Active Directory Sites mit Powershell automatisieren

# Author: Hannes Siefert (Hannes.Siefert@FirstAttribute.com)
# Description: Script imports .csv file of subnets sets AD sites accordingly
# Version: 1.0
# Created on: 28.01.15
# Last Change: 30.01.15
# Changed by: Hannes Siefert
# ===========================================================================================
# Change History:
#
# Release: | Date: | Author: | Changes:
# ———–+————+—————+————————————————-
# 1.0 | 30.01.2015 | H. Siefert | Creation

Add-Type -Assembly Microsoft.VisualBasic
$dc = ($env:logonserver).SubString(2)
$sitesPath = „CN=Sites,CN=Configuration,“ + (Get-ADDomain).DistinguishedName

function get-filedate {
$date = Get-Date
$year = (($date.Year).ToString()).SubString(2,2)
if($date.Month -lt 10) {
$month = „0“ + $date.Month
}
else {
$month = ($date.Month).ToString()
}
if($date.Day -lt 10) {
$day = „0“ + ($date.Day).ToString()
}
else {
$day = $date.Day
}

$fileDate = $year + $month + $day

return $fileDate
}

$logPath = „.\log\“
$fileDate = get-filedate
$fileNameBig = „import-sites_“ + $env:username + „_“ + $fileDate + „.log“
$fileNameSmall = „import-sites_“ + $env:username + „_“ + $fileDate + „.csv“
$logFileBig = $logPath + $fileNameBig
$logFileSmall = $logPath + $fileNameSmall

function get-timestamp {
$date = Get-Date
if($date.Month -lt 10) {
$month = „0“ + ($date.Month).ToString()
}
else {
$month = ($date.Month).ToString()
}
if($date.Day -lt 10) {
$day = „0“ + ($date.Day).ToString()
}
else {
$day = ($date.Day).ToString()
}
if($date.Hour -lt 10) {
$hour = „0“ + ($date.Hour).ToString()
}
else {
$hour = ($date.Hour).ToString()
}
if($date.Minute -lt 10) {
$minute = „0“ + ($date.Minute).ToString()
}
else {
$minute = ($date.Minute).ToString()
}
if($date.Second -lt 10) {
$second = „0“ + ($date.Second).ToString()
}
else {
$second = ($date.Second).ToString()
}

$timeStamp = ($date.Year).ToString() + „/“ + $month + „/“ + $day + „-“ + $hour + „:“ + $minute + „:“ + $second
return $timeStamp
}

function init-log {
if((Test-Path $logPath) -eq $false) {
Write-Host („Creating log folder “ + $logpath + „…“) -ForegroundColor „Yellow“
try {
New-Item -ItemType Directory -Path $logPath -ErrorAction Stop | Out-Null
}
catch {
Write-Warning („Log path (“ + $logPath + „) could not be created! Please change variable!“)
Exit
}
Write-Host („Log folder successfully created.“) -ForegroundColor „Green“
}
if((Test-Path $logFileBig) -eq $false) {
$date = Get-Date
Write-Host („Creating log file “ + $logFileBig + „…“) -ForegroundColor „Yellow“
try {
„Date: “ + $date | Out-File -Append -Encoding UTF8 -FilePath $logFileBig -ErrorAction Stop
}
catch {
Write-Warning „Could not write to log file (“ + $logFileBig + „) Please check!“
Exit
}
Write-Host („Log file successfully created.“) -ForegroundColor „Green“
(„UserName: “ + $env:username) | Out-File -Append -Encoding UTF8 -FilePath $logFileBig
(„Log file: “ + $logFileBig) | Out-File -Append -Encoding UTF8 -FilePath $logFileBig
}
}

function log-write {
param([String]$output,
$foregroundColor,
$backgroundColor)

$timeStamp = get-timestamp

$output = $timeStamp + „: “ + $output

if($foregroundColor -ieq „warn“) {
Write-Warning $output
}
else {
if(($backgroundColor -eq $null) -and ($foregroundColor -eq $null)) {
Write-Host $output
}
if(($backgroundColor -eq $null) -and ($foregroundColor -ne $null)) {
Write-Host $output -ForegroundColor $foregroundColor
}
if(($backgroundColor -ne $null) -and ($foregroundColor -eq $null)) {
Write-Host $output -BackgroundColor $backgroundColor
}
if(($backgroundColor -ne $null) -and ($foregroundColor -ne $null)) {
Write-Host $output -ForegroundColor $foregroundColor -BackgroundColor $backgroundColor
}
}
try {
$output | Out-File -Append -Encoding UTF8 -FilePath $logFileBig -ErrorAction Stop
}
catch {
Write-Warning „Error writing to log file!!“
Write-Host $_.Exception.Message
}
}

function create-site {
param($siteName,
$location)

$ldapFilterSite = „(&(objectClass=site)(objectCategory=site)(name=“ + $siteName + „))“
$siteAD = Get-ADObject -LDAPFilter $ldapFilterSite -SearchBase $sitesPath -Server $dc
if($siteAD -eq $null) {
try {
$siteAD = New-ADReplicationSite -Name $siteName -Server $dc -PassThru -ErrorAction Stop
}
catch {
log-write („ADReplicationSite “ + $siteName + “ could not be created. Reason: “ + $_.Exception.Message) -foregroundColor „warn“
return $null
}

try {
$siteAD = Set-ADReplicationSite -Identity $siteAD -Add @{location=$location} -Server $dc -ErrorAction Stop -PassThru
}
catch {
log-write („ADReplicationSite “ + $siteAD.Name + “ could not be set. Reason: “ + $_.Exception.Message) -foregroundColor „warn“
}
}
return $siteAD
}

function set-site {
param($siteAD,
$location)

try {
$siteAD = Set-ADReplicationSite -Identity $siteAD -Clear location -Server $dc -ErrorAction Stop -PassThru
$siteAD = Set-ADReplicationSite -Identity $siteAD -Add @{location=$location} -Server $dc -ErrorAction Stop -PassThru
}
catch {
log-write („ADReplicationSite “ + $siteAD.Name + “ could not be set. Reason: “ + $_.Exception.Message) -foregroundColor „warn“
return $null
}
return $siteAD
}

function get-replicationPartner {
param($country)

return „EXAMPLE“
}

function get-subnetMask {
param($subnet)

if(($subnet -eq $null) -or ($subnet -eq [String]::Empty)) {
return $null
}
$subnetMask = 0
$array = $subnet.Split(„.“)
foreach($octet in $array) {
if([Microsoft.VisualBasic.Information]::IsNumeric($octet)) {
$charArray = ([Convert]::ToString($octet,2)).ToCharArray()
foreach($bit in $charArray) {
$subnetMask += $bit.ToString()
}
}
else {
return $null
}
}
return $subnetMask
}

function get-siteAD {
param($siteName)

$ldapFilterSite = „(&(objectClass=site)(objectCategory=site)(name=“ + $siteName + „))“
$siteAD = Get-ADObject -LDAPFilter $ldapFilterSite -SearchBase $sitesPath -Server $dc -Properties location
return $siteAD
}

function get-subnetAD {
param($subnet)

$ldapFilterSubnet = „(&(objectCategory=subnet)(objectClass=subnet)(name=“ + $subnet + „))“
$subnetAD = Get-ADObject -LDAPFilter $ldapFilterSubnet -SearchBase $sitesPath -Server $dc -Properties siteObject, location
return $subnetAD
}

function create-subnet {
param($subnet,
$siteAD,
$location)

try {
$subnetAD = New-ADReplicationSubnet -Name $subnet -Site $siteAD -Location $location -Server $dc -ErrorAction Stop -PassThru
}
catch {
log-write („ADReplicationSubnet “ + $subnet + “ could not be created. Reason: “ + $_.Exception.Message) -foregroundColor „warn“
return $null
}
return $subnetAD
}

function set-subnet {
param($subnetAD,
$siteAD,
$location)

try {
$subnetAD = Set-ADReplicationSubnet -Identity $subnetAD -Site $siteAD -Location $location -Server $dc -ErrorAction Stop -PassThru
}
catch {
log-write („ADReplicationSubnet “ + $subnet + “ could not be set. Reason: “ + $_.Exception.Message) -foregroundColor „warn“
return $null
}
return $subnetAD
}

function get-siteLinkAD {
param($siteAD,
$replicationPartnerAD)

$linkName = $replicationPartnerAD.Name + „-“ + $siteAD.Name

$ldapFilterSiteLink = „(&(objectCategory=siteLink)(objectClass=siteLink)(name=“ + $linkName + „))“
$siteLinkAD = Get-ADObject -LDAPFilter $ldapFilterSiteLink -SearchBase $sitesPath -Server $dc -Properties siteList
return $siteLinkAD
}

function set-siteLinkAD {
param($sitelinkAD,
$siteAD,
$replicationPartnerAD)

try {
$siteLinkAD = Set-ADReplicationSiteLink -Identity $siteLinkAD -Replace @{siteList=@($siteAD.distinguishedName,$replicationPartnerAD.distinguishedName)} -Server $dc -PassThru
}
catch {
log-write („ADReplicationSiteLink “ + $siteLinkAD + “ could not be set. Reason: “ + $_.Exception.Message) -foregroundColor „warn“
return $null
}
return $siteLinkAD
}

function create-siteLink {
param($siteAD,
$replicationPartnerAD)

$linkName = $replicationPartnerAD.Name + „-“ + $siteAD.Name
try {
$siteLinkAD = New-ADReplicationSiteLink -Name $linkName -SitesIncluded $replicationPartnerAD, $siteAD -Cost 100 -InterSiteTransportProtocol IP -PassThru -Server $dc -ErrorAction Stop
}
catch {
log-write („ADReplicationSiteLink “ + $linkName + “ could not be created. Reason: “ + $_.Exception.Message) -foregroundColor „warn“
return $null
}
return $siteLinkAD
}

function verify-replication {
param($siteAD)

$replicationPartner = get-replicationPartner $siteAD
log-write („Replication partner should be: “ + $replicationPartner)
$replicationPartnerAD = get-siteAD $replicationPartner
if($replicationPartnerAD -ne $null) {
log-write („Replication partner found in AD.“) -foregroundColor „Green“
}
else {
log-write („Replication partner could not be found in AD“) -foregroundColor „Red“
log-write („Attempting to create replication partner…“) -foregroundColor „Yellow“
$location = „Unknown“
$replicationPartnerAD = create-site $replicationPartner $location
if($replicationPartnerAD -ne $null) {
log-write („Replication partner successfully created.“) -foregroundColor „Green“
}
else {
log-write („Replication partner could not be created!“) -foregroundColor „warn“
return $null
}
}
log-write („Getting site link…“) -foregroundColor „Yellow“
$siteLinkAD = get-siteLinkAD $siteAD $replicationPartnerAD
if($siteLinkAD -eq $null) {
log-write („Site link could not be found. Attempting to create it…“) -foregroundColor „Yellow“
$siteLinkAD = create-siteLink $siteAD $replicationPartnerAD
if($siteLinkAD -eq $null) {
log-write („Site link could not be created!“) -foregroundColor „warn“
return $null
}
else {
log-write („Site link successfully created.“) -foregroundColor „Green“
return $siteLinkAD
}
}
elseif(($siteLinkAD.siteList -contains $siteAD) -and ($siteLinkAD.siteList -contains $replicationPartnerAD)) {
log-write („Site link exists and is correct“) -foregroundColor „Green“
return $siteLinkAD
}
else {
log-write („Site link found but replication partner is wrong“) -foregroundColor „Red“
log-write („Attempting to set replication partner…“) -foregroundColor „Yellow“
$siteLinkAD = set-siteLinkAD $siteLinkAD $siteAD $replicationPartnerAD
if($siteLinkAD -eq $null) {
log-write („Replication partner could not be set!“) -foregroundColor „warn“
return $null
}
else {
log-write („Site link had incorrect replication partners and was corrected“) -foregroundColor „Green“
return $siteLinkAD
}
}
}

function delete-subnet {
param($subnetAD)

try {
Remove-ADObject -Identity $subnetAD -Confirm:$false -Server $dc -ErrorAction Stop
}
Catch {
log-write („Subnet “ + $subnetAD.Name + “ could not be deleted. Reason: “ + $_.Exception.Message) -foregroundColor „warn“
return $false
}
return $true
}

function export {
param($network)

if(($network.SubnetStatus -eq „Error“) -or ($network.SiteStatus -eq „Error“) -or ($network.SiteLinkStatus -eq „Error“)) {
$network.OverallStatus = „Error“
}
else {
$network.OverallStatus = „OK“
}

$network | Export-Csv -Delimiter ‚;‘ -Path $logFileSmall -NoTypeInformation -Append -Encoding UTF8
}

function remove-newlines {
param($string)

$string = $string = ($string.Replace(„n"," ")).Replace("r“,““)
return $string
}

function check-csvPath {
param($path)

if($path.Length -le 4) {
log-write(„Entered path (“ + $path + „) is not a valid path“) -foregroundColor „Red“
return $false
}
if($path -eq [String]::Empty) {
log-write („No path entered“) -foregroundColor „Red“
return $false
}
if($path -eq $null) {
log-write („No path entered“) -foregroundColor „Red“
return $false
}
try {
$testPath = Test-Path -LiteralPath $path -ErrorAction Stop
}
catch {
log-write („Could not check entered path (“ + $path + „). Reason: “ + $_.Exception.Message) -foregroundColor „warn“
return $false
}
if($testPath -eq $false) {
log-write($path + “ could not be found“) -foregroundColor „Red“
return $false
}
else {
if($path.SubString($path.Length – 4,4) -ne „.csv“) {
log-write($path + “ is not a .csv file“) -foregroundColor „Red“
return $false
}
else {
$firstLine = Get-Content -First 1 -LiteralPath $path
if($firstLine -ne „City;Address;Branch;Country;NetworkAddress;Status;Subnet;LocationCode“) {
log-write ($path + “ has an invalid header (“ + $firstLine + „). Header must be: City;Address;Branch;Country;NetworkAddress;Status;Subnet;LocationCode“) -foregroundColor „Red“
return $false
}
log-write ($path + “ found“) -foregroundColor „Green“
return $true
}
}
}

function clean-path {
param($path)
if(($path -ne [String]::Empty) -and ($path -ne $null)) {
$path = $path.TrimEnd(„\“)
}
return $path
}

function ask-csvPath {

$path = Read-Host(„Enter FULL path to .csv file“)
$path = clean-path $path
while((check-csvPath $path) -eq $false) {
$path = Read-Host(„Enter FULL path to .csv file“)
$path = clean-path $path
}
return $path
}

init-log
$csvPath = ask-csvPath
$csv = Import-CSv -Path $csvPath -Delimiter ‚;‘ -Encoding UTF8
foreach($network in $csv) {
log-write („#### NEW LINE ####“)
$network | Add-Member NoteProperty „Location“ $null
$network | Add-Member NoteProperty „SiteStatus“ $null
$network | Add-Member NoteProperty „SubnetStatus“ $null
$network | Add-Member NoteProperty „SiteLinkStatus“ $null
$network | Add-Member NoteProperty „OverallStatus“ $null
log-write („Network: “ + $network.NetworkAddress)
log-write („SubnetBits: “ + $network.Subnet)
$subnetMask = get-subnetMask $network.Subnet
log-write („SubnetMask: “ + $subnetMask)
$subnet = $network.NetworkAddress + „/“ + $subnetMask
log-write („Subnet: “ + $subnet)
if(($network.Address -ne $null) -and ($network.Address -ne [String]::Empty)) {
$network.Address = remove-newlines $network.Address
}
else {
$network.Address = „Unknown address“
}
if(($network.City -ne $null) -and ($network.City -ne [String]::Empty)) {
$network.City = remove-newlines $network.City
}
else {
$network.City = „Unknown city“
}
if(($network.Branch -ne $null) -and ($network.Branch -ne [String]::Empty)) {
$network.Branch = remove-newlines $network.Branch
}
else {
$network.Branch = „Unknown branch“
}
$location = $network.Branch + “ – “ + $network.City + “ – “ + $network.Address
$network.location = $location
log-write („Location: “ + $location)
$network.Status = remove-newlines $network.Status
if($network.Status -ieq „active“) {
log-write („Status: “ + $network.Status)
if(($network.LocationCode -ne [String]::Empty) -and ($network.LocationCode -ne $null)) {
$locationCode = ($network.Country + $network.LocationCode)
log-write („LocationCode: “ + $locationCode)
$siteAD = get-siteAD $locationCode
if($siteAD -eq $null) {
log-write („Site “ + $locationCode + “ could not be found. Creating site…“) -foregroundColor „Yellow“
$siteAD = create-site $locationCode $location
if($siteAD -eq $null) {
log-write („Site “ + $locationCode + “ could not be created!“) -foregroundColor „warn“
$network.SiteStatus = „Error“
export $network
continue
}
else {
log-write („Site “ + $locationCode + “ was successfully created“) -foregroundColor „Green“
$network.SiteStatus = „OK“
}
}
else {
log-write („Site “ + $locationCode + “ found.“) -foregroundColor „Green“
if($siteAD.location -ne $location) {
log-write („Location of site has changed. Attempting to update…“) -foregroundColor „Yellow“
$siteAD = set-site $siteAD $location
if($siteAD -ne $null) {
log-write („Location was successfully updated.“) -foregroundColor „Green“
$network.SiteStatus = „OK“
}
else {
log-write („Could not update location!“) -foregroundColor „warn“
$network.SiteStatus = „Error“
}
}
else {
$network.SiteStatus = „OK“
}
}
log-write („Verifying SiteLink…“) -foregroundColor „Yellow“
$siteLinkAD = verify-replication $siteAD
if($siteLinkAD -eq $null) {
log-write („Error during site link verification“) -foregroundColor „warn“
$network.SiteLinkStatus = „Error“
export $network
continue
}
else {
$network.SiteLinkStatus = „OK“
log-write („Site link successfully verified“) -foregroundColor „Green“
}
log-write („Getting subnet…“) -foregroundColor „Yellow“
$subnetAD = get-subnetAD $subnet
if($subnetAD -eq $null) {
log-write („Subnet could not be found in AD. Attempting to create it…“) -foregroundColor „Yellow“
$subnetAD = create-subnet $subnet $siteAD $location
if($subnetAD -ne $null) {
log-write („Subnet successfully created.“) -foregroundColor „Green“
$network.SubnetStatus = „OK“
}
else {
log-write („Subnet could not be created“) -foregroundColor „warn“
$network.SubnetStatus = „Error“
export $network
continue
}
}
elseif($subnetAD.siteObject -eq $siteAD) {
log-write („Subnet was found and is assigned correctly“) -foregroundColor „Green“
$network.SubnetStatus = „OK“
}
else {
log-write („Subnet was found in AD, but is assigned to a wrong site. Attempting to correct…“) -foregroundColor „Yellow“
$subnetAD = set-subnet $subnetAD $siteAD $location
if($subnetAD -ne $null) {
log-write („Subnet was successfully assigned to the new site“) -foregroundColor „Green“
$network.SubnetStatus = „OK“
}
else {
log-write („Subnet could not be assigned to the new site“) -foregroundColor „warn“
$network.SubnetStatus = „Error“
}
}
if($subnetAD.location -ne $location) {
log-write („Location of subnet has changed. Attempting to update…“) -foregroundColor „Yellow“
$subnetAD = set-subnet $subnetAD $siteAD $location
if($subnetAD -ne $null) {
log-write („Location was successfully updated.“) -foregroundColor „Green“
$network.SubnetStatus = „OK“
}
else {
log-write („Could not update location!“) -foregroundColor „warn“
$network.SubnetStatus = „Error“
}
}
}
else {
log-write („LocationCode is empty. Skipping…“) -foregroundColor „Red“
$network.SiteStatus = „Error“
$network.SubnetStatus = „Error“
}
}
elseif($network.Status -ieq „inactive“) {
log-write („Status: “ + $network.Status)
log-write („Getting subnet…“) -foregroundColor „Yellow“
$subnetAD = get-subnetAD $subnet
if($subnetAD -eq $null) {
log-write („Subnet does not exists“) -foregroundColor „Green“
$network.SubnetStatus = „OK“
}
else {
log-write („Attempting to delete subnet…“) -foregroundColor „Yellow“
if((delete-subnet $subnetAD) -eq $true) {
log-write („Subnet successfully deleted“) -foregroundColor „Green“
$network.SubnetStatus = „OK“
}
else {
log-write („Error during deletion of subnet“) -foregroundColor „warn“
$network.SubnetStatus = „Error“
}
}
}
else {
log-write („Status: “ + $network.Status)
}
Start-Sleep -Seconds 2
export $network
}