https://pwx.michaelthessel.com/
Great system for sending password.
You can limit if the password only can be seen once, and for how low the link with password will be valid
Password Exchange system
Reply
Clean up script for subfolder in users
[int]$retentionDays = 90
$folders = "downloads", "OneDrive\Microsoft Teams-chatfiles"
$filesForDeletion = @()
$users = (Get-ChildItem "c:\users").name
foreach ($user in $users) {
foreach ($folder in $folders) {
$path = "C:\users\"+$user+"\"+$folder
if (Test-Path $path) {
$files = Get-ChildItem $path
foreach ($file in $files) {
if ($file.CreationTime -lt (Get-Date).AddDays(-$retentionDays)) {
$filesForDeletion += $file
}}}}}
rm $filesForDeletion.fullname -Confirm:$false -Force -Recurse
Create files with old Creationtime Timestamp
$i = 1
$totalNumberOfFiles = 10
$daysOld = 180
$fileName = "testfile"
while ($i -lt ($totalNumberOfFiles+1) ) {
$file = $fileName + "_" + $i + ".txt"
New-Item -Name $file -ItemType File
(Get-Item $file).creationtime=$((Get-Date).adddays(-$daysOld))
$i++
}
Test outgoing port
http://portquiz.net/
Check IP for SSL settings
Set rights on all folders, and subfolders
icacls “*.*” /inheritancelevel:e /grant username:(d,wdac)
Connect Powershell to Exchange Online
Check for connection, if not, then Establish connection
# Check for connection
$NotConnected = $true
$RMsessions = Get-PSSession
Foreach ($RMsession in $RMsessions) {
if ($RMsession.Computername -like "*outlook*") { $NotConnected = $false }
}
# Establish connection
if ($NotConnected ) {
$LiveCred = Get-Credential
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $LiveCred -Authentication Basic -AllowRedirection
Import-PSSession $Session
cls
}
Trigger Azure Policy to evaluate compliance
Can now be done with either Azure CLI
az policy state trigger-scan --resource-group !!!resource-group-name!!!
Or powershell
Start-AzPolicyComplianceScan -ResourceGroupName !!!resource-group-name!!!
Old school with API rest call
$subscriptionId = "!!!SUBSCRIPTION ID!!!"
$uri = "https://management.azure.com/subscriptions/$subscriptionId/providers/Microsoft.PolicyInsights/policyStates/latest/triggerEvaluation?api-version=2018-07-01-preview"
$azContext = Get-AzContext
$azProfile = [Microsoft.Azure.Commands.Common.Authentication.Abstractions.AzureRmProfileProvider]::Instance.Profile
$profileClient = New-Object -TypeName Microsoft.Azure.Commands.ResourceManager.Common.RMProfileClient -ArgumentList ($azProfile)
$token = $profileClient.AcquireAccessToken($azContext.Tenant.Id)
$authHeader = @{
'Content-Type'='application/json'
'Authorization'='Bearer ' + $token.AccessToken
}
Invoke-RestMethod -Method Post -Uri $uri -UseBasicParsing -Headers $authHeader
Microsoft SQL – Get latest backup time
SELECT name ,
recovery_model_desc ,
state_desc ,
d AS 'Last Full Backup' ,
i AS 'Last Differential Backup' ,
l AS 'Last log Backup'
FROM ( SELECT db.name ,
db.state_desc ,
db.recovery_model_desc ,
type ,
backup_finish_date
FROM master.sys.databases db
LEFT OUTER JOIN msdb.dbo.backupset a ON a.database_name = db.name
) AS Sourcetable
PIVOT
( MAX(backup_finish_date) FOR type IN ( D, I, L ) ) AS MostRecentBackup
Azure Policy: Disallow dynamic Public IP
{
"policyRule": {
"if": {
"allOf": [{
"field": "type",
"equals": "Microsoft.Network/publicIPAddresses"
},
{
"field": "Microsoft.Network/publicIPAddresses/publicIPAllocationMethod",
"match": "Dynamic"
}
]
},
"then": {
"effect": "deny"
}
}
}