0004-New-AzureRmVmAvailabilitySetPsg.ps1
|
<#PSScriptInfo
.VERSION 1.1.0.12 .GUID 01c58ba7-37f8-40de-98fb-1495ea5b27dd .AUTHOR Preston K. Parsard .COMPANYNAME Microsoft .COPYRIGHT Copyright (c) 2016 Preston K. Parsard .TAGS Azure, Deploy, VM .LICENSEURI https://opensource.org/licenses/MIT .PROJECTURI .ICONURI .EXTERNALMODULEDEPENDENCIES WriteToLogs; https://www.powershellgallery.com/packages/WriteToLogs .REQUIREDSCRIPTS .EXTERNALSCRIPTDEPENDENCIES .RELEASENOTES 17 OCT 2016 1.1.0.0 Preston K. Parsard Updated description and changed versioning format from ##.##.#### to #.#.#.# to match the standard module versioning convention format. 18 OCT 2016 1.1.0.1 Preston K. Parsard Created log file earlier in script, added the Start-Transcript feature that records a transcript in a separate file, and created a new logging directory name of "New-AzureRmAvSet". 18 OCT 2016 1.1.0.2 Preston K. Parsard Prompt user for location to offer more flexibility instead of hard-coding in script 18 OCT 2016 1.1.0.3 Preston K. Parsard Prompts user to open both $Log and $Transcript files upon completion of script. 19 OCT 2016 1.1.0.4 Preston K. Parsard Updated the image name to reflect the new 2016-Datacenter image. 20 OCT 2016 1.1.0.5 Preston K. Parsard Fixed regular expression for resource group naming standard to comply with the format rg##, where ## represents a two digit numeric sequence. 20 OCT 2016 1.1.0.6 Preston K. Parsard Simplified regular expression to restrict attendee number input to 4 digits. 20 OCT 2016 1.1.0.7 Preston K. Parsard Simplified regular expression to restrict site code input to 3 letters. 20 OCT 2016 1.1.0.8 Preston K. Parsard Removed exit statement at end so that the ISE/PowerShell console will still be available after the script executes. 20 OCT 2016 1.1.0.8 Preston K. Parsard Added #Requires tags for Version 5.0 and RunAsAdministrator, since the Start/Stop-Transcript cmdlets are used and administrative permissions are required for the package installer. 20 OCT 2016 1.1.0.10 Preston K. Parsard Upgraded VM image size from Standard_A1 to Standard_D1_v2. 20 OCT 2016 1.1.0.11 Preston K. Parsard Updated description metadata field formatting to improve readability when published to www.powershellgallery.com .DESCRIPTION This script creates an availability set of 1-4 Windows Server 2016 VMs with Network Security Groups for RDP access. In this script, these machines will be deployed with using the ABC[DC]## convention, where ABC is the 3 letter airport code of the location, DC indicates that these machines can subsequently be configured as domain controllers, and ## represents the sequence numbers, i.e. 01, 02, etc. Please note that this script was not designed to run as an Azure Automation Workflow Script, so if the "Deploy to Azure Automation" button is used, the script will be added to the automation account as a workflow item, but should not be expected to execute as a workflow script. The script can however, be launched directly from a jump VM in Azure as a native PowerShell script if desired. Azure resources will be created as part of an initial process of building a functional environment consisting of compute, storage and netorking components. Since this script will be used primarily for demonstration purposes, additional comments, logging and verbose console output have also been included. #> #Requires -Version 5.0 #Requires -RunAsAdministrator <# **************************************************************************************************************************************************************************** REFERENCES: 1. https://gallery.technet.microsoft.com/scriptcenter/Build-AD-Forest-in-Windows-3118c100 2. http://blogs.technet.com/b/heyscriptingguy/archive/2013/06/22/weekend-scripter-getting-started-with-windows-azure-and-powershell.aspx 3. http://michaelwasham.com/windows-azure-powershell-reference-guide/configuring-disks-endpoints-vms-powershell/ 4. http://blog.powershell.no/2010/03/04/enable-and-configure-windows-powershell-remoting-using-group-policy/ 5. http://azure.microsoft.com/blog/2014/05/13/deploying-antimalware-solutions-on-azure-virtual-machines/ 6. http://blogs.msdn.com/b/powershell/archive/2014/08/07/introducing-the-azure-powershell-dsc-desired-state-configuration-extension.aspx 7. http://trevorsullivan.net/2014/08/21/use-powershell-dsc-to-install-dsc-resources/ 8. http://blogs.msdn.com/b/powershell/archive/2014/07/21/creating-a-secure-environment-using-powershell-desired-state-configuration.aspx 9. http://blogs.technet.com/b/ashleymcglone/archive/2015/03/20/deploy-active-directory-with-powershell-dsc-a-k-a-dsc-promo.aspx 10.http://blogs.technet.com/b/heyscriptingguy/archive/2013/03/26/decrypt-powershell-secure-string-password.aspx 11.http://blogs.msdn.com/b/powershell/archive/2014/09/10/secure-credentials-in-the-azure-powershell-desired-state-configuration-dsc-extension.aspx 12.http://blogs.technet.com/b/keithmayer/archive/2014/10/24/end-to-end-iaas-workload-provisioning-in-the-cloud-with-azure-automation-and-powershell-dsc-part-1.aspx 13.http://blogs.technet.com/b/keithmayer/archive/2014/07/24/step-by-step-auto-provision-a-new-active-directory-domain-in-the-azure-cloud-using-the-vm-agent-custom-script-extension.aspx 14.https://blogs.msdn.microsoft.com/cloud_solution_architect/2015/05/05/creating-azure-vms-with-arm-powershell-cmdlets/ 15.https://msdn.microsoft.com/en-us/powershell/gallery/psget/script/psget_new-scriptfileinfo 16.https://msdn.microsoft.com/en-us/powershell/gallery/psget/script/psget_publish-script KEYWORDS: Mnemonic; [R]esilient<[R]esource Group> [S]ervers<[S]torage Account> [N]eed<Virtual [N]etwork> [V]irtual Machines<[VMs] with [N]etworks<[N]etwork Security Groups> and [A]vailability Sets<[A]vailability Sets> LICENSE: The MIT License (MIT) Copyright (c) 2016 Preston K. Parsard Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. DISCLAIMER: THIS SAMPLE CODE AND ANY RELATED INFORMATION ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR PURPOSE. We grant You a nonexclusive, royalty-free right to use and modify the Sample Code and to reproduce and distribute the Sample Code, provided that You agree: (i) to not use Our name, logo, or trademarks to market Your software product in which the Sample Code is embedded; (ii) to include a valid copyright notice on Your software product in which the Sample Code is embedded; and (iii) to indemnify, hold harmless, and defend Us and Our suppliers from and against any claims or lawsuits, including attorneys’ fees, that arise or result from the use or distribution of the Sample Code. **************************************************************************************************************************************************************************** #> <# TASK ITEMS #> <# *************************************************************************************************************************************************************************** REVISION/CHANGE RECORD -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- DATE VERSION NAME CHANGE -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 26 APR 2016 0.0.0.1 Preston K. Parsard Initial release. 30 JUN 2016 0.0.0.2 Preston K. Parsard Updated script file name, plus minor edits; removed non-functional comments. 11 JUL 2016 0.0.0.3 Preston K. Parsard Added code to select subscription based on matching subscription ID of subscription name provided in response to prompt. 11 JUL 2016 0.0.0.4 Preston K. Parsard Updated script to use external PSGallery module for logging functions and enhanced logging activity. 11 JUL 2016 1.0.0.0 Preston K. Parsard Applying the verbose common parameter where possible for more details. 14 JUL 2016 1.0.0.1 Preston K. Parsard Added reference for WriteToLogs module (https://www.powershellgallery.com/packages/WriteToLogs/1.0.19). 14 JUL 2016 1.0.0.2 Preston K. Parsard Applied PSScriptInfo to header for publishing to PSGallery. 17 OCT 2016 1.1.0.0 Preston K. Parsard Updated description and changed versioning format from ##.##.#### to #.#.#.# to match the standard module versioning convention format. 18 OCT 2016 1.1.0.1 Preston K. Parsard Created log file earlier in script, added the Start-Transcript feature that records a transcript in a separate file, and created a new logging directory name of "New-AzureRmAvSet". 18 OCT 2016 1.1.0.2 Preston K. Parsard Prompt user for location to offer more flexibility instead of hard-coding in script 18 OCT 2016 1.1.0.3 Preston K. Parsard Prompts user to open both $Log and $Transcript files upon completion of script. 19 OCT 2016 1.1.0.4 Preston K. Parsard Updated the image name to reflect the new 2016-Datacenter image. 20 OCT 2016 1.1.0.5 Preston K. Parsard Fixed regular expression for resource group naming standard to comply with the format rg##, where ## represents a two digit numeric sequence. 20 OCT 2016 1.1.0.6 Preston K. Parsard Simplified regular expression to restrict attendee number input to 4 digits. 20 OCT 2016 1.1.0.7 Preston K. Parsard Simplified regular expression to restrict site code input to 3 letters. 20 OCT 2016 1.1.0.8 Preston K. Parsard Removed exit statement at end so that the ISE/PowerShell console will still be available after the script executes. 20 OCT 2016 1.1.0.9 Preston K. Parsard Added #Requires tags for Version 5.0 and RunAsAdministrator, since the Start/Stop-Transcript cmdlets are used and administrative permissions are required for the package installer 20 OCT 2016 1.1.0.10 Preston K. Parsard Upgraded VM image size from Standard_A1 to Standard_D1_v2. 20 OCT 2016 1.1.0.11 Preston K. Parsard Updated description metadata field formatting to improve readability when published to www.powershellgallery.com 11 NOV 2016 1.1.0.12 Preston K. Parsard Removed CONSENT:, PRIVACY:, ABUSE:, INFO:, and ATTRIBUTION: fields from script header #> # Resets profiles in case you have multiple Azure Subscriptions and connects to your Azure Account [Uncomment if you haven't already authenticated to your Azure subscription] Clear-AzureProfile -Force Login-AzureRmAccount # Construct custom path for log files $LogDir = "New-AzureRmAvSet" $LogPath = $env:HOMEPATH + "\" + $LogDir If (!(Test-Path $LogPath)) { New-Item -Path $LogPath -ItemType Directory } #End If # Create log file with a "u" formatted time-date stamp $StartTime = (((get-date -format u).Substring(0,16)).Replace(" ", "-")).Replace(":","") $24hrTime = $StartTime.Substring(11,4) $LogFile = "New-AzureRmAvSet-LOG" + "-" + $StartTime + ".log" $TranscriptFile = "New-AzureRmAvSet-TRANSCRIPT" + "-" + $StartTime + ".log" $Log = Join-Path -Path $LogPath -ChildPath $LogFile $Transcript = Join-Path $LogPath -ChildPath $TranscriptFile # Create Log file New-Item -Path $Log -ItemType File -Verbose # Create Transcript file New-Item -Path $Transcript -ItemType File -Verbose Start-Transcript -Path $Transcript -IncludeInvocationHeader -Append -Verbose # To avoid multiple versions installed on the same system, first uninstall any previously installed and loaded versions if they exist Uninstall-Module -Name WriteToLogs -AllVersions -ErrorAction SilentlyContinue -Verbose # If the WriteToLogs module isn't already loaded, install and import it for use later in the script for logging operations If (!(Get-Module -Name WriteToLogs)) { # https://www.powershellgallery.com/packages/WriteToLogs Set-PSRepository -Name PSGallery -InstallationPolicy Trusted Install-PackageProvider -Name Nuget -ForceBootstrap -Force Install-Module -Name WriteToLogs -Repository PSGallery -Force -Verbose Import-Module -Name WriteToLogs -Verbose } #end If #region INITIALIZE VALUES $BeginTimer = Get-Date -Verbose Do { # Subscription name (Get-AzureRmSubscription).SubscriptionName [string] $Subscription = Read-Host "Please enter your subscription name, i.e. [MSDN | MSFT] " $Subscription = $Subscription.ToUpper() } #end Do Until (($Subscription) -ne $null) # Selects subscription based on subscription name provided in response to the prompt above Select-AzureRmSubscription -SubscriptionId (Get-AzureRmSubscription -SubscriptionName $Subscription).SubscriptionId Do { # Resource Group name [string] $rg = Read-Host "Please enter a new resource group name [rg##] " } #end Do Until (($rg) -match '^rg\d{2}$') Do { # This is a uniquely assigned number for each course attendee so that the domain and Azure resources will also have unique names within the same course # For class-wide demo scripts, this number will be the last 4 digits of the request number [string]$AttendeeNum = Read-Host "Please enter your 4 digit attendee or request number, i.e. [0000] " } Until ($AttendeeNum -match '^[0-9][0-9][0-9][0-9]$') Do { # The site code refers to a 3 letter airport code of the nearest major airport to the training site [string]$SiteCode = Read-Host "Please enter your 3 character site code, i.e. [ATL] " $SiteCode = $SiteCode.ToUpper() } #end Do Until ($SiteCode -match '^[A-Z]{3}$') Do { # The site code refers to a 3 letter airport code of the nearest major airport to the training site [int]$InstanceCount = Read-Host "Please enter the total number of DC instances required [1-4] " } #end Do Until ($InstanceCount -le 4 -AND $InstanceCount -ne $null) # Create and populate prompts object with property-value pairs # PROMPTS (PromptsObj) $PromptsObj = [PSCustomObject]@{ pVerifySummary = "Is this information correct? [YES/NO]" pAskToOpenLogs = "Would you like to open the deployment log now ? [YES/NO]" } #end $PromptsObj # Create and populate responses object with property-value pairs # RESPONSES (ResponsesObj): Initialize all response variables with null value $ResponsesObj = [PSCustomObject]@{ pProceed = $null pOpenLogsNow = $null } #end $ResponsesObj Do { # The location refers to a geographic region of an Azure data center $Regions = Get-AzureRmLocation | Select-Object -ExpandProperty Location Write-ToConsoleAndLog -Output "The list of available regions are :" -Log $Log Write-ToConsoleAndLog -Output "" -Log $Log Write-ToConsoleAndLog -Output $Regions -Log $Log Write-ToConsoleAndLog -Output "" -Log $Log $EnterRegionMessage = "Please enter the geographic location (Azure Data Center Region) to which you would like to deploy these resources, i.e. [eastus2 | westus2]" Write-ToLogOnly -Output $EnterRegionMessage -Log $Log [string]$Region = Read-Host $EnterRegionMessage $Region = $Region.ToUpper() Write-ToConsoleAndLog -Output "`$Region selected: $Region " -Log $Log Write-ToConsoleAndLog -Output "" -Log $Log } #end Do Until ($Region -in $Regions) New-AzureRmResourceGroup -Name $rg -Location $Region -Verbose # Storage account name prefix $SaPrefix = "sto" # Generate storage account name based on prefix and attendee number $StorageAcctName = $SaPrefix + $AttendeeNum # VM image details $Publisher = "MicrosoftWindowsServer" $offer = "WindowsServer" [string]$sku = "2016-Datacenter" $ImageName2016 = Get-AzureRmVMImage –Location $Region –Offer $offer –PublisherName $publisher –SKUs $sku $Version = "latest" # User name is specified directly in script $UniversalAdmName = "entadmin" # Virtual Machine size $VmSize = "Standard_D1_v2" # Availability set $AvSetDcName = "AvSetDC" # NTDS volume drive $NtdsDiskName = "NTDS" # SYSVOL volume drive $SysvDiskName = "SYSV" # This is the generic top-level domain that will be used in the FQDN of a new domain that can be created later if desired $gtld = ".lab" $SiteNamePrefix = "net" $cred = Get-Credential -UserName $UniversalAdmName -Message "Enter password for user: $UniversalAdmName" # $UniversalPW = $cred.GetNetworkCredential().password $DelimDouble = ("=" * 100 ) $Header = "AZURE RM DC DEPLOYMENT DEMO: " + $StartTime # Create and populate site, subnet and VM properties of the domain with property-value pairs $ObjDomain = [PSCustomObject]@{ pFQDN = "R" + $AttendeeNum + $gtld pDomainName = "R" + $AttendeeNum pSite = $SiteNamePrefix + $AttendeeNum # Subnet names matches the VM roles (DC = Domain Controller, AP = Application servers or member servers) pSubNetDC = "DC" pSubNetAP = "AP" pDC = $SiteCode + "DC" # Based on the latest image of Windows Server 2016 } #end $ObjDomain # Subnet for domain controllers $DcSubnet = New-AzureRmVirtualNetworkSubnetConfig -Name $ObjDomain.pSubnetDC -AddressPrefix 10.0.0.0/28 -Verbose # Subnet for member servers (AP = Application servers) $ApSubnet = New-AzureRmVirtualNetworkSubnetConfig -Name $ObjDomain.pSubnetAP -AddressPrefix 10.0.0.16/28 -Verbose $Vnet = New-AzureRmVirtualNetwork -Name $ObjDomain.pSite -ResourceGroupName $rg -Location $Region -AddressPrefix 10.0.0.0/26 -Subnet $DcSubnet,$ApSubnet -Verbose # NSG Configuration # https://www.petri.com/create-azure-network-security-group-using-arm-powershell # Create the NSG names using 'NSG-' as a prefix $NsgDcSubnetName = "NSG-$($ObjDomain.pSubnetDC)" $NsgApSubnetName = "NSG-$($ObjDomain.pSubnetAP)" # Create the AllowRdpInbound rules $NsgRuleAllowRdpIn = New-AzureRmNetworkSecurityRuleConfig -Name "AllowRdpInbound" -Direction Inbound -Priority 100 -Access Allow -SourceAddressPrefix "Internet" -SourcePortRange "*" ` -DestinationAddressPrefix "VirtualNetwork" -DestinationPortRange 3389 -Protocol Tcp -Verbose $NsgDcSubnetObj = New-AzureRmNetworkSecurityGroup -Name $NsgDcSubnetName -ResourceGroupName $rg -Location $Region -SecurityRules $NsgRuleAllowRdpIn -Verbose $NsgApSubnetObj = New-AzureRmNetworkSecurityGroup -Name $NsgApSubnetName -ResourceGroupName $rg -Location $Region -SecurityRules $NsgRuleAllowRdpIn -Verbose # Associate NSGs with VNETs Set-AzureRmVirtualNetworkSubnetConfig -VirtualNetwork $Vnet -Name $ObjDomain.pSubnetDC -AddressPrefix $DcSubnet.AddressPrefix -NetworkSecurityGroup $NsgDcSubnetObj | Set-AzureRmVirtualNetwork -Verbose Set-AzureRmVirtualNetworkSubnetConfig -VirtualNetwork $Vnet -Name $ObjDomain.pSubnetAP -AddressPrefix $ApSubnet.AddressPrefix -NetworkSecurityGroup $NsgApSubnetObj | Set-AzureRmVirtualNetwork -Verbose # Specify disk size as 10 GiB [int]$DataDiskSize = 10 # Create the avialability set for the [future] DCs $DcAvSet = New-AzureRmAvailabilitySet -ResourceGroupName $rg -Name $AvSetDcName -Location $Region -Verbose # Populate Summary Display Object # Add properties and values # Make all values upper-case $SummObj = [PSCustomObject]@{ SUBSCRIPTION = $Subscription.ToUpper() RESOURCEGROUP = $rg SITECODE = $SiteCode.ToUpper() ATTENDEENUM = $AttendeeNum.ToUpper() DOMAINFQDN = $ObjDomain.pFQDN.ToUpper() DOMAINNETBIOS = $ObjDomain.pDomainName.ToUpper() SITENAME = $ObjDomain.pSite.ToUpper() DCSUBNET = $ObjDomain.pSubNetDC.ToUpper() NSGDC = $NsgDcSubnetName.ToUpper() APSUBNET = $ObjDomain.pSubNetAP.ToUpper() NSGAP = $NsgApSubnetName.ToUpper() DCPREFIX = $ObjDomain.pDC.ToUpper() # This is the number of VMs and associated VM resources that will be created INSTANCES = $InstanceCount STORAGEACCT = $StorageAcctName.ToUpper() REGION = $Region.ToUpper() LOGPATH = $Log } #end $SummObj #endregion INITIALIZE VALUES #region FUNCTIONS Function New-RandomString { $CombinedCharArray = @() $ComplexityRuleSets = @() $PasswordArray = @() # PCR here means [P]assword [C]omplexity [R]equirement, so the $PCRSampleCount value represents the number of characters that will be generated for each password complexity requirement (alpha upper, lower, and numeric) $PCRSampleCount = 4 $PCR1AlphaUpper = ([char[]]([char]65..[char]90)) $PCR3AlphaLower = ([char[]]([char]97..[char]122)) $PCR4Numeric = ([char[]]([char]48..[char]57)) # Add all of the PCR... arrays into a single consolidated array $CombinedCharArray = $PCR1AlphaUpper + $PCR3AlphaLower + $PCR4Numeric # This is the set of complexity rules, so it's an array of arrays $ComplexityRuleSets = ($PCR1AlphaUpper, $PCR3AlphaLower, $PCR4Numeric) # Sample 4 characters from each of the 3 complexity rule sets to generate a complete 12 character random string ForEach ($ComplexityRuleSet in $ComplexityRuleSets) { Get-Random -InputObject $ComplexityRuleSet -Count $PCRSampleCount | ForEach-Object { $PasswordArray += $_ } } #end ForEach [string]$RandomStringWithSpaces = $PasswordArray [string]$Script:RandomString = $RandomStringWithSpaces.Replace(" ","") } #end Function # Create DC VM Function Add-VM { # If the number of servers will be less than 9, pad with 0, so that the 3rd server would have a pulbic ip of dcvip03 instead of dcvip3 or a nic of dcnic03 as opposed to dcnic3. # This keeps the alignment consistent where all resources will have the same name lengths Write-WithTime -Output "Padding public IP and NIC resource names if necessary..." -Log $Log Switch ($i) { { $i -le 9 } { $DcVipPrefix = "dcvip0" $DcNicPrefix = "dcnic0" } #end condition default { $DcVipPrefix = "dcvip" $DcNicPrefix = "dcnic" } #end default } #end Switch # Create the public ip (VIP) and NIC names based on the prefix and index Write-WithTime -Output "Creating public IP name..." -Log $Log $DcVipName = $DcVipPrefix + $i Write-WithTime -Output "Creating NIC name..." -Log $Log $DcNicName = $DcNicPrefix + $i # Construct the drive names for the SYSTEM, NTDS and SYSVOL drives Write-WithTime -Output "Constructing SYSTEM drive name page blob..." -Log $Log $DCSYSTvhdUri = $sa.PrimaryEndpoints.Blob.ToString() + "vhds/" + "$($ObjDomain.pDC)-SYST.vhd" Write-WithTime -Output "Constructing NTDS drive name page blob..." -Log $Log $DCNTDSvhdUri = $sa.PrimaryEndpoints.Blob.ToString() + "vhds/" + "$($ObjDomain.pDC)-NTDS.vhd" Write-WithTime -Output "Constructing SYSVOL drive name page blob..." -Log $Log $DCSYSVvhdUri = $sa.PrimaryEndpoints.Blob.ToString() + "vhds/" + "$($ObjDomain.pDC)-SYSV.vhd" # $x represents the value of the last octect of the private IP address. We skip the first 3 addresses in the network address because they are always reserved in Azure $x = $i + 3 # NOTE: Domain labels have to be lower case Write-WithTime -Output "Creating DNS domain label..." -Log $Log # Add a random infix (4 numeric digits) inside the Dnslabel name to avoid conflicts with existing deployments generated from this script. The -pip suffix indicates this is a public IP New-RandomString $DnsLabelInfix = $RandomString.SubString(8,4) $DomainLabel = $objDomain.pDC.ToLower() + $DnsLabelInfix + "-pip" Write-WithTime -Output "Creating public IP..." -Log $Log # Now we can string all the pre-requisites together to construct both the VIP and NIC $DCvip = New-AzureRmPublicIpAddress -ResourceGroupName $rg -Name $DcVipName -Location $Region -AllocationMethod Static -DomainNameLabel $DomainLabel -Verbose Write-WithTime -Output "Creating NIC..." -Log $Log $DCnic = New-AzureRmNetworkInterface -ResourceGroupName $rg -Name $DcNicName -Location $Region -PrivateIpAddress "10.0.0.$x" -SubnetId $Vnet.Subnets[0].Id -PublicIpAddressId $DCvip.Id -Verbose # If the VM doesn't aready exist, configure and create it If (!((Get-AzureRmVM -ResourceGroupName $rg).Name -match $ObjDomain.pDC)) { Write-WithTime -Output "VM $($ObjDomain.pDC) doesn't already exist. Configuring..." -Log $Log # Setup new vm configuration $DcvmConfig = New-AzureRmVMConfig –VMName $ObjDomain.pDC -VMSize $vmSize -AvailabilitySetId $DcAvSet.Id | Set-AzureRmVMOperatingSystem -Windows -ComputerName $ObjDomain.pDC -Credential $cred -ProvisionVMAgent -EnableAutoUpdate | Set-AzureRmVMSourceImage -PublisherName $publisher -Offer $offer -Skus $sku -Version $version | Set-AzureRmVMOSDisk -Name $ObjDomain.pDC -VhdUri $DCSYSTvhdUri -Caching ReadWrite -CreateOption fromImage | Add-AzureRmVMNetworkInterface -Id $DCnic.Id -Verbose # Create new VM Write-WithTime -Output "Creating VM from configuration..." -Log $Log New-AzureRmVM -ResourceGroupName $rg -Location $Region -VM $DcvmConfig -Verbose # Add NIC Write-WithTime -Output "Adding NIC..." -Log $Log Set-AzureRmNetworkInterface -NetworkInterface $DCnic -Verbose # Add data disks Write-WithTime -Output "Adding data disks..." -Log $Log $vmdc = Get-AzureRmVM -ResourceGroupName $rg -Name $ObjDomain.pDC Write-WithTime -Output "Adding NTDS disk..." -Log $Log Add-AzureRmVMDataDisk -VM $vmdc -Name $NtdsDiskName -VhdUri $DCNTDSvhdUri -LUN 0 -Caching None -DiskSizeinGB $DataDiskSize -CreateOption Empty -Verbose Write-WithTime -Output "Adding SYSVOL disk..." -Log $Log Add-AzureRmVMDataDisk -VM $vmdc -Name $SysvDiskName -VhdUri $DCSYSVvhdUri -LUN 1 -Caching None -DiskSizeinGB $DataDiskSize -CreateOption Empty -Verbose # Update disk configuration Write-WithTime -Output "Applying new disk configurations..." -Log $Log Update-AzureRmVM -ResourceGroupName $rg -VM $vmdc -Verbose } #end If else { Write-ToConsoleAndLog -Output "$($ObjDomain.pDC) already exists..." -Log $Log } #end else } #End function #endregion FUNCTIONS #region MAIN # Clear screen # Clear-Host # Display header Write-ToConsoleAndLog -Output $DelimDouble -Log $Log Write-ToConsoleAndLog -Output $Header -Log $Log Write-ToConsoleAndLog -Output $DelimDouble -Log $Log # Display Summary Write-ToConsoleAndLog -Output $SummObj -Log $Log Write-ToConsoleAndLog -Output $DelimDouble -Log $Log # Verify parameter values Do { $ResponsesObj.pProceed = read-host $PromptsObj.pVerifySummary $ResponsesObj.pProceed = $ResponsesObj.pProceed.ToUpper() } Until ($ResponsesObj.pProceed -eq "Y" -OR $ResponsesObj.pProceed -eq "YES" -OR $ResponsesObj.pProceed -eq "N" -OR $ResponsesObj.pProceed -eq "NO") # Record prompt and response in log Write-ToLogOnly -Output $PromptsObj.pVerifySummary -Log $Log Write-ToLogOnly -Output $ResponsesObj.pProceed -Log $Log # Exit if user does not want to continue if ($ResponsesObj.pProceed -eq "N" -OR $ResponsesObj.pProceed -eq "NO") { Write-ToConsoleAndLog -Output "Deployment terminated by user..." -Log $Log PAUSE EXIT } #end if ne Y else { # Proceed with deployment Write-ToConsoleAndLog -Output "Deploying environment..." -Log $Log # Storage Write-WithTime -Output "Creating storage account $StorageAcctName ..." -Log $Log # The following error will be displayed, due to the ARM PowerShell module missing the Test-Azure command. See: Symptom: https://github.com/Azure/azure-powershell/issues/639 # Test-AzureName : No default subscription has been designated. Use Select-AzureSubscription -Default <subscriptionName> to set the default subscription... If (!(Get-AzureRmStorageAccount -ResourceGroupName $rg -Name $StorageAcctName -ErrorAction SilentlyContinue)) { Write-WithTime -Output "Storage account $StorageAcctName does not already exist. Creating..." -Log $Log New-AzureRmStorageAccount -ResourceGroupName $rg -Name $StorageAcctName -Location $Region -Type Standard_LRS -Verbose } #end If else { Write-WithTime -Output "Storage Account: $StorageAcctName already exist. Skipping..." -Log $Log } #end else $sa = Get-AzureRmStorageAccount -ResourceGroupName $rg -Name $StorageAcctName # Create DC VM(s). Note that we pad the VM name here again, as we did for the VIPs and NICs above to ensure a consistent name length for VM resources Write-WithTime -Output "Padding name of VM for a consistent length if necessary..." -Log $Log For ($i = 1;$i -le $InstanceCount;$i++) { Switch ($i) { { $i -le 9 } { $ObjDomain.pDC = $SiteCode + "DC0" + $i } default { # The VM name is constructed from the site code, "DC" role prefix and the numeric index $i $ObjDomain.pDC = $SiteCode + "DC" + $i } #end default } #end switch Write-WithTime -Output "Building $($ObjDomain.pDC)..." -Log $Log Add-VM } #end For ($i...) } #end else #endregion MAIN #region FOOTER # Calculate elapsed time Write-WithTime -Output "Calculating script execution time..." -Log $Log Write-WithTime -Output "Getting current date/time..." -Log $Log $StopTimer = Get-Date Write-WithTime -Output "Formating date/time to replace commas(,) with dashes(-)..." -Log $Log $EndTime = (((Get-Date -format u).Substring(0,16)).Replace(" ", "-")).Replace(":","") Write-WithTime -Output "Calculating elapsed time..." -Log $Log $ExecutionTime = New-TimeSpan -Start $BeginTimer -End $StopTimer $Footer = "SCRIPT COMPLETED AT: " Write-ToConsoleAndLog -Output $DelimDouble -Log $Log Write-ToConsoleAndLog -Output "$Footer + $EndTime" -Log $Log Write-ToConsoleAndLog -Output "TOTAL SCRIPT EXECUTION TIME: $ExecutionTime" -Log $Log Write-ToConsoleAndLog -Output $DelimDouble -Log $Log # Prompt to open logs Do { $ResponsesObj.pOpenLogsNow = read-host $PromptsObj.pAskToOpenLogs $ResponsesObj.pOpenLogsNow = $ResponsesObj.pOpenLogsNow.ToUpper() } Until ($ResponsesObj.pOpenLogsNow -eq "Y" -OR $ResponsesObj.pOpenLogsNow -eq "YES" -OR $ResponsesObj.pOpenLogsNow -eq "N" -OR $ResponsesObj.pOpenLogsNow -eq "NO") # Exit if user does not want to continue if ($ResponsesObj.pOpenLogsNow -eq "Y" -OR $ResponsesObj.pOpenLogsNow -eq "YES") { Start-Process notepad.exe $Log Start-Process notepad.exe $Transcript } #end if # End of script Write-WithTime -Output "END OF SCRIPT!" -Log $Log # Close transcript file Stop-Transcript -Verbose <# # Decommission deployed environment by removing resource group NOTE: [TEST-DEV / POC SCENARIOS ONLY!!!] To quickly and conveniently remove all the resources that this script generated in order to re-run the script you can uncomment and execute the expression below: #> # Get-AzureRmResourceGroup | Where-Object { $_.ResourceGroupName -match $rg } | Remove-AzureRmResourceGroup -Force #endregion FOOTER Pause |