{"id":777,"date":"2018-07-24T16:30:15","date_gmt":"2018-07-24T16:30:15","guid":{"rendered":"https:\/\/www.nicktailor.com\/?p=777"},"modified":"2020-09-15T19:30:02","modified_gmt":"2020-09-15T19:30:02","slug":"how-to-deploy-ansibleconfigure-powershell-script-on-windows","status":"publish","type":"post","link":"https:\/\/nicktailor.com\/tech-blog\/how-to-deploy-ansibleconfigure-powershell-script-on-windows\/","title":{"rendered":"How to deploy ansibleconfigure powershell script on windows"},"content":{"rendered":"

Okay fun stuff, so I tried this a number of ways which I will describe in this blog post.<\/p>\n

So if your windows server is joined to the domain and you have a machine that can reach all he virtual machines, WinRM is configured, and you have powershell 3.0 or higher setup.<\/p>\n

Then you could try the following powershell for loop from SYSVOL share<\/p>\n

\n
\n
1.<\/span>You copy the ansibleconfigurescript.ps1 to SYSVOL on so all the joined machines can reach it or you can have it run locally from the joined machine.<\/div>\n<\/div>\n
\n
2.<\/span>Next you can use the following for loop in powershell that will basically loop through a text file with a list of all the hosts and run the powershell script<\/div>\n

.<\/span><\/span><\/p>\n

Sample powershell For Loop<\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>Hosts.csv \u2013 is servers name, 1 line each as such<\/div>\n
\n
\n
\u25e6<\/span>\u00a0<\/span>Nicktailor.server1.com,<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>Nicktailor.server2.com,<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>Etc<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>The script will also ask for admin credentials which you will need.<\/div>\n<\/div>\n<\/div>\n

.<\/span><\/span><\/p>\n

powershell loop deploy \u2013 ask credentials<\/p>\n

$serverfiles=import-CSV ‘d:\\scripts\\hosts.csv’<\/p>\n

$cred = get-credential<\/p>\n

Foreach ($server in $serverfiles) {<\/p>\n

write-output $server.names<\/p>\n

invoke-command -computername $server.names -filepath d:\\scripts\\ansibleconfigure.ps1 -credential $cred<\/p>\n

}<\/p>\n

.<\/span><\/span><\/p>\n<\/div>\n

\n
3.<\/span>Now you can open up powershell console as administrator save the above into a file and run it.<\/div>\n
\n
\n
a.<\/span>.\/deployloop \u2013 Watch the output for error<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

Note: This method sucked and failed for me due to WinRM not being there and other restrictions like host having. The other was I\u2019m not exactly powershell intermediate had to muddle around a lot.<\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>set-executionpolicy -ExecutionPolicy restricted<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>set-executionpolicy -ExecutionPolicy unrestricted<\/div>\n<\/div>\n<\/div>\n

.<\/span><\/span><\/p>\n

\n
\n
4.<\/span>So this brings us to how to deploying the script via GPO(group policy object) from the DC.<\/div>\n

What you want to do here is copy the configure script to SYSVOL so all the joined machines can reach the script.<\/p>\n

.<\/span><\/span><\/p>\n

In the search bar type: (replace domain to match)<\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>\\\\home.nickatilor.com\\SYSVOL<\/a><\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>Copy ansibleconfigure.ps1 inside here.<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
5.<\/span>Next you will setup the GPO to deploy on startup as this is the only way the script will work, logon did not appear to work for me.<\/div>\n<\/div>\n
\n
6.<\/span>To do this, I decided to create a new\u00a0<\/span>Group Policy<\/span><\/a>\u00a0object (GPO) and link it to my nicktailor.com domain in my forest. In the Group Policy Management Editor, I right-click the domain, and then click\u00a0<\/span>Create a GPO<\/span><\/strong>\u00a0in this domain. This is shown in the following image.<\/span><\/div>\n<\/div>\n
\n
7.<\/span>\"Image<\/a><\/span><\/div>\n<\/div>\n
\n
8.<\/span>Right-clicking the newly created GPO in the Group Policy Management Console and clicking\u00a0<\/span>Edit<\/span><\/strong>\u00a0opens the Group Policy Management Editor, which is shown in the following image. Because I am interested in tracking not only processes that start after the user logs onto the computer but also processes that start before the logon screen, I configure a logon script for the user. There are <\/span>startup<\/span> and shutdown scripts that can be configured in Group Policy that are assigned at the computer configuration level, but they would not be the best place to obtain the information I\u2019m looking for. To set a user logon script, open the User Configuration node of the Group Policy Editor, click\u00a0<\/span>Windows Settings<\/span><\/strong>\u00a0and then click\u00a0<\/span>Scripts (Logon\/Logoff)<\/span><\/strong>.<\/span><\/div>\n<\/div>\n
\n
9.<\/span>\"Image<\/a><\/span><\/div>\n<\/div>\n
\n
10.<\/span>I double-click\u00a0<\/span>Logon<\/span><\/strong>\u00a0in the right side of the pane, and click the\u00a0<\/span>PowerShell Scripts<\/span><\/strong>\u00a0tab as shown in the following image.<\/span><\/div>\n

\"https:\/\/content.spiceworksstatic.com\/service.community\/p\/post_images\/0000225641\/588b7c03\/attached_image\/Capture.JPG\"<\/p>\n

.<\/span><\/span><\/p>\n<\/div>\n

\n
11.<\/span>Make sure you edit the script path so that it reads the SYSVOL path where its says<\/div>\n

script name<\/em><\/strong><\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>\\\\home.nicktailor.com\\SysVol\\home.nicktailor.com\\scripts\\ansibleconfigure.ps1<\/a><\/div>\n<\/div>\n<\/div>\n

\"Image<\/p>\n<\/div>\n

\n
12.<\/span>Next when the servers reboot you should be able to check the windows application logs for id=1 to see if the script ran in the event viewer or use<\/div>\n
\n
\n
b.<\/span>gpresult \/r (should show the objects applied)<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Okay fun stuff, so I tried this a number of ways which I will describe in this blog post. So if your windows server is joined to the domain and you have a machine that can reach all he virtual machines, WinRM is configured, and you have powershell 3.0 or higher setup. Then you could try the following powershell forRead More …<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31,51,53,54],"tags":[],"class_list":["post-777","post","type-post","status-publish","format-standard","hentry","category-active-directory","category-ansible","category-gpo","category-powershell"],"_links":{"self":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts\/777","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/comments?post=777"}],"version-history":[{"count":16,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts\/777\/revisions"}],"predecessor-version":[{"id":1137,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts\/777\/revisions\/1137"}],"wp:attachment":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/media?parent=777"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/categories?post=777"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/tags?post=777"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}