Useful PowerShell Commands for System Admins

10 Useful PowerShell Commands for System Admins Must Know in 2024

Lifestyle Hacks

”

PowerShell has become an indispensable tool for system administrators managing Windows environments. This powerful scripting language streamlines daily tasks through automation while providing deep access to system components and services.

For IT professionals who want to enhance their administrative capabilities PowerShell offers a robust set of commands called cmdlets. These cmdlets help manage everything from basic system operations to complex network configurations. Whether it’s retrieving system information gathering performance metrics or managing Active Directory users PowerShell’s versatility makes it the go-to choice for efficient system administration.

Useful PowerShell Commands for System Admins

PowerShell’s object-oriented framework offers advanced system administration capabilities through cmdlets and scripting. The command-line shell integrates seamlessly with the .NET framework to enable direct manipulation of system components.

PowerShell vs Command Prompt

PowerShell exceeds Command Prompt’s capabilities through these key differences:

  • Accepts objects as input compared to Command Prompt’s text-only processing
  • Enables direct access to Windows Management Instrumentation (WMI)
  • Processes command output as structured data rather than plain text strings
  • Supports advanced scripting with variables arrays functions
  • Provides backward compatibility for Command Prompt commands
  • Integrates with .NET framework components directly

Essential PowerShell Terminology

Core PowerShell terms system administrators use daily:

Term Description
Cmdlet Built-in commands following verb-noun format (e.g., Get-Service, Stop-Process)
Pipeline Symbol (|) connecting multiple commands to process output sequentially
Alias Shortened command names (e.g., cls for Clear-Host)
Parameter Additional information passed to cmdlets using hyphens (-ComputerName)
Provider Data store access points (e.g., Registry FileSystem Certificate)
Module Package containing cmdlets scripts functions for specific tasks
  • Variables: Designated with $ prefix ($computerName)
  • Arrays: Collections of items stored in single variable (@servers)
  • Hash tables: Key-value pair structures for data organization
  • Comparison operators: -eq -ne -gt -lt for value evaluation
  • Boolean operators: -and -or -not for logical operations

System Information Commands

PowerShell provides commands to retrieve detailed system information through built-in cmdlets. These commands enable administrators to access hardware specifications operating system details network configurations.

Hardware and Operating System Details

Get-ComputerInfo
 Get-WmiObject
 Get-CimInstance

The Get-ComputerInfo cmdlet displays comprehensive system details including:

  • OS Name version build number
  • BIOS manufacturer version
  • Total physical memory
  • Processor architecture specifications
  • System locale timezone settings

For detailed hardware information:

Get-CimInstance Win32_Processor
 Get-CimInstance Win32_PhysicalMemory
 Get-CimInstance Win32_DiskDrive
 
Get-NetAdapter
 Get-NetIPConfiguration
 Test-NetConnection

Essential network configuration commands include:

  • Get-NetAdapter: Lists all network adapters with status speed settings
  • Get-NetIPAddress: Displays IP addresses subnet masks default gateways
  • Get-DnsClientServerAddress: Shows configured DNS servers
  • Test-NetConnection: Validates network connectivity with diagnostic data
Get-NetTCPConnection
 Get-NetStatistics
 Get-NetRoute
Command Information Retrieved
Get-ComputerInfo OS Hardware System Details
Get-NetAdapter Network Adapter Status
Get-NetIPConfiguration IP DNS Gateway Settings
Get-CimInstance Hardware Component Details
Test-NetConnection Network Connectivity Status

File System Management Commands

PowerShell provides robust commands for managing files directories permissions through built-in cmdlets that streamline file system operations. These commands enable system administrators to automate file management tasks efficiently.

Directory and File Operations

PowerShell’s file system commands facilitate essential directory and file manipulation tasks:

  • Get-ChildItem (dir or ls) displays files folders in specified locations
  • New-Item -ItemType Directory (mkdir) creates new directories
  • Copy-Item (cp) copies files folders to designated locations
  • Move-Item (mv) relocates files folders to specified paths
  • Remove-Item (rm or del) deletes files folders
  • Test-Path verifies existence of files folders paths
  • Get-Content (cat) reads displays file contents
  • Set-Content writes data to files overwriting existing content
  • Add-Content appends data to existing files
# Example usage
 Get-ChildItem C:\Scripts -Recurse -Filter *.ps1
 New-Item -ItemType Directory -Path ""C:\NewFolder""
 Copy-Item ""C:\source\file.txt"" -Destination ""D:\backup""

Permissions and Security Settings

File system security management commands control access permissions ownership:

  • Get-Acl retrieves security descriptors for files folders
  • Set-Acl applies security descriptors to specified items
  • Get-AuthenticodeSignature verifies digital signatures of files
  • Set-AuthenticodeSignature adds digital signatures to scripts files
  • icacls manages discretionary access control lists
  • takeown changes file ownership
# Permission management examples
 Get-Acl ""C:\ImportantFile.txt"" 
 
 |
 
  Format-List
 
 $acl = Get-Acl ""C:\Template""
 Set-Acl ""C:\NewFolder"" $acl

Each command supports additional parameters for granular control over file system operations security configurations.

Process and Service Management

PowerShell provides robust commands for monitoring system resources and managing Windows services. These commands enable system administrators to track performance metrics and control service operations efficiently.

Monitoring System Resources

PowerShell cmdlets offer comprehensive tools for monitoring system processes and resource utilization:

  • Get-Process: Lists all running processes with memory usage statistics
  • Stop-Process -Name ""processname"": Terminates specific processes by name
  • Get-Counter '\Processor(_Total)\% Processor Time': Displays CPU usage statistics
  • Get-WmiObject Win32_PerfFormattedData_PerfOS_Memory: Shows detailed memory usage data
  • Get-CimInstance Win32_LogicalDisk: Retrieves disk space information
Resource Monitor Commands Function
Get-Process Process list and memory stats
Get-Counter Real-time performance metrics
Get-WmiObject System component data
Get-CimInstance Hardware resource info

Managing Windows Services

PowerShell streamlines Windows service administration through these essential commands:

  • Get-Service: Displays status of all Windows services
  • Start-Service -Name ""servicename"": Initiates a specific service
  • Stop-Service -Name ""servicename"": Halts a running service
  • Set-Service -Name ""servicename"" -StartupType Automatic: Configures service startup settings
  • Restart-Service -Name ""servicename"": Restarts specified services
  • `Get-Service

|

Service Management Tasks Command
View Service Status Get-Service
Start Services Start-Service
Stop Services Stop-Service
Configure Startup Set-Service
Restart Services Restart-Service

Active Directory Administration

PowerShell provides essential cmdlets for managing Active Directory domains efficiently. These commands enable administrators to perform user management tasks automate group policy operations in enterprise environments.

User Account Management

Active Directory user management through PowerShell streamlines account administration tasks:

  • Get-ADUser: Lists user accounts with specific attributes like name email department
  • New-ADUser: Creates new user accounts with predefined parameters properties
  • Set-ADUser: Modifies existing user account properties passwords group memberships
  • Remove-ADUser: Deletes user accounts from Active Directory
  • Search-ADAccount: Identifies inactive locked expired user accounts
  • Unlock-ADAccount: Unlocks locked user accounts after failed login attempts
  • Reset-ADAccountPassword: Resets user account passwords with custom complexity rules
# Example: Create new user account
 New-ADUser -Name ""John Smith"" -SamAccountName ""jsmith"" -UserPrincipalName ""[email protected]"" -Enabled $true
  • Get-GPO: Retrieves Group Policy Objects from Active Directory
  • New-GPO: Creates new Group Policy Objects with specified settings
  • Set-GPLink: Links Group Policy Objects to organizational units domains
  • Get-GPOReport: Generates detailed reports of GPO settings configurations
  • Backup-GPO: Creates backups of existing Group Policy Objects
  • Copy-GPO: Duplicates Group Policy Objects across domains
  • Remove-GPO: Deletes Group Policy Objects from Active Directory
# Example: Generate HTML report for specific GPO
 Get-GPOReport -Name ""Security Policy"" -ReportType HTML -Path ""C:\GPOReport.html""

Remote System Management

PowerShell enables system administrators to manage remote computers through secure remote sessions. These remote management capabilities streamline administrative tasks across multiple systems in an organization’s network infrastructure.

Remote PowerShell Sessions

Remote PowerShell sessions establish secure connections to distant computers using Windows Remote Management (WinRM). Here are the essential commands for managing remote sessions:

  • Enter-PSSession -ComputerName [hostname] creates an interactive session with a remote computer
  • New-PSSession -ComputerName [hostname] establishes persistent sessions for multiple remote operations
  • Invoke-Command -ComputerName [hostname] -ScriptBlock {commands} executes specific commands on remote systems
  • Get-PSSession displays active remote sessions
  • Remove-PSSession terminates active remote sessions
  • Test-WSMan -ComputerName [hostname] verifies WinRM connectivity
  • Restart-Computer -ComputerName [hostname] initiates system reboots
  • Get-EventLog -LogName System -ComputerName [hostname] retrieves system event logs
  • Get-Service -ComputerName [hostname] monitors service status
  • Get-WmiObject -Class Win32_LogicalDisk -ComputerName [hostname] checks disk space
  • Copy-Item -Path [source] -Destination [destination] -ToSession [SessionName] transfers files to remote systems
  • Get-HotFix -ComputerName [hostname] lists installed updates
  • Clear-EventLog -LogName Application -ComputerName [hostname] clears specified event logs
Remote Management Feature Command Example Purpose
Interactive Sessions Enter-PSSession Direct remote access
Batch Commands Invoke-Command Execute multiple commands
File Transfer Copy-Item Remote file operations
System Monitoring Get-EventLog Log analysis
Service Control Get-Service Service management

PowerShell Scripting Best Practices

PowerShell scripting follows established guidelines to ensure code reliability maintainability. These practices enhance script performance streamline debugging processes.

Creating Reusable Functions

Functions in PowerShell scripts promote code reusability by encapsulating specific tasks into modular components. Here’s a structured approach to function creation:

  • Begin each function with a descriptive verb-noun naming convention (e.g., Get-SystemInfo, Set-NetworkConfiguration)
  • Include parameter validation attributes to enforce data type requirements
  • Implement the [CmdletBinding()] attribute for advanced function features
  • Document functions using comment-based help blocks
  • Return consistent object types for predictable pipeline operations
function Get-SystemStatus {
 [CmdletBinding()]
 param (
 [Parameter(Mandatory=$true)]
 [string]$ComputerName
 )
 
 process {
 $status = Get-Service -ComputerName $ComputerName
 return $status
 }
 }

Error Handling Techniques

Error handling in PowerShell scripts prevents unexpected termination maintains script reliability. Essential error handling methods include:

  • Use try-catch blocks for specific error scenarios
  • Implement error action preferences to control script behavior
  • Utilize the $ErrorActionPreference variable for global error handling
  • Log errors with Write-Error for troubleshooting
try {
 Get-Service -Name 'NonExistentService' -ErrorAction Stop
 }
 catch {
 Write-Error ""Service not found: $_""
 $errorDetails = @{
 TimeStamp = Get-Date
 Error = $_.Exception.Message
 }
 Export-Csv -Path 'error_log.csv' -InputObject $errorDetails
 }
Parameter Description Use Case
-ErrorAction Controls error behavior Silently continue or stop execution
-ErrorVariable Stores error information Capture errors for analysis
-WarningAction Manages warning messages Control warning visibility
-ErrorView Formats error display Customize error output format

PowerShell stands as an indispensable tool in modern system administration enabling IT professionals to streamline their daily operations through powerful automation capabilities. Its extensive command set coupled with scripting functionality provides administrators with unprecedented control over Windows environments.

From basic file operations to complex Active Directory management PowerShell’s versatile cmdlets offer efficient solutions for virtually every administrative task. The platform’s ability to handle remote operations security management and performance monitoring makes it essential for managing both single systems and enterprise-wide networks.

By mastering these PowerShell commands system administrators can significantly enhance their productivity while maintaining robust control over their IT infrastructure. The investment in learning and implementing these commands pays dividends through improved efficiency reduced manual errors and more effective system management.

Must Read