Business and Information Technology Tangents » Powershell Tangents

PowerShell queryService–Wait for a Dependency Starting Service

brentblawat — Fri, 03 Jun 2011 01:13:42 +0000

By: Brenton Blawat

There have been several occasions while scripting in PowerShell that the script is dependent on a specific service in the running state. A good example is the need to wait for the WMI Service to startup prior to making a WMI call, or SQL Server where when you restart the services, you have to wait for the services to be in a running state before you can execute commands.

The following function solves this issue. It also displays the proper implementation of a PowerShell wait timer to wait for a service to become operational before continuing in the script.

PowerShell Code Waiting for Service

Download Code

   1: # This Function Will Query A Dependancy Service and wait until the timer expires OR for the service to start.

   2: function QueryService { param($Service,$timer1)

   3:     $success = ""

   4:     write-host "Waiting on $Service Service..."

5:

   6:     # Create a for loop to INC a timer Every Second

   7:     for ($b=1; $b -lt $timer1; $b++) {

   8:             $servicestat = get-service $Service

   9:             $status = $servicestat.status

  10:             $b2 = $timer1 - $b

11:

  12:             # Determine the Percent Complete for the seconds.

  13:             $percent = $b * (100 / $timer1)

14:

  15:             # Display the progress on the Screen

  16:             Write-Progress -Activity "Waiting on $Service Service..." -PercentComplete $percent -CurrentOperation "$b2 Seconds Remaining" -Status "Current WMI Status: $status"

17:

  18:             # Determine if the Process is Running. If not, reloop. If so exit loop.

  19:             if ($status -eq "Running") {

  20:                 write-host "$Service Service Started Successfully: $status in $b Seconds"

  21:                 [int]$b = $timer1

  22:                     $success = "yes"

23:

  24:                 # Tells the Loop to Stop Incrementing as the Service is running

  25:                 Write-Progress -Activity "Completed" -Status "Current $Service Status: $status in $b Seconds" -Completed

26:

  27:             }

28:

  29:         # Start-Sleep is available for the write-progress. Its value is in seconds.

  30:         start-sleep 1

31:

  32:     }

  33:     # The script will now stop as the above loop has meet its time criteria and the success is not set to yes.time has expired.

  34:     if ($success -ne "yes") {

  35:         write-host "ERROR in Script: $Service Service Did Not Start In $timer1 Seconds. Status: $status"

  36:         # Stop the Script

  37:        BREAK

  38:     }

  39: }

40:

  41: # The service must be the actual executible name, not the friendly name

  42: # The Below Examples are Querying SQL Services for startup waiting 120 seconds for a timeout.

  43: QueryService "SQLServerAgent" "120"

  44: QueryService "MSSQLSERVER" "120"

The implementation of the QueryService is pretty straight forward. The syntax is

QueryServices “EXENAME” “TIMEOUT_IN_SECONDS”

The exe name is what is found in the Services Management Console listed under the "Service Name”. Using the “Display Name” will not work with this function.

Please note: If a service is running, there will be approximately a second delay in the script while the system is verifying if the service is running. This is a small sacrifice for error handling in the instance that the service may not be running.

Happy Coding!

Powershell Import-GPO : The Data Is Invalid Fixed

brentblawat — Tue, 20 Apr 2010 20:05:51 +0000

By: Brenton Blawat

This article is to aid those who are receiving the “Data is Invalid” error message in Powershell on Windows Server 2008 R2. This issue occurs while trying to import policies from one domain into their a different domain using a migration table. This issue has to do with the migration table editor referring to the “Pre-Windows 2000 Username” to migrate users instead of their Standard Username.

Syntax of Command Used for Error:

Import-GPO –BackupID {GUIDGOESHERE} –TargetName “Default_AccountingPolicy” –path “c:\scriptloc\” –MigrationTable “C:\scriptloc\DefaultMig.migtable” –CreateIfNeeded | Out-Null

Error:

“ Import-GPO : The Data is invalid. (Exception from HRESULT: 0x8007000D) “

Solution:

The issue has to do with creating Users and User Groups without the ‘SAMACCOUNTNAME’ field while coding with Powershell. Windows Server 2008 R2 generates a unique Pre-2000 username starting with ‘$’ and a series of numbers following. When using the ‘-migrationtable’ trigger, it causes import-gpo cmdlet to validate the “destination users” PRIOR to importing the group policy. If it cannot resolve the User or User group, it will cause the ‘’HRESULT error’.

The following lines were added to the Powershell Script for creating a User Group, which corrected this issue:

   1: # Where $objworker was the AD method and $ADobjname was the name of the user / group

   2: $objworker.put("sAMAccountName", "$ADobjname")

   3: $objworker.SetInfo()

Depending on your network, the fix can be done in two ways:

Ensure the “Pre-Windows 2000 name” is the same as the “Standard Windows Name”
Correct the Migration Table to Use the Pre-Windows 2000 Names for the ‘Destination’

Simple fix – just wish that the error would be more like “Errors in Migration Table”. The error message of “The Data Is Invalid “ is useless in my opinion.

Happy Coding!

PowerShell Script: Encrypting / Decrypting A String – Function Encrypt-String

brentblawat — Sat, 20 Mar 2010 15:40:26 +0000

By: Brenton Blawat

The encryption and decryption of strings is essential when creating an enterprise product that has clear text passwords. This function displays how to encrypt and decrypt a string using Powershell using Richard’s code located at http://poshcode.org/116. While I found his code very useful, he didn’t explain the syntax and is why I am reposting this with the proper information.

I also decided to make this into an endless loop for an administrator to use to encrypt multiple passwords in a row. I found this to be useful as I never had to encrypt just one password.

Important for your security!!

In order to ensure your application is safe from an attacker be certain to perform each of the following:

1. Change the $salt variable and $init variables. These variables should be at least 8 characters long but should be changed or your application is subject to a brute force attack if someone determines you are using my code!

   1: function Encrypt-String($String, $Passphrase, $salt="SaltCrypto", $init="IV_Password", [switch]$arrayOutput)

2. Change the Passphrase that is passed into the function. I suggest a 12-18 character Passphrase to prevent the above brute force attack.

   1: $encrypted = Encrypt-String $string "MyStrongPassword"

3. Be sure to pass the right Passphrase into the function for decryption. If you pass the wrong key into the function, you will not get the correct password returned from the function.

Function for Encrypting / Decrypting A String in PowerShell

Download PS1 Here

   1: #################

   2: # Powershell Allows The Loading of .NET Assemblies

   3: # Load the Security assembly to use with this script

   4: #################

   5: [Reflection.Assembly]::LoadWithPartialName("System.Security")

6:

   7: #################

   8: # This function is to Encrypt A String.

   9: # $string is the string to encrypt, $passphrase is a second security "password" that has to be passed to decrypt.

  10: # $salt is used during the generation of the crypto password to prevent password guessing.

  11: # $init is used to compute the crypto hash -- a checksum of the encryption

  12: #################

  13: function Encrypt-String($String, $Passphrase, $salt="SaltCrypto", $init="IV_Password", [switch]$arrayOutput)

  14: {

  15:     # Create a COM Object for RijndaelManaged Cryptography

  16:     $r = new-Object System.Security.Cryptography.RijndaelManaged

  17:     # Convert the Passphrase to UTF8 Bytes

  18:     $pass = [Text.Encoding]::UTF8.GetBytes($Passphrase)

  19:     # Convert the Salt to UTF Bytes

  20:     $salt = [Text.Encoding]::UTF8.GetBytes($salt)

21:

  22:     # Create the Encryption Key using the passphrase, salt and SHA1 algorithm at 256 bits

  23:     $r.Key = (new-Object Security.Cryptography.PasswordDeriveBytes $pass, $salt, "SHA1", 5).GetBytes(32) #256/8

  24:     # Create the Intersecting Vector Cryptology Hash with the init

  25:     $r.IV = (new-Object Security.Cryptography.SHA1Managed).ComputeHash( [Text.Encoding]::UTF8.GetBytes($init) )[0..15]

26:

  27:     # Starts the New Encryption using the Key and IV

  28:     $c = $r.CreateEncryptor()

  29:     # Creates a MemoryStream to do the encryption in

  30:     $ms = new-Object IO.MemoryStream

  31:     # Creates the new Cryptology Stream --> Outputs to $MS or Memory Stream

  32:     $cs = new-Object Security.Cryptography.CryptoStream $ms,$c,"Write"

  33:     # Starts the new Cryptology Stream

  34:     $sw = new-Object IO.StreamWriter $cs

  35:     # Writes the string in the Cryptology Stream

  36:     $sw.Write($String)

  37:     # Stops the stream writer

  38:     $sw.Close()

  39:     # Stops the Cryptology Stream

  40:     $cs.Close()

  41:     # Stops writing to Memory

  42:     $ms.Close()

  43:     # Clears the IV and HASH from memory to prevent memory read attacks

  44:     $r.Clear()

  45:     # Takes the MemoryStream and puts it to an array

  46:     [byte[]]$result = $ms.ToArray()

  47:     # Converts the array from Base 64 to a string and returns

  48:     return [Convert]::ToBase64String($result)

  49: }

50:

  51: function Decrypt-String($Encrypted, $Passphrase, $salt="SaltCrypto", $init="IV_Password")

  52: {

  53:     # If the value in the Encrypted is a string, convert it to Base64

  54:     if($Encrypted -is [string]){

  55:         $Encrypted = [Convert]::FromBase64String($Encrypted)

  56:        }

57:

  58:     # Create a COM Object for RijndaelManaged Cryptography

  59:     $r = new-Object System.Security.Cryptography.RijndaelManaged

  60:     # Convert the Passphrase to UTF8 Bytes

  61:     $pass = [Text.Encoding]::UTF8.GetBytes($Passphrase)

  62:     # Convert the Salt to UTF Bytes

  63:     $salt = [Text.Encoding]::UTF8.GetBytes($salt)

64:

  65:     # Create the Encryption Key using the passphrase, salt and SHA1 algorithm at 256 bits

  66:     $r.Key = (new-Object Security.Cryptography.PasswordDeriveBytes $pass, $salt, "SHA1", 5).GetBytes(32) #256/8

  67:     # Create the Intersecting Vector Cryptology Hash with the init

  68:     $r.IV = (new-Object Security.Cryptography.SHA1Managed).ComputeHash( [Text.Encoding]::UTF8.GetBytes($init) )[0..15]

69:

70:

  71:     # Create a new Decryptor

  72:     $d = $r.CreateDecryptor()

  73:     # Create a New memory stream with the encrypted value.

  74:     $ms = new-Object IO.MemoryStream @(,$Encrypted)

  75:     # Read the new memory stream and read it in the cryptology stream

  76:     $cs = new-Object Security.Cryptography.CryptoStream $ms,$d,"Read"

  77:     # Read the new decrypted stream

  78:     $sr = new-Object IO.StreamReader $cs

  79:     # Return from the function the stream

  80:     Write-Output $sr.ReadToEnd()

  81:     # Stops the stream

  82:     $sr.Close()

  83:     # Stops the crypology stream

  84:     $cs.Close()

  85:     # Stops the memory stream

  86:     $ms.Close()

  87:     # Clears the RijndaelManaged Cryptology IV and Key

  88:     $r.Clear()

  89: }

90:

  91: # This clears the screen of the output from the loading of the assembly.

  92: cls

93:

  94: # $me will never = 1, so It will run indefinately

  95: $me = 0

  96:     write-host "To End This Application, Close the Window"

  97:     Write-host ""

  98: do

  99: {

 100:     # Prompt the user for the password

 101:     $string = read-host "Please Enter User Password"

 102:     # Encrypt the string and store it into the $encrypted variable

 103:     $encrypted = Encrypt-String $string "MyStrongPassword"

 104:     # Write result to the screen

 105:     write-host "Encrypted Password is: $encrypted"

 106:     write-host ""

 107:

 108:     write-host "Testing Decryption of Password..."

 109:

 110:     # Decrypts the string and stores the decrypted value in $decrypted

 111:     $decrypted = Decrypt-String $encrypted "MyStrongPassword"

 112:     # Writes the decrpted value to the screen

 113:     write-host "Decrypted Password is: $decrypted"

 114:     write-host ""

 115: }

 116:

 117: while ($me -ne 1)

To use this Function:

Start > Run > Type powershell.exe –noexit c:\location\EncryptDecryptString.ps1

** When you are done close the window.

Function for Encrypting Username and Passwords in PowerShell

Download PS1 Here

You will notice that I changed the Passphrase for both the username and the password. This is not necessary, however, it adds another layer of security. Try not to encrypt everything with the same passphrase. If one item gets compromised, everything encrypted under that passphrase is compromised.

   1: #################

   2: # Powershell Allows The Loading of .NET Assemblies

   3: # Load the Security assembly to use with this script

   4: #################

   5: [Reflection.Assembly]::LoadWithPartialName("System.Security")

6:

   7: #################

   8: # This function is to Encrypt A String.

   9: # $string is the string to encrypt, $passphrase is a second security "password" that has to be passed to decrypt.

  10: # $salt is used during the generation of the crypto password to prevent password guessing.

  11: # $init is used to compute the crypto hash -- a checksum of the encryption

  12: #################

  13: function Encrypt-String($String, $Passphrase, $salt="SaltCrypto", $init="IV_Password", [switch]$arrayOutput)

  14: {

  15:     # Create a COM Object for RijndaelManaged Cryptography

  16:     $r = new-Object System.Security.Cryptography.RijndaelManaged

  17:     # Convert the Passphrase to UTF8 Bytes

  18:     $pass = [Text.Encoding]::UTF8.GetBytes($Passphrase)

  19:     # Convert the Salt to UTF Bytes

  20:     $salt = [Text.Encoding]::UTF8.GetBytes($salt)

21:

  22:     # Create the Encryption Key using the passphrase, salt and SHA1 algorithm at 256 bits

  23:     $r.Key = (new-Object Security.Cryptography.PasswordDeriveBytes $pass, $salt, "SHA1", 5).GetBytes(32) #256/8

  24:     # Create the Intersecting Vector Cryptology Hash with the init

  25:     $r.IV = (new-Object Security.Cryptography.SHA1Managed).ComputeHash( [Text.Encoding]::UTF8.GetBytes($init) )[0..15]

26:

  27:     # Starts the New Encryption using the Key and IV

  28:     $c = $r.CreateEncryptor()

  29:     # Creates a MemoryStream to do the encryption in

  30:     $ms = new-Object IO.MemoryStream

  31:     # Creates the new Cryptology Stream --> Outputs to $MS or Memory Stream

  32:     $cs = new-Object Security.Cryptography.CryptoStream $ms,$c,"Write"

  33:     # Starts the new Cryptology Stream

  34:     $sw = new-Object IO.StreamWriter $cs

  35:     # Writes the string in the Cryptology Stream

  36:     $sw.Write($String)

  37:     # Stops the stream writer

  38:     $sw.Close()

  39:     # Stops the Cryptology Stream

  40:     $cs.Close()

  41:     # Stops writing to Memory

  42:     $ms.Close()

  43:     # Clears the IV and HASH from memory to prevent memory read attacks

  44:     $r.Clear()

  45:     # Takes the MemoryStream and puts it to an array

  46:     [byte[]]$result = $ms.ToArray()

  47:     # Converts the array from Base 64 to a string and returns

  48:     return [Convert]::ToBase64String($result)

  49: }

50:

  51: function Decrypt-String($Encrypted, $Passphrase, $salt="SaltCrypto", $init="IV_Password")

  52: {

  53:     # If the value in the Encrypted is a string, convert it to Base64

  54:     if($Encrypted -is [string]){

  55:         $Encrypted = [Convert]::FromBase64String($Encrypted)

  56:        }

57:

  58:     # Create a COM Object for RijndaelManaged Cryptography

  59:     $r = new-Object System.Security.Cryptography.RijndaelManaged

  60:     # Convert the Passphrase to UTF8 Bytes

  61:     $pass = [Text.Encoding]::UTF8.GetBytes($Passphrase)

  62:     # Convert the Salt to UTF Bytes

  63:     $salt = [Text.Encoding]::UTF8.GetBytes($salt)

64:

  65:     # Create the Encryption Key using the passphrase, salt and SHA1 algorithm at 256 bits

  66:     $r.Key = (new-Object Security.Cryptography.PasswordDeriveBytes $pass, $salt, "SHA1", 5).GetBytes(32) #256/8

  67:     # Create the Intersecting Vector Cryptology Hash with the init

  68:     $r.IV = (new-Object Security.Cryptography.SHA1Managed).ComputeHash( [Text.Encoding]::UTF8.GetBytes($init) )[0..15]

69:

70:

  71:     # Create a new Decryptor

  72:     $d = $r.CreateDecryptor()

  73:     # Create a New memory stream with the encrypted value.

  74:     $ms = new-Object IO.MemoryStream @(,$Encrypted)

  75:     # Read the new memory stream and read it in the cryptology stream

  76:     $cs = new-Object Security.Cryptography.CryptoStream $ms,$d,"Read"

  77:     # Read the new decrypted stream

  78:     $sr = new-Object IO.StreamReader $cs

  79:     # Return from the function the stream

  80:     Write-Output $sr.ReadToEnd()

  81:     # Stops the stream

  82:     $sr.Close()

  83:     # Stops the crypology stream

  84:     $cs.Close()

  85:     # Stops the memory stream

  86:     $ms.Close()

  87:     # Clears the RijndaelManaged Cryptology IV and Key

  88:     $r.Clear()

  89: }

90:

  91: # This clears the screen of the output from the loading of the assembly.

  92: cls

93:

  94: # $me will never = 1, so It will run indefinately

  95: $me = 0

  96:     write-host "To End This Application, Close the Window"

  97:     Write-host ""

  98: do

  99: {

 100:     # Prompt the user for the password

 101:

 102:     $ustring = read-host "(Case Sensitive) Please Enter Username"

 103:     $pstring = read-host "(Case Sensitive) Please Enter User Password"

 104:     # Encrypt the string and store it into the $encrypted variable

 105:     $uencrypted = Encrypt-String $ustring "U_MyStrongPassword"

 106:     $pencrypted = Encrypt-String $pstring "P_MyStrongPassword"

 107:

 108:     # Write result to the screen

 109:     write-host "Encrypted Username is: $uencrypted"

 110:     write-host ""

 111:     write-host "Encrypted Password is: $pencrypted"

 112:     write-host ""

 113:

 114:     write-host "Testing Decryption of Username / Password..."

 115:     write-host ""

 116:     # Decrypts the string and stores the decrypted value in $decrypted

 117:     $udecrypted = Decrypt-String $uencrypted "U_MyStrongPassword"

 118:     $pdecrypted = Decrypt-String $pencrypted "P_MyStrongPassword"

 119:

 120:     # Writes the decrpted value to the screen

 121:     write-host "Decrypted Password is: $udecrypted"

 122:     write-host ""

 123:     write-host "Decrypted Password is: $pdecrypted"

 124:

 125: }

 126:

 127: while ($me -ne 1)

To use this Function:

Start > Run > Type powershell.exe –noexit c:\location\EncryptDecryptStringUP.ps1

** When you are done close the window.

PowerShell Script: Finding A Distinguished Name of a Group/User: Function Find-DN

brentblawat — Mon, 08 Mar 2010 22:18:43 +0000

By: Brenton Blawat

This article explains the the method by which one would be able to Search Active Directory for the distinguished name of a User or Group. This is helpful when trying to add an object to Active Directory or adding Users to Groups.

Function Find-DN Finding Distinguished Name: Download PS1 Here

   1: # Function Find Distinguished Name

   2: function find-dn { param([string]$adfindtype, [string]$cName)

   3:     # Create A New ADSI Call

   4:     $root = [ADSI]''

   5:     # Create a New DirectorySearcher Object

   6:     $searcher = new-object System.DirectoryServices.DirectorySearcher($root)

   7:     # Set the filter to search for a specific CNAME

   8:     $searcher.filter = "(&(objectClass=$adfindtype) (CN=$cName))"

   9:     # Set results in $adfind variable

  10:     $adfind = $searcher.findall()

11:

  12:     # If Search has Multiple Answers

  13:     if ($adfind.count -gt 1) {

  14:         $count = 0

  15:         foreach($i in $adfind)

  16:         {

  17:             # Write Answers On Screen

  18:             write-host $count ": " $i.path

  19:             $count += 1

  20:         }

  21:         # Prompt User For Selection

  22:         $selection = Read-Host "Please select item: "

  23:         # Return the Selection

  24:         return $adfind[$selection].path

  25:     }

  26:     # Return The Answer

  27:     return $adfind[0].path

  28: }

Using this Function:

   1: # To use the function to find a User:

   2: find-dn "user" "Blawat"

3:

   4: # To use the function to find a Group:

   5: find-dn "group" "IT Help Desk"

PowerShell Script: Retrieving Distinguished name (DN) from A Fully Qualified Domain Name (FQDN)

brentblawat — Mon, 22 Feb 2010 19:49:40 +0000

By: Brenton Blawat

While there are many posts that describe the code to do this function, there aren’t many posts that provide variables with meaning or actually describe the syntax. This post describes the method by which you can retrieve a Distinguished Name from a Fully Qualified Domain Name.

Quick Reference:

Fully Qualified Domain Name (FQDN): division.domain.root

Distinguished Name (DC): DC=division,DC=Domain,DC=root

Canonical Name(CN): division.domain.root/OrganizationalUnit/

If you are looking for a quick way to obtain a Distinguished Name or Fully Qualified Domain Name See this article.

Mr. Weaver’s Code

Mark A. Weaver’s post Powershell – Recursive Group Membership, he describes the methods by which you can convert to and from multiple variables. Here is how Mr. Weaver performs the conversion operation:

   1: function Convert-DNStoDN ($DNSName)

   2: {

   3:    #  Create an array of each item in the string separated by "."

   4:    $DNSArray = $DNSName.Split(".")

   5:   # Let's go through our new array and do something with each item

   6:    for ($x = 0; $x -lt $DNSArray.Length ; $x++)

   7:       {

   8:         #I don't want a comma after my last item, so check to see if I am on my last one and set

   9:         # $Separator equal to nothing.

  10:         # Remember that we need to go to Length-1 because arrays are "0 based indexes"

  11:          if ($x -eq ($DNSArray.Length - 1)){$Separator = ""}else{$Separator =","}

  12:          [string]$DN += "DC=" + $DNSArray[$x] + $Separator

  13:       }

  14:    return $DN

  15: }

My Code – Explained

While my code is almost identical to Mr. Weaver’s Code, my only criticism is not providing useful variables and describing the functions. I can state, however, Mr. Weaver’s code provided a platform for a function that I use in a large production environment. I took the liberty to optimize the code (slightly) to meet my needs (Thank you sir!).

My Function looks like: Download PS1 Here

   1: function Get-Domain {

2:

   3:     #Retrieve the Fully Qualified Domain Name if one is not supplied

   4:     # division.domain.root

5:

   6:     if ($FQDN -eq "") {

   7:         [String]$fqdn = [System.DirectoryServices.ActiveDirectory.Domain]::getcurrentdomain()

   8:     }

9:

  10:     # Create a New Array 'Item' for each item in between the '.' characters

  11:     # Arrayitem1 division

  12:     # Arrayitem2 domain

  13:     # Arrayitem3 root

  14:     $FQDNArray = $FQDN.split(".")

15:

  16:     # Add A Separator of ','

  17:     $Separator = ","

18:

  19:     # For Each Item in the Array

  20:     # for (CreateVar; Condition; RepeatAction)

  21:     # for ($x is now equal to 0; while $x is less than total array length; add 1 to X

  22:     for ($x = 0; $x -lt $FQDNArray.Length ; $x++)

  23:         {

24:

  25:         #If it's the last item in the array don't append a ','

  26:         if ($x -eq ($FQDNArray.Length - 1)) { $Separator = "" }

27:

  28:         # Append to $DN DC= plus the array item with a separator after

  29:         [string]$DN += "DC=" + $FQDNArray[$x] + $Separator

30:

  31:         # continue to next item in the array

  32:         }

33:

  34:     #return the Distinguished Name

  35:     return $DN

  36: }

To use the Function to get the Distinguished Name of the Domain:

   1: # Store the distinguished name in a variable named $objCrntDN.

   2: $objCrntDN = Get-Domain

To use the function to get the Distinguished Name From a Fully Qualified Domain Name:

   1: # Store the distinguished name in a variable named $objCrntDN

   2: # Pass the Fully Qualified Domain Name with call

   3: $objCrntDN = Get-Domain division.domain.root

Note: This function also works if you place the division.domain.root in parentheses with quotations:

Get-Domain(“division.domain.root”)

What’s Different??

While the output is basically the same, I’ve made a few changes in the code:

“DNSname” is technically inaccurate, while I understand what he is meaning. He is referring to is the FQDN – a point of confusion for the readers.
I made the passing of a FQDN (optional) – as sometimes we don’t need to determine the FQDN (outside the function) before we get the Distinguished Name.
I named my function ‘Get-Domain’ . DNS-DN is a very specific function. Your will see that Marc has to call three different functions to convert between each of these. I chose to make a single function, and establish what the ultimate output will be. Name the function what you are getting or creating with the function. Get-Domain –> You already know what the output will be — the Domain.
I removed the Else { $separator } out of the loop. In batch processing such as PowerShell, the interpreter will replace the $separator variable each time it passes through the loop for the items in the array. To make the code more efficient, I set the variable outside the loop as it only gets changed for the last array evaluation.

PowerShell Script: Distinguished Name / Fully Qualified Domain Name to string

brentblawat — Mon, 22 Feb 2010 19:39:24 +0000

By: Brenton Blawat

This article is designed to be short and sweet. This article displays the method by which one would retrieve the FQDN or Distinguished Name of the Domain. This is code is very useful for any operations in Active Directory. A must know for any scripter that needs to call the domain on a system without hard coding the value in the script.

Lets take a theoretical network that consists of ‘division’ subdomain, ‘domain’ as the domain, and ‘root’ as the domain root.

Root Distinguished name – Easy Method in PowerShell

   1: # Instantiate The ADSI Provider

   2: $root = [ADSI]''

   3: $CurrentDN = $root.DistinguishedName

Result:

The variable $CurrentDN will contain:

DN=division,DN=domain,DN=root

E.G. DN=bittangents,DN=com

Root Fully Qualified Domain Name (FQDN) – Easy Method In PowerShell

   1: # Retrieve the Fully Qualified Domain Name and store it in $FQDN Variable

   2: [String]$FQDN =  [System.DirectoryServices.ActiveDirectory.Domain]::getCurrentDomain()

3:

Result:

The variable $FQDN will contain:

division.domain.root

E.G. bittangents.com