[Pauldotcom] PowerShell Assessment

[Michael Dickey]

I do some PowerShell scripting for IIS management in my environment. You can
use plugins and third-party downloads if you want, but I'd always first
recommend going without. It might require some extra digging to get scripts
to do what you want, but at least you know no matter what modern Windows box
you take control of, you can leverage the existing PowerShell base. And I
want to install as few things as possible on even my own company's boxes!

To your question, ADWS and ADMGS are not required, to my knowledge. At least
I've never had to deal with them.  ADSI is your friend!

I have some examples of working with Active Directory and IIS:

http://wiki.terminal23.net/index.php/Scripting
and
http://bit.ly/nNDdjk

Clearly not very well organized, but they should give some good examples to
get started.

Also, the awesome guys at Command Line Kung Fu dive into PowerShell scripts
as well, though you'll have to search by hand for applicable topics.  (
http://blog.commandlinekungfu.com/ )



On Mon, Aug 1, 2011 at 7:18 AM, Cody Dumont <CDumont at nwnit.com> wrote:

>
>   Greetings All in the PDC world, I am starting my GCWN Gold
> certification, and the paper is going to focus on doing assessments of a
> Windows environment using the PowerShell.
>
>  While I am not a PowerShell guru, I figured this would be a great way to
> emerse  myself in the PowerShell. So the first big stumbling block I have
> run into, is to assess an AD environment you need to install the Active
> Directory Web Service (ADWS) and/or Active Directory Management Gateway
> Service (ADMGS).
>
>  When doing assessments I don't like to ask customers to install software
> agents, if you will, to support the assessment.  My questions to the mailing
> list are two fold:
>
>  1.  Is installing the ADWS & ADMGS truly necessary, and if so are these
> services commonly installed?  So, asking the customer to install the service
> would not be unreasonable, or I should find the service installed all ready.
>
>  2.  Not counting the Quest Snapins, because I already have them
> installed, are their any other PowerShell plugins that a security
> professional or windows administrator would need to install.  Please keep
> in-mind the focus of the paper is the AD and IIS, so the plugins for
> exchange and VM Ware, while very much necessary for a lot of things, I am
> focusing on just AD and IIS for the research paper.
>
>
>
>  Thanks
>  Cody
>
> ------------------------------
> Note: This message and any attachments is intended solely for the use of
> the individual or entity to which it is addressed and may contain
> information that is non-public, proprietary, legally privileged,
> confidential, and/or exempt from disclosure. If you are not the intended
> recipient, you are hereby notified that any use, dissemination,
> distribution, or copying of this communication is strictly prohibited. If
> you have received this communication in error, please notify the original
> sender immediately by telephone or return email and destroy or delete this
> message along with any attachments immediately.
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20110801/1d061342/attachment.htm>