-Object Name, Version, Vendor, InstallDate | Sort-Object Name
|
||||
Add-Table $software @("Name", "Version", "Vendor", "InstallDate") "Installed Software"
|
||||
}
|
||||
|
||||
# Hotfixes
|
||||
Write-Host "[$(NowTag)] Collecting installed hotfixes..."
|
||||
$hotfixes = Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 20 | Select-Object HotFixID, Description, InstalledBy, InstalledOn
|
||||
Add-Table $hotfixes @("HotFixID", "Description", "InstalledBy", "InstalledOn") "Recent Hotfixes (Last 20)"
|
||||
|
||||
End-Report
|
||||
Write-Host "[$(NowTag)] Inventory complete! Output folder: $OutputFolder"
|
||||
183
Misc/Monitor-DiskSpace.ps1
Normal file
183
Misc/Monitor-DiskSpace.ps1
Normal file
@ -0,0 +1,183 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Monitor disk space and alert when below threshold
|
||||
|
||||
.DESCRIPTION
|
||||
Checks all fixed drives for available space and alerts when below threshold.
|
||||
Can be scheduled as a task for proactive monitoring.
|
||||
|
||||
.PARAMETER ThresholdPercent
|
||||
Alert when free space falls below this percentage (default: 15)
|
||||
|
||||
.PARAMETER ThresholdGB
|
||||
Alternative: alert when free space falls below this many GB (default: not used)
|
||||
|
||||
.PARAMETER LogPath
|
||||
Path to log file for alerts (default: C:\Temp\DiskSpace-Monitor.log)
|
||||
|
||||
.PARAMETER SendEmail
|
||||
Send email alerts (requires email parameters, default: $false)
|
||||
|
||||
.PARAMETER SmtpServer
|
||||
SMTP server for email alerts
|
||||
|
||||
.PARAMETER EmailFrom
|
||||
From address for email alerts
|
||||
|
||||
.PARAMETER EmailTo
|
||||
To address(es) for email alerts (comma-separated)
|
||||
|
||||
.NOTES
|
||||
⚠️ AI-GENERATED SCRIPT - UNTESTED
|
||||
This script was generated by Claude AI and has not been tested in production.
|
||||
Review and test thoroughly in a non-production environment before use.
|
||||
|
||||
- Suitable for scheduled task execution
|
||||
- Exit codes: 0=OK, 1=Warning (below threshold), 2=Error
|
||||
- Email functionality requires SMTP access
|
||||
|
||||
.EXAMPLE
|
||||
.\Monitor-DiskSpace.ps1
|
||||
|
||||
.EXAMPLE
|
||||
.\Monitor-DiskSpace.ps1 -ThresholdPercent 20 -LogPath "D:\Logs\DiskMonitor.log"
|
||||
|
||||
.EXAMPLE
|
||||
.\Monitor-DiskSpace.ps1 -SendEmail $true -SmtpServer "smtp.domain.com" -EmailFrom "alerts@domain.com" -EmailTo "admin@domain.com"
|
||||
#>
|
||||
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[int]$ThresholdPercent = 15,
|
||||
[int]$ThresholdGB = 0,
|
||||
[string]$LogPath = "C:\Temp\DiskSpace-Monitor.log",
|
||||
[bool]$SendEmail = $false,
|
||||
[string]$SmtpServer = "",
|
||||
[string]$EmailFrom = "",
|
||||
[string]$EmailTo = ""
|
||||
)
|
||||
|
||||
function Write-Log {
|
||||
param([string]$Message, [string]$Level = "INFO")
|
||||
$stamp = (Get-Date).ToString('yyyy-MM-dd HH:mm:ss')
|
||||
$line = "[$stamp] [$Level] $Message"
|
||||
Write-Output $line
|
||||
|
||||
# Ensure log directory exists
|
||||
$logDir = Split-Path -Path $LogPath -Parent
|
||||
if ($logDir -and -not (Test-Path -Path $logDir)) {
|
||||
try {
|
||||
New-Item -ItemType Directory -Path $logDir -Force | Out-Null
|
||||
} catch {}
|
||||
}
|
||||
|
||||
try {
|
||||
Add-Content -Path $LogPath -Value $line -Encoding UTF8 -ErrorAction SilentlyContinue
|
||||
} catch {}
|
||||
}
|
||||
|
||||
Write-Log "⚠️ AI-GENERATED SCRIPT - UNTESTED" "WARNING"
|
||||
Write-Log "Starting disk space monitoring on $env:COMPUTERNAME"
|
||||
|
||||
# Get all fixed drives
|
||||
$disks = Get-CimInstance -ClassName Win32_LogicalDisk -Filter "DriveType=3" -ErrorAction SilentlyContinue
|
||||
|
||||
if (-not $disks) {
|
||||
Write-Log "ERROR: Could not retrieve disk information" "ERROR"
|
||||
exit 2
|
||||
}
|
||||
|
||||
$alerts = @()
|
||||
$allDisksOK = $true
|
||||
|
||||
foreach ($disk in $disks) {
|
||||
$drive = $disk.DeviceID
|
||||
$sizeGB = [math]::Round($disk.Size / 1GB, 2)
|
||||
$freeGB = [math]::Round($disk.FreeSpace / 1GB, 2)
|
||||
$usedGB = [math]::Round(($disk.Size - $disk.FreeSpace) / 1GB, 2)
|
||||
$percentFree = [math]::Round(($disk.FreeSpace / $disk.Size) * 100, 2)
|
||||
|
||||
Write-Log "Drive $drive - Size: $sizeGB GB, Free: $freeGB GB ($percentFree%)"
|
||||
|
||||
# Check thresholds
|
||||
$alertTriggered = $false
|
||||
$alertReason = ""
|
||||
|
||||
if ($ThresholdGB -gt 0 -and $freeGB -lt $ThresholdGB) {
|
||||
$alertTriggered = $true
|
||||
$alertReason = "Free space ($freeGB GB) below threshold ($ThresholdGB GB)"
|
||||
} elseif ($percentFree -lt $ThresholdPercent) {
|
||||
$alertTriggered = $true
|
||||
$alertReason = "Free space ($percentFree%) below threshold ($ThresholdPercent%)"
|
||||
}
|
||||
|
||||
if ($alertTriggered) {
|
||||
$allDisksOK = $false
|
||||
$alertMsg = "ALERT: Drive $drive - $alertReason"
|
||||
Write-Log $alertMsg "ALERT"
|
||||
|
||||
$alerts += [PSCustomObject]@{
|
||||
Drive = $drive
|
||||
SizeGB = $sizeGB
|
||||
FreeGB = $freeGB
|
||||
UsedGB = $usedGB
|
||||
PercentFree = $percentFree
|
||||
Reason = $alertReason
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# Send email if configured and alerts exist
|
||||
if ($SendEmail -and $alerts.Count -gt 0) {
|
||||
if (-not $SmtpServer -or -not $EmailFrom -or -not $EmailTo) {
|
||||
Write-Log "Email alerts enabled but SMTP parameters incomplete" "WARNING"
|
||||
} else {
|
||||
Write-Log "Sending email alert to $EmailTo via $SmtpServer"
|
||||
|
||||
$subject = "DISK SPACE ALERT: $env:COMPUTERNAME"
|
||||
$body = @"
|
||||
Disk Space Alert on $env:COMPUTERNAME
|
||||
Generated: $(Get-Date)
|
||||
|
||||
The following drives have triggered disk space alerts:
|
||||
|
||||
"@
|
||||
|
||||
foreach ($alert in $alerts) {
|
||||
$body += @"
|
||||
|
||||
Drive: $($alert.Drive)
|
||||
Size: $($alert.SizeGB) GB
|
||||
Free: $($alert.FreeGB) GB ($($alert.PercentFree)%)
|
||||
Used: $($alert.UsedGB) GB
|
||||
Alert: $($alert.Reason)
|
||||
"@
|
||||
}
|
||||
|
||||
$body += @"
|
||||
|
||||
|
||||
Threshold Settings:
|
||||
Percent Threshold: $ThresholdPercent%
|
||||
GB Threshold: $ThresholdGB GB
|
||||
|
||||
Please investigate and free up disk space as needed.
|
||||
"@
|
||||
|
||||
try {
|
||||
Send-MailMessage -To $EmailTo.Split(',') -From $EmailFrom -Subject $subject -Body $body -SmtpServer $SmtpServer -ErrorAction Stop
|
||||
Write-Log "Email sent successfully"
|
||||
} catch {
|
||||
Write-Log "ERROR sending email: $($_.Exception.Message)" "ERROR"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# Exit with appropriate code
|
||||
if ($allDisksOK) {
|
||||
Write-Log "All disks have sufficient free space"
|
||||
exit 0
|
||||
} else {
|
||||
Write-Log "$($alerts.Count) disk(s) below threshold"
|
||||
exit 1
|
||||
}
|
||||
290
Misc/Test-ExchangeHealth.ps1
Normal file
290
Misc/Test-ExchangeHealth.ps1
Normal file
@ -0,0 +1,290 @@
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Quick Exchange server health check with aggregated results
|
||||
|
||||
.DESCRIPTION
|
||||
Runs multiple Exchange health cmdlets and aggregates results into a single
|
||||
report. Includes service health, replication health, MAPI connectivity,
|
||||
and database mount status.
|
||||
|
||||
.PARAMETER OutputFolder
|
||||
Destination folder for reports. Default: .\ExchangeHealth-<date>
|
||||
|
||||
.PARAMETER IncludeMailflow
|
||||
Test mail flow using Test-Mailflow cmdlet (default: $false, can be slow)
|
||||
|
||||
.PARAMETER ServerName
|
||||
Specific server to test (default: local server)
|
||||
|
||||
.NOTES
|
||||
⚠️ AI-GENERATED SCRIPT - UNTESTED
|
||||
This script was generated by Claude AI and has not been tested in production.
|
||||
Review and test thoroughly in a non-production environment before use.
|
||||
|
||||
- Run in Exchange Management Shell
|
||||
- Some tests require specific server roles
|
||||
- Tests are non-intrusive (read-only)
|
||||
|
||||
.EXAMPLE
|
||||
.\Test-ExchangeHealth.ps1
|
||||
|
||||
.EXAMPLE
|
||||
.\Test-ExchangeHealth.ps1 -ServerName "EXCH01" -IncludeMailflow $true
|
||||
#>
|
||||
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[string]$OutputFolder = (Join-Path -Path (Get-Location) -ChildPath ("ExchangeHealth-" + (Get-Date -Format "yyyyMMdd-HHmm"))),
|
||||
[bool]$IncludeMailflow = $false,
|
||||
[string]$ServerName = $env:COMPUTERNAME
|
||||
)
|
||||
|
||||
function NowTag { (Get-Date).ToString("yyyy-MM-dd HH:mm:ss") }
|
||||
|
||||
Write-Host "[$(NowTag)] ⚠️ AI-GENERATED SCRIPT - UNTESTED" -ForegroundColor Yellow
|
||||
Write-Host "[$(NowTag)] Starting Exchange health check on $ServerName..." -ForegroundColor Green
|
||||
|
||||
# Create output folder
|
||||
New-Item -ItemType Directory -Path $OutputFolder -Force | Out-Null
|
||||
|
||||
$allResults = @()
|
||||
$criticalIssues = @()
|
||||
$warnings = @()
|
||||
|
||||
# Test 1: Service Health
|
||||
Write-Host "[$(NowTag)] Testing service health..."
|
||||
try {
|
||||
$serviceHealth = Test-ServiceHealth -Server $ServerName -ErrorAction SilentlyContinue
|
||||
if ($serviceHealth) {
|
||||
foreach ($svc in $serviceHealth) {
|
||||
$result = [PSCustomObject]@{
|
||||
TestCategory = "ServiceHealth"
|
||||
TestName = $svc.Role
|
||||
Server = $ServerName
|
||||
Status = if ($svc.RequiredServicesRunning) { "PASS" } else { "FAIL" }
|
||||
Details = "Required services: $($svc.RequiredServicesRunning)"
|
||||
}
|
||||
$allResults += $result
|
||||
|
||||
if (-not $svc.RequiredServicesRunning) {
|
||||
$criticalIssues += "Service Health FAILED for role: $($svc.Role)"
|
||||
}
|
||||
}
|
||||
Write-Host " Service Health: COMPLETED" -ForegroundColor Green
|
||||
} else {
|
||||
Write-Host " Service Health: No results (cmdlet may not be available)" -ForegroundColor Yellow
|
||||
}
|
||||
} catch {
|
||||
Write-Host " Service Health: ERROR - $($_.Exception.Message)" -ForegroundColor Red
|
||||
$allResults += [PSCustomObject]@{
|
||||
TestCategory = "ServiceHealth"
|
||||
TestName = "Test-ServiceHealth"
|
||||
Server = $ServerName
|
||||
Status = "ERROR"
|
||||
Details = $_.Exception.Message
|
||||
}
|
||||
}
|
||||
|
||||
# Test 2: Replication Health (DAG servers only)
|
||||
Write-Host "[$(NowTag)] Testing replication health..."
|
||||
try {
|
||||
$replHealth = Test-ReplicationHealth -Server $ServerName -ErrorAction SilentlyContinue
|
||||
if ($replHealth) {
|
||||
foreach ($test in $replHealth) {
|
||||
$status = if ($test.Result -eq "Passed") { "PASS" } elseif ($test.Result -eq "Failed") { "FAIL" } else { "WARNING" }
|
||||
|
||||
$result = [PSCustomObject]@{
|
||||
TestCategory = "ReplicationHealth"
|
||||
TestName = $test.Check
|
||||
Server = $ServerName
|
||||
Status = $status
|
||||
Details = $test.Error
|
||||
}
|
||||
$allResults += $result
|
||||
|
||||
if ($status -eq "FAIL") {
|
||||
$criticalIssues += "Replication Health FAILED: $($test.Check) - $($test.Error)"
|
||||
} elseif ($status -eq "WARNING") {
|
||||
$warnings += "Replication Health WARNING: $($test.Check) - $($test.Error)"
|
||||
}
|
||||
}
|
||||
Write-Host " Replication Health: COMPLETED" -ForegroundColor Green
|
||||
} else {
|
||||
Write-Host " Replication Health: Not applicable (not a DAG member)" -ForegroundColor Yellow
|
||||
}
|
||||
} catch {
|
||||
Write-Host " Replication Health: ERROR or not applicable - $($_.Exception.Message)" -ForegroundColor Yellow
|
||||
$allResults += [PSCustomObject]@{
|
||||
TestCategory = "ReplicationHealth"
|
||||
TestName = "Test-ReplicationHealth"
|
||||
Server = $ServerName
|
||||
Status = "N/A"
|
||||
Details = "Not applicable or error: $($_.Exception.Message)"
|
||||
}
|
||||
}
|
||||
|
||||
# Test 3: MAPI Connectivity
|
||||
Write-Host "[$(NowTag)] Testing MAPI connectivity..."
|
||||
try {
|
||||
$databases = Get-MailboxDatabase -Server $ServerName -Status -ErrorAction SilentlyContinue
|
||||
foreach ($db in $databases) {
|
||||
if ($db.Mounted) {
|
||||
try {
|
||||
$mapiTest = Test-MapiConnectivity -Database $db.Name -ErrorAction Stop
|
||||
$status = if ($mapiTest.Result -eq "Success") { "PASS" } else { "FAIL" }
|
||||
|
||||
$result = [PSCustomObject]@{
|
||||
TestCategory = "MapiConnectivity"
|
||||
TestName = "Database: $($db.Name)"
|
||||
Server = $ServerName
|
||||
Status = $status
|
||||
Details = "Latency: $($mapiTest.Latency.TotalMilliseconds) ms"
|
||||
}
|
||||
$allResults += $result
|
||||
|
||||
if ($status -eq "FAIL") {
|
||||
$criticalIssues += "MAPI Connectivity FAILED for database: $($db.Name)"
|
||||
}
|
||||
} catch {
|
||||
$result = [PSCustomObject]@{
|
||||
TestCategory = "MapiConnectivity"
|
||||
TestName = "Database: $($db.Name)"
|
||||
Server = $ServerName
|
||||
Status = "ERROR"
|
||||
Details = $_.Exception.Message
|
||||
}
|
||||
$allResults += $result
|
||||
$warnings += "MAPI test error for $($db.Name): $($_.Exception.Message)"
|
||||
}
|
||||
}
|
||||
}
|
||||
Write-Host " MAPI Connectivity: COMPLETED" -ForegroundColor Green
|
||||
} catch {
|
||||
Write-Host " MAPI Connectivity: ERROR - $($_.Exception.Message)" -ForegroundColor Red
|
||||
}
|
||||
|
||||
# Test 4: Database Mount Status
|
||||
Write-Host "[$(NowTag)] Checking database mount status..."
|
||||
try {
|
||||
$databases = Get-MailboxDatabase -Server $ServerName -Status -ErrorAction SilentlyContinue
|
||||
foreach ($db in $databases) {
|
||||
$status = if ($db.Mounted) { "PASS" } else { "FAIL" }
|
||||
|
||||
$result = [PSCustomObject]@{
|
||||
TestCategory = "DatabaseMount"
|
||||
TestName = "Database: $($db.Name)"
|
||||
Server = $ServerName
|
||||
Status = $status
|
||||
Details = "Mounted: $($db.Mounted)"
|
||||
}
|
||||
$allResults += $result
|
||||
|
||||
if (-not $db.Mounted) {
|
||||
$criticalIssues += "Database DISMOUNTED: $($db.Name)"
|
||||
}
|
||||
}
|
||||
Write-Host " Database Mount Status: COMPLETED" -ForegroundColor Green
|
||||
} catch {
|
||||
Write-Host " Database Mount Status: ERROR - $($_.Exception.Message)" -ForegroundColor Red
|
||||
}
|
||||
|
||||
# Test 5: Mail Flow (optional)
|
||||
if ($IncludeMailflow) {
|
||||
Write-Host "[$(NowTag)] Testing mail flow (this may take a minute)..."
|
||||
try {
|
||||
$mailflowTest = Test-Mailflow -TargetMailboxServer $ServerName -ErrorAction Stop
|
||||
$status = if ($mailflowTest.TestMailflowResult -eq "Success") { "PASS" } else { "FAIL" }
|
||||
|
||||
$result = [PSCustomObject]@{
|
||||
TestCategory = "Mailflow"
|
||||
TestName = "Test-Mailflow"
|
||||
Server = $ServerName
|
||||
Status = $status
|
||||
Details = "Result: $($mailflowTest.TestMailflowResult), Latency: $($mailflowTest.MessageLatencyTime.TotalMilliseconds) ms"
|
||||
}
|
||||
$allResults += $result
|
||||
|
||||
if ($status -eq "FAIL") {
|
||||
$criticalIssues += "Mail Flow test FAILED"
|
||||
}
|
||||
Write-Host " Mail Flow: COMPLETED" -ForegroundColor Green
|
||||
} catch {
|
||||
Write-Host " Mail Flow: ERROR - $($_.Exception.Message)" -ForegroundColor Red
|
||||
$allResults += [PSCustomObject]@{
|
||||
TestCategory = "Mailflow"
|
||||
TestName = "Test-Mailflow"
|
||||
Server = $ServerName
|
||||
Status = "ERROR"
|
||||
Details = $_.Exception.Message
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# Export results
|
||||
Write-Host "[$(NowTag)] Exporting results..."
|
||||
|
||||
$csvFile = Join-Path $OutputFolder "Health-Check-Results.csv"
|
||||
$allResults | Export-Csv -NoTypeInformation -Encoding UTF8 -Path $csvFile
|
||||
Write-Host "[$(NowTag)] Results exported: $csvFile" -ForegroundColor Green
|
||||
|
||||
# Summary
|
||||
$passCount = ($allResults | Where-Object Status -eq "PASS").Count
|
||||
$failCount = ($allResults | Where-Object Status -eq "FAIL").Count
|
||||
$errorCount = ($allResults | Where-Object Status -eq "ERROR").Count
|
||||
$totalTests = $allResults.Count
|
||||
|
||||
$summaryFile = Join-Path $OutputFolder "Health-Check-Summary.txt"
|
||||
$summary = @"
|
||||
Exchange Health Check Summary
|
||||
Server: $ServerName
|
||||
Generated: $(Get-Date)
|
||||
|
||||
TEST RESULTS:
|
||||
Total Tests: $totalTests
|
||||
Passed: $passCount
|
||||
Failed: $failCount
|
||||
Errors: $errorCount
|
||||
Overall Status: $(if ($failCount -eq 0 -and $errorCount -eq 0) { "HEALTHY" } else { "ISSUES DETECTED" })
|
||||
|
||||
$(if ($criticalIssues.Count -gt 0) {
|
||||
"CRITICAL ISSUES:
|
||||
$($criticalIssues | ForEach-Object { " - $_" } | Out-String)
|
||||
"} else { "" })
|
||||
|
||||
$(if ($warnings.Count -gt 0) {
|
||||
"WARNINGS:
|
||||
$($warnings | ForEach-Object { " - $_" } | Out-String)
|
||||
"} else { "" })
|
||||
|
||||
DETAILED RESULTS:
|
||||
$($allResults | ForEach-Object { " [$($_.Status)] $($_.TestCategory) - $($_.TestName): $($_.Details)" } | Out-String)
|
||||
"@
|
||||
|
||||
$summary | Out-File -FilePath $summaryFile -Encoding UTF8
|
||||
Write-Host "[$(NowTag)] Summary: $summaryFile" -ForegroundColor Green
|
||||
|
||||
# Console output
|
||||
Write-Host "`nHEALTH CHECK SUMMARY:" -ForegroundColor Cyan
|
||||
Write-Host " Total Tests: $totalTests"
|
||||
Write-Host " Passed: $passCount" -ForegroundColor Green
|
||||
Write-Host " Failed: $failCount" -ForegroundColor $(if ($failCount -gt 0) { "Red" } else { "Green" })
|
||||
Write-Host " Errors: $errorCount" -ForegroundColor $(if ($errorCount -gt 0) { "Red" } else { "Green" })
|
||||
|
||||
if ($criticalIssues.Count -gt 0) {
|
||||
Write-Host "`nCRITICAL ISSUES DETECTED:" -ForegroundColor Red
|
||||
$criticalIssues | ForEach-Object { Write-Host " - $_" -ForegroundColor Red }
|
||||
}
|
||||
|
||||
if ($warnings.Count -gt 0) {
|
||||
Write-Host "`nWARNINGS:" -ForegroundColor Yellow
|
||||
$warnings | ForEach-Object { Write-Host " - $_" -ForegroundColor Yellow }
|
||||
}
|
||||
|
||||
Write-Host "`n[$(NowTag)] Health check complete! Output folder: $OutputFolder"
|
||||
|
||||
# Exit code
|
||||
if ($failCount -gt 0 -or $errorCount -gt 0) {
|
||||
exit 1
|
||||
} else {
|
||||
exit 0
|
||||
}
|
||||
Reference in New Issue
Block a user