Src/Private/Get-AbrADDHCPInfrastructure.ps1
|
function Get-AbrADDHCPInfrastructure { <# .SYNOPSIS Used by As Built Report to retrieve Microsoft AD DHCP Servers from Domain Controller .DESCRIPTION .NOTES Version: 0.7.3 Author: Jonathan Colon Twitter: @jcolonfzenpr Github: rebelinux .EXAMPLE .LINK #> [CmdletBinding()] param ( [Parameter ( Position = 0, Mandatory)] [string] $Domain ) begin { Write-PscriboMessage "Discovering Active Directory DHCP Servers information on $($Domain.ToString().ToUpper())." } process { try { $DHCPinDC = Get-DhcpServerInDC | Where-Object {$_.DnsName.split(".", 2)[1] -eq $Domain -and $_.DnsName -notin $Options.Exclude.DCs} if ($DHCPinDC) { Write-PScriboMessage "Discovered '$(($DHCPinDC | Measure-Object).Count)' DHCP Servers in forest $($Domain)." Section -Style Heading4 'DHCP Servers In Active Directory' { Paragraph "The following section provides a summary of the DHCP servers information on $($Domain.ToString().ToUpper())." BlankLine $OutObj = @() foreach ($DHCPServer in $DHCPinDC) { if (Test-Connection -ComputerName $DHCPServer.DnsName -Quiet -Count 1) { try { Write-PScriboMessage "Collecting DHCP Server Setting information from $($DHCPServer.DnsName.split(".", 2)[0])" $Setting = Get-DhcpServerSetting -CimSession $TempCIMSession -ComputerName ($DHCPServer).DnsName $inObj = [ordered] @{ 'DC Name' = $DHCPServer.DnsName.Split(".", 2)[0] 'IP Address' = $DHCPServer.IPAddress 'Domain Name' = $DHCPServer.DnsName.Split(".", 2)[1] 'Domain Joined' = ConvertTo-TextYN $Setting.IsDomainJoined 'Authorized' = ConvertTo-TextYN $Setting.IsAuthorized 'Conflict Detection Attempts' = $Setting.ConflictDetectionAttempts } $OutObj += [pscustomobject]$inobj } catch { Write-PscriboMessage -IsWarning "$($_.Exception.Message) (DHCP Servers In Active Directory Item)" } } } if ($HealthCheck.DHCP.BP) { $OutObj | Where-Object { $_.'Conflict Detection Attempts' -eq 0} | Set-Style -Style Warning -Property 'Conflict Detection Attempts' $OutObj | Where-Object { $_.'Authorized' -eq 'No'} | Set-Style -Style Warning -Property 'Authorized' } $TableParams = @{ Name = "DHCP Servers In Active Directory - $($Domain.ToString().ToUpper())" List = $false ColumnWidths = 20, 15, 20, 15, 15 ,15 } if ($Report.ShowTableCaptions) { $TableParams['Caption'] = "- $($TableParams.Name)" } $OutObj | Sort-Object -Property 'DC Name' | Table @TableParams try { Section -Style Heading5 'Service Database' { $OutObj = @() foreach ($DHCPServer in $DHCPinDC) { if (Test-Connection -ComputerName $DHCPServer.DnsName -Quiet -Count 1) { try { Write-PScriboMessage "Collecting DHCP Server database information from $($DHCPServer.DnsName.split(".", 2)[0])" $Setting = Get-DhcpServerDatabase -CimSession $TempCIMSession -ComputerName ($DHCPServer).DnsName $inObj = [ordered] @{ 'DC Name' = $DHCPServer.DnsName.Split(".", 2)[0] 'File Path' = ConvertTo-EmptyToFiller $Setting.FileName 'Backup Path' = ConvertTo-EmptyToFiller $Setting.BackupPath 'Backup Interval' = switch ($Setting.BackupInterval) { "" {"-"; break} $NULL {"-"; break} default {"$($Setting.BackupInterval) min"} } 'Logging Enabled' = Switch ($Setting.LoggingEnabled) { "" {"-"; break} $Null {"-"; break} default {ConvertTo-TextYN $Setting.LoggingEnabled} } } $OutObj += [pscustomobject]$inobj } catch { Write-PscriboMessage -IsWarning "$($_.Exception.Message) (Service Database Item)" } } } $TableParams = @{ Name = "DHCP Servers Database - $($Domain.ToString().ToUpper())" List = $false ColumnWidths = 20, 28, 28, 12, 12 } if ($Report.ShowTableCaptions) { $TableParams['Caption'] = "- $($TableParams.Name)" } $OutObj | Sort-Object -Property 'DC Name' | Table @TableParams } } catch { Write-PscriboMessage -IsWarning "$($_.Exception.Message) (Service Database Table)" } try { Section -Style Heading5 'Dynamic DNS credentials' { $OutObj = @() foreach ($DHCPServer in $DHCPinDC) { if (Test-Connection -ComputerName $DHCPServer.DnsName -Quiet -Count 1) { try{ Write-PScriboMessage "Collecting DHCP Server Dynamic DNS Credentials information from $($DHCPServer.DnsName.split(".", 2)[0])" $Setting = Get-DhcpServerDnsCredential -CimSession $TempCIMSession -ComputerName ($DHCPServer).DnsName $inObj = [ordered] @{ 'DC Name' = $DHCPServer.DnsName.Split(".", 2)[0] 'User Name' = ConvertTo-EmptyToFiller $Setting.UserName 'Domain Name' = ConvertTo-EmptyToFiller $Setting.DomainName } $OutObj += [pscustomobject]$inobj } catch { Write-PscriboMessage -IsWarning "$($_.Exception.Message) (Dynamic DNS credentials Item)" } } } if ($HealthCheck.DHCP.BP) { $OutObj | Where-Object { $_.'User Name' -eq "-"} | Set-Style -Style Warning -Property 'User Name','Domain Name' } $TableParams = @{ Name = "DHCP Servers Dynamic DNS Credentials - $($Domain.ToString().ToUpper())" List = $false ColumnWidths = 30, 30, 40 } if ($Report.ShowTableCaptions) { $TableParams['Caption'] = "- $($TableParams.Name)" } $OutObj | Sort-Object -Property 'DC Name' | Table @TableParams if ($HealthCheck.DHCP.BP -and ($OutObj | Where-Object { $_.'User Name' -eq "-"})) { Paragraph "Health Check:" -Italic -Bold -Underline Paragraph "Best Practice: Credentials for DNS update should be configured if secure dynamic DNS update is enabled and the domain controller is on the same host as the DHCP server." -Italic -Bold } } } catch { Write-PscriboMessage -IsWarning "$($_.Exception.Message) (Dynamic DNS credentials Table)" } } } } catch { Write-PscriboMessage -IsWarning "$($_.Exception.Message) (DHCP Servers In Active Directory Section)" } } end {} } |