Wednesday, March 25, 2015

Find Specific MS HF using Powershell


From time to time, especially in my country, we need to recursively search for a specific Hot Fix installed on the system.

In the script below we show how to search for the following KB, KB2863058
This can be change to fit your needs.

$list = Get-Content C:\tmp\list.txt
$Exception = ""
$Updates = ""
$OperatingSystem = ""
$Update_KB2863058 = ""

$BigResult = foreach ($l in $list) {

    Clear-Variable OperatingSystem
    Clear-Variable Updates
    Clear-Variable Exception
    Clear-Variable Update_KB2863058

    $result = "" |select -Property Name, OS, Update_KB2863058

    $OperatingSystem = Get-WmiObject -ComputerName $l -Class Win32_OperatingSystem
                        
    if ($OperatingSystem -ne $null) {

        $Updates = Get-WmiObject -ComputerName $l -Class Win32_QuickFixEngineering
        if ($Updates.count -gt "1") {
            $Update_KB2863058 = $Updates | ? {$_.HotFixID -eq "KB2863058"}
            
            if ($Update_KB2863058 -eq $null) {
                $result.Update_KB2863058 = "Not Installed"}
            else {$result.Update_KB2863058 = "Installed"}
        }
        else {
            $Update_KB2863058 = "Please Check Manually";
            $result.Update_KB2863058 = $Update_KB2863058;
        }

        $result.Name = $l
        $result.OS = $OperatingSystem.Caption

        $result

    } # END OperationSystem IF
                        
    else {
        $result.Name = $l; $result.Update_KB2863058 = "Can't Connect"; $result;
    }

} # END Foreach

$BigResult | Export-Csv -Path C:\tmp\GetInstalledHotFix.csv



Enjoy.

Thursday, March 12, 2015

Remotely Query IE Version Using Powershell (.Net / WMI)


In this post i will show you how to get the IE version from remote computers using Powershell.

The way i will do it is with Remote Registry Query, which this can help you for future use and not just for the IE version,
There are two ways to do this, I'm sure you will find them both on the Internet but i though it could be nice to get the both methods on one post.

Option 1: Remote Registry Query Using .Net

#################################################
#################################################
###### Get IE Version From Remote Computer ######
######                .NET                 ######
#################################################
#################################################


### Important ###
#
# In order to use the .NET framework to open the Registry on 
# remote computer the Remote Registry service must be turn on!
#
### Important ###


# Read remote machines from a list
$list = Get-Content C:\Temp\List.txt


# Define the key to retreive
$hklm = "LocalMachine"
$keyname = 'SOFTWARE\\Microsoft\\Internet Explorer'


# Foreach loop for the list of machines,
# and capture the result to a new object for export later to CSV
$CSVOutput = foreach ($machine in $list) {


$output = "" | Select-Object -Property Machine, Value

$reg = [Microsoft.Win32.RegistryKey]::OpenRemoteBaseKey($hklm, $machine)
$key = $reg.OpenSubkey($keyname)


# Value to search for under the defined Hive & Key
$value = $key.GetValue('svcVersion')


# On IE11 the value behind the svcVersion key, on lower version the value behind Version,
# So, the below just check if the above $Version is not empty, and if it doesn it means 
# we have a lower version. and pull the old Version key.
if ($value -eq $null) {$value = $key.GetValue('Version') } # END IF Get Value


# Push the result to the $Output variable we have created
$output.Machine = $machine
$output.Value = $value


$output


} # END foreach CSVOutput loop


# Change the output path to ever you want
$CSVOutput | Export-Csv C:\Temp\IEVer.csv 

Option 2: Remote Registry Query Using WMI


#################################################
#################################################
###### Get IE Version From Remote Computer ######
######                 WMI                 ######
#################################################
#################################################


### WMI Regitry Hive
# HKEY_CLASSES_ROOT (2147483648 (0x80000000))
# HKEY_CURRENT_USER (2147483649 (0x80000001))
# HKEY_LOCAL_MACHINE (2147483650 (0x80000002))
# HKEY_USERS (2147483651 (0x80000003))
# HKEY_CURRENT_CONFIG (2147483653 (0x80000005))


# Read remote machines from a list
$list = Get-Content C:\Temp\List.txt


# Define the key to retreive
$hklm = 2147483650
$key = "SOFTWARE\Microsoft\Internet Explorer"


# Foreach loop for the list of machines,
# and capture the result to a new object for export later to CSV
$CSVOutput = foreach ($machine in $list) {


$output = "" | Select-Object -Property Machine, IEVersion
$wmi = ""
$Version = ""


# Value to search for under the defined Hive & Key
$value = "svcVersion"


# initial the WMI instance & Query the key for a specific value
$wmi = Get-WmiObject -List -Namespace "root\default" -ComputerName $machine | Where-Object {$_.Name -eq "StdRegProv"}
$Version = ($wmi.GetStringValue($hklm,$key,$value)).svalue


# On IE11 the value behind the svcVersion key, on lower version the value behind Version,
# So, the below just check if the above $Version is not empty, and if it doesn 
# it means we have a lower version and pull the old Version key.
if ($Version -eq $null) {$value = "Version"; $Version = ($wmi.GetStringValue($hklm,$key,$value)).svalue}


# Push the result to the $Output variable we have created
$output.Machine = $machine
$output.IEVersion = $Version


$output


} # END foreach CSVOutput loop


# Change the output path to ever you want
$CSVOutput | Export-Csv C:\Temp\IEVer.csv 


Enjoy!